program: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000043, &(0x7f0000000000), 0x0, 0x50c, &(0x7f0000002680)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='10', 0x2) close(r0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x44080) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r3, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1d4c}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0xf111973a6f6ab58}], 0x1, 0x0, 0x0, 0x4102}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0345ed0fc", 0x2}], 0x1}}], 0x3, 0x60cd894) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x22004002}, 0x0) unshare(0x22020400) [ 94.296805][ T5286] Bluetooth: hci0: command tx timeout [ 94.363372][ T5072] FAULT_INJECTION: forcing a failure. [ 94.363372][ T5072] name failslab, interval 1, probability 1, space 0, times 1 [ 94.372297][ T4995] FAULT_INJECTION: forcing a failure. [ 94.372297][ T4995] name failslab, interval 1, probability 1, space 0, times 1 [ 94.377911][ C0] FAULT_INJECTION: forcing a failure. [ 94.377911][ C0] name failslab, interval 1, probability 1, space 0, times 1 [ 94.378013][ C0] CPU: 0 UID: 0 PID: 4995 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 94.378027][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.378033][ C0] Call Trace: [ 94.378038][ C0] [ 94.378043][ C0] dump_stack_lvl+0xe8/0x150 [ 94.378124][ C0] should_fail_ex+0x40c/0x560 [ 94.378173][ C0] should_failslab+0xa8/0x100 [ 94.378188][ C0] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 94.378200][ C0] ? local_lock_release+0x9c/0x160 [ 94.378245][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 94.378258][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 94.378274][ C0] __alloc_skb+0x1d7/0x7a0 [ 94.378289][ C0] skb_copy+0x19d/0x870 [ 94.378301][ C0] ? kvm_clock_get_cycles+0x47/0x60 [ 94.378319][ C0] mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 94.378344][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 94.378364][ C0] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 94.378383][ C0] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 94.378398][ C0] mac80211_hwsim_beacon_tx+0x396/0x820 [ 94.378409][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 94.378426][ C0] __iterate_interfaces+0x2af/0x5a0 [ 94.378442][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 94.378452][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 94.378488][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 94.378500][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 94.378515][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 94.378529][ C0] mac80211_hwsim_beacon+0xaf/0x240 [ 94.378543][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 94.378556][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 94.378577][ C0] hrtimer_run_softirq+0x17a/0x240 [ 94.378591][ C0] handle_softirqs+0x225/0x840 [ 94.378607][ C0] ? __irq_exit_rcu+0xca/0x220 [ 94.378624][ C0] __irq_exit_rcu+0xca/0x220 [ 94.378637][ C0] irq_exit_rcu+0x9/0x30 [ 94.378648][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 94.378657][ C0] [ 94.378660][ C0] [ 94.378663][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 94.378671][ C0] RIP: 0010:console_flush_all+0x7d2/0xaf0 [ 94.378682][ C0] Code: ff ff e8 81 3f 21 00 90 0f 0b 90 e9 9c fc ff ff e8 73 3f 21 00 e8 3e 20 2d 0a 48 85 db 74 c0 