last executing test programs: 30.846823766s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@cgroup, 0x11, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write(r0, &(0x7f0000000140)='10', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='100\x00', 0x3) close(r0) socket$packet(0x11, 0x3, 0x300) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x7919, &(0x7f0000000280)={0x0, 0x9e86, 0x80000, 0x2, 0x133}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r4 = io_uring_setup(0x2b2, &(0x7f0000000500)={0x0, 0x2e8a1, 0x800, 0x0, 0xfb, 0x0, r3}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {&(0x7f00000004c0)=[{0x2, 0x6, 0xc, 0x1}], 0x1, 0x28, 0x0, 0x2}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x6bf1c2d5adba8c32}) 20.964102317s ago: executing program 2 (id=3): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 16.099488836s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./configfs\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./configfs\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./configfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='usb_gadget/g1/functions/mass_storage.0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f00000000c0)='usb_gadget/g1/functions/mass_storage.0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='usb_gadget/g1/configs/c.1/mass_storage.0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='dummy_udc.0\x00', 0xb) write(r0, &(0x7f0000000200)='\n\x00', 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='usb_gadget/g1/configs/c.1/mass_storage.0\x00', 0x0) rmdir(&(0x7f00000000c0)='usb_gadget/g1/functions/mass_storage.0\x00') 14.674690449s ago: executing program 32 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@cgroup, 0x11, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write(r0, &(0x7f0000000140)='10', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='100\x00', 0x3) close(r0) socket$packet(0x11, 0x3, 0x300) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x7919, &(0x7f0000000280)={0x0, 0x9e86, 0x80000, 0x2, 0x133}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r4 = io_uring_setup(0x2b2, &(0x7f0000000500)={0x0, 0x2e8a1, 0x800, 0x0, 0xfb, 0x0, r3}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {&(0x7f00000004c0)=[{0x2, 0x6, 0xc, 0x1}], 0x1, 0x28, 0x0, 0x2}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x6bf1c2d5adba8c32}) 9.287147479s ago: executing program 4 (id=5): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x9, 0x78, 0x4, 0x6, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r2, 0x1b}, 0x80, &(0x7f0000000f80)=[{&(0x7f00000004c0)="4af0d8209d1ded42caaa3a3ac5f19e31fb1bd27d77f461a95fe496d348159e02f8a736db32ebd8771bb92d47290bff14a2b3ff2b5eca40350700000099c5fc65604d7451d71f177d7d688424b273ed542a80a8bc33b0b429dbfd375450f56e2b83a34b8d1e2d572a4b0407bb734e04df7c5a597db6ca1ce271a332f9", 0x7c}], 0x1}, 0x20000015) 7.224234138s ago: executing program 4 (id=27): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000009c0)={0x0, 0x0, 0x20}, &(0x7f0000000a00)=0x18) 7.167426062s ago: executing program 4 (id=28): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x7ff8, 0xe}, {0xd, 0xb}, {0xb, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xf, 0xfff2}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1e9e2}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r7, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 6.961814428s ago: executing program 4 (id=29): syz_emit_ethernet(0x16e, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x4000) write(r0, &(0x7f0000000140)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='10', 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 6.826677905s ago: executing program 4 (id=30): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4.002284221s ago: executing program 4 (id=35): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x10, '\x00', @d}) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x2d6, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000002340)=@target={'target ', {'PCI:', '9', ':', '1d', ':', 'b', '.', '16'}}, 0x15) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x0, 0x841, 0x1) 3.90242344s ago: executing program 33 (id=35): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes128, 0x10, '\x00', @d}) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x2d6, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000002340)=@target={'target ', {'PCI:', '9', ':', '1d', ':', 'b', '.', '16'}}, 0x15) setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x0, 0x841, 0x1) 2.117486515s ago: executing program 0 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tmp\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/fs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/fs/nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./rpc_pipefs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f00000001c0)=@filename='sunrpc\x00', &(0x7f0000000200)='./rpc_pipefs\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@filename='none\x00', &(0x7f00000002c0)='./proc/fs/nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/fs/nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='1\n', 0x2) 467.180933ms ago: executing program 0 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_hcd.0\x00', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/devices/dummy_hcd.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='fsl-ehci\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/platform/drivers/fsl-ehci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000e00)='dummy_udc.0\x00', 0xc) 276.555376ms ago: executing program 0 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='serial8250\x00', 0xb) 161.902259ms ago: executing program 0 (id=42): mkdir(&(0x7f0000000100)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlink(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000c00)='./my_configfs/usb_gadget/g1/configs/c.1/uac2.usb0\x00') unlink(&(0x7f0000000c00)='./my_configfs/usb_gadget/g1/configs/c.1/uac2.usb0\x00') 143.477558ms ago: executing program 0 (id=43): mkdir(&(0x7f0000000040)='./trace\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sunrpc/rpc_task_begin/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./trace/events/sunrpc/rpc_task_run_action/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdir(&(0x7f0000000240)='./file0\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='127.0.0.1:/\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000340)='addr=127.0.0.1\x00') mkdir(&(0x7f0000000380)='./file1\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./file1\x00', &(0x7f0000000440)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=3,proto=tcp\x00') mkdir(&(0x7f00000004c0)='./file3\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000540)='./file3\x00', &(0x7f0000000580)='nfs4\x00', 0x0, &(0x7f00000005c0)='addr=127.0.0.1,vers=4,proto=tcp\x00') mkdir(&(0x7f0000000600)='./file4\x00', 0x1ff) mount(&(0x7f0000000640)=@filename='none\x00', &(0x7f0000000680)='./file4\x00', &(0x7f00000006c0)='rpc_pipefs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./file5\x00', 0x1ff) mount(&(0x7f0000000740)=@filename='none\x00', &(0x7f0000000780)='./file5\x00', &(0x7f00000007c0)='nfsd\x00', 0x0, 0x0) 0s ago: executing program 0 (id=44): r0 = io_uring_setup(0x40000a71, &(0x7f0000000240)={0x0, 0x86a1, 0x10, 0x3, 0x277}) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ] __irq_exit_rcu+0x162/0x210 [ 68.870898][ C1] irq_exit_rcu+0x9/0x30 [ 68.870917][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 68.870935][ C1] [ 68.870940][ C1] [ 68.870946][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 68.870965][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 68.870989][ C1] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 68.871004][ C1] RSP: 0018:ffffc900001e75f8 EFLAGS: 00000293 [ 68.871016][ C1] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 68.871026][ C1] RDX: ffff88801eee8000 RSI: ffffffff81e88a0f RDI: ffff88801eee8000 [ 68.871036][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 68.871046][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000a52 [ 68.871055][ C1] R13: ffffffff8f9acd98 R14: ffffc900001e7678 R15: dffffc0000000000 [ 68.871070][ C1] ? console_flush_one_record+0xab1/0xe50 [ 68.871093][ C1] ? console_flush_one_record+0xabf/0xe50 [ 68.871118][ C1] ? console_flush_one_record+0xabf/0xe50 [ 68.871146][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 68.871169][ C1] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 68.871190][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 68.871210][ C1] console_unlock+0x103/0x260 [ 68.871232][ C1] ? __pfx_console_unlock+0x10/0x10 [ 68.871255][ C1] ? lock_acquire+0x101/0x370 [ 68.871277][ C1] ? vprintk_emit+0x66a/0x6b0 [ 68.871303][ C1] vprintk_emit+0x407/0x6b0 [ 68.871326][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 68.871356][ C1] _printk+0xcf/0x110 [ 68.871371][ C1] ? __pfx__printk+0x10/0x10 [ 68.871385][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 68.871404][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 68.871427][ C1] ? __pfx____ratelimit+0x10/0x10 [ 68.871444][ C1] ? mld_sendpack+0x5ae/0xec0 [ 68.871466][ C1] should_fail_ex+0x4e4/0x640 [ 68.871489][ C1] should_failslab+0xc2/0x120 [ 68.871509][ C1] __kmalloc_cache_noprof+0x91/0x6c0 [ 68.871534][ C1] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 68.871557][ C1] dst_cow_metrics_generic+0x4c/0x1e0 [ 68.871576][ C1] icmp6_dst_alloc+0x418/0x4f0 [ 68.871598][ C1] mld_sendpack+0x5ae/0xec0 [ 68.871622][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 68.871653][ C1] mld_send_initial_cr+0x219/0x320 [ 68.871675][ C1] mld_dad_work+0x32/0x1f0 [ 68.871695][ C1] process_one_work+0xa23/0x1940 [ 68.871721][ C1] ? __pfx_process_one_work+0x10/0x10 [ 68.871745][ C1] ? __pfx_mld_dad_work+0x10/0x10 [ 68.871767][ C1] worker_thread+0x5ef/0xe50 [ 68.871792][ C1] ? kthread+0x13a/0x450 [ 68.871806][ C1] ? __pfx_worker_thread+0x10/0x10 [ 68.871823][ C1] kthread+0x370/0x450 [ 68.871837][ C1] ? __pfx_kthread+0x10/0x10 [ 68.871854][ C1] ret_from_fork+0x72b/0xd50 [ 68.871881][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 68.871903][ C1] ? __switch_to+0x800/0x10f0 [ 68.871919][ C1] ? __pfx_kthread+0x10/0x10 [ 68.871936][ C1] ret_from_fork_asm+0x1a/0x30 [ 68.871968][ C1] [ 68.871984][ C1] FAULT_INJECTION: forcing a failure. [ 68.871984][ C1] name failslab, interval 1, probability 10, space 0, times 18 [ 68.878196][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 68.878216][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.878225][ T12] Workqueue: events_unbound nsim_dev_trap_report_work [ 68.878244][ T12] Call Trace: [ 68.878249][ T12] [ 68.878254][ T12] dump_stack_lvl+0x100/0x190 [ 68.878273][ T12] should_fail_ex.cold+0x5/0xa [ 68.878292][ T12] should_failslab+0xc2/0x120 [ 68.878311][ T12] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 68.878331][ T12] ? __alloc_skb+0x140/0x710 [ 68.878351][ T12] __alloc_skb+0x140/0x710 [ 68.878367][ T12] ? __alloc_skb+0x5b7/0x710 [ 68.878389][ T12] ? __pfx___alloc_skb+0x10/0x10 [ 68.878408][ T12] ? kfree_skbmem+0x19f/0x210 [ 68.878434][ T12] nsim_dev_trap_report_work+0x2af/0xd20 [ 68.878463][ T12] process_one_work+0xa23/0x1940 [ 68.878488][ T12] ? __pfx_process_one_work+0x10/0x10 [ 68.878512][ T12] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 68.878533][ T12] worker_thread+0x5ef/0xe50 [ 68.878557][ T12] ? kthread+0x13a/0x450 [ 68.878570][ T12] ? __pfx_worker_thread+0x10/0x10 [ 68.878586][ T12] kthread+0x370/0x450 [ 68.878599][ T12] ? __pfx_kthread+0x10/0x10 [ 68.878615][ T12] ret_from_fork+0x72b/0xd50 [ 68.878637][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 68.878659][ T12] ? __switch_to+0x800/0x10f0 [ 68.878675][ T12] ? __pfx_kthread+0x10/0x10 [ 68.878690][ T12] ret_from_fork_asm+0x1a/0x30 [ 68.878723][ T12] [ 68.879540][ T5728] FAULT_INJECTION: forcing a failure. [ 68.879540][ T5728] name failslab, interval 1, probability 10, space 0, times 16 [ 68.886170][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 68.886191][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.886202][ C1] Workqueue: mld mld_dad_work [ 68.886224][ C1] Call Trace: [ 68.886230][ C1] [ 68.886236][ C1] dump_stack_lvl+0x100/0x190 [ 68.886258][ C1] should_fail_ex.cold+0x5/0xa [ 68.886277][ C1] should_failslab+0xc2/0x120 [ 68.886298][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 68.886318][ C1] ? __alloc_skb+0x140/0x710 [ 68.886340][ C1] __alloc_skb+0x140/0x710 [ 68.886356][ C1] ? __alloc_skb+0x5b7/0x710 [ 68.886373][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 68.886392][ C1] ? lock_acquire+0x1b9/0x370 [ 68.886416][ C1] __netdev_alloc_skb+0x7a/0x960 [ 68.886437][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 68.886460][ C1] ? __lock_acquire+0x49f/0x1a40 [ 68.886482][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 68.886503][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 68.886529][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 68.886557][ C1] __iterate_interfaces+0x2e6/0x650 [ 68.886575][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 68.886597][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 68.886617][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 68.886639][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 68.886663][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 68.886688][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 68.886719][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 68.886745][ C1] handle_softirqs+0x1ea/0x9b0 [ 68.886769][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 68.886789][ C1] ? _raw_spin_unlock+0x28/0x50 [ 68.886812][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 68.886830][ C1] __irq_exit_rcu+0x162/0x210 [ 68.886850][ C1] irq_exit_rcu+0x9/0x30 [ 68.886869][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 68.886891][ C1] [ 68.886896][ C1] [ 68.886902][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 68.886920][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 68.886945][ C1] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 68.886959][ C1] RSP: 0018:ffffc900001e75f8 EFLAGS: 00000293 [ 68.886971][ C1] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 68.886981][ C1] RDX: ffff88801eee8000 RSI: ffffffff81e88a0f RDI: ffff88801eee8000 [ 68.886991][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 68.887000][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000a52 [ 68.887009][ C1] R13: ffffffff8f9acd98 R14: ffffc900001e7678 R15: dffffc0000000000 [ 68.887024][ C1] ? console_flush_one_record+0xab1/0xe50 [ 68.887047][ C1] ? console_flush_one_record+0xabf/0xe50 [ 68.887073][ C1] ? console_flush_one_record+0xabf/0xe50 [ 68.887100][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 68.887123][ C1] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 68.887144][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 68.887163][ C1] console_unlock+0x103/0x260 [ 68.887186][ C1] ? __pfx_console_unlock+0x10/0x10 [ 68.887209][ C1] ? lock_acquire+0x101/0x370 [ 68.887231][ C1] ? vprintk_emit+0x66a/0x6b0 [ 68.887257][ C1] vprintk_emit+0x407/0x6b0 [ 68.887281][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 68.887310][ C1] _printk+0xcf/0x110 [ 68.887325][ C1] ? __pfx__printk+0x10/0x10 [ 68.887339][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 68.887357][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 68.887381][ C1] ? __pfx____ratelimit+0x10/0x10 [ 68.887396][ C1] ? mld_sendpack+0x5ae/0xec0 [ 68.887419][ C1] should_fail_ex+0x4e4/0x640 [ 68.887442][ C1] should_failslab+0xc2/0x120 [ 68.887462][ C1] __kmalloc_cache_noprof+0x91/0x6c0 [ 68.887487][ C1] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 68.887508][ C1] dst_cow_metrics_generic+0x4c/0x1e0 [ 68.887528][ C1] icmp6_dst_alloc+0x418/0x4f0 [ 68.887550][ C1] mld_sendpack+0x5ae/0xec0 [ 68.887573][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 68.887604][ C1] mld_send_initial_cr+0x219/0x320 [ 68.887626][ C1] mld_dad_work+0x32/0x1f0 [ 68.887647][ C1] process_one_work+0xa23/0x1940 [ 68.887673][ C1] ? __pfx_process_one_work+0x10/0x10 [ 68.887696][ C1] ? __pfx_mld_dad_work+0x10/0x10 [ 68.887719][ C1] worker_thread+0x5ef/0xe50 [ 68.887744][ C1] ? kthread+0x13a/0x450 [ 68.887758][ C1] ? __pfx_worker_thread+0x10/0x10 [ 68.887774][ C1] kthread+0x370/0x450 [ 68.887788][ C1] ? __pfx_kthread+0x10/0x10 [ 68.887805][ C1] ret_from_fork+0x72b/0xd50 [ 68.887827][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 68.887848][ C1] ? __switch_to+0x800/0x10f0 [ 68.887865][ C1] ? __pfx_kthread+0x10/0x10 [ 68.887885][ C1] ret_from_fork_asm+0x1a/0x30 [ 68.887917][ C1] [ 68.894513][ T5271] FAULT_INJECTION: forcing a failure. [ 68.894513][ T5271] name failslab, interval 1, probability 10, space 0, times 15 [ 68.902250][ T5622] CPU: 0 UID: 0 PID: 5622 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 68.902269][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.902278][ T5622] Call Trace: [ 68.902284][ T5622] [ 68.902289][ T5622] dump_stack_lvl+0x100/0x190 [ 68.902312][ T5622] should_fail_ex.cold+0x5/0xa [ 68.902331][ T5622] should_failslab+0xc2/0x120 [ 68.902352][ T5622] __kmalloc_noprof+0xfc/0x820 [ 68.902370][ T5622] ? kobject_get_path+0xcf/0x2c0 [ 68.902400][ T5622] kobject_get_path+0xcf/0x2c0 [ 68.902425][ T5622] kobject_uevent_env+0x287/0x18b0 [ 68.902452][ T5622] ? bus_to_subsys+0x114/0x150 [ 68.902479][ T5622] device_del+0x605/0x9b0 [ 68.902499][ T5622] ? __pfx_device_del+0x10/0x10 [ 68.902516][ T5622] ? _raw_read_unlock+0x28/0x50 [ 68.902531][ T5622] ? hci_sock_dev_event+0xb6/0x630 [ 68.902554][ T5622] rfkill_unregister+0xde/0x2c0 [ 68.902580][ T5622] hci_unregister_dev+0x34f/0x690 [ 68.902602][ T5622] vhci_release+0x17d/0x230 [ 68.902619][ T5622] ? __pfx_vhci_release+0x10/0x10 [ 68.902634][ T5622] __fput+0x3ff/0xb50 [ 68.902658][ T5622] task_work_run+0x150/0x240 [ 68.902676][ T5622] ? __pfx_task_work_run+0x10/0x10 [ 68.902699][ T5622] do_exit+0x951/0x2ae0 [ 68.902724][ T5622] ? do_raw_spin_lock+0x128/0x260 [ 68.902746][ T5622] ? __pfx_do_exit+0x10/0x10 [ 68.902767][ T5622] ? do_group_exit+0x1bd/0x2a0 [ 68.902782][ T5622] ? rcu_is_watching+0x12/0xc0 [ 68.902808][ T5622] do_group_exit+0xd5/0x2a0 [ 68.902825][ T5622] __x64_sys_exit_group+0x3e/0x50 [ 68.902839][ T5622] x64_sys_call+0x102c/0x1530 [ 68.902864][ T5622] do_syscall_64+0x115/0x870 [ 68.902880][ T5622] ? clear_bhb_loop+0x40/0x90 [ 68.902899][ T5622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.902915][ T5622] RIP: 0033:0x7f2cfa59df99 [ 68.902927][ T5622] Code: Unable to access opcode bytes at 0x7f2cfa59df6f. [ 68.902934][ T5622] RSP: 002b:00007ffc0871e938 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 68.902949][ T5622] RAX: ffffffffffffffda RBX: 00007f2cfa634509 RCX: 00007f2cfa59df99 [ 68.902958][ T5622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 68.902967][ T5622] RBP: 00007f2cfa6088b8 R08: 0000000000000000 R09: 0000000000000000 [ 68.902976][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000069 [ 68.902985][ T5622] R13: 0000000000000000 R14: 00007f2cfb354670 R15: 0000000000000000 [ 68.903004][ T5622] [ 68.904182][ T4977] FAULT_INJECTION: forcing a failure. [ 68.904182][ T4977] name failslab, interval 1, probability 10, space 0, times 14 [ 68.910289][ T13] FAULT_INJECTION: forcing a failure. [ 68.910289][ T13] name failslab, interval 1, probability 10, space 0, times 13 [ 68.916411][ T5599] FAULT_INJECTION: forcing a failure. [ 68.916411][ T5599] name failslab, interval 1, probability 10, space 0, times 13 [ 68.920589][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 68.920610][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.920621][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 68.920645][ T13] Call Trace: [ 68.920651][ T13] [ 68.920657][ T13] dump_stack_lvl+0x100/0x190 [ 68.920680][ T13] should_fail_ex.cold+0x5/0xa [ 68.920700][ T13] should_failslab+0xc2/0x120 [ 68.920722][ T13] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 68.920742][ T13] ? __alloc_skb+0x140/0x710 [ 68.920764][ T13] __alloc_skb+0x140/0x710 [ 68.920780][ T13] ? __alloc_skb+0x5b7/0x710 [ 68.920798][ T13] ? __pfx___alloc_skb+0x10/0x10 [ 68.920818][ T13] ? kfree_skbmem+0x19f/0x210 [ 68.920844][ T13] nsim_dev_trap_report_work+0x2af/0xd20 [ 68.920878][ T13] process_one_work+0xa23/0x1940 [ 68.920906][ T13] ? __pfx_process_one_work+0x10/0x10 [ 68.920930][ T13] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 68.920952][ T13] worker_thread+0x5ef/0xe50 [ 68.920977][ T13] ? kthread+0x13a/0x450 [ 68.920991][ T13] ? __pfx_worker_thread+0x10/0x10 [ 68.921007][ T13] kthread+0x370/0x450 [ 68.921021][ T13] ? __pfx_kthread+0x10/0x10 [ 68.921038][ T13] ret_from_fork+0x72b/0xd50 [ 68.921061][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 68.921083][ T13] ? __switch_to+0x800/0x10f0 [ 68.921100][ T13] ? __pfx_kthread+0x10/0x10 [ 68.921116][ T13] ret_from_fork_asm+0x1a/0x30 [ 68.921149][ T13] [ 68.921490][ T4966] FAULT_INJECTION: forcing a failure. [ 68.921490][ T4966] name failslab, interval 1, probability 10, space 0, times 12 [ 68.925703][ T1157] FAULT_INJECTION: forcing a failure. [ 68.925703][ T1157] name failslab, interval 1, probability 10, space 0, times 12 [ 68.934759][ T1028] CPU: 1 UID: 0 PID: 1028 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 68.934776][ T1028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.934786][ T1028] Workqueue: ipv6_addrconf addrconf_dad_work [ 68.934808][ T1028] Call Trace: [ 68.934813][ T1028] [ 68.934818][ T1028] dump_stack_lvl+0x100/0x190 [ 68.934839][ T1028] should_fail_ex.cold+0x5/0xa [ 68.934859][ T1028] should_failslab+0xc2/0x120 [ 68.934883][ T1028] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 68.934903][ T1028] ? __alloc_skb+0x140/0x710 [ 68.934923][ T1028] __alloc_skb+0x140/0x710 [ 68.934938][ T1028] ? __alloc_skb+0x5b7/0x710 [ 68.934954][ T1028] ? __pfx___alloc_skb+0x10/0x10 [ 68.934972][ T1028] ? __lock_acquire+0x49f/0x1a40 [ 68.934994][ T1028] mld_newpack.isra.0+0x18e/0xa20 [ 68.935017][ T1028] ? __pfx_mld_newpack.isra.0+0x10/0x10 [ 68.935035][ T1028] ? lock_acquire+0x1b9/0x370 [ 68.935060][ T1028] ? add_grhead+0x299/0x340 [ 68.935077][ T1028] add_grhead+0x299/0x340 [ 68.935097][ T1028] add_grec+0x1389/0x1930 [ 68.935117][ T1028] ? __pfx___mutex_lock+0x10/0x10 [ 68.935136][ T1028] ? __ipv6_ifa_notify+0x505/0xf90 [ 68.935160][ T1028] ? __pfx_add_grec+0x10/0x10 [ 68.935184][ T1028] mld_send_initial_cr+0x156/0x320 [ 68.935205][ T1028] ipv6_mc_dad_complete+0xa7/0x1d0 [ 68.935228][ T1028] addrconf_dad_completed+0xd91/0xff0 [ 68.935251][ T1028] ? __pfx_addrconf_dad_completed+0x10/0x10 [ 68.935274][ T1028] ? addrconf_dad_work+0x83c/0x1360 [ 68.935291][ T1028] addrconf_dad_work+0x83c/0x1360 [ 68.935316][ T1028] ? __pfx_addrconf_dad_work+0x10/0x10 [ 68.935335][ T1028] ? rcu_is_watching+0x12/0xc0 [ 68.935363][ T1028] process_one_work+0xa23/0x1940 [ 68.935389][ T1028] ? __pfx_process_one_work+0x10/0x10 [ 68.935413][ T1028] ? __pfx_addrconf_dad_work+0x10/0x10 [ 68.935433][ T1028] worker_thread+0x5ef/0xe50 [ 68.935456][ T1028] ? __pfx_worker_thread+0x10/0x10 [ 68.935473][ T1028] ? kthread+0x13a/0x450 [ 68.935487][ T1028] ? __pfx_worker_thread+0x10/0x10 [ 68.935503][ T1028] kthread+0x370/0x450 [ 68.935517][ T1028] ? __pfx_kthread+0x10/0x10 [ 68.935533][ T1028] ret_from_fork+0x72b/0xd50 [ 68.935556][ T1028] ? __pfx_ret_from_fork+0x10/0x10 [ 68.935578][ T1028] ? __switch_to+0x800/0x10f0 [ 68.935594][ T1028] ? __pfx_kthread+0x10/0x10 [ 68.935611][ T1028] ret_from_fork_asm+0x1a/0x30 [ 68.935644][ T1028] [ 68.936299][ T13] FAULT_INJECTION: forcing a failure. [ 68.936299][ T13] name failslab, interval 1, probability 10, space 0, times 10 [ 68.939413][ T1157] CPU: 0 UID: 0 PID: 1157 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 68.939432][ T1157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.939442][ T1157] Workqueue: events_unbound nsim_dev_trap_report_work [ 68.939465][ T1157] Call Trace: [ 68.939470][ T1157] [ 68.939476][ T1157] dump_stack_lvl+0x100/0x190 [ 68.939496][ T1157] should_fail_ex.cold+0x5/0xa [ 68.939516][ T1157] should_failslab+0xc2/0x120 [ 68.939537][ T1157] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 68.939557][ T1157] ? __alloc_skb+0x140/0x710 [ 68.939579][ T1157] __alloc_skb+0x140/0x710 [ 68.939595][ T1157] ? __alloc_skb+0x5b7/0x710 [ 68.939611][ T1157] ? __pfx___alloc_skb+0x10/0x10 [ 68.939628][ T1157] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 68.939650][ T1157] ? __pfx___might_resched+0x10/0x10 [ 68.939673][ T1157] nsim_dev_trap_report_work+0x2af/0xd20 [ 68.939702][ T1157] process_one_work+0xa23/0x1940 [ 68.939727][ T1157] ? __pfx_process_one_work+0x10/0x10 [ 68.939750][ T1157] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 68.939771][ T1157] worker_thread+0x5ef/0xe50 [ 68.939796][ T1157] ? kthread+0x13a/0x450 [ 68.939809][ T1157] ? __pfx_worker_thread+0x10/0x10 [ 68.939825][ T1157] kthread+0x370/0x450 [ 68.939838][ T1157] ? __pfx_kthread+0x10/0x10 [ 68.939854][ T1157] ret_from_fork+0x72b/0xd50 [ 68.939876][ T1157] ? __pfx_ret_from_fork+0x10/0x10 [ 68.939898][ T1157] ? __switch_to+0x800/0x10f0 [ 68.939914][ T1157] ? __pfx_kthread+0x10/0x10 [ 68.939931][ T1157] ret_from_fork_asm+0x1a/0x30 [ 68.939966][ T1157] [ 68.940370][ T5607] FAULT_INJECTION: forcing a failure. [ 68.940370][ T5607] name failslab, interval 1, probability 10, space 0, times 8 [ 68.945093][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 68.945111][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.945121][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 68.945142][ T13] Call Trace: [ 68.945147][ T13] [ 68.945153][ T13] dump_stack_lvl+0x100/0x190 [ 68.945176][ T13] should_fail_ex.cold+0x5/0xa [ 68.945196][ T13] should_failslab+0xc2/0x120 [ 68.945215][ T13] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 68.945236][ T13] ? __alloc_skb+0x140/0x710 [ 68.945257][ T13] __alloc_skb+0x140/0x710 [ 68.945273][ T13] ? __alloc_skb+0x5b7/0x710 [ 68.945290][ T13] ? __pfx___alloc_skb+0x10/0x10 [ 68.945306][ T13] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 68.945328][ T13] ? __pfx___might_resched+0x10/0x10 [ 68.945351][ T13] nsim_dev_trap_report_work+0x2af/0xd20 [ 68.945380][ T13] process_one_work+0xa23/0x1940 [ 68.945406][ T13] ? __pfx_process_one_work+0x10/0x10 [ 68.945429][ T13] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 68.945451][ T13] worker_thread+0x5ef/0xe50 [ 68.945475][ T13] ? kthread+0x13a/0x450 [ 68.945489][ T13] ? __pfx_worker_thread+0x10/0x10 [ 68.945504][ T13] kthread+0x370/0x450 [ 68.945518][ T13] ? __pfx_kthread+0x10/0x10 [ 68.945534][ T13] ret_from_fork+0x72b/0xd50 [ 68.945555][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 68.945578][ T13] ? __switch_to+0x800/0x10f0 [ 68.945594][ T13] ? __pfx_kthread+0x10/0x10 [ 68.945610][ T13] ret_from_fork_asm+0x1a/0x30 [ 68.945642][ T13] [ 68.946093][ C1] FAULT_INJECTION: forcing a failure. [ 68.946093][ C1] name failslab, interval 1, probability 10, space 0, times 7 [ 68.951779][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 68.957316][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 68.957339][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.957350][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 68.957373][ C1] Call Trace: [ 68.957379][ C1] [ 68.957385][ C1] dump_stack_lvl+0x100/0x190 [ 68.957408][ C1] should_fail_ex.cold+0x5/0xa [ 68.957425][ C1] ? do_raw_spin_lock+0x128/0x260 [ 68.957449][ C1] should_failslab+0xc2/0x120 [ 68.957470][ C1] __kmalloc_noprof+0xfc/0x820 [ 68.957489][ C1] ? mark_held_locks+0x40/0x70 [ 68.957507][ C1] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 68.957537][ C1] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 68.957564][ C1] ? kasan_save_stack+0x3f/0x50 [ 68.957582][ C1] ? kasan_save_stack+0x30/0x50 [ 68.957599][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 68.957616][ C1] ? __kmalloc_noprof+0x322/0x820 [ 68.957636][ C1] ? lock_acquire+0x1b9/0x370 [ 68.957655][ C1] ? find_held_lock+0x2b/0x80 [ 68.957678][ C1] ? __kfree_rcu_sheaf+0x195/0x730 [ 68.957697][ C1] ? __kfree_rcu_sheaf+0x195/0x730 [ 68.957716][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 68.957747][ C1] ? kvfree_call_rcu+0x1be/0x4f0 [ 68.957773][ C1] ? __asan_memcpy+0x3c/0x60 [ 68.957791][ C1] ieee80211_inform_bss+0x159/0x1170 [ 68.957817][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 68.957844][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 68.957868][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 68.957896][ C1] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 68.957922][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 68.957974][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 68.957990][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 68.958018][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 68.958038][ C1] cfg80211_inform_bss_data+0x230/0x3b60 [ 68.958063][ C1] ? __lock_acquire+0x49f/0x1a40 [ 68.958084][ C1] ? __lock_acquire+0x49f/0x1a40 [ 68.958104][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 68.958130][ C1] ? lock_acquire+0x1b9/0x370 [ 68.958149][ C1] ? find_held_lock+0x2b/0x80 [ 68.958172][ C1] ? unwind_next_frame+0x3be/0x2090 [ 68.958187][ C1] ? unwind_next_frame+0x3be/0x2090 [ 68.958206][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 68.958230][ C1] ? __lock_acquire+0x49f/0x1a40 [ 68.958249][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 68.958273][ C1] ? kfree_skbmem+0x19a/0x210 [ 68.958301][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 68.958328][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 68.958353][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 68.958374][ C1] ? __lock_acquire+0x49f/0x1a40 [ 68.958393][ C1] ? sysvec_apic_timer_interrupt+0xa3/0xc0 [ 68.958410][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 68.958430][ C1] ? process_one_work+0xa23/0x1940 [ 68.958449][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 68.958469][ C1] ieee80211_scan_rx+0x4e6/0xb60 [ 68.958491][ C1] ? __lock_acquire+0x49f/0x1a40 [ 68.958512][ C1] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 68.958541][ C1] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 68.958566][ C1] ? do_raw_spin_lock+0x128/0x260 [ 68.958593][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 68.958611][ C1] ? ieee80211_clean_skb+0x1a7/0x740 [ 68.958635][ C1] ieee80211_rx_list+0xf19/0x2160 [ 68.958665][ C1] ? lock_acquire+0x1b9/0x370 [ 68.958684][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 68.958714][ C1] ieee80211_rx_napi+0xdc/0x400 [ 68.958737][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 68.958761][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 68.958778][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 68.958797][ C1] ieee80211_handle_queued_frames+0xc8/0x120 [ 68.958820][ C1] tasklet_action_common+0x2de/0x3d0 [ 68.958846][ C1] handle_softirqs+0x1ea/0x9b0 [ 68.958868][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 68.958893][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 68.958911][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 68.958930][ C1] ? __alloc_skb+0x5b7/0x710 [ 68.958948][ C1] do_softirq+0xac/0xe0 [ 68.958967][ C1] [ 68.958972][ C1] [ 68.958977][ C1] __local_bh_enable_ip+0xf8/0x120 [ 68.958998][ C1] __alloc_skb+0x5db/0x710 [ 68.959014][ C1] ? __alloc_skb+0x5b7/0x710 [ 68.959031][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 68.959048][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 68.959069][ C1] ? __pfx___might_resched+0x10/0x10 [ 68.959093][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 68.959123][ C1] process_one_work+0xa23/0x1940 [ 68.959148][ C1] ? __pfx_process_one_work+0x10/0x10 [ 68.959172][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 68.959194][ C1] worker_thread+0x5ef/0xe50 [ 68.959219][ C1] ? kthread+0x13a/0x450 [ 68.959234][ C1] ? __pfx_worker_thread+0x10/0x10 [ 68.959249][ C1] kthread+0x370/0x450 [ 68.959264][ C1] ? __pfx_kthread+0x10/0x10 [ 68.959280][ C1] ret_from_fork+0x72b/0xd50 [ 68.959303][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 68.959326][ C1] ? __switch_to+0x800/0x10f0 [ 68.959342][ C1] ? __pfx_kthread+0x10/0x10 [ 68.959359][ C1] ret_from_fork_asm+0x1a/0x30 [ 68.959391][ C1] [ 68.959830][ C1] FAULT_INJECTION: forcing a failure. [ 68.959830][ C1] name failslab, interval 1, probability 10, space 0, times 6 [ 68.963534][ T36] FAULT_INJECTION: forcing a failure. [ 68.963534][ T36] name failslab, interval 1, probability 10, space 0, times 6 [ 68.966667][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 68.966689][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.966700][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 68.966723][ C1] Call Trace: [ 68.966728][ C1] [ 68.966734][ C1] dump_stack_lvl+0x100/0x190 [ 68.966756][ C1] should_fail_ex.cold+0x5/0xa [ 68.966776][ C1] should_failslab+0xc2/0x120 [ 68.966798][ C1] __kmalloc_noprof+0xfc/0x820 [ 68.966817][ C1] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 68.966847][ C1] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 68.966877][ C1] ? kasan_save_stack+0x3f/0x50 [ 68.966895][ C1] ? kasan_save_stack+0x30/0x50 [ 68.966912][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 68.966929][ C1] ? __kmalloc_noprof+0x322/0x820 [ 68.966949][ C1] ? lock_acquire+0x1b9/0x370 [ 68.966970][ C1] ? find_held_lock+0x2b/0x80 [ 68.966993][ C1] ? __kfree_rcu_sheaf+0x195/0x730 [ 68.967011][ C1] ? __kfree_rcu_sheaf+0x195/0x730 [ 68.967030][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 68.967061][ C1] ? kvfree_call_rcu+0x1be/0x4f0 [ 68.967087][ C1] ? __asan_memcpy+0x3c/0x60 [ 68.967105][ C1] ieee80211_inform_bss+0x159/0x1170 [ 68.967131][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 68.967157][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 68.967181][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 68.967203][ C1] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 68.967230][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 68.967265][ C1] ? mark_held_locks+0x40/0x70 [ 68.967286][ C1] ? mark_held_locks+0x40/0x70 [ 68.967307][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 68.967326][ C1] cfg80211_inform_bss_data+0x230/0x3b60 [ 68.967351][ C1] ? __ww_mutex_check_waiters+0x80/0x440 [ 68.967375][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 68.967400][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 68.967428][ C1] ? find_held_lock+0x2b/0x80 [ 68.967451][ C1] ? unwind_next_frame+0x3be/0x2090 [ 68.967467][ C1] ? unwind_next_frame+0x3be/0x2090 [ 68.967496][ C1] ? __lock_acquire+0x49f/0x1a40 [ 68.967524][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 68.967552][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 68.967576][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 68.967606][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 68.967627][ C1] ieee80211_scan_rx+0x4e6/0xb60 [ 68.967648][ C1] ? __lock_acquire+0x49f/0x1a40 [ 68.967669][ C1] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 68.967697][ C1] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 68.967721][ C1] ? do_raw_spin_lock+0x128/0x260 [ 68.967748][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 68.967766][ C1] ? ieee80211_clean_skb+0x1a7/0x740 [ 68.967790][ C1] ieee80211_rx_list+0xf19/0x2160 [ 68.967820][ C1] ? lock_acquire+0x1b9/0x370 [ 68.967839][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 68.967869][ C1] ieee80211_rx_napi+0xdc/0x400 [ 68.967897][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 68.967921][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 68.967937][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 68.967957][ C1] ieee80211_handle_queued_frames+0xc8/0x120 [ 68.967980][ C1] tasklet_action_common+0x2de/0x3d0 [ 68.968006][ C1] handle_softirqs+0x1ea/0x9b0 [ 68.968027][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 68.968047][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 68.968066][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 68.968084][ C1] ? __alloc_skb+0x5b7/0x710 [ 68.968103][ C1] do_softirq+0xac/0xe0 [ 68.968122][ C1] [ 68.968127][ C1] [ 68.968132][ C1] __local_bh_enable_ip+0xf8/0x120 [ 68.968153][ C1] __alloc_skb+0x5db/0x710 [ 68.968169][ C1] ? __alloc_skb+0x5b7/0x710 [ 68.968186][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 68.968203][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 68.968225][ C1] ? __pfx___might_resched+0x10/0x10 [ 68.968248][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 68.968277][ C1] process_one_work+0xa23/0x1940 [ 68.968303][ C1] ? __pfx_process_one_work+0x10/0x10 [ 68.968327][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 68.968348][ C1] worker_thread+0x5ef/0xe50 [ 68.968372][ C1] ? kthread+0x13a/0x450 [ 68.968387][ C1] ? __pfx_worker_thread+0x10/0x10 [ 68.968403][ C1] kthread+0x370/0x450 [ 68.968417][ C1] ? __pfx_kthread+0x10/0x10 [ 68.968434][ C1] ret_from_fork+0x72b/0xd50 [ 68.968456][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 68.968479][ C1] ? __switch_to+0x800/0x10f0 [ 68.968496][ C1] ? __pfx_kthread+0x10/0x10 [ 68.968513][ C1] ret_from_fork_asm+0x1a/0x30 [ 68.968545][ C1] [ 68.968592][ C1] FAULT_INJECTION: forcing a failure. [ 68.968592][ C1] name failslab, interval 1, probability 10, space 0, times 5 [ 68.971685][ T5802] ,mems_allowed=0-1 [ 68.976959][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 68.976981][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.976992][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 68.977012][ C1] Call Trace: [ 68.977017][ C1] [ 68.977023][ C1] dump_stack_lvl+0x100/0x190 [ 68.977042][ C1] should_fail_ex.cold+0x5/0xa [ 68.977062][ C1] should_failslab+0xc2/0x120 [ 68.977081][ C1] __kmalloc_noprof+0xfc/0x820 [ 68.977097][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 68.977114][ C1] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 68.977139][ C1] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 68.977166][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 68.977199][ C1] ? mark_held_locks+0x40/0x70 [ 68.977220][ C1] ? mark_held_locks+0x40/0x70 [ 68.977241][ C1] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 68.977261][ C1] cfg80211_inform_bss_data+0x230/0x3b60 [ 68.977286][ C1] ? __ww_mutex_check_waiters+0x80/0x440 [ 68.977310][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 68.977333][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 68.977362][ C1] ? find_held_lock+0x2b/0x80 [ 68.977385][ C1] ? unwind_next_frame+0x3be/0x2090 [ 68.977400][ C1] ? unwind_next_frame+0x3be/0x2090 [ 68.977429][ C1] ? __lock_acquire+0x49f/0x1a40 [ 68.977457][ C1] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 68.977484][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 68.977508][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 68.977538][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 68.977558][ C1] ieee80211_scan_rx+0x4e6/0xb60 [ 68.977580][ C1] ? __lock_acquire+0x49f/0x1a40 [ 68.977601][ C1] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 68.977629][ C1] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 68.977653][ C1] ? do_raw_spin_lock+0x128/0x260 [ 68.977680][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 68.977698][ C1] ? ieee80211_clean_skb+0x1a7/0x740 [ 68.977721][ C1] ieee80211_rx_list+0xf19/0x2160 [ 68.977751][ C1] ? lock_acquire+0x1b9/0x370 [ 68.977770][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 68.977799][ C1] ieee80211_rx_napi+0xdc/0x400 [ 68.977823][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 68.977846][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 68.977863][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 68.977887][ C1] ieee80211_handle_queued_frames+0xc8/0x120 [ 68.977910][ C1] tasklet_action_common+0x2de/0x3d0 [ 68.977951][ C1] handle_softirqs+0x1ea/0x9b0 [ 68.977972][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 68.977993][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 68.978012][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 68.978029][ C1] ? __alloc_skb+0x5b7/0x710 [ 68.978047][ C1] do_softirq+0xac/0xe0 [ 68.978066][ C1] [ 68.978070][ C1] [ 68.978076][ C1] __local_bh_enable_ip+0xf8/0x120 [ 68.978096][ C1] __alloc_skb+0x5db/0x710 [ 68.978113][ C1] ? __alloc_skb+0x5b7/0x710 [ 68.978130][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 68.978146][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 68.978168][ C1] ? __pfx___might_resched+0x10/0x10 [ 68.978190][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 68.978219][ C1] process_one_work+0xa23/0x1940 [ 68.978245][ C1] ? __pfx_process_one_work+0x10/0x10 [ 68.978268][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 68.978290][ C1] worker_thread+0x5ef/0xe50 [ 68.978314][ C1] ? kthread+0x13a/0x450 [ 68.978327][ C1] ? __pfx_worker_thread+0x10/0x10 [ 68.978343][ C1] kthread+0x370/0x450 [ 68.978357][ C1] ? __pfx_kthread+0x10/0x10 [ 68.978374][ C1] ret_from_fork+0x72b/0xd50 [ 68.978396][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 68.978418][ C1] ? __switch_to+0x800/0x10f0 [ 68.978434][ C1] ? __pfx_kthread+0x10/0x10 [ 68.978451][ C1] ret_from_fork_asm+0x1a/0x30 [ 68.978483][ C1] [ 68.982084][ T4966] CPU: 1 UID: 0 PID: 4966 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 68.982103][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.982112][ T4966] Call Trace: [ 68.982117][ T4966] [ 68.982123][ T4966] dump_stack_lvl+0x100/0x190 [ 68.982146][ T4966] should_fail_ex.cold+0x5/0xa [ 68.982165][ T4966] should_failslab+0xc2/0x120 [ 68.982185][ T4966] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 68.982204][ T4966] ? __alloc_skb+0x5b7/0x710 [ 68.982221][ T4966] ? __alloc_skb+0x140/0x710 [ 68.982244][ T4966] __alloc_skb+0x140/0x710 [ 68.982260][ T4966] ? __alloc_skb+0x5b7/0x710 [ 68.982276][ T4966] ? __pfx___alloc_skb+0x10/0x10 [ 68.982300][ T4966] alloc_skb_with_frags+0xdd/0x760 [ 68.982320][ T4966] ? find_held_lock+0x2b/0x80 [ 68.982342][ T4966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 68.982360][ T4966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 68.982382][ T4966] sock_alloc_send_pskb+0x801/0x980 [ 68.982402][ T4966] ? avc_has_perm+0x135/0x1e0 [ 68.982420][ T4966] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 68.982436][ T4966] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 68.982459][ T4966] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 68.982482][ T4966] ? sock_def_readable+0x1d2/0x600 [ 68.982504][ T4966] unix_dgram_sendmsg+0x3c7/0x1810 [ 68.982529][ T4966] ? unix_dgram_connect+0x24d/0xbf0 [ 68.982547][ T4966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 68.982569][ T4966] ? selinux_socket_sendmsg+0x198/0x2f0 [ 68.982594][ T4966] __sys_sendto+0x48b/0x4e0 [ 68.982610][ T4966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 68.982630][ T4966] ? __pfx___sys_sendto+0x10/0x10 [ 68.982652][ T4966] ? __sys_connect+0xe4/0x170 [ 68.982681][ T4966] __x64_sys_sendto+0xe0/0x1c0 [ 68.982697][ T4966] ? do_syscall_64+0x90/0x870 [ 68.982713][ T4966] ? lockdep_hardirqs_on+0x78/0x100 [ 68.982730][ T4966] do_syscall_64+0x115/0x870 [ 68.982745][ T4966] ? clear_bhb_loop+0x40/0x90 [ 68.982764][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.982780][ T4966] RIP: 0033:0x7fe677f88407 [ 68.982794][ T4966] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 68.982808][ T4966] RSP: 002b:00007ffc36d8edc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 68.982823][ T4966] RAX: ffffffffffffffda RBX: 00007fe677e38c80 RCX: 00007fe677f88407 [ 68.982833][ T4966] RDX: 0000000000000050 RSI: 00007ffc36d8ef00 RDI: 0000000000000003 [ 68.982842][ T4966] RBP: 00007ffc36d8f330 R08: 0000000000000000 R09: 0000000000000000 [ 68.982851][ T4966] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc36d8f348 [ 68.982860][ T4966] R13: 00007ffc36d8ef00 R14: 0000000000000035 R15: 00007ffc36d8ef00 [ 68.982885][ T4966] [ 68.983127][ T4966] FAULT_INJECTION: forcing a failure. [ 68.983127][ T4966] name failslab, interval 1, probability 10, space 0, times 2 [ 68.986863][ T5607] CPU: 0 UID: 0 PID: 5607 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 68.986882][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.986891][ T5607] Call Trace: [ 68.986896][ T5607] [ 68.986902][ T5607] dump_stack_lvl+0x100/0x190 [ 68.986924][ T5607] should_fail_ex.cold+0x5/0xa [ 68.986943][ T5607] should_failslab+0xc2/0x120 [ 68.986964][ T5607] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 68.986986][ T5607] ? security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 68.987010][ T5607] kstrdup+0x51/0xe0 [ 68.987029][ T5607] security_netlbl_sid_to_secattr+0x1d8/0x4d0 [ 68.987050][ T5607] selinux_netlbl_sock_genattr+0x128/0x4e0 [ 68.987075][ T5607] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 68.987101][ T5607] selinux_socket_post_create+0x368/0x7e0 [ 68.987124][ T5607] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 68.987144][ T5607] ? udp_init_sock+0x384/0x450 [ 68.987169][ T5607] ? inet_create+0x962/0x1060 [ 68.987190][ T5607] security_socket_post_create+0xaf/0x270 [ 68.987214][ T5607] __sock_create+0x70b/0x860 [ 68.987242][ T5607] udp_sock_create4+0xa6/0x450 [ 68.987258][ T5607] ? __pfx_udp_sock_create4+0x10/0x10 [ 68.987274][ T5607] ? find_held_lock+0x2b/0x80 [ 68.987298][ T5607] ? wg_socket_init+0x434/0xf80 [ 68.987317][ T5607] wg_socket_init+0x768/0xf80 [ 68.987335][ T5607] ? __pfx_wg_socket_init+0x10/0x10 [ 68.987349][ T5607] ? trace_contention_end+0x126/0x160 [ 68.987370][ T5607] ? __mutex_lock+0x26d/0x1bd0 [ 68.987396][ T5607] ? __pfx_wg_receive+0x10/0x10 [ 68.987421][ T5607] ? __pfx___mutex_lock+0x10/0x10 [ 68.987438][ T5607] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 68.987457][ T5607] ? netconsole_netdev_event+0x5a1/0xba0 [ 68.987481][ T5607] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 68.987510][ T5607] wg_open+0x231/0x4d0 [ 68.987528][ T5607] ? __pfx_wg_open+0x10/0x10 [ 68.987547][ T5607] __dev_open+0x3ad/0x8f0 [ 68.987569][ T5607] ? __pfx___dev_open+0x10/0x10 [ 68.987592][ T5607] ? __local_bh_enable_ip+0x9e/0x120 [ 68.987615][ T5607] __dev_change_flags+0x596/0x850 [ 68.987635][ T5607] ? __pfx___dev_change_flags+0x10/0x10 [ 68.987652][ T5607] ? validate_linkmsg+0x57c/0xba0 [ 68.987673][ T5607] ? __pfx_validate_linkmsg+0x10/0x10 [ 68.987694][ T5607] netif_change_flags+0x8d/0x160 [ 68.987715][ T5607] do_setlink.isra.0+0x1ac4/0x3e60 [ 68.987737][ T5607] ? rcu_is_watching+0x12/0xc0 [ 68.987766][ T5607] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 68.987788][ T5607] ? __lock_acquire+0x49f/0x1a40 [ 68.987811][ T5607] ? do_raw_spin_lock+0x128/0x260 [ 68.987834][ T5607] ? find_held_lock+0x2b/0x80 [ 68.987856][ T5607] ? debug_mutex_remove_waiter+0xa0/0x320 [ 68.987880][ T5607] ? debug_mutex_remove_waiter+0xa0/0x320 [ 68.987906][ T5607] ? mark_held_locks+0x40/0x70 [ 68.987924][ T5607] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 68.987940][ T5607] ? __mutex_lock+0x82c/0x1bd0 [ 68.987956][ T5607] ? lockdep_hardirqs_on+0x78/0x100 [ 68.987973][ T5607] ? __mutex_lock+0x82c/0x1bd0 [ 68.987989][ T5607] ? __mutex_lock+0x26d/0x1bd0 [ 68.988006][ T5607] ? rtnl_newlink+0x8bb/0x2380 [ 68.988030][ T5607] ? __pfx___mutex_lock+0x10/0x10 [ 68.988047][ T5607] ? rcu_is_watching+0x12/0xc0 [ 68.988069][ T5607] ? cap_capable+0x107/0x430 [ 68.988101][ T5607] rtnl_newlink+0x11c2/0x2380 [ 68.988128][ T5607] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.988146][ T5607] ? find_held_lock+0x2b/0x80 [ 68.988168][ T5607] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 68.988186][ T5607] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 68.988207][ T5607] ? avc_has_perm_noaudit+0x145/0x3b0 [ 68.988231][ T5607] ? __lock_acquire+0x49f/0x1a40 [ 68.988260][ T5607] ? find_held_lock+0x2b/0x80 [ 68.988282][ T5607] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 68.988302][ T5607] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 68.988324][ T5607] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.988343][ T5607] rtnetlink_rcv_msg+0x95e/0xe90 [ 68.988366][ T5607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 68.988389][ T5607] ? __lock_acquire+0x49f/0x1a40 [ 68.988417][ T5607] netlink_rcv_skb+0x159/0x420 [ 68.988434][ T5607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 68.988456][ T5607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 68.988479][ T5607] ? rcu_is_watching+0x12/0xc0 [ 68.988506][ T5607] netlink_unicast+0x585/0x850 [ 68.988526][ T5607] ? __pfx_netlink_unicast+0x10/0x10 [ 68.988540][ T5607] ? __pfx_sock_has_perm+0x10/0x10 [ 68.988565][ T5607] netlink_sendmsg+0x8b0/0xda0 [ 68.988584][ T5607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.988602][ T5607] ? selinux_socket_sendmsg+0x198/0x2f0 [ 68.988627][ T5607] __sys_sendto+0x48b/0x4e0 [ 68.988643][ T5607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.988659][ T5607] ? __pfx___sys_sendto+0x10/0x10 [ 68.988693][ T5607] ? __pfx_fput_close_sync+0x10/0x10 [ 68.988717][ T5607] __x64_sys_sendto+0xe0/0x1c0 [ 68.988734][ T5607] ? do_syscall_64+0x90/0x870 [ 68.988750][ T5607] ? lockdep_hardirqs_on+0x78/0x100 [ 68.988767][ T5607] do_syscall_64+0x115/0x870 [ 68.988783][ T5607] ? clear_bhb_loop+0x40/0x90 [ 68.988802][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.988818][ T5607] RIP: 0033:0x7f1f2df5e7ce [ 68.988831][ T5607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 68.988845][ T5607] RSP: 002b:00007fff0ababa68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 68.988860][ T5607] RAX: ffffffffffffffda RBX: 00005555888df500 RCX: 00007f1f2df5e7ce [ 68.988870][ T5607] RDX: 0000000000000020 RSI: 00007f1f2ed54670 RDI: 0000000000000003 [ 68.988879][ T5607] RBP: 0000000000000001 R08: 00007fff0ababae4 R09: 000000000000000c [ 68.988888][ T5607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 68.988897][ T5607] R13: 0000000000000000 R14: 00007f1f2ed54670 R15: 0000000000000000 [ 68.988917][ T5607] [ 68.988954][ T5599] CPU: 0 UID: 0 PID: 5599 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 68.988970][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.988979][ T5599] Call Trace: [ 68.988984][ T5599] [ 68.988989][ T5599] dump_stack_lvl+0x100/0x190 [ 68.989009][ T5599] should_fail_ex.cold+0x5/0xa [ 68.989027][ T5599] should_failslab+0xc2/0x120 [ 68.989047][ T5599] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 68.989066][ T5599] ? __alloc_skb+0x5b7/0x710 [ 68.989082][ T5599] ? __alloc_skb+0x140/0x710 [ 68.989102][ T5599] __alloc_skb+0x140/0x710 [ 68.989119][ T5599] ? __alloc_skb+0x5b7/0x710 [ 68.989135][ T5599] ? __pfx___alloc_skb+0x10/0x10 [ 68.989151][ T5599] ? kfree_skbmem+0x19a/0x210 [ 68.989173][ T5599] ? kmem_cache_free+0x127/0x6b0 [ 68.989191][ T5599] alloc_skb_with_frags+0xdd/0x760 [ 68.989211][ T5599] ? find_held_lock+0x2b/0x80 [ 68.989233][ T5599] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 68.989250][ T5599] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 68.989271][ T5599] sock_alloc_send_pskb+0x801/0x980 [ 68.989291][ T5599] ? avc_has_perm+0x135/0x1e0 [ 68.989310][ T5599] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 68.989326][ T5599] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 68.989348][ T5599] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 68.989383][ T5599] unix_dgram_sendmsg+0x3c7/0x1810 [ 68.989409][ T5599] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 68.989431][ T5599] ? selinux_socket_sendmsg+0x198/0x2f0 [ 68.989456][ T5599] sock_write_iter+0x53a/0x5b0 [ 68.989478][ T5599] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 68.989496][ T5599] ? __pfx_sock_write_iter+0x10/0x10 [ 68.989524][ T5599] ? bpf_lsm_file_permission+0x9/0x10 [ 68.989547][ T5599] ? security_file_permission+0x76/0x210 [ 68.989563][ T5599] ? rw_verify_area+0xce/0x6d0 [ 68.989586][ T5599] vfs_write+0x6ac/0x1050 [ 68.989609][ T5599] ? __pfx_sock_write_iter+0x10/0x10 [ 68.989634][ T5599] ? __pfx_vfs_write+0x10/0x10 [ 68.989662][ T5599] ? __sys_sendmsg+0x17f/0x210 [ 68.989681][ T5599] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.989699][ T5599] ? lockdep_hardirqs_on+0x78/0x100 [ 68.989717][ T5599] ksys_write+0x1f8/0x250 [ 68.989740][ T5599] ? __pfx_ksys_write+0x10/0x10 [ 68.989768][ T5599] do_syscall_64+0x115/0x870 [ 68.989785][ T5599] ? clear_bhb_loop+0x40/0x90 [ 68.989802][ T5599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.989818][ T5599] RIP: 0033:0x7fbb0daa7407 [ 68.989830][ T5599] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 68.989844][ T5599] RSP: 002b:00007ffd3edcd8c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 68.989857][ T5599] RAX: ffffffffffffffda RBX: 00007fbb0e156880 RCX: 00007fbb0daa7407 [ 68.989867][ T5599] RDX: 0000000000000000 RSI: 00007ffd3edcd967 RDI: 000000000000000a [ 68.989876][ T5599] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000 [ 68.989885][ T5599] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fbb0e1566e8 [ 68.989894][ T5599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 68.989913][ T5599] [ 68.990058][ T5599] udevd[5599]: failed to send result of seq 10547 to main daemon: No buffer space available [ 68.991531][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 68.991549][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.991559][ T24] Workqueue: mld mld_dad_work [ 68.991580][ T24] Call Trace: [ 68.991585][ T24] [ 68.991590][ T24] dump_stack_lvl+0x100/0x190 [ 68.991609][ T24] should_fail_ex.cold+0x5/0xa [ 68.991629][ T24] should_failslab+0xc2/0x120 [ 68.991649][ T24] __kmalloc_cache_noprof+0x91/0x6c0 [ 68.991675][ T24] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 68.991696][ T24] dst_cow_metrics_generic+0x4c/0x1e0 [ 68.991716][ T24] icmp6_dst_alloc+0x418/0x4f0 [ 68.991738][ T24] mld_sendpack+0x5ae/0xec0 [ 68.991762][ T24] ? __pfx_mld_sendpack+0x10/0x10 [ 68.991793][ T24] mld_send_initial_cr+0x219/0x320 [ 68.991815][ T24] mld_dad_work+0x32/0x1f0 [ 68.991836][ T24] process_one_work+0xa23/0x1940 [ 68.991862][ T24] ? __pfx_process_one_work+0x10/0x10 [ 68.991890][ T24] ? __pfx_mld_dad_work+0x10/0x10 [ 68.991913][ T24] worker_thread+0x5ef/0xe50 [ 68.991938][ T24] ? kthread+0x13a/0x450 [ 68.991952][ T24] ? __pfx_worker_thread+0x10/0x10 [ 68.991967][ T24] kthread+0x370/0x450 [ 68.991981][ T24] ? __pfx_kthread+0x10/0x10 [ 68.991998][ T24] ret_from_fork+0x72b/0xd50 [ 68.992021][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 68.992043][ T24] ? __switch_to+0x800/0x10f0 [ 68.992060][ T24] ? __pfx_kthread+0x10/0x10 [ 68.992076][ T24] ret_from_fork_asm+0x1a/0x30 [ 68.992111][ T24] [ 68.994840][ T5271] CPU: 1 UID: 101 PID: 5271 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 68.994860][ T5271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.994869][ T5271] Call Trace: [ 68.994880][ T5271] [ 68.994886][ T5271] dump_stack_lvl+0x100/0x190 [ 68.994907][ T5271] should_fail_ex.cold+0x5/0xa [ 68.994927][ T5271] should_failslab+0xc2/0x120 [ 68.994947][ T5271] __kmalloc_noprof+0xfc/0x820 [ 68.994964][ T5271] ? rcu_is_watching+0x12/0xc0 [ 68.994987][ T5271] ? tomoyo_realpath_from_path+0xb6/0x690 [ 68.995008][ T5271] tomoyo_realpath_from_path+0xb6/0x690 [ 68.995028][ T5271] tomoyo_path_number_perm+0x23c/0x580 [ 68.995049][ T5271] ? tomoyo_path_number_perm+0x22e/0x580 [ 68.995072][ T5271] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 68.995113][ T5271] ? __seccomp_filter+0x89d/0x1140 [ 68.995137][ T5271] ? hook_file_ioctl_common+0x140/0x440 [ 68.995156][ T5271] ? __pfx___seccomp_filter+0x10/0x10 [ 68.995186][ T5271] security_file_ioctl+0xd3/0x230 [ 68.995210][ T5271] __x64_sys_ioctl+0xb7/0x210 [ 68.995235][ T5271] do_syscall_64+0x115/0x870 [ 68.995251][ T5271] ? clear_bhb_loop+0x40/0x90 [ 68.995271][ T5271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.995287][ T5271] RIP: 0033:0x7fe3863a7378 [ 68.995300][ T5271] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 68.995314][ T5271] RSP: 002b:00007ffdf6ceaf88 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 68.995328][ T5271] RAX: ffffffffffffffda RBX: 0000561eaa6c7970 RCX: 00007fe3863a7378 [ 68.995338][ T5271] RDX: 00007ffdf6ceaf90 RSI: 0000000000008921 RDI: 000000000000000f [ 68.995348][ T5271] RBP: 00007ffdf6ceaf90 R08: 0000000000000000 R09: 0000000000000000 [ 68.995357][ T5271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000561eaa6ca9a0 [ 68.995366][ T5271] R13: 0000561eaa6c7970 R14: 0000561eaa6ca9a0 R15: 00007ffdf6ceb1e0 [ 68.995387][ T5271] [ 68.995394][ T5271] ERROR: Out of memory at tomoyo_realpath_from_path. [ 68.999943][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 68.999966][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 68.999977][ T36] Workqueue: events_unbound cfg80211_wiphy_work [ 69.000000][ T36] Call Trace: [ 69.000005][ T36] [ 69.000012][ T36] dump_stack_lvl+0x100/0x190 [ 69.000032][ T36] should_fail_ex.cold+0x5/0xa [ 69.000052][ T36] should_failslab+0xc2/0x120 [ 69.000072][ T36] __kmalloc_noprof+0xfc/0x820 [ 69.000091][ T36] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 69.000117][ T36] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 69.000137][ T36] ? unwind_next_frame+0x3be/0x2090 [ 69.000159][ T36] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 69.000179][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 69.000215][ T36] ? stack_trace_save+0x8e/0xc0 [ 69.000232][ T36] ? __pfx_stack_trace_save+0x10/0x10 [ 69.000252][ T36] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 69.000272][ T36] cfg80211_inform_bss_data+0x230/0x3b60 [ 69.000293][ T36] ? __kmalloc_noprof+0x322/0x820 [ 69.000308][ T36] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 69.000333][ T36] ? cfg80211_wiphy_work+0x2b7/0x550 [ 69.000352][ T36] ? process_one_work+0xa23/0x1940 [ 69.000368][ T36] ? worker_thread+0x5ef/0xe50 [ 69.000389][ T36] ? kthread+0x370/0x450 [ 69.000402][ T36] ? ret_from_fork+0x72b/0xd50 [ 69.000422][ T36] ? ret_from_fork_asm+0x1a/0x30 [ 69.000448][ T36] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 69.000473][ T36] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 69.000493][ T36] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 69.000520][ T36] ? __lock_acquire+0x49f/0x1a40 [ 69.000540][ T36] ? __lock_acquire+0x49f/0x1a40 [ 69.000567][ T36] ? __lock_acquire+0x49f/0x1a40 [ 69.000585][ T36] ? find_held_lock+0x2b/0x80 [ 69.000608][ T36] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 69.000630][ T36] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 69.000659][ T36] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 69.000686][ T36] ieee80211_bss_info_update+0x310/0xab0 [ 69.000711][ T36] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 69.000739][ T36] ? rcu_is_watching+0x12/0xc0 [ 69.000763][ T36] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 69.000782][ T36] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 69.000805][ T36] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 69.000837][ T36] ieee80211_iface_work+0xa9a/0x1070 [ 69.000864][ T36] cfg80211_wiphy_work+0x2b7/0x550 [ 69.000887][ T36] process_one_work+0xa23/0x1940 [ 69.000912][ T36] ? __pfx_process_one_work+0x10/0x10 [ 69.000934][ T36] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 69.000956][ T36] worker_thread+0x5ef/0xe50 [ 69.000977][ T36] ? __pfx_worker_thread+0x10/0x10 [ 69.000995][ T36] ? kthread+0x13a/0x450 [ 69.001009][ T36] ? __pfx_worker_thread+0x10/0x10 [ 69.001025][ T36] kthread+0x370/0x450 [ 69.001039][ T36] ? __pfx_kthread+0x10/0x10 [ 69.001055][ T36] ret_from_fork+0x72b/0xd50 [ 69.001077][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 69.001100][ T36] ? __switch_to+0x800/0x10f0 [ 69.001116][ T36] ? __pfx_kthread+0x10/0x10 [ 69.001132][ T36] ret_from_fork_asm+0x1a/0x30 [ 69.001165][ T36] [ 69.001890][ T5607] wireguard: wg1: Could not create IPv4 socket [ 69.006982][ T4966] CPU: 1 UID: 0 PID: 4966 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 69.007002][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 69.007011][ T4966] Call Trace: [ 69.007016][ T4966] [ 69.007022][ T4966] dump_stack_lvl+0x100/0x190 [ 69.007044][ T4966] should_fail_ex.cold+0x5/0xa [ 69.007064][ T4966] should_failslab+0xc2/0x120 [ 69.007085][ T4966] kmem_cache_alloc_noprof+0x91/0x6a0 [ 69.007101][ T4966] ? d_instantiate+0x8a/0xb0 [ 69.007120][ T4966] ? d_instantiate+0x8a/0xb0 [ 69.007138][ T4966] ? alloc_empty_file+0x5b/0x1c0 [ 69.007161][ T4966] alloc_empty_file+0x5b/0x1c0 [ 69.007181][ T4966] alloc_file_pseudo+0x183/0x290 [ 69.007202][ T4966] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 69.007221][ T4966] ? alloc_fd+0x471/0x7a0 [ 69.007241][ T4966] sock_alloc_file+0x50/0x210 [ 69.007262][ T4966] __sys_socket+0x1c0/0x260 [ 69.007277][ T4966] ? __pfx___sys_socket+0x10/0x10 [ 69.007298][ T4966] __x64_sys_socket+0x72/0xb0 [ 69.007311][ T4966] ? lockdep_hardirqs_on+0x78/0x100 [ 69.007329][ T4966] do_syscall_64+0x115/0x870 [ 69.007345][ T4966] ? clear_bhb_loop+0x40/0x90 [ 69.007364][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.007380][ T4966] RIP: 0033:0x7fe678003707 [ 69.007393][ T4966] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 69.007407][ T4966] RSP: 002b:00007ffc36d8edd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 69.007422][ T4966] RAX: ffffffffffffffda RBX: 0000000000000050 RCX: 00007fe678003707 [ 69.007431][ T4966] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 69.007440][ T4966] RBP: 00007fe67808f560 R08: 0000000000000000 R09: 0000000000000000 [ 69.007449][ T4966] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 69.007458][ T4966] R13: 00007ffc36d8ef00 R14: 0000000000000035 R15: 00007ffc36d8ef00 [ 69.007479][ T4966] [ 69.051249][ T4977] CPU: 1 UID: 0 PID: 4977 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 69.051273][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 69.051283][ T4977] Call Trace: [ 69.051289][ T4977] [ 69.051295][ T4977] dump_stack_lvl+0x100/0x190 [ 69.051321][ T4977] should_fail_ex.cold+0x5/0xa [ 69.051341][ T4977] should_failslab+0xc2/0x120 [ 69.051362][ T4977] kmem_cache_alloc_noprof+0x91/0x6a0 [ 69.051381][ T4977] ? do_getname+0x35/0x390 [ 69.051405][ T4977] do_getname+0x35/0x390 [ 69.051426][ T4977] do_sys_openat2+0xc7/0x1e0 [ 69.051446][ T4977] ? __pfx_do_sys_openat2+0x10/0x10 [ 69.051469][ T4977] ? __sys_sendmsg+0x17f/0x210 [ 69.051492][ T4977] __x64_sys_openat+0x12d/0x210 [ 