last executing test programs: 12.414698344s ago: executing program 0 (id=576): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x1c, r1, 0xdaf0f69129353e73, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) 12.326083472s ago: executing program 0 (id=578): syz_open_dev$vim2m(&(0x7f0000000280), 0x40003, 0x2) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000600)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffe, 0x8000000000000001, 0x1, 0x2, 0xcc62, 0x9], 0x0, 0x0}, 0x78) msgget(0x1, 0x501) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r5, &(0x7f0000000040)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x28}}], 0x1, 0x4008040) socket$inet(0x2, 0xa, 0x200000) 11.245108051s ago: executing program 0 (id=582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4fe, 0x0) io_submit(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x14}, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x80000000000000a, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 10.045366712s ago: executing program 3 (id=585): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002140)=[{0x0}, {&(0x7f0000000880)=""/17, 0x11}, {&(0x7f0000001140)=""/4096, 0x1000}], 0x3, &(0x7f0000002640)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0xdcc}, {&(0x7f0000002180)=""/112, 0x70}, &(0x7f0000002500), 0x0, 0x8, 0x600}}, @cswp={0x58, 0x114, 0x7, {{0x80000001, 0x7}, &(0x7f0000002540)=0x4, &(0x7f0000002580)=0x72056128, 0x7, 0x4, 0x867, 0x2f3, 0x80}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000025c0)=""/36, 0x24}, &(0x7f0000002600), 0x10}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}, @zcopy_cookie={0x18, 0x114, 0xc, 0x9}, @zcopy_cookie={0x18, 0x114, 0xc, 0x4}], 0x118, 0x8000}, 0x4000801) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x18, &(0x7f0000001000)=ANY=[@ANYBLOB="180000e1063bd02e05000000000000a4181100007431487aaa8d797c57dbdcf19ae9062d764b08338be539849990cfcb7e4bf3e3a41a58b7169fa71f8b60f1925720f986", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000530000001813", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32=0x1, @ANYBLOB], 0x0, 0x8, 0xae, &(0x7f0000000340)=""/174, 0x41100, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2c551, 0xffffffffffffffff, 0x6, &(0x7f0000000480)=[0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x1, 0x4, 0x3, 0x6}, {0x1, 0x2, 0x0, 0xa}, {0x4, 0x1, 0x2, 0xe1e6277f6c4b6f9c}, {0x2, 0x1, 0x1, 0x4}, {0x4, 0x4, 0x4, 0xb}, {0x5, 0x2, 0x9, 0x9}]}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRESOCT=r0], 0x0, 0x2000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400fe}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4be88fa3027baaaaaaaaaabb86dd60122d9200083afffe8000000000000000000000000000aa00000000000000000044844a8bf843add400907800710007"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x3, 0x1, 0x0, 0x8}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) 9.867821519s ago: executing program 0 (id=587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x0) 9.678284711s ago: executing program 3 (id=591): inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"a2e3ad099b0d09f91b5f2f0987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f323063090810e0879b0f0a75e70a9b334d959b669a240d5b0af3988f7ef31952010afde8d178708c523c921b1b5b07070d075b0936cd3b78130daa61d8e81a3f00005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397273ce1766769f0c91c00305d3f46635eb016d5b1dda98e2d739be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b7638354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc3609aa24b7d520c829d095083bba2987a67399eac430d145d546a40b9f6ff14ac488ec130bb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b2860d1b3cff57d8b6d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a4f0492d48604675fde2b34cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827955e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb9754fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94e7475cb74642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd72ea4998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5ff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c58b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b50517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864af090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d885b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1a85ae7e69fd1a47a284f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cef8473b53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b344340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cccf8a97406bb5a68a1f0c4549820a73c8859dde0712ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcb7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c2e14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ec00000000000000b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a52830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec685f068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000e00f96f06817fb903729a7fb6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x942}}, 0x1006) 9.572426744s ago: executing program 0 (id=593): r0 = io_uring_setup(0x136a, &(0x7f0000000400)={0x0, 0x1f8a, 0x0, 0x3, 0x2b7}) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000000000)="b0", 0x1}], 0x1, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) 8.848588489s ago: executing program 0 (id=596): socket$netlink(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f0000000180)=""/93, 0x5d) 8.691953208s ago: executing program 3 (id=599): eventfd2(0x7ff, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f0000000280)={0x0}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) socket(0x10, 0x80002, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3}, 0x8, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x3f3800, @mcast2, 0x6}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037", 0x3, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000006c0)="3b000000010006", 0x7) 8.491237877s ago: executing program 4 (id=600): close(0xffffffffffffffff) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 7.401463047s ago: executing program 3 (id=602): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') getdents64(r0, &(0x7f0000002f40)=""/4097, 0x1001) 7.027190346s ago: executing program 2 (id=604): write$tcp_mem(0xffffffffffffffff, &(0x7f0000000040)={0xfffffffffffffff7, 0x20, 0x1, 0x20, 0x76}, 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 6.915883674s ago: executing program 3 (id=606): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000040)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x4, 0x41c}}}, 0x7) 6.824518943s ago: executing program 4 (id=607): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x1e) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) 5.677887025s ago: executing program 3 (id=608): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.492098168s ago: executing program 2 (id=609): socket(0x21, 0x80000, 0xc) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) socket$nl_sock_diag(0x10, 0x3, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) 4.711236129s ago: executing program 1 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) 4.674393527s ago: executing program 4 (id=612): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = syz_open_dev$loop(0x0, 0x0, 0x4002) syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0xe10c, 0x4005, 0x0, 0x40, 0x0, 0x0}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000000)) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) openat$mice(0xffffff9c, &(0x7f0000000040), 0x41) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e1b, 0x80000040, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2e, &(0x7f0000000080)=0x200004, 0x4) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}}) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r7, r6, 0x0, 0xffffffff) socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r10, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, 0x0, 0x0) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001300010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="073000000904000008001300", @ANYRES32=0x0, @ANYBLOB="6763efe48edd4b47d6442b14d6a1e52bb6ceb40697e06680d7c23ab85e965fd3b9b6d788b0cd4d074b020db1091184e17f311f68d963c757d6948719b9100dff66ed6d19c73ac66dec5bc5dc4fd328ff26bdef73d1aee164d3fe9b83fa538ecc786fc87d60d7377dfbcd9586a44ff032eed345702857d82b01683db0fb7703e65e62e19856e7915e623c5a31f72c07b879167a5f287022d7ed88ba1ce18d99e6f53e02b725bcdf1e909dac6c27f4374acc00"/191], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 4.470356822s ago: executing program 2 (id=613): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x7, 0x1, 0x4, 0x0, 0x7}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x7fff, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 3.656296082s ago: executing program 1 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x6048041}, 0x4000000) 3.134957204s ago: executing program 4 (id=615): mq_open(&(0x7f0000000000)='..\x00', 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x10008095, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) 3.129204644s ago: executing program 1 (id=616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = getpgid(0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) r5 = syz_pidfd_open(r4, 0x0) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000440)={&(0x7f0000000380)="b35372cda023b92c8c26eefba6188173b84a70fe99e2ff93eb2ce19735efb50a024f823f0d3d44666c3dbc74bca3c417e13698141e996944477a87fa1be31611109db2cffbd8701491d6c770d07c912d8cdb0d578afd4743cf303c42578ff3f9e4de36fbe6b6ced5ba09459fa8eedd4443fc80d875f7dd23b579c46cbd7b9088952feafa4a2462515e6fed417b3467c70eafdcde85b38287ffe6006de43967a8d05ba73ff332a25bcfd86a56cd3a1f4de39c4fec29851f1ed29927f87cd4", 0xbe}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc00000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000580012800b0001006772657461700000480002800400120006000f0004000000060010004e23000005000900f4000000080005000300000005000800040000000600030000010000060003000000000005000a"], 0xcc}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) setns(r5, 0x24020000) syz_clone(0xf21e8000, 0x0, 0xa, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x70bd26, 0x25dfdbfc, {0xa}, [@NDA_MASTER={0x8, 0x9, 0x237a}]}, 0x24}}, 0x20000000) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r8, 0x0, 0x7, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) 1.880469214s ago: executing program 1 (id=617): socket$packet(0x11, 0x2, 0x300) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x7, 0x0, 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_vhci(0x0, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r3) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f00000002c0)={0x0, [[0x3, 0x8, 0x80000000, 0x1, 0x8, 0x1, 0x6959, 0x1], [0x1, 0xffffe9c5, 0x1000, 0x7, 0x38e5, 0x38, 0x7fff, 0x3], [0x3, 0x7, 0x800, 0xd629, 0x9, 0x5, 0x3, 0x1]], '\x00', [{0x40, 0xba, 0x0, 0x1, 0x1, 0x1}, {0x800, 0x21, 0x1}, {0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x7f, 0x7, 0x1, 0x0, 0x1}, {0x7, 0x6, 0x1}, {0x80000001, 0xfffffffb, 0x1, 0x0, 0x1}, {0x5, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x400000, 0x1, 0x0, 0x1}, {0x7, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x9, 0x1, 0x0, 0x1}], '\x00', 0xed21}) unshare(0x8000000) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) mmap$snddsp_control(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x2000004, 0x110, 0xffffffffffffffff, 0x83000000) 953.267834ms ago: executing program 1 (id=618): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_1\x00', 0x10) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0x8, 0x7f, 0x8}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000003040)=[{&(0x7f00000008c0)={0x10, 0x14, 0x509}, 0x10}], 0x1}, 0x40040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = accept(r3, 0x0, &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xe4, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xc8a}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x3f}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbb}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xa}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40000}, 0x4000141) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000080)=@buf) splice(r3, 0x0, r9, 0x0, 0xf3a, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r8, 0x5452, &(0x7f00000001c0)=0xffff) r10 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000f01000/0x4000)=nil, 0x4000, 0x2000002, 0x4000932, r10, 0x0) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000240)='veth0_to_batadv\x00', 0x10) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) write(r2, 0x0, 0x0) 841.548652ms ago: executing program 2 (id=619): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) 738.617208ms ago: executing program 4 (id=620): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x82002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x0, 0x0, r1}) 523.21883ms ago: executing program 2 (id=621): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x101643, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='100\x00', 0x3) close(r0) socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0xfffffffe, 0x0, 0x1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x2d0201, 0x4) 515.321104ms ago: executing program 4 (id=622): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd3384870", 0x120}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df0", 0x28}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa", 0xa8}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="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", 0x1db}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3", 0xa0}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe", 0x24}], 0x3}}], 0x2, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 384.353153ms ago: executing program 1 (id=623): capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x10d, 0x0, &(0x7f0000001300)="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", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x40) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 0s ago: executing program 2 (id=624): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, 0x15, 0x1, 0x70bd2a, 0x25dfdbff, {0x2}, [@typed={0x4}, @nested={0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4800) kernel console output (not intermixed with test programs): e_switch+0x54/0x90 [ 119.100554][ T6219] ? policy_nodemask+0xed/0x4f0 [ 119.100585][ T6219] alloc_pages_mpol+0x1fb/0x540 [ 119.100615][ T6219] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 119.100643][ T6219] ? find_held_lock+0x2b/0x80 [ 119.100673][ T6219] ? __pud_alloc+0x4f6/0x690 [ 119.100701][ T6219] ? __pud_alloc+0x4f6/0x690 [ 119.100730][ T6219] alloc_pages_noprof+0x1a/0x160 [ 119.100766][ T6219] __pmd_alloc+0x3b/0x950 [ 119.100793][ T6219] ? __pud_alloc+0x4fb/0x690 [ 119.100823][ T6219] __handle_mm_fault+0xa9c/0x2a00 [ 119.100866][ T6219] ? mt_find+0x45e/0x8e0 [ 119.100894][ T6219] ? __pfx___handle_mm_fault+0x10/0x10 [ 119.100926][ T6219] ? __pfx_mt_find+0x10/0x10 [ 119.100973][ T6219] handle_mm_fault+0x37b/0xa30 [ 119.101011][ T6219] __get_user_pages+0x1178/0x32a0 [ 119.101052][ T6219] ? __pfx___get_user_pages+0x10/0x10 [ 119.101088][ T6219] get_user_pages_remote+0x3d2/0xb10 [ 119.101121][ T6219] ? __pfx_get_user_pages_remote+0x10/0x10 [ 119.101148][ T6219] ? find_held_lock+0x2b/0x80 [ 119.101187][ T6219] get_arg_page+0xf4/0x310 [ 119.101218][ T6219] ? __pfx_get_arg_page+0x10/0x10 [ 119.101257][ T6219] copy_string_kernel+0x17d/0x3f0 [ 119.101295][ T6219] do_execveat_common.isra.0+0x2e6/0x580 [ 119.101333][ T6219] __x64_sys_execve+0x93/0xd0 [ 119.101367][ T6219] do_syscall_64+0x115/0x870 [ 119.101389][ T6219] ? clear_bhb_loop+0x40/0x90 [ 119.101416][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.101437][ T6219] RIP: 0033:0x7f170599de99 [ 119.101461][ T6219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 119.101480][ T6219] RSP: 002b:00007f1706784028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 119.101504][ T6219] RAX: ffffffffffffffda RBX: 00007f1705c26090 RCX: 00007f170599de99 [ 119.101518][ T6219] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00002000000000c0 [ 119.101532][ T6219] RBP: 00007f1706784090 R08: 0000000000000000 R09: 0000000000000000 [ 119.101544][ T6219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.101556][ T6219] R13: 00007f1705c26128 R14: 00007f1705c26090 R15: 00007ffee754e2e8 [ 119.101585][ T6219] [ 119.435617][ T6217] erspan0: entered allmulticast mode [ 119.529698][ T6217] erspan0: entered promiscuous mode [ 119.554371][ T6217] bridge0: port 3(erspan0) entered blocking state [ 119.561443][ T6217] bridge0: port 3(erspan0) entered forwarding state [ 119.621857][ T6220] erspan0: left allmulticast mode [ 119.627943][ T6220] erspan0: left promiscuous mode [ 119.637304][ T6220] bridge0: port 3(erspan0) entered disabled state [ 119.726246][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'. [ 119.834888][ T5699] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.121230][ T5699] usb 1-1: Using ep0 maxpacket: 8 [ 120.197023][ T5699] usb 1-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config [ 120.230182][ T5699] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.244347][ T5699] usb 1-1: config 1 has no interface number 0 [ 120.250449][ T5699] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 120.281857][ T5699] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7 [ 120.293138][ T5699] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024 [ 120.308080][ T5699] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 120.321229][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.336499][ T5699] usb 1-1: Product: syz [ 120.344532][ T5699] usb 1-1: Manufacturer: syz [ 120.350041][ T5699] usb 1-1: SerialNumber: syz [ 120.693377][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 120.693393][ T30] audit: type=1400 audit(1785298210.914:342): avc: denied { create } for pid=6246 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 120.733942][ T6247] Bluetooth: MGMT ver 1.23 [ 120.755210][ T30] audit: type=1400 audit(1785298210.954:343): avc: denied { bind } for pid=6246 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.156644][ T6251] /dev/sg0: Can't lookup blockdev [ 121.679289][ T30] audit: type=1400 audit(1785298210.954:344): avc: denied { write } for pid=6246 comm="syz.1.110" path="socket:[9961]" dev="sockfs" ino=9961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 121.703096][ T30] audit: type=1400 audit(1785298210.954:345): avc: denied { getopt } for pid=6248 comm="syz.2.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.722698][ T30] audit: type=1400 audit(1785298211.264:346): avc: denied { append } for pid=6246 comm="syz.1.110" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.746166][ T30] audit: type=1400 audit(1785298211.374:347): avc: denied { mounton } for pid=6222 comm="syz.0.106" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 121.861347][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.995192][ T6259] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 122.031682][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 122.385517][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.402696][ T9] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 122.458108][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 122.515120][ T9] usb 2-1: config 0 has no interface number 0 [ 122.543785][ T9] usb 2-1: config 0 interface 49 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.577678][ T30] audit: type=1400 audit(1785298212.794:348): avc: denied { create } for pid=6265 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 122.578959][ T9] usb 2-1: config 0 interface 49 has no altsetting 0 [ 123.180129][ T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 123.189966][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.198036][ T9] usb 2-1: Product: syz [ 123.206828][ T9] usb 2-1: Manufacturer: syz [ 123.220298][ T9] usb 2-1: SerialNumber: syz [ 123.221555][ T30] audit: type=1400 audit(1785298213.394:349): avc: denied { connect } for pid=6265 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.232665][ T9] usb 2-1: config 0 descriptor?? [ 123.272581][ T5699] usb 1-1: USB disconnect, device number 6 [ 123.521199][ T30] audit: type=1400 audit(1785298213.734:350): avc: denied { create } for pid=6246 comm="syz.1.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.656839][ T9] rtsx_usb 2-1:0.49: probe with driver rtsx_usb failed with error -22 [ 123.685417][ T6283] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 123.862879][ T6277] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 123.961656][ T9] usb 2-1: USB disconnect, device number 3 [ 123.971120][ T30] audit: type=1400 audit(1785298214.104:351): avc: denied { setopt } for pid=6275 comm="syz.4.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.761226][ T1227] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.105389][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 127.105406][ T30] audit: type=1400 audit(1785298217.324:356): avc: denied { write } for pid=6304 comm="syz.0.125" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 127.915183][ T1227] usb 2-1: Using ep0 maxpacket: 16 [ 127.986498][ T1227] usb 2-1: unable to get BOS descriptor or descriptor too short [ 127.997550][ T1227] usb 2-1: config 1 interface 0 has no altsetting 0 [ 128.010927][ T1227] usb 2-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 128.026599][ T1227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.049234][ T1227] usb 2-1: Product: syz [ 128.057770][ T1227] usb 2-1: Manufacturer: syz [ 128.067873][ T1227] usb 2-1: SerialNumber: syz [ 128.211523][ T30] audit: type=1400 audit(1785298218.434:357): avc: denied { bind } for pid=6318 comm="syz.0.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 128.239978][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 128.274480][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 128.321344][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.501423][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 128.598689][ T9] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 129.067225][ T9] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 129.294836][ T1227] pwc: Sotec Afina Eye USB webcam detected. [ 129.320662][ T9] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.340656][ T1227] pwc: Failed to set LED on/off time (-71) [ 129.385377][ T1227] pwc: send_video_command error -71 [ 129.398040][ T9] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 129.426866][ T1227] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 129.488544][ T1227] Philips webcam 2-1:1.0: probe with driver Philips webcam failed with error -71 [ 129.514512][ T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 129.535847][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.653002][ T5615] Bluetooth: hci3: link tx timeout [ 129.663495][ T5615] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.681837][ T50] Bluetooth: hci3: link tx timeout [ 129.687107][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.699858][ T50] Bluetooth: hci3: link tx timeout [ 129.705020][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.712809][ T804] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.734647][ T30] audit: type=1400 audit(1785298219.944:358): avc: denied { setattr } for pid=6332 comm="syz.0.130" path="/dev/ttyS3" dev="devtmpfs" ino=619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 129.758211][ T50] Bluetooth: hci3: link tx timeout [ 129.764208][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.774611][ T50] Bluetooth: hci3: link tx timeout [ 129.779808][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.790450][ T50] Bluetooth: hci3: link tx timeout [ 129.796587][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.804451][ T50] Bluetooth: hci3: link tx timeout [ 129.809921][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.821331][ T50] Bluetooth: hci3: link tx timeout [ 129.826498][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.836612][ T50] Bluetooth: hci3: link tx timeout [ 129.842592][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.850317][ T50] Bluetooth: hci3: link tx timeout [ 129.855793][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.863532][ T50] Bluetooth: hci3: link tx timeout [ 129.869582][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.901952][ T50] Bluetooth: hci3: link tx timeout [ 129.907145][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 129.940286][ T50] Bluetooth: hci3: link tx timeout [ 129.946107][ T50] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.104522][ T804] usb 3-1: Using ep0 maxpacket: 32 [ 130.110235][ T30] audit: type=1400 audit(1785298220.254:359): avc: denied { nlmsg_write } for pid=6332 comm="syz.0.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 130.203044][ T804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.280009][ T1227] usb 2-1: USB disconnect, device number 4 [ 130.296984][ T804] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.447714][ T804] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 130.530716][ T804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.632164][ T9] usb 5-1: Product: syz [ 130.636749][ T9] usb 5-1: Manufacturer: syz [ 130.643036][ T804] usb 3-1: Product: syz [ 130.646533][ T9] usb 5-1: SerialNumber: syz [ 130.671722][ T804] usb 3-1: Manufacturer: syz [ 130.676917][ T804] usb 3-1: SerialNumber: syz [ 130.701465][ T804] usb 3-1: config 0 descriptor?? [ 130.721653][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 130.739495][ T6339] Illegal XDP return value 32768 on prog (id 11) dev N/A, expect packet loss! [ 130.761710][ T9] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input8 [ 130.883737][ T6342] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 130.907740][ T6342] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 131.223950][ T30] audit: type=1400 audit(1785298221.444:360): avc: denied { listen } for pid=6311 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.251272][ T9] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 131.260479][ T9] (id 0x00) [ 131.264807][ T6329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.353421][ T6329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.463276][ T9] rc_core: IR keymap rc-imon-pad not found [ 131.470604][ T9] Registered IR keymap rc-empty [ 131.477558][ T9] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 131.487941][ T9] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 131.788428][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 132.216435][ T9] imon:send_packet: packet tx failed (-71) [ 132.253979][ T9] imon 5-1:155.0: remote input dev register failed [ 132.285492][ T9] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 132.299475][ T30] audit: type=1400 audit(1785298222.514:361): avc: denied { ioctl } for pid=6350 comm="syz.1.136" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 132.540212][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.549019][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.917933][ T6352] input: syz0 as /devices/virtual/input/input10 [ 133.169991][ T9] imon 5-1:155.0: unable to initialize intf0, err 0 [ 133.270129][ T9] imon:imon_probe: failed to initialize context! [ 133.435608][ T9] imon 5-1:155.0: unable to register, err -19 [ 133.453999][ T30] audit: type=1400 audit(1785298223.674:362): avc: denied { connect } for pid=6365 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.482526][ T804] usb 3-1: USB disconnect, device number 3 [ 133.498531][ T9] usb 5-1: USB disconnect, device number 3 [ 133.505968][ T30] audit: type=1400 audit(1785298223.694:363): avc: denied { read } for pid=6365 comm="syz.4.140" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.577865][ T30] audit: type=1400 audit(1785298223.694:364): avc: denied { open } for pid=6365 comm="syz.4.140" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 133.714240][ T30] audit: type=1400 audit(1785298223.714:365): avc: denied { ioctl } for pid=6362 comm="syz.0.139" path="socket:[10707]" dev="sockfs" ino=10707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 133.779953][ T30] audit: type=1400 audit(1785298223.774:366): avc: denied { ioctl } for pid=6365 comm="syz.4.140" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x744c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 134.141403][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 134.248353][ T30] audit: type=1400 audit(1785298224.464:367): avc: denied { read } for pid=6383 comm="syz.1.145" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 134.374945][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 134.409541][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 134.925778][ T30] audit: type=1400 audit(1785298224.464:368): avc: denied { create } for pid=6384 comm="syz.4.