e8 64 3f 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 16 70 [ 94.378690][ C0] RSP: 0018:ffffc9000c3271e0 EFLAGS: 00000293 [ 94.378700][ C0] RAX: ffffffff81a5d4ec RBX: ffffc9000c327340 RCX: ffff88803bbb0000 [ 94.378712][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.378718][ C0] RBP: ffffc9000c3272f0 R08: ffffffff9057b737 R09: 1ffffffff20af6e6 [ 94.378724][ C0] R10: dffffc0000000000 R11: fffffbfff20af6e7 R12: dffffc0000000000 [ 94.378731][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f471c60 [ 94.378742][ C0] ? console_flush_all+0x7cc/0xaf0 [ 94.378760][ C0] ? console_flush_all+0x123/0xaf0 [ 94.378773][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 94.378787][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 94.378801][ C0] console_unlock+0xd1/0x1c0 [ 94.378814][ C0] ? __pfx_console_unlock+0x10/0x10 [ 94.378825][ C0] ? _printk+0xdd/0x130 [ 94.378841][ C0] vprintk_emit+0x485/0x560 [ 94.378853][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 94.378868][ C0] _printk+0xdd/0x130 [ 94.378881][ C0] ? __pfx__printk+0x10/0x10 [ 94.378893][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 94.378907][ C0] ? fs_reclaim_acquire+0x7c/0x100 [ 94.378919][ C0] should_fail_ex+0x3ed/0x560 [ 94.378932][ C0] should_failslab+0xa8/0x100 [ 94.378946][ C0] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 94.378957][ C0] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 94.378967][ C0] ? anon_vma_clone+0x3e7/0x9e0 [ 94.378976][ C0] ? anon_vma_clone+0x3e7/0x9e0 [ 94.378990][ C0] anon_vma_clone+0x3e7/0x9e0 [ 94.379007][ C0] anon_vma_fork+0x177/0x540 [ 94.379019][ C0] ? dup_mmap+0x89a/0x1d90 [ 94.379030][ C0] dup_mmap+0x970/0x1d90 [ 94.379051][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 94.379061][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.379078][ C0] ? copy_mm+0x10f/0x480 [ 94.379091][ C0] ? copy_mm+0x10f/0x480 [ 94.379111][ C0] copy_mm+0x11a/0x480 [ 94.379122][ C0] ? copy_process+0xd3c/0x4390 [ 94.379133][ C0] copy_process+0x1e3e/0x4390 [ 94.379150][ C0] ? copy_process+0xd3c/0x4390 [ 94.379169][ C0] ? __pfx_copy_process+0x10/0x10 [ 94.379189][ C0] kernel_clone+0x2d7/0x940 [ 94.379204][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 94.379226][ C0] __x64_sys_clone+0x1b6/0x230 [ 94.379243][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 94.379272][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.379282][ C0] do_syscall_64+0x174/0x580 [ 94.379293][ C0] ? trace_irq_disable+0x3b/0x140 [ 94.379308][ C0] ? clear_bhb_loop+0x40/0x90 [ 94.379321][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.379330][ C0] RIP: 0033:0x7f6be7e16636 [ 94.379341][ C0] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 94.379348][ C0] RSP: 002b:00007ffec4e48930 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 94.379357][ C0] RAX: ffffffffffffffda RBX: 00007ffec4e48938 RCX: 00007f6be7e16636 [ 94.379365][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 94.379371][ C0] RBP: 00007ffec4e68e80 R08: 0000000000000000 R09: 0000000000000001 [ 94.379377][ C0] R10: 00007f6be7d42a50 R11: 0000000000000246 R12: 00007ffec4e48a70 [ 94.379383][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 00005619af5a2ac0 [ 94.379396][ C0] [ 94.638759][ T5072] CPU: 0 UID: 0 PID: 5072 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 94.638779][ T5072] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.638787][ T5072] Workqueue: mld mld_ifc_work [ 94.638808][ T5072] Call Trace: [ 94.638813][ T5072] [ 94.638818][ T5072] dump_stack_lvl+0xe8/0x150 [ 94.638835][ T5072] should_fail_ex+0x40c/0x560 [ 94.638850][ T5072] should_failslab+0xa8/0x100 [ 94.638865][ T5072] __kmalloc_cache_noprof+0xa8/0x660 [ 94.638878][ T5072] ? dst_cow_metrics_generic+0x56/0x1c0 [ 94.638891][ T5072] ? dst_cow_metrics_generic+0x56/0x1c0 [ 94.638908][ T5072] dst_cow_metrics_generic+0x56/0x1c0 [ 94.638924][ T5072] icmp6_dst_alloc+0x265/0x430 [ 94.638942][ T5072] mld_sendpack+0x697/0xe10 [ 94.638965][ T5072] ? mld_sendpack+0x206/0xe10 [ 94.638977][ T5072] ? __pfx_mld_sendpack+0x10/0x10 [ 94.639006][ T5072] mld_ifc_work+0x842/0xd60 [ 94.639025][ T5072] ? process_scheduled_works+0xa20/0x14e0 [ 94.639039][ T5072] process_scheduled_works+0xa8e/0x14e0 [ 94.639071][ T5072] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.639089][ T5072] ? assign_work+0x3cf/0x5d0 [ 94.639106][ T5072] worker_thread+0xa47/0xfb0 [ 94.639130][ T5072] ? __kthread_parkme+0x71/0x1f0 [ 94.639152][ T5072] kthread+0x388/0x470 [ 94.639168][ T5072] ? __pfx_worker_thread+0x10/0x10 [ 94.639180][ T5072] ? __pfx_kthread+0x10/0x10 [ 94.639195][ T5072] ret_from_fork+0x514/0xb70 [ 94.639213][ T5072] ? __pfx_ret_from_fork+0x10/0x10 [ 94.639229][ T5072] ? __switch_to+0xc89/0x1420 [ 94.639246][ T5072] ? __pfx_kthread+0x10/0x10 [ 94.639264][ T5072] ret_from_fork_asm+0x1a/0x30 [ 94.639288][ T5072] [ 94.716936][ T5323] loop0: detected capacity change from 0 to 512 [ 94.722050][ T5323] ======================================================= [ 94.722050][ T5323] WARNING: The mand mount option has been deprecated and [ 94.722050][ T5323] and is ignored by this kernel. Remove the mand [ 94.722050][ T5323] option from the mount to silence this warning. [ 94.722050][ T5323] ======================================================= [ 94.772326][ T5323] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.823115][ T5323] EXT4-fs (loop0): orphan cleanup on readonly fs [ 94.835513][ T5323] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #14: comm syz.0.0: iget: bad extended attribute block 148 [ 94.845526][ T5323] loop0: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 94.846604][ C0] EXT4-fs (loop0): initial error at time 1785272826: ext4_orphan_get:1399: inode 14 [ 94.854796][ C0] EXT4-fs (loop0): last error at time 1785272826: ext4_orphan_get:1399: inode 14 [ 94.872563][ T5323] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.0: couldn't read orphan inode 14 (err -117) [ 94.878374][ T5323] loop0: lost filesystem error report for type 5 error -117 [ 94.881905][ T5323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 94.894312][ T4995] CPU: 0 UID: 0 PID: 4995 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 94.894330][ T4995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.894336][ T4995] Call Trace: [ 94.894342][ T4995] [ 94.894347][ T4995] dump_stack_lvl+0xe8/0x150 [ 94.894369][ T4995] should_fail_ex+0x40c/0x560 [ 94.894385][ T4995] should_failslab+0xa8/0x100 [ 94.894401][ T4995] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 94.894413][ T4995] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 94.894423][ T4995] ? anon_vma_clone+0x3e7/0x9e0 [ 94.894435][ T4995] ? anon_vma_clone+0x3e7/0x9e0 [ 