last executing test programs: 51.505685244s ago: executing program 0 (id=106): r0 = syz_usbip_server_init(0x3) read(r0, &(0x7f0000000040)=""/48, 0x30) write(r0, &(0x7f0000000080)="0000000300000001000000000000000000000000000000000000004000"/48, 0x30) shutdown(r0, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 50.636587512s ago: executing program 4 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1-1', 0x7) write(r0, &(0x7f0000000180)='add 2-1\x00', 0x8) write(r0, &(0x7f00000001c0)='add 3-1\x00', 0x8) write(r0, &(0x7f0000000200)='add 4-1\x00', 0x8) write(r0, &(0x7f0000000240)='add 5-1\x00', 0x8) write(r0, &(0x7f0000000280)='add 6-1\x00', 0x8) write(r0, &(0x7f00000002c0)='add 7-1\x00', 0x8) write(r0, &(0x7f0000000300)='add 8-1\x00', 0x8) write(r0, &(0x7f0000000340)='add 1-2\x00', 0x8) write(r0, &(0x7f0000000380)='add 2-2\x00', 0x8) write(r0, &(0x7f00000003c0)='add 3-2\x00', 0x8) write(r0, &(0x7f0000000400)='add 4-2\x00', 0x8) write(r0, &(0x7f0000000440)='add 5-2\x00', 0x8) write(r0, &(0x7f0000000480)='add 6-2\x00', 0x8) write(r0, &(0x7f00000004c0)='add 7-2\x00', 0x8) write(r0, &(0x7f0000000500)='add 8-2\x00', 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000029be0008110700096ffa010203010902240001000000000904970002ffffff000905041020000637460905de24"], 0x0) nanosleep(&(0x7f0000000580)={0x1}, 0x0) 49.909425661s ago: executing program 3 (id=111): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xc8, 0x12b000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x80000007, 0x3, 0x8, 0x3ae67963, 'syz1\x00', 0xe}, 0x4, 0x200, 0x5, 0x0, 0x0, 0xc9, 'syz1\x00', 0x0}) 49.899397481s ago: executing program 0 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dbg\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dbg/failslab/times\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='100\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dbg/failslab/space\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dbg/failslab/probability\x00', 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write(r2, &(0x7f0000000100)='100\x00', 0x3) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 48.770675755s ago: executing program 0 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) 46.695195622s ago: executing program 3 (id=115): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000900)='0\x00', 0x2) r1 = openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='0\x00', 0x2) symlink(&(0x7f0000000e00)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000f00)='./my_config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffff9c, &(0x7f0000001000)='./my_config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001100)='dummy_udc.0\n\x00', 0xc) 45.849764s ago: executing program 4 (id=116): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write(r0, &(0x7f0000000080)='transport=loop,nqn=n', 0x14) 42.604300193s ago: executing program 3 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x1000, 0x1000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x1000, 0x1000, 0x1}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x1000, 0x1000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x1000, 0x1000}) 42.178225139s ago: executing program 4 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./my_configfs/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1/functions\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/functions/uvc.usb0/control/terminal/output/default/iTerminal\x00', 0x0, 0x0) read(r0, &(0x7f0000000900), 0x64) 41.057082404s ago: executing program 0 (id=120): mkdir(&(0x7f0000000000)='./my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_tracefs\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_tracefs/trace_marker\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='wip\x00', 0x4) 38.155190763s ago: executing program 4 (id=122): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='ffffffff', 0x8) close(r0) syz_usbip_server_init(0x5) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0xf, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x23, 0x3, 0x8, 0x1, 0x0, 0x3e8, &(0x7f0000000240)}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000280)={0x23, 0x1, 0x8, 0x1, 0x0, 0x3e8, &(0x7f00000002c0)}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0xa3, 0x0, 0x0, 0x1, 0x4, 0x3e8, &(0x7f0000000340)='\x00\x00\x00\x00'}) r2 = syz_open_dev$usbfs(&(0x7f0000000380), 0x10, 0x2) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x8, 0x1, 0x0, 0x3e8, &(0x7f0000000440)}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000480)={0x23, 0x1, 0x8, 0x1, 0x0, 0x3e8, &(0x7f00000004c0)}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000500)={0xa3, 0x0, 0x0, 0x1, 0x4, 0x3e8, &(0x7f0000000540)='\x00\x00\x00\x00'}) 33.979557832s ago: executing program 0 (id=124): mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x100000001, 0x8000000000000000, 0x1, 0x1, 0xfb, 0x3, 0x1], 0x41000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x12, 0x50, 0x0, 0x20000008, 0x7, 0x5, 0x9, 0x1, 0x8, 0x0, 0x0, 0x0, 0x40004, 0x14, 0xfe, 0xa, 0x80, 0xf, '\x00', 0x2, 0x4080000000000005}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000200)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.784499506s ago: executing program 3 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1-1\x00', 0x8) write(r0, 0x0, 0x0) write(r0, &(0x7f00000001c0)='add 3-1\x00', 0x8) write(r0, &(0x7f0000000200)='add 4-1\x00', 0x8) write(r0, &(0x7f0000000240)='add 5-1\x00', 0x8) write(r0, &(0x7f0000000280)='add 6-1\x00', 0x8) write(r0, &(0x7f00000002c0)='add 7-1\x00', 0x8) write(r0, &(0x7f0000000300)='add 8-1\x00', 0x8) write(r0, &(0x7f0000000340)='add 1-2\x00', 0x8) write(r0, &(0x7f0000000380)='add 2-2\x00', 0x8) write(r0, &(0x7f00000003c0)='add 3-2\x00', 0x8) write(r0, &(0x7f0000000400)='add 4-2\x00', 0x8) write(r0, &(0x7f0000000440)='add 5-2\x00', 0x8) write(r0, &(0x7f0000000480)='add 6-2\x00', 0x8) write(r0, &(0x7f00000004c0)='add 7-2\x00', 0x8) write(r0, &(0x7f0000000500)='add 8-2\x00', 0x8) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000029be0008110700096ffa010203010902240001000000000904970002ffffff000905041020000637460905de24"], 0x0) nanosleep(&(0x7f0000000580)={0x1}, 0x0) 28.735539242s ago: executing program 4 (id=128): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000900)='0\x00', 0x2) r1 = openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='0\x00', 0x2) symlink(&(0x7f0000000e00)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000000f00)='./my_config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffff9c, &(0x7f0000001000)='./my_config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001100)='dummy_udc.0\n\x00', 0xc) 26.784944149s ago: executing program 3 (id=129): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x1, 0xfa, 0x41b}}}, 0x7) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='ffffffff', 0x8) close(r0) syz_usbip_server_init(0x5) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0xf, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000200)={0x23, 0x3, 0x8, 0x1, 0x0, 0x3e8, &(0x7f0000000240)}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000280)={0x23, 0x1, 0x8, 0x1, 0x0, 0x3e8, &(0x7f00000002c0)}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000300)={0xa3, 0x0, 0x0, 0x1, 0x4, 0x3e8, &(0x7f0000000340)='\x00\x00\x00\x00'}) syz_open_dev$usbfs(&(0x7f0000000380), 0x10, 0x2) 26.395887198s ago: executing program 4 (id=131): r0 = syz_io_uring_setup(0xf00, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_modify_offsets$flags(r1, r2, 0x38, 0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)={0x42}, &(0x7f00000002c0)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = syz_io_uring_complete(r1, r2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='nodev\x00', &(0x7f0000000380)='./tracefs_dir\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r5, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='100\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000700)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r5, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='200\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000800)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r5, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='300\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000900)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r5, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='400\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000a00)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r6, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='8\x00', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000b00)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r6, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='16\x00', 0x3}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r8, 0x6, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0xf4240}, 0x0) close(r7) close(r5) 26.189552713s ago: executing program 0 (id=132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0x80, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x259}], 0x2}, 0x0) 24.704973092s ago: executing program 3 (id=133): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0xfffffffa, @empty, 0x8001}, 0x1c) listen(r1, 0x0) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x2000c000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 10.380632872s ago: executing program 32 (id=132): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0x80, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x259}], 0x2}, 0x0) 9.620852797s ago: executing program 33 (id=131): r0 = syz_io_uring_setup(0xf00, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_modify_offsets$flags(r1, r2, 0x38, 0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)={0x42}, &(0x7f00000002c0)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = syz_io_uring_complete(r1, r2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='nodev\x00', &(0x7f0000000380)='./tracefs_dir\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x0, 0x0) r8 = syz_io_uring_setup(0xf00, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000600)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r5, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='100\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000700)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r5, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='200\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000800)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r5, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='300\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000900)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r5, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='400\x00', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000a00)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r6, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='8\x00', 0x2}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000b00)=@IORING_OP_WRITE={0x17, 0x10, 0x0, @fd=r6, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='16\x00', 0x3}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r8, 0x6, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0xf4240}, 0x0) close(r7) close(r5) 5.015649412s ago: executing program 1 (id=145): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x1, 0xfb, 0x2}]}) write(r0, &(0x7f0000000280)="73a39012", 0x4) 4.523552789s ago: executing program 1 (id=148): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000600)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='dummy_udc.0', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='\n', 0x1) close(r1) 4.436117866s ago: executing program 1 (id=149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001060400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 4.249402719s ago: executing program 1 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/platform/devices/usbip-vudc.0/modalias\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/256, 0x100) 4.17853087s ago: executing program 1 (id=151): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='tcp 2', 0x5) umount2(&(0x7f0000000140)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 3.428015213s ago: executing program 1 (id=155): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./backing_file\x00', 0x42, 0x1ff) ftruncate(r0, 0x4000000) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, &(0x7f0000000200)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/loop0/queue/rotational\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='bfq\n\x00', 0x4) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000480)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x100000, &(0x7f0000000500), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000540)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000580)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x101000, &(0x7f0000000600), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000640)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000680)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x102000, &(0x7f0000000700), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000740)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000780)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x103000, &(0x7f0000000800), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000840)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000880)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x104000, &(0x7f0000000900), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000940)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x105000, &(0x7f0000000a00), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000a40)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000a80)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x106000, &(0x7f0000000b00), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000b40)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000b80)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x107000, &(0x7f0000000c00), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000c40)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000c80)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x108000, &(0x7f0000000d00), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000d40)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000d80)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x109000, &(0x7f0000000e00), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000e40)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000e80)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x10a000, &(0x7f0000000f00), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000000f40)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000f80)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x10b000, &(0x7f0000001000), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000001040)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000001080)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x10c000, &(0x7f0000001100), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000001140)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000001180)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x10d000, &(0x7f0000001200), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000001240)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000001280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x10e000, &(0x7f0000001300), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000001340)}}) syz_io_uring_submit(r5, r6, r7, &(0x7f0000001380)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x10f000, &(0x7f0000001400), 0x1000, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', &(0x7f0000001440)}}) io_uring_enter(r4, 0x10, 0x10, 0x1, 0x0, 0x0) 3.31954954s ago: executing program 2 (id=156): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="80000000ffffffffffffffffffffffff50505050505000000000000000000000640001000006020202020202010196050302b00f2503f14760"], 0x55) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x4004800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x3c, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 2.382058446s ago: executing program 2 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) setgroups(0x0, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x0) 2.115234829s ago: executing program 2 (id=158): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000480)=""/206, 0xce}], 0x1) 935.517516ms ago: executing program 2 (id=159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='300\n\x00', 0x4) 682.632375ms ago: executing program 2 (id=160): syz_open_dev$loop(0x0, 0x760, 0xa382) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4090, 0xffa}], 0x1, 0xa, 0x203) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fab000/0x18000)=nil, &(0x7f0000001440)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) 0s ago: executing program 2 (id=161): mkdir(&(0x7f0000000040)='sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)='\x00\x00', 0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) kernel console output (not intermixed with test programs): TASK> [ 170.729416][ C0] dump_stack_lvl+0xe8/0x150 [ 170.729459][ C0] should_fail_ex+0x467/0x600 [ 170.729503][ C0] should_failslab+0xa8/0x100 [ 170.729535][ C0] __kmalloc_noprof+0xfe/0x780 [ 170.729561][ C0] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 170.729596][ C0] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 170.729639][ C0] cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 170.729686][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 170.729744][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 170.729791][ C0] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 170.729832][ C0] cfg80211_inform_bss_data+0x25b/0x3d50 [ 170.729899][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 170.729933][ C0] ? ieee80211_rx_handlers+0x106/0xc8d0 [ 170.729967][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 170.730005][ C0] ? unwind_next_frame+0x8f/0x2550 [ 170.730056][ C0] ? try_to_take_rt_mutex+0x842/0xb00 [ 170.730084][ C0] ? __lock_acquire+0x683/0x2ce0 [ 170.730155][ C0] ? __lock_acquire+0x683/0x2ce0 [ 170.730239][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 