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 134.946955][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 134.953735][ T30] audit: type=1400 audit(1785298224.604:369): avc: denied { ioctl } for pid=6383 comm="syz.1.145" path="/dev/input/mice" dev="devtmpfs" ino=917 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 134.963224][ T6390] Bluetooth: MGMT ver 1.23 [ 134.992416][ T9] usb 1-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 135.007185][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.019050][ T30] audit: type=1400 audit(1785298224.794:370): avc: denied { write } for pid=6384 comm="syz.4.144" path="socket:[10156]" dev="sockfs" ino=10156 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 135.043606][ T9] usb 1-1: Product: syz [ 135.048576][ T9] usb 1-1: Manufacturer: syz [ 135.058075][ T9] usb 1-1: SerialNumber: syz [ 135.297231][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.143'. [ 135.403673][ T6399] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 135.441303][ T6399] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 135.677261][ T9] pwc: Sotec Afina Eye USB webcam detected. [ 135.692194][ T9] pwc: Failed to set LED on/off time (-71) [ 135.698384][ T9] pwc: send_video_command error -71 [ 135.727575][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 135.753645][ T9] Philips webcam 1-1:1.0: probe with driver Philips webcam failed with error -71 [ 135.771628][ T5797] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 135.792920][ T9] usb 1-1: USB disconnect, device number 7 [ 135.871042][ T6404] input: syz0 as /devices/virtual/input/input11 [ 136.378983][ T5797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.857982][ T5797] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 137.866951][ T5797] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 137.876059][ T5797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.895236][ T5797] usb 2-1: config 0 descriptor?? [ 138.176368][ T5797] Bluetooth: Can't get state to change to load ram patch err [ 138.184319][ T5797] Bluetooth: Loading patch file failed [ 138.189833][ T5797] ath3k 2-1:0.0: probe with driver ath3k failed with error -121 [ 138.881239][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.064912][ T10] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 139.091322][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.180698][ T6440] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 139.441459][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 139.441475][ T30] audit: type=1400 audit(1785298229.604:372): avc: denied { name_connect } for pid=6428 comm="syz.4.159" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 139.477762][ T10] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 139.534277][ T10] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 139.547606][ T30] audit: type=1400 audit(1785298229.764:373): avc: denied { firmware_load } for pid=10 comm="kworker/0:1" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 139.570218][ T10] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 139.707490][ T6424] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 139.756759][ T10] usb 4-1: emi26_load_firmware - request_firmware() failed [ 139.766563][ T10] usb 4-1: emi26_load_firmware - error loading firmware: error = -2 [ 139.776328][ T10] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 139.900663][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 140.531977][ T10] usb 4-1: USB disconnect, device number 5 [ 140.603699][ T6451] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 140.624047][ T6451] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 141.087156][ T30] audit: type=1400 audit(1785298231.304:374): avc: denied { create } for pid=6454 comm="syz.3.165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 141.236603][ T5699] usb 2-1: USB disconnect, device number 5 [ 141.874974][ T30] audit: type=1400 audit(1785298232.054:376): avc: denied { ioctl } for pid=6456 comm="syz.2.166" path="socket:[11295]" dev="sockfs" ino=11295 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 141.920627][ T30] audit: type=1400 audit(1785298231.494:375): avc: denied { sys_admin } for pid=6454 comm="syz.3.165" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 142.259836][ T30] audit: type=1326 audit(1785298232.474:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6466 comm="syz.0.168" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96dcd9de99 code=0x0 [ 142.378000][ T6467] 9p: Bad value for 'rfdno' [ 142.410516][ T6467] Invalid option length (1024438) for dns_resolver key [ 142.473960][ T30] audit: type=1400 audit(1785298232.694:378): avc: denied { map } for pid=6454 comm="syz.3.165" path="socket:[10882]" dev="sockfs" ino=10882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 142.557464][ T30] audit: type=1400 audit(1785298232.764:379): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.608648][ T30] audit: type=1400 audit(1785298232.764:380): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.679233][ T30] audit: type=1400 audit(1785298232.764:381): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.742926][ T6476] can0: slcan on ttyS3. [ 142.763240][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.883232][ T1227] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 142.957301][ T9] usb 2-1: device descriptor read/64, error -71 [ 142.969044][ T6482] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 143.263745][ T5722] IPVS: starting estimator thread 0... [ 143.269352][ T1227] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.284174][ T1227] usb 5-1: not running at top speed; connect to a high speed hub [ 143.312167][ T1227] usb 5-1: config 5 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 143.365102][ T1227] usb 5-1: New USB device found, idVendor=15c2, idProduct=003c, bcdDevice=8a.3e [ 143.385794][ T6486] IPVS: using max 38 ests per chain, 91200 per kthread [ 143.393736][ T1227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.448918][ T1227] usb 5-1: Product: syz [ 143.472241][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 143.549784][ T1227] usb 5-1: Manufacturer: syz [ 143.570182][ T6492] FAULT_INJECTION: forcing a failure. [ 143.570182][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 143.582928][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.3.172 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.582960][ T6492] Tainted: [L]=SOFTLOCKUP [ 143.582968][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 143.582980][ T6492] Call Trace: [ 143.582987][ T6492] [ 143.582994][ T6492] dump_stack_lvl+0x100/0x190 [ 143.583026][ T6492] should_fail_ex.cold+0x5/0xa [ 143.583053][ T6492] should_failslab+0xc2/0x120 [ 143.583082][ T6492] kmem_cache_alloc_noprof+0x91/0x6a0 [ 143.583108][ T6492] ? do_getname+0x35/0x390 [ 143.583140][ T6492] do_getname+0x35/0x390 [ 143.583169][ T6492] __x64_sys_rename+0x66/0xb0 [ 143.583197][ T6492] do_syscall_64+0x115/0x870 [ 143.583220][ T6492] ? clear_bhb_loop+0x40/0x90 [ 143.583246][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.583268][ T6492] RIP: 0033:0x7f6e7c19de99 [ 143.583286][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.583305][ T6492] RSP: 002b:00007f6e7a3d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 143.583325][ T6492] RAX: ffffffffffffffda RBX: 00007f6e7c426090 RCX: 00007f6e7c19de99 [ 143.583340][ T6492] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000200000000580 [ 143.583353][ T6492] RBP: 00007f6e7a3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 143.583366][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.583378][ T6492] R13: 00007f6e7c426128 R14: 00007f6e7c426090 R15: 00007ffd70996198 [ 143.583407][ T6492] [ 143.917765][ T1227] usb 5-1: SerialNumber: syz [ 143.921289][ T9] usb 2-1: device descriptor read/64, error -71 [ 144.179361][ T9] usb usb2-port1: attempt power cycle [ 145.222311][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 145.302225][ T9] usb 2-1: device descriptor read/8, error -71 [ 145.311108][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 145.331767][ T30] audit: type=1400 audit(1785298235.524:389): avc: denied { ioctl } for pid=6473 comm="syz.4.171" path="socket:[11333]" dev="sockfs" ino=11333 ioctlcmd=0x6e85 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 145.417171][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 146.241288][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 146.551335][ T9] usb 2-1: device not accepting address 9, error -71 [ 146.684068][ T9] usb usb2-port1: unable to enumerate USB device [ 146.750221][ T1227] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 146.799046][ T1227] imon 5-1:5.0: unable to initialize intf0, err -19 [ 146.849583][ T1227] imon:imon_probe: failed to initialize context! [ 146.875542][ T1227] imon 5-1:5.0: unable to register, err -19 [ 146.889012][ T30] audit: type=1400 audit(1785298237.094:390): avc: denied { write } for pid=6483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.924513][ T1227] usb 5-1: USB disconnect, device number 4 [ 146.947425][ T30] audit: type=1400 audit(1785298237.094:391): avc: denied { add_name } for pid=6483 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.981270][ T804] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 147.015985][ T6478] can0 (unregistered): slcan off ttyS3. [ 147.227184][ T30] audit: type=1400 audit(1785298237.094:392): avc: denied { create } for pid=6483 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.574989][ T30] audit: type=1400 audit(1785298237.094:393): avc: denied { write } for pid=6483 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=2573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.001089][ T30] audit: type=1400 audit(1785298237.104:394): avc: denied { append } for pid=6483 comm="dhcpcd-run-hook" name="resolv.conf.sl0.link" dev="tmpfs" ino=2573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 148.828786][ T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.844267][ T804] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 148.853299][ T30] audit: type=1400 audit(1785298239.064:395): avc: denied { write } for pid=6530 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.126140][ T804] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 149.145362][ T30] audit: type=1400 audit(1785298239.064:396): avc: denied { remove_name } for pid=6530 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.169012][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 149.192186][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.214217][ T30] audit: type=1400 audit(1785298239.064:397): avc: denied { unlink } for pid=6530 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=2573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.244657][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 149.409686][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.412623][ T804] usb 1-1: config 0 descriptor?? [ 149.446597][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 149.889212][ T30] audit: type=1400 audit(1785298239.404:398): avc: denied { mount } for pid=6522 comm="syz.4.179" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 149.911419][ T9] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 149.920934][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.960070][ T9] usb 2-1: config 0 descriptor?? [ 149.973009][ T804] Bluetooth: Can't get state to change to load ram patch err [ 150.042184][ T804] Bluetooth: Loading patch file failed [ 150.066430][ T804] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 150.093319][ T6546] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 150.096276][ T804] usb 1-1: USB disconnect, device number 8 [ 150.295182][ T9] Bluetooth: Can't get state to change to load ram patch err [ 150.328529][ T9] Bluetooth: Loading patch file failed [ 150.354946][ T9] ath3k 2-1:0.0: probe with driver ath3k failed with error -121 [ 151.471246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 151.710425][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.924644][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.866759][ T1227] usb 2-1: USB disconnect, device number 10 [ 153.004107][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 153.004124][ T30] audit: type=1400 audit(1785298243.164:403): avc: denied { create } for pid=6562 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.061230][ T30] audit: type=1400 audit(1785298243.164:404): avc: denied { bind } for pid=6562 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.122727][ T6546] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 153.140513][ T30] audit: type=1400 audit(1785298243.164:405): avc: denied { listen } for pid=6562 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.292930][ T30] audit: type=1400 audit(1785298243.164:406): avc: denied { connect } for pid=6562 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 153.331217][ T30] audit: type=1400 audit(1785298243.174:407): avc: denied { write } for pid=6535 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.060991][ T30] audit: type=1400 audit(1785298243.224:408): avc: denied { accept } for pid=6562 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.080852][ T30] audit: type=1400 audit(1785298243.654:409): avc: denied { write } for pid=6571 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 155.494680][ T30] audit: type=1400 audit(1785298245.714:410): avc: denied { create } for pid=6588 comm="syz.2.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 155.781237][ T804] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 155.931258][ T804] usb 3-1: device descriptor read/64, error -71 [ 157.654348][ T804] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 159.112600][ T30] audit: type=1326 audit(1785298249.264:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6598 comm="syz.1.186" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee3e99de99 code=0x0 [ 159.201704][ T6609] 9p: Bad value for 'rfdno' [ 159.217338][ T6609] Invalid option length (1024438) for dns_resolver key [ 161.553018][ T6634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 166.715539][ T6656] trusted_key: encrypted_key: insufficient parameters specified [ 166.814665][ T30] audit: type=1400 audit(1785298256.984:412): avc: denied { append } for pid=6655 comm="syz.0.208" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 171.334190][ T5699] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 171.334572][ T6705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.505820][ T5699] usb 4-1: Using ep0 maxpacket: 16 [ 171.650757][ T5699] usb 4-1: config 1 has an invalid interface number: 13 but max is 1 [ 171.667912][ T6708] overlayfs: failed to resolve './file0': -2 [ 171.700801][ T5699] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.717573][ T6707] ALSA: mixer_oss: invalid OSS volume 'P' [ 171.729113][ T6707] ALSA: mixer_oss: invalid OSS volume '÷ÅPî–EãŽÅŽà0Swëª{ú_ÂàJ×Ñ—Ø,4{' [ 171.736747][ T5699] usb 4-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 171.772959][ T5699] usb 4-1: config 1 has no interface number 2 [ 171.789488][ T5699] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 171.804667][ T5699] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.814842][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.824951][ T5699] usb 4-1: Product: éŒë¾´ìŠ’씼웕躺탌ལḱ赈ʔꈃࡢ⑆㨺ﴓ䡾ꧾ䚥蟠燩犕爺⺓㘎ൄ烀먊挼ٰ禮ꃊ瘒å”茪é¡äµ®çµïƒ•è±Œâ¸…７鶹⢪茲䟪å“濙稔á®ë¦¸ä›»æ®å™´àª¨éµä•ä‰æ«µè¬†è…œç™»â²»éŒ§Ì“䃜ã›î‚¾å´°ä»¾í˜à±†ê°’ථ嚉异钵ꭅ䯀既 [ 171.859649][ T5699] usb 4-1: Manufacturer: à „ [ 171.864611][ T5699] usb 4-1: SerialNumber: á Œ [ 171.936764][ T6716] team0 (unregistering): Port device team_slave_0 removed [ 171.976146][ T6716] team0 (unregistering): Port device team_slave_1 removed [ 172.171421][ T5722] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 172.173225][ T5699] hub 4-1:1.13: Invalid hub with more than one config or interface [ 172.206729][ T5699] hub 4-1:1.13: probe with driver hub failed with error -22 [ 172.224184][ T6728] xt_cluster: node mask cannot exceed total number of nodes [ 172.243022][ T5699] usb 4-1: USB disconnect, device number 6 [ 172.345366][ T5722] usb 2-1: unable to get BOS descriptor or descriptor too short [ 172.382713][ T5722] usb 2-1: not running at top speed; connect to a high speed hub [ 172.410466][ T5722] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.420703][ T30] audit: type=1400 audit(1785298262.624:413): avc: denied { write } for pid=6733 comm="syz.2.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 172.580172][ T5722] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 172.601840][ T5722] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 172.611535][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.625561][ T5722] usb 2-1: Product: syz [ 172.648673][ T5722] usb 2-1: Manufacturer: syz [ 172.666884][ T5722] usb 2-1: SerialNumber: syz [ 172.971153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 173.767105][ T6716] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.813276][ T6716] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.807491][ T5722] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 174.830480][ T5722] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 174.927280][ T6763] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 174.927347][ T5722] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 175.619882][ T6776] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 175.634439][ T5722] usb 2-1: USB disconnect, device number 11 [ 175.895719][ T6610] udevd[6610]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.933796][ T30] audit: type=1400 audit(1785298266.144:414): avc: denied { read } for pid=6782 comm="syz.4.243" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 175.997467][ T30] audit: type=1400 audit(1785298266.154:415): avc: denied { open } for pid=6782 comm="syz.4.243" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 176.035097][ T30] audit: type=1400 audit(1785298266.154:416): avc: denied { ioctl } for pid=6782 comm="syz.4.243" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0xae63 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 176.119798][ T30] audit: type=1400 audit(1785298266.334:417): avc: denied { write } for pid=6761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.180889][ T30] audit: type=1400 audit(1785298266.334:418): avc: denied { bind } for pid=6789 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 176.207667][ T30] audit: type=1400 audit(1785298266.334:419): avc: denied { getopt } for pid=6789 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 176.301301][ T5722] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 176.338671][ T1227] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 176.562142][ T1227] usb 5-1: device descriptor read/64, error -71 [ 176.606037][ T5722] usb 2-1: Using ep0 maxpacket: 16 [ 176.623461][ T5722] usb 2-1: unable to get BOS descriptor or descriptor too short [ 176.644123][ T5722] usb 2-1: config 1 interface 0 has no altsetting 0 [ 176.678681][ T5722] usb 2-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 176.683186][ T30] audit: type=1400 audit(1785298266.894:420): avc: denied { write } for pid=6802 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.723717][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.754985][ T5722] usb 2-1: Product: syz [ 176.938473][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 177.090973][ T1227] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 177.133454][ T5271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.534792][ T5722] usb 2-1: Manufacturer: syz [ 177.539486][ T5722] usb 2-1: SerialNumber: syz [ 177.881501][ T1227] usb 5-1: device descriptor read/64, error -71 [ 178.459309][ T1227] usb usb5-port1: attempt power cycle [ 178.998901][ T1227] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 179.649307][ T1227] usb 5-1: device descriptor read/8, error -71 [ 179.674521][ T5722] pwc: Sotec Afina Eye USB webcam detected. [ 179.700832][ T5722] pwc: Failed to set LED on/off time (-71) [ 179.716892][ T6835] loop9: detected capacity change from 0 to 2640 [ 179.732080][ T5722] pwc: send_video_command error -71 [ 179.741214][ T5722] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 179.761329][ T5722] Philips webcam 2-1:1.0: probe with driver Philips webcam failed with error -71 [ 179.772306][ T6835] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.789394][ T5722] usb 2-1: USB disconnect, device number 12 [ 179.796982][ T6835] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.824253][ T6835] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.843456][ T6835] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.886578][ T6835] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.925364][ T6835] Buffer I/O error on dev loop9, logical block 0, async page read [ 179.967856][ T6835] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.001338][ T6835] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.014727][ T6835] ldm_validate_partition_table(): Disk read failed. [ 180.046704][ T6835] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.073674][ T6835] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.084587][ T6835] Dev loop9: unable to read RDB block 0 [ 180.093764][ T6835] loop9: unable to read partition table [ 180.099615][ T6835] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 180.124293][ T6837] FAULT_INJECTION: forcing a failure. [ 180.124293][ T6837] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 180.200207][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.257'. [ 180.301417][ T6837] CPU: 1 UID: 0 PID: 6837 Comm: syz.4.255 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.301450][ T6837] Tainted: [L]=SOFTLOCKUP [ 180.301464][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 180.301486][ T6837] Call Trace: [ 180.301493][ T6837] [ 180.301501][ T6837] dump_stack_lvl+0x100/0x190 [ 180.301533][ T6837] should_fail_ex.cold+0x5/0xa [ 180.301559][ T6837] _copy_from_user+0x2e/0xd0 [ 180.301589][ T6837] copy_msghdr_from_user+0x9f/0x4c0 [ 180.301624][ T6837] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 180.301671][ T6837] ___sys_sendmsg+0x106/0x1e0 [ 180.301707][ T6837] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.301738][ T6837] ? __lock_acquire+0x49f/0x1a40 [ 180.301765][ T6837] ? get_pid_task+0x106/0x250 [ 180.301828][ T6837] __sys_sendmsg+0x160/0x210 [ 180.301855][ T6837] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.301896][ T6837] do_syscall_64+0x115/0x870 [ 180.301920][ T6837] ? clear_bhb_loop+0x40/0x90 [ 180.301946][ T6837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.301969][ T6837] RIP: 0033:0x7f89c299de99 [ 180.301986][ T6837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.302007][ T6837] RSP: 002b:00007f89c3919028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.302028][ T6837] RAX: ffffffffffffffda RBX: 00007f89c2c25fa0 RCX: 00007f89c299de99 [ 180.302044][ T6837] RDX: 0000000000000080 RSI: 0000200000000000 RDI: 0000000000000005 [ 180.302058][ T6837] RBP: 00007f89c3919090 R08: 0000000000000000 R09: 0000000000000000 [ 180.302071][ T6837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.302084][ T6837] R13: 00007f89c2c26038 R14: 00007f89c2c25fa0 R15: 00007ffc64eb5f28 [ 180.302113][ T6837] [ 180.813045][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.260'. [ 183.427257][ T6884] trusted_key: encrypted_key: insufficient parameters specified [ 187.669254][ T30] audit: type=1400 audit(1785298277.884:421): avc: denied { write } for pid=6900 comm="syz.3.271" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 188.399632][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 189.496683][ T6956] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 189.513116][ T6956] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 190.730471][ T6958] [U]  [ 191.087410][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 191.198235][ T5623] Bluetooth: hci0: command 0x0406 tx timeout [ 191.206786][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 191.214817][ T5621] Bluetooth: hci1: command 0x0406 tx timeout [ 193.983024][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.992413][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.460211][ T30] audit: type=1400 audit(1785298284.334:422): avc: denied { sqpoll } for pid=6984 comm="syz.0.