94.894449][ T4995] anon_vma_clone+0x3e7/0x9e0 [ 94.894469][ T4995] anon_vma_fork+0x177/0x540 [ 94.894483][ T4995] ? dup_mmap+0x89a/0x1d90 [ 94.894496][ T4995] dup_mmap+0x970/0x1d90 [ 94.894521][ T4995] ? __pfx_dup_mmap+0x10/0x10 [ 94.894531][ T4995] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.894554][ T4995] ? copy_mm+0x10f/0x480 [ 94.894568][ T4995] ? copy_mm+0x10f/0x480 [ 94.894589][ T4995] copy_mm+0x11a/0x480 [ 94.894604][ T4995] ? copy_process+0xd3c/0x4390 [ 94.894615][ T4995] copy_process+0x1e3e/0x4390 [ 94.894634][ T4995] ? copy_process+0xd3c/0x4390 [ 94.894655][ T4995] ? __pfx_copy_process+0x10/0x10 [ 94.894675][ T4995] kernel_clone+0x2d7/0x940 [ 94.894692][ T4995] ? __pfx_kernel_clone+0x10/0x10 [ 94.894723][ T4995] __x64_sys_clone+0x1b6/0x230 [ 94.894739][ T4995] ? __pfx___x64_sys_clone+0x10/0x10 [ 94.894768][ T4995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.894781][ T4995] do_syscall_64+0x174/0x580 [ 94.894792][ T4995] ? trace_irq_disable+0x3b/0x140 [ 94.894806][ T4995] ? clear_bhb_loop+0x40/0x90 [ 94.894818][ T4995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.894827][ T4995] RIP: 0033:0x7f6be7e16636 [ 94.894839][ T4995] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 94.894847][ T4995] RSP: 002b:00007ffec4e48930 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 94.894859][ T4995] RAX: ffffffffffffffda RBX: 00007ffec4e48938 RCX: 00007f6be7e16636 [ 94.894865][ T4995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 94.894871][ T4995] RBP: 00007ffec4e68e80 R08: 0000000000000000 R09: 0000000000000001 [ 94.894878][ T4995] R10: 00007f6be7d42a50 R11: 0000000000000246 R12: 00007ffec4e48a70 [ 94.894884][ T4995] R13: 0000000000000000 R14: 0000000000000000 R15: 00005619af5a2ac0 [ 94.894900][ T4995] [ 95.001717][ T4995] FAULT_INJECTION: forcing a failure. [ 95.001717][ T4995] name failslab, interval 1, probability 1, space 0, times 7 [ 95.006731][ T4995] CPU: 0 UID: 0 PID: 4995 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 95.006747][ T4995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.006753][ T4995] Call Trace: [ 95.006759][ T4995] [ 95.006763][ T4995] dump_stack_lvl+0xe8/0x150 [ 95.006785][ T4995] should_fail_ex+0x40c/0x560 [ 95.006801][ T4995] should_failslab+0xa8/0x100 [ 95.006817][ T4995] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 95.006831][ T4995] ? preload_this_cpu_lock+0x49/0xc0 [ 95.006840][ T4995] ? preload_this_cpu_lock+0x49/0xc0 [ 95.006848][ T4995] ? alloc_vmap_area+0x21c/0x1420 [ 95.006856][ T4995] preload_this_cpu_lock+0x49/0xc0 [ 95.006864][ T4995] alloc_vmap_area+0x3c3/0x1420 [ 95.006876][ T4995] ? __pfx_alloc_vmap_area+0x10/0x10 [ 95.006882][ T4995] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 95.006890][ T4995] ? kasan_save_track+0x4f/0x80 [ 95.006898][ T4995] ? __get_vm_area_node+0x136/0x300 [ 95.006904][ T4995] ? __get_vm_area_node+0x136/0x300 [ 95.006912][ T4995] __get_vm_area_node+0x1f2/0x300 [ 95.006920][ T4995] __vmalloc_node_range_noprof+0x358/0x1730 [ 95.006928][ T4995] ? copy_process+0x820/0x4390 [ 95.006944][ T4995] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.006951][ T4995] ? rcu_is_watching+0x15/0xb0 [ 95.006957][ T4995] ? kmem_cache_alloc_node_noprof+0x161/0x610 [ 95.006964][ T4995] ? trace_kmem_cache_alloc+0x29/0xe0 [ 95.006970][ T4995] ? kmem_cache_alloc_node_noprof+0x161/0x610 [ 95.006978][ T4995] ? memcpy_and_pad+0x48/0x80 [ 95.006990][ T4995] __vmalloc_node_noprof+0xc2/0x100 [ 95.007000][ T4995] ? copy_process+0x820/0x4390 [ 95.007011][ T4995] ? copy_process+0x820/0x4390 [ 95.007024][ T4995] dup_task_struct+0x2a0/0x8e0 [ 95.007040][ T4995] copy_process+0x820/0x4390 [ 95.007059][ T4995] ? release_sock+0x2f/0x260 [ 95.007075][ T4995] ? sk_setsockopt+0x287d/0x2f10 [ 95.007085][ T4995] ? __pfx_copy_process+0x10/0x10 [ 95.007096][ T4995] kernel_clone+0x2d7/0x940 [ 95.007106][ T4995] ? __pfx_kernel_clone+0x10/0x10 [ 95.007121][ T4995] __x64_sys_clone+0x1b6/0x230 [ 95.007130][ T4995] ? __pfx___x64_sys_clone+0x10/0x10 [ 95.007147][ T4995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.007157][ T4995] do_syscall_64+0x174/0x580 [ 95.007168][ T4995] ? trace_irq_disable+0x3b/0x140 [ 95.007182][ T4995] ? clear_bhb_loop+0x40/0x90 [ 95.007195][ T4995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.007206][ T4995] RIP: 0033:0x7f6be7e16636 [ 95.007218][ T4995] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 95.007227][ T4995] RSP: 002b:00007ffec4e48930 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 95.007237][ T4995] RAX: ffffffffffffffda RBX: 00007ffec4e48938 RCX: 00007f6be7e16636 [ 95.007242][ T4995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 95.007247][ T4995] RBP: 00007ffec4e68e80 R08: 0000000000000000 R09: 0000000000000001 [ 95.007251][ T4995] R10: 00007f6be7d42a50 R11: 0000000000000246 R12: 00007ffec4e48a70 [ 95.007255][ T4995] R13: 0000000000000000 R14: 0000000000000000 R15: 00005619af5a2ac0 [ 95.007265][ T4995] [ 95.007351][ T4995] ------------[ cut here ]------------ [ 95.139492][ T4995] ret [ 95.139503][ T4995] WARNING: mm/vmalloc.c:1820 at va_alloc+0xeb/0xec0, CPU#0: dhcpcd/4995 [ 95.143782][ T4995] Modules linked in: [ 95.145596][ T4995] CPU: 0 UID: 0 PID: 4995 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 95.149112][ T4995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.152992][ T4995] RIP: 0010:va_alloc+0xeb/0xec0 [ 95.155072][ T4995] Code: 08 4c 89 ef e8 16 98 10 00 4d 8b 7d 00 48 89 df 4c 89 fe e8 97 69 a1 ff 4c 39 fb 76 27 e8 2d 67 a1 ff 49 c7 c6 ea ff ff ff 90 <0f> 0b 90 4c 89 f0 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc [ 95.162842][ T4995] RSP: 0018:ffffc9000c327550 EFLAGS: 00010293 [ 95.165437][ T4995] RAX: ffffffff8225baea RBX: ffffc9000e589000 RCX: ffff88803bbb0000 [ 95.168752][ T4995] RDX: 0000000000000000 RSI: ffffffff8c4bed60 RDI: ffffffff8c4bed20 [ 95.172087][ T4995] RBP: ffff888035f72a90 R08: 00000000ffffffff R09: 1ffffffff1d94962 [ 95.175377][ T4995] R10: dffffc0000000000 R11: fffffbfff1d94963 R12: 1ffff11006bee552 [ 95.178650][ T4995] R13: ffffc9000e580000 R14: fffffffffffffff4 R15: 0000000000000000 [ 95.181756][ T4995] FS: 00007f6be7d42780(0000) GS:ffff88808c543000(0000) knlGS:0000000000000000 [ 95.185423][ T4995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.188222][ T4995] CR2: 00005619af5bf028 CR3: 000000004341a000 CR4: 0000000000352ef0 [ 95.191477][ T4995] Call Trace: [ 95.192874][ T4995] [ 95.194396][ T4995] alloc_vmap_area+0x907/0x1420 [ 95.196619][ T4995] ? __pfx_alloc_vmap_area+0x10/0x10 [ 95.198603][ T4995] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 95.200789][ T4995] ? kasan_save_track+0x4f/0x80 [ 95.202675][ T4995] ? __get_vm_area_node+0x136/0x300 [ 