170.730342][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 170.730456][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 170.730541][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 170.730638][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 170.730757][ C0] ? rt_spin_unlock+0x157/0x200 [ 170.730848][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 170.730933][ C0] ieee80211_scan_rx+0x552/0xa40 [ 170.731023][ C0] ieee80211_rx_list+0x2d23/0x3b40 [ 170.731172][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 170.731249][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 170.731389][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 170.731467][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 170.731565][ C0] ? reacquire_held_locks+0x104/0x190 [ 170.731686][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 170.731768][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 170.731859][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 170.731944][ C0] ? rt_spin_unlock+0x163/0x200 [ 170.732040][ C0] ? skb_dequeue+0x11a/0x150 [ 170.732137][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 170.732225][ C0] tasklet_action_common+0x31c/0x600 [ 170.732343][ C0] handle_softirqs+0x1d9/0x6c0 [ 170.732493][ C0] run_ktimerd+0x69/0x100 [ 170.732579][ C0] smpboot_thread_fn+0x57c/0xa80 [ 170.732673][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 170.732778][ C0] kthread+0x388/0x470 [ 170.732869][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 170.732944][ C0] ? __pfx_kthread+0x10/0x10 [ 170.733066][ C0] ret_from_fork+0x514/0xb70 [ 170.733169][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 170.733262][ C0] ? __switch_to+0xc89/0x1420 [ 170.733358][ C0] ? __pfx_kthread+0x10/0x10 [ 170.733454][ C0] ret_from_fork_asm+0x1a/0x30 [ 170.733565][ C0] [ 170.827540][ C1] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 170.834656][ T4965] FAULT_INJECTION: forcing a failure. [ 170.834656][ T4965] name failslab, interval 1, probability 1, space 0, times 74 [ 170.834756][ T4965] CPU: 0 UID: 0 PID: 4965 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.834815][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.834857][ T4965] Call Trace: [ 170.834878][ T4965] [ 170.834901][ T4965] dump_stack_lvl+0xe8/0x150 [ 170.835008][ T4965] should_fail_ex+0x467/0x600 [ 170.835116][ T4965] should_failslab+0xa8/0x100 [ 170.835207][ T4965] __kmalloc_cache_noprof+0xa0/0x6b0 [ 170.835288][ T4965] ? sysfs_file_kobj+0x1a/0x230 [ 170.835380][ T4965] ? uevent_show+0x15c/0x310 [ 170.835432][ T4965] ? uevent_show+0x15c/0x310 [ 170.835508][ T4965] uevent_show+0x15c/0x310 [ 170.835575][ T4965] dev_attr_show+0x58/0xc0 [ 170.835628][ T4965] ? __pfx_dev_attr_show+0x10/0x10 [ 170.835691][ T4965] sysfs_kf_seq_show+0x331/0x490 [ 170.835769][ T4965] seq_read_iter+0x464/0xcb0 [ 170.835893][ T4965] vfs_read+0x59e/0xa90 [ 170.835990][ T4965] ? __pfx_vfs_read+0x10/0x10 [ 170.836069][ T4965] ? do_sys_openat2+0x14e/0x200 [ 170.836177][ T4965] ksys_read+0x156/0x270 [ 170.836261][ T4965] ? __pfx_ksys_read+0x10/0x10 [ 170.836328][ T4965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.836353][ T4965] do_syscall_64+0x174/0x580 [ 170.836436][ T4965] ? clear_bhb_loop+0x40/0x90 [ 170.836536][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.836602][ T4965] RIP: 0033:0x7f7807216407 [ 170.836664][ T4965] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 170.836710][ T4965] RSP: 002b:00007ffda8ec85a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 170.836773][ T4965] RAX: ffffffffffffffda RBX: 00007f7807128880 RCX: 00007f7807216407 [ 170.836811][ T4965] RDX: 0000000000001000 RSI: 000056040e025100 RDI: 000000000000000c [ 170.836847][ T4965] RBP: 00007f780735eff0 R08: 0000000000000000 R09: 0000000000000000 [ 170.836887][ T4965] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 170.836921][ T4965] R13: 00007f780735eea0 R14: 0000000000000000 R15: 000056040e00f7a0 [ 170.837011][ T4965] [ 170.872860][ T4954] FAULT_INJECTION: forcing a failure. [ 170.872860][ T4954] name failslab, interval 1, probability 1, space 0, times 73 [ 170.872968][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.873012][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.873025][ T4954] Call Trace: [ 170.873033][ T4954] [ 170.873042][ T4954] dump_stack_lvl+0xe8/0x150 [ 170.873176][ T4954] should_fail_ex+0x467/0x600 [ 170.873293][ T4954] should_failslab+0xa8/0x100 [ 170.873377][ T4954] kmem_cache_alloc_node_noprof+0xae/0x670 [ 170.873443][ T4954] ? __alloc_skb+0x1d7/0x7a0 [ 170.873500][ T4954] ? __alloc_skb+0x1d7/0x7a0 [ 170.873578][ T4954] __alloc_skb+0x1d7/0x7a0 [ 170.873654][ T4954] alloc_skb_with_frags+0xc6/0x760 [ 170.873726][ T4954] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 170.873793][ T4954] ? lockdep_hardirqs_on+0x7a/0x110 [ 170.873873][ T4954] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 170.873947][ T4954] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 170.874046][ T4954] sock_alloc_send_pskb+0x884/0x9a0 [ 170.874167][ T4954] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 170.874263][ T4954] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 170.874370][ T4954] unix_dgram_sendmsg+0x4da/0x17b0 [ 170.874469][ T4954] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 170.874539][ T4954] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 170.874704][ T4954] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 170.874783][ T4954] sock_sendmsg_nosec+0x13a/0x180 [ 170.874880][ T4954] __sys_sendto+0x41e/0x5d0 [ 170.874942][ T4954] ? smack_privileged_cred+0x33c/0x380 [ 170.875049][ T4954] ? __pfx___sys_sendto+0x10/0x10 [ 170.875186][ T4954] ? rcu_is_watching+0x15/0xb0 [ 170.875272][ T4954] __x64_sys_sendto+0xde/0x100 [ 170.875348][ T4954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.875414][ T4954] do_syscall_64+0x174/0x580 [ 170.875489][ T4954] ? clear_bhb_loop+0x40/0x90 [ 170.875563][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.875620][ T4954] RIP: 0033:0x7f0cc0b26407 [ 170.875675][ T4954] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 170.875728][ T4954] RSP: 002b:00007ffde9b35bd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 170.875784][ T4954] RAX: ffffffffffffffda RBX: 00007f0cc09d6c80 RCX: 00007f0cc0b26407 [ 170.875815][ T4954] RDX: 0000000000000051 RSI: 00007ffde9b35d10 RDI: 0000000000000003 [ 170.875855][ T4954] RBP: 00007ffde9b36140 R08: 0000000000000000 R09: 0000000000000000 [ 170.875898][ T4954] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde9b36158 [ 170.875932][ T4954] R13: 00007ffde9b35d10 R14: 0000000000000036 R15: 00007ffde9b35d10 [ 170.876053][ T4954] [ 170.921499][ T4954] FAULT_INJECTION: forcing a failure. [ 170.921499][ T4954] name failslab, interval 1, probability 1, space 0, times 72 [ 170.921599][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.921666][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.921708][ T4954] Call Trace: [ 170.921734][ T4954] [ 170.921756][ T4954] dump_stack_lvl+0xe8/0x150 [ 170.921846][ T4954] should_fail_ex+0x467/0x600 [ 170.921966][ T4954] should_failslab+0xa8/0x100 [ 170.922043][ T4954] kmem_cache_alloc_node_noprof+0xae/0x670 [ 170.922111][ T4954] ? __alloc_skb+0x1d7/0x7a0 [ 170.922171][ T4954] ? __alloc_skb+0x1d7/0x7a0 [ 170.922258][ T4954] __alloc_skb+0x1d7/0x7a0 [ 170.922348][ T4954] alloc_skb_with_frags+0xc6/0x760 [ 170.922417][ T4954] ? __lock_acquire+0x683/0x2ce0 [ 170.922476][ T4954] sock_alloc_send_pskb+0x884/0x9a0 [ 170.922591][ T4954] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 170.922712][ T4954] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 170.922813][ T4954] unix_dgram_sendmsg+0x4da/0x17b0 [ 170.922935][ T4954] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 170.923035][ T4954] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 170.923170][ T4954] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 170.923277][ T4954] sock_sendmsg_nosec+0x13a/0x180 [ 170.923384][ T4954] __sys_sendto+0x41e/0x5d0 [ 170.923449][ T4954] ? smack_privileged_cred+0x33c/0x380 [ 170.923557][ T4954] ? __pfx___sys_sendto+0x10/0x10 [ 170.923657][ T4954] ? __pfx___sys_connect+0x10/0x10 [ 170.923750][ T4954] ? rcu_is_watching+0x15/0xb0 [ 170.923851][ T4954] __x64_sys_sendto+0xde/0x100 [ 170.923921][ T4954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.923968][ T4954] do_syscall_64+0x174/0x580 [ 170.924066][ T4954] ? clear_bhb_loop+0x40/0x90 [ 170.924156][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.924216][ T4954] RIP: 0033:0x7f0cc0b26407 [ 170.924289][ T4954] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 170.924339][ T4954] RSP: 002b:00007ffde9b35bd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 170.924405][ T4954] RAX: ffffffffffffffda RBX: 00007f0cc09d6c80 RCX: 00007f0cc0b26407 [ 170.924451][ T4954] RDX: 00000000000000f9 RSI: 00007ffde9b35d10 RDI: 0000000000000003 [ 170.924488][ T4954] RBP: 00007ffde9b36140 R08: 0000000000000000 R09: 0000000000000000 [ 170.924529][ T4954] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde9b36158 [ 170.924566][ T4954] R13: 00007ffde9b35d10 R14: 00000000000000de R15: 00007ffde9b35d10 [ 170.924654][ T4954] [ 170.939215][ T5977] FAULT_INJECTION: forcing a failure. [ 170.939215][ T5977] name failslab, interval 1, probability 1, space 0, times 71 [ 170.939355][ T5977] CPU: 0 UID: 0 PID: 5977 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.939444][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.939479][ T5977] Call Trace: [ 170.939502][ T5977] [ 170.939525][ T5977] dump_stack_lvl+0xe8/0x150 [ 170.939634][ T5977] should_fail_ex+0x467/0x600 [ 170.939745][ T5977] should_failslab+0xa8/0x100 [ 170.939817][ T5977] __kmalloc_noprof+0xfe/0x780 [ 170.939884][ T5977] ? tomoyo_encode+0x2ad/0x570 [ 170.939960][ T5977] ? tomoyo_encode+0x2ad/0x570 [ 170.940061][ T5977] tomoyo_encode+0x2ad/0x570 [ 170.940151][ T5977] tomoyo_realpath_from_path+0x5fa/0x640 [ 170.940280][ T5977] tomoyo_check_open_permission+0x229/0x470 [ 170.940365][ T5977] ? tomoyo_check_open_permission+0x1d3/0x470 [ 170.940432][ T5977] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 170.940503][ T5977] ? __asan_memset+0x22/0x50 [ 170.940612][ T5977] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 170.940768][ T5977] ? rt_spin_unlock+0x157/0x200 [ 170.940890][ T5977] security_file_open+0xa9/0x240 [ 170.940960][ T5977] do_dentry_open+0x4be/0x1420 [ 170.941055][ T5977] vfs_open+0x3b/0x350 [ 170.941104][ T5977] ? path_openat+0x2e49/0x3850 [ 170.941190][ T5977] path_openat+0x2e60/0x3850 [ 170.941297][ T5977] ? kmem_cache_alloc_noprof+0x355/0x650 [ 170.941354][ T5977] ? __x64_sys_openat+0x138/0x170 [ 170.941410][ T5977] ? do_syscall_64+0x174/0x580 [ 170.941478][ T5977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.941598][ T5977] do_file_open+0x23e/0x4a0 [ 170.941668][ T5977] ? lockdep_hardirqs_on+0x7a/0x110 [ 170.941759][ T5977] ? __pfx_do_file_open+0x10/0x10 [ 170.941904][ T5977] ? alloc_fd+0x654/0x6d0 [ 170.942024][ T5977] do_sys_openat2+0x115/0x200 [ 170.942050][ T5977] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.942103][ T5977] __x64_sys_openat+0x138/0x170 [ 170.942204][ T5977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.942327][ T5977] do_syscall_64+0x174/0x580 [ 170.942404][ T5977] ? clear_bhb_loop+0x40/0x90 [ 170.942481][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.942547][ T5977] RIP: 0033:0x7f7807216407 [ 170.942604][ T5977] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 170.942651][ T5977] RSP: 002b:00007ffda8ec3e90 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 170.942717][ T5977] RAX: ffffffffffffffda RBX: 00007f7807128880 RCX: 00007f7807216407 [ 170.942761][ T5977] RDX: 0000000000080000 RSI: 00007ffda8ec4010 RDI: ffffffffffffff9c [ 170.942810][ T5977] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 170.942845][ T5977] R10: 0000000000000000 R11: 0000000000000202 R12: 0000560403bf97f5 [ 170.942879][ T5977] R13: 0000560403bf97f5 R14: 0000000000000001 R15: 0000560403c14140 [ 170.942969][ T5977] [ 170.973957][ T4965] FAULT_INJECTION: forcing a failure. [ 170.973957][ T4965] name failslab, interval 1, probability 1, space 0, times 71 [ 170.974095][ T4965] CPU: 0 UID: 0 PID: 4965 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 170.974121][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.974135][ T4965] Call Trace: [ 170.974152][ T4965] [ 170.974186][ T4965] dump_stack_lvl+0xe8/0x150 [ 170.974355][ T4965] should_fail_ex+0x467/0x600 [ 170.974469][ T4965] should_failslab+0xa8/0x100 [ 170.974548][ T4965] kmem_cache_alloc_noprof+0xa4/0x650 [ 170.974608][ T4965] ? alloc_empty_file+0x5b/0x1d0 [ 170.974665][ T4965] ? alloc_empty_file+0x5b/0x1d0 [ 170.974744][ T4965] alloc_empty_file+0x5b/0x1d0 [ 170.974816][ T4965] path_openat+0x8f/0x3850 [ 170.974912][ T4965] ? kasan_save_track+0x3e/0x80 [ 170.974967][ T4965] ? __kasan_slab_alloc+0x6c/0x80 [ 170.975033][ T4965] ? kmem_cache_alloc_noprof+0x355/0x650 [ 170.975089][ T4965] ? do_getname+0x2e/0x250 [ 170.975170][ T4965] ? do_sys_openat2+0xcc/0x200 [ 170.975226][ T4965] ? __x64_sys_openat+0x138/0x170 [ 170.975284][ T4965] ? do_syscall_64+0x174/0x580 [ 170.975352][ T4965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.975465][ T4965] do_file_open+0x23e/0x4a0 [ 170.975542][ T4965] ? lockdep_hardirqs_on+0x7a/0x110 [ 170.975580][ T4965] ? __pfx_do_file_open+0x10/0x10 [ 170.975732][ T4965] ? alloc_fd+0x654/0x6d0 [ 170.975908][ T4965] do_sys_openat2+0x115/0x200 [ 170.976018][ T4965] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.976082][ T4965] ? fput_close_sync+0x11f/0x240 [ 170.976156][ T4965] ? __pfx_fput_close_sync+0x10/0x10 [ 170.976250][ T4965] __x64_sys_openat+0x138/0x170 [ 170.976325][ T4965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.976381][ T4965] do_syscall_64+0x174/0x580 [ 170.976464][ T4965] ? clear_bhb_loop+0x40/0x90 [ 170.976558][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.976607][ T4965] RIP: 0033:0x7f7807216407 [ 170.976663][ T4965] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 170.976714][ T4965] RSP: 002b:00007ffda8eccac0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 170.976777][ T4965] RAX: ffffffffffffffda RBX: 00007f7807128880 RCX: 00007f7807216407 [ 170.976822][ T4965] RDX: 00000000000a0800 RSI: 000056040e004e40 RDI: ffffffffffffff9c [ 170.976871][ T4965] RBP: 00000000000000db R08: 0000000000000000 R09: 0000000000000000 [ 170.976912][ T4965] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 170.976945][ T4965] R13: 0000560403c14100 R14: 0000000000000000 R15: 00007ffda8eccd50 [ 170.977041][ T4965] [ 170.993502][ T5977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 171.035926][ C0] FAULT_INJECTION: forcing a failure. [ 171.035926][ C0] name failslab, interval 1, probability 1, space 0, times 68 [ 171.035968][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.035995][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.036009][ C0] Call Trace: [ 171.036017][ C0] [ 171.036026][ C0] dump_stack_lvl+0xe8/0x150 [ 171.036062][ C0] should_fail_ex+0x467/0x600 [ 171.036098][ C0] should_failslab+0xa8/0x100 [ 171.036145][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 171.036168][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 171.036188][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 171.036214][ C0] __alloc_skb+0x1d7/0x7a0 [ 171.036238][ C0] skb_copy+0x19d/0x870 [ 171.036263][ C0] ? seqcount_lockdep_reader_access+0xea/0x100 [ 171.036291][ C0] mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 171.036348][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 171.036377][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 171.036414][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 171.036439][ C0] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 171.036472][ C0] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 171.036507][ C0] mac80211_hwsim_beacon_tx+0x396/0x820 [ 171.036534][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 171.036559][ C0] __iterate_interfaces+0x2af/0x5a0 [ 171.036579][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 171.036605][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 171.036628][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 171.036653][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 171.036677][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 171.036698][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 171.036721][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 171.036767][ C0] hrtimer_run_softirq+0x18f/0x260 [ 171.036800][ C0] handle_softirqs+0x1d9/0x6c0 [ 171.036836][ C0] run_ktimerd+0x69/0x100 [ 171.036863][ C0] smpboot_thread_fn+0x57c/0xa80 [ 171.036892][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 171.036925][ C0] kthread+0x388/0x470 [ 171.036955][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 171.036979][ C0] ? __pfx_kthread+0x10/0x10 [ 171.037009][ C0] ret_from_fork+0x514/0xb70 [ 171.037043][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 171.037072][ C0] ? __switch_to+0xc89/0x1420 [ 171.037102][ C0] ? __pfx_kthread+0x10/0x10 [ 171.037132][ C0] ret_from_fork_asm+0x1a/0x30 [ 171.037176][ C0] [ 171.041371][ T4954] FAULT_INJECTION: forcing a failure. [ 171.041371][ T4954] name failslab, interval 1, probability 1, space 0, times 67 [ 171.041470][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.041527][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.041569][ T4954] Call Trace: [ 171.041591][ T4954] [ 171.041613][ T4954] dump_stack_lvl+0xe8/0x150 [ 171.041733][ T4954] should_fail_ex+0x467/0x600 [ 171.041812][ T4954] should_failslab+0xa8/0x100 [ 171.041842][ T4954] kmem_cache_alloc_node_noprof+0xae/0x670 [ 171.041935][ T4954] ? __alloc_skb+0x1d7/0x7a0 [ 171.042020][ T4954] ? __alloc_skb+0x1d7/0x7a0 [ 171.042113][ T4954] __alloc_skb+0x1d7/0x7a0 [ 171.042187][ T4954] alloc_skb_with_frags+0xc6/0x760 [ 171.042264][ T4954] ? __lock_acquire+0x683/0x2ce0 [ 171.042363][ T4954] sock_alloc_send_pskb+0x884/0x9a0 [ 171.042491][ T4954] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 171.042588][ T4954] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 171.042678][ T4954] unix_dgram_sendmsg+0x4da/0x17b0 [ 171.042784][ T4954] ? ktime_get+0x45/0x220 [ 171.042831][ T4954] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 171.042898][ T4954] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 171.042974][ T4954] ? lapic_next_event+0x11/0x20 [ 171.043050][ T4954] ? __pfx_clockevents_program_event+0x10/0x10 [ 171.043135][ T4954] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 171.043273][ T4954] ? finish_task_switch+0x412/0xc60 [ 171.043337][ T4954] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 171.043430][ T4954] sock_sendmsg_nosec+0x13a/0x180 [ 171.043543][ T4954] __sys_sendto+0x41e/0x5d0 [ 171.043626][ T4954] ? __pfx___sys_sendto+0x10/0x10 [ 171.043724][ T4954] ? kvm_sched_clock_read+0x11/0x20 [ 171.043816][ T4954] ? rcu_is_watching+0x15/0xb0 [ 171.043905][ T4954] __x64_sys_sendto+0xde/0x100 [ 171.043973][ T4954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.044039][ T4954] do_syscall_64+0x174/0x580 [ 171.044115][ T4954] ? clear_bhb_loop+0x40/0x90 [ 171.044185][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.044249][ T4954] RIP: 0033:0x7f0cc0b26407 [ 171.044304][ T4954] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 171.044368][ T4954] RSP: 002b:00007ffde9b35bd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 171.044433][ T4954] RAX: ffffffffffffffda RBX: 00007f0cc09d6c80 RCX: 00007f0cc0b26407 [ 171.044475][ T4954] RDX: 000000000000003d RSI: 00007ffde9b35d10 RDI: 0000000000000003 [ 171.044510][ T4954] RBP: 00007ffde9b36140 R08: 0000000000000000 R09: 0000000000000000 [ 171.044552][ T4954] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde9b36158 [ 171.044587][ T4954] R13: 00007ffde9b35d10 R14: 0000000000000022 R15: 00007ffde9b35d10 [ 171.044680][ T4954] [ 171.086457][ T4965] FAULT_INJECTION: forcing a failure. [ 171.086457][ T4965] name failslab, interval 1, probability 1, space 0, times 66 [ 171.086559][ T4965] CPU: 0 UID: 0 PID: 4965 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.086633][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.086666][ T4965] Call Trace: [ 171.086689][ T4965] [ 171.086710][ T4965] dump_stack_lvl+0xe8/0x150 [ 171.086812][ T4965] should_fail_ex+0x467/0x600 [ 171.086915][ T4965] should_failslab+0xa8/0x100 [ 171.086992][ T4965] kmem_cache_alloc_noprof+0xa4/0x650 [ 171.087058][ T4965] ? security_file_alloc+0x34/0x310 [ 171.087117][ T4965] ? security_file_alloc+0x34/0x310 [ 171.087178][ T4965] security_file_alloc+0x34/0x310 [ 171.087205][ T4965] init_file+0x96/0x2d0 [ 171.087229][ T4965] alloc_empty_file+0x74/0x1d0 [ 171.087252][ T4965] path_openat+0x8f/0x3850 [ 171.087317][ T4965] ? kasan_save_track+0x3e/0x80 [ 171.087383][ T4965] ? __kasan_slab_alloc+0x6c/0x80 [ 171.087461][ T4965] ? kmem_cache_alloc_noprof+0x355/0x650 [ 171.087530][ T4965] ? do_getname+0x2e/0x250 [ 171.087616][ T4965] ? do_sys_openat2+0xcc/0x200 [ 171.087670][ T4965] ? __x64_sys_openat+0x138/0x170 [ 171.087725][ T4965] ? do_syscall_64+0x174/0x580 [ 171.087798][ T4965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.087843][ T4965] do_file_open+0x23e/0x4a0 [ 171.087866][ T4965] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.087939][ T4965] ? __pfx_do_file_open+0x10/0x10 [ 171.088071][ T4965] ? alloc_fd+0x654/0x6d0 [ 171.088156][ T4965] do_sys_openat2+0x115/0x200 [ 171.088222][ T4965] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.088299][ T4965] ? rcu_is_watching+0x15/0xb0 [ 171.088405][ T4965] __x64_sys_openat+0x138/0x170 [ 171.088473][ T4965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.088530][ T4965] do_syscall_64+0x174/0x580 [ 171.088606][ T4965] ? clear_bhb_loop+0x40/0x90 [ 171.088681][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.088718][ T4965] RIP: 0033:0x7f7807284c3a [ 171.088767][ T4965] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 171.088832][ T4965] RSP: 002b:00007ffda8eccac8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 171.088917][ T4965] RAX: ffffffffffffffda RBX: 000056040e081a50 RCX: 00007f7807284c3a [ 171.088962][ T4965] RDX: 0000000000090800 RSI: 000056040e003cc0 RDI: 00000000ffffff9c [ 171.088997][ T4965] RBP: 000056040e003cc0 R08: 0000000000000000 R09: 0000000000000001 [ 171.089038][ T4965] R10: 0000000000000000 R11: 0000000000000206 R12: 000056040e00d7b0 [ 171.089072][ T4965] R13: 00000000000000ff R14: 0000560403bfdbe0 R15: 00007ffda8eccd50 [ 171.089159][ T4965] [ 171.139028][ C1] FAULT_INJECTION: forcing a failure. [ 171.139028][ C1] name failslab, interval 1, probability 1, space 0, times 65 [ 171.139069][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.139096][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.139110][ C1] Call Trace: [ 171.139118][ C1] [ 171.139128][ C1] dump_stack_lvl+0xe8/0x150 [ 171.139173][ C1] should_fail_ex+0x467/0x600 [ 171.139217][ C1] should_failslab+0xa8/0x100 [ 171.139250][ C1] __kmalloc_noprof+0xfe/0x780 [ 171.139276][ C1] ? kthread+0x388/0x470 [ 171.139311][ C1] ? ret_from_fork+0x514/0xb70 [ 171.139345][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 171.139367][ C1] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 171.139404][ C1] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 171.139450][ C1] ieee802_11_parse_elems_full+0x14b/0x2db0 [ 171.139497][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 171.139531][ C1] ? kvfree_call_rcu+0xd4/0x3c0 [ 171.139560][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 171.139616][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 171.139652][ C1] ? cfg80211_update_known_bss+0xa51/0x1430 [ 171.139696][ C1] ieee80211_inform_bss+0x163/0x10d0 [ 171.139731][ C1] ? __cfg80211_bss_update+0x125c/0x2010 [ 171.139768][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 171.139794][ C1] ? rt_spin_lock+0x20e/0x400 [ 171.139852][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 171.139884][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 171.139916][ C1] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 171.139949][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 171.139993][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 171.140053][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 171.140098][ C1] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 171.140139][ C1] cfg80211_inform_bss_data+0x25b/0x3d50 [ 171.140209][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 171.140243][ C1] ? ieee80211_rx_handlers+0x106/0xc8d0 [ 171.140278][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 171.140318][ C1] ? unwind_next_frame+0x8f/0x2550 [ 171.140369][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 171.140398][ C1] ? __lock_acquire+0x683/0x2ce0 [ 171.140446][ C1] ? __lock_acquire+0x683/0x2ce0 [ 171.140479][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 171.140514][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 171.140556][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 171.140593][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 171.140632][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 171.140682][ C1] ? rt_spin_unlock+0x157/0x200 [ 171.140718][ C1] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 171.140755][ C1] ieee80211_scan_rx+0x552/0xa40 [ 171.140795][ C1] ieee80211_rx_list+0x2d23/0x3b40 [ 171.140864][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 171.140894][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 171.140950][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 171.140983][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 171.141021][ C1] ? reacquire_held_locks+0x104/0x190 [ 171.141060][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 171.141090][ C1] ieee80211_rx_napi+0x1ad/0x3d0 [ 171.141126][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 171.141158][ C1] ? rt_spin_unlock+0x163/0x200 [ 171.141200][ C1] ? skb_dequeue+0x11a/0x150 [ 171.141239][ C1] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 171.141273][ C1] tasklet_action_common+0x31c/0x600 [ 171.141316][ C1] handle_softirqs+0x1d9/0x6c0 [ 171.141359][ C1] run_ktimerd+0x69/0x100 [ 171.141392][ C1] smpboot_thread_fn+0x57c/0xa80 [ 171.141431][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 171.141474][ C1] kthread+0x388/0x470 [ 171.141511][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 171.141542][ C1] ? __pfx_kthread+0x10/0x10 [ 171.141580][ C1] ret_from_fork+0x514/0xb70 [ 171.141623][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 171.141661][ C1] ? __switch_to+0xc89/0x1420 [ 171.141698][ C1] ? __pfx_kthread+0x10/0x10 [ 171.141736][ C1] ret_from_fork_asm+0x1a/0x30 [ 171.141782][ C1] [ 171.299081][ T13] FAULT_INJECTION: forcing a failure. [ 171.299081][ T13] name failslab, interval 1, probability 1, space 0, times 58 [ 171.299197][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.299263][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.299315][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 171.299420][ T13] Call Trace: [ 171.299442][ T13] [ 171.299464][ T13] dump_stack_lvl+0xe8/0x150 [ 171.299563][ T13] should_fail_ex+0x467/0x600 [ 171.299681][ T13] should_failslab+0xa8/0x100 [ 171.299786][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 171.299848][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 171.299905][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 171.299994][ T13] __alloc_skb+0x1d7/0x7a0 [ 171.300071][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 171.300191][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 171.300265][ T13] process_scheduled_works+0xa8e/0x14e0 [ 171.300434][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.300522][ T13] ? assign_work+0x3cf/0x5d0 [ 171.300610][ T13] worker_thread+0xa47/0xfb0 [ 171.300765][ T13] kthread+0x388/0x470 [ 171.300846][ T13] ? __pfx_worker_thread+0x10/0x10 [ 171.300917][ T13] ? __pfx_kthread+0x10/0x10 [ 171.301004][ T13] ret_from_fork+0x514/0xb70 [ 171.301135][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 171.301228][ T13] ? __switch_to+0xc89/0x1420 [ 171.301321][ T13] ? __pfx_kthread+0x10/0x10 [ 171.301410][ T13] ret_from_fork_asm+0x1a/0x30 [ 171.301518][ T13] [ 171.343188][ C1] FAULT_INJECTION: forcing a failure. [ 171.343188][ C1] name failslab, interval 1, probability 1, space 0, times 57 [ 171.343220][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.343239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.343250][ C1] Call Trace: [ 171.343257][ C1] [ 171.343264][ C1] dump_stack_lvl+0xe8/0x150 [ 171.343300][ C1] should_fail_ex+0x467/0x600 [ 171.343335][ C1] should_failslab+0xa8/0x100 [ 171.343359][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 171.343380][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 171.343399][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 171.343424][ C1] __alloc_skb+0x1d7/0x7a0 [ 171.343447][ C1] skb_copy+0x19d/0x870 [ 171.343470][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 171.343496][ C1] mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 171.343539][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 171.343567][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 171.343600][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 171.343624][ C1] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 171.343655][ C1] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 171.343686][ C1] mac80211_hwsim_beacon_tx+0x396/0x820 [ 171.343712][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 171.343736][ C1] __iterate_interfaces+0x2af/0x5a0 [ 171.343754][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 171.343779][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 171.343810][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 171.343834][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 171.343857][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 171.343876][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 171.343898][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 171.343942][ C1] hrtimer_run_softirq+0x18f/0x260 [ 171.343974][ C1] handle_softirqs+0x1d9/0x6c0 [ 171.344007][ C1] run_ktimerd+0x69/0x100 [ 171.344034][ C1] smpboot_thread_fn+0x57c/0xa80 [ 171.344065][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 171.344097][ C1] kthread+0x388/0x470 [ 171.344126][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 171.344149][ C1] ? __pfx_kthread+0x10/0x10 [ 171.344178][ C1] ret_from_fork+0x514/0xb70 [ 171.344211][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 171.344245][ C1] ? __switch_to+0xc89/0x1420 [ 171.344272][ C1] ? __pfx_kthread+0x10/0x10 [ 171.344302][ C1] ret_from_fork_asm+0x1a/0x30 [ 171.344336][ C1] [ 171.346378][ C1] FAULT_INJECTION: forcing a failure. [ 171.346378][ C1] name failslab, interval 1, probability 1, space 0, times 56 [ 171.346413][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.346439][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.346453][ C1] Call Trace: [ 171.346462][ C1] [ 171.346471][ C1] dump_stack_lvl+0xe8/0x150 [ 171.346514][ C1] should_fail_ex+0x467/0x600 [ 171.346558][ C1] should_failslab+0xa8/0x100 [ 171.346591][ C1] __kmalloc_noprof+0xfe/0x780 [ 171.346615][ C1] ? kthread+0x388/0x470 [ 171.346650][ C1] ? ret_from_fork+0x514/0xb70 [ 171.346684][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 171.346707][ C1] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 171.346742][ C1] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 171.346787][ C1] ieee802_11_parse_elems_full+0x14b/0x2db0 [ 171.346845][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 171.346880][ C1] ? kvfree_call_rcu+0xd4/0x3c0 [ 171.346910][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 171.346965][ C1] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 171.346999][ C1] ? cfg80211_update_known_bss+0xa51/0x1430 [ 171.347044][ C1] ieee80211_inform_bss+0x163/0x10d0 [ 171.347079][ C1] ? __cfg80211_bss_update+0x125c/0x2010 [ 171.347115][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 171.347142][ C1] ? rt_spin_lock+0x20e/0x400 [ 171.347192][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 171.347225][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 171.347256][ C1] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 171.347291][ C1] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 171.347336][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 171.347396][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 171.347440][ C1] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 171.347479][ C1] cfg80211_inform_bss_data+0x25b/0x3d50 [ 171.347546][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 171.347579][ C1] ? ieee80211_rx_handlers+0x106/0xc8d0 [ 171.347613][ C1] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 171.347652][ C1] ? unwind_next_frame+0x8f/0x2550 [ 171.347700][ C1] ? try_to_take_rt_mutex+0x842/0xb00 [ 171.347729][ C1] ? __lock_acquire+0x683/0x2ce0 [ 171.347783][ C1] ? __lock_acquire+0x683/0x2ce0 [ 171.347824][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 171.347857][ C1] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 171.347896][ C1] ? ieee80211_bss_info_update+0x30f/0xa50 [ 171.347931][ C1] ieee80211_bss_info_update+0x791/0xa50 [ 171.347970][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 171.348017][ C1] ? rt_spin_unlock+0x157/0x200 [ 171.348053][ C1] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 171.348088][ C1] ieee80211_scan_rx+0x552/0xa40 [ 171.348127][ C1] ieee80211_rx_list+0x2d23/0x3b40 [ 171.348188][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 171.348218][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 171.348274][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 171.348307][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 171.348344][ C1] ? reacquire_held_locks+0x104/0x190 [ 171.348383][ C1] ? ieee80211_rx_napi+0xd1/0x3d0 [ 171.348413][ C1] ieee80211_rx_napi+0x1ad/0x3d0 [ 171.348449][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 171.348482][ C1] ? rt_spin_unlock+0x163/0x200 [ 171.348523][ C1] ? skb_dequeue+0x11a/0x150 [ 171.348563][ C1] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 171.348599][ C1] tasklet_action_common+0x31c/0x600 [ 171.348643][ C1] handle_softirqs+0x1d9/0x6c0 [ 171.348685][ C1] run_ktimerd+0x69/0x100 [ 171.348718][ C1] smpboot_thread_fn+0x57c/0xa80 [ 171.348756][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 171.348808][ C1] kthread+0x388/0x470 [ 171.348846][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 171.348877][ C1] ? __pfx_kthread+0x10/0x10 [ 171.348915][ C1] ret_from_fork+0x514/0xb70 [ 171.348956][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 171.348994][ C1] ? __switch_to+0xc89/0x1420 [ 171.349031][ C1] ? __pfx_kthread+0x10/0x10 [ 171.349070][ C1] ret_from_fork_asm+0x1a/0x30 [ 171.349114][ C1] [ 171.383941][ T4954] FAULT_INJECTION: forcing a failure. [ 171.383941][ T4954] name failslab, interval 1, probability 1, space 0, times 55 [ 171.384040][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.384105][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.384145][ T4954] Call Trace: [ 171.384166][ T4954] [ 171.384189][ T4954] dump_stack_lvl+0xe8/0x150 [ 171.384318][ T4954] should_fail_ex+0x467/0x600 [ 171.384444][ T4954] should_failslab+0xa8/0x100 [ 171.384483][ T4954] kmem_cache_alloc_node_noprof+0xae/0x670 [ 171.384556][ T4954] ? __alloc_skb+0x1d7/0x7a0 [ 171.384612][ T4954] ? __alloc_skb+0x1d7/0x7a0 [ 171.384693][ T4954] __alloc_skb+0x1d7/0x7a0 [ 171.384775][ T4954] alloc_skb_with_frags+0xc6/0x760 [ 171.384833][ T4954] ? __lock_acquire+0x683/0x2ce0 [ 171.384926][ T4954] sock_alloc_send_pskb+0x884/0x9a0 [ 171.385056][ T4954] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 171.385158][ T4954] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 171.385264][ T4954] unix_dgram_sendmsg+0x4da/0x17b0 [ 171.385381][ T4954] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 171.385505][ T4954] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 171.385633][ T4954] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 171.385746][ T4954] sock_sendmsg_nosec+0x13a/0x180 [ 171.385861][ T4954] __sys_sendto+0x41e/0x5d0 [ 171.385917][ T4954] ? smack_privileged_cred+0x33c/0x380 [ 171.386023][ T4954] ? __pfx___sys_sendto+0x10/0x10 [ 171.386122][ T4954] ? __pfx___sys_connect+0x10/0x10 [ 171.386216][ T4954] ? rcu_is_watching+0x15/0xb0 [ 171.386311][ T4954] __x64_sys_sendto+0xde/0x100 [ 171.386381][ T4954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.386448][ T4954] do_syscall_64+0x174/0x580 [ 171.386524][ T4954] ? clear_bhb_loop+0x40/0x90 [ 171.386597][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.386649][ T4954] RIP: 0033:0x7f0cc0b26407 [ 171.386701][ T4954] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 171.386753][ T4954] RSP: 002b:00007ffde9b35bd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 171.386810][ T4954] RAX: ffffffffffffffda RBX: 00007f0cc09d6c80 RCX: 00007f0cc0b26407 [ 171.386853][ T4954] RDX: 000000000000004d RSI: 00007ffde9b35d10 RDI: 0000000000000003 [ 171.386886][ T4954] RBP: 00007ffde9b36140 R08: 0000000000000000 R09: 0000000000000000 [ 171.386926][ T4954] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde9b36158 [ 171.386960][ T4954] R13: 00007ffde9b35d10 R14: 0000000000000032 R15: 00007ffde9b35d10 [ 171.387052][ T4954] [ 171.427141][ T6038] FAULT_INJECTION: forcing a failure. [ 171.427141][ T6038] name failslab, interval 1, probability 1, space 0, times 54 [ 171.427517][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.427545][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.427559][ T6038] Call Trace: [ 171.427567][ T6038] [ 171.427577][ T6038] dump_stack_lvl+0xe8/0x150 [ 171.427619][ T6038] should_fail_ex+0x467/0x600 [ 171.427660][ T6038] should_failslab+0xa8/0x100 [ 171.427690][ T6038] kmem_cache_alloc_noprof+0xa4/0x650 [ 171.427713][ T6038] ? alloc_empty_file+0x5b/0x1d0 [ 171.427735][ T6038] ? alloc_empty_file+0x5b/0x1d0 [ 171.427763][ T6038] alloc_empty_file+0x5b/0x1d0 [ 171.427787][ T6038] path_openat+0x8f/0x3850 [ 171.427824][ T6038] ? kasan_save_track+0x3e/0x80 [ 171.427846][ T6038] ? __kasan_slab_alloc+0x6c/0x80 [ 171.427932][ T6038] ? kmem_cache_alloc_noprof+0x355/0x650 [ 171.427981][ T6038] ? do_getname+0x2e/0x250 [ 171.428067][ T6038] ? do_sys_openat2+0xcc/0x200 [ 171.428122][ T6038] ? __x64_sys_openat+0x138/0x170 [ 171.428175][ T6038] ? do_syscall_64+0x174/0x580 [ 171.428248][ T6038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.428352][ T6038] do_file_open+0x23e/0x4a0 [ 171.428408][ T6038] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.428485][ T6038] ? __pfx_do_file_open+0x10/0x10 [ 171.428620][ T6038] ? alloc_fd+0x654/0x6d0 [ 171.428653][ T6038] do_sys_openat2+0x115/0x200 [ 171.428714][ T6038] ? __pfx_lo_ioctl+0x10/0x10 [ 171.428840][ T6038] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.428909][ T6038] ? blkdev_ioctl+0x5e6/0x750 [ 171.429005][ T6038] ? __pfx_blkdev_ioctl+0x10/0x10 [ 171.429107][ T6038] __x64_sys_openat+0x138/0x170 [ 171.429135][ T6038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.429158][ T6038] do_syscall_64+0x174/0x580 [ 171.429187][ T6038] ? clear_bhb_loop+0x40/0x90 [ 171.429213][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.429235][ T6038] RIP: 0033:0x7f7807216407 [ 171.429256][ T6038] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 171.429274][ T6038] RSP: 002b:00007ffda8ec4380 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 171.429307][ T6038] RAX: ffffffffffffffda RBX: 00007f7807128880 RCX: 00007f7807216407 [ 171.429323][ T6038] RDX: 0000000000080000 RSI: 00007f7807953f48 RDI: 000000000000000b [ 171.429338][ T6038] RBP: 000056040e022320 R08: 0000000000000000 R09: 0000000000000000 [ 171.429352][ T6038] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000080000 [ 171.429366][ T6038] R13: 00007f7807953f48 R14: 0000000000000000 R15: 0000000000000009 [ 171.429397][ T6038] [ 171.494065][ T1461] FAULT_INJECTION: forcing a failure. [ 171.494065][ T1461] name failslab, interval 1, probability 1, space 0, times 49 [ 171.494172][ T1461] CPU: 0 UID: 0 PID: 1461 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.494239][ T1461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.494290][ T1461] Workqueue: events_unbound nsim_dev_trap_report_work [ 171.494388][ T1461] Call Trace: [ 171.494411][ T1461] [ 171.494441][ T1461] dump_stack_lvl+0xe8/0x150 [ 171.494539][ T1461] should_fail_ex+0x467/0x600 [ 171.494688][ T1461] should_failslab+0xa8/0x100 [ 171.494765][ T1461] kmem_cache_alloc_node_noprof+0xae/0x670 [ 171.494836][ T1461] ? __alloc_skb+0x1d7/0x7a0 [ 171.494921][ T1461] ? __alloc_skb+0x1d7/0x7a0 [ 171.495020][ T1461] __alloc_skb+0x1d7/0x7a0 [ 171.495097][ T1461] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 171.495224][ T1461] ? process_scheduled_works+0xa20/0x14e0 [ 171.495301][ T1461] process_scheduled_works+0xa8e/0x14e0 [ 171.495457][ T1461] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.495551][ T1461] ? assign_work+0x3cf/0x5d0 [ 171.495638][ T1461] worker_thread+0xa47/0xfb0 [ 171.495756][ T1461] ? __kthread_parkme+0x71/0x1f0 [ 171.495860][ T1461] kthread+0x388/0x470 [ 171.495946][ T1461] ? __pfx_worker_thread+0x10/0x10 [ 171.496014][ T1461] ? __pfx_kthread+0x10/0x10 [ 171.496107][ T1461] ret_from_fork+0x514/0xb70 [ 171.496182][ T1461] ? __pfx_ret_from_fork+0x10/0x10 [ 171.496239][ T1461] ? __switch_to+0xc89/0x1420 [ 171.496359][ T1461] ? __pfx_kthread+0x10/0x10 [ 171.496464][ T1461] ret_from_fork_asm+0x1a/0x30 [ 171.496572][ T1461] [ 171.544005][ T37] audit: type=1800 audit(1785410217.792:39): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.130" name="idVendor" dev="configfs" ino=10676 res=0 errno=0 [ 171.670638][ T1461] FAULT_INJECTION: forcing a failure. [ 171.670638][ T1461] name failslab, interval 1, probability 1, space 0, times 47 [ 171.670756][ T1461] CPU: 0 UID: 0 PID: 1461 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.670850][ T1461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.670899][ T1461] Workqueue: events_unbound nsim_dev_trap_report_work [ 171.671010][ T1461] Call Trace: [ 171.671035][ T1461] [ 171.671069][ T1461] dump_stack_lvl+0xe8/0x150 [ 171.671124][ T1461] should_fail_ex+0x467/0x600 [ 171.671251][ T1461] should_failslab+0xa8/0x100 [ 171.671362][ T1461] kmem_cache_alloc_node_noprof+0xae/0x670 [ 171.671468][ T1461] ? __alloc_skb+0x1d7/0x7a0 [ 171.671540][ T1461] ? __alloc_skb+0x1d7/0x7a0 [ 171.671627][ T1461] __alloc_skb+0x1d7/0x7a0 [ 171.671720][ T1461] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 171.671861][ T1461] ? process_scheduled_works+0xa20/0x14e0 [ 171.671950][ T1461] process_scheduled_works+0xa8e/0x14e0 [ 171.672126][ T1461] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.672231][ T1461] ? assign_work+0x3cf/0x5d0 [ 171.672330][ T1461] worker_thread+0xa47/0xfb0 [ 171.672484][ T1461] ? __kthread_parkme+0x71/0x1f0 [ 171.672582][ T1461] kthread+0x388/0x470 [ 171.672654][ T1461] ? __pfx_worker_thread+0x10/0x10 [ 171.672758][ T1461] ? __pfx_kthread+0x10/0x10 [ 171.672873][ T1461] ret_from_fork+0x514/0xb70 [ 171.672946][ T1461] ? __pfx_ret_from_fork+0x10/0x10 [ 171.673029][ T1461] ? __switch_to+0xc89/0x1420 [ 171.673146][ T1461] ? __pfx_kthread+0x10/0x10 [ 171.673252][ T1461] ret_from_fork_asm+0x1a/0x30 [ 171.673377][ T1461] [ 171.674183][ T1403] FAULT_INJECTION: forcing a failure. [ 171.674183][ T1403] name failslab, interval 1, probability 1, space 0, times 47 [ 171.674279][ T1403] CPU: 0 UID: 0 PID: 1403 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.674353][ T1403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.674400][ T1403] Workqueue: events_unbound nsim_dev_trap_report_work [ 171.674506][ T1403] Call Trace: [ 171.674530][ T1403] [ 171.674555][ T1403] dump_stack_lvl+0xe8/0x150 [ 171.674662][ T1403] should_fail_ex+0x467/0x600 [ 171.674791][ T1403] should_failslab+0xa8/0x100 [ 171.674875][ T1403] kmem_cache_alloc_node_noprof+0xae/0x670 [ 171.674938][ T1403] ? __alloc_skb+0x1d7/0x7a0 [ 171.675008][ T1403] ? __alloc_skb+0x1d7/0x7a0 [ 171.675106][ T1403] __alloc_skb+0x1d7/0x7a0 [ 171.675190][ T1403] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 171.675342][ T1403] ? process_scheduled_works+0xa20/0x14e0 [ 171.675450][ T1403] process_scheduled_works+0xa8e/0x14e0 [ 171.675644][ T1403] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.675747][ T1403] ? assign_work+0x3cf/0x5d0 [ 171.675844][ T1403] worker_thread+0xa47/0xfb0 [ 171.675981][ T1403] ? __kthread_parkme+0x71/0x1f0 [ 171.676105][ T1403] kthread+0x388/0x470 [ 171.676211][ T1403] ? __pfx_worker_thread+0x10/0x10 [ 171.676287][ T1403] ? __pfx_kthread+0x10/0x10 [ 171.676397][ T1403] ret_from_fork+0x514/0xb70 [ 171.676519][ T1403] ? __pfx_ret_from_fork+0x10/0x10 [ 171.676625][ T1403] ? __switch_to+0xc89/0x1420 [ 171.676722][ T1403] ? __pfx_kthread+0x10/0x10 [ 171.676830][ T1403] ret_from_fork_asm+0x1a/0x30 [ 171.676895][ T1403] [ 171.699516][ T1403] FAULT_INJECTION: forcing a failure. [ 171.699516][ T1403] name failslab, interval 1, probability 1, space 0, times 46 [ 171.699630][ T1403] CPU: 0 UID: 0 PID: 1403 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.699689][ T1403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.699705][ T1403] Workqueue: events_unbound nsim_dev_trap_report_work [ 171.699794][ T1403] Call Trace: [ 171.699832][ T1403] [ 171.699862][ T1403] dump_stack_lvl+0xe8/0x150 [ 171.699975][ T1403] should_fail_ex+0x467/0x600 [ 171.700032][ T1403] should_failslab+0xa8/0x100 [ 171.700118][ T1403] kmem_cache_alloc_node_noprof+0xae/0x670 [ 171.700185][ T1403] ? __alloc_skb+0x1d7/0x7a0 [ 171.700257][ T1403] ? __alloc_skb+0x1d7/0x7a0 [ 171.700363][ T1403] __alloc_skb+0x1d7/0x7a0 [ 171.700440][ T1403] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 171.700561][ T1403] ? process_scheduled_works+0xa20/0x14e0 [ 171.700639][ T1403] process_scheduled_works+0xa8e/0x14e0 [ 171.700798][ T1403] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.700903][ T1403] ? assign_work+0x3cf/0x5d0 [ 171.700994][ T1403] worker_thread+0xa47/0xfb0 [ 171.701113][ T1403] ? __kthread_parkme+0x71/0x1f0 [ 171.701259][ T1403] kthread+0x388/0x470 [ 171.701371][ T1403] ? __pfx_worker_thread+0x10/0x10 [ 171.701438][ T1403] ? __pfx_kthread+0x10/0x10 [ 171.701484][ T1403] ret_from_fork+0x514/0xb70 [ 171.701593][ T1403] ? __pfx_ret_from_fork+0x10/0x10 [ 171.701689][ T1403] ? __switch_to+0xc89/0x1420 [ 171.701782][ T1403] ? __pfx_kthread+0x10/0x10 [ 171.701888][ T1403] ret_from_fork_asm+0x1a/0x30 [ 171.701995][ T1403] [ 171.719899][ T37] audit: type=1800 audit(1785410217.802:40): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.130" name="idProduct" dev="configfs" ino=10677 res=0 errno=0 [ 171.770413][ T37] audit: type=1800 audit(1785410217.992:41): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.130" name="serialnumber" dev="configfs" ino=10678 res=0 errno=0 [ 171.816903][ T6215] FAULT_INJECTION: forcing a failure. [ 171.816903][ T6215] name failslab, interval 1, probability 1, space 0, times 43 [ 171.817008][ T6215] CPU: 0 UID: 0 PID: 6215 Comm: syz.2.130 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.817074][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.817124][ T6215] Call Trace: [ 171.817145][ T6215] [ 171.817164][ T6215] dump_stack_lvl+0xe8/0x150 [ 171.817215][ T6215] should_fail_ex+0x467/0x600 [ 171.817338][ T6215] should_failslab+0xa8/0x100 [ 171.817417][ T6215] __kmalloc_noprof+0xfe/0x780 [ 171.817482][ T6215] ? ima_alloc_init_template+0x185/0x700 [ 171.817575][ T6215] ? ima_write_template_field_data+0x47/0x490 [ 171.817642][ T6215] ? ima_write_template_field_data+0x47/0x490 [ 171.817709][ T6215] ? __x64_sys_openat+0x138/0x170 [ 171.817801][ T6215] ima_write_template_field_data+0x47/0x490 [ 171.817879][ T6215] ? ima_eventdigest_init_common+0x2b1/0x400 [ 171.817979][ T6215] ima_eventdigest_init_common+0x2cc/0x400 [ 171.818054][ T6215] ? ima_eventdigest_init_common+0x161/0x400 [ 171.818121][ T6215] ? __pfx_ima_eventdigest_init_common+0x10/0x10 [ 171.818257][ T6215] ? __kmalloc_noprof+0x43b/0x780 [ 171.818309][ T6215] ? ima_alloc_init_template+0x185/0x700 [ 171.818406][ T6215] ? __pfx_ima_eventdigest_ng_init+0x10/0x10 [ 171.818481][ T6215] ima_alloc_init_template+0x323/0x700 [ 171.818592][ T6215] ima_store_measurement+0x1da/0x6a0 [ 171.818708][ T6215] ? __pfx_ima_store_measurement+0x10/0x10 [ 171.818798][ T6215] ? ima_d_path+0x16b/0x230 [ 171.818841][ T6215] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 171.818932][ T6215] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.819041][ T6215] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 171.819128][ T6215] process_measurement+0x15bc/0x1c20 [ 171.819267][ T6215] ? __pfx_process_measurement+0x10/0x10 [ 171.819450][ T6215] ? __configfs_open_file+0x670/0x7d0 [ 171.819576][ T6215] ima_file_check+0xe1/0x130 [ 171.819662][ T6215] ? do_dentry_open+0xd75/0x1420 [ 171.819725][ T6215] ? __pfx_ima_file_check+0x10/0x10 [ 171.819834][ T6215] security_file_post_open+0xb3/0x260 [ 171.819918][ T6215] path_openat+0x2eac/0x3850 [ 171.820090][ T6215] do_file_open+0x23e/0x4a0 [ 171.820172][ T6215] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.820254][ T6215] ? __pfx_do_file_open+0x10/0x10 [ 171.820377][ T6215] ? alloc_fd+0x654/0x6d0 [ 171.820489][ T6215] do_sys_openat2+0x115/0x200 [ 171.820553][ T6215] ? __se_sys_futex+0x3a8/0x450 [ 171.820631][ T6215] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.820717][ T6215] ? rcu_is_watching+0x15/0xb0 [ 171.820824][ T6215] __x64_sys_openat+0x138/0x170 [ 171.820901][ T6215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.820968][ T6215] do_syscall_64+0x174/0x580 [ 171.821050][ T6215] ? clear_bhb_loop+0x40/0x90 [ 171.821132][ T6215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.821198][ T6215] RIP: 0033:0x7f38f9d5df99 [ 171.821261][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.821302][ T6215] RSP: 002b:00007f38f7fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.821374][ T6215] RAX: ffffffffffffffda RBX: 00007f38f9fe5fa0 RCX: 00007f38f9d5df99 [ 171.821421][ T6215] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 171.821465][ T6215] RBP: 00007f38f9df4ec4 R08: 0000000000000000 R09: 0000000000000000 [ 171.821507][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.821548][ T6215] R13: 00007f38f9fe6038 R14: 00007f38f9fe5fa0 R15: 00007ffcf6c92408 [ 171.821642][ T6215] [ 171.822002][ T37] audit: type=1800 audit(1785410218.022:42): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.130" name="manufacturer" dev="configfs" ino=10679 res=0 errno=0 [ 171.844356][ T1177] FAULT_INJECTION: forcing a failure. [ 171.844356][ T1177] name failslab, interval 1, probability 1, space 0, times 42 [ 171.844392][ T1177] CPU: 0 UID: 0 PID: 1177 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.844414][ T1177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.844426][ T1177] Workqueue: events_unbound nsim_dev_trap_report_work [ 171.844459][ T1177] Call Trace: [ 171.844467][ T1177] [ 171.844476][ T1177] dump_stack_lvl+0xe8/0x150 [ 171.844512][ T1177] should_fail_ex+0x467/0x600 [ 171.844549][ T1177] should_failslab+0xa8/0x100 [ 171.844576][ T1177] kmem_cache_alloc_node_noprof+0xae/0x670 [ 171.844597][ T1177] ? __alloc_skb+0x1d7/0x7a0 [ 171.844616][ T1177] ? __alloc_skb+0x1d7/0x7a0 [ 171.844644][ T1177] __alloc_skb+0x1d7/0x7a0 [ 171.844674][ T1177] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 171.844723][ T1177] ? process_scheduled_works+0xa20/0x14e0 [ 171.844752][ T1177] process_scheduled_works+0xa8e/0x14e0 [ 171.844820][ T1177] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.844855][ T1177] ? assign_work+0x3cf/0x5d0 [ 171.844890][ T1177] worker_thread+0xa47/0xfb0 [ 171.844951][ T1177] kthread+0x388/0x470 [ 171.844987][ T1177] ? __pfx_worker_thread+0x10/0x10 [ 171.845013][ T1177] ? __pfx_kthread+0x10/0x10 [ 171.845048][ T1177] ret_from_fork+0x514/0xb70 [ 171.845205][ T1177] ? __pfx_ret_from_fork+0x10/0x10 [ 171.845301][ T1177] ? __switch_to+0xc89/0x1420 [ 171.845399][ T1177] ? __pfx_kthread+0x10/0x10 [ 171.845517][ T1177] ret_from_fork_asm+0x1a/0x30 [ 171.845627][ T1177] [ 171.857483][ T5736] usb 42-1: device descriptor read/8, error -110 [ 171.894391][ T5977] FAULT_INJECTION: forcing a failure. [ 171.894391][ T5977] name failslab, interval 1, probability 1, space 0, times 40 [ 171.894496][ T5977] CPU: 0 UID: 0 PID: 5977 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.894569][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.894603][ T5977] Call Trace: [ 171.894625][ T5977] [ 171.894655][ T5977] dump_stack_lvl+0xe8/0x150 [ 171.894761][ T5977] should_fail_ex+0x467/0x600 [ 171.894871][ T5977] should_failslab+0xa8/0x100 [ 171.894947][ T5977] kmem_cache_alloc_noprof+0xa4/0x650 [ 171.895018][ T5977] ? do_getname+0x2e/0x250 [ 171.895103][ T5977] ? do_getname+0x2e/0x250 [ 171.895211][ T5977] do_getname+0x2e/0x250 [ 171.895316][ T5977] ? getname_flags+0x11/0x20 [ 171.895414][ T5977] vfs_fstatat+0x45/0x170 [ 171.895518][ T5977] __x64_sys_newfstatat+0x151/0x200 [ 171.895611][ T5977] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 171.895732][ T5977] ? rcu_is_watching+0x15/0xb0 [ 171.895839][ T5977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.895915][ T5977] do_syscall_64+0x174/0x580 [ 171.895994][ T5977] ? clear_bhb_loop+0x40/0x90 [ 171.896070][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.896135][ T5977] RIP: 0033:0x7f7807280b0a [ 171.896191][ T5977] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 171.896246][ T5977] RSP: 002b:00007ffda8ecb018 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 171.896311][ T5977] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00007f7807280b0a [ 171.896347][ T5977] RDX: 00007ffda8ecb020 RSI: 00007ffda8ecb0f0 RDI: 00000000ffffff9c [ 171.896392][ T5977] RBP: 00007ffda8ecc130 R08: 0000000000000000 R09: 0000000000000000 [ 171.896433][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda8ecc550 [ 171.896468][ T5977] R13: 0000000000000000 R14: 0000000000000008 R15: 000056040e01ae60 [ 171.896554][ T5977] [ 171.931401][ T37] audit: type=1804 audit(1785410218.182:43): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=add_template_measure cause=ENOMEM comm="syz.2.130" name="/newroot/22/config/usb_gadget/g1/strings/0x409/manufacturer" dev="configfs" ino=10679 res=0 errno=0 [ 172.021032][ T67] FAULT_INJECTION: forcing a failure. [ 172.021032][ T67] name failslab, interval 1, probability 1, space 0, times 37 [ 172.021129][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.021196][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.021239][ T67] Workqueue: events_unbound nsim_dev_trap_report_work [ 172.021348][ T67] Call Trace: [ 172.021377][ T67] [ 172.021401][ T67] dump_stack_lvl+0xe8/0x150 [ 172.021517][ T67] should_fail_ex+0x467/0x600 [ 172.021567][ T67] should_failslab+0xa8/0x100 [ 172.021667][ T67] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.021753][ T67] ? __alloc_skb+0x1d7/0x7a0 [ 172.021810][ T67] ? __alloc_skb+0x1d7/0x7a0 [ 172.021892][ T67] __alloc_skb+0x1d7/0x7a0 [ 172.021969][ T67] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 172.022097][ T67] ? process_scheduled_works+0xa20/0x14e0 [ 172.022172][ T67] process_scheduled_works+0xa8e/0x14e0 [ 172.022329][ T67] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.022426][ T67] ? assign_work+0x3cf/0x5d0 [ 172.022515][ T67] worker_thread+0xa47/0xfb0 [ 172.022668][ T67] kthread+0x388/0x470 [ 172.022765][ T67] ? __pfx_worker_thread+0x10/0x10 [ 172.022828][ T67] ? __pfx_kthread+0x10/0x10 [ 172.022924][ T67] ret_from_fork+0x514/0xb70 [ 172.023013][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 172.023113][ T67] ? __switch_to+0xc89/0x1420 [ 172.023222][ T67] ? __pfx_kthread+0x10/0x10 [ 172.023331][ T67] ret_from_fork_asm+0x1a/0x30 [ 172.023443][ T67] [ 172.024661][ T6038] FAULT_INJECTION: forcing a failure. [ 172.024661][ T6038] name failslab, interval 1, probability 1, space 0, times 36 [ 172.024740][ T6038] CPU: 0 UID: 0 PID: 6038 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.024855][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.024888][ T6038] Call Trace: [ 172.024911][ T6038] [ 172.024941][ T6038] dump_stack_lvl+0xe8/0x150 [ 172.025041][ T6038] should_fail_ex+0x467/0x600 [ 172.025161][ T6038] should_failslab+0xa8/0x100 [ 172.025237][ T6038] __kmalloc_noprof+0xfe/0x780 [ 172.025313][ T6038] ? tomoyo_encode+0x2ad/0x570 [ 172.025391][ T6038] ? tomoyo_encode+0x2ad/0x570 [ 172.025512][ T6038] ? tomoyo_realpath_from_path+0x60f/0x640 [ 172.025601][ T6038] tomoyo_encode+0x2ad/0x570 [ 172.025705][ T6038] tomoyo_path_perm+0x318/0x560 [ 172.025770][ T6038] ? tomoyo_path_perm+0x251/0x560 [ 172.025844][ T6038] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 172.026029][ T6038] ? __pfx_current_check_access_path+0x10/0x10 [ 172.026093][ T6038] ? d_splice_alias+0x12/0x30 [ 172.026178][ T6038] ? lookup_one_qstr_excl+0x1d4/0x360 [ 172.026264][ T6038] tomoyo_path_symlink+0xab/0xf0 [ 172.026353][ T6038] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 172.026454][ T6038] ? __pfx_filename_create+0x10/0x10 [ 172.026553][ T6038] security_path_symlink+0x16f/0x360 [ 172.026653][ T6038] filename_symlinkat+0x134/0x420 [ 172.026762][ T6038] ? __pfx_filename_symlinkat+0x10/0x10 [ 172.026863][ T6038] ? do_getname+0x151/0x250 [ 172.026953][ T6038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.027027][ T6038] __se_sys_symlink+0x4d/0x2b0 [ 172.027115][ T6038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.027168][ T6038] do_syscall_64+0x174/0x580 [ 172.027197][ T6038] ? clear_bhb_loop+0x40/0x90 [ 172.027225][ T6038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.027247][ T6038] RIP: 0033:0x7f7807284527 [ 172.027269][ T6038] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 8b 15 c9 b8 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 a1 b8 0d 00 f7 d8 64 89 02 b8 [ 172.027287][ T6038] RSP: 002b:00007ffda8ecc568 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 172.027318][ T6038] RAX: ffffffffffffffda RBX: 000056040e005ad0 RCX: 00007f7807284527 [ 172.027353][ T6038] RDX: fffffffffffffe68 RSI: 00007ffda8ecc570 RDI: 000056040dff9a30 [ 172.027370][ T6038] RBP: 00000000000000b4 R08: 0000000000000064 R09: 0000000000000000 [ 172.027384][ T6038] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffda8ecc570 [ 172.027430][ T6038] R13: 000056040e000190 R14: 0000000000000008 R15: 000056040e005ad0 [ 172.027551][ T6038] [ 172.032758][ T85] FAULT_INJECTION: forcing a failure. [ 172.032758][ T85] name failslab, interval 1, probability 1, space 0, times 36 [ 172.048353][ T85] CPU: 0 UID: 0 PID: 85 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.048439][ T85] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.048483][ T85] Workqueue: events_unbound nsim_dev_trap_report_work [ 172.048591][ T85] Call Trace: [ 172.048615][ T85] [ 172.048637][ T85] dump_stack_lvl+0xe8/0x150 [ 172.048736][ T85] should_fail_ex+0x467/0x600 [ 172.048856][ T85] should_failslab+0xa8/0x100 [ 172.048919][ T85] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.048948][ T85] ? __alloc_skb+0x1d7/0x7a0 [ 172.049010][ T85] ? __alloc_skb+0x1d7/0x7a0 [ 172.049124][ T85] __alloc_skb+0x1d7/0x7a0 [ 172.049210][ T85] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 172.049347][ T85] ? process_scheduled_works+0xa20/0x14e0 [ 172.049424][ T85] process_scheduled_works+0xa8e/0x14e0 [ 172.049586][ T85] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.049676][ T85] ? assign_work+0x3cf/0x5d0 [ 172.049773][ T85] worker_thread+0xa47/0xfb0 [ 172.049921][ T85] kthread+0x388/0x470 [ 172.050017][ T85] ? __pfx_worker_thread+0x10/0x10 [ 172.050085][ T85] ? __pfx_kthread+0x10/0x10 [ 172.050180][ T85] ret_from_fork+0x514/0xb70 [ 172.050288][ T85] ? __pfx_ret_from_fork+0x10/0x10 [ 172.050370][ T85] ? __switch_to+0xc89/0x1420 [ 172.050442][ T85] ? __pfx_kthread+0x10/0x10 [ 172.050569][ T85] ret_from_fork_asm+0x1a/0x30 [ 172.050677][ T85] [ 172.059924][ C1] FAULT_INJECTION: forcing a failure. [ 172.059924][ C1] name failslab, interval 1, probability 1, space 0, times 35 [ 172.059957][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.059980][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.059992][ C1] Call Trace: [ 172.060000][ C1] [ 172.060009][ C1] dump_stack_lvl+0xe8/0x150 [ 172.060045][ C1] should_fail_ex+0x467/0x600 [ 172.060081][ C1] should_failslab+0xa8/0x100 [ 172.060107][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.060130][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 172.060148][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 172.060173][ C1] __alloc_skb+0x1d7/0x7a0 [ 172.060196][ C1] skb_copy+0x19d/0x870 [ 172.060219][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 172.060246][ C1] mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 172.060290][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 172.060322][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 172.060357][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 172.060382][ C1] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 172.060415][ C1] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 172.060448][ C1] mac80211_hwsim_beacon_tx+0x396/0x820 [ 172.060480][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 172.060510][ C1] __iterate_interfaces+0x2af/0x5a0 [ 172.060529][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 172.060553][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 172.060574][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 172.060598][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 172.060621][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 172.060641][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 172.060662][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 172.060708][ C1] hrtimer_run_softirq+0x18f/0x260 [ 172.060741][ C1] handle_softirqs+0x1d9/0x6c0 [ 172.060780][ C1] run_ktimerd+0x69/0x100 [ 172.060820][ C1] smpboot_thread_fn+0x57c/0xa80 [ 172.060848][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 172.060881][ C1] kthread+0x388/0x470 [ 172.060910][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 172.060934][ C1] ? __pfx_kthread+0x10/0x10 [ 172.060963][ C1] ret_from_fork+0x514/0xb70 [ 172.060997][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 172.061026][ C1] ? __switch_to+0xc89/0x1420 [ 172.061056][ C1] ? __pfx_kthread+0x10/0x10 [ 172.061087][ C1] ret_from_fork_asm+0x1a/0x30 [ 172.061123][ C1] [ 172.097391][ C0] FAULT_INJECTION: forcing a failure. [ 172.097391][ C0] name failslab, interval 1, probability 1, space 0, times 32 [ 172.097499][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.097573][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.097617][ C0] Call Trace: [ 172.097640][ C0] [ 172.097664][ C0] dump_stack_lvl+0xe8/0x150 [ 172.097784][ C0] should_fail_ex+0x467/0x600 [ 172.097890][ C0] should_failslab+0xa8/0x100 [ 172.097970][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.098044][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 172.098109][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 172.098188][ C0] __alloc_skb+0x1d7/0x7a0 [ 172.098273][ C0] wg_packet_send_keepalive+0x65/0x2c0 [ 172.098370][ C0] call_timer_fn+0x192/0x5e0 [ 172.098449][ C0] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 172.098484][ C0] ? call_timer_fn+0xd4/0x5e0 [ 172.098577][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 172.098700][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 172.098778][ C0] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 172.098841][ C0] __run_timer_base+0x67b/0x9b0 [ 172.098975][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 172.099063][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 172.099159][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 172.099256][ C0] run_timer_softirq+0xb7/0x170 [ 172.099333][ C0] handle_softirqs+0x1d9/0x6c0 [ 172.099442][ C0] run_ktimerd+0x69/0x100 [ 172.099529][ C0] smpboot_thread_fn+0x57c/0xa80 [ 172.099624][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 172.099733][ C0] kthread+0x388/0x470 [ 172.099818][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 172.099910][ C0] ? __pfx_kthread+0x10/0x10 [ 172.100063][ C0] ret_from_fork+0x514/0xb70 [ 172.100168][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 172.100259][ C0] ? __switch_to+0xc89/0x1420 [ 172.100364][ C0] ? __pfx_kthread+0x10/0x10 [ 172.100478][ C0] ret_from_fork_asm+0x1a/0x30 [ 172.100593][ C0] [ 172.115893][ T37] audit: type=1800 audit(1785410218.362:44): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.130" name="configuration" dev="configfs" ino=10681 res=0 errno=0 [ 172.231473][ T4954] FAULT_INJECTION: forcing a failure. [ 172.231473][ T4954] name failslab, interval 1, probability 1, space 0, times 30 [ 172.267395][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.267481][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.267523][ T4954] Call Trace: [ 172.267546][ T4954] [ 172.267570][ T4954] dump_stack_lvl+0xe8/0x150 [ 172.267655][ T4954] should_fail_ex+0x467/0x600 [ 172.267765][ T4954] should_failslab+0xa8/0x100 [ 172.267856][ T4954] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.267921][ T4954] ? __alloc_skb+0x1d7/0x7a0 [ 172.267945][ T4954] ? __alloc_skb+0x1d7/0x7a0 [ 172.268020][ T4954] __alloc_skb+0x1d7/0x7a0 [ 172.268110][ T4954] alloc_skb_with_frags+0xc6/0x760 [ 172.268195][ T4954] ? __lock_acquire+0x683/0x2ce0 [ 172.268302][ T4954] sock_alloc_send_pskb+0x884/0x9a0 [ 172.268435][ T4954] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 172.268533][ T4954] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 172.268639][ T4954] unix_dgram_sendmsg+0x4da/0x17b0 [ 172.268759][ T4954] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 172.268864][ T4954] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 172.268995][ T4954] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 172.269064][ T4954] sock_sendmsg_nosec+0x13a/0x180 [ 172.269139][ T4954] __sys_sendto+0x41e/0x5d0 [ 172.269204][ T4954] ? smack_privileged_cred+0x33c/0x380 [ 172.269320][ T4954] ? __pfx___sys_sendto+0x10/0x10 [ 172.269437][ T4954] ? __pfx___sys_connect+0x10/0x10 [ 172.269552][ T4954] ? rcu_is_watching+0x15/0xb0 [ 172.269646][ T4954] __x64_sys_sendto+0xde/0x100 [ 172.269715][ T4954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.269782][ T4954] do_syscall_64+0x174/0x580 [ 172.269859][ T4954] ? clear_bhb_loop+0x40/0x90 [ 172.269932][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.269996][ T4954] RIP: 0033:0x7f0cc0b26407 [ 172.270059][ T4954] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 172.270106][ T4954] RSP: 002b:00007ffde9b35bd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 172.270170][ T4954] RAX: ffffffffffffffda RBX: 00007f0cc09d6c80 RCX: 00007f0cc0b26407 [ 172.270213][ T4954] RDX: 0000000000000052 RSI: 00007ffde9b35d10 RDI: 0000000000000003 [ 172.270255][ T4954] RBP: 00007ffde9b36140 R08: 0000000000000000 R09: 0000000000000000 [ 172.270307][ T4954] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde9b36158 [ 172.270342][ T4954] R13: 00007ffde9b35d10 R14: 0000000000000037 R15: 00007ffde9b35d10 [ 172.270427][ T4954] [ 172.278125][ T68] FAULT_INJECTION: forcing a failure. [ 172.278125][ T68] name failslab, interval 1, probability 1, space 0, times 29 [ 172.278219][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.278298][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.278340][ T68] Workqueue: events_unbound cfg80211_wiphy_work [ 172.278454][ T68] Call Trace: [ 172.278476][ T68] [ 172.278500][ T68] dump_stack_lvl+0xe8/0x150 [ 172.278602][ T68] should_fail_ex+0x467/0x600 [ 172.278683][ T68] should_failslab+0xa8/0x100 [ 172.278781][ T68] __kmalloc_noprof+0xfe/0x780 [ 172.278867][ T68] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 172.278956][ T68] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 172.279072][ T68] cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 172.279172][ T68] ? unwind_next_frame+0x8f/0x2550 [ 172.279254][ T68] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 172.279422][ T68] ? _ieee802_11_parse_elems_full+0x2c0/0x4950 [ 172.279518][ T68] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 172.279614][ T68] cfg80211_inform_bss_data+0x25b/0x3d50 [ 172.279787][ T68] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 172.279973][ T68] ? __lock_acquire+0x683/0x2ce0 [ 172.280097][ T68] ? cfg80211_defragment_element+0x3e/0x360 [ 172.280240][ T68] ? ieee80211_bss_info_update+0x30f/0xa50 [ 172.280330][ T68] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 172.280438][ T68] ? ieee80211_bss_info_update+0x30f/0xa50 [ 172.280535][ T68] ieee80211_bss_info_update+0x791/0xa50 [ 172.280621][ T68] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 172.280693][ T68] ? sta_info_get+0x4f/0x300 [ 172.280795][ T68] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 172.280883][ T68] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 172.281009][ T68] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 172.281101][ T68] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 172.281192][ T68] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 172.281266][ T68] ? lockdep_hardirqs_on+0x7a/0x110 [ 172.281344][ T68] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 172.281422][ T68] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 172.281551][ T68] ? reacquire_held_locks+0x104/0x190 [ 172.281688][ T68] ? rt_spin_unlock+0x163/0x200 [ 172.281802][ T68] ieee80211_iface_work+0x78a/0x1010 [ 172.281912][ T68] cfg80211_wiphy_work+0x29e/0x420 [ 172.282019][ T68] ? process_scheduled_works+0xa20/0x14e0 [ 172.282093][ T68] process_scheduled_works+0xa8e/0x14e0 [ 172.282242][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.282340][ T68] ? assign_work+0x3cf/0x5d0 [ 172.282434][ T68] worker_thread+0xa47/0xfb0 [ 172.282563][ T68] kthread+0x388/0x470 [ 172.282659][ T68] ? __pfx_worker_thread+0x10/0x10 [ 172.282732][ T68] ? __pfx_kthread+0x10/0x10 [ 172.282818][ T68] ret_from_fork+0x514/0xb70 [ 172.282936][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 172.283051][ T68] ? __switch_to+0xc89/0x1420 [ 172.283135][ T68] ? __pfx_kthread+0x10/0x10 [ 172.283230][ T68] ret_from_fork_asm+0x1a/0x30 [ 172.283339][ T68] [ 172.376353][ T1177] FAULT_INJECTION: forcing a failure. [ 172.376353][ T1177] name failslab, interval 1, probability 1, space 0, times 26 [ 172.376460][ T1177] CPU: 0 UID: 0 PID: 1177 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.376527][ T1177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.376569][ T1177] Workqueue: events_unbound cfg80211_wiphy_work [ 172.376688][ T1177] Call Trace: [ 172.376712][ T1177] [ 172.376743][ T1177] dump_stack_lvl+0xe8/0x150 [ 172.376882][ T1177] should_fail_ex+0x467/0x600 [ 172.376997][ T1177] should_failslab+0xa8/0x100 [ 172.377074][ T1177] __kmalloc_noprof+0xfe/0x780 [ 172.377147][ T1177] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 172.377187][ T1177] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 172.377282][ T1177] ieee802_11_parse_elems_full+0x14b/0x2db0 [ 172.377404][ T1177] ? do_raw_spin_lock+0x12b/0x2f0 [ 172.377490][ T1177] ? kvfree_call_rcu+0xd4/0x3c0 [ 172.377581][ T1177] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 172.377721][ T1177] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 172.377812][ T1177] ? cfg80211_update_known_bss+0xa51/0x1430 [ 172.377931][ T1177] ieee80211_inform_bss+0x163/0x10d0 [ 172.378026][ T1177] ? __cfg80211_bss_update+0x125c/0x2010 [ 172.378077][ T1177] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 172.378104][ T1177] ? rt_spin_lock+0x20e/0x400 [ 172.378277][ T1177] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 172.378363][ T1177] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 172.378449][ T1177] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 172.378564][ T1177] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 172.378685][ T1177] ? _ieee802_11_parse_elems_full+0x2c0/0x4950 [ 172.378776][ T1177] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 172.378860][ T1177] cfg80211_inform_bss_data+0x25b/0x3d50 [ 172.379037][ T1177] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 172.379132][ T1177] ? __lock_acquire+0x683/0x2ce0 [ 172.379283][ T1177] ? ktime_get+0x45/0x220 [ 172.379338][ T1177] ? lock_acquire+0x106/0x350 [ 172.379411][ T1177] ? __lock_acquire+0x683/0x2ce0 [ 172.379489][ T1177] ? ktime_get+0x45/0x220 [ 172.379623][ T1177] ? ieee80211_bss_info_update+0x30f/0xa50 [ 172.379723][ T1177] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 172.379853][ T1177] ? ieee80211_bss_info_update+0x30f/0xa50 [ 172.379946][ T1177] ieee80211_bss_info_update+0x791/0xa50 [ 172.380036][ T1177] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 172.380108][ T1177] ? sta_info_get+0x4f/0x300 [ 172.380188][ T1177] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 172.380292][ T1177] ieee80211_ibss_rx_queued_mgmt+0x1ce3/0x2c40 [ 172.380424][ T1177] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 172.380511][ T1177] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 172.380608][ T1177] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 