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 197.254599][ T30] audit: type=1400 audit(1785298287.424:423): avc: denied { relabelfrom } for pid=6984 comm="syz.0.285" name="" dev="pipefs" ino=11907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 197.856877][ T5699] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 198.100732][ T5699] usb 5-1: Using ep0 maxpacket: 8 [ 198.150433][ T5699] usb 5-1: unable to get BOS descriptor or descriptor too short [ 198.196304][ T5699] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.244423][ T5699] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.438030][ T5699] usb 5-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 198.548513][ T5699] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.663685][ T5699] usb 5-1: Product: syz [ 198.702060][ T5699] usb 5-1: Manufacturer: syz [ 198.713186][ T5699] usb 5-1: SerialNumber: syz [ 198.728863][ T5699] usb 5-1: config 0 descriptor?? [ 199.823657][ T5722] usb 5-1: USB disconnect, device number 9 [ 200.064007][ T7029] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 200.097404][ T7029] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 200.501915][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 200.665908][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 200.735081][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.739673][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.752679][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 201.764360][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.780015][ T10] usb 1-1: config 0 descriptor?? [ 201.788965][ T10] hub 1-1:0.0: USB hub found [ 202.031820][ T10] hub 1-1:0.0: 1 port detected [ 202.131875][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 202.834833][ T10] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 202.885918][ T7082] trusted_key: encrypted_key: insufficient parameters specified [ 203.325229][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 203.922685][ T9] usb 1-1: USB disconnect, device number 9 [ 204.031555][ T5699] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 204.180648][ T7102] overlayfs: failed to resolve './file0': -2 [ 204.212162][ T5699] usb 3-1: Using ep0 maxpacket: 16 [ 204.324505][ T5699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.351755][ T5699] usb 3-1: config 1 interface 0 has no altsetting 0 [ 204.390087][ T5699] usb 3-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 204.452858][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.482174][ T5699] usb 3-1: Product: syz [ 204.496480][ T5699] usb 3-1: Manufacturer: syz [ 204.521459][ T5699] usb 3-1: SerialNumber: syz [ 204.675960][ T7099] ALSA: mixer_oss: invalid OSS volume 'P' [ 204.696310][ T7099] ALSA: mixer_oss: invalid OSS volume '÷ÅPî–EãŽÅŽà0Swëª{ú_ÂàJ×Ñ—Ø,4{' [ 204.883754][ T5699] pwc: Sotec Afina Eye USB webcam detected. [ 204.919214][ T5699] pwc: Failed to set LED on/off time (-71) [ 204.973871][ T5699] pwc: send_video_command error -71 [ 205.010553][ T5699] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 205.140188][ T5699] Philips webcam 3-1:1.0: probe with driver Philips webcam failed with error -71 [ 205.376166][ T5699] usb 3-1: USB disconnect, device number 6 [ 205.745734][ T7120] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 207.898384][ T30] audit: type=1400 audit(1785298298.104:424): avc: denied { ioctl } for pid=7142 comm="syz.4.312" path="socket:[12713]" dev="sockfs" ino=12713 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 207.929441][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.312'. [ 208.089990][ T7172] trusted_key: encrypted_key: insufficient parameters specified [ 208.172202][ T30] audit: type=1400 audit(1785298298.194:425): avc: denied { search } for pid=7143 comm="syz.1.313" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 208.320450][ T30] audit: type=1400 audit(1785298298.194:426): avc: denied { search } for pid=7143 comm="syz.1.313" name="target" dev="configfs" ino=350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 208.404856][ T30] audit: type=1400 audit(1785298298.194:427): avc: denied { search } for pid=7143 comm="syz.1.313" name="core" dev="configfs" ino=351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 208.470350][ T30] audit: type=1400 audit(1785298298.204:428): avc: denied { write } for pid=7098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.666744][ T7186] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 208.709491][ T7186] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 208.990008][ T30] audit: type=1400 audit(1785298299.204:429): avc: denied { write } for pid=7177 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.993283][ T7187] xt_connbytes: Forcing CT accounting to be enabled [ 209.082286][ T7187] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 209.112958][ T30] audit: type=1400 audit(1785298299.324:430): avc: denied { mount } for pid=7188 comm="syz.0.318" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 209.585371][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 210.112647][ T7205] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 210.119618][ T7205] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 210.244589][ T7193] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.444619][ T1227] IPVS: starting estimator thread 0... [ 210.452102][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 210.464459][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 210.551228][ T7208] IPVS: using max 33 ests per chain, 79200 per kthread [ 210.576369][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 210.591012][ T30] audit: type=1400 audit(1785298300.804:431): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 210.638081][ T10] usb 3-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 210.657173][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.668477][ T10] usb 3-1: Product: syz [ 210.692793][ T10] usb 3-1: Manufacturer: syz [ 210.704434][ T10] usb 3-1: SerialNumber: syz [ 210.869693][ T30] audit: type=1400 audit(1785298301.064:432): avc: denied { create } for pid=7214 comm="syz.1.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 211.312325][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.439062][ T10] pwc: Sotec Afina Eye USB webcam detected. [ 211.452829][ T10] pwc: Failed to set LED on/off time (-71) [ 211.458975][ T10] pwc: send_video_command error -71 [ 211.467335][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 211.481109][ T10] Philips webcam 3-1:1.0: probe with driver Philips webcam failed with error -71 [ 211.494797][ T10] usb 3-1: USB disconnect, device number 7 [ 211.743976][ T7229] syzkaller0: entered promiscuous mode [ 211.763600][ T7229] syzkaller0: entered allmulticast mode [ 211.852440][ T1227] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 211.940373][ T7238] trusted_key: encrypted_key: insufficient parameters specified [ 212.028547][ T1227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.029202][ T30] audit: type=1400 audit(1785298302.244:433): avc: denied { write } for pid=7216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.052059][ T1227] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 212.146569][ T7245] overlayfs: missing 'lowerdir' [ 212.158646][ T1227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.207045][ T1227] usb 2-1: config 0 descriptor?? [ 212.209189][ T7245] xt_HMARK: spi-set and port-set can't be combined [ 213.125125][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 213.125150][ T30] audit: type=1400 audit(1785298303.274:438): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 213.478848][ T1227] usbhid 2-1:0.0: can't add hid device: -71 [ 213.556847][ T1227] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 213.568770][ T1227] usb 2-1: USB disconnect, device number 13 [ 213.836221][ T30] audit: type=1400 audit(1785298304.054:439): avc: denied { mount } for pid=7266 comm="syz.3.335" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 213.892104][ T30] audit: type=1400 audit(1785298304.064:440): avc: denied { search } for pid=7266 comm="syz.3.335" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 213.963717][ T30] audit: type=1400 audit(1785298304.064:441): avc: denied { read } for pid=7266 comm="syz.3.335" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 214.046148][ T30] audit: type=1400 audit(1785298304.064:442): avc: denied { open } for pid=7266 comm="syz.3.335" path="/60/nfsd_mnt/threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 214.070891][ T30] audit: type=1400 audit(1785298304.084:443): avc: denied { read } for pid=7266 comm="syz.3.335" name="rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.095244][ T30] audit: type=1400 audit(1785298304.084:444): avc: denied { open } for pid=7266 comm="syz.3.335" path="/dev/rtc0" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.143795][ T30] audit: type=1400 audit(1785298304.094:445): avc: denied { ioctl } for pid=7266 comm="syz.3.335" path="/dev/rtc0" dev="devtmpfs" ino=922 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 214.172778][ T7270] netlink: 48 bytes leftover after parsing attributes in process `syz.3.335'. [ 214.987534][ T30] audit: type=1400 audit(1785298305.134:446): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 215.567537][ T7281] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.829280][ T7285] 9pnet_virtio: no channels available for device syz [ 215.839666][ T7285] FAULT_INJECTION: forcing a failure. [ 215.839666][ T7285] name failslab, interval 1, probability 0, space 0, times 0 [ 215.852786][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.3.338 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.852805][ T7285] Tainted: [L]=SOFTLOCKUP [ 215.852809][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 215.852817][ T7285] Call Trace: [ 215.852821][ T7285] [ 215.852826][ T7285] dump_stack_lvl+0x100/0x190 [ 215.852847][ T7285] should_fail_ex.cold+0x5/0xa [ 215.852863][ T7285] should_failslab+0xc2/0x120 [ 215.852880][ T7285] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 215.852894][ T7285] ? __alloc_skb+0x5b7/0x710 [ 215.852908][ T7285] ? __alloc_skb+0x140/0x710 [ 215.852923][ T7285] __alloc_skb+0x140/0x710 [ 215.852935][ T7285] ? __alloc_skb+0x5b7/0x710 [ 215.852948][ T7285] ? __pfx___alloc_skb+0x10/0x10 [ 215.852965][ T7285] netlink_alloc_large_skb+0x69/0x150 [ 215.852978][ T7285] netlink_sendmsg+0x680/0xda0 [ 215.852992][ T7285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.853006][ T7285] ? selinux_socket_sendmsg+0x198/0x2f0 [ 215.853026][ T7285] ____sys_sendmsg+0xa4d/0xbe0 [ 215.853044][ T7285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.853057][ T7285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.853081][ T7285] ___sys_sendmsg+0x190/0x1e0 [ 215.853101][ T7285] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.853119][ T7285] ? __lock_acquire+0x49f/0x1a40 [ 215.853134][ T7285] ? get_pid_task+0x106/0x250 [ 215.853168][ T7285] __sys_sendmsg+0x160/0x210 [ 215.853183][ T7285] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.853206][ T7285] do_syscall_64+0x115/0x870 [ 215.853220][ T7285] ? clear_bhb_loop+0x40/0x90 [ 215.853235][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.853247][ T7285] RIP: 0033:0x7f6e7c19de99 [ 215.853258][ T7285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.853269][ T7285] RSP: 002b:00007f6e7a3d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.853281][ T7285] RAX: ffffffffffffffda RBX: 00007f6e7c426090 RCX: 00007f6e7c19de99 [ 215.853289][ T7285] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000b [ 215.853296][ T7285] RBP: 00007f6e7a3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 215.853303][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.853310][ T7285] R13: 00007f6e7c426128 R14: 00007f6e7c426090 R15: 00007ffd70996198 [ 215.853325][ T7285] [ 216.463301][ T30] audit: type=1400 audit(1785298306.684:447): avc: denied { mount } for pid=7289 comm="syz.0.340" name="/" dev="autofs" ino=12899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 216.812684][ T804] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 217.143207][ T7299] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.164485][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 217.182846][ T804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 217.200089][ T804] usb 4-1: config 1 interface 0 has no altsetting 0 [ 217.224157][ T804] usb 4-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 217.262312][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.385058][ T804] usb 4-1: Product: syz [ 217.531078][ T804] usb 4-1: Manufacturer: syz [ 217.589619][ T804] usb 4-1: SerialNumber: syz [ 219.962765][ T804] pwc: Sotec Afina Eye USB webcam detected. [ 220.025884][ T804] pwc: Failed to set LED on/off time (-71) [ 220.086362][ T804] pwc: send_video_command error -71 [ 220.118948][ T804] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 220.210123][ T804] Philips webcam 4-1:1.0: probe with driver Philips webcam failed with error -71 [ 220.335991][ T804] usb 4-1: USB disconnect, device number 7 [ 220.433573][ T7325] could not open pipe file descriptor [ 222.820096][ T7349] trusted_key: encrypted_key: insufficient parameters specified [ 222.836501][ T7351] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.062659][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 223.062676][ T30] audit: type=1400 audit(1785298313.274:451): avc: denied { write } for pid=7353 comm="syz.3.358" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 223.122413][ T30] audit: type=1400 audit(1785298313.274:452): avc: denied { read } for pid=7353 comm="syz.3.358" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 223.147861][ T30] audit: type=1400 audit(1785298313.274:453): avc: denied { open } for pid=7353 comm="syz.3.358" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 223.186352][ T30] audit: type=1400 audit(1785298313.274:454): avc: denied { ioctl } for pid=7353 comm="syz.3.358" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 223.228420][ T30] audit: type=1400 audit(1785298313.444:455): avc: denied { write } for pid=7353 comm="syz.3.358" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 223.272133][ T5722] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 223.434157][ T5722] usb 1-1: Using ep0 maxpacket: 16 [ 223.446546][ T5722] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.461015][ T30] audit: type=1400 audit(1785298313.664:456): avc: denied { append } for pid=7365 comm="syz.1.363" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 223.501982][ T5722] usb 1-1: config 1 interface 0 has no altsetting 0 [ 223.518496][ T5722] usb 1-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 223.538619][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.557158][ T5722] usb 1-1: Product: syz [ 223.564270][ T5722] usb 1-1: Manufacturer: syz [ 223.568943][ T5722] usb 1-1: SerialNumber: syz [ 224.742668][ T5722] pwc: Sotec Afina Eye USB webcam detected. [ 224.754364][ T5722] pwc: Failed to set LED on/off time (-71) [ 224.765378][ T5722] pwc: send_video_command error -71 [ 224.770899][ T5722] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 224.780250][ T5722] Philips webcam 1-1:1.0: probe with driver Philips webcam failed with error -71 [ 225.888465][ T7383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 226.288464][ T5722] usb 1-1: USB disconnect, device number 10 [ 228.251039][ T7401] trusted_key: encrypted_key: insufficient parameters specified [ 228.446448][ T30] audit: type=1400 audit(1785298318.654:457): avc: denied { write } for pid=7381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.688485][ T30] audit: type=1400 audit(1785298318.864:458): avc: denied { create } for pid=7415 comm="syz.2.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 229.407753][ T1227] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 229.707302][ T1227] usb 5-1: Using ep0 maxpacket: 16 [ 229.882373][ T1227] usb 5-1: unable to get BOS descriptor or descriptor too short [ 229.928518][ T1227] usb 5-1: config 1 interface 0 has no altsetting 0 [ 229.946044][ T7435] program syz.3.379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.131578][ T1227] usb 5-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 231.142728][ T1227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.159099][ T1227] usb 5-1: Product: syz [ 231.164794][ T30] audit: type=1400 audit(1785298321.374:459): avc: denied { write } for pid=7425 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.187856][ T1227] usb 5-1: Manufacturer: syz [ 231.193792][ T1227] usb 5-1: SerialNumber: syz [ 231.444676][ T7451] overlayfs: failed to resolve './file0': -2 [ 233.908442][ T1227] pwc: Sotec Afina Eye USB webcam detected. [ 234.044661][ T1227] pwc: Failed to set LED on/off time (-71) [ 234.045820][ T7442] ALSA: mixer_oss: invalid OSS volume 'P' [ 234.052728][ T1227] pwc: send_video_command error -71 [ 234.066610][ T1227] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 234.075641][ T1227] Philips webcam 5-1:1.0: probe with driver Philips webcam failed with error -71 [ 234.096022][ T1227] usb 5-1: USB disconnect, device number 10 [ 234.100705][ T7442] ALSA: mixer_oss: invalid OSS volume '÷ÅPî–EãŽÅŽà0Swëª{ú_ÂàJ×Ñ—Ø,4{' [ 234.396939][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'. [ 235.728559][ T30] audit: type=1400 audit(1785298325.944:460): avc: denied { write } for pid=7464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.942703][ T804] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 235.964798][ T7501] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 235.964798][ T7501] Please contact the netfilter-devel mailing list or update your nftables rules. [ 236.051056][ T7502] Cannot find set identified by id 0 to match [ 236.196243][ T804] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 236.394002][ T804] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 236.405250][ T804] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 236.417078][ T804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.433924][ T7490] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 236.447716][ T804] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 236.527995][ T7466] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.273333][ T30] audit: type=1400 audit(1785298327.484:461): avc: denied { write } for pid=7504 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.713081][ T5797] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 237.933112][ T5797] usb 2-1: Using ep0 maxpacket: 8 [ 238.035445][ T5797] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.139631][ T5797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.253995][ T5797] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 238.622131][ T1227] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 238.952699][ T1227] usb 5-1: Using ep0 maxpacket: 16 [ 239.063880][ T1227] usb 5-1: unable to get BOS descriptor or descriptor too short [ 239.208982][ T1227] usb 5-1: config 1 interface 0 has no altsetting 0 [ 239.243307][ T5797] usb 2-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 239.254187][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.266097][ T5797] usb 2-1: Product: syz [ 239.270288][ T5797] usb 2-1: Manufacturer: syz [ 239.276752][ T5797] usb 2-1: SerialNumber: syz [ 239.285651][ T5797] usb 2-1: config 0 descriptor?? [ 239.310687][ T1227] usb 5-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 239.347192][ T1227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.364680][ T10] usb 3-1: USB disconnect, device number 8 [ 239.386330][ T1227] usb 5-1: Product: syz [ 239.414640][ T1227] usb 5-1: Manufacturer: syz [ 239.420518][ T1227] usb 5-1: SerialNumber: syz [ 239.486743][ T7541] netlink: 148 bytes leftover after parsing attributes in process `syz.2.399'. [ 239.690450][ T1227] pwc: Sotec Afina Eye USB webcam detected. [ 239.700045][ T1227] pwc: Failed to set LED on/off time (-71) [ 239.723515][ T1227] pwc: send_video_command error -71 [ 239.739347][ T1227] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 239.768030][ T1227] Philips webcam 5-1:1.0: probe with driver Philips webcam failed with error -71 [ 239.917744][ T804] usb 2-1: USB disconnect, device number 14 [ 240.178691][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 240.722281][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 240.954456][ T1227] usb 5-1: USB disconnect, device number 11 [ 240.992510][ T7550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 241.062783][ T7550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 241.090389][ T30] audit: type=1400 audit(1785298331.304:462): avc: denied { setopt } for pid=7556 comm="syz.1.402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.135447][ T30] audit: type=1400 audit(1785298331.304:463): avc: denied { read } for pid=7556 comm="syz.1.402" path="socket:[13983]" dev="sockfs" ino=13983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.856921][ T30] audit: type=1400 audit(1785298332.034:464): avc: denied { getopt } for pid=7562 comm="syz.0.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 242.262885][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 242.499246][ T9] usb 1-1: config 1 has an invalid interface number: 205 but max is 0 [ 242.585749][ T9] usb 1-1: config 1 has no interface number 0 [ 242.700943][ T9] usb 1-1: config 1 interface 205 has no altsetting 0 [ 242.911066][ T9] usb 1-1: New USB device found, idVendor=0421, idProduct=04d8, bcdDevice=eb.28 [ 243.054450][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.127377][ T9] usb 1-1: Product: syz [ 243.185273][ T9] usb 1-1: Manufacturer: syz [ 243.214653][ T9] usb 1-1: SerialNumber: syz [ 243.437033][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 243.807213][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 243.902462][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.915350][ T10] usb 5-1: config 14 has an invalid interface number: 232 but max is 1 [ 243.924318][ T10] usb 5-1: config 14 has an invalid interface number: 220 but max is 1 [ 244.041557][ T7576] overlayfs: failed to resolve './file0': -2 [ 244.129145][ T10] usb 5-1: config 14 has no interface number 0 [ 244.465821][ T10] usb 5-1: config 14 has no interface number 1 [ 244.490481][ T10] usb 5-1: config 14 interface 220 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 244.544195][ T10] usb 5-1: config 14 interface 220 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 244.575590][ T7569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.674124][ T7572] ALSA: mixer_oss: invalid OSS volume 'P' [ 244.698449][ T7572] ALSA: mixer_oss: invalid OSS volume '÷ÅPî–EãŽÅŽà0Swëª{ú_ÂàJ×Ñ—Ø,4{' [ 244.728901][ T9] rndis_host 1-1:1.205: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 245.663750][ T9] cdc_acm 1-1:1.205: Zero length descriptor references [ 246.009909][ T10] usb 5-1: config 14 interface 232 has no altsetting 0 [ 246.016904][ T9] cdc_acm 1-1:1.205: probe with driver cdc_acm failed with error -22 [ 246.025879][ T10] usb 5-1: config 14 interface 220 has no altsetting 0 [ 246.043364][ T9] usb 1-1: USB disconnect, device number 11 [ 246.062748][ T10] usb 5-1: string descriptor 0 read error: -71 [ 246.069566][ T10] usb 5-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=d0.d9 [ 246.080929][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.117220][ T10] usb 5-1: can't set config #14, error -71 [ 246.138984][ T10] usb 5-1: USB disconnect, device number 12 [ 246.367766][ T30] audit: type=1400 audit(1785298336.544:465): avc: denied { ioctl } for pid=7587 comm="syz.2.412" path="/94/file0" dev="tmpfs" ino=513 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 246.689252][ T30] audit: type=1400 audit(1785298336.904:466): avc: denied { bind } for pid=7604 comm="syz.3.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.724440][ T7605] erofs (device loop3): cannot find valid erofs superblock [ 246.860781][ T30] audit: type=1326 audit(1785298337.074:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.2.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170599de99 code=0x7ffc0000 [ 246.999594][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 247.167362][ T30] audit: type=1326 audit(1785298337.074:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.2.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170599de99 code=0x7ffc0000 [ 247.195446][ T30] audit: type=1326 audit(1785298337.114:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.2.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170599de99 code=0x7ffc0000 [ 247.239297][ T30] audit: type=1326 audit(1785298337.114:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.2.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f170599de99 code=0x7ffc0000 [ 247.395247][ T30] audit: type=1326 audit(1785298337.114:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.2.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170599de99 code=0x7ffc0000 [ 247.438870][ T30] audit: type=1326 audit(1785298337.114:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.2.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170599de99 code=0x7ffc0000 [ 247.442425][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 247.493541][ T30] audit: type=1326 audit(1785298337.114:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.2.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f170599de99 code=0x7ffc0000 [ 247.529589][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 247.547969][ T30] audit: type=1326 audit(1785298337.114:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7610 comm="syz.2.