last executing test programs: 36.575348432s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 36.505905502s ago: executing program 0 (id=1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x40204706, &(0x7f0000000200)="0100"/32) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="010000000000000000000000010000000100000001000000000000002000000020000000010000000100"/76) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xf9) 36.494137624s ago: executing program 3 (id=6): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) 35.341069031s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='e:my_read_msr1 msr/read_msr\n', 0x1c) write(r0, &(0x7f0000000140)='e:my_read_msr2 msr/read_msr\n', 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/msr/read_msr/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/eprobes/my_read_msr1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/eprobes/my_read_msr2/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1\n', 0x2) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) pread64(r4, &(0x7f0000000340)=""/8, 0x8, 0x10) 34.921847083s ago: executing program 2 (id=8): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8fd53e", 0x8, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x100, 0x1004}}}}}}, 0x0) 34.88613414s ago: executing program 0 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000400)={0x1, 0x1}) 34.736346676s ago: executing program 1 (id=2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x40204706, &(0x7f0000000200)="0100"/32) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="010000000000000000000000010000000100000001000000000000002000000020000000010000000100"/76) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000241)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000242)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000243)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000244)=0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000245)=0xf9) 34.599741219s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000360)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000420)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') symlinkat(&(0x7f0000000460)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000004a0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='usbip-vudc.0\x00', 0xc) close(r2) nanosleep(&(0x7f0000000540)={0x0, 0x5f5e100}, 0x0) r3 = syz_open_dev$video(&(0x7f0000000580), 0x10, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000600)={0x8000004}) close(r3) 34.527976567s ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_hcd.0\x00', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/devices/dummy_hcd.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='fsl-ehci\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/fsl-ehci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='dummy_hcd.0\x00', 0xc) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='dummy_udc.0\x00', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/platform/devices/dummy_udc.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000c00)='fsl-ehci\x00', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/platform/drivers/fsl-ehci/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000e00)='dummy_udc.0\x00', 0xc) close(r5) 33.701717789s ago: executing program 4 (id=5): mkdir(&(0x7f0000000040)='nfsd_mnt\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000080)='nfsd_mnt\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='nfsd_mnt/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+3\n-4\n\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='nfsd_mnt/portlist\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='nfsd_mnt/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\n\x00', 0x2) close(r2) 33.529881401s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/serial8250/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='serial8250\x00', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='bdc\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='serial8250\x00', 0xb) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='snd_aloop.0\x00', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/snd_aloop.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000340)='bdc\x00', 0x4) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) write(r5, &(0x7f00000003c0)='snd_aloop.0\x00', 0xc) close(r5) 33.337549614s ago: executing program 0 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./configfs\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./configfs\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./configfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='usb_gadget/g1/functions/mass_storage.0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f00000000c0)='usb_gadget/g1/functions/mass_storage.0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='usb_gadget/g1/configs/c.1/mass_storage.0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='dummy_udc.0\x00', 0xb) write(r0, &(0x7f0000000200)='\n\x00', 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='usb_gadget/g1/configs/c.1/mass_storage.0\x00', 0x0) rmdir(&(0x7f00000000c0)='usb_gadget/g1/functions/mass_storage.0\x00') 33.12213406s ago: executing program 3 (id=14): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396ba", 0x37}, {&(0x7f0000000400)}], 0x2}}, {{0x0, 0x0, &(0x7f0000001800)}}], 0x2, 0x40) close(r2) 33.049264436s ago: executing program 0 (id=15): socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x23, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 32.927826933s ago: executing program 3 (id=16): socket(0x200000000000011, 0x2, 0x0) close(0xffffffffffffffff) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x7, 0x101080) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) socket$inet6(0x10, 0x3, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) socket$packet(0x11, 0x2, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r3, 0xc008aec1, 0x0) 32.730939535s ago: executing program 0 (id=17): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c844) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 32.706258556s ago: executing program 2 (id=18): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000001100)="0200"/128, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./my_configfs/dlm/cluster1/toss_secs\x00', 0x2, 0x0) write(r3, &(0x7f0000001300)='1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) write(r4, &(0x7f0000001500)='1\x00', 0x2) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) 32.664875633s ago: executing program 1 (id=19): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x12, 0x14, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x2000000000000) 32.636193378s ago: executing program 3 (id=20): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e0240000007050e02400000070501024000000705030240000007058d0240000007050d02400000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000400)='\x00'/10, 0xa) close(r0) 32.619814288s ago: executing program 4 (id=21): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 32.492605401s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@cgroup, 0x11, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write(r0, &(0x7f0000000140)='10', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='100\x00', 0x3) close(r0) socket$packet(0x11, 0x3, 0x300) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x7919, &(0x7f0000000280)={0x0, 0x9e86, 0x80000, 0x2, 0x133}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r4 = io_uring_setup(0x2b2, &(0x7f0000000500)={0x0, 0x2e8a1, 0x800, 0x0, 0xfb, 0x0, r3}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(0xffffffffffffffff, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {&(0x7f00000004c0)=[{0x2, 0x6, 0xc, 0x1}], 0x1, 0x28, 0x0, 0x2}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg\x00', 0x6bf1c2d5adba8c32}) 32.47201158s ago: executing program 1 (id=23): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/target/core/rd_mcp_0/dev0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='rd_pages=8', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='1', 0x1) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) symlink(&(0x7f0000000e00)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000f00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/virtual_lun\x00') openat(0xffffffffffffff9c, &(0x7f0000001300)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0/alua_tg_pt_write_md\x00', 0x302, 0x0) 31.662510616s ago: executing program 4 (id=24): mkdir(&(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/xhci-hcd/xhci_handle_port_status/inject\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='busnum=1 portnum=2 portsc=0xfffffffe\n\x00', 0x26) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000600), 0x1000) 31.532073777s ago: executing program 4 (id=25): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='0x1d6b', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='0x0104', 0x6) close(r1) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='fedcba9876543210', 0x10) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000c00)='Linux Foundation', 0x10) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f0000000e00)='Loopback Gadget', 0xf) close(r4) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000001200)='Conf 1', 0x6) close(r5) mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000001300)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000001400)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc) close(r6) mkdir(&(0x7f0000001700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001900)) r7 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r7, &(0x7f0000001b00)='3', 0x1) write(r7, &(0x7f0000001c00)='4', 0x1) write(r7, &(0x7f0000001d00)='5', 0x1) write(r7, &(0x7f0000001e00)='6', 0x1) close(r7) nanosleep(&(0x7f0000001f00)={0x0, 0x989680}, 0x0) 31.170472664s ago: executing program 2 (id=26): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 31.116885839s ago: executing program 1 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='file drivers/tty/n_gsm.c +p\n\x00', 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000900)=0x15) ioctl(r1, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a000000000000004000000040000000010000000100"/76) ioctl(r1, 0x40204706, &(0x7f0000000b00)="0100"/32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c20)=0x3f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c40)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c40)=0x1c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c50)=0xf9) nanosleep(&(0x7f0000000d00)={0x0, 0xbebc200}, 0x0) 14.507672964s ago: executing program 32 (id=17): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c844) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 14.379732973s ago: executing program 33 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='file drivers/tty/n_gsm.c +p\n\x00', 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000900)=0x15) ioctl(r1, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a000000000000004000000040000000010000000100"/76) ioctl(r1, 0x40204706, &(0x7f0000000b00)="0100"/32) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c20)=0x3f) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c40)=0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c40)=0x1c) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000c50)=0xf9) nanosleep(&(0x7f0000000d00)={0x0, 0xbebc200}, 0x0) 14.332612508s ago: executing program 34 (id=26): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x50}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 14.283822551s ago: executing program 35 (id=20): syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500000102000109023c00010100a03209040000060000000007058e0240000007050e02400000070501024000000705030240000007058d0240000007050d02400000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000400)='\x00'/10, 0xa) close(r0) 14.21994956s ago: executing program 36 (id=25): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='0x1d6b', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='0x0104', 0x6) close(r1) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='fedcba9876543210', 0x10) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000c00)='Linux Foundation', 0x10) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f0000000e00)='Loopback Gadget', 0xf) close(r4) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000001200)='Conf 1', 0x6) close(r5) mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000001300)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000001400)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc) close(r6) mkdir(&(0x7f0000001700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001900)) r7 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r7, &(0x7f0000001b00)='3', 0x1) write(r7, &(0x7f0000001c00)='4', 0x1) write(r7, &(0x7f0000001d00)='5', 0x1) write(r7, &(0x7f0000001e00)='6', 0x1) close(r7) nanosleep(&(0x7f0000001f00)={0x0, 0x989680}, 0x0) 1.299107199s ago: executing program 9 (id=35): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) 1.109688188s ago: executing program 7 (id=30): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904000002ff0000000705010200020007058202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0), &(0x7f0000000140)) (async) syz_usb_control_io(r0, &(0x7f0000000240), &(0x7f0000000340)) (async) syz_usb_control_io(r0, &(0x7f0000000400), &(0x7f0000000440)) (async) syz_usb_control_io(r0, &(0x7f0000000500), &(0x7f0000000540)) (async) syz_usb_control_io(r0, &(0x7f0000000600), &(0x7f0000000640)) (async) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x800) ioctl$FE_GET_FRONTEND(r1, 0x80246f4d, &(0x7f0000000200)) 1.099111232s ago: executing program 9 (id=36): mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) 952.150295ms ago: executing program 8 (id=31): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca0701a80000010200010902270001010080fa0904000003ff000000070501020002000705810200020007058602000200"], 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000100), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000200)={0x100, 0x0, 0x2, 0x11, 0x1}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000300)={0x100, {}, 0x0, 0x1}) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) syz_usb_ep_write(r0, 0x86, 0xb0, &(0x7f0000000400)="4700001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004700001000"/264) 930.008322ms ago: executing program 9 (id=37): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000001100)="0200"/128, 0x80) 868.263464ms ago: executing program 6 (id=29): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x40204706, &(0x7f0000000200)="0100"/32) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="010000000000000000000000010000000100000001000000000000002000000020000000010000000100"/76) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000241)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000242)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000243)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000244)=0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000245)=0xf9) 780.221591ms ago: executing program 9 (id=38): mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='fi', 0x2) 515.661212ms ago: executing program 5 (id=28): r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/fsl-ehci/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='dummy_hcd.0\x00', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/bus/platform/drivers/fsl-ehci/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000e00)='dummy_udc.0\x00', 0xc) close(r1) 161.666919ms ago: executing program 5 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x6, 0x1, 0xff82}, {0x0, 0x9, 0x78, 0x4, 0x6, 0x0, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x7, r2, 0x1b}, 0x80, &(0x7f0000000f80)=[{&(0x7f00000004c0)="4af0d8209d1ded42caaa3a3ac5f19e31fb1bd27d77f461a95fe496d348159e02f8a736db32ebd8771bb92d47290bff14a2b3ff2b5eca40350700000099c5fc65604d7451d71f177d7d688424b273ed542a80a8bc33b0b429dbfd375450f56e2b83a34b8d1e2d572a4b0407bb734e04df7c5a597db6ca1ce271a332f9", 0x7c}], 0x1}, 0x20000015) 156.256721ms ago: executing program 9 (id=40): openat(0xffffffffffffff9c, &(0x7f0000001200)='./my_configfs/dlm/cluster1/toss_secs\x00', 0x2, 0x0) 0s ago: executing program 9 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='proc\x00', &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/mtrr\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='base=0x200000 size=0x100000 type=write-combining\n\x00', 0x31) write(r0, &(0x7f0000000300)='base=0x0 size=0x400000 type=write-combining\n\x00', 0x2c) kernel console output (not intermixed with test programs): a40 [ 74.293641][ T4964] [ 74.293899][ T4964] FAULT_INJECTION: forcing a failure. [ 74.293899][ T4964] name failslab, interval 1, probability 10, space 0, times 39 [ 74.298168][ T1154] CPU: 1 UID: 0 PID: 1154 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 