69.051511][ T4977] ? __pfx___x64_sys_openat+0x10/0x10 [ 69.051539][ T4977] do_syscall_64+0x115/0x870 [ 69.051556][ T4977] ? clear_bhb_loop+0x40/0x90 [ 69.051575][ T4977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.051591][ T4977] RIP: 0033:0x7fbb0daa7407 [ 69.051605][ T4977] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 69.051619][ T4977] RSP: 002b:00007ffd3edcd9e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 69.051634][ T4977] RAX: ffffffffffffffda RBX: 00007fbb0e156880 RCX: 00007fbb0daa7407 [ 69.051644][ T4977] RDX: 0000000000080141 RSI: 0000563e6acc002e RDI: ffffffffffffff9c [ 69.051654][ T4977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 69.051663][ T4977] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 69.051672][ T4977] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 69.051692][ T4977] [ 69.051738][ T4977] udevd[4977]: could not touch /run/udev/queue: Cannot allocate memory [ 69.064586][ T5728] CPU: 0 UID: 0 PID: 5728 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 69.064605][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 69.064616][ T5728] Workqueue: mld mld_dad_work [ 69.064638][ T5728] Call Trace: [ 69.064643][ T5728] [ 69.064648][ T5728] dump_stack_lvl+0x100/0x190 [ 69.064669][ T5728] should_fail_ex.cold+0x5/0xa [ 69.064689][ T5728] should_failslab+0xc2/0x120 [ 69.064709][ T5728] kmem_cache_alloc_noprof+0x91/0x6a0 [ 69.064728][ T5728] ? dst_alloc+0x99/0x1a0 [ 69.064747][ T5728] ? __pfx_ip6_dst_gc+0x10/0x10 [ 69.064769][ T5728] dst_alloc+0x99/0x1a0 [ 69.064789][ T5728] icmp6_dst_alloc+0x79/0x4f0 [ 69.064811][ T5728] mld_sendpack+0x5ae/0xec0 [ 69.064835][ T5728] ? __pfx_mld_sendpack+0x10/0x10 [ 69.064867][ T5728] mld_send_initial_cr+0x219/0x320 [ 69.064889][ T5728] mld_dad_work+0x32/0x1f0 [ 69.064910][ T5728] process_one_work+0xa23/0x1940 [ 69.064936][ T5728] ? __pfx_process_one_work+0x10/0x10 [ 69.064959][ T5728] ? __pfx_mld_dad_work+0x10/0x10 [ 69.064982][ T5728] worker_thread+0x5ef/0xe50 [ 69.065005][ T5728] ? __pfx_worker_thread+0x10/0x10 [ 69.065022][ T5728] ? kthread+0x13a/0x450 [ 69.065036][ T5728] ? __pfx_worker_thread+0x10/0x10 [ 69.065052][ T5728] kthread+0x370/0x450 [ 69.065066][ T5728] ? __pfx_kthread+0x10/0x10 [ 69.065082][ T5728] ret_from_fork+0x72b/0xd50 [ 69.065105][ T5728] ? __pfx_ret_from_fork+0x10/0x10 [ 69.065128][ T5728] ? __switch_to+0x800/0x10f0 [ 69.065144][ T5728] ? __pfx_kthread+0x10/0x10 [ 69.065161][ T5728] ret_from_fork_asm+0x1a/0x30 [ 69.065194][ T5728] [ 69.065656][ T5802] [ 70.130720][ T5614] Bluetooth: hci3: command tx timeout [ 70.145363][ T5802] CPU: 0 UID: 0 PID: 5802 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT(full) [ 70.145385][ T5802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 70.145395][ T5802] Call Trace: [ 70.145400][ T5802] [ 70.145406][ T5802] dump_stack_lvl+0x100/0x190 [ 70.145430][ T5802] warn_alloc.cold+0x94/0xa8 [ 70.145447][ T5802] ? __pfx_warn_alloc+0x10/0x10 [ 70.145462][ T5802] ? __kasan_kmalloc+0x8a/0xb0 [ 70.145488][ T5802] ? __get_vm_area_node+0x208/0x330 [ 70.145513][ T5802] __vmalloc_node_range_noprof+0xccd/0x1630 [ 70.145535][ T5802] ? rcu_is_watching+0x12/0xc0 [ 70.145564][ T5802] ? kernel_clone+0x176/0x9d0 [ 70.145590][ T5802] ? __memcg_slab_post_alloc_hook+0x749/0x1160 [ 70.145613][ T5802] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 70.145641][ T5802] ? trace_kmem_cache_alloc+0xdd/0x100 [ 70.145664][ T5802] ? kernel_clone+0x176/0x9d0 [ 70.145684][ T5802] __vmalloc_node_noprof+0xad/0xf0 [ 70.145706][ T5802] ? kernel_clone+0x176/0x9d0 [ 70.145729][ T5802] copy_process+0x7fb/0x8030 [ 70.145755][ T5802] ? page_table_check_set+0x4f7/0x930 [ 70.145783][ T5802] ? __pfx_copy_process+0x10/0x10 [ 70.145809][ T5802] ? _copy_from_user+0x59/0xd0 [ 70.145833][ T5802] kernel_clone+0x176/0x9d0 [ 70.145856][ T5802] ? __pfx_kernel_clone+0x10/0x10 [ 70.145887][ T5802] __do_sys_clone3+0x214/0x290 [ 70.145909][ T5802] ? __pfx___do_sys_clone3+0x10/0x10 [ 70.145939][ T5802] ? _copy_to_user+0xaf/0xd0 [ 70.145973][ T5802] do_syscall_64+0x115/0x870 [ 70.145990][ T5802] ? clear_bhb_loop+0x40/0x90 [ 70.146009][ T5802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.146025][ T5802] RIP: 0033:0x7f7ef3b9ed89 [ 70.146039][ T5802] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 70.146054][ T5802] RSP: 002b:00007ffdf28e5258 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 70.146070][ T5802] RAX: ffffffffffffffda RBX: 00007f7ef3b5a320 RCX: 00007f7ef3b9ed89 [ 70.146080][ T5802] RDX: 00007f7ef3b5a320 RSI: 0000000000000058 RDI: 00007ffdf28e52b0 [ 70.146089][ T5802] RBP: 00007f7ef4b126c0 R08: 00007f7ef4b126c0 R09: 00007ffdf28e5397 [ 70.146099][ T5802] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 70.146108][ T5802] R13: 000000000000006e R14: 00007ffdf28e52b0 R15: 00007ffdf28e5398 [ 70.146127][ T5802] [ 70.146143][ T5802] Mem-Info: [ 70.213495][ T5614] Bluetooth: hci2: command tx timeout [ 70.290585][ T5614] Bluetooth: hci1: command tx timeout [ 70.301969][ T5614] Bluetooth: hci0: command tx timeout [ 70.307811][ T5802] active_anon:6604 inactive_anon:0 isolated_anon:0 [ 70.307811][ T5802] active_file:0 inactive_file:42166 isolated_file:0 [ 70.307811][ T5802] unevictable:768 dirty:1771 writeback:0 [ 70.307811][ T5802] slab_reclaimable:10821 slab_unreclaimable:93326 [ 70.307811][ T5802] mapped:29330 shmem:1287 pagetables:996 [ 70.307811][ T5802] sec_pagetables:0 bounce:0 [ 70.307811][ T5802] kernel_misc_reclaimable:0 [ 70.307811][ T5802] free:1325124 free_pcp:17311 free_cma:0 [ 77.393798][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 77.393812][ T30] audit: type=1400 audit(1785404770.181:185): avc: denied { allowed } for pid=5814 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.582341][ T5802] Node 0 active_anon:26576kB inactive_anon:0kB active_file:0kB inactive_file:168472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117320kB dirty:7068kB writeback:0kB shmem:3612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11840kB pagetables:4208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 77.624914][ T30] audit: type=1400 audit(1785404770.411:186): avc: denied { create } for pid=5814 comm="syz.0.11" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.626281][ T5802] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 77.631051][ T30] audit: type=1400 audit(1785404770.411:187): avc: denied { map } for pid=5814 comm="syz.0.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.636072][ T5802] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.641409][ T30] audit: type=1400 audit(1785404770.411:188): avc: denied { read write } for pid=5814 comm="syz.0.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8031 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 77.646609][ T5802] lowmem_reserve[]: 0 2472 [ 77.942243][ T30] audit: type=1400 audit(1785404770.731:189): avc: denied { read write } for pid=5818 comm="syz.0.12" name="video1" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.947065][ T10] usb 1-1: device descriptor read/all, error -71 [ 77.951940][ T5802] 2473 [ 77.958915][ T10] usb usb1-port1: attempt power cycle [ 77.976905][ T30] audit: type=1400 audit(1785404770.761:190): avc: denied { open } for pid=5818 comm="syz.0.12" path="/dev/video1" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.002823][ T5802] 2473 [ 78.073778][ T30] audit: type=1400 audit(1785404770.861:191): avc: denied { create } for pid=5820 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.080877][ T5802] 2473 [ 78.096145][ T5821] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 78.106024][ T5802] [ 78.111371][ T30] audit: type=1400 audit(1785404770.891:192): avc: denied { create } for pid=5820 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 78.114691][ T5802] Node 0 [ 78.132111][ T30] audit: type=1400 audit(1785404770.921:193): avc: denied { create } for pid=5820 comm="syz.0.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 78.141513][ T5802] DMA32 free:1328784kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26328kB inactive_anon:0kB active_file:0kB inactive_file:168972kB unevictable:1536kB writepending:7068kB zspages:0kB present:3129332kB managed:2532164kB mlocked:0kB bounce:0kB free_pcp:83556kB local_pcp:57464kB free_cma:0kB [ 78.154022][ T30] audit: type=1400 audit(1785404770.931:194): avc: denied { bpf } for pid=5820 comm="syz.0.13" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.158812][ T5802] lowmem_reserve[]: [ 78.424307][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.425157][ T5802] 0 [ 78.444952][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.475343][ T5802] 0 [ 78.486787][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.496344][ T5802] 0 [ 78.500578][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.514160][ T5802] 0 [ 78.516313][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.526727][ T5802] 0 [ 80.620059][ T5614] Bluetooth: hci1: command tx timeout [ 80.641429][ T5802] [ 82.700069][ T5614] Bluetooth: hci1: command tx timeout [ 82.709384][ T803] cfg80211: failed to load regulatory.db [ 82.751335][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 82.751347][ T30] audit: type=1400 audit(1785404775.541:322): avc: denied { name_bind } for pid=5832 comm="syz.0.16" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 82.753640][ T5802] Node 0 [ 82.778104][ T30] audit: type=1400 audit(1785404775.551:323): avc: denied { node_bind } for pid=5832 comm="syz.0.16" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 82.785562][ T5802] Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 82.785606][ T5802] lowmem_reserve[]: 0 0 0 0 0 [ 82.785635][ T5802] Node 1 Normal free:3941472kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 82.785680][ T5802] lowmem_reserve[]: 0 0 0 0 0 [ 82.785712][ T5802] Node 0 DMA: 0*4kB 0*8kB 0*16kB [ 82.874504][ T30] audit: type=1400 audit(1785404775.671:324): avc: denied { read } for pid=5832 comm="syz.0.16" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.881732][ T5802] 0*32kB [ 82.897952][ T30] audit: type=1400 audit(1785404775.671:325): avc: denied { open } for pid=5832 comm="syz.0.16" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 82.996825][ T30] audit: type=1400 audit(1785404775.781:326): avc: denied { ioctl } for pid=5832 comm="syz.0.16" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.006206][ T5802] 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) [ 83.600615][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.609625][ T5802] 3*4096kB [ 83.616092][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.633240][ T5802] (M) = 15360kB [ 83.633260][ T5802] Node 0 DMA32: 594*4kB (U) 309*8kB (UE) 58*16kB (UM) 8*32kB (UM) 13*64kB (UE) 8*128kB (U) 9*256kB (UME) 8*512kB (UME) 6*1024kB (UM) 5*2048kB (M) 321*4096kB (M) = 1345488kB [ 83.633414][ T5802] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 83.633511][ T5802] Node 1 Normal: 0*4kB 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) [ 83.660819][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.673985][ T5802] 0*2048kB [ 83.680557][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.688137][ T5802] 961*4096kB [ 83.692594][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.697202][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.705339][ T5802] (M) [ 84.554832][ T5614] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 84.575492][ T5802] = 3940464kB [ 84.595172][ T5614] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 84.641742][ T5614] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 84.642371][ T5614] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 84.661014][ T979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.661035][ T979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.672426][ T5802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 84.685101][ T5614] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.786709][ T5612] Bluetooth: hci1: command tx timeout [ 84.803854][ T5802] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 84.936592][ T5852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 84.937993][ T5802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 85.114120][ T979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.168714][ T5859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.231191][ T979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.328251][ T5859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.360040][ T5802] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 85.735712][ T5612] Bluetooth: hci4: command tx timeout [ 85.779670][ T5802] 43872 total pagecache pages [ 86.321646][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.323881][ T5802] 0 pages in swap cache [ 86.328503][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.347684][ T5802] Free swap = 124996kB [ 86.371081][ T5840] bridge_slave_0: entered allmulticast mode [ 86.423754][ T5802] Total swap = 124996kB [ 86.423771][ T5802] 2097051 pages RAM [ 86.423778][ T5802] 0 pages HighMem/MovableOnly [ 86.423784][ T5802] 432301 pages reserved [ 86.423789][ T5802] 0 pages cma reserved [ 86.864437][ T5612] Bluetooth: hci5: command tx timeout [ 86.877999][ T5840] bridge_slave_0: entered promiscuous mode [ 86.880717][ T5612] Bluetooth: hci1: command tx timeout [ 87.810119][ T5614] Bluetooth: hci4: command tx timeout [ 88.945915][ T5612] Bluetooth: hci5: command tx timeout [ 89.815437][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.850553][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.858204][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.865845][ T5840] bridge_slave_1: entered allmulticast mode [ 89.882929][ T5840] bridge_slave_1: entered promiscuous mode [ 89.903435][ T5885] bridge0: port 3(syz_tun) entered blocking state [ 89.910669][ T5885] bridge0: port 3(syz_tun) entered disabled state [ 89.917200][ T5885] syz_tun: entered allmulticast mode [ 89.923843][ T5885] syz_tun: entered promiscuous mode [ 89.931350][ T5885] bridge0: port 3(syz_tun) entered blocking state [ 89.938419][ T5885] bridge0: port 3(syz_tun) entered forwarding state [ 90.043487][ T30] audit: type=1400 audit(1785404782.831:327): avc: denied { ioctl } for pid=5891 comm="syz.0.22" path="socket:[8447]" dev="sockfs" ino=8447 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.093636][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.138264][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.145558][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.154508][ T5823] bridge_slave_0: entered allmulticast mode [ 90.162136][ T5823] bridge_slave_0: entered promiscuous mode [ 90.173491][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.189593][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.193634][ T30] audit: type=1400 audit(1785404782.971:328): avc: denied { ioctl } for pid=5889 comm="syz.4.5" path="socket:[8453]" dev="sockfs" ino=8453 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 90.197608][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.230299][ T5823] bridge_slave_1: entered allmulticast mode [ 90.237738][ T5823] bridge_slave_1: entered promiscuous mode [ 90.253645][ T30] audit: type=1400 audit(1785404783.021:329): avc: denied { write } for pid=5889 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.257097][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.312791][ T5890] syzkaller0: entered promiscuous mode [ 90.318275][ T5890] syzkaller0: entered allmulticast mode [ 90.343914][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.368924][ T5840] team0: Port device team_slave_0 added [ 