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f170599dc02 code=0x7ffc0000 [ 247.557515][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 247.666535][ T10] usb 5-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 247.708420][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.730937][ T10] usb 5-1: Product: syz [ 247.747016][ T10] usb 5-1: Manufacturer: syz [ 247.755802][ T10] usb 5-1: SerialNumber: syz [ 247.809658][ T7632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 247.832805][ T1227] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 247.947331][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 247.996315][ T1227] usb 1-1: Using ep0 maxpacket: 8 [ 248.018713][ T10] pwc: Sotec Afina Eye USB webcam detected. [ 248.035182][ T1227] usb 1-1: unable to get BOS descriptor or descriptor too short [ 248.055013][ T1227] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 248.065785][ T10] pwc: Failed to set LED on/off time (-71) [ 248.075966][ T1227] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.087251][ T7632] hsr_slave_0 (unregistering): left promiscuous mode [ 248.095478][ T10] pwc: send_video_command error -71 [ 248.104301][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 248.120926][ T1227] usb 1-1: config 0 has no interface number 0 [ 248.128590][ T10] Philips webcam 5-1:1.0: probe with driver Philips webcam failed with error -71 [ 248.141079][ T1227] usb 1-1: config 0 interface 49 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 248.167985][ T10] usb 5-1: USB disconnect, device number 13 [ 248.178332][ T1227] usb 1-1: config 0 interface 49 has no altsetting 0 [ 248.206850][ T1227] usb 1-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=f7.67 [ 248.224426][ T1227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.234018][ T1227] usb 1-1: Product: syz [ 248.238641][ T1227] usb 1-1: Manufacturer: syz [ 248.246454][ T1227] usb 1-1: SerialNumber: syz [ 248.514149][ T1227] usb 1-1: config 0 descriptor?? [ 248.698126][ T1227] rtsx_usb 1-1:0.49: probe with driver rtsx_usb failed with error -22 [ 248.837090][ T5797] usb 1-1: USB disconnect, device number 12 [ 251.021566][ T7660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=7660 comm=syz.1.429 [ 251.475495][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 251.475527][ T30] audit: type=1400 audit(1785298341.694:495): avc: denied { open } for pid=7658 comm="syz.1.429" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 252.054312][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 252.770719][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 254.244637][ T7695] overlayfs: failed to resolve './file0': -2 [ 254.422258][ T1227] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 254.660374][ T7689] ALSA: mixer_oss: invalid OSS volume 'P' [ 254.697904][ T1227] usb 4-1: Using ep0 maxpacket: 16 [ 255.063957][ T7689] ALSA: mixer_oss: invalid OSS volume '÷ÅPî–EãŽÅŽà0Swëª{ú_ÂàJ×Ñ—Ø,4{' [ 255.402436][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.409215][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.773693][ T1227] usb 4-1: unable to get BOS descriptor or descriptor too short [ 255.799474][ T1227] usb 4-1: config 1 interface 0 has no altsetting 0 [ 255.810352][ T1227] usb 4-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 255.823342][ T1227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.832520][ T1227] usb 4-1: Product: syz [ 255.836729][ T1227] usb 4-1: Manufacturer: syz [ 255.842807][ T1227] usb 4-1: SerialNumber: syz [ 256.162313][ T7717] overlayfs: failed to resolve './file0': -2 [ 256.958340][ T7713] ALSA: mixer_oss: invalid OSS volume 'P' [ 257.037580][ T7713] ALSA: mixer_oss: invalid OSS volume '÷ÅPî–EãŽÅŽà0Swëª{ú_ÂàJ×Ñ—Ø,4{' [ 257.423213][ T1227] pwc: Sotec Afina Eye USB webcam detected. [ 257.430151][ T1227] pwc: Failed to set LED on/off time (-71) [ 257.438439][ T1227] pwc: send_video_command error -71 [ 257.445393][ T1227] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 257.456040][ T1227] Philips webcam 4-1:1.0: probe with driver Philips webcam failed with error -71 [ 257.513606][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 258.457940][ T1227] usb 4-1: USB disconnect, device number 8 [ 259.076149][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 259.116142][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.447'. [ 262.316639][ T30] audit: type=1400 audit(1785298352.534:496): avc: denied { name_bind } for pid=7766 comm="syz.3.457" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 262.413677][ T5797] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 262.833156][ T5797] usb 2-1: Using ep0 maxpacket: 16 [ 262.838430][ T7779] overlayfs: failed to resolve './file0': -2 [ 262.848196][ T5797] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.887256][ T5797] usb 2-1: config 1 interface 0 has no altsetting 0 [ 262.997672][ T5797] usb 2-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 263.072234][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.114359][ T5797] usb 2-1: Product: syz [ 263.123531][ T5797] usb 2-1: Manufacturer: syz [ 263.128255][ T5797] usb 2-1: SerialNumber: syz [ 263.277416][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.459'. [ 263.816635][ T7775] ALSA: mixer_oss: invalid OSS volume 'P' [ 263.861057][ T7775] ALSA: mixer_oss: invalid OSS volume '÷ÅPî–EãŽÅŽà0Swëª{ú_ÂàJ×Ñ—Ø,4{' [ 263.869442][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 263.899432][ T5797] pwc: Sotec Afina Eye USB webcam detected. [ 263.926891][ T5797] pwc: Failed to set LED on/off time (-71) [ 263.953151][ T5797] pwc: send_video_command error -71 [ 263.960431][ T5797] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 264.003055][ T10] usb 3-1: device descriptor read/64, error -71 [ 264.030660][ T5797] Philips webcam 2-1:1.0: probe with driver Philips webcam failed with error -71 [ 264.050126][ T5797] usb 2-1: USB disconnect, device number 15 [ 264.258298][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 264.403009][ T10] usb 3-1: device descriptor read/64, error -71 [ 264.815063][ T10] usb usb3-port1: attempt power cycle [ 265.329811][ T7814] netlink: 48 bytes leftover after parsing attributes in process `syz.1.470'. [ 266.671330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 266.854971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 267.614924][ T30] audit: type=1400 audit(1785298357.424:497): avc: denied { write } for pid=7817 comm="syz.3.471" laddr=fe80::a4ee:3bff:fe48:1d10 lport=24153 faddr=ff02::1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 271.167912][ T30] audit: type=1326 audit(1785298361.364:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7846 comm="syz.2.481" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f170599de99 code=0x0 [ 271.203083][ T5699] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 271.363586][ T5699] usb 4-1: Using ep0 maxpacket: 16 [ 271.964556][ T5699] usb 4-1: unable to get BOS descriptor or descriptor too short [ 271.975011][ T5699] usb 4-1: config 1 interface 0 has no altsetting 0 [ 271.984409][ T5699] usb 4-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 271.994545][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.005710][ T5699] usb 4-1: Product: syz [ 272.010589][ T5699] usb 4-1: Manufacturer: syz [ 272.017102][ T5699] usb 4-1: SerialNumber: syz [ 272.207010][ T7860] loop4: detected capacity change from 0 to 7 [ 272.218625][ T7860] Dev loop4: unable to read RDB block 7 [ 272.236377][ T7860] loop4: AHDI p1 p2 p3 [ 272.246478][ T7860] loop4: partition table partially beyond EOD, truncated [ 272.277106][ T7860] loop4: p1 start 1601398130 is beyond EOD, truncated [ 272.296200][ T7860] loop4: p2 start 1702059890 is beyond EOD, truncated [ 272.297852][ T5699] pwc: Sotec Afina Eye USB webcam detected. [ 272.345803][ T5699] pwc: Failed to set LED on/off time (-71) [ 272.353009][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 272.387901][ T5699] pwc: send_video_command error -71 [ 272.405773][ T5699] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 272.426466][ T5699] Philips webcam 4-1:1.0: probe with driver Philips webcam failed with error -71 [ 272.469019][ T5699] usb 4-1: USB disconnect, device number 9 [ 273.153038][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 273.330578][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 273.508610][ T10] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 273.518116][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 273.535376][ T7866] overlayfs: failed to resolve './file0': -2 [ 273.549132][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.564020][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.592595][ T10] usb 1-1: Product: syz [ 273.633832][ T10] usb 1-1: Manufacturer: syz [ 273.649419][ T10] usb 1-1: SerialNumber: syz [ 273.891246][ T30] audit: type=1400 audit(1785298364.094:499): avc: denied { append } for pid=7875 comm="syz.4.488" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 274.401089][ T30] audit: type=1400 audit(1785298364.614:500): avc: denied { unlink } for pid=7883 comm="syz.3.490" name="#1" dev="tmpfs" ino=515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 274.480805][ T30] audit: type=1400 audit(1785298364.664:501): avc: denied { mount } for pid=7883 comm="syz.3.490" name="/" dev="overlay" ino=511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 274.525195][ T7885] sctp: [Deprecated]: syz.3.490 (pid 7885) Use of int in max_burst socket option deprecated. [ 274.525195][ T7885] Use struct sctp_assoc_value instead [ 274.736584][ T30] audit: type=1400 audit(1785298364.734:502): avc: denied { getopt } for pid=7883 comm="syz.3.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 274.800039][ T1227] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 275.121944][ T1227] usb 3-1: Using ep0 maxpacket: 32 [ 275.129150][ T1227] usb 3-1: unable to get BOS descriptor or descriptor too short [ 275.158999][ T1227] usb 3-1: config 14 has an invalid interface number: 232 but max is 1 [ 275.197442][ T1227] usb 3-1: config 14 has an invalid interface number: 220 but max is 1 [ 275.231019][ T1227] usb 3-1: config 14 has no interface number 0 [ 275.250064][ T1227] usb 3-1: config 14 has no interface number 1 [ 275.266684][ T1227] usb 3-1: config 14 interface 220 altsetting 5 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 275.304928][ T1227] usb 3-1: config 14 interface 220 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 275.330727][ T1227] usb 3-1: config 14 interface 232 has no altsetting 0 [ 275.348610][ T1227] usb 3-1: config 14 interface 220 has no altsetting 0 [ 275.370644][ T1227] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=d0.d9 [ 275.390320][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.403410][ T1227] usb 3-1: Product: syz [ 275.407665][ T1227] usb 3-1: Manufacturer: syz [ 275.414048][ T1227] usb 3-1: SerialNumber: syz [ 275.469087][ T30] audit: type=1400 audit(1785298365.684:503): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 275.578826][ T7903] netlink: 'syz.4.493': attribute type 3 has an invalid length. [ 276.167907][ T1227] mct_u232 3-1:14.232: MCT U232 converter detected [ 276.528964][ T5699] usb 1-1: USB disconnect, device number 13 [ 276.744151][ T1227] mct_u232 ttyUSB0: expected endpoint missing [ 276.765062][ T1227] mct_u232 3-1:14.220: MCT U232 converter detected [ 276.778892][ T1227] mct_u232 ttyUSB1: expected endpoint missing [ 276.803191][ T1227] usb 3-1: USB disconnect, device number 12 [ 276.834335][ T1227] mct_u232 3-1:14.232: device disconnected [ 276.865595][ T1227] mct_u232 3-1:14.220: device disconnected [ 278.302319][ T30] audit: type=1400 audit(1785298368.514:504): avc: denied { setopt } for pid=7925 comm="syz.0.503" lport=38731 faddr=2001:: fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 279.928773][ T30] audit: type=1400 audit(1785298370.144:505): avc: denied { bind } for pid=7943 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 280.048525][ T30] audit: type=1400 audit(1785298370.144:506): avc: denied { setopt } for pid=7943 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 280.079782][ T7945] netlink: 36 bytes leftover after parsing attributes in process `syz.0.506'. [ 280.149777][ T7945] netlink: 'syz.0.506': attribute type 11 has an invalid length. [ 280.154092][ T7956] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 281.100342][ T30] audit: type=1400 audit(1785298370.774:507): avc: denied { listen } for pid=7963 comm="syz.1.511" lport=42183 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 281.420907][ T7973] capability: warning: `syz.3.514' uses deprecated v2 capabilities in a way that may be insecure [ 281.458961][ T30] audit: type=1400 audit(1785298370.784:508): avc: denied { accept } for pid=7963 comm="syz.1.511" lport=42183 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 281.722291][ T30] audit: type=1400 audit(1785298370.784:509): avc: denied { write } for pid=7963 comm="syz.1.511" lport=42183 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 282.153624][ T30] audit: type=1400 audit(1785298371.754:510): avc: denied { setopt } for pid=7971 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 282.280273][ T7982] x_tables: unsorted underflow at hook 3 [ 282.489348][ T30] audit: type=1400 audit(1785298372.684:511): avc: denied { watch_reads } for pid=7981 comm="syz.4.517" path="/89" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 282.883646][ T30] audit: type=1400 audit(1785298373.064:512): avc: denied { getopt } for pid=7986 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 283.115930][ T30] audit: type=1400 audit(1785298373.314:513): avc: denied { write } for pid=7986 comm="syz.1.519" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 283.406776][ T8000] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 283.444441][ T30] audit: type=1400 audit(1785298373.324:514): avc: denied { rename } for pid=7981 comm="syz.4.517" name="file0" dev="tmpfs" ino=512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 287.561319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 287.579518][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.531'. [ 290.024762][ T5793] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 290.213737][ T5793] usb 1-1: Using ep0 maxpacket: 16 [ 290.687116][ T5793] usb 1-1: unable to get BOS descriptor or descriptor too short [ 291.020278][ T8089] overlayfs: failed to resolve './file0': -2 [ 291.047624][ T5793] usb 1-1: config 1 interface 0 has no altsetting 0 [ 291.079330][ T5793] usb 1-1: New USB device found, idVendor=04cc, idProduct=8116, bcdDevice=e7.53 [ 291.089592][ T5793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.106826][ T8066] ALSA: mixer_oss: invalid OSS volume 'P' [ 291.117753][ T5793] usb 1-1: Product: syz [ 291.126704][ T5793] usb 1-1: Manufacturer: syz [ 291.128224][ T8066] ALSA: mixer_oss: invalid OSS volume '÷ÅPî–EãŽÅŽà0Swëª{ú_ÂàJ×Ñ—Ø,4{' [ 291.134235][ T8072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.155797][ T5793] usb 1-1: SerialNumber: syz [ 291.204914][ T8081] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 291.213720][ T8081] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 291.281155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 291.434092][ T5793] pwc: Sotec Afina Eye USB webcam detected. [ 291.463473][ T5793] pwc: Failed to set LED on/off time (-71) [ 291.474227][ T5793] pwc: send_video_command error -71 [ 291.483945][ T8098] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.497299][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.542'. [ 291.507172][ T5793] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 291.516233][ T5793] Philips webcam 1-1:1.0: probe with driver Philips webcam failed with error -71 [ 291.545090][ T5793] usb 1-1: USB disconnect, device number 14 [ 292.019274][ T8097] bond1: entered promiscuous mode [ 292.028619][ T8097] bond1: entered allmulticast mode [ 293.203041][ T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 293.594384][ T10] usb 3-1: too many configurations: 164, using maximum allowed: 8 [ 293.623411][ T10] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 293.623444][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.625939][ T10] usb 3-1: config 0 descriptor?? [ 293.868473][ T10] usb 3-1: USB disconnect, device number 13 [ 294.242771][ T8134] overlayfs: failed to resolve './file0': -2 [ 295.206283][ T8128] ALSA: mixer_oss: invalid OSS volume 'P' [ 295.329590][ T8128] ALSA: mixer_oss: invalid OSS volume '÷ÅPî–EãŽÅŽà0Swëª{ú_ÂàJ×Ñ—Ø,4{' [ 295.486682][ T8148] o2cb: This node has not been configured. [ 295.494553][ T8148] o2cb: Cluster check failed. Fix errors before retrying. [ 295.503677][ T8148] (syz.1.555,8148,1):user_dlm_register:674 ERROR: status = -22 [ 295.513231][ T8148] (syz.1.555,8148,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 295.532735][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 295.532749][ T30] audit: type=1400 audit(1785298385.694:517): avc: denied { write } for pid=8141 comm="syz.1.555" name="/" dev="ocfs2_dlmfs" ino=16014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.874616][ T30] audit: type=1400 audit(1785298385.704:518): avc: denied { add_name } for pid=8141 comm="syz.1.555" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.925053][ T30] audit: type=1400 audit(1785298385.704:519): avc: denied { create } for pid=8141 comm="syz.1.555" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 295.947458][ T30] audit: type=1400 audit(1785298385.704:520): avc: denied { associate } for pid=8141 comm="syz.1.555" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 296.213226][ T30] audit: type=1400 audit(1785298386.424:521): avc: denied { execmod } for pid=8161 comm="syz.1.562" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 296.243563][ T30] audit: type=1400 audit(1785298386.454:522): avc: denied { execute } for pid=8161 comm="syz.1.562" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 296.423870][ T5793] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 296.586427][ T5793] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 296.597288][ T5793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.606445][ T5793] usb 5-1: Product: syz [ 296.610658][ T5793] usb 5-1: Manufacturer: syz [ 296.617457][ T5793] usb 5-1: SerialNumber: syz [ 297.516413][ T5793] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 297.574194][ T8184] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.639185][ T5793] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 297.664112][ T30] audit: type=1400 audit(1785298387.874:523): avc: denied { ioctl } for pid=8183 comm="syz.1.570" path="socket:[16146]" dev="sockfs" ino=16146 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 297.739136][ T8189] capability: warning: `syz.0.571' uses 32-bit capabilities (legacy support in use) [ 297.784735][ T8189] program syz.0.571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.024450][ T30] audit: type=1400 audit(1785298388.244:524): avc: denied { mmap_zero } for pid=8188 comm="syz.2.572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 298.185507][ T30] audit: type=1400 audit(1785298388.404:525): avc: denied { bind } for pid=8197 comm="syz.3.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 298.567368][ T8211] syz.0.578 uses obsolete (PF_INET,SOCK_PACKET) [ 298.947725][ T8205] kvm: apic: phys broadcast and lowest prio [ 299.269358][ T30] audit: type=1400 audit(1785298389.484:526): avc: denied { write } for pid=8214 comm="syz.1.581" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 299.366006][ T5793] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE [ 300.287586][ T5793] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 300.309630][ T5793] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 300.416195][ T5793] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 300.495441][ T5793] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 300.600590][ T5793] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 300.670243][ T5793] usb 5-1: USB disconnect, device number 14 [ 300.727813][ T30] audit: type=1400 audit(1785298390.934:527): avc: denied { ioctl } for pid=8228 comm="syz.3.585" path="socket:[15295]" dev="sockfs" ino=15295 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 300.964194][ T30] audit: type=1400 audit(1785298391.184:528): avc: denied { read } for pid=8238 comm="syz.2.590" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 301.016986][ T8239] binder: 8238:8239 ioctl c0306201 2000000005c0 returned -22 [ 301.034633][ T30] audit: type=1400 audit(1785298391.214:529): avc: denied { open } for pid=8238 comm="syz.2.590" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 301.115824][ T30] audit: type=1400 audit(1785298391.234:530): avc: denied { ioctl } for pid=8238 comm="syz.2.590" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 301.116598][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.3.591'. [ 303.507477][ T30] audit: type=1400 audit(1785298393.724:531): avc: denied { write } for pid=8280 comm="syz.1.603" name="nfsd.fh" dev="proc" ino=4026532860 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 303.569227][ T8283] loop2: detected capacity change from 0 to 7 [ 303.585018][ T30] audit: type=1400 audit(1785298393.754:532): avc: denied { add_name } for pid=8280 comm="syz.1.603" name="channel" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_rpc_t tclass=dir permissive=1 [ 303.647475][ T8283] Dev loop2: unable to read RDB block 7 [ 303.666023][ T8283] loop2: unable to read partition table [ 303.680072][ T8283] loop2: partition table beyond EOD, truncated [ 303.689436][ T30] audit: type=1400 audit(1785298393.754:533): avc: denied { create } for pid=8280 comm="syz.1.603" name="channel" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysctl_rpc_t tclass=file permissive=1 [ 303.714567][ T8283] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 304.859995][ T30] audit: type=1400 audit(1785298393.754:534): avc: denied { associate } for pid=8280 comm="syz.1.603" name="channel" scontext=root:object_r:sysctl_rpc_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 304.976666][ T30] audit: type=1400 audit(1785298394.534:535): avc: denied { write } for pid=8284 comm="syz.3.606" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 305.722145][ T30] audit: type=1400 audit(1785298394.534:536): avc: denied { open } for pid=8284 comm="syz.3.606" path="/dev/mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 305.770856][ T8295] random: crng reseeded on system resumption [ 305.780321][ T30] audit: type=1400 audit(1785298395.984:537): avc: denied { write } for pid=8292 comm="syz.2.609" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 305.818881][ T30] audit: type=1400 audit(1785298395.984:538): avc: denied { open } for pid=8292 comm="syz.2.609" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 306.116555][ T30] audit: type=1400 audit(1785298396.334:539): avc: denied { connect } for pid=8299 comm="syz.4.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 306.886661][ T30] audit: type=1400 audit(1785298396.404:540): avc: denied { bind } for pid=8298 comm="syz.1.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 306.950006][ T30] audit: type=1400 audit(1785298396.414:541): avc: denied { name_bind } for pid=8298 comm="syz.1.611" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 307.283675][ T30] audit: type=1400 audit(1785298396.414:542): avc: denied { node_bind } for pid=8298 comm="syz.1.611" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 307.305531][ T8310] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 307.324537][ T8302] IPVS: stopping master sync thread 8310 ... [ 307.347607][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 307.683393][ T30] audit: type=1400 audit(1785298397.864:543): avc: denied { ioctl } for pid=8313 comm="syz.4.615" path="socket:[16473]" dev="sockfs" ino=16473 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 307.785211][ T8318] netlink: 84 bytes leftover after parsing attributes in process `syz.1.616'. [ 308.690184][ T30] audit: type=1400 audit(1785298398.074:544): avc: denied { create } for pid=8312 comm="syz.1.616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 309.688075][ T30] audit: type=1400 audit(1785298399.904:545): avc: denied { setopt } for pid=8326 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 309.775019][ T30] audit: type=1400 audit(1785298399.974:546): avc: denied { connect } for pid=8326 comm="syz.1.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 310.145564][ T8340] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.163266][ T1227] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 310.206002][ T5605] FAULT_INJECTION: forcing a failure. [ 310.206002][ T5605] name failslab, interval 1, probability 1, space 0, times 100 [ 310.216164][ T1033] FAULT_INJECTION: forcing a failure. [ 310.216164][ T1033] name failslab, interval 1, probability 1, space 0, times 100 [ 310.232391][ T1033] CPU: 0 UID: 0 PID: 1033 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.232410][ T1033] Tainted: [L]=SOFTLOCKUP [ 310.232414][ T1033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 310.232424][ T1033] Workqueue: events_unbound nsim_dev_trap_report_work [ 310.232446][ T1033] Call Trace: [ 310.232451][ T1033] [ 310.232456][ T1033] dump_stack_lvl+0x100/0x190 [ 310.232472][ T1033] should_fail_ex.cold+0x5/0xa [ 310.232493][ T1033] should_failslab+0xc2/0x120 [ 310.232510][ T1033] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 310.232525][ T1033] ? __alloc_skb+0x140/0x710 [ 310.232542][ T1033] __alloc_skb+0x140/0x710 [ 310.232554][ T1033] ? __alloc_skb+0x5b7/0x710 [ 310.232567][ T1033] ? __pfx___alloc_skb+0x10/0x10 [ 310.232582][ T1033] ? kfree_skbmem+0x19f/0x210 [ 310.232602][ T1033] nsim_dev_trap_report_work+0x2af/0xd20 [ 310.232623][ T1033] process_one_work+0xa23/0x1940 [ 310.232644][ T1033] ? __pfx_process_one_work+0x10/0x10 [ 310.232661][ T1033] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 310.232677][ T1033] worker_thread+0x5ef/0xe50 [ 310.232696][ T1033] ? kthread+0x13a/0x450 [ 310.232707][ T1033] ? __pfx_worker_thread+0x10/0x10 [ 310.232719][ T1033] kthread+0x370/0x450 [ 310.232729][ T1033] ? __pfx_kthread+0x10/0x10 [ 310.232741][ T1033] ret_from_fork+0x72b/0xd50 [ 310.232760][ T1033] ? __pfx_ret_from_fork+0x10/0x10 [ 310.232777][ T1033] ? __switch_to+0x800/0x10f0 [ 310.232789][ T1033] ? __pfx_kthread+0x10/0x10 [ 310.232801][ T1033] ret_from_fork_asm+0x1a/0x30 [ 310.232827][ T1033] [ 310.385279][ T5605] CPU: 1 UID: 0 PID: 5605 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 310.385310][ T5605] Tainted: [L]=SOFTLOCKUP [ 310.385318][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 310.385330][ T5605] Call Trace: [ 310.385338][ T5605] [ 310.385346][ T5605] dump_stack_lvl+0x100/0x190 [ 310.385378][ T5605] should_fail_ex.cold+0x5/0xa [ 310.385405][ T5605] should_failslab+0xc2/0x120 [ 310.385434][ T5605] kmem_cache_alloc_noprof+0x91/0x6a0 [ 310.385462][ T5605] ? ptlock_alloc+0x1f/0x70 [ 310.385500][ T5605] ptlock_alloc+0x1f/0x70 [ 310.385532][ T5605] pte_alloc_one+0x82/0x3d0 [ 310.385557][ T5605] __pte_alloc+0x6d/0x3e0 [ 310.385583][ T5605] ? __pfx___pte_alloc+0x10/0x10 [ 310.385609][ T5605] ? __pfx___might_resched+0x10/0x10 [ 310.385635][ T5605] ? copy_page_range+0x1c4a/0x5b20 [ 310.385673][ T5605] copy_page_range+0x3dd8/0x5b20 [ 310.385739][ T5605] ? mas_wr_store_entry+0xa1/0x1e80 [ 310.385770][ T5605] ? __pfx_copy_page_range+0x10/0x10 [ 310.385815][ T5605] ? __pfx___might_resched+0x10/0x10 [ 310.385845][ T5605] ? dup_mmap+0xcfe/0x21b0 [ 310.385875][ T5605] ? down_write+0x146/0x1f0 [ 310.385905][ T5605] ? up_write+0x2e5/0x5c0 [ 310.385937][ T5605] dup_mmap+0xd44/0x21b0 [ 310.385984][ T5605] ? __pfx_dup_mmap+0x10/0x10 [ 310.386013][ T5605] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 310.386043][ T5605] ? __lock_acquire+0x49f/0x1a40 [ 310.386071][ T5605] ? find_held_lock+0x2b/0x80 [ 310.386103][ T5605] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 310.386156][ T5605] copy_process+0x4588/0x8030 [ 310.386203][ T5605] ? __pfx_copy_process+0x10/0x10 [ 310.386232][ T5605] ? do_raw_spin_lock+0x128/0x260 [ 310.386278][ T5605] kernel_clone+0x176/0x9d0 [ 310.386310][ T5605] ? __pfx_kernel_clone+0x10/0x10 [ 310.386349][ T5605] ? find_held_lock+0x2b/0x80 [ 310.386381][ T5605] ? __might_fault+0xc5/0x140 [ 310.386406][ T5605] __do_sys_clone+0xd9/0x120 [ 310.386437][ T5605] ? __pfx___do_sys_clone+0x10/0x10 [ 310.386492][ T5605] do_syscall_64+0x115/0x870 [ 310.386516][ T5605] ? clear_bhb_loop+0x40/0x90 [ 310.386544][ T5605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.386568][ T5605] RIP: 0033:0x7fee3e9c6912 [ 310.386586][ T5605] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 310.386608][ T5605] RSP: 002b:00007ffe2775bea0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 310.386639][ T5605] RAX: ffffffffffffffda RBX: 00007ffe2775bea0 RCX: 00007fee3e9c6912 [ 310.386654][ T5605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 310.386668][ T5605] RBP: 00007ffe2775c02c R08: 0000000000000000 R09: 0000000000000001 [ 310.386682][ T5605] R10: 000055557ce7f7d0 R11: 0000000000000246 R12: 0000000000000001 [ 310.386696][ T5605] R13: 00000000000927c0 R14: 000000000004bb60 R15: 00007ffe2775c080 [ 310.386725][ T5605] [ 310.400899][ T12] FAULT_INJECTION: forcing a failure. [ 310.400899][ T12] name failslab, interval 1, probability 1, space 0, times 97 [ 310.400960][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.400988][ T12] Tainted: [L]=SOFTLOCKUP [ 310.400995][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 310.401009][ T12] Workqueue: events_unbound nsim_dev_trap_report_work [ 310.401036][ T12] Call Trace: [ 310.401043][ T12] [ 310.401051][ T12] dump_stack_lvl+0x100/0x190 [ 310.401079][ T12] should_fail_ex.cold+0x5/0xa [ 310.401106][ T12] should_failslab+0xc2/0x120 [ 310.401136][ T12] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 310.401163][ T12] ? __alloc_skb+0x140/0x710 [ 310.401192][ T12] __alloc_skb+0x140/0x710 [ 310.401215][ T12] ? __alloc_skb+0x5b7/0x710 [ 310.401236][ T12] ? __pfx___alloc_skb+0x10/0x10 [ 310.401265][ T12] ? kfree_skbmem+0x19f/0x210 [ 310.401300][ T12] nsim_dev_trap_report_work+0x2af/0xd20 [ 310.401341][ T12] process_one_work+0xa23/0x1940 [ 310.401378][ T12] ? __pfx_process_one_work+0x10/0x10 [ 310.401411][ T12] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 310.401441][ T12] worker_thread+0x5ef/0xe50 [ 310.401482][ T12] ? kthread+0x13a/0x450 [ 310.401502][ T12] ? __pfx_worker_thread+0x10/0x10 [ 310.401523][ T12] kthread+0x370/0x450 [ 310.401544][ T12] ? __pfx_kthread+0x10/0x10 [ 310.401567][ T12] ret_from_fork+0x72b/0xd50 [ 310.401597][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 310.401628][ T12] ? __switch_to+0x800/0x10f0 [ 310.401651][ T12] ? __pfx_kthread+0x10/0x10 [ 310.401674][ T12] ret_from_fork_asm+0x1a/0x30 [ 310.401720][ T12] [ 310.439617][ T4965] FAULT_INJECTION: forcing a failure. [ 310.439617][ T4965] name