95.204806][ T4995] ? __get_vm_area_node+0x136/0x300 [ 95.207118][ T4995] __get_vm_area_node+0x1f2/0x300 [ 95.209300][ T4995] __vmalloc_node_range_noprof+0x358/0x1730 [ 95.211756][ T4995] ? copy_process+0x820/0x4390 [ 95.213864][ T4995] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.216544][ T4995] ? rcu_is_watching+0x15/0xb0 [ 95.218427][ T4995] ? kmem_cache_alloc_node_noprof+0x161/0x610 [ 95.221093][ T4995] ? trace_kmem_cache_alloc+0x29/0xe0 [ 95.223782][ T4995] ? kmem_cache_alloc_node_noprof+0x161/0x610 [ 95.226748][ T4995] ? memcpy_and_pad+0x48/0x80 [ 95.228483][ T4995] __vmalloc_node_noprof+0xc2/0x100 [ 95.230582][ T4995] ? copy_process+0x820/0x4390 [ 95.232609][ T4995] ? copy_process+0x820/0x4390 [ 95.234610][ T4995] dup_task_struct+0x2a0/0x8e0 [ 95.236493][ T4995] copy_process+0x820/0x4390 [ 95.238416][ T4995] ? release_sock+0x2f/0x260 [ 95.240176][ T4995] ? sk_setsockopt+0x287d/0x2f10 [ 95.242031][ T4995] ? __pfx_copy_process+0x10/0x10 [ 95.243900][ T4995] kernel_clone+0x2d7/0x940 [ 95.245762][ T4995] ? __pfx_kernel_clone+0x10/0x10 [ 95.247689][ T4995] __x64_sys_clone+0x1b6/0x230 [ 95.249667][ T4995] ? __pfx___x64_sys_clone+0x10/0x10 [ 95.251974][ T4995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.254688][ T4995] do_syscall_64+0x174/0x580 [ 95.257248][ T4995] ? trace_irq_disable+0x3b/0x140 [ 95.260005][ T4995] ? clear_bhb_loop+0x40/0x90 [ 95.262150][ T4995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.264394][ T4995] RIP: 0033:0x7f6be7e16636 [ 95.266909][ T4995] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 95.274693][ T4995] RSP: 002b:00007ffec4e48930 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 95.277982][ T4995] RAX: ffffffffffffffda RBX: 00007ffec4e48938 RCX: 00007f6be7e16636 [ 95.281012][ T4995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 95.283906][ T4995] RBP: 00007ffec4e68e80 R08: 0000000000000000 R09: 0000000000000001 [ 95.287277][ T4995] R10: 00007f6be7d42a50 R11: 0000000000000246 R12: 00007ffec4e48a70 [ 95.290688][ T4995] R13: 0000000000000000 R14: 0000000000000000 R15: 00005619af5a2ac0 [ 95.293941][ T4995] [ 95.295569][ T4995] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.298532][ T4995] CPU: 0 UID: 0 PID: 4995 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 95.302131][ T4995] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.306187][ T4995] Call Trace: [ 95.307585][ T4995] [ 95.308865][ T4995] vpanic+0x56c/0xa60 [ 95.310540][ T4995] ? __pfx__printk+0x10/0x10 [ 95.312493][ T4995] ? __pfx_vpanic+0x10/0x10 [ 95.314372][ T4995] ? is_bpf_text_address+0x292/0x2b0 [ 95.316534][ T4995] ? is_bpf_text_address+0x26/0x2b0 [ 95.318582][ T4995] panic+0xc5/0xd0 [ 95.320073][ T4995] ? __pfx_panic+0x10/0x10 [ 95.321786][ T4995] __warn+0x315/0x4c0 [ 95.323353][ T4995] ? va_alloc+0xeb/0xec0 [ 95.324998][ T4995] ? va_alloc+0xeb/0xec0 [ 95.326630][ T4995] __report_bug+0x276/0x570 [ 95.328372][ T4995] ? __pfx__printk+0x10/0x10 [ 95.330162][ T4995] ? va_alloc+0xeb/0xec0 [ 95.331713][ T4995] ? __pfx___report_bug+0x10/0x10 [ 95.333738][ T4995] ? __lock_acquire+0x683/0x2cf0 [ 95.335679][ T4995] ? va_alloc+0xeb/0xec0 [ 95.337426][ T4995] report_bug+0x16a/0x220 [ 95.339172][ T4995] ? va_alloc+0xeb/0xec0 [ 95.340822][ T4995] ? va_alloc+0xed/0xec0 [ 95.342535][ T4995] handle_bug+0x9c/0x200 [ 95.344305][ T4995] exc_invalid_op+0x1a/0x50 [ 