90.383095][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.574831][ T30] audit: type=1400 audit(1785404783.371:330): avc: denied { mounton } for pid=5904 comm="syz.0.24" path="/18/sys" dev="tmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.597123][ T30] audit: type=1400 audit(1785404783.371:331): avc: denied { mount } for pid=5904 comm="syz.0.24" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 90.656854][ T5907] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 90.677905][ T5907] CPU: 1 UID: 0 PID: 5907 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 90.677933][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 90.677945][ T5907] Call Trace: [ 90.677958][ T5907] [ 90.677965][ T5907] dump_stack_lvl+0x100/0x190 [ 90.677996][ T5907] sysfs_warn_dup.cold+0x1c/0x28 [ 90.678025][ T5907] sysfs_create_dir_ns+0x24b/0x2b0 [ 90.678057][ T5907] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 90.678086][ T5907] ? find_held_lock+0x2b/0x80 [ 90.678115][ T5907] ? kobject_add_internal+0x25f/0x930 [ 90.678142][ T5907] ? kobject_add_internal+0x25f/0x930 [ 90.678172][ T5907] ? class_dir_child_ns_type+0xd/0x60 [ 90.678201][ T5907] kobject_add_internal+0x2c8/0x930 [ 90.678232][ T5907] kobject_add+0x16a/0x1e0 [ 90.678261][ T5907] ? __pfx_kobject_add+0x10/0x10 [ 90.678291][ T5907] ? get_device_parent+0x1b3/0x4c0 [ 90.678316][ T5907] ? kobject_put+0xb9/0x640 [ 90.678347][ T5907] device_add+0x294/0x1970 [ 90.678374][ T5907] ? lockdep_init_map_type+0x5c/0x250 [ 90.678398][ T5907] ? __pfx_device_add+0x10/0x10 [ 90.678424][ T5907] ? lockdep_init_map_type+0x5c/0x250 [ 90.678449][ T5907] ? __init_waitqueue_head+0xca/0x150 [ 90.678480][ T5907] tty_register_device_attr+0x388/0x7f0 [ 90.678505][ T5907] ? lockdep_init_map_type+0x5c/0x250 [ 90.678530][ T5907] ? __pfx_tty_register_device_attr+0x10/0x10 [ 90.678560][ T5907] ? tty_port_init+0x156/0x1c0 [ 90.678587][ T5907] gsm_activate_mux+0x155/0x2a0 [ 90.678610][ T5907] gsmld_ioctl+0xbbc/0x15c0 [ 90.678641][ T5907] ? kasan_quarantine_put+0x104/0x240 [ 90.678663][ T5907] ? __pfx_gsmld_ioctl+0x10/0x10 [ 90.678693][ T5907] ? __ldsem_down_read_nested+0xf3/0x890 [ 90.678723][ T5907] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 90.678756][ T5907] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.678779][ T5907] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 90.678800][ T5907] ? __pfx_gsmld_ioctl+0x10/0x10 [ 90.678825][ T5907] tty_ioctl+0x11b4/0x1640 [ 90.678849][ T5907] ? __pfx_tty_ioctl+0x10/0x10 [ 90.678873][ T5907] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 90.678910][ T5907] ? __fget_files+0x215/0x3d0 [ 90.678929][ T5907] ? hook_file_ioctl_common+0x140/0x440 [ 90.678963][ T5907] ? selinux_file_ioctl+0x13b/0x290 [ 90.678994][ T5907] ? selinux_file_ioctl+0xb6/0x290 [ 90.679025][ T5907] ? __pfx_tty_ioctl+0x10/0x10 [ 90.679051][ T5907] __x64_sys_ioctl+0x18e/0x210 [ 90.679082][ T5907] do_syscall_64+0x115/0x870 [ 90.679102][ T5907] ? clear_bhb_loop+0x40/0x90 [ 90.679126][ T5907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.679145][ T5907] RIP: 0033:0x7f4e5439df99 [ 90.679162][ T5907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.679180][ T5907] RSP: 002b:00007f4e55320028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.679200][ T5907] RAX: ffffffffffffffda RBX: 00007f4e54626090 RCX: 00007f4e5439df99 [ 90.679212][ T5907] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 90.679225][ T5907] RBP: 00007f4e54434ec4 R08: 0000000000000000 R09: 0000000000000000 [ 90.679236][ T5907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.679247][ T5907] R13: 00007f4e54626128 R14: 00007f4e54626090 R15: 00007ffec22b8368 [ 90.679272][ T5907] [ 90.679293][ T5907] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 91.090319][ T5612] Bluetooth: hci4: command tx timeout [ 91.438385][ T30] audit: type=1400 audit(1785404784.221:332): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 91.512770][ T30] audit: type=1400 audit(1785404784.291:333): avc: denied { write } for pid=5913 comm="syz.0.25" name="functions" dev="configfs" ino=8108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.535537][ T30] audit: type=1400 audit(1785404784.311:334): avc: denied { write } for pid=5913 comm="syz.0.25" name="target" dev="configfs" ino=1222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.558549][ T30] audit: type=1400 audit(1785404784.311:335): avc: denied { write } for pid=5913 comm="syz.0.25" name="usb_gadget" dev="configfs" ino=9520 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.583210][ T30] audit: type=1400 audit(1785404784.311:336): avc: denied { write } for pid=5913 comm="syz.0.25" name="naa.1234567890abcdef" dev="configfs" ino=9522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.810362][ T5612] Bluetooth: hci5: command tx timeout [ 91.861659][ T5840] team0: Port device team_slave_1 added [ 91.868888][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.976383][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.994696][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.021503][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.034002][ T5823] team0: Port device team_slave_0 added [ 92.057335][ T5921] Zero length message leads to an empty skb [ 92.062917][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.070421][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.097496][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.114593][ T5823] team0: Port device team_slave_1 added [ 92.138047][ T5921] tipc: Started in network mode [ 92.143131][ T5921] tipc: Node identity ac14142f, cluster identity 4711 [ 92.150992][ T5921] tipc: New replicast peer: 0.0.0.0 [ 92.156486][ T5921] tipc: Enabled bearer , priority 10 [ 92.204819][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.223419][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.227046][ T5925] FAULT_INJECTION: forcing a failure. [ 92.227046][ T5925] name failslab, interval 1, probability 1, space 0, times 10 [ 92.232073][ T5845] bridge_slave_0: entered allmulticast mode [ 92.246779][ T5925] CPU: 0 UID: 0 PID: 5925 Comm: syz.4.29 Not tainted syzkaller #0 PREEMPT(full) [ 92.246802][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.246812][ T5925] Call Trace: [ 92.246818][ T5925] [ 92.246824][ T5925] dump_stack_lvl+0x100/0x190 [ 92.246850][ T5925] should_fail_ex.cold+0x5/0xa [ 92.246870][ T5925] should_failslab+0xc2/0x120 [ 92.246892][ T5925] __kvmalloc_node_noprof+0x116/0x970 [ 92.246915][ T5925] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 92.246940][ T5925] v4l2_ctrl_new+0x4a6/0x23a0 [ 92.246965][ T5925] ? entry_SYSCALL_64_after_hwframe+0x47/0x7f [ 92.246986][ T5925] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 92.247019][ T5925] v4l2_ctrl_new_std+0x1bb/0x290 [ 92.247048][ T5925] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 92.247071][ T5925] ? rcu_is_watching+0x12/0xc0 [ 92.247100][ T5925] ? __kvmalloc_node_noprof+0x36d/0x970 [ 92.247125][ T5925] ? media_request_object_init+0x105/0x180 [ 92.247148][ T5925] vicodec_open+0x1b2/0xf70 [ 92.247171][ T5925] ? kobject_get_unless_zero+0x156/0x200 [ 92.247198][ T5925] v4l2_open+0x1d2/0x490 [ 92.247219][ T5925] ? __pfx_v4l2_open+0x10/0x10 [ 92.247239][ T5925] chrdev_open+0x234/0x6a0 [ 92.247257][ T5925] ? __pfx_chrdev_open+0x10/0x10 [ 92.247276][ T5925] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 92.247301][ T5925] do_dentry_open+0x6ab/0x14d0 [ 92.247315][ T5925] ? __pfx_chrdev_open+0x10/0x10 [ 92.247337][ T5925] vfs_open+0x82/0x3f0 [ 92.247358][ T5925] path_openat+0x2873/0x4280 [ 92.247388][ T5925] ? __pfx_path_openat+0x10/0x10 [ 92.247411][ T5925] do_file_open+0x20e/0x430 [ 92.247435][ T5925] ? __pfx_do_file_open+0x10/0x10 [ 92.247468][ T5925] ? alloc_fd+0x471/0x7a0 [ 92.247487][ T5925] ? do_getname+0x191/0x390 [ 92.247510][ T5925] do_sys_openat2+0x10f/0x1e0 [ 92.247532][ T5925] ? __pfx_do_sys_openat2+0x10/0x10 [ 92.247553][ T5925] ? fdget+0x18b/0x210 [ 92.247573][ T5925] __x64_sys_openat+0x12d/0x210 [ 92.247594][ T5925] ? __pfx___x64_sys_openat+0x10/0x10 [ 92.247624][ T5925] do_syscall_64+0x115/0x870 [ 92.247643][ T5925] ? clear_bhb_loop+0x40/0x90 [ 92.247661][ T5925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.247678][ T5925] RIP: 0033:0x7f1f2df9df99 [ 92.247692][ T5925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.247707][ T5925] RSP: 002b:00007f1f2ef4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.247723][ T5925] RAX: ffffffffffffffda RBX: 00007f1f2e225fa0 RCX: 00007f1f2df9df99 [ 92.247734][ T5925] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 92.247743][ T5925] RBP: 00007f1f2e034ec4 R08: 0000000000000000 R09: 0000000000000000 [ 92.247752][ T5925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.247761][ T5925] R13: 00007f1f2e226038 R14: 00007f1f2e225fa0 R15: 00007fff0ababea8 [ 92.247782][ T5925] [ 92.251499][ T4966] FAULT_INJECTION: forcing a failure. [ 92.251499][ T4966] name failslab, interval 1, probability 1, space 0, times 8 [ 92.260262][ T4977] FAULT_INJECTION: forcing a failure. [ 92.260262][ T4977] name failslab, interval 1, probability 1, space 0, times 8 [ 92.271311][ T979] FAULT_INJECTION: forcing a failure. [ 92.271311][ T979] name failslab, interval 1, probability 1, space 0, times 8 [ 92.273156][ T4977] CPU: 1 UID: 0 PID: 4977 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 92.273175][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.273185][ T4977] Call Trace: [ 92.273190][ T4977] [ 92.273196][ T4977] dump_stack_lvl+0x100/0x190 [ 92.273220][ T4977] should_fail_ex.cold+0x5/0xa [ 92.273239][ T4977] should_failslab+0xc2/0x120 [ 92.273260][ T4977] kmem_cache_alloc_noprof+0x91/0x6a0 [ 92.273278][ T4977] ? stack_trace_save+0x8e/0xc0 [ 92.273294][ T4977] ? alloc_empty_file+0x5b/0x1c0 [ 92.273316][ T4977] alloc_empty_file+0x5b/0x1c0 [ 92.273336][ T4977] path_openat+0xe7/0x4280 [ 92.273352][ T4977] ? __kasan_slab_alloc+0x89/0x90 [ 92.273370][ T4977] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 92.273387][ T4977] ? do_getname+0x35/0x390 [ 92.273405][ T4977] ? do_sys_openat2+0xc7/0x1e0 [ 92.273423][ T4977] ? __x64_sys_openat+0x12d/0x210 [ 92.273441][ T4977] ? do_syscall_64+0x115/0x870 [ 92.273458][ T4977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.273480][ T4977] ? __pfx_path_openat+0x10/0x10 [ 92.273501][ T4977] do_file_open+0x20e/0x430 [ 92.273519][ T4977] ? __pfx_do_file_open+0x10/0x10 [ 92.273550][ T4977] ? alloc_fd+0x471/0x7a0 [ 92.273568][ T4977] ? do_getname+0x191/0x390 [ 92.273589][ T4977] do_sys_openat2+0x10f/0x1e0 [ 92.273608][ T4977] ? __pfx_do_sys_openat2+0x10/0x10 [ 92.273631][ T4977] ? __x64_sys_recvmsg+0x1b9/0x260 [ 92.273654][ T4977] __x64_sys_openat+0x12d/0x210 [ 92.273674][ T4977] ? __pfx___x64_sys_openat+0x10/0x10 [ 92.273702][ T4977] do_syscall_64+0x115/0x870 [ 92.273718][ T4977] ? clear_bhb_loop+0x40/0x90 [ 92.273736][ T4977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.273751][ T4977] RIP: 0033:0x7fbb0daa7407 [ 92.273764][ T4977] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 92.273778][ T4977] RSP: 002b:00007ffd3edcd9e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 92.273793][ T4977] RAX: ffffffffffffffda RBX: 00007fbb0e156880 RCX: 00007fbb0daa7407 [ 92.273804][ T4977] RDX: 0000000000080141 RSI: 0000563e6acc002e RDI: ffffffffffffff9c [ 92.273813][ T4977] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 92.273822][ T4977] R10: 00000000000001a4 R11: 0000000000000202 R12: 00000000ffffffff [ 92.273831][ T4977] R13: 00000000ffffffff R14: ffffffffffffffff R15: 0000000000000000 [ 92.273851][ T4977] [ 92.274485][ T4977] udevd[4977]: could not touch /run/udev/queue: Cannot allocate memory [ 92.275999][ T979] CPU: 0 UID: 0 PID: 979 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 92.276018][ T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.276029][ T979] Workqueue: events_unbound nsim_dev_trap_report_work [ 92.276050][ T979] Call Trace: [ 92.276055][ T979] [ 92.276060][ T979] dump_stack_lvl+0x100/0x190 [ 92.276079][ T979] should_fail_ex.cold+0x5/0xa [ 92.276099][ T979] should_failslab+0xc2/0x120 [ 92.276119][ T979] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 92.276139][ T979] ? __alloc_skb+0x140/0x710 [ 92.276160][ T979] __alloc_skb+0x140/0x710 [ 92.276176][ T979] ? __alloc_skb+0x5b7/0x710 [ 92.276193][ T979] ? __pfx___alloc_skb+0x10/0x10 [ 92.276214][ T979] ? kfree_skbmem+0x19f/0x210 [ 92.276239][ T979] nsim_dev_trap_report_work+0x2af/0xd20 [ 92.276268][ T979] process_one_work+0xa23/0x1940 [ 92.276295][ T979] ? __pfx_process_one_work+0x10/0x10 [ 92.276318][ T979] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 92.276339][ T979] worker_thread+0x5ef/0xe50 [ 92.276362][ T979] ? __pfx_worker_thread+0x10/0x10 [ 92.276380][ T979] ? kthread+0x13a/0x450 [ 92.276393][ T979] ? __pfx_worker_thread+0x10/0x10 [ 92.276409][ T979] kthread+0x370/0x450 [ 92.276423][ T979] ? __pfx_kthread+0x10/0x10 [ 92.276444][ T979] ret_from_fork+0x72b/0xd50 [ 92.276466][ T979] ? __pfx_ret_from_fork+0x10/0x10 [ 92.276489][ T979] ? __switch_to+0x800/0x10f0 [ 92.276505][ T979] ? __pfx_kthread+0x10/0x10 [ 92.276521][ T979] ret_from_fork_asm+0x1a/0x30 [ 92.276553][ T979] [ 92.287643][ T4966] CPU: 0 UID: 0 PID: 4966 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 92.287664][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.287673][ T4966] Call Trace: [ 92.287678][ T4966] [ 92.287684][ T4966] dump_stack_lvl+0x100/0x190 [ 92.287708][ T4966] should_fail_ex.cold+0x5/0xa [ 92.287728][ T4966] should_failslab+0xc2/0x120 [ 92.287749][ T4966] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 92.287768][ T4966] ? __alloc_skb+0x5b7/0x710 [ 92.287786][ T4966] ? __alloc_skb+0x140/0x710 [ 92.287806][ T4966] __alloc_skb+0x140/0x710 [ 92.287822][ T4966] ? __alloc_skb+0x5b7/0x710 [ 92.287839][ T4966] ? __pfx___alloc_skb+0x10/0x10 [ 92.287863][ T4966] alloc_skb_with_frags+0xdd/0x760 [ 92.287883][ T4966] ? find_held_lock+0x2b/0x80 [ 92.287908][ T4966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 92.287927][ T4966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 92.287948][ T4966] sock_alloc_send_pskb+0x801/0x980 [ 92.287969][ T4966] ? avc_has_perm+0x135/0x1e0 [ 92.287988][ T4966] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 92.288004][ T4966] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 92.288027][ T4966] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 92.288049][ T4966] ? sock_def_readable+0x1d2/0x600 [ 92.288073][ T4966] unix_dgram_sendmsg+0x3c7/0x1810 [ 92.288097][ T4966] ? __pfx_syslog_print+0x10/0x10 [ 92.288117][ T4966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 92.288139][ T4966] ? selinux_socket_sendmsg+0x198/0x2f0 [ 92.288165][ T4966] __sys_sendto+0x48b/0x4e0 [ 92.288182][ T4966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 92.288201][ T4966] ? __pfx___sys_sendto+0x10/0x10 [ 92.288223][ T4966] ? do_syslog+0x18c/0x6d0 [ 92.288258][ T4966] __x64_sys_sendto+0xe0/0x1c0 [ 92.288274][ T4966] ? do_syscall_64+0x90/0x870 [ 92.288291][ T4966] ? lockdep_hardirqs_on+0x78/0x100 [ 92.288308][ T4966] do_syscall_64+0x115/0x870 [ 92.288324][ T4966] ? clear_bhb_loop+0x40/0x90 [ 92.288343][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.288359][ T4966] RIP: 0033:0x7fe677f88407 [ 92.288372][ T4966] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 92.288386][ T4966] RSP: 002b:00007ffc36d8edc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 92.288402][ T4966] RAX: ffffffffffffffda RBX: 00007fe677e38c80 RCX: 00007fe677f88407 [ 92.288412][ T4966] RDX: 0000000000000048 RSI: 00007ffc36d8ef00 RDI: 0000000000000003 [ 92.288421][ T4966] RBP: 00007ffc36d8f330 R08: 0000000000000000 R09: 0000000000000000 [ 92.288435][ T4966] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc36d8f348 [ 92.288445][ T4966] R13: 00007ffc36d8ef00 R14: 000000000000002d R15: 00007ffc36d8ef00 [ 92.288466][ T4966] [ 92.291631][ T979] FAULT_INJECTION: forcing a failure. [ 92.291631][ T979] name failslab, interval 1, probability 1, space 0, times 5 [ 92.291656][ T979] CPU: 0 UID: 0 PID: 979 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 92.291679][ T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.291689][ T979] Workqueue: events_unbound nsim_dev_trap_report_work [ 92.291714][ T979] Call Trace: [ 92.291720][ T979] [ 92.291726][ T979] dump_stack_lvl+0x100/0x190 [ 92.291749][ T979] should_fail_ex.cold+0x5/0xa [ 92.291769][ T979] should_failslab+0xc2/0x120 [ 92.291790][ T979] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 92.291811][ T979] ? __alloc_skb+0x140/0x710 [ 92.291833][ T979] __alloc_skb+0x140/0x710 [ 92.291849][ T979] ? __alloc_skb+0x5b7/0x710 [ 92.291866][ T979] ? __pfx___alloc_skb+0x10/0x10 [ 92.291886][ T979] ? kfree_skbmem+0x19f/0x210 [ 92.291911][ T979] nsim_dev_trap_report_work+0x2af/0xd20 [ 92.291940][ T979] process_one_work+0xa23/0x1940 [ 92.291966][ T979] ? __pfx_process_one_work+0x10/0x10 [ 92.291989][ T979] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 92.292011][ T979] worker_thread+0x5ef/0xe50 [ 92.292033][ T979] ? __pfx_worker_thread+0x10/0x10 [ 92.292051][ T979] ? kthread+0x13a/0x450 [ 92.292065][ T979] ? __pfx_worker_thread+0x10/0x10 [ 92.292080][ T979] kthread+0x370/0x450 [ 92.292094][ T979] ? __pfx_kthread+0x10/0x10 [ 92.292110][ T979] ret_from_fork+0x72b/0xd50 [ 92.292133][ T979] ? __pfx_ret_from_fork+0x10/0x10 [ 92.292155][ T979] ? __switch_to+0x800/0x10f0 [ 92.292172][ T979] ? __pfx_kthread+0x10/0x10 [ 92.292188][ T979] ret_from_fork_asm+0x1a/0x30 [ 92.292220][ T979] [ 92.302953][ T979] FAULT_INJECTION: forcing a failure. [ 92.302953][ T979] name failslab, interval 1, probability 1, space 0, times 3 [ 92.302982][ T979] CPU: 0 UID: 0 PID: 979 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 92.303002][ T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.303014][ T979] Workqueue: events_unbound cfg80211_wiphy_work [ 92.303045][ T979] Call Trace: [ 92.303051][ T979] [ 92.303057][ T979] dump_stack_lvl+0x100/0x190 [ 92.303082][ T979] should_fail_ex.cold+0x5/0xa [ 92.303104][ T979] should_failslab+0xc2/0x120 [ 92.303127][ T979] __kmalloc_noprof+0xfc/0x820 [ 92.303149][ T979] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 92.303177][ T979] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 92.303199][ T979] ? unwind_next_frame+0x3be/0x2090 [ 92.303220][ T979] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 92.303241][ T979] ? ret_from_fork_asm+0x1a/0x30 [ 92.303278][ T979] ? stack_trace_save+0x8e/0xc0 [ 92.303294][ T979] ? __pfx_stack_trace_save+0x10/0x10 [ 92.303314][ T979] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 92.303334][ T979] cfg80211_inform_bss_data+0x230/0x3b60 [ 92.303354][ T979] ? __kmalloc_noprof+0x322/0x820 [ 92.303371][ T979] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 92.303395][ T979] ? cfg80211_wiphy_work+0x2b7/0x550 [ 92.303415][ T979] ? process_one_work+0xa23/0x1940 [ 92.303436][ T979] ? worker_thread+0x5ef/0xe50 [ 92.303452][ T979] ? kthread+0x370/0x450 [ 92.303465][ T979] ? ret_from_fork+0x72b/0xd50 [ 92.303486][ T979] ? ret_from_fork_asm+0x1a/0x30 [ 92.303512][ T979] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 92.303537][ T979] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 92.303557][ T979] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 92.303584][ T979] ? __lock_acquire+0x49f/0x1a40 [ 92.303604][ T979] ? __lock_acquire+0x49f/0x1a40 [ 92.303631][ T979] ? __lock_acquire+0x49f/0x1a40 [ 92.303649][ T979] ? find_held_lock+0x2b/0x80 [ 92.303672][ T979] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 92.303694][ T979] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 92.303723][ T979] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 92.303749][ T979] ieee80211_bss_info_update+0x310/0xab0 [ 92.303774][ T979] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 92.303803][ T979] ? rcu_is_watching+0x12/0xc0 [ 92.303826][ T979] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 92.303846][ T979] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 92.303871][ T979] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 92.303904][ T979] ieee80211_iface_work+0xa9a/0x1070 [ 92.303931][ T979] cfg80211_wiphy_work+0x2b7/0x550 [ 92.303955][ T979] process_one_work+0xa23/0x1940 [ 92.303981][ T979] ? __pfx_process_one_work+0x10/0x10 [ 92.304004][ T979] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 92.304027][ T979] worker_thread+0x5ef/0xe50 [ 92.304050][ T979] ? __pfx_worker_thread+0x10/0x10 [ 92.304067][ T979] ? kthread+0x13a/0x450 [ 92.304081][ T979] ? __pfx_worker_thread+0x10/0x10 [ 92.304097][ T979] kthread+0x370/0x450 [ 92.304111][ T979] ? __pfx_kthread+0x10/0x10 [ 92.304128][ T979] ret_from_fork+0x72b/0xd50 [ 92.304149][ T979] ? __pfx_ret_from_fork+0x10/0x10 [ 92.304172][ T979] ? __switch_to+0x800/0x10f0 [ 92.304188][ T979] ? __pfx_kthread+0x10/0x10 [ 92.304204][ T979] ret_from_fork_asm+0x1a/0x30 [ 92.304237][ T979] [ 92.306807][ T4966] FAULT_INJECTION: forcing a failure. [ 92.306807][ T4966] name failslab, interval 1, probability 1, space 0, times 2 [ 92.308733][ T5845] FAULT_INJECTION: forcing a failure. [ 92.308733][ T5845] name failslab, interval 1, probability 1, space 0, times 2 [ 92.321103][ T5607] FAULT_INJECTION: forcing a failure. [ 92.321103][ T5607] name failslab, interval 1, probability 1, space 0, times 2 [ 92.326034][ T5845] CPU: 1 UID: 0 PID: 5845 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 92.326055][ T5845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.326064][ T5845] Call Trace: [ 92.326070][ T5845] [ 92.326076][ T5845] dump_stack_lvl+0x100/0x190 [ 92.326100][ T5845] should_fail_ex.cold+0x5/0xa [ 92.326120][ T5845] should_failslab+0xc2/0x120 [ 92.326140][ T5845] kmem_cache_alloc_noprof+0x91/0x6a0 [ 92.326159][ T5845] ? __kernfs_new_node+0xd2/0xa10 [ 92.326181][ T5845] __kernfs_new_node+0xd2/0xa10 [ 92.326201][ T5845] ? __pfx___kernfs_new_node+0x10/0x10 [ 92.326224][ T5845] ? find_held_lock+0x2b/0x80 [ 92.326247][ T5845] ? kernfs_root+0xee/0x2a0 [ 92.326261][ T5845] ? kernfs_root+0xee/0x2a0 [ 92.326280][ T5845] kernfs_new_node+0x117/0x150 [ 92.326302][ T5845] __kernfs_create_file+0x53/0x350 [ 92.326326][ T5845] sysfs_add_file_mode_ns+0x207/0x3c0 [ 92.326355][ T5845] sysfs_create_file_ns+0x145/0x1e0 [ 92.326379][ T5845] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 92.326402][ T5845] ? kernfs_create_link+0x1bd/0x240 [ 92.326424][ T5845] ? kernfs_put+0x3f/0x60 [ 92.326439][ T5845] ? sysfs_do_create_link_sd+0xbb/0x140 [ 92.326458][ T5845] br_sysfs_addif+0xe4/0x210 [ 92.326483][ T5845] br_add_if+0x82c/0x1c80 [ 92.326509][ T5845] ? __pfx_br_add_slave+0x10/0x10 [ 92.326532][ T5845] do_set_master+0x40f/0x730 [ 92.326554][ T5845] do_setlink.isra.0+0xb2b/0x3e60 [ 92.326577][ T5845] ? rcu_is_watching+0x12/0xc0 [ 92.326602][ T5845] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 92.326628][ T5845] ? __lock_acquire+0x49f/0x1a40 [ 92.326651][ T5845] ? do_raw_spin_lock+0x128/0x260 [ 92.326673][ T5845] ? find_held_lock+0x2b/0x80 [ 92.326696][ T5845] ? debug_mutex_remove_waiter+0xa0/0x320 [ 92.326719][ T5845] ? debug_mutex_remove_waiter+0xa0/0x320 [ 92.326746][ T5845] ? mark_held_locks+0x40/0x70 [ 92.326764][ T5845] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 92.326780][ T5845] ? __mutex_lock+0x82c/0x1bd0 [ 92.326796][ T5845] ? lockdep_hardirqs_on+0x78/0x100 [ 92.326814][ T5845] ? __mutex_lock+0x82c/0x1bd0 [ 92.326830][ T5845] ? __mutex_lock+0x26d/0x1bd0 [ 92.326848][ T5845] ? rtnl_newlink+0x8bb/0x2380 [ 92.326871][ T5845] ? __pfx___mutex_lock+0x10/0x10 [ 92.326888][ T5845] ? rcu_is_watching+0x12/0xc0 [ 92.326911][ T5845] ? cap_capable+0x107/0x430 [ 92.326948][ T5845] rtnl_newlink+0x11c2/0x2380 [ 92.326976][ T5845] ? __pfx_rtnl_newlink+0x10/0x10 [ 92.326994][ T5845] ? find_held_lock+0x2b/0x80 [ 92.327017][ T5845] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 92.327035][ T5845] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 92.327056][ T5845] ? avc_has_perm_noaudit+0x145/0x3b0 [ 92.327080][ T5845] ? __lock_acquire+0x49f/0x1a40 [ 92.327109][ T5845] ? find_held_lock+0x2b/0x80 [ 92.327131][ T5845] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 92.327151][ T5845] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 92.327172][ T5845] ? __pfx_rtnl_newlink+0x10/0x10 [ 92.327192][ T5845] rtnetlink_rcv_msg+0x95e/0xe90 [ 92.327214][ T5845] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.327239][ T5845] ? __lock_acquire+0x49f/0x1a40 [ 92.327261][ T5845] netlink_rcv_skb+0x159/0x420 [ 92.327278][ T5845] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.327299][ T5845] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 92.327323][ T5845] ? netlink_deliver_tap+0x1ae/0xcc0 [ 92.327351][ T5845] netlink_unicast+0x585/0x850 [ 92.327370][ T5845] ? __pfx_netlink_unicast+0x10/0x10 [ 92.327385][ T5845] ? __pfx_sock_has_perm+0x10/0x10 [ 92.327410][ T5845] netlink_sendmsg+0x8b0/0xda0 [ 92.327429][ T5845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.327447][ T5845] ? selinux_socket_sendmsg+0x198/0x2f0 [ 92.327472][ T5845] __sys_sendto+0x48b/0x4e0 [ 92.327489][ T5845] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.327505][ T5845] ? __pfx___sys_sendto+0x10/0x10 [ 92.327538][ T5845] ? __pfx_fput_close_sync+0x10/0x10 [ 92.327562][ T5845] __x64_sys_sendto+0xe0/0x1c0 [ 92.327579][ T5845] ? do_syscall_64+0x90/0x870 [ 92.327595][ T5845] ? lockdep_hardirqs_on+0x78/0x100 [ 92.327612][ T5845] do_syscall_64+0x115/0x870 [ 92.327628][ T5845] ? clear_bhb_loop+0x40/0x90 [ 92.327647][ T5845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.327663][ T5845] RIP: 0033:0x7feff0f5e7ce [ 92.327677][ T5845] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.327691][ T5845] RSP: 002b:00007ffcd9f10928 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 92.327706][ T5845] RAX: ffffffffffffffda RBX: 0000555588352500 RCX: 00007feff0f5e7ce [ 92.327716][ T5845] RDX: 0000000000000028 RSI: 00007feff1d54670 RDI: 0000000000000003 [ 92.327725][ T5845] RBP: 0000000000000001 R08: 00007ffcd9f109a4 R09: 000000000000000c [ 92.327734][ T5845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 92.327744][ T5845] R13: 0000000000000000 R14: 00007feff1d54670 R15: 0000000000000000 [ 92.327764][ T5845] [ 92.328352][ T5845] bridge_slave_0: left allmulticast mode [ 92.331319][ T4966] CPU: 0 UID: 0 PID: 4966 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 92.331338][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.331347][ T4966] Call Trace: [ 92.331352][ T4966] [ 92.331358][ T4966] dump_stack_lvl+0x100/0x190 [ 92.331380][ T4966] should_fail_ex.cold+0x5/0xa [ 92.331399][ T4966] should_failslab+0xc2/0x120 [ 92.331419][ T4966] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 92.331444][ T4966] ? __alloc_skb+0x5b7/0x710 [ 92.331461][ T4966] ? __alloc_skb+0x140/0x710 [ 92.331481][ T4966] __alloc_skb+0x140/0x710 [ 92.331497][ T4966] ? __alloc_skb+0x5b7/0x710 [ 92.331514][ T4966] ? __pfx___alloc_skb+0x10/0x10 [ 92.331537][ T4966] alloc_skb_with_frags+0xdd/0x760 [ 92.331557][ T4966] ? find_held_lock+0x2b/0x80 [ 92.331580][ T4966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 92.331598][ T4966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 92.331619][ T4966] sock_alloc_send_pskb+0x801/0x980 [ 92.331640][ T4966] ? avc_has_perm+0x135/0x1e0 [ 92.331658][ T4966] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 92.331674][ T4966] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 92.331696][ T4966] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 92.331719][ T4966] ? sock_def_readable+0x1d2/0x600 [ 92.331742][ T4966] unix_dgram_sendmsg+0x3c7/0x1810 [ 92.331766][ T4966] ? __pfx_syslog_print+0x10/0x10 [ 92.331785][ T4966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 92.331807][ T4966] ? selinux_socket_sendmsg+0x198/0x2f0 [ 92.331832][ T4966] __sys_sendto+0x48b/0x4e0 [ 92.331849][ T4966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 92.331868][ T4966] ? __pfx___sys_sendto+0x10/0x10 [ 92.331890][ T4966] ? do_syslog+0x18c/0x6d0 [ 92.331917][ T4966] ? xfd_validate_state+0x129/0x190 [ 92.331943][ T4966] __x64_sys_sendto+0xe0/0x1c0 [ 92.331960][ T4966] ? do_syscall_64+0x90/0x870 [ 92.331976][ T4966] ? lockdep_hardirqs_on+0x78/0x100 [ 92.331993][ T4966] do_syscall_64+0x115/0x870 [ 92.332009][ T4966] ? clear_bhb_loop+0x40/0x90 [ 92.332030][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.332046][ T4966] RIP: 0033:0x7fe677f88407 [ 92.332059][ T4966] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 92.332073][ T4966] RSP: 002b:00007ffc36d8edc0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 92.332088][ T4966] RAX: ffffffffffffffda RBX: 00007fe677e38c80 RCX: 00007fe677f88407 [ 92.332098][ T4966] RDX: 0000000000000057 RSI: 00007ffc36d8ef00 RDI: 0000000000000003 [ 92.332108][ T4966] RBP: 00007ffc36d8f330 R08: 0000000000000000 R09: 0000000000000000 [ 92.332116][ T4966] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc36d8f348 [ 92.332126][ T4966] R13: 00007ffc36d8ef00 R14: 000000000000003c R15: 00007ffc36d8ef00 [ 92.332146][ T4966] [ 92.337909][ T5607] CPU: 0 UID: 0 PID: 5607 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 92.337929][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 92.337938][ T5607] Call Trace: [ 92.337944][ T5607] [ 92.337949][ T5607] dump_stack_lvl+0x100/0x190 [ 92.337971][ T5607] should_fail_ex.cold+0x5/0xa [ 92.337991][ T5607] should_failslab+0xc2/0x120 [ 92.338012][ T5607] kmem_cache_alloc_noprof+0x91/0x6a0 [ 92.338029][ T5607] ? do_raw_spin_lock+0x128/0x260 [ 92.338051][ T5607] ? do_getname+0x35/0x390 [ 92.338074][ T5607] do_getname+0x35/0x390 [ 92.338095][ T5607] vfs_fstatat+0xd0/0xe0 [ 92.338116][ T5607] __do_sys_newfstatat+0x9d/0x120 [ 92.338135][ T5607] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 92.338164][ T5607] ? __x64_sys_umount+0x124/0x1a0 [ 92.338182][ T5607] ? __pfx___x64_sys_umount+0x10/0x10 [ 92.338205][ T5607] do_syscall_64+0x115/0x870 [ 92.338222][ T5607] ? clear_bhb_loop+0x40/0x90 [ 92.338241][ T5607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.338256][ T5607] RIP: 0033:0x7f1f2df9c5da [ 92.338269][ T5607] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 [ 92.338283][ T5607] RSP: 002b:00007fff0abab118 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 92.338298][ T5607] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1f2df9c5da [ 92.338308][ T5607] RDX: 00007fff0abab140 RSI: 00007fff0abab1d0 RDI: 00000000ffffff9c [ 92.338317][ T5607] RBP: 00007fff0abab1d0 R08: 00007fff0abac1d0 R09: 00000000ffffffff [ 92.338326][ T5607] R10: 0000000000000100 R11: 0000000000000286 R12: 00007fff0abac260 [ 92.338335][ T5607] R13: 00007f1f2e034314 R14: 0000000000016860 R15: 00007fff0abac2a0 [ 92.338355][ T5607] [ 92.569941][ T5927] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 92.579923][ T5845] bridge0: port 1(bridge_slave_1) entered blocking state [ 93.170188][ T5612] Bluetooth: hci4: command tx timeout [ 93.174605][ T5845] bridge0: port 1(bridge_slave_1) entered disabled state [ 93.890265][ T5612] Bluetooth: hci5: command tx timeout [ 93.894759][ T5845] bridge_slave_1: entered allmulticast mode [ 94.774264][ T5845] bridge_slave_1: entered promiscuous mode [ 