failslab, interval 1, probability 1, space 0, times 92 [ 310.439647][ T4965] CPU: 1 UID: 0 PID: 4965 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 310.439676][ T4965] Tainted: [L]=SOFTLOCKUP [ 310.439683][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 310.439695][ T4965] Call Trace: [ 310.439701][ T4965] [ 310.439708][ T4965] dump_stack_lvl+0x100/0x190 [ 310.439735][ T4965] should_fail_ex.cold+0x5/0xa [ 310.439760][ T4965] should_failslab+0xc2/0x120 [ 310.439786][ T4965] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 310.439809][ T4965] ? __alloc_skb+0x5b7/0x710 [ 310.439832][ T4965] ? __alloc_skb+0x140/0x710 [ 310.439859][ T4965] __alloc_skb+0x140/0x710 [ 310.439881][ T4965] ? __alloc_skb+0x5b7/0x710 [ 310.439904][ T4965] ? __pfx___alloc_skb+0x10/0x10 [ 310.439926][ T4965] ? __x64_sys_syslog+0x74/0xb0 [ 310.439943][ T4965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.439959][ T4965] alloc_skb_with_frags+0xdd/0x760 [ 310.439981][ T4965] ? find_held_lock+0x2b/0x80 [ 310.439999][ T4965] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 310.440014][ T4965] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 310.440030][ T4965] sock_alloc_send_pskb+0x801/0x980 [ 310.440045][ T4965] ? avc_has_perm+0x135/0x1e0 [ 310.440059][ T4965] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 310.440072][ T4965] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 310.440089][ T4965] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 310.440112][ T4965] unix_dgram_sendmsg+0x3c7/0x1810 [ 310.440132][ T4965] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 310.440149][ T4965] ? selinux_socket_sendmsg+0x198/0x2f0 [ 310.440169][ T4965] __sys_sendto+0x48b/0x4e0 [ 310.440182][ T4965] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 310.440196][ T4965] ? __pfx___sys_sendto+0x10/0x10 [ 310.440209][ T4965] ? trace_sched_exit_tp+0x120/0x160 [ 310.440237][ T4965] ? xfd_validate_state+0x129/0x190 [ 310.440256][ T4965] __x64_sys_sendto+0xe0/0x1c0 [ 310.440269][ T4965] ? do_syscall_64+0x90/0x870 [ 310.440282][ T4965] ? lockdep_hardirqs_on+0x78/0x100 [ 310.440295][ T4965] do_syscall_64+0x115/0x870 [ 310.440307][ T4965] ? clear_bhb_loop+0x40/0x90 [ 310.440322][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.440334][ T4965] RIP: 0033:0x7f58f6fd4407 [ 310.440344][ T4965] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 310.440355][ T4965] RSP: 002b:00007ffc0cfb1440 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 310.440366][ T4965] RAX: ffffffffffffffda RBX: 00007f58f6e84c80 RCX: 00007f58f6fd4407 [ 310.440374][ T4965] RDX: 0000000000000073 RSI: 00007ffc0cfb1580 RDI: 0000000000000003 [ 310.440381][ T4965] RBP: 00007ffc0cfb19b0 R08: 0000000000000000 R09: 0000000000000000 [ 310.440388][ T4965] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc0cfb19c8 [ 310.440396][ T4965] R13: 00007ffc0cfb1580 R14: 0000000000000058 R15: 00007ffc0cfb1580 [ 310.440410][ T4965] [ 310.448337][ T4965] FAULT_INJECTION: forcing a failure. [ 310.448337][ T4965] name failslab, interval 1, probability 1, space 0, times 91 [ 310.448367][ T4965] CPU: 0 UID: 0 PID: 4965 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 310.448398][ T4965] Tainted: [L]=SOFTLOCKUP [ 310.448405][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 310.448418][ T4965] Call Trace: [ 310.448425][ T4965] [ 310.448432][ T4965] dump_stack_lvl+0x100/0x190 [ 310.448461][ T4965] should_fail_ex.cold+0x5/0xa [ 310.448494][ T4965] should_failslab+0xc2/0x120 [ 310.448522][ T4965] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 310.448549][ T4965] ? __alloc_skb+0x5b7/0x710 [ 310.448573][ T4965] ? __alloc_skb+0x140/0x710 [ 310.448601][ T4965] __alloc_skb+0x140/0x710 [ 310.448625][ T4965] ? __alloc_skb+0x5b7/0x710 [ 310.448649][ T4965] ? __pfx___alloc_skb+0x10/0x10 [ 310.448681][ T4965] alloc_skb_with_frags+0xdd/0x760 [ 310.448707][ T4965] ? find_held_lock+0x2b/0x80 [ 310.448738][ T4965] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 310.448763][ T4965] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 310.448792][ T4965] sock_alloc_send_pskb+0x801/0x980 [ 310.448819][ T4965] ? avc_has_perm+0x135/0x1e0 [ 310.448844][ T4965] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 310.448867][ T4965] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 310.448897][ T4965] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 310.448929][ T4965] ? sock_def_readable+0x1d2/0x600 [ 310.448960][ T4965] unix_dgram_sendmsg+0x3c7/0x1810 [ 310.448992][ T4965] ? __pfx_syslog_print+0x10/0x10 [ 310.449017][ T4965] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 310.449048][ T4965] ? selinux_socket_sendmsg+0x198/0x2f0 [ 310.449083][ T4965] __sys_sendto+0x48b/0x4e0 [ 310.449105][ T4965] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 310.449131][ T4965] ? __pfx___sys_sendto+0x10/0x10 [ 310.449161][ T4965] ? do_syslog+0x18c/0x6d0 [ 310.449199][ T4965] ? xfd_validate_state+0x129/0x190 [ 310.449233][ T4965] __x64_sys_sendto+0xe0/0x1c0 [ 310.449255][ T4965] ? do_syscall_64+0x90/0x870 [ 310.449278][ T4965] ? lockdep_hardirqs_on+0x78/0x100 [ 310.449301][ T4965] do_syscall_64+0x115/0x870 [ 310.449323][ T4965] ? clear_bhb_loop+0x40/0x90 [ 310.449348][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.449370][ T4965] RIP: 0033:0x7f58f6fd4407 [ 310.449387][ T4965] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 310.449407][ T4965] RSP: 002b:00007ffc0cfb1440 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 310.449427][ T4965] RAX: ffffffffffffffda RBX: 00007f58f6e84c80 RCX: 00007f58f6fd4407 [ 310.449441][ T4965] RDX: 000000000000004e RSI: 00007ffc0cfb1580 RDI: 0000000000000003 [ 310.449454][ T4965] RBP: 00007ffc0cfb19b0 R08: 0000000000000000 R09: 0000000000000000 [ 310.449467][ T4965] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc0cfb19c8 [ 310.449485][ T4965] R13: 00007ffc0cfb1580 R14: 0000000000000033 R15: 00007ffc0cfb1580 [ 310.449512][ T4965] [ 310.454398][ T4965] FAULT_INJECTION: forcing a failure. [ 310.454398][ T4965] name failslab, interval 1, probability 1, space 0, times 90 [ 310.454429][ T4965] CPU: 0 UID: 0 PID: 4965 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 310.454460][ T4965] Tainted: [L]=SOFTLOCKUP [ 310.454468][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 310.454486][ T4965] Call Trace: [ 310.454493][ T4965] [ 310.454500][ T4965] dump_stack_lvl+0x100/0x190 [ 310.454529][ T4965] should_fail_ex.cold+0x5/0xa [ 310.454556][ T4965] should_failslab+0xc2/0x120 [ 310.454585][ T4965] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 310.454613][ T4965] ? __alloc_skb+0x5b7/0x710 [ 310.454637][ T4965] ? __alloc_skb+0x140/0x710 [ 310.454666][ T4965] __alloc_skb+0x140/0x710 [ 310.454690][ T4965] ? __alloc_skb+0x5b7/0x710 [ 310.454714][ T4965] ? __pfx___alloc_skb+0x10/0x10 [ 310.454738][ T4965] ? __x64_sys_syslog+0x74/0xb0 [ 310.454768][ T4965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.454799][ T4965] alloc_skb_with_frags+0xdd/0x760 [ 310.454828][ T4965] ? find_held_lock+0x2b/0x80 [ 310.454860][ T4965] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 310.454886][ T4965] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 310.454917][ T4965] sock_alloc_send_pskb+0x801/0x980 [ 310.454946][ T4965] ? avc_has_perm+0x135/0x1e0 [ 310.454973][ T4965] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 310.454997][ T4965] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 310.455029][ T4965] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 310.455063][ T4965] ? kasan_quarantine_put+0x104/0x240 [ 310.455095][ T4965] unix_dgram_sendmsg+0x3c7/0x1810 [ 310.455129][ T4965] ? __pfx_syslog_print+0x10/0x10 [ 310.455154][ T4965] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 310.455183][ T4965] ? selinux_socket_sendmsg+0x198/0x2f0 [ 310.455217][ T4965] __sys_sendto+0x48b/0x4e0 [ 310.455238][ T4965] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 310.455262][ T4965] ? __pfx___sys_sendto+0x10/0x10 [ 310.455291][ T4965] ? do_syslog+0x18c/0x6d0 [ 310.455334][ T4965] __x64_sys_sendto+0xe0/0x1c0 [ 310.455356][ T4965] ? do_syscall_64+0x90/0x870 [ 310.455377][ T4965] ? lockdep_hardirqs_on+0x78/0x100 [ 310.455399][ T4965] do_syscall_64+0x115/0x870 [ 310.455422][ T4965] ? clear_bhb_loop+0x40/0x90 [ 310.455448][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.455475][ T4965] RIP: 0033:0x7f58f6fd4407 [ 310.455493][ T4965] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 310.455513][ T4965] RSP: 002b:00007ffc0cfb1440 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 310.455532][ T4965] RAX: ffffffffffffffda RBX: 00007f58f6e84c80 RCX: 00007f58f6fd4407 [ 310.455547][ T4965] RDX: 0000000000000057 RSI: 00007ffc0cfb1580 RDI: 0000000000000003 [ 310.455559][ T4965] RBP: 00007ffc0cfb19b0 R08: 0000000000000000 R09: 0000000000000000 [ 310.455573][ T4965] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc0cfb19c8 [ 310.455586][ T4965] R13: 00007ffc0cfb1580 R14: 000000000000003c R15: 00007ffc0cfb1580 [ 310.455614][ T4965] [ 310.464310][ T5713] FAULT_INJECTION: forcing a failure. [ 310.464310][ T5713] name failslab, interval 1, probability 1, space 0, times 87 [ 310.464369][ T5713] CPU: 0 UID: 0 PID: 5713 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.464400][ T5713] Tainted: [L]=SOFTLOCKUP [ 310.464407][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 310.464421][ T5713] Workqueue: events vidtv_mux_tick [ 310.464448][ T5713] Call Trace: [ 310.464455][ T5713] [ 310.464463][ T5713] dump_stack_lvl+0x100/0x190 [ 310.464497][ T5713] should_fail_ex.cold+0x5/0xa [ 310.464523][ T5713] should_failslab+0xc2/0x120 [ 310.464551][ T5713] __kmalloc_cache_noprof+0x91/0x6c0 [ 310.464585][ T5713] ? vidtv_s302m_encode+0x1c3/0x1860 [ 310.464615][ T5713] vidtv_s302m_encode+0x1c3/0x1860 [ 310.464642][ T5713] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 310.464680][ T5713] ? vidtv_memset+0x50/0x90 [ 310.464701][ T5713] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 310.464724][ T5713] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 310.464754][ T5713] ? kasan_check_range+0xb0/0x1e0 [ 310.464792][ T5713] vidtv_mux_tick+0x4e4/0x1460 [ 310.464842][ T5713] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 310.464872][ T5713] ? __lock_acquire+0x49f/0x1a40 [ 310.464914][ T5713] ? preempt_schedule_thunk+0x16/0x40 [ 310.464943][ T5713] process_one_work+0xa23/0x1940 [ 310.464978][ T5713] ? __pfx_process_one_work+0x10/0x10 [ 310.465010][ T5713] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 310.465040][ T5713] worker_thread+0x5ef/0xe50 [ 310.465071][ T5713] ? __pfx_worker_thread+0x10/0x10 [ 310.465096][ T5713] ? kthread+0x13a/0x450 [ 310.465114][ T5713] ? __pfx_worker_thread+0x10/0x10 [ 310.465136][ T5713] kthread+0x370/0x450 [ 310.465156][ T5713] ? __pfx_kthread+0x10/0x10 [ 310.465179][ T5713] ret_from_fork+0x72b/0xd50 [ 310.465210][ T5713] ? __pfx_ret_from_fork+0x10/0x10 [ 310.465242][ T5713] ? __switch_to+0x800/0x10f0 [ 310.465264][ T5713] ? __pfx_kthread+0x10/0x10 [ 310.465287][ T5713] ret_from_fork_asm+0x1a/0x30 [ 310.465331][ T5713] [ 310.465390][ T5713] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 310.465417][ T5713] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 310.465436][ T5713] CPU: 0 UID: 0 PID: 5713 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.465466][ T5713] Tainted: [L]=SOFTLOCKUP [ 310.465479][ T5713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 310.465493][ T5713] Workqueue: events vidtv_mux_tick [ 310.465519][ T5713] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 310.465547][ T5713] Code: 31 aa f9 31 ff 89 de e8 95 2b aa f9 84 db 0f 85 37 0d 00 00 e8 78 31 aa f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 310.465567][ T5713] RSP: 0018:ffffc9000454f830 EFLAGS: 00010246 [ 310.465584][ T5713] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 310.465598][ T5713] RDX: 0000000000000000 RSI: ffffffff88602ec8 RDI: ffff88813fe238c0 [ 310.465612][ T5713] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 310.465626][ T5713] R10: ffffffff8edee673 R11: 0000000000000001 R12: 0000000000000000 [ 310.465640][ T5713] R13: dffffc0000000000 R14: ffff888076157200 R15: ffff88802e6f2000 [ 310.465655][ T5713] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 310.465674][ T5713] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 310.465688][ T5713] CR2: 00007f89c38f7ff8 CR3: 0000000038e49000 CR4: 00000000003526f0 [ 310.465702][ T5713] Call Trace: [ 310.465708][ T5713] [ 310.465716][ T5713] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 310.465747][ T5713] ? vidtv_memset+0x50/0x90 [ 310.465769][ T5713] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 310.465790][ T5713] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 310.465815][ T5713] ? kasan_check_range+0xb0/0x1e0 [ 310.465846][ T5713] vidtv_mux_tick+0x4e4/0x1460 [ 310.465881][ T5713] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 310.465908][ T5713] ? __lock_acquire+0x49f/0x1a40 [ 310.465937][ T5713] ? preempt_schedule_thunk+0x16/0x40 [ 310.465960][ T5713] process_one_work+0xa23/0x1940 [ 310.465985][ T5713] ? __pfx_process_one_work+0x10/0x10 [ 310.466010][ T5713] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 310.466038][ T5713] worker_thread+0x5ef/0xe50 [ 310.466064][ T5713] ? __pfx_worker_thread+0x10/0x10 [ 310.466087][ T5713] ? kthread+0x13a/0x450 [ 310.466106][ T5713] ? __pfx_worker_thread+0x10/0x10 [ 310.466128][ T5713] kthread+0x370/0x450 [ 310.466148][ T5713] ? __pfx_kthread+0x10/0x10 [ 310.466169][ T5713] ret_from_fork+0x72b/0xd50 [ 310.466198][ T5713] ? __pfx_ret_from_fork+0x10/0x10 [ 310.466226][ T5713] ? __switch_to+0x800/0x10f0 [ 310.466247][ T5713] ? __pfx_kthread+0x10/0x10 [ 310.523553][ T1033] FAULT_INJECTION: forcing a failure. [ 310.523553][ T1033] name failslab, interval 1, probability 1, space 0, times 85 [ 310.524201][ T5713] ret_from_fork_asm+0x1a/0x30 [ 310.529476][ T1033] CPU: 1 UID: 0 PID: 1033 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.529507][ T1033] Tainted: [L]=SOFTLOCKUP [ 310.529515][ T1033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 310.529528][ T1033] Workqueue: events_unbound nsim_dev_trap_report_work [ 310.529555][ T1033] Call Trace: [ 310.529561][ T1033] [ 310.529568][ T1033] dump_stack_lvl+0x100/0x190 [ 310.529592][ T1033] should_fail_ex.cold+0x5/0xa [ 310.529614][ T1033] should_failslab+0xc2/0x120 [ 310.529641][ T1033] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 310.529665][ T1033] ? __alloc_skb+0x5b7/0x710 [ 310.529687][ T1033] ? __alloc_skb+0x140/0x710 [ 310.529711][ T1033] __alloc_skb+0x140/0x710 [ 310.529732][ T1033] ? __alloc_skb+0x5b7/0x710 [ 310.529754][ T1033] ? __pfx___alloc_skb+0x10/0x10 [ 310.529775][ T1033] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 310.529804][ T1033] ? __pfx___might_resched+0x10/0x10 [ 310.529828][ T1033] ? lock_release+0x24d/0x310 [ 310.529853][ T1033] nsim_dev_trap_report_work+0x2af/0xd20 [ 310.529883][ T1033] process_one_work+0xa23/0x1940 [ 310.529911][ T1033] ? __pfx_process_one_work+0x10/0x10 [ 310.529935][ T1033] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 310.529961][ T1033] worker_thread+0x5ef/0xe50 [ 310.529994][ T1033] ? kthread+0x13a/0x450 [ 310.530012][ T1033] ? __pfx_worker_thread+0x10/0x10 [ 310.530033][ T1033] kthread+0x370/0x450 [ 310.530050][ T1033] ? __pfx_kthread+0x10/0x10 [ 310.530070][ T1033] ret_from_fork+0x72b/0xd50 [ 310.530098][ T1033] ? __pfx_ret_from_fork+0x10/0x10 [ 310.530126][ T1033] ? __switch_to+0x800/0x10f0 [ 310.530146][ T1033] ? __pfx_kthread+0x10/0x10 [ 310.530166][ T1033] ret_from_fork_asm+0x1a/0x30 [ 310.530199][ T1033] [ 310.530366][ T1033] FAULT_INJECTION: forcing a failure. [ 310.530366][ T1033] name failslab, interval 1, probability 1, space 0, times 84 [ 310.533845][ T5713] [ 310.533864][ T5713] Modules linked in: [ 310.536121][ T5713] ---[ end trace 0000000000000000 ]--- [ 310.538352][ T1033] CPU: 1 UID: 0 PID: 1033 Comm: kworker/u8:6 Tainted: G D L syzkaller #0 PREEMPT(full) [ 310.538384][ T1033] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 310.538391][ T1033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 310.538405][ T1033] Workqueue: events_unbound nsim_dev_trap_report_work [ 310.538430][ T1033] Call Trace: [ 310.538437][ T1033] [ 310.538443][ T1033] dump_stack_lvl+0x100/0x190 [ 310.538467][ T1033] should_fail_ex.cold+0x5/0xa [ 310.538489][ T1033] should_failslab+0xc2/0x120 [ 310.538516][ T1033] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 310.538540][ T1033] ? __alloc_skb+0x5b7/0x710 [ 310.538562][ T1033] ? __alloc_skb+0x140/0x710 [ 310.538586][ T1033] __alloc_skb+0x140/0x710 [ 310.538607][ T1033] ? __alloc_skb+0x5b7/0x710 [ 310.538629][ T1033] ? __pfx___alloc_skb+0x10/0x10 [ 310.538652][ T1033] ? kfree_skbmem+0x19f/0x210 [ 310.538683][ T1033] nsim_dev_trap_report_work+0x2af/0xd20 [ 310.538713][ T1033] process_one_work+0xa23/0x1940 [ 310.538739][ T1033] ? __pfx_process_one_work+0x10/0x10 [ 310.538765][ T1033] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 310.538791][ T1033] worker_thread+0x5ef/0xe50 [ 310.538817][ T1033] ? kthread+0x13a/0x450 [ 310.538835][ T1033] ? __pfx_worker_thread+0x10/0x10 [ 310.538856][ T1033] kthread+0x370/0x450 [ 310.538874][ T1033] ? __pfx_kthread+0x10/0x10 [ 310.538894][ T1033] ret_from_fork+0x72b/0xd50 [ 310.538922][ T1033] ? __pfx_ret_from_fork+0x10/0x10 [ 310.538950][ T1033] ? __switch_to+0x800/0x10f0 [ 310.538975][ T1033] ? __pfx_kthread+0x10/0x10 [ 310.538994][ T1033] ret_from_fork_asm+0x1a/0x30 [ 310.539029][ T1033] [ 311.241195][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.263994][ T1227] usb 4-1: Using ep0 maxpacket: 16 [ 311.715978][ C0] FAULT_INJECTION: forcing a failure. [ 311.715978][ C0] name failslab, interval 1, probability 1, space 0, times 76 [ 311.716002][ C0] CPU: 0 UID: 0 PID: 1227 Comm: kworker/0:3 Tainted: G D L syzkaller #0 PREEMPT(full) [ 311.716021][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 311.716025][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 311.716034][ C0] Workqueue: usb_hub_wq hub_event [ 311.716052][ C0] Call Trace: [ 311.716056][ C0] [ 311.716061][ C0] dump_stack_lvl+0x100/0x190 [ 311.716077][ C0] should_fail_ex.cold+0x5/0xa [ 311.716090][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.716104][ C0] should_failslab+0xc2/0x120 [ 311.716120][ C0] __kmalloc_cache_noprof+0x91/0x6c0 [ 311.716140][ C0] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 311.716155][ C0] dst_cow_metrics_generic+0x4c/0x1e0 [ 311.716169][ C0] icmp6_dst_alloc+0x418/0x4f0 [ 311.716185][ C0] ndisc_send_skb+0x133f/0x1bf0 [ 311.716201][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 311.716216][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 311.716232][ C0] ? kmalloc_reserve+0xf9/0x350 [ 311.716252][ C0] ? ndisc_alloc_skb+0x319/0x530 [ 311.716266][ C0] ? __asan_memcpy+0x3c/0x60 [ 311.716278][ C0] ndisc_send_rs+0x129/0x680 [ 311.716295][ C0] addrconf_rs_timer+0x424/0x880 [ 311.716309][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 311.716323][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 311.716339][ C0] ? lock_release+0x24d/0x310 [ 311.716354][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 311.716368][ C0] call_timer_fn+0x19a/0x610 [ 311.716381][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 311.716395][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.716419][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.716436][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 311.716450][ C0] __run_timers+0x757/0xb00 [ 311.716465][ C0] ? __pfx___run_timers+0x10/0x10 [ 311.716478][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.716495][ C0] ? clockevents_program_event+0x23e/0x820 [ 311.716515][ C0] ? ktime_get+0x9f/0x320 [ 311.716529][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 311.716549][ C0] run_timer_base+0x114/0x190 [ 311.716563][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 311.716577][ C0] run_timer_softirq+0x1a/0x50 [ 311.716591][ C0] handle_softirqs+0x1ea/0x9b0 [ 311.716608][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 311.716623][ C0] ? _raw_spin_unlock+0x28/0x50 [ 311.716641][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 311.716653][ C0] __irq_exit_rcu+0x162/0x210 [ 311.716668][ C0] irq_exit_rcu+0x9/0x30 [ 311.716683][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 311.716696][ C0] [ 311.716700][ C0] [ 311.716704][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.716718][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 311.716738][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 311.716750][ C0] RSP: 0018:ffffc90005b0f390 EFLAGS: 00000246 [ 311.716759][ C0] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffc9001a94f000 [ 311.716768][ C0] RDX: 0000000000100000 RSI: ffffffff81e88a0f RDI: ffff888027784a80 [ 311.716776][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 311.716783][ C0] R10: 0000000000000000 R11: 205d353639345420 R12: 0000000000001065 [ 311.716790][ C0] R13: ffffffff8f9acd98 R14: ffffc90005b0f410 R15: dffffc0000000000 [ 311.716800][ C0] ? console_flush_one_record+0xabf/0xe50 [ 311.716821][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 311.716839][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 311.716851][ C0] ? lock_release+0x24d/0x310 [ 311.716866][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 311.716879][ C0] console_unlock+0x103/0x260 [ 311.716896][ C0] ? __pfx_console_unlock+0x10/0x10 [ 311.716914][ C0] ? rcu_is_watching+0x10/0xc0 [ 311.716931][ C0] ? lock_acquire+0x301/0x370 [ 311.716946][ C0] vprintk_emit+0x407/0x6b0 [ 311.716965][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 311.716983][ C0] ? do_raw_spin_lock+0x128/0x260 [ 311.716999][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 311.717017][ C0] dev_vprintk_emit+0x391/0x3e0 [ 311.717032][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 311.717048][ C0] ? debug_object_free+0x28d/0x550 [ 311.717064][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.717082][ C0] dev_printk_emit+0xd2/0x10d [ 311.717096][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 311.717111][ C0] ? __pfx_debug_object_free+0x10/0x10 [ 311.717126][ C0] ? __try_to_del_timer_sync+0x107/0x160 [ 311.717142][ C0] __dev_printk+0xcb/0x100 [ 311.717156][ C0] _dev_warn+0xef/0x127 [ 311.717170][ C0] ? __pfx__dev_warn+0x10/0x10 [ 311.717185][ C0] ? __pfx_process_timeout+0x10/0x10 [ 311.717198][ C0] ? usb_hcd_reset_endpoint+0xaf/0x240 [ 311.717217][ C0] hub_port_init+0x16f6/0x37f0 [ 311.717232][ C0] hub_event+0x2e7d/0x4a60 [ 311.717252][ C0] ? __pfx_hub_event+0x10/0x10 [ 311.717265][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 311.717283][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.717302][ C0] process_one_work+0xa23/0x1940 [ 311.717318][ C0] ? __pfx_process_one_work+0x10/0x10 [ 311.717332][ C0] ? __pfx_hub_event+0x10/0x10 [ 311.717347][ C0] worker_thread+0x5ef/0xe50 [ 311.717361][ C0] ? __pfx_worker_thread+0x10/0x10 [ 311.717374][ C0] ? kthread+0x13a/0x450 [ 311.717384][ C0] ? __pfx_worker_thread+0x10/0x10 [ 311.717396][ C0] kthread+0x370/0x450 [ 311.717410][ C0] ? __pfx_kthread+0x10/0x10 [ 311.717421][ C0] ret_from_fork+0x72b/0xd50 [ 311.717438][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 311.717455][ C0] ? __switch_to+0x800/0x10f0 [ 311.717467][ C0] ? __pfx_kthread+0x10/0x10 [ 311.717478][ C0] ret_from_fork_asm+0x1a/0x30 [ 311.717499][ C0] [ 311.717705][ C0] FAULT_INJECTION: forcing a failure. [ 311.717705][ C0] name failslab, interval 1, probability 1, space 0, times 75 [ 311.717721][ C0] CPU: 0 UID: 0 PID: 1227 Comm: kworker/0:3 Tainted: G D L syzkaller #0 PREEMPT(full) [ 311.717739][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 311.717744][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 311.717751][ C0] Workqueue: usb_hub_wq hub_event [ 311.717765][ C0] Call Trace: [ 311.717768][ C0] [ 311.717772][ C0] dump_stack_lvl+0x100/0x190 [ 311.717786][ C0] should_fail_ex.cold+0x5/0xa [ 311.717799][ C0] should_failslab+0xc2/0x120 [ 311.717814][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 311.717828][ C0] ? __alloc_skb+0x5b7/0x710 [ 311.717842][ C0] ? __alloc_skb+0x140/0x710 [ 311.717856][ C0] __alloc_skb+0x140/0x710 [ 311.717879][ C0] ? __alloc_skb+0x5b7/0x710 [ 311.717891][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 311.717905][ C0] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 311.717918][ C0] ? ipv6_get_lladdr+0x2c9/0x4f0 [ 311.717931][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.717949][ C0] ndisc_alloc_skb+0xd8/0x530 [ 311.717964][ C0] ndisc_send_rs+0x370/0x680 [ 311.717980][ C0] addrconf_rs_timer+0x424/0x880 [ 311.717994][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 311.718007][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 311.718022][ C0] ? lock_release+0x24d/0x310 [ 311.718037][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 311.718051][ C0] call_timer_fn+0x19a/0x610 [ 311.718064][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 311.718077][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.718095][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.718113][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 311.718126][ C0] __run_timers+0x757/0xb00 [ 311.718141][ C0] ? __pfx___run_timers+0x10/0x10 [ 311.718154][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.718172][ C0] ? clockevents_program_event+0x23e/0x820 [ 311.718192][ C0] ? ktime_get+0x9f/0x320 [ 311.718205][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 311.718225][ C0] run_timer_base+0x114/0x190 [ 311.718238][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 311.718253][ C0] run_timer_softirq+0x1a/0x50 [ 311.718266][ C0] handle_softirqs+0x1ea/0x9b0 [ 311.718282][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 311.718298][ C0] ? _raw_spin_unlock+0x28/0x50 [ 311.718316][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 311.718328][ C0] __irq_exit_rcu+0x162/0x210 [ 311.718343][ C0] irq_exit_rcu+0x9/0x30 [ 311.718358][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 311.718370][ C0] [ 311.718374][ C0] [ 311.718377][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.718391][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 311.718414][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 311.718425][ C0] RSP: 0018:ffffc90005b0f390 EFLAGS: 00000246 [ 311.718434][ C0] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffc9001a94f000 [ 311.718442][ C0] RDX: 0000000000100000 RSI: ffffffff81e88a0f RDI: ffff888027784a80 [ 311.718450][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 311.718457][ C0] R10: 0000000000000000 R11: 205d353639345420 R12: 0000000000001065 [ 311.718464][ C0] R13: ffffffff8f9acd98 R14: ffffc90005b0f410 R15: dffffc0000000000 [ 311.718474][ C0] ? console_flush_one_record+0xabf/0xe50 [ 311.718495][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 311.718513][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 311.718524][ C0] ? lock_release+0x24d/0x310 [ 311.718539][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 311.718552][ C0] console_unlock+0x103/0x260 [ 311.718569][ C0] ? __pfx_console_unlock+0x10/0x10 [ 311.718587][ C0] ? rcu_is_watching+0x10/0xc0 [ 311.718604][ C0] ? lock_acquire+0x301/0x370 [ 311.718620][ C0] vprintk_emit+0x407/0x6b0 [ 311.718638][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 311.718656][ C0] ? do_raw_spin_lock+0x128/0x260 [ 311.718673][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 311.718690][ C0] dev_vprintk_emit+0x391/0x3e0 [ 311.718705][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 311.718721][ C0] ? debug_object_free+0x28d/0x550 [ 311.718737][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.718755][ C0] dev_printk_emit+0xd2/0x10d [ 311.718769][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 311.718784][ C0] ? __pfx_debug_object_free+0x10/0x10 [ 311.718800][ C0] ? __try_to_del_timer_sync+0x107/0x160 [ 311.718815][ C0] __dev_printk+0xcb/0x100 [ 311.718830][ C0] _dev_warn+0xef/0x127 [ 311.718844][ C0] ? __pfx__dev_warn+0x10/0x10 [ 311.718858][ C0] ? __pfx_process_timeout+0x10/0x10 [ 311.718871][ C0] ? usb_hcd_reset_endpoint+0xaf/0x240 [ 311.718891][ C0] hub_port_init+0x16f6/0x37f0 [ 311.718906][ C0] hub_event+0x2e7d/0x4a60 [ 311.718925][ C0] ? __pfx_hub_event+0x10/0x10 [ 311.718939][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 311.718957][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.718976][ C0] process_one_work+0xa23/0x1940 [ 311.718991][ C0] ? __pfx_process_one_work+0x10/0x10 [ 311.719006][ C0] ? __pfx_hub_event+0x10/0x10 [ 311.719020][ C0] worker_thread+0x5ef/0xe50 [ 311.719034][ C0] ? __pfx_worker_thread+0x10/0x10 [ 311.719047][ C0] ? kthread+0x13a/0x450 [ 311.719057][ C0] ? __pfx_worker_thread+0x10/0x10 [ 311.719069][ C0] kthread+0x370/0x450 [ 311.719079][ C0] ? __pfx_kthread+0x10/0x10 [ 311.719091][ C0] ret_from_fork+0x72b/0xd50 [ 311.719107][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 311.719124][ C0] ? __switch_to+0x800/0x10f0 [ 311.719135][ C0] ? __pfx_kthread+0x10/0x10 [ 311.719147][ C0] ret_from_fork_asm+0x1a/0x30 [ 311.719167][ C0] [ 311.719189][ C0] FAULT_INJECTION: forcing a failure. [ 311.719189][ C0] name failslab, interval 1, probability 1, space 0, times 74 [ 311.719204][ C0] CPU: 0 UID: 0 PID: 1227 Comm: kworker/0:3 Tainted: G D L syzkaller #0 PREEMPT(full) [ 311.719221][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 311.719226][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 311.719233][ C0] Workqueue: usb_hub_wq hub_event [ 311.719246][ C0] Call Trace: [ 311.719250][ C0] [ 311.719253][ C0] dump_stack_lvl+0x100/0x190 [ 311.719267][ C0] should_fail_ex.cold+0x5/0xa [ 311.719279][ C0] ? ret_from_fork+0x72b/0xd50 [ 311.719295][ C0] should_failslab+0xc2/0x120 [ 311.719311][ C0] kmem_cache_alloc_noprof+0x91/0x6a0 [ 311.719324][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.719341][ C0] ? dst_alloc+0x99/0x1a0 [ 311.719354][ C0] ? __pfx_ip6_dst_gc+0x10/0x10 [ 311.719370][ C0] dst_alloc+0x99/0x1a0 [ 311.719383][ C0] icmp6_dst_alloc+0x79/0x4f0 [ 311.719402][ C0] ndisc_send_skb+0x133f/0x1bf0 [ 311.719417][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 311.719432][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 311.719448][ C0] ? kmalloc_reserve+0xf9/0x350 [ 311.719467][ C0] ? ndisc_alloc_skb+0x319/0x530 [ 311.719482][ C0] ? __asan_memcpy+0x3c/0x60 [ 311.719494][ C0] ndisc_send_rs+0x129/0x680 [ 311.719510][ C0] addrconf_rs_timer+0x424/0x880 [ 311.719524][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 311.719537][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 311.719553][ C0] ? lock_release+0x24d/0x310 [ 311.719567][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 311.719581][ C0] call_timer_fn+0x19a/0x610 [ 311.719593][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 311.719607][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.719625][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.719643][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 311.719656][ C0] __run_timers+0x757/0xb00 [ 311.719671][ C0] ? __pfx___run_timers+0x10/0x10 [ 311.719685][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.719702][ C0] ? clockevents_program_event+0x23e/0x820 [ 311.719722][ C0] ? ktime_get+0x9f/0x320 [ 311.719735][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 311.719755][ C0] run_timer_base+0x114/0x190 [ 311.719768][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 311.719783][ C0] run_timer_softirq+0x1a/0x50 [ 311.719796][ C0] handle_softirqs+0x1ea/0x9b0 [ 311.719813][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 311.719828][ C0] ? _raw_spin_unlock+0x28/0x50 [ 311.719846][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 311.719858][ C0] __irq_exit_rcu+0x162/0x210 [ 311.719873][ C0] irq_exit_rcu+0x9/0x30 [ 311.719888][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 311.719900][ C0] [ 311.719904][ C0] [ 311.719908][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.719921][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 311.719940][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 311.719951][ C0] RSP: 0018:ffffc90005b0f390 EFLAGS: 00000246 [ 311.719960][ C0] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffc9001a94f000 [ 311.719968][ C0] RDX: 0000000000100000 RSI: ffffffff81e88a0f RDI: ffff888027784a80 [ 311.719976][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 311.719982][ C0] R10: 0000000000000000 R11: 205d353639345420 R12: 0000000000001065 [ 311.719990][ C0] R13: ffffffff8f9acd98 R14: ffffc90005b0f410 R15: dffffc0000000000 [ 311.720000][ C0] ? console_flush_one_record+0xabf/0xe50 [ 311.720020][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 311.720039][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 311.720050][ C0] ? lock_release+0x24d/0x310 [ 311.720065][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 311.720078][ C0] console_unlock+0x103/0x260 [ 311.720095][ C0] ? __pfx_console_unlock+0x10/0x10 [ 311.720113][ C0] ? rcu_is_watching+0x10/0xc0 [ 311.720131][ C0] ? lock_acquire+0x301/0x370 [ 311.720146][ C0] vprintk_emit+0x407/0x6b0 [ 311.720164][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 311.720182][ C0] ? do_raw_spin_lock+0x128/0x260 [ 311.720199][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 311.720217][ C0] dev_vprintk_emit+0x391/0x3e0 [ 311.720232][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 311.720248][ C0] ? debug_object_free+0x28d/0x550 [ 311.720263][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.720282][ C0] dev_printk_emit+0xd2/0x10d [ 311.720296][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 311.720311][ C0] ? __pfx_debug_object_free+0x10/0x10 [ 311.720326][ C0] ? __try_to_del_timer_sync+0x107/0x160 [ 311.720342][ C0] __dev_printk+0xcb/0x100 [ 311.720356][ C0] _dev_warn+0xef/0x127 [ 311.720370][ C0] ? __pfx__dev_warn+0x10/0x10 [ 311.720385][ C0] ? __pfx_process_timeout+0x10/0x10 [ 311.720398][ C0] ? usb_hcd_reset_endpoint+0xaf/0x240 [ 311.720420][ C0] hub_port_init+0x16f6/0x37f0 [ 311.720435][ C0] hub_event+0x2e7d/0x4a60 [ 311.720455][ C0] ? __pfx_hub_event+0x10/0x10 [ 311.720468][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 311.720486][ C0] ? rcu_is_watching+0x12/0xc0 [ 311.720505][ C0] process_one_work+0xa23/0x1940 [ 311.720519][ C0] ? __pfx_process_one_work+0x10/0x10 [ 311.720534][ C0] ? __pfx_hub_event+0x10/0x10 [ 311.720548][ C0] worker_thread+0x5ef/0xe50 [ 311.720562][ C0] ? __pfx_worker_thread+0x10/0x10 [ 311.720575][ C0] ? kthread+0x13a/0x450 [ 311.720586][ C0] ? __pfx_worker_thread+0x10/0x10 [ 311.720597][ C0] kthread+0x370/0x450 [ 311.720608][ C0] ? __pfx_kthread+0x10/0x10 [ 311.720619][ C0] ret_from_fork+0x72b/0xd50 [ 311.720636][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 311.720652][ C0] ? __switch_to+0x800/0x10f0 [ 311.720663][ C0] ? __pfx_kthread+0x10/0x10 [ 311.720675][ C0] ret_from_fork_asm+0x1a/0x30 [ 311.720695][ C0] [ 311.721960][ C1] FAULT_INJECTION: forcing a failure. [ 311.721960][ C1] name failslab, interval 1, probability 1, space 0, times 73 [ 311.721992][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 311.722028][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 311.722037][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 311.722051][ C1] Call Trace: [ 311.722058][ C1] [ 311.722066][ C1] dump_stack_lvl+0x100/0x190 [ 311.722095][ C1] should_fail_ex.cold+0x5/0xa [ 311.722123][ C1] should_failslab+0xc2/0x120 [ 311.722154][ C1] kmem_cache_alloc_noprof+0x91/0x6a0 [ 311.722181][ C1] ? rcu_is_watching+0x12/0xc0 [ 311.722217][ C1] ? dst_alloc+0x99/0x1a0 [ 311.722242][ C1] ? __pfx_ip6_dst_gc+0x10/0x10 [ 311.722277][ C1] dst_alloc+0x99/0x1a0 [ 311.722302][ C1] icmp6_dst_alloc+0x79/0x4f0 [ 311.722334][ C1] ndisc_send_skb+0x133f/0x1bf0 [ 311.722365][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 311.722395][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 311.722425][ C1] ? kmalloc_reserve+0xf9/0x350 [ 311.722463][ C1] ? ndisc_alloc_skb+0x319/0x530 [ 311.722488][ C1] ? __asan_memcpy+0x3c/0x60 [ 311.722512][ C1] ndisc_send_rs+0x129/0x680 [ 311.722543][ C1] addrconf_rs_timer+0x424/0x880 [ 311.722569][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 311.722594][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 311.722624][ C1] ? lock_release+0x24d/0x310 [ 311.722652][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 311.722677][ C1] call_timer_fn+0x19a/0x610 [ 311.722701][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 311.722727][ C1] ? rcu_is_watching+0x12/0xc0 [ 311.722759][ C1] ? rcu_is_watching+0x12/0xc0 [ 311.722794][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 311.722818][ C1] __run_timers+0x757/0xb00 [ 311.722847][ C1] ? __pfx___run_timers+0x10/0x10 [ 311.722872][ C1] ? rcu_is_watching+0x12/0xc0 [ 311.722911][ C1] ? clockevents_program_event+0x23e/0x820 [ 311.722949][ C1] ? ktime_get+0x9f/0x320 [ 311.722974][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 311.723011][ C1] run_timer_base+0x114/0x190 [ 311.723036][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 311.723064][ C1] run_timer_softirq+0x1a/0x50 [ 311.723089][ C1] handle_softirqs+0x1ea/0x9b0 [ 311.723120][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 311.723149][ C1] ? _raw_spin_unlock+0x28/0x50 [ 311.723182][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 311.723206][ C1] __irq_exit_rcu+0x162/0x210 [ 311.723233][ C1] irq_exit_rcu+0x9/0x30 [ 311.723260][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 311.723285][ C1] [ 311.723292][ C1] [ 311.723298][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.723325][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 311.723349][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 311.723371][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 311.723388][ C1] RAX: 000000000147d524 RBX: ffff88801ea82540 RCX: ffffffff8bbb22d5 [ 311.723403][ C1] RDX: 0000000000000001 RSI: ffffffff8c401600 RDI: ffffffff81df2bd7 [ 311.723418][ C1] RBP: ffffed1003d504a8 R08: 0000000000000000 R09: ffffed10170a678d [ 311.723433][ C1] R10: ffff8880b8533c6b R11: ffffffff81d6005c R12: 0000000000000000 [ 311.723448][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 311.723464][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 311.723498][ C1] ? ct_kernel_exit+0x125/0x180 [ 311.723523][ C1] ? do_idle+0x3a7/0x5b0 [ 311.723554][ C1] default_idle+0x9/0x10 [ 311.723580][ C1] default_idle_call+0x6c/0xb0 [ 311.723608][ C1] do_idle+0x3a7/0x5b0 [ 311.723638][ C1] ? __pfx_do_idle+0x10/0x10 [ 311.723668][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 311.723703][ C1] cpu_startup_entry+0x4f/0x60 [ 311.723735][ C1] start_secondary+0x21d/0x2d0 [ 311.723764][ C1] ? __pfx_start_secondary+0x10/0x10 [ 311.723795][ C1] common_startup_64+0x13e/0x158 [ 311.723837][ C1] [ 312.034052][ C1] FAULT_INJECTION: forcing a failure. [ 312.034052][ C1] name failslab, interval 1, probability 1, space 0, times 71 [ 314.809657][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 314.809679][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 314.809683][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 314.809691][ C1] Call Trace: [ 314.809697][ C1] [ 314.809702][ C1] dump_stack_lvl+0x100/0x190 [ 314.809721][ C1] should_fail_ex.cold+0x5/0xa [ 314.809736][ C1] should_failslab+0xc2/0x120 [ 314.809753][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 314.809767][ C1] ? __alloc_skb+0x5b7/0x710 [ 314.809781][ C1] ? __alloc_skb+0x140/0x710 [ 314.809795][ C1] __alloc_skb+0x140/0x710 [ 314.809808][ C1] ? __alloc_skb+0x5b7/0x710 [ 314.809821][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 314.809835][ C1] ? do_raw_spin_lock+0x128/0x260 [ 314.809853][ C1] skb_copy+0x1ca/0x3a0 [ 314.809867][ C1] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 314.809884][ C1] ? lock_release+0x24d/0x310 [ 314.809899][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 314.809914][ C1] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 314.809932][ C1] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 314.809947][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 314.809962][ C1] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 314.809978][ C1] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 314.809994][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 314.810012][ C1] __iterate_interfaces+0x2e6/0x650 [ 314.810025][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 314.810041][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 314.810057][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 314.810073][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 314.810093][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 314.810112][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 314.810134][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 314.810152][ C1] handle_softirqs+0x1ea/0x9b0 [ 314.810169][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 314.810189][ C1] ? _raw_spin_unlock+0x28/0x50 [ 314.810209][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 314.810221][ C1] __irq_exit_rcu+0x162/0x210 [ 314.810236][ C1] irq_exit_rcu+0x9/0x30 [ 314.810251][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 314.810265][ C1] [ 314.810268][ C1] [ 314.810272][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.810286][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 314.810300][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 314.810313][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 314.810325][ C1] RAX: 000000000147d85c RBX: ffff88801ea82540 RCX: ffffffff8bbb22d5 [ 314.810333][ C1] RDX: 0000000000000001 RSI: ffffffff8c401600 RDI: ffffffff81df2bd7 [ 314.810341][ C1] RBP: ffffed1003d504a8 R08: 0000000000000000 R09: ffffed10170a678d [ 314.810349][ C1] R10: ffff8880b8533c6b R11: ffffffff81d6005c R12: 0000000000000000 [ 314.810356][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 314.810365][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 314.810384][ C1] ? ct_kernel_exit+0x125/0x180 [ 314.810397][ C1] ? do_idle+0x3a7/0x5b0 [ 314.810414][ C1] default_idle+0x9/0x10 [ 314.810428][ C1] default_idle_call+0x6c/0xb0 [ 314.810443][ C1] do_idle+0x3a7/0x5b0 [ 314.810459][ C1] ? __pfx_do_idle+0x10/0x10 [ 314.810475][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 314.810494][ C1] cpu_startup_entry+0x4f/0x60 [ 314.810511][ C1] start_secondary+0x21d/0x2d0 [ 314.810527][ C1] ? __pfx_start_secondary+0x10/0x10 [ 314.810544][ C1] common_startup_64+0x13e/0x158 [ 314.810565][ C1] [ 314.815812][ T12] FAULT_INJECTION: forcing a failure. [ 314.815812][ T12] name failslab, interval 1, probability 1, space 0, times 70 [ 314.825993][ T6608] FAULT_INJECTION: forcing a failure. [ 314.825993][ T6608] name failslab, interval 1, probability 1, space 0, times 69 [ 314.826717][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G D L syzkaller #0 PREEMPT(full) [ 314.826750][ T12] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 314.826758][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 314.826771][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 314.826802][ T12] Call Trace: [ 314.826809][ T12] [ 314.826816][ T12] dump_stack_lvl+0x100/0x190 [ 314.826841][ T12] should_fail_ex.cold+0x5/0xa [ 314.826865][ T12] should_failslab+0xc2/0x120 [ 314.826891][ T12] __kmalloc_noprof+0xfc/0x820 [ 314.826914][ T12] ? rcu_is_watching+0x12/0xc0 [ 314.826944][ T12] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 314.826974][ T12] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 314.827001][ T12] ? unwind_next_frame+0x3be/0x2090 [ 314.827021][ T12] ? rcu_is_watching+0x12/0xc0 [ 314.827053][ T12] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 314.827081][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 314.827117][ T12] ? stack_trace_save+0x8e/0xc0 [ 314.827138][ T12] ? __pfx_stack_trace_save+0x10/0x10 [ 314.827161][ T12] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 314.827187][ T12] cfg80211_inform_bss_data+0x230/0x3b60 [ 314.827213][ T12] ? __kmalloc_noprof+0x322/0x820 [ 314.827234][ T12] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 314.827266][ T12] ? cfg80211_wiphy_work+0x2b7/0x550 [ 314.827292][ T12] ? process_one_work+0xa23/0x1940 [ 314.827313][ T12] ? worker_thread+0x5ef/0xe50 [ 314.827333][ T12] ? kthread+0x370/0x450 [ 314.827352][ T12] ? ret_from_fork+0x72b/0xd50 [ 314.827378][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 314.827409][ T12] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 314.827438][ T12] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 314.827462][ T12] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 314.827502][ T12] ? sta_info_hash_lookup+0x259/0x660 [ 314.827534][ T12] ? sta_info_get+0x215/0x3e0 [ 314.827550][ T12] ? rcu_is_watching+0x12/0xc0 [ 314.827579][ T12] ? ieee80211_sta_get_rates+0x43b/0x5c0 [ 314.827604][ T12] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 314.827633][ T12] ? rcu_is_watching+0x12/0xc0 [ 314.827661][ T12] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 314.827695][ T12] ? lock_release+0x24d/0x310 [ 314.827721][ T12] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 314.827751][ T12] ieee80211_bss_info_update+0x310/0xab0 [ 314.827781][ T12] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 314.827813][ T12] ? rcu_is_watching+0x12/0xc0 [ 314.827842][ T12] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 314.827866][ T12] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 314.827896][ T12] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 314.827928][ T12] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 314.827951][ T12] ieee80211_iface_work+0xa9a/0x1070 [ 314.827983][ T12] cfg80211_wiphy_work+0x2b7/0x550 [ 314.828011][ T12] process_one_work+0xa23/0x1940 [ 314.828038][ T12] ? __pfx_process_one_work+0x10/0x10 [ 314.828062][ T12] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 314.828091][ T12] worker_thread+0x5ef/0xe50 [ 314.828117][ T12] ? kthread+0x13a/0x450 [ 314.828135][ T12] ? __pfx_worker_thread+0x10/0x10 [ 314.828156][ T12] kthread+0x370/0x450 [ 314.828174][ T12] ? __pfx_kthread+0x10/0x10 [ 314.828194][ T12] ret_from_fork+0x72b/0xd50 [ 314.828221][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 314.828249][ T12] ? __switch_to+0x800/0x10f0 [ 314.828270][ T12] ? __pfx_kthread+0x10/0x10 [ 314.828287][ T12] ret_from_fork_asm+0x1a/0x30 [ 314.828322][ T12] [ 314.833025][ T5713] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 314.839362][ T6608] CPU: 1 UID: 0 PID: 6608 Comm: kworker/u8:13 Tainted: G D L syzkaller #0 PREEMPT(full) [ 314.839397][ T6608] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 314.839405][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 314.839418][ T6608] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 314.839446][ T6608] Call Trace: [ 314.839453][ T6608] [ 314.839460][ T6608] dump_stack_lvl+0x100/0x190 [ 314.839485][ T6608] should_fail_ex.cold+0x5/0xa [ 314.839506][ T6608] ? rcu_is_watching+0x12/0xc0 [ 314.839538][ T6608] should_failslab+0xc2/0x120 [ 314.839563][ T6608] __kmalloc_cache_noprof+0x91/0x6c0 [ 314.839596][ T6608] ? batadv_forw_packet_alloc+0x3a9/0x4d0 [ 314.839625][ T6608] batadv_forw_packet_alloc+0x3a9/0x4d0 [ 314.839653][ T6608] batadv_iv_ogm_aggregate_new+0x126/0x4b0 [ 314.839677][ T6608] batadv_iv_ogm_schedule_buff+0x95d/0x15e0 [ 314.839709][ T6608] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 314.839738][ T6608] batadv_iv_send_outstanding_bat_ogm_packet+0x548/0x800 [ 314.839766][ T6608] process_one_work+0xa23/0x1940 [ 314.839793][ T6608] ? __pfx_process_one_work+0x10/0x10 [ 314.839819][ T6608] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 314.839846][ T6608] worker_thread+0x5ef/0xe50 [ 314.839870][ T6608] ? __pfx_worker_thread+0x10/0x10 [ 314.839893][ T6608] ? kthread+0x13a/0x450 [ 314.839910][ T6608] ? __pfx_worker_thread+0x10/0x10 [ 314.839931][ T6608] kthread+0x370/0x450 [ 314.839949][ T6608] ? __pfx_kthread+0x10/0x10 [ 314.839970][ T6608] ret_from_fork+0x72b/0xd50 [ 314.839997][ T6608] ? __pfx_ret_from_fork+0x10/0x10 [ 314.840022][ T6608] ? rcu_is_watching+0x12/0xc0 [ 314.840051][ T6608] ? __switch_to+0x800/0x10f0 [ 314.840071][ T6608] ? __pfx_kthread+0x10/0x10 [ 314.840091][ T6608] ret_from_fork_asm+0x1a/0x30 [ 314.840126][ T6608] [ 314.841940][ T6608] FAULT_INJECTION: forcing a failure. [ 314.841940][ T6608] name failslab, interval 1, probability 1, space 0, times 67 [ 314.844585][ T5713] Code: 31 aa f9 31 ff 89 de e8 95 2b aa f9 84 db 0f 85 37 0d 00 00 e8 78 31 aa f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 315.310973][ C1] FAULT_INJECTION: forcing a failure. [ 315.310973][ C1] name failslab, interval 1, probability 1, space 0, times 67 [ 315.804931][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 315.804952][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 315.804957][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 315.804965][ C1] Call Trace: [ 315.804971][ C1] [ 315.804976][ C1] dump_stack_lvl+0x100/0x190 [ 315.804994][ C1] should_fail_ex.cold+0x5/0xa [ 315.805009][ C1] should_failslab+0xc2/0x120 [ 315.805025][ C1] __kmalloc_noprof+0xfc/0x820 [ 315.805039][ C1] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 315.805060][ C1] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 315.805079][ C1] ? default_idle_call+0x6c/0xb0 [ 315.805095][ C1] ? kasan_save_stack+0x3f/0x50 [ 315.805109][ C1] ? kasan_save_stack+0x30/0x50 [ 315.805122][ C1] ? kasan_save_track+0x14/0x30 [ 315.805136][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 315.805148][ C1] ? __kmalloc_noprof+0x322/0x820 [ 315.805161][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 315.805177][ C1] ? ieee80211_bss_info_update+0x310/0xab0 [ 315.805194][ C1] ? ieee80211_scan_rx+0x4e6/0xb60 [ 315.805210][ C1] ? __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 315.805230][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.805248][ C1] ? __kfree_rcu_sheaf+0x195/0x730 [ 315.805262][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.805280][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 315.805301][ C1] ? kvfree_call_rcu+0x1be/0x4f0 [ 315.805320][ C1] ? __asan_memcpy+0x3c/0x60 [ 315.805332][ C1] ieee80211_inform_bss+0x159/0x1170 [ 315.805350][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 315.805368][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 315.805385][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 315.805401][ C1] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 315.805420][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 315.805436][ C1] ? sch_direct_xmit+0x23f/0xc70 [ 315.805458][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 315.805470][ C1] ? common_startup_64+0x13e/0x158 [ 315.805490][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 315.805505][ C1] cfg80211_inform_bss_data+0x230/0x3b60 [ 315.805522][ C1] ? common_startup_64+0x13e/0x158 [ 315.805541][ C1] ? stack_trace_save+0x8e/0xc0 [ 315.805554][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 315.805570][ C1] ? unwind_next_frame+0x3be/0x2090 [ 315.805581][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.805600][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.805617][ C1] ? unwind_next_frame+0x3be/0x2090 [ 315.805628][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.805653][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.805671][ C1] ? unwind_next_frame+0x3be/0x2090 [ 315.805682][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.805699][ C1] ? unwind_next_frame+0x3be/0x2090 [ 315.805710][ C1] ? lock_release+0x24d/0x310 [ 315.805727][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 315.805740][ C1] ? arch_stack_walk+0x94/0xf0 [ 315.805760][ C1] ? common_startup_64+0x13e/0x158 [ 315.805779][ C1] ? kfree_skbmem+0x19a/0x210 [ 315.805798][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 315.805816][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 315.805834][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 315.805851][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 315.805867][ C1] ? hrtimer_run_softirq+0x17d/0x2c0 [ 315.805885][ C1] ? handle_softirqs+0x1ea/0x9b0 [ 315.805901][ C1] ? do_idle+0x3a7/0x5b0 [ 315.805917][ C1] ? cpu_startup_entry+0x4f/0x60 [ 315.805934][ C1] ? start_secondary+0x21d/0x2d0 [ 315.805949][ C1] ? common_startup_64+0x13e/0x158 [ 315.805967][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 315.805981][ C1] ieee80211_scan_rx+0x4e6/0xb60 [ 315.805998][ C1] ? ieee80211_get_buffered_bc+0x4fe/0x8d0 [ 315.806014][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.806032][ C1] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 315.806052][ C1] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 315.806072][ C1] ? do_raw_spin_lock+0x128/0x260 [ 315.806091][ C1] ? ieee80211_clean_skb+0x1a7/0x740 [ 315.806108][ C1] ieee80211_rx_list+0xf19/0x2160 [ 315.806129][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 315.806146][ C1] ? lock_acquire+0x301/0x370 [ 315.806162][ C1] ieee80211_rx_napi+0xdc/0x400 [ 315.806180][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 315.806198][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 315.806211][ C1] ieee80211_handle_queued_frames+0xc8/0x120 [ 315.806228][ C1] tasklet_action_common+0x2de/0x3d0 [ 315.806246][ C1] handle_softirqs+0x1ea/0x9b0 [ 315.806263][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 315.806278][ C1] ? _raw_spin_unlock+0x28/0x50 [ 315.806296][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 315.806309][ C1] __irq_exit_rcu+0x162/0x210 [ 315.806324][ C1] irq_exit_rcu+0x9/0x30 [ 315.806338][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 315.806351][ C1] [ 315.806355][ C1] [ 315.806359][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.806373][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 315.806388][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 315.806400][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 315.806411][ C1] RAX: 000000000147e09c RBX: ffff88801ea82540 RCX: ffffffff8bbb22d5 [ 315.806420][ C1] RDX: 0000000000000001 RSI: ffffffff8c401600 RDI: ffffffff81df2bd7 [ 315.806428][ C1] RBP: ffffed1003d504a8 R08: 0000000000000000 R09: ffffed10170a678d [ 315.806435][ C1] R10: ffff8880b8533c6b R11: ffffffff81d6005c R12: 0000000000000000 [ 315.806443][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 315.806452][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 315.806469][ C1] ? ct_kernel_exit+0x125/0x180 [ 315.806482][ C1] ? do_idle+0x3a7/0x5b0 [ 315.806499][ C1] default_idle+0x9/0x10 [ 315.806513][ C1] default_idle_call+0x6c/0xb0 [ 315.806528][ C1] do_idle+0x3a7/0x5b0 [ 315.806544][ C1] ? __pfx_do_idle+0x10/0x10 [ 315.806560][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 315.806578][ C1] cpu_startup_entry+0x4f/0x60 [ 315.806595][ C1] start_secondary+0x21d/0x2d0 [ 315.806611][ C1] ? __pfx_start_secondary+0x10/0x10 [ 315.806627][ C1] common_startup_64+0x13e/0x158 [ 315.806653][ C1] [ 315.925227][ C0] FAULT_INJECTION: forcing a failure. [ 315.925227][ C0] name failslab, interval 1, probability 1, space 0, times 63 [ 315.931819][ C1] FAULT_INJECTION: forcing a failure. [ 315.931819][ C1] name failslab, interval 1, probability 1, space 0, times 63 [ 315.934957][ C0] CPU: 0 UID: 0 PID: 6994 Comm: udevd Tainted: G D L syzkaller #0 PREEMPT(full) [ 315.934995][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 315.935004][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 315.935018][ C0] Call Trace: [ 315.935026][ C0] [ 315.935034][ C0] dump_stack_lvl+0x100/0x190 [ 315.935065][ C0] should_fail_ex.cold+0x5/0xa [ 315.935091][ C0] should_failslab+0xc2/0x120 [ 315.935127][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 315.935154][ C0] ? __alloc_skb+0x5b7/0x710 [ 315.935180][ C0] ? __alloc_skb+0x140/0x710 [ 315.935205][ C0] __alloc_skb+0x140/0x710 [ 315.935229][ C0] ? __alloc_skb+0x5b7/0x710 [ 315.935253][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 315.935279][ C0] ? do_raw_spin_lock+0x128/0x260 [ 315.935313][ C0] skb_copy+0x1ca/0x3a0 [ 315.935338][ C0] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 315.935370][ C0] ? lock_release+0x24d/0x310 [ 315.935397][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 315.935425][ C0] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 315.935457][ C0] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 315.935486][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 315.935515][ C0] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 315.935544][ C0] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 315.935573][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 315.935606][ C0] __iterate_interfaces+0x2e6/0x650 [ 315.935631][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 315.935661][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 315.935689][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 315.935719][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 315.935756][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 315.935792][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 315.935831][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 315.935867][ C0] handle_softirqs+0x1ea/0x9b0 [ 315.935899][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 315.935927][ C0] ? _raw_spin_unlock+0x28/0x50 [ 315.935962][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 315.935985][ C0] __irq_exit_rcu+0x162/0x210 [ 315.936013][ C0] irq_exit_rcu+0x9/0x30 [ 315.936040][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 315.936065][ C0] [ 315.936072][ C0] [ 315.936079][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.936104][ C0] RIP: 0010:smp_call_function_many_cond+0x593/0x1870 [ 315.936142][ C0] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 64 99 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 ff 83 e0 01 41 [ 315.936164][ C0] RSP: 0018:ffffc9000542f248 EFLAGS: 00000293 [ 315.936182][ C0] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff81fdc702 [ 315.936196][ C0] RDX: ffff88802e86ca80 RSI: ffffffff81fdc6dc RDI: ffff88802e86ca80 [ 315.936212][ C0] RBP: ffff8880b8541240 R08: 0000000000000005 R09: 0000000000000000 [ 315.936226][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000003 [ 315.936240][ C0] R13: ffffed10170a8249 R14: 0000000000000001 R15: ffff8880b843c880 [ 315.936257][ C0] ? smp_call_function_many_cond+0x5b2/0x1870 [ 315.936285][ C0] ? smp_call_function_many_cond+0x58c/0x1870 [ 315.936314][ C0] ? smp_call_function_many_cond+0x58c/0x1870 [ 315.936343][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 315.936379][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 315.936407][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 315.936434][ C0] ? mtree_range_walk+0x72b/0xb70 [ 315.936461][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 315.936492][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 315.936519][ C0] flush_tlb_mm_range+0x45f/0x16f0 [ 315.936554][ C0] ? pte_offset_map_lock+0x174/0x320 [ 315.936581][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 315.936615][ C0] flush_tlb_batched_pending+0x93/0xe0 [ 315.936648][ C0] __zap_vma_range+0xd5b/0x4a30 [ 315.936679][ C0] ? get_page_from_freelist+0xf48/0x3530 [ 315.936709][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 315.936739][ C0] ? rcu_is_watching+0x12/0xc0 [ 315.936774][ C0] ? rcu_is_watching+0x12/0xc0 [ 315.936806][ C0] ? unmap_vmas+0x239/0x5f0 [ 315.936832][ C0] ? lock_release+0x24d/0x310 [ 315.936860][ C0] unmap_vmas+0x299/0x5f0 [ 315.936888][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 315.936916][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 315.936956][ C0] unmap_region+0x1bc/0x3b0 [ 315.936990][ C0] ? __pfx_unmap_region+0x10/0x10 [ 315.937029][ C0] ? kmem_cache_return_sheaf+0x153/0x300 [ 315.937056][ C0] vms_complete_munmap_vmas+0xa4b/0xdd0 [ 315.937082][ C0] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 315.937107][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 315.937133][ C0] ? rcu_is_watching+0x12/0xc0 [ 315.937165][ C0] ? rcu_read_unlock+0x2d/0xb0 [ 315.937185][ C0] ? lock_release+0x24d/0x310 [ 315.937213][ C0] do_vmi_align_munmap+0x44f/0x5f0 [ 315.937237][ C0] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 315.937262][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 315.937302][ C0] do_vmi_munmap+0x1f8/0x3e0 [ 315.937325][ C0] __vm_munmap+0x196/0x390 [ 315.937348][ C0] ? __pfx___vm_munmap+0x10/0x10 [ 315.937379][ C0] __x64_sys_munmap+0x59/0x80 [ 315.937409][ C0] do_syscall_64+0x115/0x870 [ 315.937432][ C0] ? clear_bhb_loop+0x40/0x90 [ 315.937457][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.937480][ C0] RIP: 0033:0x7f25e631e097 [ 315.937497][ C0] Code: 73 01 c3 48 8b 0d 61 2d 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 31 2d 0d 00 f7 d8 64 89 01 48 [ 315.937518][ C0] RSP: 002b:00007ffe059fb568 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 315.937539][ C0] RAX: ffffffffffffffda RBX: 0000555c8f02cf90 RCX: 00007f25e631e097 [ 315.937554][ C0] RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007f25e5600000 [ 315.937568][ C0] RBP: 0000555c8f02a2c0 R08: 0000555c8f26a660 R09: 0000000000000006 [ 315.937583][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000555c80151588 [ 315.937596][ C0] R13: 00007ffe059fb5f0 R14: 0000000000000000 R15: 0000000000000000 [ 315.937624][ C0] [ 315.946288][ T5614] FAULT_INJECTION: forcing a failure. [ 315.946288][ T5614] name failslab, interval 1, probability 1, space 0, times 61 [ 315.950896][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 315.950932][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 315.950941][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 315.950954][ C1] Call Trace: [ 315.950962][ C1] [ 315.950970][ C1] dump_stack_lvl+0x100/0x190 [ 315.951000][ C1] should_fail_ex.cold+0x5/0xa [ 315.951026][ C1] should_failslab+0xc2/0x120 [ 315.951055][ C1] __kmalloc_noprof+0xfc/0x820 [ 315.951081][ C1] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 315.951123][ C1] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 315.951157][ C1] ? default_idle_call+0x6c/0xb0 [ 315.951187][ C1] ? kasan_save_stack+0x3f/0x50 [ 315.951213][ C1] ? kasan_save_stack+0x30/0x50 [ 315.951237][ C1] ? kasan_save_track+0x14/0x30 [ 315.951262][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 315.951286][ C1] ? __kmalloc_noprof+0x322/0x820 [ 315.951310][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 315.951339][ C1] ? ieee80211_bss_info_update+0x310/0xab0 [ 315.951370][ C1] ? ieee80211_scan_rx+0x4e6/0xb60 [ 315.951400][ C1] ? __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 315.951436][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.951470][ C1] ? __kfree_rcu_sheaf+0x195/0x730 [ 315.951497][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.951529][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 315.951569][ C1] ? kvfree_call_rcu+0x1be/0x4f0 [ 315.951604][ C1] ? __asan_memcpy+0x3c/0x60 [ 315.951631][ C1] ieee80211_inform_bss+0x159/0x1170 [ 315.951665][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 315.951699][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 315.951730][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 315.951762][ C1] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 315.951792][ C1] ? __asan_memset+0x23/0x50 [ 315.951816][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 315.951853][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.951886][ C1] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 315.951919][ C1] ? ieee80211_rx_handlers+0xfcb/0xa740 [ 315.951953][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.951987][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 315.952016][ C1] cfg80211_inform_bss_data+0x230/0x3b60 [ 315.952048][ C1] ? sched_clock+0x38/0x60 [ 315.952074][ C1] ? sched_clock_cpu+0x6c/0x570 [ 315.952099][ C1] ? __pfx_sprintf+0x10/0x10 [ 315.952122][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 315.952156][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 315.952185][ C1] ? unwind_next_frame+0x3be/0x2090 [ 315.952207][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.952240][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.952272][ C1] ? unwind_next_frame+0x3be/0x2090 [ 315.952297][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 315.952317][ C1] ? common_startup_64+0x13e/0x158 [ 315.952359][ C1] ? __pfx_ieee80211_invoke_rx_handlers+0x10/0x10 [ 315.952399][ C1] ? __update_load_avg_se+0x5c7/0xe80 [ 315.952423][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 315.952457][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 315.952490][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 315.952523][ C1] ? ieee80211_recalc_p2p_go_ps_allowed+0x1b0/0x3e0 [ 315.952564][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 315.952589][ C1] ieee80211_scan_rx+0x4e6/0xb60 [ 315.952627][ C1] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 315.952663][ C1] ? __pfx___mod_timer+0x10/0x10 [ 315.952690][ C1] ? do_raw_spin_lock+0x128/0x260 [ 315.952722][ C1] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 315.952757][ C1] ? do_raw_spin_lock+0x128/0x260 [ 315.952793][ C1] ? ieee80211_clean_skb+0x1a7/0x740 [ 315.952825][ C1] ieee80211_rx_list+0xf19/0x2160 [ 315.952863][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 315.952897][ C1] ? lock_acquire+0x301/0x370 [ 315.952922][ C1] ? rcu_is_watching+0x12/0xc0 [ 315.952957][ C1] ieee80211_rx_napi+0xdc/0x400 [ 315.952990][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 315.953025][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 315.953050][ C1] ieee80211_handle_queued_frames+0xc8/0x120 [ 315.953080][ C1] tasklet_action_common+0x2de/0x3d0 [ 315.953114][ C1] handle_softirqs+0x1ea/0x9b0 [ 315.953144][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 315.953173][ C1] ? _raw_spin_unlock+0x28/0x50 [ 315.953207][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 315.953230][ C1] __irq_exit_rcu+0x162/0x210 [ 315.953258][ C1] irq_exit_rcu+0x9/0x30 [ 315.953285][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 315.953309][ C1] [ 315.953316][ C1] [ 315.953323][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.953349][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 315.953374][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 315.953396][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 315.953413][ C1] RAX: 000000000147e0bc RBX: ffff88801ea82540 RCX: ffffffff8bbb22d5 [ 315.953429][ C1] RDX: 0000000000000001 RSI: ffffffff8c401600 RDI: ffffffff81df2bd7 [ 315.953444][ C1] RBP: ffffed1003d504a8 R08: 0000000000000000 R09: ffffed10170a678d [ 315.953459][ C1] R10: ffff8880b8533c6b R11: ffffffff81d6005c R12: 0000000000000000 [ 315.953474][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 315.953490][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 315.953524][ C1] ? ct_kernel_exit+0x125/0x180 [ 315.953548][ C1] ? do_idle+0x3a7/0x5b0 [ 315.953579][ C1] default_idle+0x9/0x10 [ 315.953605][ C1] default_idle_call+0x6c/0xb0 [ 315.953637][ C1] do_idle+0x3a7/0x5b0 [ 315.953667][ C1] ? __pfx_do_idle+0x10/0x10 [ 315.953697][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 315.953732][ C1] cpu_startup_entry+0x4f/0x60 [ 315.953764][ C1] start_secondary+0x21d/0x2d0 [ 315.953793][ C1] ? __pfx_start_secondary+0x10/0x10 [ 315.953824][ C1] common_startup_64+0x13e/0x158 [ 315.953865][ C1] [ 316.232962][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 316.238894][ C0] FAULT_INJECTION: forcing a failure. [ 316.238894][ C0] name failslab, interval 1, probability 1, space 0, times 60 [ 316.238917][ C0] CPU: 0 UID: 0 PID: 5614 Comm: syz-executor Tainted: G D L syzkaller #0 PREEMPT(full) [ 316.238936][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 316.238941][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 316.238949][ C0] Call Trace: [ 316.238952][ C0] [ 316.238957][ C0] dump_stack_lvl+0x100/0x190 [ 316.238974][ C0] should_fail_ex.cold+0x5/0xa [ 316.238988][ C0] should_failslab+0xc2/0x120 [ 316.239004][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 316.239018][ C0] ? __alloc_skb+0x5b7/0x710 [ 316.239032][ C0] ? __alloc_skb+0x140/0x710 [ 316.239046][ C0] __alloc_skb+0x140/0x710 [ 316.239059][ C0] ? __alloc_skb+0x5b7/0x710 [ 316.239071][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 316.239085][ C0] ? rcu_is_watching+0x12/0xc0 [ 316.239105][ C0] __netdev_alloc_skb+0x7a/0x960 [ 316.239119][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 316.239137][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 316.239152][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 316.239167][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 316.239185][ C0] ? do_raw_spin_lock+0x128/0x260 [ 316.239202][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 316.239219][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 316.239237][ C0] __iterate_interfaces+0x2e6/0x650 [ 316.239250][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 316.239266][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 316.239281][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 316.239298][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 316.239317][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 316.239336][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 316.239356][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 316.239375][ C0] handle_softirqs+0x1ea/0x9b0 [ 316.239392][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 316.239407][ C0] ? _raw_spin_unlock+0x28/0x50 [ 316.239426][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 316.239438][ C0] __irq_exit_rcu+0x162/0x210 [ 316.239453][ C0] irq_exit_rcu+0x9/0x30 [ 316.239468][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 316.239481][ C0] [ 316.239484][ C0] [ 316.239488][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.239502][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 316.239522][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 316.239534][ C0] RSP: 0018:ffffc900032178b0 EFLAGS: 00000293 [ 316.239544][ C0] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 316.239553][ C0] RDX: ffff88807cce4a80 RSI: ffffffff81e88a0f RDI: ffff88807cce4a80 [ 316.239561][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 316.239568][ C0] R10: 0000000000000000 R11: 205d314320202020 R12: 0000000000001388 [ 316.239575][ C0] R13: ffffffff8f9acd98 R14: ffffc90003217930 R15: dffffc0000000000 [ 316.239585][ C0] ? console_flush_one_record+0xab1/0xe50 [ 316.239607][ C0] ? console_flush_one_record+0xabf/0xe50 [ 316.239627][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 316.239646][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 316.239657][ C0] ? lock_release+0x24d/0x310 [ 316.239673][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 316.239685][ C0] console_unlock+0x103/0x260 [ 316.239703][ C0] ? __pfx_console_unlock+0x10/0x10 [ 316.239720][ C0] ? rcu_is_watching+0x10/0xc0 [ 316.239738][ C0] ? lock_acquire+0x301/0x370 [ 316.239752][ C0] ? vprintk_emit+0x66a/0x6b0 [ 316.239771][ C0] vprintk_emit+0x407/0x6b0 [ 316.239789][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 316.239809][ C0] _printk+0xcf/0x110 [ 316.239820][ C0] ? __pfx__printk+0x10/0x10 [ 316.239831][ C0] ? rcu_read_unlock+0x17/0x60 [ 316.239849][ C0] ? rcu_is_watching+0x12/0xc0 [ 316.239866][ C0] ? __pfx____ratelimit+0x10/0x10 [ 316.239879][ C0] ? rcu_is_watching+0x12/0xc0 [ 316.239897][ C0] should_fail_ex+0x4e4/0x640 [ 316.239914][ C0] ? kmem_cache_alloc_noprof+0x6b/0x6a0 [ 316.239928][ C0] should_failslab+0xc2/0x120 [ 316.239943][ C0] kmem_cache_alloc_noprof+0x91/0x6a0 [ 316.239956][ C0] ? trace_kmem_cache_alloc+0xdd/0x100 [ 316.239972][ C0] ? security_file_alloc+0x34/0x2c0 [ 316.239984][ C0] security_file_alloc+0x34/0x2c0 [ 316.239995][ C0] init_file+0x95/0x480 [ 316.240010][ C0] alloc_empty_file+0x79/0x1c0 [ 316.240024][ C0] alloc_file_pseudo+0x183/0x290 [ 316.240040][ C0] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 316.240055][ C0] ? alloc_fd+0x471/0x7a0 [ 316.240068][ C0] sock_alloc_file+0x50/0x210 [ 316.240084][ C0] __sys_socket+0x1c0/0x260 [ 316.240094][ C0] ? __pfx___sys_socket+0x10/0x10 [ 316.240107][ C0] __x64_sys_socket+0x72/0xb0 [ 316.240118][ C0] do_syscall_64+0x115/0x870 [ 316.240131][ C0] ? clear_bhb_loop+0x40/0x90 [ 316.240144][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.240156][ C0] RIP: 0033:0x7f6e7c19f707 [ 316.240167][ C0] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.240179][ C0] RSP: 002b:00007ffd70995e08 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 316.240189][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f6e7c19f707 [ 316.240197][ C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 316.240204][ C0] RBP: 00007ffd7099653c R08: 0000000000000000 R09: 0000000000000000 [ 316.240211][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007f6e7c3edfc0 [ 316.240219][ C0] R13: 0000000000000056 R14: 000000000004ba7a R15: 00007f6e7c3f0180 [ 316.240229][ C0] [ 316.539748][ C1] FAULT_INJECTION: forcing a failure. [ 316.539748][ C1] name failslab, interval 1, probability 1, space 0, times 59 [ 316.561018][ T5612] FAULT_INJECTION: forcing a failure. [ 316.561018][ T5612] name failslab, interval 1, probability 1, space 0, times 59 [ 316.562292][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 316.562330][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 316.562339][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 316.562354][ C1] Call Trace: [ 316.562361][ C1] [ 316.562369][ C1] dump_stack_lvl+0x100/0x190 [ 316.562400][ C1] should_fail_ex.cold+0x5/0xa [ 316.562428][ C1] should_failslab+0xc2/0x120 [ 316.562458][ C1] __kmalloc_noprof+0xfc/0x820 [ 316.562485][ C1] ? cfg80211_inform_single_bss_data+0x959/0x1dc0 [ 316.562518][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 316.562554][ C1] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 316.562586][ C1] ? __asan_memset+0x23/0x50 [ 316.562612][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 316.562655][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 316.562678][ C1] ? common_startup_64+0x13e/0x158 [ 316.562718][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 316.562749][ C1] cfg80211_inform_bss_data+0x230/0x3b60 [ 316.562782][ C1] ? common_startup_64+0x13e/0x158 [ 316.562821][ C1] ? stack_trace_save+0x8e/0xc0 [ 316.562846][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 316.562878][ C1] ? unwind_next_frame+0x3be/0x2090 [ 316.562900][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.562938][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.562974][ C1] ? unwind_next_frame+0x3be/0x2090 [ 316.562997][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.563032][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.563067][ C1] ? unwind_next_frame+0x3be/0x2090 [ 316.563090][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.563128][ C1] ? unwind_next_frame+0x3be/0x2090 [ 316.563151][ C1] ? lock_release+0x24d/0x310 [ 316.563183][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 316.563209][ C1] ? arch_stack_walk+0x94/0xf0 [ 316.563248][ C1] ? common_startup_64+0x13e/0x158 [ 316.563287][ C1] ? kfree_skbmem+0x19a/0x210 [ 316.563325][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 316.563361][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 316.563397][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 316.563431][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 316.563462][ C1] ? hrtimer_run_softirq+0x17d/0x2c0 [ 316.563498][ C1] ? handle_softirqs+0x1ea/0x9b0 [ 316.563531][ C1] ? do_idle+0x3a7/0x5b0 [ 316.563562][ C1] ? cpu_startup_entry+0x4f/0x60 [ 316.563595][ C1] ? start_secondary+0x21d/0x2d0 [ 316.563625][ C1] ? common_startup_64+0x13e/0x158 [ 316.563662][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 316.563690][ C1] ieee80211_scan_rx+0x4e6/0xb60 [ 316.563723][ C1] ? ieee80211_get_buffered_bc+0x4fe/0x8d0 [ 316.563755][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.563791][ C1] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 316.563832][ C1] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 316.563871][ C1] ? do_raw_spin_lock+0x128/0x260 [ 316.563908][ C1] ? ieee80211_clean_skb+0x1a7/0x740 [ 316.563942][ C1] ieee80211_rx_list+0xf19/0x2160 [ 316.563983][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 316.564018][ C1] ? lock_acquire+0x301/0x370 [ 316.564050][ C1] ieee80211_rx_napi+0xdc/0x400 [ 316.564084][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 316.564128][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 316.564152][ C1] ieee80211_handle_queued_frames+0xc8/0x120 [ 316.564185][ C1] tasklet_action_common+0x2de/0x3d0 [ 316.564218][ C1] handle_softirqs+0x1ea/0x9b0 [ 316.564248][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 316.564277][ C1] ? _raw_spin_unlock+0x28/0x50 [ 316.564311][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 316.564335][ C1] __irq_exit_rcu+0x162/0x210 [ 316.564363][ C1] irq_exit_rcu+0x9/0x30 [ 316.564390][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 316.564415][ C1] [ 316.564422][ C1] [ 316.564430][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.564456][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 316.564481][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 316.564504][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 316.564522][ C1] RAX: 000000000147e4cc RBX: ffff88801ea82540 RCX: ffffffff8bbb22d5 [ 316.564537][ C1] RDX: 0000000000000001 RSI: ffffffff8c401600 RDI: ffffffff81df2bd7 [ 316.564552][ C1] RBP: ffffed1003d504a8 R08: 0000000000000000 R09: ffffed10170a678d [ 316.564566][ C1] R10: ffff8880b8533c6b R11: ffffffff81d6005c R12: 0000000000000000 [ 316.564581][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 316.564598][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 316.564631][ C1] ? ct_kernel_exit+0x125/0x180 [ 316.564655][ C1] ? do_idle+0x3a7/0x5b0 [ 316.564686][ C1] default_idle+0x9/0x10 [ 316.564712][ C1] default_idle_call+0x6c/0xb0 [ 316.564739][ C1] do_idle+0x3a7/0x5b0 [ 316.564770][ C1] ? __pfx_do_idle+0x10/0x10 [ 316.564800][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 316.564836][ C1] cpu_startup_entry+0x4f/0x60 [ 316.564868][ C1] start_secondary+0x21d/0x2d0 [ 316.564897][ C1] ? __pfx_start_secondary+0x10/0x10 [ 316.564928][ C1] common_startup_64+0x13e/0x158 [ 316.564969][ C1] [ 316.841869][ C1] FAULT_INJECTION: forcing a failure. [ 316.841869][ C1] name failslab, interval 1, probability 1, space 0, times 57 [ 316.867568][ T1033] FAULT_INJECTION: forcing a failure. [ 316.867568][ T1033] name failslab, interval 1, probability 1, space 0, times 56 [ 316.871969][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 316.872005][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 316.872014][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 316.872028][ C1] Call Trace: [ 316.872035][ C1] [ 316.872043][ C1] dump_stack_lvl+0x100/0x190 [ 316.872073][ C1] should_fail_ex.cold+0x5/0xa [ 316.872101][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.872130][ C1] should_failslab+0xc2/0x120 [ 316.872160][ C1] __kmalloc_cache_noprof+0x91/0x6c0 [ 316.872196][ C1] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 316.872224][ C1] dst_cow_metrics_generic+0x4c/0x1e0 [ 316.872250][ C1] icmp6_dst_alloc+0x418/0x4f0 [ 316.872280][ C1] ndisc_send_skb+0x133f/0x1bf0 [ 316.872310][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 316.872338][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 316.872367][ C1] ? kmalloc_reserve+0xf9/0x350 [ 316.872405][ C1] ? ndisc_alloc_skb+0x319/0x530 [ 316.872431][ C1] ? __asan_memcpy+0x3c/0x60 [ 316.872455][ C1] ndisc_send_rs+0x129/0x680 [ 316.872485][ C1] addrconf_rs_timer+0x424/0x880 [ 316.872511][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 316.872537][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 316.872568][ C1] ? lock_release+0x24d/0x310 [ 316.872595][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 316.872620][ C1] call_timer_fn+0x19a/0x610 [ 316.872646][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 316.872673][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.872708][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.872743][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 316.872768][ C1] __run_timers+0x757/0xb00 [ 316.872797][ C1] ? __pfx___run_timers+0x10/0x10 [ 316.872823][ C1] ? rcu_is_watching+0x12/0xc0 [ 316.872857][ C1] ? clockevents_program_event+0x23e/0x820 [ 316.872896][ C1] ? ktime_get+0x9f/0x320 [ 316.872922][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 316.872961][ C1] run_timer_base+0x114/0x190 [ 316.872987][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 316.873015][ C1] run_timer_softirq+0x1a/0x50 [ 316.873042][ C1] handle_softirqs+0x1ea/0x9b0 [ 316.873074][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 316.873107][ C1] ? _raw_spin_unlock+0x28/0x50 [ 316.873141][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 316.873164][ C1] __irq_exit_rcu+0x162/0x210 [ 316.873192][ C1] irq_exit_rcu+0x9/0x30 [ 316.873220][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 316.873244][ C1] [ 316.873250][ C1] [ 316.873258][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.873283][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 316.873308][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 316.873330][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 316.873348][ C1] RAX: 000000000147e6cc RBX: ffff88801ea82540 RCX: ffffffff8bbb22d5 [ 316.873363][ C1] RDX: 0000000000000001 RSI: ffffffff8c401600 RDI: ffffffff81df2bd7 [ 316.873378][ C1] RBP: ffffed1003d504a8 R08: 0000000000000000 R09: ffffed10170a678d [ 316.873393][ C1] R10: ffff8880b8533c6b R11: ffffffff81d6005c R12: 0000000000000000 [ 316.873408][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 316.873425][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 316.873459][ C1] ? ct_kernel_exit+0x125/0x180 [ 316.873483][ C1] ? do_idle+0x3a7/0x5b0 [ 316.873515][ C1] default_idle+0x9/0x10 [ 316.873541][ C1] default_idle_call+0x6c/0xb0 [ 316.873569][ C1] do_idle+0x3a7/0x5b0 [ 316.873599][ C1] ? __pfx_do_idle+0x10/0x10 [ 316.873629][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 316.873663][ C1] cpu_startup_entry+0x4f/0x60 [ 316.873697][ C1] start_secondary+0x21d/0x2d0 [ 316.873726][ C1] ? __pfx_start_secondary+0x10/0x10 [ 316.873758][ C1] common_startup_64+0x13e/0x158 [ 316.873799][ C1] [ 319.211879][ T1033] CPU: 0 UID: 0 PID: 1033 Comm: kworker/u8:6 Tainted: G D L syzkaller #0 PREEMPT(full) [ 319.211899][ T1033] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 319.211904][ T1033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 319.211912][ T1033] Workqueue: events_unbound cfg80211_wiphy_work [ 319.211935][ T1033] Call Trace: [ 319.211941][ T1033] [ 319.211946][ T1033] dump_stack_lvl+0x100/0x190 [ 319.211961][ T1033] should_fail_ex.cold+0x5/0xa [ 319.211974][ T1033] should_failslab+0xc2/0x120 [ 319.211990][ T1033] __kmalloc_noprof+0xfc/0x820 [ 319.212004][ T1033] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 319.212024][ T1033] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 319.212043][ T1033] ? kasan_save_stack+0x3f/0x50 [ 319.212056][ T1033] ? kasan_save_stack+0x30/0x50 [ 319.212068][ T1033] ? kasan_save_track+0x14/0x30 [ 319.212081][ T1033] ? __kasan_kmalloc+0xaa/0xb0 [ 319.212093][ T1033] ? __kmalloc_noprof+0x322/0x820 [ 319.212105][ T1033] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 319.212120][ T1033] ? ieee80211_bss_info_update+0x310/0xab0 [ 319.212137][ T1033] ? ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 319.212153][ T1033] ? ieee80211_iface_work+0xa9a/0x1070 [ 319.212170][ T1033] ? rcu_is_watching+0x12/0xc0 [ 319.212188][ T1033] ? __kfree_rcu_sheaf+0x195/0x730 [ 319.212202][ T1033] ? rcu_is_watching+0x12/0xc0 [ 319.212219][ T1033] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 319.212239][ T1033] ? kvfree_call_rcu+0x1be/0x4f0 [ 319.212257][ T1033] ? __asan_memcpy+0x3c/0x60 [ 319.212269][ T1033] ieee80211_inform_bss+0x159/0x1170 [ 319.212286][ T1033] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 319.212303][ T1033] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 319.212319][ T1033] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 319.212335][ T1033] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 319.212351][ T1033] ? unwind_next_frame+0x3be/0x2090 [ 319.212364][ T1033] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 319.212379][ T1033] ? ret_from_fork_asm+0x1a/0x30 [ 319.212400][ T1033] ? stack_trace_save+0x8e/0xc0 [ 319.212412][ T1033] ? __pfx_stack_trace_save+0x10/0x10 [ 319.212424][ T1033] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 319.212439][ T1033] cfg80211_inform_bss_data+0x230/0x3b60 [ 319.212454][ T1033] ? __kmalloc_noprof+0x322/0x820 [ 319.212466][ T1033] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 319.212484][ T1033] ? cfg80211_wiphy_work+0x2b7/0x550 [ 319.212499][ T1033] ? process_one_work+0xa23/0x1940 [ 319.212511][ T1033] ? worker_thread+0x5ef/0xe50 [ 319.212522][ T1033] ? kthread+0x370/0x450 [ 319.212533][ T1033] ? ret_from_fork+0x72b/0xd50 [ 319.212548][ T1033] ? ret_from_fork_asm+0x1a/0x30 [ 319.212570][ T1033] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 319.212587][ T1033] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.212601][ T1033] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 319.212623][ T1033] ? sta_info_hash_lookup+0x259/0x660 [ 319.212642][ T1033] ? sta_info_get+0x215/0x3e0 [ 319.212651][ T1033] ? rcu_is_watching+0x12/0xc0 [ 319.212668][ T1033] ? ieee80211_sta_get_rates+0x43b/0x5c0 [ 319.212682][ T1033] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 319.212698][ T1033] ? rcu_is_watching+0x12/0xc0 [ 319.212714][ T1033] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 319.212730][ T1033] ? lock_release+0x24d/0x310 [ 319.212745][ T1033] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 319.212763][ T1033] ieee80211_bss_info_update+0x310/0xab0 [ 319.212779][ T1033] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 319.212799][ T1033] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 319.212811][ T1033] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 319.212829][ T1033] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 319.212847][ T1033] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 319.212860][ T1033] ieee80211_iface_work+0xa9a/0x1070 [ 319.212878][ T1033] cfg80211_wiphy_work+0x2b7/0x550 [ 319.212894][ T1033] process_one_work+0xa23/0x1940 [ 319.212909][ T1033] ? __pfx_process_one_work+0x10/0x10 [ 319.212923][ T1033] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 319.212939][ T1033] worker_thread+0x5ef/0xe50 [ 319.212953][ T1033] ? kthread+0x13a/0x450 [ 319.212964][ T1033] ? __pfx_worker_thread+0x10/0x10 [ 319.212975][ T1033] kthread+0x370/0x450 [ 319.212986][ T1033] ? __pfx_kthread+0x10/0x10 [ 319.212996][ T1033] ret_from_fork+0x72b/0xd50 [ 319.213012][ T1033] ? __pfx_ret_from_fork+0x10/0x10 [ 319.213028][ T1033] ? __switch_to+0x800/0x10f0 [ 319.213039][ T1033] ? __pfx_kthread+0x10/0x10 [ 319.213050][ T1033] ret_from_fork_asm+0x1a/0x30 [ 319.213070][ T1033] [ 319.215338][ C0] FAULT_INJECTION: forcing a failure. [ 319.215338][ C0] name failslab, interval 1, probability 1, space 0, times 54 [ 319.216470][ T5897] FAULT_INJECTION: forcing a failure. [ 319.216470][ T5897] name failslab, interval 1, probability 1, space 0, times 54 [ 319.226391][ C0] CPU: 0 UID: 0 PID: 1033 Comm: kworker/u8:6 Tainted: G D L syzkaller #0 PREEMPT(full) [ 319.226427][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 319.226436][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 319.226451][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 319.226484][ C0] Call Trace: [ 319.226491][ C0] [ 319.226499][ C0] dump_stack_lvl+0x100/0x190 [ 319.226526][ C0] should_fail_ex.cold+0x5/0xa [ 319.226550][ C0] ? xa_store+0x3f/0x50 [ 319.226582][ C0] should_failslab+0xc2/0x120 [ 319.226612][ C0] kmem_cache_alloc_noprof+0x91/0x6a0 [ 319.226637][ C0] ? skb_clone+0x190/0x400 [ 319.226666][ C0] skb_clone+0x190/0x400 [ 319.226693][ C0] hsr_create_tagged_frame+0x983/0xf00 [ 319.226728][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 319.226760][ C0] ? hsr_check_duplicate.isra.0+0xd2/0x120 [ 319.226789][ C0] ? hsr_drop_frame+0x1f3/0xb80 [ 319.226825][ C0] hsr_forward_skb+0x1396/0x28d0 [ 319.226846][ C0] ? __pfx_hsr_drop_frame+0x10/0x10 [ 319.226882][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 319.226905][ C0] ? __asan_memset+0x23/0x50 [ 319.226925][ C0] ? __skb_pad+0x252/0x600 [ 319.226958][ C0] send_hsr_supervision_frame+0x696/0xbc0 [ 319.226993][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 319.227025][ C0] hsr_announce+0x169/0x3e0 [ 319.227056][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 319.227087][ C0] ? lock_acquire+0x301/0x370 [ 319.227112][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 319.227142][ C0] ? lock_release+0x24d/0x310 [ 319.227170][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 319.227200][ C0] call_timer_fn+0x19a/0x610 [ 319.227225][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 319.227251][ C0] ? rcu_is_watching+0x12/0xc0 [ 319.227285][ C0] ? rcu_is_watching+0x12/0xc0 [ 319.227319][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 319.227349][ C0] __run_timers+0x757/0xb00 [ 319.227377][ C0] ? __pfx___run_timers+0x10/0x10 [ 319.227407][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 319.227443][ C0] run_timer_base+0x114/0x190 [ 319.227469][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 319.227496][ C0] run_timer_softirq+0x1a/0x50 [ 319.227521][ C0] handle_softirqs+0x1ea/0x9b0 [ 319.227553][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 319.227586][ C0] ? irqtime_account_delta+0x9a/0x110 [ 319.227610][ C0] ? cfg80211_inform_single_bss_data+0x959/0x1dc0 [ 319.227641][ C0] do_softirq+0xac/0xe0 [ 319.227670][ C0] [ 319.227676][ C0] [ 319.227684][ C0] __local_bh_enable_ip+0xf8/0x120 [ 319.227714][ C0] cfg80211_inform_single_bss_data+0x959/0x1dc0 [ 319.227745][ C0] ? unwind_next_frame+0x3be/0x2090 [ 319.227770][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 319.227802][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 319.227843][ C0] ? stack_trace_save+0x8e/0xc0 [ 319.227865][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 319.227891][ C0] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 319.227920][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 319.227951][ C0] ? __kmalloc_noprof+0x322/0x820 [ 319.227975][ C0] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 319.228012][ C0] ? cfg80211_wiphy_work+0x2b7/0x550 [ 319.228042][ C0] ? process_one_work+0xa23/0x1940 [ 319.228066][ C0] ? worker_thread+0x5ef/0xe50 [ 319.228089][ C0] ? kthread+0x370/0x450 [ 319.228110][ C0] ? ret_from_fork+0x72b/0xd50 [ 319.228141][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 319.228176][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 319.228210][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.228237][ C0] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 319.228281][ C0] ? sta_info_hash_lookup+0x259/0x660 [ 319.228318][ C0] ? sta_info_get+0x215/0x3e0 [ 319.228337][ C0] ? rcu_is_watching+0x12/0xc0 [ 319.228369][ C0] ? ieee80211_sta_get_rates+0x43b/0x5c0 [ 319.228399][ C0] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 319.228431][ C0] ? rcu_is_watching+0x12/0xc0 [ 319.228463][ C0] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 319.228496][ C0] ? lock_release+0x24d/0x310 [ 319.228525][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 319.228559][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 319.228597][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 319.228634][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 319.228660][ C0] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 319.228694][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 319.228731][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 319.228755][ C0] ieee80211_iface_work+0xa9a/0x1070 [ 319.228791][ C0] cfg80211_wiphy_work+0x2b7/0x550 [ 319.228823][ C0] process_one_work+0xa23/0x1940 [ 319.228852][ C0] ? __pfx_process_one_work+0x10/0x10 [ 319.228880][ C0] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 319.228912][ C0] worker_thread+0x5ef/0xe50 [ 319.228940][ C0] ? kthread+0x13a/0x450 [ 319.228960][ C0] ? __pfx_worker_thread+0x10/0x10 [ 319.228984][ C0] kthread+0x370/0x450 [ 319.229004][ C0] ? __pfx_kthread+0x10/0x10 [ 319.229026][ C0] ret_from_fork+0x72b/0xd50 [ 319.229057][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 319.229088][ C0] ? __switch_to+0x800/0x10f0 [ 319.229111][ C0] ? __pfx_kthread+0x10/0x10 [ 319.229133][ C0] ret_from_fork_asm+0x1a/0x30 [ 319.229172][ C0] [ 319.234422][ T4976] FAULT_INJECTION: forcing a failure. [ 319.234422][ T4976] name failslab, interval 1, probability 1, space 0, times 53 [ 319.406942][ C1] FAULT_INJECTION: forcing a failure. [ 319.406942][ C1] name failslab, interval 1, probability 1, space 0, times 53 [ 319.434992][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.437210][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 319.437247][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 319.437255][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 319.437269][ C1] Call Trace: [ 319.437276][ C1] [ 319.437283][ C1] dump_stack_lvl+0x100/0x190 [ 319.437313][ C1] should_fail_ex.cold+0x5/0xa [ 319.437339][ C1] should_failslab+0xc2/0x120 [ 319.437369][ C1] __kmalloc_noprof+0xfc/0x820 [ 319.437394][ C1] ? cfg80211_inform_single_bss_data+0x959/0x1dc0 [ 319.437434][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 319.437465][ C1] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 319.437499][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 319.437539][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 319.437561][ C1] ? common_startup_64+0x13e/0x158 [ 319.437599][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 319.437628][ C1] cfg80211_inform_bss_data+0x230/0x3b60 [ 319.437659][ C1] ? common_startup_64+0x13e/0x158 [ 319.437696][ C1] ? stack_trace_save+0x8e/0xc0 [ 319.437720][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 319.437750][ C1] ? unwind_next_frame+0x3be/0x2090 [ 319.437771][ C1] ? rcu_is_watching+0x12/0xc0 [ 319.437805][ C1] ? rcu_is_watching+0x12/0xc0 [ 319.437838][ C1] ? unwind_next_frame+0x3be/0x2090 [ 319.437859][ C1] ? rcu_is_watching+0x12/0xc0 [ 319.437892][ C1] ? rcu_is_watching+0x12/0xc0 [ 319.437930][ C1] ? unwind_next_frame+0x3be/0x2090 [ 319.437951][ C1] ? rcu_is_watching+0x12/0xc0 [ 319.437983][ C1] ? unwind_next_frame+0x3be/0x2090 [ 319.438004][ C1] ? lock_release+0x24d/0x310 [ 319.438034][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 319.438058][ C1] ? arch_stack_walk+0x94/0xf0 [ 319.438095][ C1] ? common_startup_64+0x13e/0x158 [ 319.438130][ C1] ? kfree_skbmem+0x19a/0x210 [ 319.438167][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 319.438200][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 319.438234][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 319.438267][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 319.438296][ C1] ? hrtimer_run_softirq+0x17d/0x2c0 [ 319.438330][ C1] ? handle_softirqs+0x1ea/0x9b0 [ 319.438360][ C1] ? do_idle+0x3a7/0x5b0 [ 319.438390][ C1] ? cpu_startup_entry+0x4f/0x60 [ 319.438421][ C1] ? start_secondary+0x21d/0x2d0 [ 319.438449][ C1] ? common_startup_64+0x13e/0x158 [ 319.438484][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 319.438510][ C1] ieee80211_scan_rx+0x4e6/0xb60 [ 319.438540][ C1] ? ieee80211_get_buffered_bc+0x4fe/0x8d0 [ 319.438570][ C1] ? rcu_is_watching+0x12/0xc0 [ 319.438604][ C1] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 319.438642][ C1] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 319.438678][ C1] ? do_raw_spin_lock+0x128/0x260 [ 319.438714][ C1] ? ieee80211_clean_skb+0x1a7/0x740 [ 319.438745][ C1] ieee80211_rx_list+0xf19/0x2160 [ 319.438784][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 319.438818][ C1] ? lock_acquire+0x301/0x370 [ 319.438846][ C1] ieee80211_rx_napi+0xdc/0x400 [ 319.438880][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 319.438915][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 319.438943][ C1] ieee80211_handle_queued_frames+0xc8/0x120 [ 319.438975][ C1] tasklet_action_common+0x2de/0x3d0 [ 319.439008][ C1] handle_softirqs+0x1ea/0x9b0 [ 319.439038][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 319.439067][ C1] ? _raw_spin_unlock+0x28/0x50 [ 319.439101][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 319.439125][ C1] __irq_exit_rcu+0x162/0x210 [ 319.439152][ C1] irq_exit_rcu+0x9/0x30 [ 319.439180][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 319.439204][ C1] [ 319.439211][ C1] [ 319.439218][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.439244][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 319.439269][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 319.439291][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 319.439309][ C1] RAX: 000000000147e7ec RBX: ffff88801ea82540 RCX: ffffffff8bbb22d5 [ 319.439325][ C1] RDX: 0000000000000001 RSI: ffffffff8c401600 RDI: ffffffff81df2bd7 [ 319.439339][ C1] RBP: ffffed1003d504a8 R08: 0000000000000000 R09: ffffed10170a678d [ 319.439354][ C1] R10: ffff8880b8533c6b R11: 0000004a56b74400 R12: 0000000000000000 [ 319.439368][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 319.439386][ C1] ? ct_kernel_exit+0x125/0x180 [ 319.439410][ C1] ? do_idle+0x3a7/0x5b0 [ 319.439441][ C1] default_idle+0x9/0x10 [ 319.439468][ C1] default_idle_call+0x6c/0xb0 [ 319.439494][ C1] do_idle+0x3a7/0x5b0 [ 319.439525][ C1] ? __pfx_do_idle+0x10/0x10 [ 319.439555][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 319.439590][ C1] cpu_startup_entry+0x4f/0x60 [ 319.439623][ C1] start_secondary+0x21d/0x2d0 [ 319.439651][ C1] ? __pfx_start_secondary+0x10/0x10 [ 319.439682][ C1] common_startup_64+0x13e/0x158 [ 319.439722][ C1] [ 319.439858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 319.444806][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.596455][ T4976] CPU: 1 UID: 0 PID: 4976 Comm: udevd Tainted: G D L syzkaller #0 PREEMPT(full) [ 319.596490][ T4976] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 319.596497][ T4976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 319.596510][ T4976] Call Trace: [ 319.596516][ T4976] [ 319.596524][ T4976] dump_stack_lvl+0x100/0x190 [ 319.596552][ T4976] should_fail_ex.cold+0x5/0xa [ 319.596574][ T4976] ? fs_reclaim_acquire+0x70/0x100 [ 319.596601][ T4976] should_failslab+0xc2/0x120 [ 319.596628][ T4976] __kmalloc_noprof+0xfc/0x820 [ 319.596650][ T4976] ? rcu_is_watching+0x12/0xc0 [ 319.596680][ T4976] ? tomoyo_realpath_from_path+0xb6/0x690 [ 319.596704][ T4976] tomoyo_realpath_from_path+0xb6/0x690 [ 319.596726][ T4976] tomoyo_path_perm+0x276/0x460 [ 319.596753][ T4976] ? tomoyo_path_perm+0x262/0x460 [ 319.596780][ T4976] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 319.596821][ T4976] ? rcu_is_watching+0x12/0xc0 [ 319.596850][ T4976] ? __might_fault+0xc5/0x140 [ 319.596868][ T4976] ? rcu_is_watching+0x12/0xc0 [ 319.596899][ T4976] security_inode_getattr+0x116/0x280 [ 319.596929][ T4976] vfs_statx+0x11f/0x3f0 [ 319.596953][ T4976] ? __pfx_vfs_statx+0x10/0x10 [ 319.596976][ T4976] ? do_getname+0x191/0x390 [ 319.597002][ T4976] vfs_fstatat+0x77/0xe0 [ 319.597026][ T4976] __do_sys_newfstatat+0x9d/0x120 [ 319.597050][ T4976] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 319.597083][ T4976] ? rcu_is_watching+0x12/0xc0 [ 319.597114][ T4976] do_syscall_64+0x115/0x870 [ 319.597136][ T4976] ? clear_bhb_loop+0x40/0x90 [ 319.597158][ T4976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.597179][ T4976] RIP: 0033:0x7f25e6311b0a [ 319.597195][ T4976] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 319.597215][ T4976] RSP: 002b:00007ffe059fb688 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 319.597235][ T4976] RAX: ffffffffffffffda RBX: 0000555c80149418 RCX: 00007f25e6311b0a [ 319.597250][ T4976] RDX: 00007ffe059fb690 RSI: 0000555c80137ef3 RDI: 00000000ffffff9c [ 319.597263][ T4976] RBP: 0000555c8f26a668 R08: 000657b81bd8a094 R09: 0000000000000001 [ 319.597276][ T4976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.597289][ T4976] R13: 00007ffe059fb690 R14: 0000000000000000 R15: 000657b81bd8a094 [ 319.597308][ T4976] [ 319.597316][ T4976] ERROR: Out of memory at tomoyo_realpath_from_path. [ 319.605014][ T6608] CPU: 0 UID: 0 PID: 6608 Comm: kworker/u8:13 Tainted: G D L syzkaller #0 PREEMPT(full) [ 319.605049][ T6608] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 319.605056][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 319.605070][ T6608] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 319.605099][ T6608] Call Trace: [ 319.605105][ T6608] [ 319.605112][ T6608] dump_stack_lvl+0x100/0x190 [ 319.605137][ T6608] should_fail_ex.cold+0x5/0xa [ 319.605158][ T6608] ? rcu_is_watching+0x12/0xc0 [ 319.605190][ T6608] should_failslab+0xc2/0x120 [ 319.605216][ T6608] __kmalloc_cache_noprof+0x91/0x6c0 [ 319.605250][ T6608] ? batadv_forw_packet_alloc+0x3a9/0x4d0 [ 319.605278][ T6608] batadv_forw_packet_alloc+0x3a9/0x4d0 [ 319.605306][ T6608] batadv_iv_ogm_aggregate_new+0x126/0x4b0 [ 319.605330][ T6608] batadv_iv_ogm_schedule_buff+0x1120/0x15e0 [ 319.605357][ T6608] ? __pfx_batadv_iv_ogm_schedule_buff+0x10/0x10 [ 319.605384][ T6608] batadv_iv_send_outstanding_bat_ogm_packet+0x548/0x800 [ 319.605413][ T6608] process_one_work+0xa23/0x1940 [ 319.605440][ T6608] ? __pfx_process_one_work+0x10/0x10 [ 319.605465][ T6608] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 319.605492][ T6608] worker_thread+0x5ef/0xe50 [ 319.605517][ T6608] ? __pfx_worker_thread+0x10/0x10 [ 319.605539][ T6608] ? kthread+0x13a/0x450 [ 319.605557][ T6608] ? __pfx_worker_thread+0x10/0x10 [ 319.605578][ T6608] kthread+0x370/0x450 [ 319.605597][ T6608] ? __pfx_kthread+0x10/0x10 [ 319.605617][ T6608] ret_from_fork+0x72b/0xd50 [ 319.605645][ T6608] ? __pfx_ret_from_fork+0x10/0x10 [ 319.605672][ T6608] ? rcu_is_watching+0x12/0xc0 [ 319.605701][ T6608] ? __switch_to+0x800/0x10f0 [ 319.605721][ T6608] ? __pfx_kthread+0x10/0x10 [ 319.605741][ T6608] ret_from_fork_asm+0x1a/0x30 [ 319.605779][ T6608] [ 319.608755][ T6608] FAULT_INJECTION: forcing a failure. [ 319.608755][ T6608] name failslab, interval 1, probability 1, space 0, times 48 [ 319.615289][ C1] FAULT_INJECTION: forcing a failure. [ 319.615289][ C1] name failslab, interval 1, probability 1, space 0, times 48 [ 319.620359][ T6608] CPU: 0 UID: 0 PID: 6608 Comm: kworker/u8:13 Tainted: G D L syzkaller #0 PREEMPT(full) [ 319.620395][ T6608] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 319.620403][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 319.620417][ T6608] Workqueue: events_unbound nsim_dev_trap_report_work [ 319.620444][ T6608] Call Trace: [ 319.620450][ T6608] [ 319.620457][ T6608] dump_stack_lvl+0x100/0x190 [ 319.620482][ T6608] should_fail_ex.cold+0x5/0xa [ 319.620505][ T6608] should_failslab+0xc2/0x120 [ 319.620531][ T6608] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 319.620556][ T6608] ? __alloc_skb+0x5b7/0x710 [ 319.620579][ T6608] ? __alloc_skb+0x140/0x710 [ 319.620602][ T6608] __alloc_skb+0x140/0x710 [ 319.620624][ T6608] ? __alloc_skb+0x5b7/0x710 [ 319.620646][ T6608] ? __pfx___alloc_skb+0x10/0x10 [ 319.620669][ T6608] ? kfree_skbmem+0x19f/0x210 [ 319.620700][ T6608] nsim_dev_trap_report_work+0x2af/0xd20 [ 319.620731][ T6608] process_one_work+0xa23/0x1940 [ 319.620757][ T6608] ? __pfx_process_one_work+0x10/0x10 [ 319.620782][ T6608] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 319.620809][ T6608] worker_thread+0x5ef/0xe50 [ 319.620833][ T6608] ? __pfx_worker_thread+0x10/0x10 [ 319.620855][ T6608] ? kthread+0x13a/0x450 [ 319.620873][ T6608] ? __pfx_worker_thread+0x10/0x10 [ 319.620894][ T6608] kthread+0x370/0x450 [ 319.620913][ T6608] ? __pfx_kthread+0x10/0x10 [ 319.620938][ T6608] ret_from_fork+0x72b/0xd50 [ 319.620965][ T6608] ? __pfx_ret_from_fork+0x10/0x10 [ 319.620993][ T6608] ? rcu_is_watching+0x12/0xc0 [ 319.621022][ T6608] ? __switch_to+0x800/0x10f0 [ 319.621043][ T6608] ? __pfx_kthread+0x10/0x10 [ 319.621063][ T6608] ret_from_fork_asm+0x1a/0x30 [ 319.621097][ T6608] [ 319.629102][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz-executor Tainted: G D L syzkaller #0 PREEMPT(full) [ 319.629136][ T5612] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 319.629144][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 319.629156][ T5612] Call Trace: [ 319.629162][ T5612] [ 319.629169][ T5612] dump_stack_lvl+0x100/0x190 [ 319.629194][ T5612] should_fail_ex.cold+0x5/0xa [ 319.629217][ T5612] should_failslab+0xc2/0x120 [ 319.629243][ T5612] __kmalloc_cache_noprof+0x91/0x6c0 [ 319.629275][ T5612] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 319.629309][ T5612] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 319.629340][ T5612] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 319.629373][ T5612] selinux_socket_post_create+0x368/0x7e0 [ 319.629404][ T5612] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 319.629433][ T5612] ? tcp_v4_init_sock+0x15/0xb0 [ 319.629456][ T5612] ? __pfx_tcp_v4_init_sock+0x10/0x10 [ 319.629477][ T5612] ? inet_create+0x962/0x1060 [ 319.629503][ T5612] security_socket_post_create+0xaf/0x270 [ 319.629533][ T5612] __sock_create+0x70b/0x860 [ 319.629566][ T5612] __sys_socket+0x14d/0x260 [ 319.629586][ T5612] ? __pfx___sys_socket+0x10/0x10 [ 319.629609][ T5612] __x64_sys_socket+0x72/0xb0 [ 319.629629][ T5612] do_syscall_64+0x115/0x870 [ 319.629652][ T5612] ? clear_bhb_loop+0x40/0x90 [ 319.629676][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.629698][ T5612] RIP: 0033:0x7f89c299f707 [ 319.629715][ T5612] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.629734][ T5612] RSP: 002b:00007ffc64eb5bc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 319.629754][ T5612] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f89c299f707 [ 319.629769][ T5612] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 319.629781][ T5612] RBP: 00007ffc64eb62cc R08: 0000000000000000 R09: 0000000000000000 [ 319.629795][ T5612] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000006b [ 319.629809][ T5612] R13: 0000000000000054 R14: 000000000004bc98 R15: 00007ffc64eb6320 [ 319.629829][ T5612] [ 319.633133][ T6608] FAULT_INJECTION: forcing a failure. [ 319.633133][ T6608] name failslab, interval 1, probability 1, space 0, times 46 [ 319.634168][ C1] CPU: 1 UID: 0 PID: 4976 Comm: udevd Tainted: G D L syzkaller #0 PREEMPT(full) [ 319.634203][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 319.634211][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 319.634224][ C1] Call Trace: [ 319.634231][ C1] [ 319.634238][ C1] dump_stack_lvl+0x100/0x190 [ 319.634265][ C1] should_fail_ex.cold+0x5/0xa [ 319.634290][ C1] should_failslab+0xc2/0x120 [ 319.634319][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 319.634345][ C1] ? __alloc_skb+0x5b7/0x710 [ 319.634369][ C1] ? __alloc_skb+0x140/0x710 [ 319.634396][ C1] __alloc_skb+0x140/0x710 [ 319.634420][ C1] ? __alloc_skb+0x5b7/0x710 [ 319.634447][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 319.634473][ C1] ? do_raw_spin_lock+0x128/0x260 [ 319.634506][ C1] skb_copy+0x1ca/0x3a0 [ 319.634531][ C1] mac80211_hwsim_tx_frame_no_nl+0xc7f/0x1830 [ 319.634563][ C1] ? lock_release+0x24d/0x310 [ 319.634590][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 319.634618][ C1] ? __ieee80211_beacon_get+0x7df/0x1ee0 [ 319.634647][ C1] ? sched_balance_rq+0x837/0x3b10 [ 319.634678][ C1] ? lock_release+0x24d/0x310 [ 319.634706][ C1] ? ieee80211_beacon_get_tim+0x1c8/0x280 [ 319.634734][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 319.634764][ C1] mac80211_hwsim_tx_frame+0x1b7/0x250 [ 319.634793][ C1] mac80211_hwsim_beacon_tx+0x56c/0xa00 [ 319.634822][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 319.634855][ C1] __iterate_interfaces+0x2e6/0x650 [ 319.634880][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 319.634910][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 319.634938][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 319.634968][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 319.635004][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 319.635039][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 319.635078][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 319.635113][ C1] handle_softirqs+0x1ea/0x9b0 [ 319.635145][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 319.635173][ C1] ? _raw_spin_unlock+0x28/0x50 [ 319.635207][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 319.635229][ C1] __irq_exit_rcu+0x162/0x210 [ 319.635258][ C1] irq_exit_rcu+0x9/0x30 [ 319.635285][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 319.635309][ C1] [ 319.635315][ C1] [ 319.635323][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.635348][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 319.635384][ C1] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 319.635406][ C1] RSP: 0018:ffffc90003887658 EFLAGS: 00000293 [ 319.635424][ C1] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 319.635443][ C1] RDX: ffff88807d9f4a80 RSI: ffffffff81e88a0f RDI: ffff88807d9f4a80 [ 319.635459][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 319.635473][ C1] R10: 0000000000000000 R11: 205d333330315420 R12: 00000000000015cc [ 319.635487][ C1] R13: ffffffff8f9acd98 R14: ffffc900038876d8 R15: dffffc0000000000 [ 319.635506][ C1] ? console_flush_one_record+0xab1/0xe50 [ 319.635540][ C1] ? console_flush_one_record+0xabf/0xe50 [ 319.635576][ C1] ? console_flush_one_record+0xabf/0xe50 [ 319.635612][ C1] ? __pfx_console_flush_one_record+0x10/0x10