74.298187][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.298196][ T1154] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.298218][ T1154] Call Trace: [ 74.298223][ T1154] [ 74.298229][ T1154] dump_stack_lvl+0x100/0x190 [ 74.298248][ T1154] should_fail_ex.cold+0x5/0xa [ 74.298267][ T1154] should_failslab+0xc2/0x120 [ 74.298287][ T1154] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.298307][ T1154] ? __alloc_skb+0x140/0x710 [ 74.298328][ T1154] __alloc_skb+0x140/0x710 [ 74.298344][ T1154] ? __alloc_skb+0x5b7/0x710 [ 74.298360][ T1154] ? __pfx___alloc_skb+0x10/0x10 [ 74.298380][ T1154] ? kfree_skbmem+0x19f/0x210 [ 74.298405][ T1154] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.298433][ T1154] process_one_work+0xa23/0x1940 [ 74.298460][ T1154] ? __pfx_process_one_work+0x10/0x10 [ 74.298484][ T1154] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.298505][ T1154] worker_thread+0x5ef/0xe50 [ 74.298527][ T1154] ? __pfx_worker_thread+0x10/0x10 [ 74.298545][ T1154] ? kthread+0x13a/0x450 [ 74.298558][ T1154] ? __pfx_worker_thread+0x10/0x10 [ 74.298574][ T1154] kthread+0x370/0x450 [ 74.298588][ T1154] ? __pfx_kthread+0x10/0x10 [ 74.298604][ T1154] ret_from_fork+0x72b/0xd50 [ 74.298627][ T1154] ? __pfx_ret_from_fork+0x10/0x10 [ 74.298649][ T1154] ? __switch_to+0x800/0x10f0 [ 74.298665][ T1154] ? __pfx_kthread+0x10/0x10 [ 74.298682][ T1154] ret_from_fork_asm+0x1a/0x30 [ 74.298714][ T1154] [ 74.298798][ T46] CPU: 1 UID: 0 PID: 46 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 74.298818][ T46] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.298829][ T46] Workqueue: usb_hub_wq hub_event [ 74.298851][ T46] Call Trace: [ 74.298856][ T46] [ 74.298867][ T46] dump_stack_lvl+0x100/0x190 [ 74.298887][ T46] should_fail_ex.cold+0x5/0xa [ 74.298907][ T46] should_failslab+0xc2/0x120 [ 74.298928][ T46] __kmalloc_noprof+0xfc/0x820 [ 74.298949][ T46] ? usb_alloc_urb+0x66/0xa0 [ 74.298977][ T46] usb_alloc_urb+0x66/0xa0 [ 74.299000][ T46] usb_control_msg+0x1d3/0x4b0 [ 74.299018][ T46] ? __pfx_usb_control_msg+0x10/0x10 [ 74.299034][ T46] ? __pfx_down_read+0x10/0x10 [ 74.299057][ T46] ? kasan_quarantine_put+0x104/0x240 [ 74.299078][ T46] hub_port_reset+0x294/0x1bd0 [ 74.299105][ T46] ? __pfx_hub_port_reset+0x10/0x10 [ 74.299126][ T46] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.299151][ T46] hub_port_init+0x6c8/0x37f0 [ 74.299179][ T46] hub_event+0x2e7d/0x4a60 [ 74.299219][ T46] ? __pfx_hub_event+0x10/0x10 [ 74.299238][ T46] ? debug_object_deactivate+0x2e4/0x3b0 [ 74.299270][ T46] ? rcu_is_watching+0x12/0xc0 [ 74.299297][ T46] process_one_work+0xa23/0x1940 [ 74.299324][ T46] ? __pfx_process_one_work+0x10/0x10 [ 74.299348][ T46] ? __pfx_hub_event+0x10/0x10 [ 74.299369][ T46] worker_thread+0x5ef/0xe50 [ 74.299395][ T46] ? kthread+0x13a/0x450 [ 74.299409][ T46] ? __pfx_worker_thread+0x10/0x10 [ 74.299425][ T46] kthread+0x370/0x450 [ 74.299439][ T46] ? __pfx_kthread+0x10/0x10 [ 74.299456][ T46] ret_from_fork+0x72b/0xd50 [ 74.299479][ T46] ? __pfx_ret_from_fork+0x10/0x10 [ 74.299502][ T46] ? __switch_to+0x800/0x10f0 [ 74.299519][ T46] ? __pfx_kthread+0x10/0x10 [ 74.299536][ T46] ret_from_fork_asm+0x1a/0x30 [ 74.299570][ T46] [ 74.299588][ T46] usb usb4-port1: cannot reset (err = -12) [ 74.304108][ T81] FAULT_INJECTION: forcing a failure. [ 74.304108][ T81] name failslab, interval 1, probability 10, space 0, times 37 [ 74.308753][ T5875] FAULT_INJECTION: forcing a failure. [ 74.308753][ T5875] name failslab, interval 1, probability 10, space 0, times 36 [ 74.313384][ T81] CPU: 0 UID: 0 PID: 81 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 74.313406][ T81] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.313416][ T81] Workqueue: events_unbound cfg80211_wiphy_work [ 74.313442][ T81] Call Trace: [ 74.313448][ T81] [ 74.313454][ T81] dump_stack_lvl+0x100/0x190 [ 74.313475][ T81] should_fail_ex.cold+0x5/0xa [ 74.313495][ T81] should_failslab+0xc2/0x120 [ 74.313516][ T81] __kmalloc_noprof+0xfc/0x820 [ 74.313538][ T81] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.313567][ T81] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.313593][ T81] ? kasan_save_stack+0x3f/0x50 [ 74.313611][ T81] ? kasan_save_stack+0x30/0x50 [ 74.313628][ T81] ? __kasan_kmalloc+0xaa/0xb0 [ 74.313644][ T81] ? __kmalloc_noprof+0x322/0x820 [ 74.313664][ T81] ? lock_acquire+0x1b9/0x370 [ 74.313684][ T81] ? find_held_lock+0x2b/0x80 [ 74.313707][ T81] ? __kfree_rcu_sheaf+0x195/0x730 [ 74.313725][ T81] ? __kfree_rcu_sheaf+0x195/0x730 [ 74.313744][ T81] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 74.313774][ T81] ? kvfree_call_rcu+0x1be/0x4f0 [ 74.313801][ T81] ? __asan_memcpy+0x3c/0x60 [ 74.313819][ T81] ieee80211_inform_bss+0x159/0x1170 [ 74.313844][ T81] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.313871][ T81] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 74.313894][ T81] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.313916][ T81] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 74.313937][ T81] ? unwind_next_frame+0x3be/0x2090 [ 74.313958][ T81] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 74.313978][ T81] ? ret_from_fork_asm+0x1a/0x30 [ 74.314014][ T81] ? stack_trace_save+0x8e/0xc0 [ 74.314032][ T81] ? __pfx_stack_trace_save+0x10/0x10 [ 74.314052][ T81] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 74.314071][ T81] cfg80211_inform_bss_data+0x230/0x3b60 [ 74.314092][ T81] ? __kmalloc_noprof+0x322/0x820 [ 74.314108][ T81] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.314131][ T81] ? cfg80211_wiphy_work+0x2b7/0x550 [ 74.314150][ T81] ? process_one_work+0xa23/0x1940 [ 74.314166][ T81] ? worker_thread+0x5ef/0xe50 [ 74.314181][ T81] ? kthread+0x370/0x450 [ 74.314195][ T81] ? ret_from_fork+0x72b/0xd50 [ 74.314215][ T81] ? ret_from_fork_asm+0x1a/0x30 [ 74.314241][ T81] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 74.314267][ T81] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.314287][ T81] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 74.314314][ T81] ? __lock_acquire+0x49f/0x1a40 [ 74.314333][ T81] ? __lock_acquire+0x49f/0x1a40 [ 74.314359][ T81] ? __lock_acquire+0x49f/0x1a40 [ 74.314382][ T81] ? find_held_lock+0x2b/0x80 [ 74.314405][ T81] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.314426][ T81] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.314455][ T81] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 74.314481][ T81] ieee80211_bss_info_update+0x310/0xab0 [ 74.314505][ T81] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 74.314534][ T81] ? rcu_is_watching+0x12/0xc0 [ 74.314558][ T81] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 74.314578][ T81] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 74.314603][ T81] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 74.314636][ T81] ieee80211_iface_work+0xa9a/0x1070 [ 74.314663][ T81] cfg80211_wiphy_work+0x2b7/0x550 [ 74.314687][ T81] process_one_work+0xa23/0x1940 [ 74.314713][ T81] ? __pfx_process_one_work+0x10/0x10 [ 74.314736][ T81] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 74.314760][ T81] worker_thread+0x5ef/0xe50 [ 74.314784][ T81] ? kthread+0x13a/0x450 [ 74.314798][ T81] ? __pfx_worker_thread+0x10/0x10 [ 74.314813][ T81] kthread+0x370/0x450 [ 74.314827][ T81] ? __pfx_kthread+0x10/0x10 [ 74.314843][ T81] ret_from_fork+0x72b/0xd50 [ 74.314865][ T81] ? __pfx_ret_from_fork+0x10/0x10 [ 74.314888][ T81] ? __switch_to+0x800/0x10f0 [ 74.314904][ T81] ? __pfx_kthread+0x10/0x10 [ 74.314920][ T81] ret_from_fork_asm+0x1a/0x30 [ 74.314952][ T81] [ 74.315090][ T5871] FAULT_INJECTION: forcing a failure. [ 74.315090][ T5871] name failslab, interval 1, probability 10, space 0, times 35 [ 74.318363][ T60] CPU: 1 UID: 0 PID: 60 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 74.318381][ T60] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.318392][ T60] Workqueue: bat_events batadv_mcast_mla_update [ 74.318416][ T60] Call Trace: [ 74.318421][ T60] [ 74.318427][ T60] dump_stack_lvl+0x100/0x190 [ 74.318446][ T60] should_fail_ex.cold+0x5/0xa [ 74.318466][ T60] should_failslab+0xc2/0x120 [ 74.318485][ T60] __kmalloc_cache_noprof+0x91/0x6c0 [ 74.318510][ T60] ? batadv_mcast_mla_update+0x1ed5/0x3200 [ 74.318536][ T60] batadv_mcast_mla_update+0x1ed5/0x3200 [ 74.318564][ T60] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 74.318590][ T60] ? debug_object_deactivate+0x2e4/0x3b0 [ 74.318619][ T60] ? rcu_is_watching+0x12/0xc0 [ 74.318645][ T60] process_one_work+0xa23/0x1940 [ 74.318670][ T60] ? __pfx_process_one_work+0x10/0x10 [ 74.318694][ T60] ? __pfx_batadv_mcast_mla_update+0x10/0x10 [ 74.318718][ T60] worker_thread+0x5ef/0xe50 [ 74.318740][ T60] ? __pfx_worker_thread+0x10/0x10 [ 74.318758][ T60] ? kthread+0x13a/0x450 [ 74.318771][ T60] ? __pfx_worker_thread+0x10/0x10 [ 74.318786][ T60] kthread+0x370/0x450 [ 74.318800][ T60] ? __pfx_kthread+0x10/0x10 [ 74.318816][ T60] ret_from_fork+0x72b/0xd50 [ 74.318838][ T60] ? __pfx_ret_from_fork+0x10/0x10 [ 74.318861][ T60] ? __switch_to+0x800/0x10f0 [ 74.318881][ T60] ? __pfx_kthread+0x10/0x10 [ 74.318897][ T60] ret_from_fork_asm+0x1a/0x30 [ 74.318929][ T60] [ 74.318976][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 74.318996][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.319004][ T5858] Call Trace: [ 74.319009][ T5858] [ 74.319015][ T5858] dump_stack_lvl+0x100/0x190 [ 74.319035][ T5858] should_fail_ex.cold+0x5/0xa [ 74.319055][ T5858] should_failslab+0xc2/0x120 [ 74.319075][ T5858] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.319095][ T5858] ? __alloc_skb+0x140/0x710 [ 74.319117][ T5858] __alloc_skb+0x140/0x710 [ 74.319134][ T5858] ? __alloc_skb+0x5b7/0x710 [ 74.319151][ T5858] ? __pfx___alloc_skb+0x10/0x10 [ 74.319169][ T5858] ? if_nlmsg_size+0x4b/0xd80 [ 74.319194][ T5858] rtmsg_ifinfo_build_skb+0x81/0x260 [ 74.319221][ T5858] rtnetlink_event+0x137/0x1f0 [ 74.319245][ T5858] notifier_call_chain+0x99/0x3f0 [ 74.319266][ T5858] call_netdevice_notifiers_info+0xbe/0x110 [ 74.319290][ T5858] netdev_compute_master_upper_features+0x7d4/0xa50 [ 74.319318][ T5858] ? __pfx_netdev_compute_master_upper_features+0x10/0x10 [ 74.319346][ T5858] __bond_release_one.cold+0x4ed/0x104c [ 74.319374][ T5858] ? netlink_broadcast_filtered+0x40d/0xf20 [ 74.319399][ T5858] ? __pfx___bond_release_one+0x10/0x10 [ 74.319418][ T5858] ? __lock_acquire+0x49f/0x1a40 [ 74.319450][ T5858] ? validate_linkmsg+0x57c/0xba0 [ 74.319473][ T5858] ? __pfx_bond_release+0x10/0x10 [ 74.319487][ T5858] do_set_master+0x172/0x730 [ 74.319509][ T5858] do_setlink.isra.0+0xb2b/0x3e60 [ 74.319532][ T5858] ? stack_trace_save+0x8e/0xc0 [ 74.319551][ T5858] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 74.319575][ T5858] ? __lock_acquire+0x49f/0x1a40 [ 74.319602][ T5858] ? lock_acquire+0x1b9/0x370 [ 74.319624][ T5858] ? rcu_is_watching+0x12/0xc0 [ 74.319647][ T5858] ? trace_contention_end+0x126/0x160 [ 74.319668][ T5858] ? __mutex_lock+0x26d/0x1bd0 [ 74.319686][ T5858] ? rtnl_newlink+0x8bb/0x2380 [ 74.319710][ T5858] ? __pfx___mutex_lock+0x10/0x10 [ 74.319728][ T5858] ? rcu_is_watching+0x12/0xc0 [ 74.319751][ T5858] ? cap_capable+0x107/0x430 [ 74.319787][ T5858] rtnl_newlink+0x1b7e/0x2380 [ 74.319815][ T5858] ? __pfx_rtnl_newlink+0x10/0x10 [ 74.319834][ T5858] ? find_held_lock+0x2b/0x80 [ 74.319857][ T5858] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 74.319880][ T5858] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 74.319902][ T5858] ? avc_has_perm_noaudit+0x145/0x3b0 [ 74.319926][ T5858] ? __lock_acquire+0x49f/0x1a40 [ 74.319955][ T5858] ? find_held_lock+0x2b/0x80 [ 74.319978][ T5858] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 74.319998][ T5858] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 74.320020][ T5858] ? __pfx_rtnl_newlink+0x10/0x10 [ 74.320041][ T5858] rtnetlink_rcv_msg+0x95e/0xe90 [ 74.320063][ T5858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.320090][ T5858] ? ref_tracker_free+0x37e/0x6c0 [ 74.320115][ T5858] netlink_rcv_skb+0x159/0x420 [ 74.320131][ T5858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.320153][ T5858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 74.320177][ T5858] ? netlink_deliver_tap+0x1ae/0xcc0 [ 74.320206][ T5858] netlink_unicast+0x585/0x850 [ 74.320224][ T5858] ? __pfx_netlink_unicast+0x10/0x10 [ 74.320247][ T5858] netlink_sendmsg+0x8b0/0xda0 [ 74.320266][ T5858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.320284][ T5858] ? selinux_socket_sendmsg+0x198/0x2f0 [ 74.320311][ T5858] ____sys_sendmsg+0xa4d/0xbe0 [ 74.320334][ T5858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.320351][ T5858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.320384][ T5858] ___sys_sendmsg+0x190/0x1e0 [ 74.320410][ T5858] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.320433][ T5858] ? __lock_acquire+0x49f/0x1a40 [ 74.320476][ T5858] __sys_sendmsg+0x160/0x210 [ 74.320496][ T5858] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.320527][ T5858] do_syscall_64+0x115/0x870 [ 74.320544][ T5858] ? clear_bhb_loop+0x40/0x90 [ 74.320564][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.320581][ T5858] RIP: 0033:0x7f4f16b9df99 [ 74.320594][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.320610][ T5858] RSP: 002b:00007f4f17a64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.320624][ T5858] RAX: ffffffffffffffda RBX: 00007f4f16e25fa0 RCX: 00007f4f16b9df99 [ 74.320635][ T5858] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 74.320644][ T5858] RBP: 00007f4f16c34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 74.320653][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.320663][ T5858] R13: 00007f4f16e26038 R14: 00007f4f16e25fa0 R15: 00007ffc75379818 [ 74.320684][ T5858] [ 74.321852][ T5865] FAULT_INJECTION: forcing a failure. [ 74.321852][ T5865] name failslab, interval 1, probability 10, space 0, times 34 [ 74.322995][ T1009] FAULT_INJECTION: forcing a failure. [ 74.322995][ T1009] name failslab, interval 1, probability 10, space 0, times 33 [ 74.328124][ T5875] CPU: 1 UID: 0 PID: 5875 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 74.328146][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.328155][ T5875] Call Trace: [ 74.328161][ T5875] [ 74.328168][ T5875] dump_stack_lvl+0x100/0x190 [ 74.328193][ T5875] should_fail_ex.cold+0x5/0xa [ 74.328210][ T5875] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 74.328238][ T5875] should_failslab+0xc2/0x120 [ 74.328259][ T5875] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.328279][ T5875] ? skb_clone+0x190/0x400 [ 74.328303][ T5875] skb_clone+0x190/0x400 [ 74.328324][ T5875] netlink_deliver_tap+0xaed/0xcc0 [ 74.328354][ T5875] netlink_unicast+0x62b/0x850 [ 74.328374][ T5875] ? __pfx_netlink_unicast+0x10/0x10 [ 74.328401][ T5875] netlink_sendmsg+0x8b0/0xda0 [ 74.328421][ T5875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.328439][ T5875] ? selinux_socket_sendmsg+0x198/0x2f0 [ 74.328465][ T5875] ____sys_sendmsg+0xa4d/0xbe0 [ 74.328487][ T5875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.328505][ T5875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.328531][ T5875] ? kasan_quarantine_put+0x104/0x240 [ 74.328551][ T5875] ? find_held_lock+0x2b/0x80 [ 74.328578][ T5875] ___sys_sendmsg+0x190/0x1e0 [ 74.328603][ T5875] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.328626][ T5875] ? __lock_acquire+0x49f/0x1a40 [ 74.328671][ T5875] __sys_sendmsg+0x160/0x210 [ 74.328691][ T5875] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.328709][ T5875] ? kcov_ioctl+0x17a/0x750 [ 74.328739][ T5875] do_syscall_64+0x115/0x870 [ 74.328756][ T5875] ? clear_bhb_loop+0x40/0x90 [ 74.328775][ T5875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.328792][ T5875] RIP: 0033:0x7f4f16b9df99 [ 74.328806][ T5875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.328821][ T5875] RSP: 002b:00007f4f17a01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.328836][ T5875] RAX: ffffffffffffffda RBX: 00007f4f16e26270 RCX: 00007f4f16b9df99 [ 74.328847][ T5875] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 74.328856][ T5875] RBP: 00007f4f16c34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 74.328877][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.328887][ T5875] R13: 00007f4f16e26308 R14: 00007f4f16e26270 R15: 00007ffc75379818 [ 74.328909][ T5875] [ 74.328983][ T5858] FAULT_INJECTION: forcing a failure. [ 74.328983][ T5858] name failslab, interval 1, probability 10, space 0, times 31 [ 74.332592][ T1009] CPU: 0 UID: 0 PID: 1009 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 74.332612][ T1009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.332623][ T1009] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.332643][ T1009] Call Trace: [ 74.332648][ T1009] [ 74.332653][ T1009] dump_stack_lvl+0x100/0x190 [ 74.332673][ T1009] should_fail_ex.cold+0x5/0xa [ 74.332691][ T1009] should_failslab+0xc2/0x120 [ 74.332710][ T1009] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.332729][ T1009] ? __alloc_skb+0x140/0x710 [ 74.332749][ T1009] __alloc_skb+0x140/0x710 [ 74.332764][ T1009] ? __alloc_skb+0x5b7/0x710 [ 74.332780][ T1009] ? __pfx___alloc_skb+0x10/0x10 [ 74.332798][ T1009] ? kfree_skbmem+0x19f/0x210 [ 74.332823][ T1009] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.332850][ T1009] process_one_work+0xa23/0x1940 [ 74.332875][ T1009] ? __pfx_process_one_work+0x10/0x10 [ 74.332897][ T1009] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.332918][ T1009] worker_thread+0x5ef/0xe50 [ 74.332942][ T1009] ? kthread+0x13a/0x450 [ 74.332955][ T1009] ? __pfx_worker_thread+0x10/0x10 [ 74.332969][ T1009] kthread+0x370/0x450 [ 74.332982][ T1009] ? __pfx_kthread+0x10/0x10 [ 74.332997][ T1009] ret_from_fork+0x72b/0xd50 [ 74.333019][ T1009] ? __pfx_ret_from_fork+0x10/0x10 [ 74.333040][ T1009] ? __switch_to+0x800/0x10f0 [ 74.333055][ T1009] ? __pfx_kthread+0x10/0x10 [ 74.333070][ T1009] ret_from_fork_asm+0x1a/0x30 [ 74.333102][ T1009] [ 74.333604][ T5718] CPU: 0 UID: 0 PID: 5718 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 74.333623][ T5718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.333634][ T5718] Workqueue: mld mld_dad_work [ 74.333656][ T5718] Call Trace: [ 74.333661][ T5718] [ 74.333667][ T5718] dump_stack_lvl+0x100/0x190 [ 74.333687][ T5718] should_fail_ex.cold+0x5/0xa [ 74.333706][ T5718] should_failslab+0xc2/0x120 [ 74.333726][ T5718] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.333745][ T5718] ? dst_alloc+0x99/0x1a0 [ 74.333764][ T5718] ? __pfx_ip6_dst_gc+0x10/0x10 [ 74.333787][ T5718] dst_alloc+0x99/0x1a0 [ 74.333806][ T5718] icmp6_dst_alloc+0x79/0x4f0 [ 74.333829][ T5718] mld_sendpack+0x5ae/0xec0 [ 74.333853][ T5718] ? __pfx_mld_sendpack+0x10/0x10 [ 74.333884][ T5718] mld_send_initial_cr+0x219/0x320 [ 74.333907][ T5718] mld_dad_work+0x32/0x1f0 [ 74.333927][ T5718] process_one_work+0xa23/0x1940 [ 74.333953][ T5718] ? __pfx_process_one_work+0x10/0x10 [ 74.333977][ T5718] ? __pfx_mld_dad_work+0x10/0x10 [ 74.333999][ T5718] worker_thread+0x5ef/0xe50 [ 74.334022][ T5718] ? __pfx_worker_thread+0x10/0x10 [ 74.334040][ T5718] ? kthread+0x13a/0x450 [ 74.334053][ T5718] ? __pfx_worker_thread+0x10/0x10 [ 74.334069][ T5718] kthread+0x370/0x450 [ 74.334083][ T5718] ? __pfx_kthread+0x10/0x10 [ 74.334099][ T5718] ret_from_fork+0x72b/0xd50 [ 74.334121][ T5718] ? __pfx_ret_from_fork+0x10/0x10 [ 74.334144][ T5718] ? __switch_to+0x800/0x10f0 [ 74.334160][ T5718] ? __pfx_kthread+0x10/0x10 [ 74.334176][ T5718] ret_from_fork_asm+0x1a/0x30 [ 74.334209][ T5718] [ 74.334493][ T4964] CPU: 0 UID: 0 PID: 4964 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 74.334511][ T4964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.334520][ T4964] Call Trace: [ 74.334525][ T4964] [ 74.334530][ T4964] dump_stack_lvl+0x100/0x190 [ 74.334550][ T4964] should_fail_ex.cold+0x5/0xa [ 74.334568][ T4964] should_failslab+0xc2/0x120 [ 74.334588][ T4964] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.334604][ T4964] ? d_instantiate+0x8a/0xb0 [ 74.334626][ T4964] ? d_instantiate+0x8a/0xb0 [ 74.334644][ T4964] ? alloc_empty_file+0x5b/0x1c0 [ 74.334667][ T4964] alloc_empty_file+0x5b/0x1c0 [ 74.334687][ T4964] alloc_file_pseudo+0x183/0x290 [ 74.334708][ T4964] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 74.334728][ T4964] ? alloc_fd+0x471/0x7a0 [ 74.334747][ T4964] sock_alloc_file+0x50/0x210 [ 74.334768][ T4964] __sys_socket+0x1c0/0x260 [ 74.334783][ T4964] ? __pfx___sys_socket+0x10/0x10 [ 74.334804][ T4964] __x64_sys_socket+0x72/0xb0 [ 74.334818][ T4964] ? lockdep_hardirqs_on+0x78/0x100 [ 74.334836][ T4964] do_syscall_64+0x115/0x870 [ 74.334852][ T4964] ? clear_bhb_loop+0x40/0x90 [ 74.334871][ T4964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.334886][ T4964] RIP: 0033:0x7fee818cd707 [ 74.334900][ T4964] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 74.334914][ T4964] RSP: 002b:00007ffde518c918 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 74.334928][ T4964] RAX: ffffffffffffffda RBX: 0000000000000053 RCX: 00007fee818cd707 [ 74.334939][ T4964] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 74.334948][ T4964] RBP: 00007fee81959560 R08: 0000000000000000 R09: 0000000000000000 [ 74.334957][ T4964] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 74.334966][ T4964] R13: 00007ffde518ca40 R14: 0000000000000038 R15: 00007ffde518ca40 [ 74.334985][ T4964] [ 74.335137][ T4964] FAULT_INJECTION: forcing a failure. [ 74.335137][ T4964] name failslab, interval 1, probability 10, space 0, times 28 [ 74.338414][ T5870] CPU: 1 UID: 0 PID: 5870 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 74.338437][ T5870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.338448][ T5870] Call Trace: [ 74.338454][ T5870] [ 74.338461][ T5870] dump_stack_lvl+0x100/0x190 [ 74.338485][ T5870] should_fail_ex.cold+0x5/0xa [ 74.338506][ T5870] should_failslab+0xc2/0x120 [ 74.338529][ T5870] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.338548][ T5870] ? trace_kmem_cache_alloc+0xdd/0x100 [ 74.338568][ T5870] ? security_file_alloc+0x34/0x2c0 [ 74.338588][ T5870] security_file_alloc+0x34/0x2c0 [ 74.338604][ T5870] init_file+0x95/0x480 [ 74.338624][ T5870] alloc_empty_file+0x79/0x1c0 [ 74.338644][ T5870] alloc_file_pseudo+0x183/0x290 [ 74.338664][ T5870] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 74.338685][ T5870] ? alloc_fd+0x471/0x7a0 [ 74.338706][ T5870] sock_alloc_file+0x50/0x210 [ 74.338728][ T5870] __sys_socket+0x1c0/0x260 [ 74.338744][ T5870] ? __pfx___sys_socket+0x10/0x10 [ 74.338765][ T5870] __x64_sys_socket+0x72/0xb0 [ 74.338779][ T5870] ? lockdep_hardirqs_on+0x78/0x100 [ 74.338797][ T5870] do_syscall_64+0x115/0x870 [ 74.338814][ T5870] ? clear_bhb_loop+0x40/0x90 [ 74.338833][ T5870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.338850][ T5870] RIP: 0033:0x7fea1959df99 [ 74.338875][ T5870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.338891][ T5870] RSP: 002b:00007fea1a4db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 74.338907][ T5870] RAX: ffffffffffffffda RBX: 00007fea19825fa0 RCX: 00007fea1959df99 [ 74.338918][ T5870] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 74.338928][ T5870] RBP: 00007fea19634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 74.338938][ T5870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.338948][ T5870] R13: 00007fea19826038 R14: 00007fea19825fa0 R15: 00007ffcb7b50318 [ 74.338970][ T5870] [ 74.339902][ T5876] FAULT_INJECTION: forcing a failure. [ 74.339902][ T5876] name failslab, interval 1, probability 10, space 0, times 27 [ 74.344496][ T5874] CPU: 0 UID: 0 PID: 5874 Comm: syz.4.21 Not tainted syzkaller #0 PREEMPT(full) [ 74.344519][ T5874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.344529][ T5874] Call Trace: [ 74.344534][ T5874] [ 74.344541][ T5874] dump_stack_lvl+0x100/0x190 [ 74.344565][ T5874] should_fail_ex.cold+0x5/0xa [ 74.344585][ T5874] should_failslab+0xc2/0x120 [ 74.344607][ T5874] __kmalloc_noprof+0xfc/0x820 [ 74.344627][ T5874] ? sk_prot_alloc+0x10b/0x2a0 [ 74.344653][ T5874] sk_prot_alloc+0x10b/0x2a0 [ 74.344677][ T5874] sk_alloc+0x36/0xe80 [ 74.344696][ T5874] __netlink_create+0x5e/0x2c0 [ 74.344717][ T5874] ? __wake_up+0x3f/0x60 [ 74.344735][ T5874] netlink_create+0x29b/0x610 [ 74.344757][ T5874] ? __pfx_nfnetlink_bind+0x10/0x10 [ 74.344777][ T5874] ? __pfx_nfnetlink_unbind+0x10/0x10 [ 74.344800][ T5874] __sock_create+0x339/0x860 [ 74.344827][ T5874] __sys_socket+0x14d/0x260 [ 74.344841][ T5874] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 74.344858][ T5874] ? __pfx___sys_socket+0x10/0x10 [ 74.344874][ T5874] ? kcov_ioctl+0x17a/0x750 [ 74.344896][ T5874] __x64_sys_socket+0x72/0xb0 [ 74.344910][ T5874] ? lockdep_hardirqs_on+0x78/0x100 [ 74.344928][ T5874] do_syscall_64+0x115/0x870 [ 74.344944][ T5874] ? clear_bhb_loop+0x40/0x90 [ 74.344964][ T5874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.344980][ T5874] RIP: 0033:0x7ff18b19df99 [ 74.344994][ T5874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.345009][ T5874] RSP: 002b:00007ff18c066028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 74.345025][ T5874] RAX: ffffffffffffffda RBX: 00007ff18b426090 RCX: 00007ff18b19df99 [ 74.345035][ T5874] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 74.345044][ T5874] RBP: 00007ff18b234ec4 R08: 0000000000000000 R09: 0000000000000000 [ 74.345053][ T5874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.345063][ T5874] R13: 00007ff18b426128 R14: 00007ff18b426090 R15: 00007ffc75ba57b8 [ 74.345084][ T5874] [ 74.345262][ T1009] FAULT_INJECTION: forcing a failure. [ 74.345262][ T1009] name failslab, interval 1, probability 10, space 0, times 26 [ 74.348878][ T5865] CPU: 1 UID: 0 PID: 5865 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) [ 74.348899][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.348909][ T5865] Call Trace: [ 74.348915][ T5865] [ 74.348922][ T5865] dump_stack_lvl+0x100/0x190 [ 74.348945][ T5865] should_fail_ex.cold+0x5/0xa [ 74.348965][ T5865] should_failslab+0xc2/0x120 [ 74.348987][ T5865] __kmalloc_noprof+0xfc/0x820 [ 74.349005][ T5865] ? tomoyo_encode2+0xfb/0x3c0 [ 74.349025][ T5865] tomoyo_encode2+0xfb/0x3c0 [ 74.349043][ T5865] tomoyo_encode+0x29/0x50 [ 74.349057][ T5865] tomoyo_realpath_from_path+0x18c/0x690 [ 74.349078][ T5865] tomoyo_path_number_perm+0x23c/0x580 [ 74.349100][ T5865] ? tomoyo_path_number_perm+0x22e/0x580 [ 74.349123][ T5865] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 74.349167][ T5865] ? find_held_lock+0x2b/0x80 [ 74.349190][ T5865] ? __fget_files+0x215/0x3d0 [ 74.349206][ T5865] ? hook_file_ioctl_common+0x140/0x440 [ 74.349223][ T5865] ? __fget_files+0x215/0x3d0 [ 74.349243][ T5865] ? __fget_files+0x21f/0x3d0 [ 74.349263][ T5865] security_file_ioctl+0xd3/0x230 [ 74.349288][ T5865] __x64_sys_ioctl+0xb7/0x210 [ 74.349316][ T5865] do_syscall_64+0x115/0x870 [ 74.349334][ T5865] ? clear_bhb_loop+0x40/0x90 [ 74.349353][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.349371][ T5865] RIP: 0033:0x7fddf8f9dc2b [ 74.349385][ T5865] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 74.349399][ T5865] RSP: 002b:00007fddf71f3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.349414][ T5865] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fddf8f9dc2b [ 74.349424][ T5865] RDX: 00007fddf71f4fd0 RSI: 0000000080085502 RDI: 0000000000000003 [ 74.349433][ T5865] RBP: 00007fddf71f4fd0 R08: 0000000000000040 R09: 00007fddf71f3fc8 [ 74.349443][ T5865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 74.349453][ T5865] R13: 0000000800000000 R14: 0000000000000012 R15: 00007fddf90536d4 [ 74.349474][ T5865] [ 74.349490][ T5865] ERROR: Out of memory at tomoyo_realpath_from_path. [ 74.368499][ T1009] CPU: 0 UID: 0 PID: 1009 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 74.368525][ T1009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.368536][ T1009] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.368563][ T1009] Call Trace: [ 74.368569][ T1009] [ 74.368576][ T1009] dump_stack_lvl+0x100/0x190 [ 74.368599][ T1009] should_fail_ex.cold+0x5/0xa [ 74.368621][ T1009] should_failslab+0xc2/0x120 [ 74.368643][ T1009] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.368665][ T1009] ? __alloc_skb+0x140/0x710 [ 74.368689][ T1009] __alloc_skb+0x140/0x710 [ 74.368705][ T1009] ? __alloc_skb+0x5b7/0x710 [ 74.368722][ T1009] ? __pfx___alloc_skb+0x10/0x10 [ 74.368742][ T1009] ? kfree_skbmem+0x19f/0x210 [ 74.368768][ T1009] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.368797][ T1009] process_one_work+0xa23/0x1940 [ 74.368823][ T1009] ? __pfx_process_one_work+0x10/0x10 [ 74.368846][ T1009] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.368868][ T1009] worker_thread+0x5ef/0xe50 [ 74.368893][ T1009] ? kthread+0x13a/0x450 [ 74.368907][ T1009] ? __pfx_worker_thread+0x10/0x10 [ 74.368923][ T1009] kthread+0x370/0x450 [ 74.368937][ T1009] ? __pfx_kthread+0x10/0x10 [ 74.368954][ T1009] ret_from_fork+0x72b/0xd50 [ 74.368976][ T1009] ? __pfx_ret_from_fork+0x10/0x10 [ 74.368999][ T1009] ? __switch_to+0x800/0x10f0 [ 74.369015][ T1009] ? __pfx_kthread+0x10/0x10 [ 74.369031][ T1009] ret_from_fork_asm+0x1a/0x30 [ 74.369064][ T1009] [ 74.369845][ T5873] CPU: 0 UID: 0 PID: 5873 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 74.369869][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.369879][ T5873] Call Trace: [ 74.369886][ T5873] [ 74.369892][ T5873] dump_stack_lvl+0x100/0x190 [ 74.369917][ T5873] should_fail_ex.cold+0x5/0xa [ 74.369938][ T5873] should_failslab+0xc2/0x120 [ 74.369960][ T5873] __kvmalloc_node_noprof+0x116/0x970 [ 74.369979][ T5873] ? __kvmalloc_node_noprof+0x36d/0x970 [ 74.369998][ T5873] ? io_alloc_cache_init+0x38/0x170 [ 74.370021][ T5873] io_alloc_cache_init+0x38/0x170 [ 74.370040][ T5873] io_rsrc_cache_init+0x26/0x50 [ 74.370057][ T5873] io_uring_setup.cold+0x4c0/0x1cae [ 74.370083][ T5873] ? __pfx_io_uring_setup+0x10/0x10 [ 74.370105][ T5873] ? find_held_lock+0x2b/0x80 [ 74.370129][ T5873] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 74.370147][ T5873] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 74.370177][ T5873] ? xfd_validate_state+0x129/0x190 [ 74.370204][ T5873] __x64_sys_io_uring_setup+0xc2/0x170 [ 74.370229][ T5873] do_syscall_64+0x115/0x870 [ 74.370247][ T5873] ? clear_bhb_loop+0x40/0x90 [ 74.370266][ T5873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.370283][ T5873] RIP: 0033:0x7fea1959df99 [ 74.370296][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.370311][ T5873] RSP: 002b:00007fea1a4b9fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 74.370328][ T5873] RAX: ffffffffffffffda RBX: 0000200000000280 RCX: 00007fea1959df99 [ 74.370340][ T5873] RDX: 0000200000000340 RSI: 0000200000000280 RDI: 0000000000007919 [ 74.370351][ T5873] RBP: 00007fea19634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 74.370366][ T5873] R10: 0000200000000380 R11: 0000000000000206 R12: 0000200000000340 [ 74.370376][ T5873] R13: 0000200000000380 R14: 0000200000000300 R15: 00007ffcb7b50318 [ 74.370397][ T5873] [ 74.370844][ T81] FAULT_INJECTION: forcing a failure. [ 74.370844][ T81] name failslab, interval 1, probability 10, space 0, times 21 [ 74.378874][ T1154] FAULT_INJECTION: forcing a failure. [ 74.378874][ T1154] name failslab, interval 1, probability 10, space 0, times 14 [ 74.386620][ C0] FAULT_INJECTION: forcing a failure. [ 74.386620][ C0] name failslab, interval 1, probability 10, space 0, times 14 [ 74.394347][ T1154] CPU: 1 UID: 0 PID: 1154 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 74.394368][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.394378][ T1154] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.394402][ T1154] Call Trace: [ 74.394407][ T1154] [ 74.394414][ T1154] dump_stack_lvl+0x100/0x190 [ 74.394435][ T1154] should_fail_ex.cold+0x5/0xa [ 74.394456][ T1154] should_failslab+0xc2/0x120 [ 74.394476][ T1154] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.394497][ T1154] ? __alloc_skb+0x140/0x710 [ 74.394518][ T1154] __alloc_skb+0x140/0x710 [ 74.394534][ T1154] ? __alloc_skb+0x5b7/0x710 [ 74.394551][ T1154] ? __pfx___alloc_skb+0x10/0x10 [ 74.394571][ T1154] ? kfree_skbmem+0x19f/0x210 [ 74.394596][ T1154] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.394626][ T1154] process_one_work+0xa23/0x1940 [ 74.394652][ T1154] ? __pfx_process_one_work+0x10/0x10 [ 74.394676][ T1154] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.394697][ T1154] worker_thread+0x5ef/0xe50 [ 74.394719][ T1154] ? __pfx_worker_thread+0x10/0x10 [ 74.394736][ T1154] ? kthread+0x13a/0x450 [ 74.394751][ T1154] ? __pfx_worker_thread+0x10/0x10 [ 74.394766][ T1154] kthread+0x370/0x450 [ 74.394780][ T1154] ? __pfx_kthread+0x10/0x10 [ 74.394797][ T1154] ret_from_fork+0x72b/0xd50 [ 74.394819][ T1154] ? __pfx_ret_from_fork+0x10/0x10 [ 74.394841][ T1154] ? __switch_to+0x800/0x10f0 [ 74.394857][ T1154] ? __pfx_kthread+0x10/0x10 [ 74.394882][ T1154] ret_from_fork_asm+0x1a/0x30 [ 74.394914][ T1154] [ 74.397989][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 74.398010][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.398019][ T5858] Call Trace: [ 74.398026][ T5858] [ 74.398031][ T5858] dump_stack_lvl+0x100/0x190 [ 74.398055][ T5858] should_fail_ex.cold+0x5/0xa [ 74.398075][ T5858] should_failslab+0xc2/0x120 [ 74.398096][ T5858] __kmalloc_noprof+0xfc/0x820 [ 74.398115][ T5858] ? ethnl_default_notify+0x1c3/0x9f0 [ 74.398145][ T5858] ethnl_default_notify+0x1c3/0x9f0 [ 74.398172][ T5858] ? __pfx_ethnl_default_notify+0x10/0x10 [ 74.398196][ T5858] ? mark_held_locks+0x40/0x70 [ 74.398221][ T5858] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.398242][ T5858] ? dev_map_notification+0x504/0xb20 [ 74.398263][ T5858] ? __pfx_ethnl_default_notify+0x10/0x10 [ 74.398287][ T5858] ethnl_notify+0x17c/0x360 [ 74.398312][ T5858] ethnl_netdev_event+0x152/0x190 [ 74.398328][ T5858] notifier_call_chain+0x99/0x3f0 [ 74.398348][ T5858] call_netdevice_notifiers_info+0xbe/0x110 [ 74.398374][ T5858] netdev_compute_master_upper_features+0x7d4/0xa50 [ 