94.804719][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.811939][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.838225][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.852671][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.860861][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.887448][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.919376][ T5613] tipc: Node number set to 2886997039 [ 94.978746][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.993249][ T5840] hsr_slave_0: entered promiscuous mode [ 94.999739][ T5840] hsr_slave_1: entered promiscuous mode [ 95.006199][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 95.012301][ T5840] Cannot create hsr debugfs directory [ 95.029132][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.063526][ T36] bridge_slave_1: left allmulticast mode [ 95.069253][ T36] bridge_slave_1: left promiscuous mode [ 95.076757][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.092815][ T36] bridge_slave_0: left allmulticast mode [ 95.102606][ T36] bridge_slave_0: left promiscuous mode [ 95.108346][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.170210][ T5729] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 95.279678][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.294433][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.304418][ T36] bond0 (unregistering): Released all slaves [ 95.340214][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 95.340230][ T30] audit: type=1400 audit(1785404788.121:360): avc: denied { create } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.356577][ T5614] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.368452][ T30] audit: type=1400 audit(1785404788.131:361): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="socket:[8632]" dev="sockfs" ino=8632 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.376491][ T5614] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.400453][ T5729] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.413556][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.418836][ T5729] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 95.428089][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.434244][ T5729] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.457367][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.468570][ T30] audit: type=1400 audit(1785404788.261:362): avc: denied { read } for pid=5272 comm="dhcpcd" name="n31" dev="tmpfs" ino=2002 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.490790][ T5729] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 95.500471][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.508641][ T5729] usb 1-1: Product: syz [ 95.513776][ T5729] usb 1-1: Manufacturer: syz [ 95.518413][ T5729] usb 1-1: SerialNumber: syz [ 95.527997][ T30] audit: type=1400 audit(1785404788.261:363): avc: denied { open } for pid=5272 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=2002 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.537641][ T5823] hsr_slave_0: entered promiscuous mode [ 95.553956][ T30] audit: type=1400 audit(1785404788.261:364): avc: denied { getattr } for pid=5272 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=2002 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 95.561349][ T5933] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 95.596281][ T5823] hsr_slave_1: entered promiscuous mode [ 95.606803][ T5729] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 95.619812][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 95.626711][ T5729] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 95.637982][ T5823] Cannot create hsr debugfs directory [ 95.644282][ T5729] usbserial_generic 1-1:1.0: generic converter detected [ 95.648657][ T5845] team0: Port device team_slave_0 added [ 95.661987][ T5729] usb 1-1: generic converter now attached to ttyUSB0 [ 95.682992][ T36] hsr_slave_0: left promiscuous mode [ 95.698802][ T36] hsr_slave_1: left promiscuous mode [ 95.707770][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.716010][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.724444][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.743378][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.772859][ T36] veth1_macvtap: left promiscuous mode [ 95.779182][ T36] veth0_macvtap: left promiscuous mode [ 95.785200][ T36] veth1_vlan: left promiscuous mode [ 95.790931][ T36] veth0_vlan: left promiscuous mode [ 95.881605][ T5784] usb 1-1: USB disconnect, device number 5 [ 95.929199][ T5784] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 95.955159][ T5784] usbserial_generic 1-1:1.0: device disconnected [ 96.003818][ T30] audit: type=1400 audit(1785404788.791:365): avc: denied { write } for pid=5940 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.032871][ T30] audit: type=1400 audit(1785404788.791:366): avc: denied { create } for pid=5940 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.055746][ T30] audit: type=1400 audit(1785404788.791:367): avc: denied { write } for pid=5940 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=2033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.084306][ T30] audit: type=1400 audit(1785404788.791:368): avc: denied { append } for pid=5940 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=2033 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 96.136627][ T30] audit: type=1400 audit(1785404788.921:369): avc: denied { write } for pid=5951 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.159309][ T36] team0 (unregistering): Port device team_slave_1 removed [ 96.177492][ T36] team0 (unregistering): Port device team_slave_0 removed [ 96.273543][ T5845] team0: Port device team_slave_1 added [ 96.282751][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 96.401813][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.415982][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.467949][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.506652][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.521506][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.562528][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.802535][ T5845] hsr_slave_0: entered promiscuous mode [ 96.808991][ T5845] hsr_slave_1: entered promiscuous mode [ 96.815547][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 96.822357][ T5845] Cannot create hsr debugfs directory [ 96.874142][ T5840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.994679][ T5840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.054061][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 97.137492][ T5840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.169919][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.205539][ T5840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.271301][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.375838][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.482824][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.575018][ T5614] Bluetooth: hci0: command tx timeout [ 97.692557][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.699703][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.706994][ T5935] bridge_slave_0: entered allmulticast mode [ 97.713780][ T5935] bridge_slave_0: entered promiscuous mode [ 97.734946][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 97.750823][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.758053][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.765721][ T5935] bridge_slave_1: entered allmulticast mode [ 97.773342][ T5935] bridge_slave_1: entered promiscuous mode [ 97.796452][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.825888][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.862703][ T5935] team0: Port device team_slave_0 added [ 97.893692][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.914785][ T5935] team0: Port device team_slave_1 added [ 97.948529][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.955656][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.981943][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.994788][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.001949][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.028340][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.062007][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.135682][ T5935] hsr_slave_0: entered promiscuous mode [ 98.142286][ T5935] hsr_slave_1: entered promiscuous mode [ 98.148507][ T5935] debugfs: 'hsr0' already exists in 'hsr' [ 98.154345][ T5935] Cannot create hsr debugfs directory [ 98.181871][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.216092][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.226372][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.239830][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.250173][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.257932][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.269566][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.282996][ T5983] NFSD: Unable to initialize client recovery tracking! (-110) [ 98.299001][ T5983] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 98.318683][ T5983] NFSD: starting 90-second grace period (net f000044d) [ 98.326152][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.340621][ T5823] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.374033][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.531909][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.543898][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.555264][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.564894][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.572878][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.582469][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.614655][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.624543][ T5840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.757137][ T6035] dummy_hcd dummy_hcd.0: remove, state 4 [ 98.763754][ T6035] usb usb1: USB disconnect, device number 1 [ 98.821859][ T6035] dummy_hcd dummy_hcd.0: stopped [ 98.828473][ T6035] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 98.828992][ T36] bridge_slave_1: left allmulticast mode [ 98.856424][ T36] bridge_slave_1: left promiscuous mode [ 98.869522][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.879546][ T36] bridge_slave_0: left allmulticast mode [ 98.885628][ T36] bridge_slave_0: left promiscuous mode [ 98.892199][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.911495][ T36] bridge_slave_1: left allmulticast mode [ 98.917190][ T36] bridge_slave_1: left promiscuous mode [ 98.924870][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.940319][ T36] bridge_slave_0: left allmulticast mode [ 98.946015][ T36] bridge_slave_0: left promiscuous mode [ 98.953184][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.977409][ T36] bridge_slave_1: left allmulticast mode [ 98.987217][ T36] bridge_slave_1: left promiscuous mode [ 98.993212][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.002349][ T36] bridge_slave_0: left allmulticast mode [ 99.008863][ T36] bridge_slave_0: left promiscuous mode [ 99.020933][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.198726][ T6045] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 99.210834][ T6045] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 99.219224][ T6045] CPU: 0 UID: 0 PID: 6045 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT(full) [ 99.228305][ T6045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 99.238344][ T6045] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 99.243794][ T6045] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 99.263385][ T6045] RSP: 0018:ffffc90003657b48 EFLAGS: 00010246 [ 99.269442][ T6045] RAX: dffffc0000000000 RBX: ffff888029540c00 RCX: ffffc90003ba9000 [ 99.277394][ T6045] RDX: 0000000000000000 RSI: ffffffff87d0cf47 RDI: ffff888029541290 [ 99.285343][ T6045] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 99.293292][ T6045] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880266e8050 [ 99.301242][ T6045] R13: 0000000000000000 R14: ffff88802c8ce4f1 R15: ffff88802c8ce008 [ 99.309206][ T6045] FS: 00007f4e553416c0(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 99.318116][ T6045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.324681][ T6045] CR2: 00007f4e543875c0 CR3: 00000000751bb000 CR4: 00000000003526f0 [ 99.332634][ T6045] Call Trace: [ 99.335894][ T6045] [ 99.339432][ T6045] gadget_bind_driver+0x4ac/0xbf0 [ 99.344447][ T6045] ? __pfx_gadget_bind_driver+0x10/0x10 [ 99.349980][ T6045] really_probe+0x241/0xa60 [ 99.354466][ T6045] __driver_probe_device+0x20e/0x450 [ 99.359734][ T6045] driver_probe_device+0x4a/0x140 [ 99.364740][ T6045] __driver_attach+0x21f/0x5b0 [ 99.369487][ T6045] ? __pfx___driver_attach+0x10/0x10 [ 99.374752][ T6045] bus_for_each_dev+0x13e/0x1d0 [ 99.379579][ T6045] ? __pfx_bus_for_each_dev+0x10/0x10 [ 99.384936][ T6045] ? bus_add_driver+0x2b5/0x5b0 [ 99.389787][ T6045] bus_add_driver+0x305/0x5b0 [ 99.394448][ T6045] driver_register+0x1e2/0x360 [ 99.399196][ T6045] ? rcu_is_watching+0x12/0xc0 [ 99.403948][ T6045] usb_gadget_register_driver_owner+0x132/0x210 [ 99.410179][ T6045] raw_ioctl+0x1a85/0x2b80 [ 99.414585][ T6045] ? __pfx_raw_ioctl+0x10/0x10 [ 99.419331][ T6045] ? selinux_file_ioctl+0x13b/0x290 [ 99.424515][ T6045] ? selinux_file_ioctl+0xb6/0x290 [ 99.429613][ T6045] ? __pfx_raw_ioctl+0x10/0x10 [ 99.434360][ T6045] __x64_sys_ioctl+0x18e/0x210 [ 99.439109][ T6045] do_syscall_64+0x115/0x870 [ 99.443679][ T6045] ? clear_bhb_loop+0x40/0x90 [ 99.448335][ T6045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.454204][ T6045] RIP: 0033:0x7f4e5439dc2b [ 99.458596][ T6045] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 99.478182][ T6045] RSP: 002b:00007f4e5533ef00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.486590][ T6045] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f4e5439dc2b SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 99.494539][ T6045] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 99.502485][ T6045] RBP: 00007f4e5533ffd0 R08: 0000000000000001 R09: 00000000ffffffff [ 99.510434][ T6045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.518382][ T6045] R13: 0000200000000140 R14: 0000000000000000 R15: 0000000000000000 [ 99.526335][ T6045] [ 99.529330][ T6045] Modules linked in: [ 99.533879][ T6045] ---[ end trace 0000000000000000 ]--- [ 99.575773][ T6045] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 99.581419][ T6045] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 99.601327][ T6045] RSP: 0018:ffffc90003657b48 EFLAGS: 00010246 [ 99.607571][ T6045] RAX: dffffc0000000000 RBX: ffff888029540c00 RCX: ffffc90003ba9000 [ 99.615611][ T6045] RDX: 0000000000000000 RSI: ffffffff87d0cf47 RDI: ffff888029541290 [ 99.615873][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.623687][ T6045] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 99.642694][ T6045] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880266e8050 [ 99.651903][ T6045] R13: 0000000000000000 R14: ffff88802c8ce4f1 R15: ffff88802c8ce008 [ 99.659908][ T6045] FS: 00007f4e553416c0(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 99.660081][ T5614] Bluetooth: hci0: command tx timeout [ 99.669124][ T6045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 99.669140][ T6045] CR2: 000055fa8b230170 CR3: 00000000751bb000 CR4: 00000000003526f0 [ 99.669155][ T6045] Kernel panic - not syncing: Fatal exception [ 99.669356][ T6045] Kernel Offset: disabled