95.346125][ T4995] asm_exc_invalid_op+0x1a/0x20 [ 95.348144][ T4995] RIP: 0010:va_alloc+0xeb/0xec0 [ 95.350213][ T4995] Code: 08 4c 89 ef e8 16 98 10 00 4d 8b 7d 00 48 89 df 4c 89 fe e8 97 69 a1 ff 4c 39 fb 76 27 e8 2d 67 a1 ff 49 c7 c6 ea ff ff ff 90 <0f> 0b 90 4c 89 f0 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc [ 95.358069][ T4995] RSP: 0018:ffffc9000c327550 EFLAGS: 00010293 [ 95.360685][ T4995] RAX: ffffffff8225baea RBX: ffffc9000e589000 RCX: ffff88803bbb0000 [ 95.363831][ T4995] RDX: 0000000000000000 RSI: ffffffff8c4bed60 RDI: ffffffff8c4bed20 [ 95.366947][ T4995] RBP: ffff888035f72a90 R08: 00000000ffffffff R09: 1ffffffff1d94962 [ 95.369893][ T4995] R10: dffffc0000000000 R11: fffffbfff1d94963 R12: 1ffff11006bee552 [ 95.373169][ T4995] R13: ffffc9000e580000 R14: fffffffffffffff4 R15: 0000000000000000 [ 95.376521][ T4995] ? va_alloc+0xeaa/0xec0 [ 95.378372][ T4995] alloc_vmap_area+0x907/0x1420 [ 95.380477][ T4995] ? __pfx_alloc_vmap_area+0x10/0x10 [ 95.382562][ T4995] ? __kmalloc_cache_node_noprof+0x1f2/0x630 [ 95.385003][ T4995] ? kasan_save_track+0x4f/0x80 [ 95.386980][ T4995] ? __get_vm_area_node+0x136/0x300 [ 95.389117][ T4995] ? __get_vm_area_node+0x136/0x300 [ 95.391214][ T4995] __get_vm_area_node+0x1f2/0x300 [ 95.393188][ T4995] __vmalloc_node_range_noprof+0x358/0x1730 [ 95.395688][ T4995] ? copy_process+0x820/0x4390 [ 95.397660][ T4995] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.400323][ T4995] ? rcu_is_watching+0x15/0xb0 [ 95.402376][ T4995] ? kmem_cache_alloc_node_noprof+0x161/0x610 [ 95.404752][ T4995] ? trace_kmem_cache_alloc+0x29/0xe0 [ 95.406915][ T4995] ? kmem_cache_alloc_node_noprof+0x161/0x610 [ 95.409448][ T4995] ? memcpy_and_pad+0x48/0x80 [ 95.411345][ T4995] __vmalloc_node_noprof+0xc2/0x100 [ 95.413513][ T4995] ? copy_process+0x820/0x4390 [ 95.415542][ T4995] ? copy_process+0x820/0x4390 [ 95.417531][ T4995] dup_task_struct+0x2a0/0x8e0 [ 95.419455][ T4995] copy_process+0x820/0x4390 [ 95.421353][ T4995] ? release_sock+0x2f/0x260 [ 95.423260][ T4995] ? sk_setsockopt+0x287d/0x2f10 [ 95.425293][ T4995] ? __pfx_copy_process+0x10/0x10 [ 95.427360][ T4995] kernel_clone+0x2d7/0x940 [ 95.429544][ T4995] ? __pfx_kernel_clone+0x10/0x10 [ 95.431661][ T4995] __x64_sys_clone+0x1b6/0x230 [ 95.433605][ T4995] ? __pfx___x64_sys_clone+0x10/0x10 [ 95.435676][ T4995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.438034][ T4995] do_syscall_64+0x174/0x580 [ 95.439866][ T4995] ? trace_irq_disable+0x3b/0x140 [ 95.441934][ T4995] ? clear_bhb_loop+0x40/0x90 [ 95.443948][ T4995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.446348][ T4995] RIP: 0033:0x7f6be7e16636 [ 95.448396][ T4995] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 95.456183][ T4995] RSP: 002b:00007ffec4e48930 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 95.459226][ T4995] RAX: ffffffffffffffda RBX: 00007ffec4e48938 RCX: 00007f6be7e16636 [ 95.462525][ T4995] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 95.465846][ T4995] RBP: 00007ffec4e68e80 R08: 0000000000000000 R09: 0000000000000001 [ 95.469238][ T4995] R10: 00007f6be7d42a50 R11: 0000000000000246 R12: 00007ffec4e48a70 [ 95.472563][ T4995] R13: 0000000000000000 R14: 0000000000000000 R15: 00005619af5a2ac0 [ 95.475825][ T4995] [ 95.477493][ T4995] Kernel Offset: disabled [ 95.479338][ T4995] Rebooting in 86400 seconds..