74.398402][ T5858] ? __pfx_netdev_compute_master_upper_features+0x10/0x10 [ 74.398431][ T5858] __bond_release_one.cold+0x4ed/0x104c [ 74.398463][ T5858] ? netlink_broadcast_filtered+0x40d/0xf20 [ 74.398488][ T5858] ? __pfx___bond_release_one+0x10/0x10 [ 74.398508][ T5858] ? __lock_acquire+0x49f/0x1a40 [ 74.398539][ T5858] ? validate_linkmsg+0x57c/0xba0 [ 74.398563][ T5858] ? __pfx_bond_release+0x10/0x10 [ 74.398577][ T5858] do_set_master+0x172/0x730 [ 74.398599][ T5858] do_setlink.isra.0+0xb2b/0x3e60 [ 74.398622][ T5858] ? stack_trace_save+0x8e/0xc0 [ 74.398641][ T5858] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 74.398665][ T5858] ? __lock_acquire+0x49f/0x1a40 [ 74.398692][ T5858] ? lock_acquire+0x1b9/0x370 [ 74.398715][ T5858] ? rcu_is_watching+0x12/0xc0 [ 74.398737][ T5858] ? trace_contention_end+0x126/0x160 [ 74.398758][ T5858] ? __mutex_lock+0x26d/0x1bd0 [ 74.398777][ T5858] ? rtnl_newlink+0x8bb/0x2380 [ 74.398801][ T5858] ? __pfx___mutex_lock+0x10/0x10 [ 74.398819][ T5858] ? rcu_is_watching+0x12/0xc0 [ 74.398842][ T5858] ? cap_capable+0x107/0x430 [ 74.398879][ T5858] rtnl_newlink+0x1b7e/0x2380 [ 74.398907][ T5858] ? __pfx_rtnl_newlink+0x10/0x10 [ 74.398925][ T5858] ? find_held_lock+0x2b/0x80 [ 74.398948][ T5858] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 74.398967][ T5858] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 74.398989][ T5858] ? avc_has_perm_noaudit+0x145/0x3b0 [ 74.399014][ T5858] ? __lock_acquire+0x49f/0x1a40 [ 74.399045][ T5858] ? find_held_lock+0x2b/0x80 [ 74.399068][ T5858] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 74.399088][ T5858] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 74.399110][ T5858] ? __pfx_rtnl_newlink+0x10/0x10 [ 74.399131][ T5858] rtnetlink_rcv_msg+0x95e/0xe90 [ 74.399153][ T5858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.399179][ T5858] ? ref_tracker_free+0x37e/0x6c0 [ 74.399206][ T5858] netlink_rcv_skb+0x159/0x420 [ 74.399222][ T5858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 74.399244][ T5858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 74.399268][ T5858] ? netlink_deliver_tap+0x1ae/0xcc0 [ 74.399296][ T5858] netlink_unicast+0x585/0x850 [ 74.399315][ T5858] ? __pfx_netlink_unicast+0x10/0x10 [ 74.399336][ T5858] netlink_sendmsg+0x8b0/0xda0 [ 74.399356][ T5858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.399375][ T5858] ? selinux_socket_sendmsg+0x198/0x2f0 [ 74.399401][ T5858] ____sys_sendmsg+0xa4d/0xbe0 [ 74.399424][ T5858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.399441][ T5858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.399474][ T5858] ___sys_sendmsg+0x190/0x1e0 [ 74.399500][ T5858] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.399523][ T5858] ? __lock_acquire+0x49f/0x1a40 [ 74.399567][ T5858] __sys_sendmsg+0x160/0x210 [ 74.399587][ T5858] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.399618][ T5858] do_syscall_64+0x115/0x870 [ 74.399635][ T5858] ? clear_bhb_loop+0x40/0x90 [ 74.399656][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.399672][ T5858] RIP: 0033:0x7f4f16b9df99 [ 74.399686][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.399700][ T5858] RSP: 002b:00007f4f17a64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.399716][ T5858] RAX: ffffffffffffffda RBX: 00007f4f16e25fa0 RCX: 00007f4f16b9df99 [ 74.399727][ T5858] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 74.399736][ T5858] RBP: 00007f4f16c34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 74.399745][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.399754][ T5858] R13: 00007f4f16e26038 R14: 00007f4f16e25fa0 R15: 00007ffc75379818 [ 74.399775][ T5858] [ 74.401309][ T5872] CPU: 1 UID: 0 PID: 5872 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT(full) [ 74.401331][ T5872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.401340][ T5872] Call Trace: [ 74.401347][ T5872] [ 74.401353][ T5872] dump_stack_lvl+0x100/0x190 [ 74.401377][ T5872] should_fail_ex.cold+0x5/0xa [ 74.401399][ T5872] should_failslab+0xc2/0x120 [ 74.401421][ T5872] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.401443][ T5872] ? configfs_new_dirent+0x52/0x570 [ 74.401468][ T5872] configfs_new_dirent+0x52/0x570 [ 74.401490][ T5872] configfs_make_dirent+0x36/0x1a0 [ 74.401514][ T5872] configfs_create_dir+0xbd/0x5c0 [ 74.401537][ T5872] configfs_attach_group+0x2a/0x440 [ 74.401562][ T5872] configfs_mkdir+0x65c/0xb70 [ 74.401588][ T5872] ? __pfx_configfs_mkdir+0x10/0x10 [ 74.401611][ T5872] ? inode_permission+0x374/0x620 [ 74.401639][ T5872] vfs_mkdir+0x361/0x850 [ 74.401664][ T5872] filename_mkdirat+0x48b/0x5e0 [ 74.401685][ T5872] ? __pfx_filename_mkdirat+0x10/0x10 [ 74.401702][ T5872] ? strncpy_from_user+0x19d/0x2d0 [ 74.401725][ T5872] ? do_getname+0x191/0x390 [ 74.401747][ T5872] __x64_sys_mkdir+0x6b/0x90 [ 74.401765][ T5872] do_syscall_64+0x115/0x870 [ 74.401786][ T5872] ? clear_bhb_loop+0x40/0x90 [ 74.401806][ T5872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.401822][ T5872] RIP: 0033:0x7f210cd9df99 [ 74.401836][ T5872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.401853][ T5872] RSP: 002b:00007f210aff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 74.401873][ T5872] RAX: ffffffffffffffda RBX: 00007f210d025fa0 RCX: 00007f210cd9df99 [ 74.401884][ T5872] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000300 [ 74.401893][ T5872] RBP: 00007f210ce34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 74.401903][ T5872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.401912][ T5872] R13: 00007f210d026038 R14: 00007f210d025fa0 R15: 00007ffd8f08a4a8 [ 74.401933][ T5872] [ 74.408004][ T5869] FAULT_INJECTION: forcing a failure. [ 74.408004][ T5869] name failslab, interval 1, probability 10, space 0, times 11 [ 74.410220][ C0] CPU: 0 UID: 0 PID: 81 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 74.410244][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.410254][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.410277][ C0] Call Trace: [ 74.410283][ C0] [ 74.410289][ C0] dump_stack_lvl+0x100/0x190 [ 74.410310][ C0] should_fail_ex.cold+0x5/0xa [ 74.410330][ C0] should_failslab+0xc2/0x120 [ 74.410351][ C0] __kmalloc_noprof+0xfc/0x820 [ 74.410373][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.410390][ C0] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 74.410416][ C0] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 74.410444][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 74.410478][ C0] ? mark_held_locks+0x40/0x70 [ 74.410501][ C0] ? mark_held_locks+0x40/0x70 [ 74.410524][ C0] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 74.410544][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 74.410573][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 74.410599][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 74.410618][ C0] ? kfree_skbmem+0x19a/0x210 [ 74.410642][ C0] ? stack_trace_save+0x8e/0xc0 [ 74.410659][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 74.410676][ C0] ? stack_depot_save_flags+0x27/0x9d0 [ 74.410702][ C0] ? kasan_save_stack+0x3f/0x50 [ 74.410719][ C0] ? kasan_save_stack+0x30/0x50 [ 74.410737][ C0] ? kasan_save_track+0x14/0x30 [ 74.410754][ C0] ? kasan_save_free_info+0x3b/0x70 [ 74.410776][ C0] ? __kasan_slab_free+0x5f/0x80 [ 74.410794][ C0] ? kmem_cache_free+0x127/0x6b0 [ 74.410808][ C0] ? kfree_skbmem+0x19a/0x210 [ 74.410830][ C0] ? sk_skb_reason_drop+0x10f/0x1b0 [ 74.410848][ C0] ? ip6_mc_input+0x832/0xf50 [ 74.410868][ C0] ? ipv6_rcv+0x34c/0x3d0 [ 74.410886][ C0] ? __netif_receive_skb_one_core+0x12d/0x1e0 [ 74.410913][ C0] ? __lock_acquire+0x49f/0x1a40 [ 74.410942][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 74.410969][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 74.410994][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 74.411024][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 74.411044][ C0] ieee80211_scan_rx+0x4e6/0xb60 [ 74.411066][ C0] ? __lock_acquire+0x49f/0x1a40 [ 74.411087][ C0] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 74.411116][ C0] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 74.411140][ C0] ? do_raw_spin_lock+0x128/0x260 [ 74.411168][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 74.411186][ C0] ? ieee80211_clean_skb+0x1a7/0x740 [ 74.411210][ C0] ieee80211_rx_list+0xf19/0x2160 [ 74.411240][ C0] ? lock_acquire+0x1b9/0x370 [ 74.411259][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 74.411288][ C0] ieee80211_rx_napi+0xdc/0x400 [ 74.411312][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 74.411335][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 74.411352][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 74.411375][ C0] ieee80211_handle_queued_frames+0xc8/0x120 [ 74.411400][ C0] tasklet_action_common+0x2de/0x3d0 [ 74.411426][ C0] handle_softirqs+0x1ea/0x9b0 [ 74.411449][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 74.411470][ C0] ? _raw_spin_unlock+0x28/0x50 [ 74.411493][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 74.411511][ C0] __irq_exit_rcu+0x162/0x210 [ 74.411531][ C0] irq_exit_rcu+0x9/0x30 [ 74.411550][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 74.411567][ C0] [ 74.411572][ C0] [ 74.411578][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 74.411596][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 74.411621][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 74.411636][ C0] RSP: 0018:ffffc900024ef698 EFLAGS: 00000293 [ 74.411649][ C0] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 74.411659][ C0] RDX: ffff88801ef40000 RSI: ffffffff81e88a0f RDI: ffff88801ef40000 [ 74.411669][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 74.411678][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000bc3 [ 74.411687][ C0] R13: ffffffff8f9acd98 R14: ffffc900024ef718 R15: dffffc0000000000 [ 74.411702][ C0] ? console_flush_one_record+0xab1/0xe50 [ 74.411725][ C0] ? console_flush_one_record+0xabf/0xe50 [ 74.411751][ C0] ? console_flush_one_record+0xabf/0xe50 [ 74.411781][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 74.411804][ C0] ? __lock_acquire+0x49f/0x1a40 [ 74.411828][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 74.411848][ C0] console_unlock+0x103/0x260 [ 74.411871][ C0] ? __pfx_console_unlock+0x10/0x10 [ 74.411894][ C0] ? lock_acquire+0x101/0x370 [ 74.411915][ C0] ? vprintk_emit+0x66a/0x6b0 [ 74.411941][ C0] vprintk_emit+0x407/0x6b0 [ 74.411965][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 74.411986][ C0] ? consume_skb+0xd1/0x110 [ 74.412006][ C0] ? process_one_work+0xa23/0x1940 [ 74.412023][ C0] ? worker_thread+0x5ef/0xe50 [ 74.412039][ C0] ? kthread+0x370/0x450 [ 74.412053][ C0] ? ret_from_fork+0x72b/0xd50 [ 74.412073][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 74.412098][ C0] _printk+0xcf/0x110 [ 74.412114][ C0] ? __pfx__printk+0x10/0x10 [ 74.412133][ C0] ? __pfx____ratelimit+0x10/0x10 [ 74.412155][ C0] should_fail_ex+0x4e4/0x640 [ 74.412178][ C0] should_failslab+0xc2/0x120 [ 74.412198][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.412218][ C0] ? __alloc_skb+0x140/0x710 [ 74.412239][ C0] __alloc_skb+0x140/0x710 [ 74.412256][ C0] ? __alloc_skb+0x5b7/0x710 [ 74.412274][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 74.412290][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.412312][ C0] ? __pfx___might_resched+0x10/0x10 [ 74.412336][ C0] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.412369][ C0] process_one_work+0xa23/0x1940 [ 74.412395][ C0] ? __pfx_process_one_work+0x10/0x10 [ 74.412418][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.412440][ C0] worker_thread+0x5ef/0xe50 [ 74.412465][ C0] ? kthread+0x13a/0x450 [ 74.412478][ C0] ? __pfx_worker_thread+0x10/0x10 [ 74.412495][ C0] kthread+0x370/0x450 [ 74.412509][ C0] ? __pfx_kthread+0x10/0x10 [ 74.412526][ C0] ret_from_fork+0x72b/0xd50 [ 74.412548][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 74.412570][ C0] ? __switch_to+0x800/0x10f0 [ 74.412587][ C0] ? __pfx_kthread+0x10/0x10 [ 74.412604][ C0] ret_from_fork_asm+0x1a/0x30 [ 74.412636][ C0] [ 74.413040][ T81] CPU: 0 UID: 0 PID: 81 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 74.413059][ T81] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.413068][ T81] Workqueue: events_unbound nsim_dev_trap_report_work [ 74.413088][ T81] Call Trace: [ 74.413093][ T81] [ 74.413098][ T81] dump_stack_lvl+0x100/0x190 [ 74.413118][ T81] should_fail_ex.cold+0x5/0xa [ 74.413137][ T81] should_failslab+0xc2/0x120 [ 74.413157][ T81] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.413177][ T81] ? __alloc_skb+0x140/0x710 [ 74.413198][ T81] __alloc_skb+0x140/0x710 [ 74.413214][ T81] ? __alloc_skb+0x5b7/0x710 [ 74.413231][ T81] ? __pfx___alloc_skb+0x10/0x10 [ 74.413247][ T81] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 74.413269][ T81] ? __pfx___might_resched+0x10/0x10 [ 74.413292][ T81] nsim_dev_trap_report_work+0x2af/0xd20 [ 74.413322][ T81] process_one_work+0xa23/0x1940 [ 74.413348][ T81] ? __pfx_process_one_work+0x10/0x10 [ 74.413376][ T81] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 74.413397][ T81] worker_thread+0x5ef/0xe50 [ 74.413422][ T81] ? kthread+0x13a/0x450 [ 74.413436][ T81] ? __pfx_worker_thread+0x10/0x10 [ 74.413451][ T81] kthread+0x370/0x450 [ 74.413466][ T81] ? __pfx_kthread+0x10/0x10 [ 74.413482][ T81] ret_from_fork+0x72b/0xd50 [ 74.413504][ T81] ? __pfx_ret_from_fork+0x10/0x10 [ 74.413527][ T81] ? __switch_to+0x800/0x10f0 [ 74.413542][ T81] ? __pfx_kthread+0x10/0x10 [ 74.413559][ T81] ret_from_fork_asm+0x1a/0x30 [ 74.413592][ T81] [ 74.413832][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT(full) [ 74.413850][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.413858][ T5871] Call Trace: [ 74.413863][ T5871] [ 74.413868][ T5871] dump_stack_lvl+0x100/0x190 [ 74.413887][ T5871] should_fail_ex.cold+0x5/0xa [ 74.413906][ T5871] should_failslab+0xc2/0x120 [ 74.413925][ T5871] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.413944][ T5871] ? __anon_vma_prepare+0xae/0x5e0 [ 74.413972][ T5871] __anon_vma_prepare+0xae/0x5e0 [ 74.413998][ T5871] __vmf_anon_prepare+0x11f/0x250 [ 74.414020][ T5871] do_anonymous_page+0x51b/0x2080 [ 74.414045][ T5871] ? rcu_read_unlock+0x2d/0xb0 [ 74.414065][ T5871] __handle_mm_fault+0x1d2c/0x2a00 [ 74.414094][ T5871] ? reacquire_held_locks+0xce/0x1e0 [ 74.414113][ T5871] ? __pfx___handle_mm_fault+0x10/0x10 [ 74.414140][ T5871] ? lock_vma_under_rcu+0x17c/0x590 [ 74.414170][ T5871] ? __pfx__printk+0x10/0x10 [ 74.414190][ T5871] handle_mm_fault+0x37b/0xa30 [ 74.414218][ T5871] do_user_addr_fault+0x5a3/0x12f0 [ 74.414247][ T5871] exc_page_fault+0x6f/0xd0 [ 74.414264][ T5871] asm_exc_page_fault+0x26/0x30 [ 74.414279][ T5871] RIP: 0033:0x7f210cd5b144 [ 74.414293][ T5871] Code: 8d 3c 30 4c 89 de 4c 89 54 24 30 e8 66 2c 04 00 4c 8b 54 24 30 85 c0 0f 85 e1 00 00 00 48 8b 44 24 28 48 89 df 4c 89 54 24 30 <4c> 89 93 98 06 00 00 48 89 83 90 06 00 00 48 8d 83 10 03 00 00 4c [ 74.414307][ T5871] RSP: 002b:00007ffd8f08a450 EFLAGS: 00010246 [ 74.414320][ T5871] RAX: 00007f210afb5000 RBX: 00007f210afd56c0 RCX: 00007f210cd9dd97 [ 74.414330][ T5871] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007f210afd56c0 [ 74.414340][ T5871] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 74.414349][ T5871] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffd8f08a5a0 [ 74.414359][ T5871] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 74.414384][ T5871] [ 74.414396][ T5871] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 74.421508][ T1154] FAULT_INJECTION: forcing a failure. [ 74.421508][ T1154] name failslab, interval 1, probability 10, space 0, times 4 [ 74.434400][ T12] FAULT_INJECTION: forcing a failure. [ 74.434400][ T12] name failslab, interval 1, probability 10, space 0, times 4 [ 74.446746][ T1154] CPU: 1 UID: 0 PID: 1154 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 74.446768][ T1154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.446778][ T1154] Workqueue: events_unbound cfg80211_wiphy_work [ 74.446803][ T1154] Call Trace: [ 74.446808][ T1154] [ 74.446814][ T1154] dump_stack_lvl+0x100/0x190 [ 74.446835][ T1154] should_fail_ex.cold+0x5/0xa [ 74.446855][ T1154] should_failslab+0xc2/0x120 [ 74.446881][ T1154] __kmalloc_noprof+0xfc/0x820 [ 74.446900][ T1154] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.446929][ T1154] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.446955][ T1154] ? kasan_save_stack+0x3f/0x50 [ 74.446973][ T1154] ? kasan_save_stack+0x30/0x50 [ 74.446990][ T1154] ? __kasan_kmalloc+0xaa/0xb0 [ 74.447006][ T1154] ? __kmalloc_noprof+0x322/0x820 [ 74.447025][ T1154] ? lock_acquire+0x1b9/0x370 [ 74.447045][ T1154] ? find_held_lock+0x2b/0x80 [ 74.447067][ T1154] ? __kfree_rcu_sheaf+0x195/0x730 [ 74.447086][ T1154] ? __kfree_rcu_sheaf+0x195/0x730 [ 74.447104][ T1154] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 74.447135][ T1154] ? kvfree_call_rcu+0x1be/0x4f0 [ 74.447161][ T1154] ? __asan_memcpy+0x3c/0x60 [ 74.447179][ T1154] ieee80211_inform_bss+0x159/0x1170 [ 74.447205][ T1154] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.447231][ T1154] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 74.447254][ T1154] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.447276][ T1154] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 74.447296][ T1154] ? unwind_next_frame+0x3be/0x2090 [ 74.447317][ T1154] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 74.447337][ T1154] ? ret_from_fork_asm+0x1a/0x30 [ 74.447374][ T1154] ? stack_trace_save+0x8e/0xc0 [ 74.447390][ T1154] ? __pfx_stack_trace_save+0x10/0x10 [ 74.447410][ T1154] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 74.447430][ T1154] cfg80211_inform_bss_data+0x230/0x3b60 [ 74.447451][ T1154] ? __kmalloc_noprof+0x322/0x820 [ 74.447467][ T1154] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.447490][ T1154] ? cfg80211_wiphy_work+0x2b7/0x550 [ 74.447509][ T1154] ? process_one_work+0xa23/0x1940 [ 74.447525][ T1154] ? worker_thread+0x5ef/0xe50 [ 74.447540][ T1154] ? kthread+0x370/0x450 [ 74.447554][ T1154] ? ret_from_fork+0x72b/0xd50 [ 74.447574][ T1154] ? ret_from_fork_asm+0x1a/0x30 [ 74.447600][ T1154] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 74.447626][ T1154] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.447646][ T1154] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 74.447674][ T1154] ? __lock_acquire+0x49f/0x1a40 [ 74.447693][ T1154] ? __lock_acquire+0x49f/0x1a40 [ 74.447720][ T1154] ? __lock_acquire+0x49f/0x1a40 [ 74.447738][ T1154] ? find_held_lock+0x2b/0x80 [ 74.447760][ T1154] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.447782][ T1154] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.447810][ T1154] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 74.447841][ T1154] ieee80211_bss_info_update+0x310/0xab0 [ 74.447869][ T1154] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 74.447898][ T1154] ? rcu_is_watching+0x12/0xc0 [ 74.447920][ T1154] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 74.447940][ T1154] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 74.447965][ T1154] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 74.447998][ T1154] ieee80211_iface_work+0xa9a/0x1070 [ 74.448025][ T1154] cfg80211_wiphy_work+0x2b7/0x550 [ 74.448049][ T1154] process_one_work+0xa23/0x1940 [ 74.448075][ T1154] ? __pfx_process_one_work+0x10/0x10 [ 74.448098][ T1154] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 74.448121][ T1154] worker_thread+0x5ef/0xe50 [ 74.448143][ T1154] ? __pfx_worker_thread+0x10/0x10 [ 74.448160][ T1154] ? kthread+0x13a/0x450 [ 74.448173][ T1154] ? __pfx_worker_thread+0x10/0x10 [ 74.448189][ T1154] kthread+0x370/0x450 [ 74.448203][ T1154] ? __pfx_kthread+0x10/0x10 [ 74.448219][ T1154] ret_from_fork+0x72b/0xd50 [ 74.448241][ T1154] ? __pfx_ret_from_fork+0x10/0x10 [ 74.448263][ T1154] ? __switch_to+0x800/0x10f0 [ 74.448279][ T1154] ? __pfx_kthread+0x10/0x10 [ 74.448296][ T1154] ret_from_fork_asm+0x1a/0x30 [ 74.448329][ T1154] [ 74.448645][ T4964] CPU: 1 UID: 0 PID: 4964 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 74.448663][ T4964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.448672][ T4964] Call Trace: [ 74.448677][ T4964] [ 74.448682][ T4964] dump_stack_lvl+0x100/0x190 [ 74.448702][ T4964] should_fail_ex.cold+0x5/0xa [ 74.448721][ T4964] should_failslab+0xc2/0x120 [ 74.448741][ T4964] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.448758][ T4964] ? __pfx_map_id_range_down+0x10/0x10 [ 74.448776][ T4964] ? security_inode_alloc+0x3b/0x2c0 [ 74.448801][ T4964] security_inode_alloc+0x3b/0x2c0 [ 74.448823][ T4964] inode_init_always_gfp+0xc77/0xfb0 [ 74.448844][ T4964] alloc_inode+0x8e/0x250 [ 74.448871][ T4964] sock_alloc+0x44/0x280 [ 74.448890][ T4964] ? security_socket_create+0x7f/0x250 [ 74.448912][ T4964] __sock_create+0xc2/0x860 [ 74.448939][ T4964] __sys_socket+0x14d/0x260 [ 74.448954][ T4964] ? __pfx___sys_socket+0x10/0x10 [ 74.448974][ T4964] __x64_sys_socket+0x72/0xb0 [ 74.448988][ T4964] ? lockdep_hardirqs_on+0x78/0x100 [ 74.449005][ T4964] do_syscall_64+0x115/0x870 [ 74.449022][ T4964] ? clear_bhb_loop+0x40/0x90 [ 74.449040][ T4964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.449056][ T4964] RIP: 0033:0x7fee818cd707 [ 74.449069][ T4964] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 74.449084][ T4964] RSP: 002b:00007ffde518c918 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 74.449099][ T4964] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007fee818cd707 [ 74.449109][ T4964] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 74.449118][ T4964] RBP: 00007fee81959560 R08: 0000000000000073 R09: 0000000000000001 [ 74.449127][ T4964] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 74.449135][ T4964] R13: 00007ffde518ca40 R14: 0000000000000038 R15: 00007ffde518ca40 [ 74.449155][ T4964] [ 74.449172][ T4964] socket: no more sockets [ 74.455858][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 74.455878][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.455889][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 74.455913][ T12] Call Trace: [ 74.455918][ T12] [ 74.455924][ T12] dump_stack_lvl+0x100/0x190 [ 74.455946][ T12] should_fail_ex.cold+0x5/0xa [ 74.455965][ T12] should_failslab+0xc2/0x120 [ 74.455984][ T12] __kmalloc_noprof+0xfc/0x820 [ 74.456002][ T12] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.456032][ T12] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.456061][ T12] ? kasan_save_stack+0x3f/0x50 [ 74.456078][ T12] ? kasan_save_stack+0x30/0x50 [ 74.456096][ T12] ? __kasan_kmalloc+0xaa/0xb0 [ 74.456112][ T12] ? __kmalloc_noprof+0x322/0x820 [ 74.456131][ T12] ? lock_acquire+0x1b9/0x370 [ 74.456151][ T12] ? find_held_lock+0x2b/0x80 [ 74.456174][ T12] ? __kfree_rcu_sheaf+0x195/0x730 [ 74.456191][ T12] ? __kfree_rcu_sheaf+0x195/0x730 [ 74.456210][ T12] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 74.456240][ T12] ? kvfree_call_rcu+0x1be/0x4f0 [ 74.456267][ T12] ? __asan_memcpy+0x3c/0x60 [ 74.456285][ T12] ieee80211_inform_bss+0x159/0x1170 [ 74.456310][ T12] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.456336][ T12] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 74.456364][ T12] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 74.456386][ T12] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 74.456406][ T12] ? unwind_next_frame+0x3be/0x2090 [ 74.456427][ T12] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 74.456447][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 74.456484][ T12] ? stack_trace_save+0x8e/0xc0 [ 74.456499][ T12] ? __pfx_stack_trace_save+0x10/0x10 [ 74.456520][ T12] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 74.456539][ T12] cfg80211_inform_bss_data+0x230/0x3b60 [ 74.456560][ T12] ? __kmalloc_noprof+0x322/0x820 [ 74.456576][ T12] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 74.456600][ T12] ? cfg80211_wiphy_work+0x2b7/0x550 [ 74.456619][ T12] ? process_one_work+0xa23/0x1940 [ 74.456635][ T12] ? worker_thread+0x5ef/0xe50 [ 74.456650][ T12] ? kthread+0x370/0x450 [ 74.456663][ T12] ? ret_from_fork+0x72b/0xd50 [ 74.456683][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 74.456709][ T12] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 74.456734][ T12] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 74.456754][ T12] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 74.456781][ T12] ? __lock_acquire+0x49f/0x1a40 [ 74.456801][ T12] ? __lock_acquire+0x49f/0x1a40 [ 74.456827][ T12] ? __lock_acquire+0x49f/0x1a40 [ 74.456845][ T12] ? find_held_lock+0x2b/0x80 [ 74.456868][ T12] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.456889][ T12] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 74.456918][ T12] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 74.456945][ T12] ieee80211_bss_info_update+0x310/0xab0 [ 74.456969][ T12] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 74.456998][ T12] ? rcu_is_watching+0x12/0xc0 [ 74.457020][ T12] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 74.457040][ T12] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 74.457065][ T12] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 74.457098][ T12] ieee80211_iface_work+0xa9a/0x1070 [ 74.457125][ T12] cfg80211_wiphy_work+0x2b7/0x550 [ 74.457149][ T12] process_one_work+0xa23/0x1940 [ 74.457174][ T12] ? __pfx_process_one_work+0x10/0x10 [ 74.457198][ T12] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 74.457221][ T12] worker_thread+0x5ef/0xe50 [ 74.457246][ T12] ? kthread+0x13a/0x450 [ 74.457259][ T12] ? __pfx_worker_thread+0x10/0x10 [ 74.457275][ T12] kthread+0x370/0x450 [ 74.457288][ T12] ? __pfx_kthread+0x10/0x10 [ 74.457304][ T12] ret_from_fork+0x72b/0xd50 [ 74.457326][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 74.457349][ T12] ? __switch_to+0x800/0x10f0 [ 74.457369][ T12] ? __pfx_kthread+0x10/0x10 [ 74.457385][ T12] ret_from_fork_asm+0x1a/0x30 [ 74.457418][ T12] [ 74.461276][ T5718] FAULT_INJECTION: forcing a failure. [ 74.461276][ T5718] name failslab, interval 1, probability 10, space 0, times 1 [ 74.476600][ C1] FAULT_INJECTION: forcing a failure. [ 74.476600][ C1] name failslab, interval 1, probability 10, space 0, times 1 [ 74.479179][ T5876] CPU: 0 UID: 0 PID: 5876 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 74.479201][ T5876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.479211][ T5876] Call Trace: [ 74.479217][ T5876] [ 74.479223][ T5876] dump_stack_lvl+0x100/0x190 [ 74.479248][ T5876] should_fail_ex.cold+0x5/0xa [ 74.479269][ T5876] should_failslab+0xc2/0x120 [ 74.479290][ T5876] __kvmalloc_node_noprof+0x116/0x970 [ 74.479313][ T5876] ? io_uring_setup.cold+0x1f4/0x1cae [ 74.479341][ T5876] io_uring_setup.cold+0x1f4/0x1cae [ 74.479373][ T5876] ? __pfx_io_uring_setup+0x10/0x10 [ 74.479397][ T5876] ? find_held_lock+0x2b/0x80 [ 74.479421][ T5876] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 74.479440][ T5876] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 74.479475][ T5876] ? kcov_ioctl+0x17a/0x750 [ 74.479498][ T5876] __x64_sys_io_uring_setup+0xc2/0x170 [ 74.479523][ T5876] do_syscall_64+0x115/0x870 [ 74.479540][ T5876] ? clear_bhb_loop+0x40/0x90 [ 74.479560][ T5876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.479576][ T5876] RIP: 0033:0x7fea1959df99 [ 74.479590][ T5876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 74.479605][ T5876] RSP: 002b:00007fea1a499028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 74.479620][ T5876] RAX: ffffffffffffffda RBX: 00007fea19826180 RCX: 00007fea1959df99 [ 74.479631][ T5876] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00000000000002b2 [ 74.479640][ T5876] RBP: 00007fea19634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 74.479651][ T5876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 74.479661][ T5876] R13: 00007fea19826218 R14: 00007fea19826180 R15: 00007ffcb7b50318 [ 74.479683][ T5876] [ 74.498347][ T5718] CPU: 0 UID: 0 PID: 5718 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 74.498374][ T5718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.498385][ T5718] Workqueue: mld mld_dad_work [ 74.498410][ T5718] Call Trace: [ 74.498415][ T5718] [ 74.498422][ T5718] dump_stack_lvl+0x100/0x190 [ 74.498443][ T5718] should_fail_ex.cold+0x5/0xa [ 74.498464][ T5718] should_failslab+0xc2/0x120 [ 74.498484][ T5718] __kmalloc_cache_noprof+0x91/0x6c0 [ 74.498510][ T5718] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 74.498533][ T5718] dst_cow_metrics_generic+0x4c/0x1e0 [ 74.498552][ T5718] icmp6_dst_alloc+0x418/0x4f0 [ 74.498574][ T5718] mld_sendpack+0x5ae/0xec0 [ 74.498598][ T5718] ? __pfx_mld_sendpack+0x10/0x10 [ 74.498629][ T5718] mld_send_initial_cr+0x219/0x320 [ 74.498651][ T5718] mld_dad_work+0x32/0x1f0 [ 74.498673][ T5718] process_one_work+0xa23/0x1940 [ 74.498699][ T5718] ? __pfx_process_one_work+0x10/0x10 [ 74.498723][ T5718] ? __pfx_mld_dad_work+0x10/0x10 [ 74.498745][ T5718] worker_thread+0x5ef/0xe50 [ 74.498768][ T5718] ? __pfx_worker_thread+0x10/0x10 [ 74.498786][ T5718] ? kthread+0x13a/0x450 [ 74.498800][ T5718] ? __pfx_worker_thread+0x10/0x10 [ 74.498815][ T5718] kthread+0x370/0x450 [ 74.498829][ T5718] ? __pfx_kthread+0x10/0x10 [ 74.498846][ T5718] ret_from_fork+0x72b/0xd50 [ 74.498868][ T5718] ? __pfx_ret_from_fork+0x10/0x10 [ 74.498891][ T5718] ? __switch_to+0x800/0x10f0 [ 74.498907][ T5718] ? __pfx_kthread+0x10/0x10 [ 74.498924][ T5718] ret_from_fork_asm+0x1a/0x30 [ 74.498957][ T5718] [ 74.502687][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: syz.2.22 Not tainted syzkaller #0 PREEMPT(full) [ 74.502707][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.502716][ T5869] Call Trace: [ 74.502721][ T5869] [ 74.502727][ T5869] dump_stack_lvl+0x100/0x190 [ 74.502750][ T5869] should_fail_ex.cold+0x5/0xa [ 74.502770][ T5869] should_failslab+0xc2/0x120 [ 74.502791][ T5869] kmem_cache_alloc_noprof+0x91/0x6a0 [ 74.502810][ T5869] ? jbd2__journal_start+0x194/0x6a0 [ 74.502835][ T5869] jbd2__journal_start+0x194/0x6a0 [ 74.502858][ T5869] __ext4_journal_start_sb+0x367/0x670 [ 74.502883][ T5869] ? ext4_dirty_inode+0xa1/0x130 [ 74.502900][ T5869] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 74.502916][ T5869] ext4_dirty_inode+0xa1/0x130 [ 74.502931][ T5869] ? rcu_is_watching+0x12/0xc0 [ 74.502955][ T5869] __mark_inode_dirty+0x1f3/0x16e0 [ 74.502983][ T5869] file_update_time_flags+0x46b/0x500 [ 74.503006][ T5869] ext4_page_mkwrite+0x324/0x1850 [ 74.503028][ T5869] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 74.503051][ T5869] do_page_mkwrite+0x17a/0x440 [ 74.503071][ T5869] ? __pfx_filemap_map_pages+0x10/0x10 [ 74.503094][ T5869] do_fault+0x3b5/0x1750 [ 74.503118][ T5869] __handle_mm_fault+0x187d/0x2a00 [ 74.503147][ T5869] ? reacquire_held_locks+0xce/0x1e0 [ 74.503167][ T5869] ? __pfx___handle_mm_fault+0x10/0x10 [ 74.503195][ T5869] ? lock_vma_under_rcu+0x17c/0x590 [ 74.503224][ T5869] ? lockdep_hardirqs_on+0x78/0x100 [ 74.503247][ T5869] handle_mm_fault+0x37b/0xa30 [ 74.503275][ T5869] do_user_addr_fault+0x5a3/0x12f0 [ 74.503305][ T5869] exc_page_fault+0x6f/0xd0 [ 74.503322][ T5869] asm_exc_page_fault+0x26/0x30 [ 74.503338][ T5869] RIP: 0033:0x7fea19472660 [ 74.503351][ T5869] Code: 83 e6 07 0f 85 19 01 00 00 be 08 00 00 00 4c 89 ff 83 c5 01 e8 41 93 fe ff 49 8b 47 40 41 83 47 30 08 48 8d 48 f8 49 89 4f 40 <48> 89 58 f8 49 83 c5 01 45 3b 6c 24 04 0f 82 fd fe ff ff 41 80 7f [ 74.503371][ T5869] RSP: 002b:00007ffcb7b50360 EFLAGS: 00010202 [ 74.503385][ T5869] RAX: 0000001b33317000 RBX: ffffffff81358d41 RCX: 0000001b33316ff8 [ 74.503395][ T5869] RDX: 0000001b32d24220 RSI: 0000000000000008 RDI: 00007fea1a355720 [ 74.503404][ T5869] RBP: 0000000000000051 R08: 00007fea19810000 R09: 00007fea19812000 [ 74.503414][ T5869] R10: 0000000081358d45 R11: 000000000000000d R12: 00007fea19826128 [ 74.503423][ T5869] R13: 0000000000000051 R14: ffffffff81358c52 R15: 00007fea1a355720 [ 74.503433][ T5869] ? io_uring_setup.cold+0x40/0x1cae [ 74.503457][ T5869] ? io_uring_setup.cold+0x12f/0x1cae [ 74.503487][ T5869] [ 74.798720][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 74.798734][ T29] audit: type=1400 audit(1785404690.914:315): avc: denied { write } for pid=5871 comm="syz.1.23" name="target" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.803990][ C1] CPU: 1 UID: 0 PID: 5619 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 74.804011][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 74.804021][ C1] Call Trace: [ 74.804026][ C1] [ 74.804033][ C1] dump_stack_lvl+0x100/0x190 [ 74.804061][ C1] should_fail_ex.cold+0x5/0xa [ 74.804082][ C1] should_failslab+0xc2/0x120 [ 74.804102][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 74.804122][ C1] ? __alloc_skb+0x5b7/0x710 [ 74.804141][ C1] ? __alloc_skb+0x140/0x710 [ 74.804161][ C1] __alloc_skb+0x140/0x710 [ 74.804178][ C1] ? __alloc_skb+0x5b7/0x710 [ 74.804196][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 74.804214][ C1] ? lock_acquire+0x1b9/0x370 [ 74.804238][ C1] __netdev_alloc_skb+0x7a/0x960 [ 74.804259][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 74.804283][ C1] ? __lock_acquire+0x49f/0x1a40 [ 74.804305][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 74.804326][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 74.804351][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 74.804380][ C1] __iterate_interfaces+0x2e6/0x650 [ 74.804398][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 74.804421][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 74.804440][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 74.804463][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 74.804488][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 74.804512][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 74.804543][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 74.804569][ C1] handle_softirqs+0x1ea/0x9b0 [ 74.804593][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 74.804613][ C1] ? _raw_spin_unlock+0x28/0x50 [ 