172.380683][ T1177] ? lockdep_hardirqs_on+0x7a/0x110 [ 172.380758][ T1177] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 172.380827][ T1177] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 172.380927][ T1177] ? reacquire_held_locks+0x104/0x190 [ 172.381100][ T1177] ? rt_spin_unlock+0x163/0x200 [ 172.381217][ T1177] ieee80211_iface_work+0x78a/0x1010 [ 172.381333][ T1177] cfg80211_wiphy_work+0x29e/0x420 [ 172.381440][ T1177] ? process_scheduled_works+0xa20/0x14e0 [ 172.381516][ T1177] process_scheduled_works+0xa8e/0x14e0 [ 172.381678][ T1177] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.381777][ T1177] ? assign_work+0x3cf/0x5d0 [ 172.381865][ T1177] worker_thread+0xa47/0xfb0 [ 172.382022][ T1177] kthread+0x388/0x470 [ 172.382119][ T1177] ? __pfx_worker_thread+0x10/0x10 [ 172.382193][ T1177] ? __pfx_kthread+0x10/0x10 [ 172.382281][ T1177] ret_from_fork+0x514/0xb70 [ 172.382411][ T1177] ? __pfx_ret_from_fork+0x10/0x10 [ 172.382507][ T1177] ? __switch_to+0xc89/0x1420 [ 172.382596][ T1177] ? __pfx_kthread+0x10/0x10 [ 172.382692][ T1177] ret_from_fork_asm+0x1a/0x30 [ 172.382806][ T1177] [ 172.449678][ T13] FAULT_INJECTION: forcing a failure. [ 172.449678][ T13] name failslab, interval 1, probability 1, space 0, times 26 [ 172.449785][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.449860][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.449903][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 172.450010][ T13] Call Trace: [ 172.450032][ T13] [ 172.450055][ T13] dump_stack_lvl+0xe8/0x150 [ 172.450136][ T13] should_fail_ex+0x467/0x600 [ 172.450237][ T13] should_failslab+0xa8/0x100 [ 172.450354][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.450433][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 172.450496][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 172.450580][ T13] __alloc_skb+0x1d7/0x7a0 [ 172.450666][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 172.450795][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 172.450874][ T13] process_scheduled_works+0xa8e/0x14e0 [ 172.451031][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.451125][ T13] ? assign_work+0x3cf/0x5d0 [ 172.451213][ T13] worker_thread+0xa47/0xfb0 [ 172.451371][ T13] kthread+0x388/0x470 [ 172.451457][ T13] ? __pfx_worker_thread+0x10/0x10 [ 172.451528][ T13] ? __pfx_kthread+0x10/0x10 [ 172.451622][ T13] ret_from_fork+0x514/0xb70 [ 172.451734][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 172.451823][ T13] ? __switch_to+0xc89/0x1420 [ 172.451912][ T13] ? __pfx_kthread+0x10/0x10 [ 172.452007][ T13] ret_from_fork_asm+0x1a/0x30 [ 172.452142][ T13] [ 172.453625][ T12] FAULT_INJECTION: forcing a failure. [ 172.453625][ T12] name failslab, interval 1, probability 1, space 0, times 26 [ 172.453756][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.453825][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.453867][ T12] Workqueue: events_unbound nsim_dev_trap_report_work [ 172.453963][ T12] Call Trace: [ 172.453985][ T12] [ 172.454008][ T12] dump_stack_lvl+0xe8/0x150 [ 172.454106][ T12] should_fail_ex+0x467/0x600 [ 172.454213][ T12] should_failslab+0xa8/0x100 [ 172.454299][ T12] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.454367][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 172.454423][ T12] ? __alloc_skb+0x1d7/0x7a0 [ 172.454512][ T12] __alloc_skb+0x1d7/0x7a0 [ 172.454589][ T12] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 172.454715][ T12] ? process_scheduled_works+0xa20/0x14e0 [ 172.454785][ T12] process_scheduled_works+0xa8e/0x14e0 [ 172.454940][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.455042][ T12] ? assign_work+0x3cf/0x5d0 [ 172.455098][ T12] worker_thread+0xa47/0xfb0 [ 172.455283][ T12] kthread+0x388/0x470 [ 172.455377][ T12] ? __pfx_worker_thread+0x10/0x10 [ 172.455445][ T12] ? __pfx_kthread+0x10/0x10 [ 172.455542][ T12] ret_from_fork+0x514/0xb70 [ 172.455642][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 172.455738][ T12] ? __switch_to+0xc89/0x1420 [ 172.455840][ T12] ? __pfx_kthread+0x10/0x10 [ 172.455938][ T12] ret_from_fork_asm+0x1a/0x30 [ 172.456051][ T12] [ 172.465714][ T85] FAULT_INJECTION: forcing a failure. [ 172.465714][ T85] name failslab, interval 1, probability 1, space 0, times 25 [ 172.465753][ T85] CPU: 0 UID: 0 PID: 85 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.465777][ T85] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.465792][ T85] Workqueue: events_unbound nsim_dev_trap_report_work [ 172.465828][ T85] Call Trace: [ 172.465835][ T85] [ 172.465843][ T85] dump_stack_lvl+0xe8/0x150 [ 172.465874][ T85] should_fail_ex+0x467/0x600 [ 172.465913][ T85] should_failslab+0xa8/0x100 [ 172.465938][ T85] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.465959][ T85] ? __alloc_skb+0x1d7/0x7a0 [ 172.465978][ T85] ? __alloc_skb+0x1d7/0x7a0 [ 172.466004][ T85] __alloc_skb+0x1d7/0x7a0 [ 172.466030][ T85] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 172.466072][ T85] ? process_scheduled_works+0xa20/0x14e0 [ 172.466096][ T85] process_scheduled_works+0xa8e/0x14e0 [ 172.466143][ T85] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.466172][ T85] ? assign_work+0x3cf/0x5d0 [ 172.466199][ T85] worker_thread+0xa47/0xfb0 [ 172.466247][ T85] kthread+0x388/0x470 [ 172.466285][ T85] ? __pfx_worker_thread+0x10/0x10 [ 172.466308][ T85] ? __pfx_kthread+0x10/0x10 [ 172.466340][ T85] ret_from_fork+0x514/0xb70 [ 172.466374][ T85] ? __pfx_ret_from_fork+0x10/0x10 [ 172.466404][ T85] ? __switch_to+0xc89/0x1420 [ 172.466431][ T85] ? __pfx_kthread+0x10/0x10 [ 172.466462][ T85] ret_from_fork_asm+0x1a/0x30 [ 172.466498][ T85] [ 172.470296][ C0] FAULT_INJECTION: forcing a failure. [ 172.470296][ C0] name failslab, interval 1, probability 1, space 0, times 23 [ 172.470336][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.470363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.470378][ C0] Call Trace: [ 172.470388][ C0] [ 172.470398][ C0] dump_stack_lvl+0xe8/0x150 [ 172.470443][ C0] should_fail_ex+0x467/0x600 [ 172.470504][ C0] should_failslab+0xa8/0x100 [ 172.470556][ C0] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.470584][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 172.470609][ C0] ? __alloc_skb+0x1d7/0x7a0 [ 172.470662][ C0] __alloc_skb+0x1d7/0x7a0 [ 172.470763][ C0] skb_copy+0x19d/0x870 [ 172.470855][ C0] ? seqcount_lockdep_reader_access+0xea/0x100 [ 172.470952][ C0] mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 172.471095][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 172.471194][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 172.471323][ C0] ? __ieee80211_beacon_get+0x34/0x1820 [ 172.471420][ C0] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 172.471531][ C0] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 172.471649][ C0] mac80211_hwsim_beacon_tx+0x396/0x820 [ 172.471735][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 172.471809][ C0] __iterate_interfaces+0x2af/0x5a0 [ 172.471879][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 172.471965][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 172.472041][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 172.472106][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 172.472173][ C0] mac80211_hwsim_beacon+0xb2/0x2b0 [ 172.472275][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 172.472359][ C0] __hrtimer_run_queues+0x3eb/0xaf0 [ 172.472502][ C0] hrtimer_run_softirq+0x18f/0x260 [ 172.472617][ C0] handle_softirqs+0x1d9/0x6c0 [ 172.472725][ C0] run_ktimerd+0x69/0x100 [ 172.472807][ C0] smpboot_thread_fn+0x57c/0xa80 [ 172.472904][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 172.473013][ C0] kthread+0x388/0x470 [ 172.473106][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 172.473182][ C0] ? __pfx_kthread+0x10/0x10 [ 172.473288][ C0] ret_from_fork+0x514/0xb70 [ 172.473396][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 172.473499][ C0] ? __switch_to+0xc89/0x1420 [ 172.473624][ C0] ? __pfx_kthread+0x10/0x10 [ 172.473725][ C0] ret_from_fork_asm+0x1a/0x30 [ 172.473851][ C0] [ 172.493566][ T6206] FAULT_INJECTION: forcing a failure. [ 172.493566][ T6206] name failslab, interval 1, probability 1, space 0, times 22 [ 172.493673][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: syz.1.127 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.493747][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.493793][ T6206] Call Trace: [ 172.493816][ T6206] [ 172.493847][ T6206] dump_stack_lvl+0xe8/0x150 [ 172.493965][ T6206] should_fail_ex+0x467/0x600 [ 172.494084][ T6206] should_failslab+0xa8/0x100 [ 172.494163][ T6206] __kmalloc_noprof+0xfe/0x780 [ 172.494238][ T6206] ? ___neigh_create+0x719/0x2390 [ 172.494346][ T6206] ? ___neigh_create+0x719/0x2390 [ 172.494447][ T6206] ? nf_hook+0xa1/0x3a0 [ 172.494549][ T6206] ___neigh_create+0x719/0x2390 [ 172.494761][ T6206] ip6_finish_output2+0x6d6/0x1410 [ 172.494851][ T6206] ? ip6_mtu+0x7d/0x490 [ 172.494938][ T6206] ? ip6_output+0x11e/0x540 [ 172.495047][ T6206] ip6_output+0x337/0x540 [ 172.495131][ T6206] ? __pfx_ip6_output+0x10/0x10 [ 172.495188][ T6206] ndisc_send_skb+0xcb2/0x1650 [ 172.495293][ T6206] ? ndisc_alloc_skb+0x1a6/0x480 [ 172.495399][ T6206] ? ndisc_send_skb+0x203/0x1650 [ 172.495502][ T6206] ? __pfx_ndisc_send_skb+0x10/0x10 [ 172.495606][ T6206] ? __pfx_dst_output+0x10/0x10 [ 172.495768][ T6206] ndisc_solicit+0x374/0x670 [ 172.495881][ T6206] ? __pfx_ndisc_solicit+0x10/0x10 [ 172.496026][ T6206] ? rt_write_unlock+0x19c/0x360 [ 172.496118][ T6206] ? rt_write_unlock+0x1a8/0x360 [ 172.496183][ T6206] ? __pfx_ndisc_solicit+0x10/0x10 [ 172.496281][ T6206] __neigh_event_send+0xeda/0x14a0 [ 172.496348][ T6206] ? __neigh_event_send+0x37/0x14a0 [ 172.496435][ T6206] neigh_resolve_output+0x1a0/0x740 [ 172.496515][ T6206] ? ip6_mtu+0x7d/0x490 [ 172.496603][ T6206] ? ip6_output+0x11e/0x540 [ 172.496677][ T6206] ip6_output+0x337/0x540 [ 172.496752][ T6206] ? __pfx_ip6_output+0x10/0x10 [ 172.496802][ T6206] ip6_xmit+0x117f/0x1a60 [ 172.496906][ T6206] ? ip6_xmit+0x273/0x1a60 [ 172.496988][ T6206] ? __pfx_ip6_xmit+0x10/0x10 [ 172.497065][ T6206] ? tcp_v6_send_synack+0x6a7/0xd60 [ 172.497161][ T6206] ? tcp_v6_send_synack+0x6a7/0xd60 [ 172.497202][ T6206] ? tcp_v6_send_synack+0x6a7/0xd60 [ 172.497280][ T6206] tcp_v6_send_synack+0x8bc/0xd60 [ 172.497343][ T6206] ? __pfx_tcp_v6_send_synack+0x10/0x10 [ 172.497458][ T6206] ? tcp_v6_route_req+0x385/0x4d0 [ 172.497594][ T6206] tcp_conn_request+0x255c/0x36c0 [ 172.497670][ T6206] ? check_path+0x21/0x40 [ 172.497846][ T6206] ? __pfx_tcp_conn_request+0x10/0x10 [ 172.497943][ T6206] ? __local_bh_disable_ip+0x3c/0x420 [ 172.498036][ T6206] ? __local_bh_disable_ip+0x3c/0x420 [ 172.498175][ T6206] ? tcp_v6_conn_request+0x231/0x3e0 [ 172.498269][ T6206] ? tcp_rcv_state_process+0x213/0x4980 [ 172.498336][ T6206] tcp_rcv_state_process+0x1aeb/0x4980 [ 172.498441][ T6206] ? sk_filter_trim_cap+0x192/0xd00 [ 172.498531][ T6206] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 172.498607][ T6206] ? sk_filter_trim_cap+0x908/0xd00 [ 172.498706][ T6206] tcp_v6_do_rcv+0xee2/0x1ba0 [ 172.498793][ T6206] tcp_v6_rcv+0x209c/0x2d90 [ 172.499037][ T6206] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 172.499164][ T6206] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 172.499242][ T6206] ip6_protocol_deliver_rcu+0xab9/0x1680 [ 172.499435][ T6206] ip6_input_finish+0x191/0x370 [ 172.499531][ T6206] NF_HOOK+0x336/0x3c0 [ 172.499618][ T6206] ? __pfx_ip6_input_finish+0x10/0x10 [ 172.499703][ T6206] ? NF_HOOK+0x9e/0x3c0 [ 172.499774][ T6206] ? __pfx_NF_HOOK+0x10/0x10 [ 172.499902][ T6206] ? __pfx_ip6_input_finish+0x10/0x10 [ 172.500029][ T6206] ip6_input+0x16a/0x270 [ 172.500105][ T6206] ? ip6_input+0x23/0x270 [ 172.500179][ T6206] NF_HOOK+0x336/0x3c0 [ 172.500275][ T6206] ? __pfx_sock_wfree+0x10/0x10 [ 172.500372][ T6206] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 172.500447][ T6206] ? NF_HOOK+0x9e/0x3c0 [ 172.500521][ T6206] ? __pfx_NF_HOOK+0x10/0x10 [ 172.500595][ T6206] ? ip6_rcv_core+0xa1/0x1870 [ 172.500682][ T6206] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 172.500796][ T6206] ? netif_receive_skb+0x102/0xbf0 [ 172.500905][ T6206] netif_receive_skb+0x278/0xbf0 [ 172.501024][ T6206] ? __pfx_netif_receive_skb+0x10/0x10 [ 172.501118][ T6206] ? rcu_is_watching+0x15/0xb0 [ 172.501194][ T6206] ? __local_bh_disable_ip+0x3c/0x420 [ 172.501290][ T6206] ? tun_rx_batched+0x194/0x760 [ 172.501346][ T6206] ? tun_rx_batched+0x194/0x760 [ 172.501410][ T6206] tun_rx_batched+0x1f1/0x760 [ 172.501480][ T6206] ? rcu_is_watching+0x15/0xb0 [ 172.501558][ T6206] ? __pfx_tun_rx_batched+0x10/0x10 [ 172.501674][ T6206] ? tun_get_user+0x26f8/0x4380 [ 172.501788][ T6206] ? tun_get_user+0x26f8/0x4380 [ 172.501890][ T6206] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 172.501975][ T6206] ? lockdep_hardirqs_on+0x7a/0x110 [ 172.502073][ T6206] tun_get_user+0x2b3b/0x4380 [ 172.502192][ T6206] ? tun_get_user+0x26f8/0x4380 [ 172.502353][ T6206] ? __pfx___schedule+0x10/0x10 [ 172.502416][ T6206] ? __resched_curr+0x23e/0x530 [ 172.502502][ T6206] ? __pfx_tun_get_user+0x10/0x10 [ 172.502609][ T6206] ? __lock_acquire+0x683/0x2ce0 [ 172.502736][ T6206] ? ref_tracker_alloc+0x353/0x4c0 [ 172.502814][ T6206] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 172.502880][ T6206] ? tun_get+0x1c/0x2f0 [ 172.502985][ T6206] ? tun_get+0x1c/0x2f0 [ 172.503135][ T6206] ? tun_get+0x1c/0x2f0 [ 172.503232][ T6206] ? tun_get+0x1c/0x2f0 [ 172.503354][ T6206] tun_chr_write_iter+0x119/0x200 [ 172.503462][ T6206] vfs_write+0x61e/0xbb0 [ 172.503579][ T6206] ? __pfx_vfs_write+0x10/0x10 [ 172.503699][ T6206] ? __fget_files+0x2a/0x420 [ 172.503804][ T6206] ksys_write+0x156/0x270 [ 172.503894][ T6206] ? __pfx_ksys_write+0x10/0x10 [ 172.504011][ T6206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.504087][ T6206] do_syscall_64+0x174/0x580 [ 172.504157][ T6206] ? trace_irq_disable+0x3b/0x140 [ 172.504222][ T6206] ? clear_bhb_loop+0x40/0x90 [ 172.504349][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.504439][ T6206] RIP: 0033:0x7f92f3dee7ce [ 172.504526][ T6206] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 172.504603][ T6206] RSP: 002b:00007f92f2085fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.504675][ T6206] RAX: ffffffffffffffda RBX: 00007f92f20866c0 RCX: 00007f92f3dee7ce [ 172.504727][ T6206] RDX: 000000000000004a RSI: 0000200000000300 RDI: 00000000000000c8 [ 172.504763][ T6206] RBP: 00007f92f3ec4ec4 R08: 0000000000000000 R09: 0000000000000000 [ 172.504806][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.504839][ T6206] R13: 00007f92f40b6038 R14: 00007f92f40b5fa0 R15: 00007ffc1106f478 [ 172.504953][ T6206] [ 172.594284][ T13] FAULT_INJECTION: forcing a failure. [ 172.594284][ T13] name failslab, interval 1, probability 1, space 0, times 20 [ 172.594405][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.594483][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.594525][ T13] Workqueue: events_unbound nsim_dev_trap_report_work [ 172.594629][ T13] Call Trace: [ 172.594652][ T13] [ 172.594683][ T13] dump_stack_lvl+0xe8/0x150 [ 172.594778][ T13] should_fail_ex+0x467/0x600 [ 172.594901][ T13] should_failslab+0xa8/0x100 [ 172.594978][ T13] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.595051][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 172.595117][ T13] ? __alloc_skb+0x1d7/0x7a0 [ 172.595202][ T13] __alloc_skb+0x1d7/0x7a0 [ 172.595288][ T13] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 172.595418][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 172.595496][ T13] process_scheduled_works+0xa8e/0x14e0 [ 172.595648][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.595704][ T13] ? assign_work+0x3cf/0x5d0 [ 172.595782][ T13] worker_thread+0xa47/0xfb0 [ 172.595960][ T13] kthread+0x388/0x470 [ 172.596048][ T13] ? __pfx_worker_thread+0x10/0x10 [ 172.596123][ T13] ? __pfx_kthread+0x10/0x10 [ 172.596220][ T13] ret_from_fork+0x514/0xb70 [ 172.596330][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 172.596421][ T13] ? __switch_to+0xc89/0x1420 [ 172.596515][ T13] ? __pfx_kthread+0x10/0x10 [ 172.596611][ T13] ret_from_fork_asm+0x1a/0x30 [ 172.596727][ T13] [ 172.643576][ T85] FAULT_INJECTION: forcing a failure. [ 172.643576][ T85] name failslab, interval 1, probability 1, space 0, times 18 [ 172.643679][ T85] CPU: 0 UID: 0 PID: 85 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.643746][ T85] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.643776][ T85] Workqueue: events_unbound nsim_dev_trap_report_work [ 172.643880][ T85] Call Trace: [ 172.643903][ T85] [ 172.643933][ T85] dump_stack_lvl+0xe8/0x150 [ 172.644028][ T85] should_fail_ex+0x467/0x600 [ 172.644136][ T85] should_failslab+0xa8/0x100 [ 172.644214][ T85] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.644300][ T85] ? __alloc_skb+0x1d7/0x7a0 [ 172.644364][ T85] ? __alloc_skb+0x1d7/0x7a0 [ 172.644441][ T85] __alloc_skb+0x1d7/0x7a0 [ 172.644526][ T85] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 172.644650][ T85] ? process_scheduled_works+0xa20/0x14e0 [ 172.644732][ T85] process_scheduled_works+0xa8e/0x14e0 [ 172.644853][ T85] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.644971][ T85] ? assign_work+0x3cf/0x5d0 [ 172.645071][ T85] worker_thread+0xa47/0xfb0 [ 172.645226][ T85] kthread+0x388/0x470 [ 172.645331][ T85] ? __pfx_worker_thread+0x10/0x10 [ 172.645416][ T85] ? __pfx_kthread+0x10/0x10 [ 172.645514][ T85] ret_from_fork+0x514/0xb70 [ 172.645622][ T85] ? __pfx_ret_from_fork+0x10/0x10 [ 172.645713][ T85] ? __switch_to+0xc89/0x1420 [ 172.645803][ T85] ? __pfx_kthread+0x10/0x10 [ 172.645900][ T85] ret_from_fork_asm+0x1a/0x30 [ 172.646001][ T85] [ 172.658124][ T85] FAULT_INJECTION: forcing a failure. [ 172.658124][ T85] name failslab, interval 1, probability 1, space 0, times 17 [ 172.658221][ T85] CPU: 0 UID: 0 PID: 85 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.658318][ T85] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.658362][ T85] Workqueue: events_unbound nsim_dev_trap_report_work [ 172.658428][ T85] Call Trace: [ 172.658458][ T85] [ 172.658481][ T85] dump_stack_lvl+0xe8/0x150 [ 172.658589][ T85] should_fail_ex+0x467/0x600 [ 172.658709][ T85] should_failslab+0xa8/0x100 [ 172.658781][ T85] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.658855][ T85] ? __alloc_skb+0x1d7/0x7a0 [ 172.658921][ T85] ? __alloc_skb+0x1d7/0x7a0 [ 172.658999][ T85] __alloc_skb+0x1d7/0x7a0 [ 172.659084][ T85] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 172.659213][ T85] ? process_scheduled_works+0xa20/0x14e0 [ 172.659301][ T85] process_scheduled_works+0xa8e/0x14e0 [ 172.659453][ T85] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.659553][ T85] ? assign_work+0x3cf/0x5d0 [ 172.659589][ T85] worker_thread+0xa47/0xfb0 [ 172.659771][ T85] kthread+0x388/0x470 [ 172.659830][ T85] ? __pfx_worker_thread+0x10/0x10 [ 172.659899][ T85] ? __pfx_kthread+0x10/0x10 [ 172.659990][ T85] ret_from_fork+0x514/0xb70 [ 172.660098][ T85] ? __pfx_ret_from_fork+0x10/0x10 [ 172.660195][ T85] ? __switch_to+0xc89/0x1420 [ 172.660294][ T85] ? __pfx_kthread+0x10/0x10 [ 172.660391][ T85] ret_from_fork_asm+0x1a/0x30 [ 172.660498][ T85] [ 172.687802][ T4954] FAULT_INJECTION: forcing a failure. [ 172.687802][ T4954] name failslab, interval 1, probability 1, space 0, times 15 [ 172.687906][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.687972][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.688015][ T4954] Call Trace: [ 172.688037][ T4954] [ 172.688060][ T4954] dump_stack_lvl+0xe8/0x150 [ 172.688169][ T4954] should_fail_ex+0x467/0x600 [ 172.688304][ T4954] should_failslab+0xa8/0x100 [ 172.688370][ T4954] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.688446][ T4954] ? __alloc_skb+0x1d7/0x7a0 [ 172.688517][ T4954] ? __alloc_skb+0x1d7/0x7a0 [ 172.688594][ T4954] __alloc_skb+0x1d7/0x7a0 [ 172.688670][ T4954] alloc_skb_with_frags+0xc6/0x760 [ 172.688735][ T4954] ? __lock_acquire+0x683/0x2ce0 [ 172.688832][ T4954] sock_alloc_send_pskb+0x884/0x9a0 [ 172.688959][ T4954] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 172.689054][ T4954] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 172.689161][ T4954] unix_dgram_sendmsg+0x4da/0x17b0 [ 172.689281][ T4954] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 172.689385][ T4954] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 172.689517][ T4954] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 172.689604][ T4954] sock_sendmsg_nosec+0x13a/0x180 [ 172.689721][ T4954] __sys_sendto+0x41e/0x5d0 [ 172.689786][ T4954] ? smack_privileged_cred+0x33c/0x380 [ 172.689911][ T4954] ? __pfx___sys_sendto+0x10/0x10 [ 172.690009][ T4954] ? __pfx___sys_connect+0x10/0x10 [ 172.690105][ T4954] ? rcu_is_watching+0x15/0xb0 [ 172.690203][ T4954] __x64_sys_sendto+0xde/0x100 [ 172.690280][ T4954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.690346][ T4954] do_syscall_64+0x174/0x580 [ 172.690431][ T4954] ? clear_bhb_loop+0x40/0x90 [ 172.690505][ T4954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.690570][ T4954] RIP: 0033:0x7f0cc0b26407 [ 172.690625][ T4954] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 172.690677][ T4954] RSP: 002b:00007ffde9b35bd0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 172.690742][ T4954] RAX: ffffffffffffffda RBX: 00007f0cc09d6c80 RCX: 00007f0cc0b26407 [ 172.690779][ T4954] RDX: 0000000000000052 RSI: 00007ffde9b35d10 RDI: 0000000000000003 [ 172.690813][ T4954] RBP: 00007ffde9b36140 R08: 0000000000000000 R09: 0000000000000000 [ 172.690853][ T4954] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffde9b36158 [ 172.690895][ T4954] R13: 00007ffde9b35d10 R14: 0000000000000037 R15: 00007ffde9b35d10 [ 172.690982][ T4954] [ 172.693391][ T37] audit: type=1800 audit(1785410218.942:45): pid=6216 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.130" name="product" dev="configfs" ino=10680 res=0 errno=0 [ 172.782575][ T85] FAULT_INJECTION: forcing a failure. [ 172.782575][ T85] name failslab, interval 1, probability 1, space 0, times 11 [ 172.782693][ T85] CPU: 0 UID: 0 PID: 85 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.782766][ T85] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.782815][ T85] Workqueue: events_unbound nsim_dev_trap_report_work [ 172.782934][ T85] Call Trace: [ 172.782967][ T85] [ 172.783001][ T85] dump_stack_lvl+0xe8/0x150 [ 172.783121][ T85] should_fail_ex+0x467/0x600 [ 172.783262][ T85] should_failslab+0xa8/0x100 [ 172.783358][ T85] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.783446][ T85] ? __alloc_skb+0x1d7/0x7a0 [ 172.783539][ T85] ? __alloc_skb+0x1d7/0x7a0 [ 172.783650][ T85] __alloc_skb+0x1d7/0x7a0 [ 172.783734][ T85] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 172.783874][ T85] ? process_scheduled_works+0xa20/0x14e0 [ 172.783960][ T85] process_scheduled_works+0xa8e/0x14e0 [ 172.784152][ T85] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.784268][ T85] ? assign_work+0x3cf/0x5d0 [ 172.784364][ T85] worker_thread+0xa47/0xfb0 [ 172.784534][ T85] kthread+0x388/0x470 [ 172.784637][ T85] ? __pfx_worker_thread+0x10/0x10 [ 172.784718][ T85] ? __pfx_kthread+0x10/0x10 [ 172.784837][ T85] ret_from_fork+0x514/0xb70 [ 172.784985][ T85] ? __pfx_ret_from_fork+0x10/0x10 [ 172.785083][ T85] ? __switch_to+0xc89/0x1420 [ 172.785202][ T85] ? __pfx_kthread+0x10/0x10 [ 172.785326][ T85] ret_from_fork_asm+0x1a/0x30 [ 172.785461][ T85] [ 172.883397][ T5736] usb usb42-port1: attempt power cycle [ 172.930246][ T67] FAULT_INJECTION: forcing a failure. [ 172.930246][ T67] name failslab, interval 1, probability 1, space 0, times 10 [ 172.930384][ T67] CPU: 0 UID: 0 PID: 67 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.930450][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.930492][ T67] Workqueue: events_unbound nsim_dev_trap_report_work [ 172.930598][ T67] Call Trace: [ 172.930620][ T67] [ 172.930643][ T67] dump_stack_lvl+0xe8/0x150 [ 172.930755][ T67] should_fail_ex+0x467/0x600 [ 172.930854][ T67] should_failslab+0xa8/0x100 [ 172.930934][ T67] kmem_cache_alloc_node_noprof+0xae/0x670 [ 172.930999][ T67] ? __alloc_skb+0x1d7/0x7a0 [ 172.931060][ T67] ? __alloc_skb+0x1d7/0x7a0 [ 172.931143][ T67] __alloc_skb+0x1d7/0x7a0 [ 172.931257][ T67] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 172.931388][ T67] ? process_scheduled_works+0xa20/0x14e0 [ 172.931489][ T67] process_scheduled_works+0xa8e/0x14e0 [ 172.931646][ T67] ? __pfx_process_scheduled_works+0x10/0x10 [ 172.931742][ T67] ? assign_work+0x3cf/0x5d0 [ 172.931839][ T67] worker_thread+0xa47/0xfb0 [ 172.931988][ T67] kthread+0x388/0x470 [ 172.932081][ T67] ? __pfx_worker_thread+0x10/0x10 [ 172.932145][ T67] ? __pfx_kthread+0x10/0x10 [ 172.932241][ T67] ret_from_fork+0x514/0xb70 [ 172.932348][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 172.932436][ T67] ? __switch_to+0xc89/0x1420 [ 172.932529][ T67] ? __pfx_kthread+0x10/0x10 [ 172.932623][ T67] ret_from_fork_asm+0x1a/0x30 [ 172.932731][ T67] [ 172.983399][ C0] FAULT_INJECTION: forcing a failure. [ 172.983399][ C0] name failslab, interval 1, probability 1, space 0, times 10 [ 172.983443][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 172.983470][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.983485][ C0] Call Trace: [ 172.983495][ C0] [ 172.983507][ C0] dump_stack_lvl+0xe8/0x150 [ 172.983551][ C0] should_fail_ex+0x467/0x600 [ 172.983596][ C0] should_failslab+0xa8/0x100 [ 172.983629][ C0] __kmalloc_noprof+0xfe/0x780 [ 172.983656][ C0] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 172.983693][ C0] ? cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 172.983736][ C0] cfg80211_inform_single_bss_data+0x986/0x1bf0 [ 172.983784][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 172.983839][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 172.983885][ C0] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 172.984053][ C0] cfg80211_inform_bss_data+0x25b/0x3d50 [ 172.984223][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 172.984319][ C0] ? ieee80211_rx_handlers+0x106/0xc8d0 [ 172.984415][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 172.984511][ C0] ? unwind_next_frame+0x8f/0x2550 [ 172.984598][ C0] ? try_to_take_rt_mutex+0x842/0xb00 [ 172.984680][ C0] ? __lock_acquire+0x683/0x2ce0 [ 172.984818][ C0] ? __lock_acquire+0x683/0x2ce0 [ 172.984903][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 172.984991][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 172.985097][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 172.985191][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 172.985296][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 172.985472][ C0] ? rt_spin_unlock+0x157/0x200 [ 172.985573][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 172.985663][ C0] ieee80211_scan_rx+0x552/0xa40 [ 172.985758][ C0] ieee80211_rx_list+0x2d23/0x3b40 [ 172.985913][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 172.985988][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 172.986117][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 172.986202][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 172.986317][ C0] ? reacquire_held_locks+0x104/0x190 [ 172.986433][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 172.986508][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 172.986594][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 172.986676][ C0] ? rt_spin_unlock+0x163/0x200 [ 172.986846][ C0] ? skb_dequeue+0x11a/0x150 [ 172.986942][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 172.987044][ C0] tasklet_action_common+0x31c/0x600 [ 172.987153][ C0] handle_softirqs+0x1d9/0x6c0 [ 172.987204][ C0] run_ktimerd+0x69/0x100 [ 172.987261][ C0] smpboot_thread_fn+0x57c/0xa80 [ 172.987337][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 172.987471][ C0] kthread+0x388/0x470 [ 172.987565][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 172.987639][ C0] ? __pfx_kthread+0x10/0x10 [ 172.987735][ C0] ret_from_fork+0x514/0xb70 [ 172.987835][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 172.987930][ C0] ? __switch_to+0xc89/0x1420 [ 172.988018][ C0] ? __pfx_kthread+0x10/0x10 [ 172.988115][ C0] ret_from_fork_asm+0x1a/0x30 [ 172.988228][ C0] [ 173.063740][ T5605] FAULT_INJECTION: forcing a failure. [ 173.063740][ T5605] name failslab, interval 1, probability 1, space 0, times 6 [ 173.063847][ T5605] CPU: 0 UID: 0 PID: 5605 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.063922][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.063965][ T5605] Call Trace: [ 173.063987][ T5605] [ 173.064009][ T5605] dump_stack_lvl+0xe8/0x150 [ 173.064116][ T5605] should_fail_ex+0x467/0x600 [ 173.064233][ T5605] should_failslab+0xa8/0x100 [ 173.064309][ T5605] __kmalloc_noprof+0xfe/0x780 [ 173.064370][ T5605] ? trace_kmem_cache_alloc+0x29/0xe0 [ 173.064426][ T5605] ? security_sk_alloc+0x52/0x360 [ 173.064498][ T5605] ? security_sk_alloc+0x52/0x360 [ 173.064601][ T5605] security_sk_alloc+0x52/0x360 [ 173.064668][ T5605] sk_prot_alloc+0x101/0x210 [ 173.064753][ T5605] sk_alloc+0x3a/0x390 [ 173.064830][ T5605] inet_create+0x7a9/0x1000 [ 173.064894][ T5605] ? inet_create+0x9d/0x1000 [ 173.064966][ T5605] __sock_create+0x4b3/0x9d0 [ 173.065085][ T5605] __sys_socket+0xd6/0x1b0 [ 173.065140][ T5605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.065216][ T5605] __x64_sys_socket+0x7a/0x90 [ 173.065280][ T5605] do_syscall_64+0x174/0x580 [ 173.065356][ T5605] ? trace_irq_disable+0x3b/0x140 [ 173.065443][ T5605] ? clear_bhb_loop+0x40/0x90 [ 173.065517][ T5605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.065579][ T5605] RIP: 0033:0x7f905366f807 [ 173.065632][ T5605] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.065679][ T5605] RSP: 002b:00007ffd9ab718a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 173.065737][ T5605] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f905366f807 [ 173.065788][ T5605] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 173.065821][ T5605] RBP: 00007ffd9ab71fac R08: 0000000000000000 R09: 0000000000000000 [ 173.065862][ T5605] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000016 [ 173.065903][ T5605] R13: 00000000000927c0 R14: 00000000000297c3 R15: 00007ffd9ab72000 [ 173.065989][ T5605] [ 173.186349][ C1] FAULT_INJECTION: forcing a failure. [ 173.186349][ C1] name failslab, interval 1, probability 1, space 0, times 4 [ 173.186384][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.186405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.186422][ C1] Call Trace: [ 173.186430][ C1] [ 173.186438][ C1] dump_stack_lvl+0xe8/0x150 [ 173.186473][ C1] should_fail_ex+0x467/0x600 [ 173.186509][ C1] should_failslab+0xa8/0x100 [ 173.186535][ C1] kmem_cache_alloc_node_noprof+0xae/0x670 [ 173.186558][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 173.186580][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 173.186605][ C1] __alloc_skb+0x1d7/0x7a0 [ 173.186630][ C1] skb_copy+0x19d/0x870 [ 173.186655][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 173.186683][ C1] mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 173.186729][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 173.186759][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 173.186798][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 173.186825][ C1] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 173.186857][ C1] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 173.186890][ C1] mac80211_hwsim_beacon_tx+0x396/0x820 [ 173.186920][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 173.186946][ C1] __iterate_interfaces+0x2af/0x5a0 [ 173.186967][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 173.186992][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 173.187019][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 173.187050][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 173.187081][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 173.187108][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 173.187137][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 173.187197][ C1] hrtimer_run_softirq+0x18f/0x260 [ 173.187231][ C1] handle_softirqs+0x1d9/0x6c0 [ 173.187267][ C1] run_ktimerd+0x69/0x100 [ 173.187293][ C1] smpboot_thread_fn+0x57c/0xa80 [ 173.187332][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 173.187366][ C1] kthread+0x388/0x470 [ 173.187396][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 173.187421][ C1] ? __pfx_kthread+0x10/0x10 [ 173.187452][ C1] ret_from_fork+0x514/0xb70 [ 173.187487][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 173.187517][ C1] ? __switch_to+0xc89/0x1420 [ 173.187547][ C1] ? __pfx_kthread+0x10/0x10 [ 173.187578][ C1] ret_from_fork_asm+0x1a/0x30 [ 173.187613][ C1] [ 173.217323][ C0] FAULT_INJECTION: forcing a failure. [ 173.217323][ C0] name failslab, interval 1, probability 1, space 0, times 3 [ 173.217440][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.217515][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.217564][ C0] Call Trace: [ 173.217595][ C0] [ 173.217626][ C0] dump_stack_lvl+0xe8/0x150 [ 173.217749][ C0] should_fail_ex+0x467/0x600 [ 173.217876][ C0] should_failslab+0xa8/0x100 [ 173.217952][ C0] kmem_cache_alloc_noprof+0xa4/0x650 [ 173.218037][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 173.218121][ C0] ? skb_clone+0x212/0x3a0 [ 173.218183][ C0] ? skb_clone+0x212/0x3a0 [ 173.218306][ C0] skb_clone+0x212/0x3a0 [ 173.218366][ C0] ? neigh_timer_handler+0xb25/0x12c0 [ 173.218458][ C0] neigh_timer_handler+0xb32/0x12c0 [ 173.218564][ C0] call_timer_fn+0x192/0x5e0 [ 173.218645][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 173.218717][ C0] ? call_timer_fn+0xd4/0x5e0 [ 173.218793][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 173.218918][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 173.218994][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 173.219068][ C0] __run_timer_base+0x67b/0x9b0 [ 173.219194][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 173.219282][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 173.219373][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 173.219468][ C0] run_timer_softirq+0xb7/0x170 [ 173.219543][ C0] handle_softirqs+0x1d9/0x6c0 [ 173.219667][ C0] run_ktimerd+0x69/0x100 [ 173.219770][ C0] smpboot_thread_fn+0x57c/0xa80 [ 173.219876][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 173.219985][ C0] kthread+0x388/0x470 [ 173.220069][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 173.220153][ C0] ? __pfx_kthread+0x10/0x10 [ 173.220253][ C0] ret_from_fork+0x514/0xb70 [ 173.220400][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 173.220497][ C0] ? __switch_to+0xc89/0x1420 [ 173.220594][ C0] ? __pfx_kthread+0x10/0x10 [ 173.220693][ C0] ret_from_fork_asm+0x1a/0x30 [ 173.220806][ C0] [ 173.308108][ T4965] FAULT_INJECTION: forcing a failure. [ 173.308108][ T4965] name failslab, interval 1, probability 1, space 0, times 1 [ 173.308214][ T4965] CPU: 0 UID: 0 PID: 4965 Comm: udevd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.308281][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.308330][ T4965] Call Trace: [ 173.308352][ T4965] [ 173.308381][ T4965] dump_stack_lvl+0xe8/0x150 [ 173.308498][ T4965] should_fail_ex+0x467/0x600 [ 173.308605][ T4965] should_failslab+0xa8/0x100 [ 173.308683][ T4965] kmem_cache_alloc_noprof+0xa4/0x650 [ 173.308729][ T4965] ? alloc_empty_file+0x5b/0x1d0 [ 173.308752][ T4965] ? alloc_empty_file+0x5b/0x1d0 [ 173.308781][ T4965] alloc_empty_file+0x5b/0x1d0 [ 173.308811][ T4965] path_openat+0x8f/0x3850 [ 173.308850][ T4965] ? kasan_save_track+0x3e/0x80 [ 173.308871][ T4965] ? __kasan_slab_alloc+0x6c/0x80 [ 173.308893][ T4965] ? kmem_cache_alloc_noprof+0x355/0x650 [ 173.308914][ T4965] ? do_getname+0x2e/0x250 [ 173.308950][ T4965] ? do_sys_openat2+0xcc/0x200 [ 173.308971][ T4965] ? __x64_sys_openat+0x138/0x170 [ 173.308993][ T4965] ? do_syscall_64+0x174/0x580 [ 173.309061][ T4965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.309177][ T4965] do_file_open+0x23e/0x4a0 [ 173.309258][ T4965] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.309331][ T4965] ? __pfx_do_file_open+0x10/0x10 [ 173.309510][ T4965] ? alloc_fd+0x654/0x6d0 [ 173.309595][ T4965] do_sys_openat2+0x115/0x200 [ 173.309668][ T4965] ? __pfx_do_sys_openat2+0x10/0x10 [ 173.309748][ T4965] ? rcu_is_watching+0x15/0xb0 [ 173.309836][ T4965] __x64_sys_openat+0x138/0x170 [ 173.309908][ T4965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.309972][ T4965] do_syscall_64+0x174/0x580 [ 173.310050][ T4965] ? clear_bhb_loop+0x40/0x90 [ 