74.804638][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 74.804656][ C1] __irq_exit_rcu+0x162/0x210 [ 74.804676][ C1] irq_exit_rcu+0x9/0x30 [ 74.804695][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 74.804712][ C1] [ 74.804717][ C1] [ 74.804723][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 74.804741][ C1] RIP: 0010:finish_task_switch.isra.0+0x2cd/0x10c0 [ 74.804765][ C1] Code: ab 0a 00 00 41 c7 87 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 8d 7f 48 e8 d0 05 e8 09 e8 ab ac 3c 00 fb 48 8d bb f8 16 00 00 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 [ 74.804780][ C1] RSP: 0000:ffffc900035c7a70 EFLAGS: 00000202 [ 74.804794][ C1] RAX: 000000000002a6df RBX: ffff88807b4c4a80 RCX: 0000000000000000 [ 74.804804][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a6f32 RDI: ffff88807b4c6178 [ 74.804814][ C1] RBP: ffffc900035c7ac8 R08: 0000000000000001 R09: 0000000000000000 [ 74.804823][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888032e7a540 [ 74.804832][ C1] R13: 0000000000000000 R14: ffffffff9122ada4 R15: ffff8880b853b4c0 [ 74.804863][ C1] __schedule+0x1264/0x6730 [ 74.804891][ C1] ? __pfx___schedule+0x10/0x10 [ 74.804906][ C1] ? find_held_lock+0x2b/0x80 [ 74.804929][ C1] ? schedule+0x225/0x2c0 [ 74.804948][ C1] schedule+0xdd/0x2c0 [ 74.804963][ C1] do_nanosleep+0x113/0x500 [ 74.804987][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 74.805008][ C1] ? __asan_memset+0x23/0x50 [ 74.805024][ C1] ? __hrtimer_setup+0x208/0x330 [ 74.805048][ C1] hrtimer_nanosleep+0x14f/0x350 [ 74.805065][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 74.805084][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 74.805107][ C1] ? get_timespec64+0x147/0x240 [ 74.805125][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 74.805145][ C1] common_nsleep+0xa1/0xd0 [ 74.805169][ C1] __x64_sys_clock_nanosleep+0x336/0x480 [ 74.805189][ C1] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 74.805212][ C1] do_syscall_64+0x115/0x870 [ 74.805229][ C1] ? clear_bhb_loop+0x40/0x90 [ 74.805248][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.805264][ C1] RIP: 0033:0x7f4f16b5e7ce [ 74.805278][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 74.805292][ C1] RSP: 002b:00007ffc75379af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 74.805306][ C1] RAX: ffffffffffffffda RBX: 0000555562a3f500 RCX: 00007f4f16b5e7ce [ 74.805315][ C1] RDX: 00007ffc75379b50 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.805324][ C1] RBP: 00007ffc75379bbc R08: 0000000000000000 R09: 0000000000000000 [ 74.805334][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 74.805343][ C1] R13: 00000000000927c0 R14: 00000000000120bd R15: 00007ffc75379c10 [ 74.805364][ C1] [ 74.898029][ T5858] team0: Port device team_slave_0 removed [ 74.910431][ T29] audit: type=1400 audit(1785404691.014:316): avc: denied { read } for pid=5878 comm="syz.4.24" name="trace" dev="tracefs" ino=1388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 74.922389][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 74.971070][ T5872] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 75.066455][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 75.071932][ T29] audit: type=1400 audit(1785404691.054:317): avc: denied { write } for pid=5871 comm="syz.1.23" name="usb_gadget" dev="configfs" ino=8623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.118637][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 75.128485][ T29] audit: type=1400 audit(1785404691.114:318): avc: denied { write } for pid=5871 comm="syz.1.23" name="core" dev="configfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.142860][ T5881] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 75.150313][ T29] audit: type=1400 audit(1785404691.114:319): avc: denied { write } for pid=5871 comm="syz.1.23" name="naa.1234567890abcdef" dev="configfs" ino=9576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.188176][ T5858] team0: Port device team_slave_1 removed [ 75.216177][ T29] audit: type=1400 audit(1785404691.114:320): avc: denied { write } for pid=5871 comm="syz.1.23" name="rd_mcp_0" dev="configfs" ino=8629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 75.232564][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 75.232593][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 75.232614][ T46] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 75.233617][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.251385][ T29] audit: type=1800 audit(1785404691.214:321): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.25" name="idVendor" dev="configfs" ino=9585 res=0 errno=0 [ 75.282887][ T46] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 75.293222][ T29] audit: type=1800 audit(1785404691.214:322): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.25" name="idProduct" dev="configfs" ino=9586 res=0 errno=0 [ 75.299460][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 75.299483][ T46] usb 4-1: Product: syz [ 75.299497][ T46] usb 4-1: Manufacturer: syz [ 75.311621][ T5865] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 75.327231][ T5885] usbip-vudc usbip-vudc.0: gadget not bound [ 75.336233][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.397315][ T5889] usbip-vudc usbip-vudc.0: gadget not bound [ 91.505027][ T5865] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.544462][ T24] cfg80211: failed to load regulatory.db [ 91.551256][ T5865] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 91.580022][ T29] audit: type=1400 audit(1785404691.214:323): avc: denied { write } for pid=5880 comm="syz.4.25" name="strings" dev="configfs" ino=8505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.603107][ T29] audit: type=1800 audit(1785404691.224:324): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.25" name="serialnumber" dev="configfs" ino=9588 res=0 errno=0 [ 91.624903][ T29] audit: type=1800 audit(1785404691.234:325): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.25" name="manufacturer" dev="configfs" ino=9589 res=0 errno=0 [ 91.646576][ T29] audit: type=1800 audit(1785404691.234:326): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.25" name="product" dev="configfs" ino=9590 res=0 errno=0 [ 91.667636][ T29] audit: type=1400 audit(1785404691.254:327): avc: denied { write } for pid=5880 comm="syz.4.25" name="strings" dev="configfs" ino=8511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.691475][ T29] audit: type=1800 audit(1785404691.254:328): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.25" name="configuration" dev="configfs" ino=9592 res=0 errno=0 [ 91.713219][ T29] audit: type=1400 audit(1785404691.264:329): avc: denied { write } for pid=5880 comm="syz.4.25" name="functions" dev="configfs" ino=8503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.735751][ T29] audit: type=1400 audit(1785404691.294:330): avc: denied { write } for pid=5880 comm="syz.4.25" name="c.1" dev="configfs" ino=8510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.757811][ T29] audit: type=1400 audit(1785404691.304:331): avc: denied { write } for pid=5880 comm="syz.4.25" name="c.1" dev="configfs" ino=8510 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.779864][ T29] audit: type=1800 audit(1785404691.324:332): pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.25" name="UDC" dev="configfs" ino=9595 res=0 errno=0 [ 91.801104][ T46] usb 4-1: can't set config #1, error -110 [ 91.817944][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.870114][ T5858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.945495][ T5784] usb 4-1: USB disconnect, device number 3 [ 91.976228][ T5858] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.012573][ T5863] team0: Mode changed to "random" [ 92.059956][ T5875] tipc: Started in network mode [ 92.099200][ T5875] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 92.143174][ T5875] tipc: Enabled bearer , priority 0 [ 92.180078][ T5868] vlan0: entered promiscuous mode [ 92.234771][ T5868] team0: Port device vlan0 added [ 92.312896][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 92.325345][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 92.333274][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 92.354258][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 92.361886][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.454833][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 92.462340][ T5607] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 92.497006][ T5607] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 92.507977][ T5607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 92.516537][ T5615] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 92.525380][ T5615] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 92.526645][ T5607] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 92.533658][ T5615] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 92.548056][ T5615] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 92.555731][ T5615] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 92.568616][ T5615] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 92.582220][ T5618] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 92.620447][ T5607] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 92.636862][ T5617] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 92.644437][ T5617] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 92.664492][ T5617] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 92.676184][ T5617] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 92.683708][ T5617] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 92.691366][ T5617] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 92.700753][ T5617] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 93.398230][ T24] tipc: Node number set to 11578026 [ 93.535189][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.642839][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.779936][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.882935][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.366383][ T13] bridge_slave_1: left allmulticast mode [ 94.383879][ T13] bridge_slave_1: left promiscuous mode [ 94.391169][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.406927][ T13] bridge_slave_0: left allmulticast mode [ 94.412671][ T13] bridge_slave_0: left promiscuous mode [ 94.419248][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.446376][ T5617] Bluetooth: hci5: command tx timeout [ 94.580818][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.595795][ T5617] Bluetooth: hci7: command tx timeout [ 94.608517][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.622896][ T13] bond0 (unregistering): Released all slaves [ 94.634773][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 94.671932][ T5607] Bluetooth: hci8: command tx timeout [ 94.678451][ T5617] Bluetooth: hci6: command tx timeout [ 94.762139][ T5617] Bluetooth: hci9: command tx timeout [ 94.808312][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.815513][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.823261][ T5901] bridge_slave_0: entered allmulticast mode [ 94.830552][ T5901] bridge_slave_0: entered promiscuous mode [ 94.876637][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.883970][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.891155][ T5901] bridge_slave_1: entered allmulticast mode [ 94.897997][ T5901] bridge_slave_1: entered promiscuous mode [ 94.904677][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.911744][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.920181][ T5904] bridge_slave_0: entered allmulticast mode [ 94.927511][ T5904] bridge_slave_0: entered promiscuous mode [ 94.945459][ T5897] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.952562][ T5897] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.960362][ T5897] bridge_slave_0: entered allmulticast mode [ 94.967866][ T5897] bridge_slave_0: entered promiscuous mode [ 95.000968][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.008131][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.015547][ T5904] bridge_slave_1: entered allmulticast mode [ 95.023017][ T5904] bridge_slave_1: entered promiscuous mode [ 95.039081][ T5897] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.046214][ T5897] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.053463][ T5897] bridge_slave_1: entered allmulticast mode [ 95.061099][ T5897] bridge_slave_1: entered promiscuous mode [ 95.081818][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.111064][ T5904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.131312][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.138673][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.146120][ T5907] bridge_slave_0: entered allmulticast mode [ 95.153239][ T5907] bridge_slave_0: entered promiscuous mode [ 95.162047][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.186490][ T5904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.205947][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.213127][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.220236][ T5907] bridge_slave_1: entered allmulticast mode [ 95.227338][ T5907] bridge_slave_1: entered promiscuous mode [ 95.236963][ T13] hsr_slave_0: left promiscuous mode [ 95.242890][ T13] hsr_slave_1: left promiscuous mode [ 95.248480][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.255954][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.263577][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.271204][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.283949][ T13] veth1_macvtap: left promiscuous mode [ 95.289497][ T13] veth0_macvtap: left promiscuous mode [ 95.295600][ T13] veth1_vlan: left promiscuous mode [ 95.300841][ T13] veth0_vlan: left promiscuous mode [ 95.424518][ T13] team0 (unregistering): Port device team_slave_1 removed [ 95.440294][ T13] team0 (unregistering): Port device team_slave_0 removed [ 95.516133][ T5901] team0: Port device team_slave_0 added [ 95.547404][ T5897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.568815][ T5901] team0: Port device team_slave_1 added [ 95.589826][ T5904] team0: Port device team_slave_0 added [ 95.607965][ T5897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.658692][ T5904] team0: Port device team_slave_1 added [ 95.665758][ T5900] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.673124][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.680850][ T5900] bridge_slave_0: entered allmulticast mode [ 95.688861][ T5900] bridge_slave_0: entered promiscuous mode [ 95.718809][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.728785][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.741704][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.775206][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.798085][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.805812][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.831994][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.843091][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.850427][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.857682][ T5900] bridge_slave_1: entered allmulticast mode [ 95.865140][ T5900] bridge_slave_1: entered promiscuous mode [ 95.885153][ T5897] team0: Port device team_slave_0 added [ 95.893438][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.966581][ T5900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.980243][ T5897] team0: Port device team_slave_1 added [ 95.994419][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.001350][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.027591][ T5904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.048184][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 96.058371][ T5900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.080504][ T5904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.088085][ T5904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.114371][ T5904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.132696][ T5901] hsr_slave_0: entered promiscuous mode [ 96.138723][ T5901] hsr_slave_1: entered promiscuous mode [ 96.144813][ T5901] debugfs: 'hsr0' already exists in 'hsr' [ 96.150512][ T5901] Cannot create hsr debugfs directory [ 96.195224][ T5907] team0: Port device team_slave_0 added [ 96.208119][ T5900] team0: Port device team_slave_0 added [ 96.214468][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.221422][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.247896][ T5897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.261470][ T5907] team0: Port device team_slave_1 added [ 96.291021][ T5900] team0: Port device team_slave_1 added [ 96.303046][ T5897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.309975][ T5897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.335949][ T5897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.353964][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.361202][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.387756][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.420563][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.443684][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.451117][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.478433][ T5900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.490063][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.498388][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.514628][ T5617] Bluetooth: hci5: command tx timeout [ 96.524926][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.568146][ T5900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.575863][ T5900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.603778][ T5900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.634232][ T5904] hsr_slave_0: entered promiscuous mode [ 96.640620][ T5904] hsr_slave_1: entered promiscuous mode [ 96.647825][ T5904] debugfs: 'hsr0' already exists in 'hsr' [ 96.653744][ T5904] Cannot create hsr debugfs directory [ 96.675883][ T5617] Bluetooth: hci7: command tx timeout [ 96.688237][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.711050][ T5897] hsr_slave_0: entered promiscuous mode [ 96.718680][ T5897] hsr_slave_1: entered promiscuous mode [ 96.726297][ T5897] debugfs: 'hsr0' already exists in 'hsr' [ 96.733622][ T5897] Cannot create hsr debugfs directory [ 96.752016][ T5617] Bluetooth: hci6: command tx timeout [ 96.757892][ T5607] Bluetooth: hci8: command tx timeout [ 96.819388][ T5907] hsr_slave_0: entered promiscuous mode [ 96.826585][ T5907] hsr_slave_1: entered promiscuous mode [ 96.832916][ T5907] debugfs: 'hsr0' already exists in 'hsr' [ 96.838648][ T5907] Cannot create hsr debugfs directory [ 96.844218][ T5617] Bluetooth: hci9: command tx timeout [ 96.856364][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 96.856377][ T29] audit: type=1400 audit(1785404713.044:356): avc: denied { write } for pid=6012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.859136][ T5900] hsr_slave_0: entered promiscuous mode [ 96.892050][ T5900] hsr_slave_1: entered promiscuous mode [ 96.898190][ T5900] debugfs: 'hsr0' already exists in 'hsr' [ 96.904414][ T5900] Cannot create hsr debugfs directory [ 96.926187][ T29] audit: type=1400 audit(1785404713.114:357): avc: denied { write } for pid=6023 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.927113][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.062919][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 97.092383][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.455952][ T5901] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 97.477858][ T5901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.485936][ T5901] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 97.504886][ T5901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.537944][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.553945][ T5901] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 97.565403][ T5901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.573457][ T5901] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 97.577694][ T29] audit: type=1400 audit(1785404713.764:358): avc: denied { write } for pid=6026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.605603][ T5901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.644241][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.684510][ T29] audit: type=1400 audit(1785404713.874:359): avc: denied { write } for pid=6039 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.726680][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.757839][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 97.771566][ T5900] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.782701][ T5900] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.790322][ T5900] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 97.801033][ T5900] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.811487][ T5900] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 97.819805][ T5900] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.828986][ T5900] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 97.837772][ T5900] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.867182][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.974926][ T5904] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 97.986940][ T5904] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.009960][ T5904] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 98.022819][ T5904] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.046790][ T5904] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 98.065931][ T5904] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.098922][ T5904] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 98.117941][ T5904] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.168209][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.206018][ T29] audit: type=1400 audit(1785404714.394:360): avc: denied { write } for pid=6052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.237174][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.261229][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.268384][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.304715][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.315696][ T29] audit: type=1400 audit(1785404714.494:361): avc: denied { write } for pid=6069 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.366535][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 98.376660][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.383804][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.404421][ T5907] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 98.415717][ T5907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.427643][ T5907] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 98.439909][ T5907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.448653][ T5907] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 98.457975][ T5907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.466687][ T5907] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 98.475036][ T5907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.495543][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.594888][ T5617] Bluetooth: hci5: command tx timeout [ 98.628706][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.677149][ T5897] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.693504][ T5897] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.704625][ T5900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.716741][ T5897] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.729283][ T5897] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.737356][ T5897] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.748649][ T5897] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.756127][ T5617] Bluetooth: hci7: command tx timeout [ 98.783348][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.820765][ T29] audit: type=1400 audit(1785404715.004:362): avc: denied { write } for pid=6079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.832046][ T5617] Bluetooth: hci6: command tx timeout [ 98.849439][ T5607] Bluetooth: hci8: command tx timeout [ 98.854894][ T5897] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.867575][ T5897] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.914502][ T5617] Bluetooth: hci9: command tx timeout [ 98.920981][ T5904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.935800][ T5900] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.945591][ T29] audit: type=1400 audit(1785404715.134:363): avc: denied { write } for pid=6092 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.013862][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.021019][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.041485][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 99.066495][ T5904] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.121816][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.128948][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.140473][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.147539][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.179482][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.186582][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.304872][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.351550][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.398206][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.486458][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.517157][ T5907] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.561556][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.568718][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.603961][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.611103][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.643656][ T29] audit: type=1400 audit(1785404715.834:364): avc: denied { write } for pid=6105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.681564][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.715316][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.755733][ T5897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.777251][ T29] audit: type=1400 audit(1785404715.964:365): avc: denied { write } for pid=6122 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.866031][ T5897] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.921175][ T6125] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.928319][ T6125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.967430][ T6125] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.974586][ T6125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.059481][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 100.270227][ T13] bridge_slave_1: left allmulticast mode [ 100.292640][ T13] bridge_slave_1: left promiscuous mode [ 100.306173][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.318722][ T13] bridge_slave_0: left allmulticast mode [ 100.334153][ T13] bridge_slave_0: left promiscuous mode [ 100.355672][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.379025][ T13] bridge_slave_1: left allmulticast mode [ 100.385870][ T13] bridge_slave_1: left promiscuous mode [ 100.391530][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.407234][ T13] bridge_slave_0: left allmulticast mode [ 100.412982][ T13] bridge_slave_0: left promiscuous mode [ 100.418595][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.431504][ T13] bridge_slave_1: left allmulticast mode [ 100.439305][ T13] bridge_slave_1: left promiscuous mode [ 100.445436][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.455427][ T13] bridge_slave_0: left allmulticast mode [ 100.461071][ T13] bridge_slave_0: left promiscuous mode [ 100.467454][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.599355][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.609272][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.623634][ T13] bond0 (unregistering): Released all slaves [ 100.672023][ T5617] Bluetooth: hci5: command tx timeout [ 100.689944][ T13] bond0 (unregistering): Released all slaves [ 100.748934][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.760493][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.770267][ T13] bond0 (unregistering): Released all slaves [ 100.830205][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.838837][ T5617] Bluetooth: hci7: command tx timeout [ 100.848618][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.859104][ T13] bond0 (unregistering): Released all slaves [ 100.912315][ T5617] Bluetooth: hci6: command tx timeout [ 100.912621][ T5607] Bluetooth: hci8: command tx timeout [ 100.995345][ T5607] Bluetooth: hci9: command tx timeout [ 101.151350][ T5901] veth0_vlan: entered promiscuous mode [ 101.209739][ T5900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.245314][ T5901] veth1_vlan: entered promiscuous mode [ 101.272628][ T13] tipc: Disabling bearer [ 101.314465][ T13] tipc: Left network mode [ 101.335582][ T5904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.525609][ T5901] veth0_macvtap: entered promiscuous mode [ 101.578652][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.690912][ T5901] veth1_macvtap: entered promiscuous mode [ 101.934626][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 101.934641][ T29] audit: type=1400 audit(1785404718.124:367): avc: denied { write } for pid=6199 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.935947][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.018827][ T5897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.048082][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.114972][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 102.154375][ T48] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.169119][ T48] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.207703][ T48] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.220329][ T48] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.289305][ T5900] veth0_vlan: entered promiscuous mode [ 102.416710][ T5900] veth1_vlan: entered promiscuous mode [ 102.474512][ T5907] veth0_vlan: entered promiscuous mode [ 102.483943][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.498139][ T5904] veth0_vlan: entered promiscuous mode [ 102.503619][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.540174][ T5907] veth1_vlan: entered promiscuous mode [ 102.559913][ T13] hsr_slave_0: left promiscuous mode [ 102.569993][ T13] hsr_slave_1: left promiscuous mode [ 102.576367][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.585198][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.594094][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.603187][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.616511][ T13] hsr_slave_0: left promiscuous mode [ 102.622472][ T13] hsr_slave_1: left promiscuous mode [ 102.631162][ T13] hsr_slave_0: left promiscuous mode [ 102.638241][ T13] hsr_slave_1: left promiscuous mode [ 102.647384][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.656203][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.664981][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.670650][ T29] audit: type=1400 audit(1785404718.854:368): avc: denied { write } for pid=6219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.672686][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.710542][ T13] hsr_slave_0: left promiscuous mode [ 102.721328][ T13] hsr_slave_1: left promiscuous mode [ 102.727201][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.737615][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.746046][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.754384][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.762616][ T29] audit: type=1400 audit(1785404718.944:369): avc: denied { write } for pid=6230 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.806650][ T13] veth1_macvtap: left promiscuous mode [ 102.812279][ T13] veth0_macvtap: left promiscuous mode [ 102.817803][ T13] veth1_vlan: left promiscuous mode [ 102.823423][ T13] veth0_vlan: left promiscuous mode [ 102.831412][ T13] veth1_macvtap: left promiscuous mode [ 102.837687][ T13] veth0_macvtap: left promiscuous mode [ 102.843327][ T13] veth1_vlan: left promiscuous mode [ 102.849472][ T13] veth1_macvtap: left promiscuous mode [ 102.855012][ T13] veth0_macvtap: left promiscuous mode [ 102.860514][ T13] veth1_vlan: left promiscuous mode [ 102.865793][ T13] veth0_vlan: left promiscuous mode [ 102.873412][ T13] veth1_macvtap: left promiscuous mode [ 102.878865][ T13] veth0_macvtap: left promiscuous mode [ 102.884770][ T13] veth1_vlan: left promiscuous mode [ 102.889966][ T13] veth0_vlan: left promiscuous mode [ 103.117014][ T13] team0 (unregistering): Port device team_slave_1 removed [ 103.129679][ T13] team0 (unregistering): Port device team_slave_0 removed [ 103.246014][ T13] team0 (unregistering): Port device vlan0 removed [ 103.444830][ T13] team0 (unregistering): Port device team_slave_1 removed [ 103.456688][ T13] team0 (unregistering): Port device team_slave_0 removed [ 103.599253][ T13] team0 (unregistering): Port device team_slave_1 removed [ 103.621663][ T13] team0 (unregistering): Port device team_slave_0 removed [ 103.706485][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 103.734431][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.744877][ T5904] veth1_vlan: entered promiscuous mode [ 103.748838][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.825336][ T5900] veth0_macvtap: entered promiscuous mode [ 103.844098][ T29] audit: type=1400 audit(1785404720.024:370): avc: denied { mount } for pid=5901 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 103.907700][ T5907] veth0_macvtap: entered promiscuous mode [ 103.926458][ T5897] veth0_vlan: entered promiscuous mode [ 103.940628][ T5900] veth1_macvtap: entered promiscuous mode [ 103.957105][ T5904] veth0_macvtap: entered promiscuous mode [ 104.001063][ T5907] veth1_macvtap: entered promiscuous mode [ 104.009096][ T5904] veth1_macvtap: entered promiscuous mode [ 104.022813][ T5897] veth1_vlan: entered promiscuous mode [ 104.022857][ T6235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.040119][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.059341][ T5818] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 104.093076][ T5818] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 104.121663][ T5900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.135745][ T1009] wlan1: authenticated [ 104.135817][ T6239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.139950][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.164204][ T1009] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 104.184690][ T1009] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x0 status=0 aid=0) [ 104.202003][ T6235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.220523][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.229640][ T1009] wlan1: invalid AID value 0 (out of range), turn off PS [ 104.237907][ T1009] wlan1: no SuppRates element in AssocResp [ 104.247963][ T1154] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.267764][ T1154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.297264][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.308989][ T1154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.319320][ T1154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.328800][ T1154] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.346402][ T5904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.369594][ T1154] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.379428][ T1154] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.402330][ T1154] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.439725][ T29] audit: type=1400 audit(1785404720.624:371): avc: denied { write } for pid=6237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.487732][ T60] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.539536][ T29] audit: type=1400 audit(1785404720.724:372): avc: denied { write } for pid=6249 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.579633][ T60] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.589081][ T60] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.604289][ T5897] veth0_macvtap: entered promiscuous mode [ 104.616290][ T60] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.640721][ T5897] veth1_macvtap: entered promiscuous mode [ 104.678391][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 104.703861][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.712533][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.759040][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.789864][ T5897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.809409][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.833531][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.862370][ T29] audit: type=1800 audit(1785404721.044:373): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.33" name="cluster_name" dev="configfs" ino=13773 res=0 errno=0 [ 104.908973][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.910327][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.925723][ T29] audit: type=1800 audit(1785404721.074:374): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.33" name="local" dev="configfs" ino=13776 res=0 errno=0 [ 104.949124][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.957003][ T29] audit: type=1800 audit(1785404721.074:375): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.33" name="toss_secs" dev="configfs" ino=13778 res=0 errno=0 [ 104.994377][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.010373][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.021733][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.040454][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.065179][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.086051][ T29] audit: type=1800 audit(1785404721.254:376): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.34" name="cluster_name" dev="configfs" ino=13790 res=0 errno=0 [ 105.204744][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.223717][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.266556][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.309887][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.410430][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.444698][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.580455][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.605205][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.671948][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 105.683293][ T6278] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 105.729067][ T6278] CPU: 0 UID: 0 PID: 6278 Comm: syz.6.29 Not tainted syzkaller #0 PREEMPT(full) [ 105.729093][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 105.729105][ T6278] Call Trace: [ 105.729111][ T6278] [ 105.729118][ T6278] dump_stack_lvl+0x100/0x190 [ 105.729151][ T6278] sysfs_warn_dup.cold+0x1c/0x28 [ 105.729180][ T6278] sysfs_create_dir_ns+0x24b/0x2b0 [ 105.729212][ T6278] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 105.729242][ T6278] ? find_held_lock+0x2b/0x80 [ 105.729280][ T6278] ? kobject_add_internal+0x25f/0x930 [ 105.729308][ T6278] ? kobject_add_internal+0x25f/0x930 [ 105.729339][ T6278] ? class_dir_child_ns_type+0xd/0x60 [ 105.729368][ T6278] kobject_add_internal+0x2c8/0x930 [ 105.729400][ T6278] kobject_add+0x16a/0x1e0 [ 105.729426][ T6278] ? __pfx_kobject_add+0x10/0x10 [ 105.729456][ T6278] ? get_device_parent+0x1b3/0x4c0 [ 105.729481][ T6278] ? kobject_put+0xb9/0x640 [ 105.729512][ T6278] device_add+0x294/0x1970 [ 105.729538][ T6278] ? lockdep_init_map_type+0x5c/0x250 [ 105.729562][ T6278] ? __pfx_device_add+0x10/0x10 [ 105.729587][ T6278] ? lockdep_init_map_type+0x5c/0x250 [ 105.729612][ T6278] ? __init_waitqueue_head+0xca/0x150 [ 105.729644][ T6278] tty_register_device_attr+0x388/0x7f0 [ 105.729668][ T6278] ? lockdep_init_map_type+0x5c/0x250 [ 105.729692][ T6278] ? __pfx_tty_register_device_attr+0x10/0x10 [ 105.729721][ T6278] ? tty_port_init+0x156/0x1c0 [ 105.729748][ T6278] gsm_activate_mux+0x155/0x2a0 [ 105.729772][ T6278] gsmld_ioctl+0xbbc/0x15c0 [ 105.729803][ T6278] ? kasan_quarantine_put+0x104/0x240 [ 105.729825][ T6278] ? __pfx_gsmld_ioctl+0x10/0x10 [ 105.729854][ T6278] ? __ldsem_down_read_nested+0xf3/0x890 [ 105.729886][ T6278] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 105.729920][ T6278] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 105.729944][ T6278] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 105.729962][ T6278] ? __pfx_gsmld_ioctl+0x10/0x10 [ 105.729987][ T6278] tty_ioctl+0x11b4/0x1640 [ 105.730010][ T6278] ? __pfx_tty_ioctl+0x10/0x10 [ 105.730033][ T6278] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 105.730071][ T6278] ? __fget_files+0x215/0x3d0 [ 105.730089][ T6278] ? hook_file_ioctl_common+0x140/0x440 [ 105.730117][ T6278] ? selinux_file_ioctl+0x13b/0x290 [ 105.730144][ T6278] ? selinux_file_ioctl+0xb6/0x290 [ 105.730175][ T6278] ? __pfx_tty_ioctl+0x10/0x10 [ 105.730197][ T6278] __x64_sys_ioctl+0x18e/0x210 [ 105.730226][ T6278] do_syscall_64+0x115/0x870 [ 105.730246][ T6278] ? clear_bhb_loop+0x40/0x90 [ 105.730274][ T6278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.730294][ T6278] RIP: 0033:0x7f7ad939df99 [ 105.730311][ T6278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.730330][ T6278] RSP: 002b:00007f7ada1a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.730349][ T6278] RAX: ffffffffffffffda RBX: 00007f7ad9626090 RCX: 00007f7ad939df99 [ 105.730361][ T6278] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003 [ 105.730373][ T6278] RBP: 00007f7ad9434ec4 R08: 0000000000000000 R09: 0000000000000000 [ 105.730385][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.730396][ T6278] R13: 00007f7ad9626128 R14: 00007f7ad9626090 R15: 00007fffbb25d398 [ 105.730422][ T6278] [ 105.730462][ T6278] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 105.751844][ T6142] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 105.783995][ T6281] Mass Storage Function, version: 2009/09/11 [ 105.880636][ T24] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 105.950459][ T6281] LUN: removable file: (no medium) [ 106.023137][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.092990][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 106.184996][ T6142] usb 9-1: New USB device found, idVendor=07ca, idProduct=a801, bcdDevice= 0.00 [ 106.195222][ T6142] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 106.224130][ T6142] usb 9-1: Product: syz [ 106.228393][ T6142] usb 9-1: Manufacturer: syz [ 106.269668][ T6142] dvb-usb: found a 'AVerMedia AverTV DVB-T USB 2.0 (A800)' in warm state. [ 106.334920][ T24] as10x_usb: device has been detected [ 106.349121][ T24] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 106.371619][ T6142] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.436590][ T6295] syzkaller0: entered promiscuous mode [ 106.459902][ T6142] dvbdev: DVB: registering new adapter (AVerMedia AverTV DVB-T USB 2.0 (A800)) [ 106.460523][ T6295] syzkaller0: entered allmulticast mode [ 106.470668][ T24] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 106.498374][ T6142] usb 9-1: media controller created [ 106.510469][ T6272] ------------[ cut here ]------------ [ 106.516571][ T6272] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 106.516583][ T6272] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x947/0x1bd0, CPU#0: syz.8.31/6272 [ 106.532722][ T6272] Modules linked in: [ 106.536839][ T6272] CPU: 0 UID: 0 PID: 6272 Comm: syz.8.31 Not tainted syzkaller #0 PREEMPT(full) [ 106.545960][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.556058][ T6272] RIP: 0010:__mutex_lock+0x94e/0x1bd0 [ 106.561755][ T6272] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c6 10 00 00 44 8b 35 c5 c9 65 05 45 85 f6 75 13 48 8d 3d a9 27 69 05 48 c7 c6 00 d9 cf 8b <67> 48 0f b9 3a 90 e9 18 f8 ff ff 4d 8d a7 e8 0a 00 00 4c 89 e7 e8 [ 106.581403][ T6272] RSP: 0018:ffffc9000204fa50 EFLAGS: 00010246 [ 106.587542][ T6272] RAX: 0000000000000003 RBX: ffff88802a16cb30 RCX: 1ffffffff22455b4 [ 106.595780][ T6272] RDX: 0000000000000000 RSI: ffffffff8bcfd900 RDI: ffffffff91260b90 [ 106.603973][ T6272] RBP: ffffc9000204fbc0 R08: 0000000000000001 R09: 0000000000000000 [ 106.611973][ T6272] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 106.619932][ T6272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.627922][ T6272] FS: 00007f02ceb916c0(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 106.637118][ T6272] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.643881][ T6272] CR2: 00007fd180d5da08 CR3: 0000000059853000 CR4: 00000000003526f0 [ 106.651849][ T6272] Call Trace: [ 106.655107][ T6272] [ 106.658015][ T6272] ? trace_contention_end+0x126/0x160 [ 106.663385][ T6272] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 106.669006][ T6272] ? __mutex_lock+0x26d/0x1bd0 [ 106.673873][ T6272] ? dmx_section_feed_start_filtering+0x56/0x660 [ 106.680190][ T6272] ? __pfx___mutex_lock+0x10/0x10 [ 106.685215][ T6272] ? __pfx___mutex_lock+0x10/0x10 [ 106.690223][ T6272] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 106.696203][ T6272] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 106.701847][ T6272] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 106.707313][ T6272] dmx_section_feed_start_filtering+0x3a8/0x660 [ 106.713551][ T6272] dvb_dmxdev_filter_start+0x767/0xdd0 [ 106.719000][ T6272] dvb_demux_do_ioctl+0x786/0x1200 [ 106.724113][ T6272] ? do_vfs_ioctl+0x226/0x13e0 [ 106.728863][ T6272] dvb_usercopy+0x167/0x340 [ 106.733642][ T6272] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 106.739180][ T6272] ? __pfx_dvb_usercopy+0x10/0x10 [ 106.744364][ T6272] ? selinux_file_ioctl+0x13b/0x290 [ 106.749554][ T6272] ? selinux_file_ioctl+0xb6/0x290 [ 106.754758][ T6272] dvb_demux_ioctl+0x29/0x40 [ 106.759336][ T6272] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 106.764627][ T6272] __x64_sys_ioctl+0x18e/0x210 [ 106.769381][ T6272] do_syscall_64+0x115/0x870 [ 106.773964][ T6272] ? clear_bhb_loop+0x40/0x90 [ 106.778622][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.784508][ T6272] RIP: 0033:0x7f02cdd9df99 [ 106.788903][ T6272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.808503][ T6272] RSP: 002b:00007f02ceb91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.816905][ T6272] RAX: ffffffffffffffda RBX: 00007f02ce025fa0 RCX: 00007f02cdd9df99 [ 106.824901][ T6272] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004 [ 106.832886][ T6272] RBP: 00007f02cde34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 106.841109][ T6272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 106.849243][ T6272] R13: 00007f02ce026038 R14: 00007f02ce025fa0 R15: 00007ffefaf5b2d8 [ 106.857215][ T6272] [ 106.860215][ T6272] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 106.867481][ T6272] CPU: 0 UID: 0 PID: 6272 Comm: syz.8.31 Not tainted syzkaller #0 PREEMPT(full) [ 106.876569][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 106.886610][ T6272] Call Trace: [ 106.889869][ T6272] [ 106.892779][ T6272] dump_stack_lvl+0x100/0x190 [ 106.897440][ T6272] vpanic+0x552/0x970 [ 106.901404][ T6272] ? __pfx_vpanic+0x10/0x10 [ 106.905884][ T6272] ? lock_release+0x24d/0x310 [ 106.910547][ T6272] panic+0xd1/0xe0 [ 106.914247][ T6272] ? __pfx_panic+0x10/0x10 [ 106.918646][ T6272] check_panic_on_warn.cold+0x19/0x34 [ 106.923997][ T6272] ? __mutex_lock+0x947/0x1bd0 [ 106.928741][ T6272] __warn.cold+0x191/0x318 [ 106.933135][ T6272] __report_bug+0x30f/0x440 [ 106.937622][ T6272] ? __mutex_lock+0x947/0x1bd0 [ 106.942377][ T6272] ? __pfx___report_bug+0x10/0x10 [ 106.947392][ T6272] report_bug_entry+0xe1/0x290 [ 106.952142][ T6272] ? __mutex_lock+0x94e/0x1bd0 [ 106.956888][ T6272] handle_bug+0x1cd/0x2a0 [ 106.961199][ T6272] exc_invalid_op+0x17/0x50 [ 106.965686][ T6272] asm_exc_invalid_op+0x1a/0x20 [ 106.970515][ T6272] RIP: 0010:__mutex_lock+0x94e/0x1bd0 [ 106.975871][ T6272] Code: 0f b6 14 11 38 d0 7c 08 84 d2 0f 85 c6 10 00 00 44 8b 35 c5 c9 65 05 45 85 f6 75 13 48 8d 3d a9 27 69 05 48 c7 c6 00 d9 cf 8b <67> 48 0f b9 3a 90 e9 18 f8 ff ff 4d 8d a7 e8 0a 00 00 4c 89 e7 e8 [ 106.995461][ T6272] RSP: 0018:ffffc9000204fa50 EFLAGS: 00010246 [ 107.001509][ T6272] RAX: 0000000000000003 RBX: ffff88802a16cb30 RCX: 1ffffffff22455b4 [ 107.009460][ T6272] RDX: 0000000000000000 RSI: ffffffff8bcfd900 RDI: ffffffff91260b90 [ 107.017421][ T6272] RBP: ffffc9000204fbc0 R08: 0000000000000001 R09: 0000000000000000 [ 107.025370][ T6272] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 107.033320][ T6272] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.041275][ T6272] ? trace_contention_end+0x126/0x160 [ 107.046638][ T6272] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 107.052270][ T6272] ? __mutex_lock+0x26d/0x1bd0 [ 107.057018][ T6272] ? dmx_section_feed_start_filtering+0x56/0x660 [ 107.063326][ T6272] ? __pfx___mutex_lock+0x10/0x10 [ 107.068333][ T6272] ? __pfx___mutex_lock+0x10/0x10 [ 107.073340][ T6272] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.079305][ T6272] ? as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 107.084925][ T6272] as102_dvb_dmx_start_feed+0x7d/0x2e0 [ 107.090370][ T6272] dmx_section_feed_start_filtering+0x3a8/0x660 [ 107.096594][ T6272] dvb_dmxdev_filter_start+0x767/0xdd0 [ 107.102045][ T6272] dvb_demux_do_ioctl+0x786/0x1200 [ 107.107143][ T6272] ? do_vfs_ioctl+0x226/0x13e0 [ 107.111896][ T6272] dvb_usercopy+0x167/0x340 [ 107.116381][ T6272] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 107.121924][ T6272] ? __pfx_dvb_usercopy+0x10/0x10 [ 107.126938][ T6272] ? selinux_file_ioctl+0x13b/0x290 [ 107.132137][ T6272] ? selinux_file_ioctl+0xb6/0x290 [ 107.137234][ T6272] dvb_demux_ioctl+0x29/0x40 [ 107.141809][ T6272] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 107.147081][ T6272] __x64_sys_ioctl+0x18e/0x210 [ 107.151832][ T6272] do_syscall_64+0x115/0x870 [ 107.156414][ T6272] ? clear_bhb_loop+0x40/0x90 [ 107.161072][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.166944][ T6272] RIP: 0033:0x7f02cdd9df99 [ 107.171339][ T6272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.190925][ T6272] RSP: 002b:00007f02ceb91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 107.199319][ T6272] RAX: ffffffffffffffda RBX: 00007f02ce025fa0 RCX: 00007f02cdd9df99 [ 107.207272][ T6272] RDX: 0000000000000000 RSI: 0000000000006f29 RDI: 0000000000000004 [ 107.215223][ T6272] RBP: 00007f02cde34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 107.223172][ T6272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.231122][ T6272] R13: 00007f02ce026038 R14: 00007f02ce025fa0 R15: 00007ffefaf5b2d8 [ 107.239075][ T6272] [ 107.242309][ T6272] Kernel Offset: disabled [ 107.246616][ T6272] Rebooting in 86400 seconds..