173.310125][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.310195][ T4965] RIP: 0033:0x7f7807284c3a [ 173.310232][ T4965] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 173.310286][ T4965] RSP: 002b:00007ffda8eccac8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 173.310357][ T4965] RAX: ffffffffffffffda RBX: 000056040e081a50 RCX: 00007f7807284c3a [ 173.310402][ T4965] RDX: 0000000000090800 RSI: 000056040dff9a30 RDI: 00000000ffffff9c [ 173.310439][ T4965] RBP: 000056040dff9a30 R08: 0000000000000000 R09: 0000000000000001 [ 173.310454][ T4965] R10: 0000000000000000 R11: 0000000000000206 R12: 000056040e00d7b0 [ 173.310490][ T4965] R13: 00000000000000ff R14: 0000560403bfdbe0 R15: 00007ffda8eccd50 [ 173.310583][ T4965] [ 175.203775][ T5736] usb usb42-port1: unable to enumerate USB device [ 175.227660][ T5716] usb usb40-port1: attempt power cycle [ 176.667467][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 176.667496][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'. [ 179.496549][ T5716] usb usb40-port1: unable to enumerate USB device [ 185.257695][ T5736] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 185.426794][ T5603] ffs_data_put(): freeing [ 185.590758][ T5736] usb 2-1: config 0 has no interfaces? [ 185.590798][ T5736] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 185.590824][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.687917][ T5736] usb 2-1: config 0 descriptor?? [ 185.960659][ T5716] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 185.968492][ T9] usb 2-1: USB disconnect, device number 3 [ 186.141959][ T5716] usb 3-1: not running at top speed; connect to a high speed hub [ 186.159091][ T5716] usb 3-1: New USB device found, idVendor=07c4, idProduct=a000, bcdDevice= 0.01 [ 186.159128][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.159154][ T5716] usb 3-1: Product: syz [ 186.159172][ T5716] usb 3-1: Manufacturer: syz [ 186.159191][ T5716] usb 3-1: SerialNumber: syz [ 186.282811][ T5716] ums-datafab 3-1:1.0: USB Mass Storage device detected [ 186.330207][ T5716] ums-datafab 3-1:1.0: This device (07c4,a000,0001 S 06 P f2) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 186.330207][ T5716] Please send a copy of this message to and [ 186.331779][ T5716] scsi host1: usb-storage 3-1:1.0 [ 186.473278][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 186.522320][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 186.526280][ T5621] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 186.569520][ T6238] dummy_hcd dummy_hcd.0: remove, state 4 [ 186.607874][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 186.629041][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.636121][ T6238] usb usb1: USB disconnect, device number 1 [ 186.851393][ T6251] CIFS: Attempting to mount //127.0.0.1/share [ 187.133339][ T831] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.137430][ T831] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.140848][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.141312][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.396831][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.427847][ T5621] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.434899][ T5621] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.468280][ T5621] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.498220][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.591185][ T5606] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 187.680017][ T5610] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 187.683177][ T5610] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 187.684241][ T5610] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 187.691534][ T5610] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 187.826249][ T85] scsi 1:0:0:0: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 188.059895][ T6238] dummy_hcd dummy_hcd.0: stopped [ 188.060373][ T6238] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 188.108117][ T85] scsi 1:0:0:1: Direct-Access Datafab MDCFE-B USB CF R 0001 PQ: 0 ANSI: 0 CCS [ 188.165301][ T6251] CIFS: VFS: cifs_mount failed w/return code = -112 [ 188.257560][ T6251] syz.1.142 (6251) used greatest stack depth: 16736 bytes left [ 188.451087][ T6246] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 188.451204][ T6246] dummy_hcd dummy_hcd.0: Dummy host controller [ 188.664589][ T6246] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 188.710910][ T36] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.730338][ T6246] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 188.730370][ T6246] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 188.730390][ T6246] usb usb1: Product: Dummy host controller [ 188.730407][ T6246] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 188.730424][ T6246] usb usb1: SerialNumber: dummy_hcd.0 [ 188.747317][ T5621] Bluetooth: hci1: command tx timeout [ 188.794469][ T66] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.887636][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 188.894228][ T36] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 188.894260][ T36] usb 2-1: config 0 has no interface number 0 [ 188.894374][ T36] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 188.894401][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.979988][ T36] usb 2-1: config 0 descriptor?? [ 189.194067][ T36] viperboard 2-1:0.143: version 0.00 found at bus 002 address 004 [ 189.249369][ T85] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 189.353935][ T6276] WARNING! power/level is deprecated; use power/control instead [ 189.581100][ T6246] hub 1-0:1.0: USB hub found [ 189.698436][ T5621] Bluetooth: hci3: command tx timeout [ 189.734039][ T6246] hub 1-0:1.0: 1 port detected [ 190.026552][ T5621] Bluetooth: hci4: command tx timeout [ 190.139489][ T36] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 190.139527][ T36] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 190.173634][ T85] sd 1:0:0:1: Attached scsi generic sg2 type 0 [ 190.282356][ T66] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.521529][ T36] usb 2-1: USB disconnect, device number 4 [ 190.817369][ T5621] Bluetooth: hci1: command tx timeout [ 191.121765][ T66] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.310733][ T6297] netlink: 'syz.2.146': attribute type 2 has an invalid length. [ 191.624105][ T6302] Config c/2 of g1 needs at least one function. [ 191.624258][ T6302] udc dummy_udc.0: failed to start g1: -22 [ 191.624282][ T6302] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 191.633094][ T6302] UDC core: g1: couldn't find an available UDC or it's busy [ 191.777322][ T5621] Bluetooth: hci3: command tx timeout [ 191.822733][ T66] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.980610][ T5736] usb 3-1: USB disconnect, device number 3 [ 192.055390][ T12] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 192.083495][ T68] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 192.109361][ T5621] Bluetooth: hci4: command tx timeout [ 192.121552][ T68] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 192.121922][ T68] sd 1:0:0:1: [sdc] Sense not available. [ 192.201898][ T68] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 192.201963][ T68] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 192.202955][ T12] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK [ 192.203017][ T12] sd 1:0:0:0: [sdb] Sense not available. [ 192.203136][ T12] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 192.203186][ T12] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 192.203337][ T12] sd 1:0:0:0: [sdb] Write Protect is off [ 192.205825][ T12] sd 1:0:0:0: [sdb] Asking for cache data failed [ 192.205877][ T12] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 192.221982][ T68] sd 1:0:0:1: [sdc] Test WP failed, assume Write Enabled [ 192.225025][ T68] sd 1:0:0:1: [sdc] Asking for cache data failed [ 192.225165][ T68] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 192.910754][ T5621] Bluetooth: hci1: command tx timeout [ 192.960774][ T6317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.144579][ T68] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 193.159107][ T12] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 193.291021][ T6038] sd 1:0:0:1: [sdc] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 193.858666][ T5621] Bluetooth: hci3: command tx timeout [ 194.188351][ T5621] Bluetooth: hci4: command tx timeout [ 194.519246][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.519333][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.981566][ T5621] Bluetooth: hci1: command tx timeout [ 195.937350][ T5621] Bluetooth: hci3: command tx timeout [ 196.261192][ T5621] Bluetooth: hci4: command tx timeout [ 196.370345][ T66] bridge_slave_1: left allmulticast mode [ 196.370534][ T66] bridge_slave_1: left promiscuous mode [ 196.380969][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.604015][ T66] bridge_slave_0: left allmulticast mode [ 196.604053][ T66] bridge_slave_0: left promiscuous mode [ 196.606966][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.059483][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.198497][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.245268][ T66] bond0 (unregistering): Released all slaves [ 201.087451][ T6343] ------------[ cut here ]------------ [ 201.087469][ T6343] dev->config->get_status(dev) [ 201.087514][ T6343] WARNING: drivers/virtio/virtio.c:378 at virtio_dev_remove+0x18b/0x1b0, CPU#1: syz.2.161/6343 [ 201.087558][ T6343] Modules linked in: [ 201.087606][ T6343] CPU: 1 UID: 0 PID: 6343 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 201.087633][ T6343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.087648][ T6343] RIP: 0010:virtio_dev_remove+0x18b/0x1b0 [ 201.087677][ T6343] Code: 4c 89 f7 2e 2e 2e 41 ff d3 0c 01 0f b6 f0 4c 89 f7 4d 89 fb 5b 41 5c 41 5d 41 5e 41 5f 5d 2e e9 cb 7e c1 1a e8 96 50 87 fc 90 <0f> 0b 90 e9 6e ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c c2 fe ff ff [ 201.087699][ T6343] RSP: 0018:ffffc900042d77d8 EFLAGS: 00010246 [ 201.087720][ T6343] RAX: ffffffff853e8a5a RBX: ffff88801ffb06d0 RCX: 0000000000080000 [ 201.087739][ T6343] RDX: ffffc90007042000 RSI: 000000000007ffff RDI: 0000000000080000 [ 201.087757][ T6343] RBP: 00000000000000ff R08: 0000000000000000 R09: 0000000000000000 [ 201.087773][ T6343] R10: dffffc0000000000 R11: ffffffff8540e710 R12: 1ffff11003ff60da [ 201.087793][ T6343] R13: dffffc0000000000 R14: ffff88801ffb0000 R15: ffffffff8bd67c98 [ 201.087812][ T6343] FS: 00007f38f7fb66c0(0000) GS:ffff888125d41000(0000) knlGS:0000000000000000 [ 201.087834][ T6343] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.087851][ T6343] CR2: 000056040e007ab0 CR3: 000000003e8c8000 CR4: 00000000003526f0 [ 201.087872][ T6343] Call Trace: [ 201.087882][ T6343] [ 201.087896][ T6343] ? __pfx_virtio_dev_remove+0x10/0x10 [ 201.087921][ T6343] device_release_driver_internal+0x48b/0x880 [ 201.087969][ T6343] bus_remove_device+0x449/0x560 [ 201.088004][ T6343] ? __pfx_bus_remove_device+0x10/0x10 [ 201.088033][ T6343] ? up_read+0x34/0x180 [ 201.088071][ T6343] ? kernfs_remove_by_name_ns+0x101/0x140 [ 201.088110][ T6343] device_del+0x528/0x8f0 [ 201.088155][ T6343] ? __pfx_device_del+0x10/0x10 [ 201.088198][ T6343] device_unregister+0x21/0xf0 [ 201.088232][ T6343] unregister_virtio_device+0x37/0x60 [ 201.088271][ T6343] virtio_pci_remove+0x7f/0xf0 [ 201.088307][ T6343] pci_device_remove+0x99/0x1c0 [ 201.088345][ T6343] ? __pfx_pci_device_remove+0x10/0x10 [ 201.088370][ T6343] device_release_driver_internal+0x48b/0x880 [ 201.088415][ T6343] pci_stop_bus_device+0xf6/0x120 [ 201.088453][ T6343] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 201.088488][ T6343] remove_store+0xe5/0x150 [ 201.088526][ T6343] ? __pfx_remove_store+0x10/0x10 [ 201.088563][ T6343] ? sysfs_file_kobj+0x1e4/0x230 [ 201.088601][ T6343] ? sysfs_kf_write+0x166/0x260 [ 201.088630][ T6343] ? __pfx_sysfs_kf_write+0x10/0x10 [ 201.088652][ T6343] kernfs_fop_write_iter+0x3a5/0x540 [ 201.088693][ T6343] vfs_write+0x61e/0xbb0 [ 201.088737][ T6343] ? __pfx_vfs_write+0x10/0x10 [ 201.088772][ T6343] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 201.088804][ T6343] ? lockdep_hardirqs_on+0x7a/0x110 [ 201.088837][ T6343] ? mutex_lock_nested+0x152/0x1d0 [ 201.088874][ T6343] ? fdget_pos+0x252/0x320 [ 201.088912][ T6343] ksys_write+0x156/0x270 [ 201.088948][ T6343] ? __pfx_ksys_write+0x10/0x10 [ 201.089010][ T6343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.089040][ T6343] do_syscall_64+0x174/0x580 [ 201.089069][ T6343] ? trace_irq_disable+0x3b/0x140 [ 201.089094][ T6343] ? clear_bhb_loop+0x40/0x90 [ 201.089126][ T6343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.089151][ T6343] RIP: 0033:0x7f38f9d5df99 [ 201.089195][ T6343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.089217][ T6343] RSP: 002b:00007f38f7fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 201.089242][ T6343] RAX: ffffffffffffffda RBX: 00007f38f9fe5fa0 RCX: 00007f38f9d5df99 [ 201.089261][ T6343] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004 [ 201.089279][ T6343] RBP: 00007f38f9df4ec4 R08: 0000000000000000 R09: 0000000000000000 [ 201.089295][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.089311][ T6343] R13: 00007f38f9fe6038 R14: 00007f38f9fe5fa0 R15: 00007ffcf6c92408 [ 201.089358][ T6343] [ 201.089371][ T6343] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 201.089390][ T6343] CPU: 1 UID: 0 PID: 6343 Comm: syz.2.161 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 201.089417][ T6343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.089432][ T6343] Call Trace: [ 201.089443][ T6343] [ 201.089453][ T6343] vpanic+0x56c/0xa60 [ 201.089480][ T6343] ? __pfx__printk+0x10/0x10 [ 201.089510][ T6343] ? __pfx_vpanic+0x10/0x10 [ 201.089533][ T6343] ? is_bpf_text_address+0x292/0x2b0 [ 201.089563][ T6343] ? is_bpf_text_address+0x26/0x2b0 [ 201.089621][ T6343] panic+0xc5/0xd0 [ 201.089645][ T6343] ? __pfx_panic+0x10/0x10 [ 201.089702][ T6343] __warn+0x315/0x4c0 [ 201.089726][ T6343] ? virtio_dev_remove+0x18b/0x1b0 [ 201.089756][ T6343] ? virtio_dev_remove+0x18b/0x1b0 [ 201.089779][ T6343] __report_bug+0x276/0x570 [ 201.089809][ T6343] ? do_syscall_64+0x174/0x580 [ 201.089836][ T6343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.089866][ T6343] ? virtio_dev_remove+0x18b/0x1b0 [ 201.089894][ T6343] ? __pfx___report_bug+0x10/0x10 [ 201.089944][ T6343] ? virtio_dev_remove+0x18b/0x1b0 [ 201.089968][ T6343] report_bug+0x16a/0x220 [ 201.090020][ T6343] ? virtio_dev_remove+0x18b/0x1b0 [ 201.090042][ T6343] ? virtio_dev_remove+0x18d/0x1b0 [ 201.090065][ T6343] handle_bug+0x9c/0x200 [ 201.090097][ T6343] exc_invalid_op+0x1a/0x50 [ 201.090129][ T6343] asm_exc_invalid_op+0x1a/0x20 [ 201.090152][ T6343] RIP: 0010:virtio_dev_remove+0x18b/0x1b0 [ 201.090176][ T6343] Code: 4c 89 f7 2e 2e 2e 41 ff d3 0c 01 0f b6 f0 4c 89 f7 4d 89 fb 5b 41 5c 41 5d 41 5e 41 5f 5d 2e e9 cb 7e c1 1a e8 96 50 87 fc 90 <0f> 0b 90 e9 6e ff ff ff 44 89 e9 80 e1 07 38 c1 0f 8c c2 fe ff ff [ 201.090196][ T6343] RSP: 0018:ffffc900042d77d8 EFLAGS: 00010246 [ 201.090217][ T6343] RAX: ffffffff853e8a5a RBX: ffff88801ffb06d0 RCX: 0000000000080000 [ 201.090235][ T6343] RDX: ffffc90007042000 RSI: 000000000007ffff RDI: 0000000000080000 [ 201.090251][ T6343] RBP: 00000000000000ff R08: 0000000000000000 R09: 0000000000000000 [ 201.090266][ T6343] R10: dffffc0000000000 R11: ffffffff8540e710 R12: 1ffff11003ff60da [ 201.090285][ T6343] R13: dffffc0000000000 R14: ffff88801ffb0000 R15: ffffffff8bd67c98 [ 201.090309][ T6343] ? __pfx_vp_get_status+0x10/0x10 [ 201.090349][ T6343] ? virtio_dev_remove+0x18a/0x1b0 [ 201.090381][ T6343] ? virtio_dev_remove+0x18a/0x1b0 [ 201.090406][ T6343] ? __pfx_virtio_dev_remove+0x10/0x10 [ 201.090428][ T6343] device_release_driver_internal+0x48b/0x880 [ 201.090470][ T6343] bus_remove_device+0x449/0x560 [ 201.090505][ T6343] ? __pfx_bus_remove_device+0x10/0x10 [ 201.090534][ T6343] ? up_read+0x34/0x180 [ 201.090570][ T6343] ? kernfs_remove_by_name_ns+0x101/0x140 [ 201.090608][ T6343] device_del+0x528/0x8f0 [ 201.090651][ T6343] ? __pfx_device_del+0x10/0x10 [ 201.090696][ T6343] device_unregister+0x21/0xf0 [ 201.090731][ T6343] unregister_virtio_device+0x37/0x60 [ 201.090770][ T6343] virtio_pci_remove+0x7f/0xf0 [ 201.090805][ T6343] pci_device_remove+0x99/0x1c0 [ 201.090833][ T6343] ? __pfx_pci_device_remove+0x10/0x10 [ 201.090858][ T6343] device_release_driver_internal+0x48b/0x880 [ 201.090901][ T6343] pci_stop_bus_device+0xf6/0x120 [ 201.090946][ T6343] pci_stop_and_remove_bus_device_locked+0x77/0xb0 [ 201.090981][ T6343] remove_store+0xe5/0x150 [ 201.091019][ T6343] ? __pfx_remove_store+0x10/0x10 [ 201.091055][ T6343] ? sysfs_file_kobj+0x1e4/0x230 [ 201.091102][ T6343] ? sysfs_kf_write+0x166/0x260 [ 201.091130][ T6343] ? __pfx_sysfs_kf_write+0x10/0x10 [ 201.091151][ T6343] kernfs_fop_write_iter+0x3a5/0x540 [ 201.091194][ T6343] vfs_write+0x61e/0xbb0 [ 201.091236][ T6343] ? __pfx_vfs_write+0x10/0x10 [ 201.091271][ T6343] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 201.091302][ T6343] ? lockdep_hardirqs_on+0x7a/0x110 [ 201.091341][ T6343] ? mutex_lock_nested+0x152/0x1d0 [ 201.091377][ T6343] ? fdget_pos+0x252/0x320 [ 201.091415][ T6343] ksys_write+0x156/0x270 [ 201.091449][ T6343] ? __pfx_ksys_write+0x10/0x10 [ 201.091492][ T6343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.091521][ T6343] do_syscall_64+0x174/0x580 [ 201.091549][ T6343] ? trace_irq_disable+0x3b/0x140 [ 201.091575][ T6343] ? clear_bhb_loop+0x40/0x90 [ 201.091606][ T6343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.091630][ T6343] RIP: 0033:0x7f38f9d5df99 [ 201.091653][ T6343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.091674][ T6343] RSP: 002b:00007f38f7fb6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 201.091697][ T6343] RAX: ffffffffffffffda RBX: 00007f38f9fe5fa0 RCX: 00007f38f9d5df99 [ 201.091715][ T6343] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004 [ 201.091731][ T6343] RBP: 00007f38f9df4ec4 R08: 0000000000000000 R09: 0000000000000000 [ 201.091746][ T6343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.091761][ T6343] R13: 00007f38f9fe6038 R14: 00007f38f9fe5fa0 R15: 00007ffcf6c92408 [ 201.091801][ T6343] [ 201.092415][ T6343] Kernel Offset: disabled