Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. 2026/02/04 22:09:02 parsed 1 programs [ 64.852275][ T30] audit: type=1400 audit(1770242942.799:62): avc: denied { node_bind } for pid=5798 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 66.785825][ T30] audit: type=1400 audit(1770242944.729:63): avc: denied { mounton } for pid=5806 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.809294][ T30] audit: type=1400 audit(1770242944.749:64): avc: denied { mount } for pid=5806 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.812564][ T5806] cgroup: Unknown subsys name 'net' [ 66.838057][ T30] audit: type=1400 audit(1770242944.779:65): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.964176][ T5806] cgroup: Unknown subsys name 'cpuset' [ 66.972639][ T5806] cgroup: Unknown subsys name 'rlimit' [ 67.142991][ T30] audit: type=1400 audit(1770242945.089:66): avc: denied { setattr } for pid=5806 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.175585][ T30] audit: type=1400 audit(1770242945.089:67): avc: denied { create } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.196272][ T30] audit: type=1400 audit(1770242945.089:68): avc: denied { write } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.220488][ T30] audit: type=1400 audit(1770242945.089:69): avc: denied { read } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.245625][ T30] audit: type=1400 audit(1770242945.089:70): avc: denied { mounton } for pid=5806 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.261491][ T5808] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 67.274032][ T30] audit: type=1400 audit(1770242945.089:71): avc: denied { mount } for pid=5806 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 68.241074][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.035316][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 70.035332][ T30] audit: type=1400 audit(1770242947.979:82): avc: denied { mounton } for pid=5816 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=2783 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.076348][ T30] audit: type=1400 audit(1770242947.989:83): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.JKC0Sd/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.115569][ T30] audit: type=1400 audit(1770242948.009:84): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.151442][ T30] audit: type=1400 audit(1770242948.009:85): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.JKC0Sd/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.167952][ T5821] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.201233][ T30] audit: type=1400 audit(1770242948.009:86): avc: denied { mount } for pid=5816 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 70.231912][ T30] audit: type=1400 audit(1770242948.009:87): avc: denied { mount } for pid=5820 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.254735][ T30] audit: type=1401 audit(1770242948.009:88): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 70.268938][ T30] audit: type=1400 audit(1770242948.009:89): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.JKC0Sd/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.295791][ T30] audit: type=1400 audit(1770242948.009:90): avc: denied { mounton } for pid=5820 comm="syz-executor" path="/root/syzkaller.JKC0Sd/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.336397][ T30] audit: type=1400 audit(1770242948.039:91): avc: denied { unmount } for pid=5820 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.077246][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.085855][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.111552][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.132424][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.140507][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.318468][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.326862][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.426032][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.434064][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.443000][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.450819][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.151769][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 72.311929][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.319222][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.329427][ T5877] bridge_slave_0: entered allmulticast mode [ 72.336979][ T5877] bridge_slave_0: entered promiscuous mode [ 72.350157][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.357780][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.365207][ T5877] bridge_slave_1: entered allmulticast mode [ 72.372422][ T5877] bridge_slave_1: entered promiscuous mode [ 72.396579][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.407751][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.433767][ T5877] team0: Port device team_slave_0 added [ 72.441691][ T5877] team0: Port device team_slave_1 added [ 72.460152][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.467433][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.493686][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.508130][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.515183][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.541113][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.570476][ T5877] hsr_slave_0: entered promiscuous mode [ 72.576819][ T5877] hsr_slave_1: entered promiscuous mode [ 72.672777][ T5877] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.684186][ T5877] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.693012][ T5877] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.702259][ T5877] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.749208][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.770054][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.781573][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.788829][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.800871][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.807998][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.919745][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.950597][ T5877] veth0_vlan: entered promiscuous mode [ 72.959839][ T5877] veth1_vlan: entered promiscuous mode [ 72.980841][ T5877] veth0_macvtap: entered promiscuous mode [ 72.989127][ T5877] veth1_macvtap: entered promiscuous mode [ 73.004756][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.016930][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.029372][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.038822][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.049023][ T154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.058273][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/02/04 22:09:11 executed programs: 0 [ 73.244231][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.252489][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.260520][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.275919][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.288536][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.316156][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.325626][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.333611][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.342230][ T5918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.349556][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.359850][ T5918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.367022][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.375618][ T5918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.383076][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.395941][ T5918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.437536][ T5918] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.449351][ T5918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.455985][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.464878][ T5918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.472106][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.480155][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.488059][ T5860] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.490741][ T5918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.503991][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.520451][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.853526][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.954469][ T5921] chnl_net:caif_netlink_parms(): no params data found [ 73.972030][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.987525][ T5922] chnl_net:caif_netlink_parms(): no params data found [ 74.078861][ T5910] chnl_net:caif_netlink_parms(): no params data found [ 74.104441][ T5915] chnl_net:caif_netlink_parms(): no params data found [ 74.228531][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.235721][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.243234][ T5922] bridge_slave_0: entered allmulticast mode [ 74.249924][ T5922] bridge_slave_0: entered promiscuous mode [ 74.257008][ T5921] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.265111][ T5921] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.272367][ T5921] bridge_slave_0: entered allmulticast mode [ 74.278936][ T5921] bridge_slave_0: entered promiscuous mode [ 74.296662][ T5912] chnl_net:caif_netlink_parms(): no params data found [ 74.308137][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.315352][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.322517][ T5922] bridge_slave_1: entered allmulticast mode [ 74.329084][ T5922] bridge_slave_1: entered promiscuous mode [ 74.335837][ T5921] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.343070][ T5921] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.350343][ T5921] bridge_slave_1: entered allmulticast mode [ 74.357169][ T5921] bridge_slave_1: entered promiscuous mode [ 74.427122][ T5921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.465490][ T5915] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.472696][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.479792][ T5915] bridge_slave_0: entered allmulticast mode [ 74.486728][ T5915] bridge_slave_0: entered promiscuous mode [ 74.495145][ T5921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.508246][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.515512][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.522755][ T5910] bridge_slave_0: entered allmulticast mode [ 74.529362][ T5910] bridge_slave_0: entered promiscuous mode [ 74.540003][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.552111][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.561273][ T5915] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.568523][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.575726][ T5915] bridge_slave_1: entered allmulticast mode [ 74.582589][ T5915] bridge_slave_1: entered promiscuous mode [ 74.598255][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.605462][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.612667][ T5910] bridge_slave_1: entered allmulticast mode [ 74.619353][ T5910] bridge_slave_1: entered promiscuous mode [ 74.662056][ T5921] team0: Port device team_slave_0 added [ 74.704760][ T5921] team0: Port device team_slave_1 added [ 74.725290][ T5910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.736640][ T5922] team0: Port device team_slave_0 added [ 74.744305][ T5915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.756392][ T5915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.772248][ T5912] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.779456][ T5912] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.786961][ T5912] bridge_slave_0: entered allmulticast mode [ 74.794094][ T5912] bridge_slave_0: entered promiscuous mode [ 74.803008][ T5910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.813511][ T5922] team0: Port device team_slave_1 added [ 74.831600][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.855373][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.863862][ T5912] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.870973][ T5912] bridge_slave_1: entered allmulticast mode [ 74.877797][ T5912] bridge_slave_1: entered promiscuous mode [ 74.911014][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.918039][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.944141][ T5921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.956135][ T5921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.963467][ T5921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.990113][ T5921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.013871][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.020826][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.046814][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.059865][ T5915] team0: Port device team_slave_0 added [ 75.072437][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.093913][ T5912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.105002][ T5910] team0: Port device team_slave_0 added [ 75.112166][ T5912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.122322][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.129241][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.155628][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.167999][ T5915] team0: Port device team_slave_1 added [ 75.195407][ T5910] team0: Port device team_slave_1 added [ 75.222504][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.229474][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.255854][ T5915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.276279][ T5912] team0: Port device team_slave_0 added [ 75.283607][ T5912] team0: Port device team_slave_1 added [ 75.310765][ T5915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.317955][ T5915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.344580][ T5915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.358817][ T5129] Bluetooth: hci0: command tx timeout [ 75.397265][ T5922] hsr_slave_0: entered promiscuous mode [ 75.405067][ T5922] hsr_slave_1: entered promiscuous mode [ 75.411033][ T5922] debugfs: 'hsr0' already exists in 'hsr' [ 75.417036][ T5922] Cannot create hsr debugfs directory [ 75.422461][ T5129] Bluetooth: hci1: command tx timeout [ 75.423520][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.435032][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.460911][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.475973][ T5921] hsr_slave_0: entered promiscuous mode [ 75.482164][ T5921] hsr_slave_1: entered promiscuous mode [ 75.488000][ T5921] debugfs: 'hsr0' already exists in 'hsr' [ 75.493815][ T5921] Cannot create hsr debugfs directory [ 75.500558][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.507669][ T5129] Bluetooth: hci3: command tx timeout [ 75.507675][ T5860] Bluetooth: hci2: command tx timeout [ 75.508655][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.544971][ T5910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.557022][ T5910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.564071][ T5910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.590448][ T5910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.591567][ T5129] Bluetooth: hci4: command tx timeout [ 75.610643][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.617669][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.643641][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.749449][ T5915] hsr_slave_0: entered promiscuous mode [ 75.755533][ T5915] hsr_slave_1: entered promiscuous mode [ 75.762633][ T5915] debugfs: 'hsr0' already exists in 'hsr' [ 75.768345][ T5915] Cannot create hsr debugfs directory [ 75.879264][ T5910] hsr_slave_0: entered promiscuous mode [ 75.886788][ T5910] hsr_slave_1: entered promiscuous mode [ 75.893245][ T5910] debugfs: 'hsr0' already exists in 'hsr' [ 75.898952][ T5910] Cannot create hsr debugfs directory [ 75.925585][ T5912] hsr_slave_0: entered promiscuous mode [ 75.931967][ T5912] hsr_slave_1: entered promiscuous mode [ 75.937848][ T5912] debugfs: 'hsr0' already exists in 'hsr' [ 75.943632][ T5912] Cannot create hsr debugfs directory [ 75.955510][ T154] bridge_slave_1: left allmulticast mode [ 75.961303][ T154] bridge_slave_1: left promiscuous mode [ 75.967824][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.977576][ T154] bridge_slave_0: left allmulticast mode [ 75.984064][ T154] bridge_slave_0: left promiscuous mode [ 75.989776][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.189072][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.199795][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.209320][ T154] bond0 (unregistering): Released all slaves [ 76.566296][ T5922] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.600665][ T154] hsr_slave_0: left promiscuous mode [ 76.610652][ T154] hsr_slave_1: left promiscuous mode [ 76.616873][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.627065][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.642672][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.651300][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.675999][ T154] veth1_macvtap: left promiscuous mode [ 76.683336][ T154] veth0_macvtap: left promiscuous mode [ 76.689004][ T154] veth1_vlan: left promiscuous mode [ 76.694683][ T154] veth0_vlan: left promiscuous mode [ 77.011495][ T154] team0 (unregistering): Port device team_slave_1 removed [ 77.033452][ T154] team0 (unregistering): Port device team_slave_0 removed [ 77.212452][ T5922] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.223500][ T5922] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.242048][ T5922] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.384507][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.413825][ T5922] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.422744][ T5129] Bluetooth: hci0: command tx timeout [ 77.442572][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.449692][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.465842][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.473008][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.502364][ T5129] Bluetooth: hci1: command tx timeout [ 77.582328][ T5129] Bluetooth: hci3: command tx timeout [ 77.594300][ T5129] Bluetooth: hci2: command tx timeout [ 77.655234][ T5921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.662470][ T5129] Bluetooth: hci4: command tx timeout [ 77.675425][ T5921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.703083][ T5921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.733331][ T5921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.865544][ T5910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.874871][ T5910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.886661][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.906233][ T5910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.934507][ T5910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.975122][ T5921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.017014][ T5921] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.046784][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.053924][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.085701][ T5915] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.105549][ T5915] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.132439][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.139539][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.162935][ T5915] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.173279][ T5915] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.320912][ T5921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.374761][ T5912] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.405243][ T5910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.416432][ T5912] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.443552][ T5912] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.484154][ T5912] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.509264][ T5922] veth0_vlan: entered promiscuous mode [ 78.516923][ T5910] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.564848][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.571992][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.589137][ T5922] veth1_vlan: entered promiscuous mode [ 78.617272][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.624436][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.673842][ T5915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.719778][ T5922] veth0_macvtap: entered promiscuous mode [ 78.750944][ T5922] veth1_macvtap: entered promiscuous mode [ 78.780537][ T5915] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.833483][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.845616][ T5921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.857316][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.864473][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.878265][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.885422][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.920685][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.984845][ T4250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.014889][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.032534][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.069439][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.089448][ T5921] veth0_vlan: entered promiscuous mode [ 79.127546][ T5921] veth1_vlan: entered promiscuous mode [ 79.152829][ T5910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.208408][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.223454][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.231266][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.245212][ T5921] veth0_macvtap: entered promiscuous mode [ 79.289099][ T5921] veth1_macvtap: entered promiscuous mode [ 79.304971][ T5912] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.330757][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.337885][ T4250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.364564][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.371711][ T4250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.386181][ T5910] veth0_vlan: entered promiscuous mode [ 79.398365][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.411946][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.422716][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.433860][ T5921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.455396][ T5910] veth1_vlan: entered promiscuous mode 2026/02/04 22:09:17 executed programs: 10 [ 79.496290][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.508295][ T5129] Bluetooth: hci0: command tx timeout [ 79.542850][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 79.542865][ T30] audit: type=1400 audit(1770242957.479:105): avc: denied { read write } for pid=6070 comm="syz.4.21" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.572626][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.583569][ T5129] Bluetooth: hci1: command tx timeout [ 79.589112][ T30] audit: type=1400 audit(1770242957.479:106): avc: denied { open } for pid=6070 comm="syz.4.21" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.614385][ T30] audit: type=1400 audit(1770242957.479:107): avc: denied { ioctl } for pid=6070 comm="syz.4.21" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.642254][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.651245][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.662338][ T5129] Bluetooth: hci2: command tx timeout [ 79.664202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 79.667754][ T5129] Bluetooth: hci3: command tx timeout [ 79.684398][ T5915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.744781][ T5860] Bluetooth: hci4: command tx timeout [ 79.755558][ T5910] veth0_macvtap: entered promiscuous mode [ 79.778938][ T5910] veth1_macvtap: entered promiscuous mode [ 79.802208][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.804862][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.832774][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.895807][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.910522][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.920962][ T5910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.929007][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.958514][ T154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.975518][ T5915] veth0_vlan: entered promiscuous mode [ 79.982215][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 79.996772][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.014673][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.023925][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.034864][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.049374][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.059733][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.065454][ T5915] veth1_vlan: entered promiscuous mode [ 80.081504][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.092420][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.103130][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.169361][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.193651][ T5915] veth0_macvtap: entered promiscuous mode [ 80.210599][ T5915] veth1_macvtap: entered promiscuous mode [ 80.220885][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.234507][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.271111][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.291505][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.293994][ T5915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.302197][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.306948][ T6049] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.333388][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.344743][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.351620][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 80.354561][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.363152][ T24] usb 5-1: GET_CAPABILITIES returned 0 [ 80.370506][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.392214][ T24] usbtmc 5-1:16.0: can't read capabilities [ 80.410681][ T5912] veth0_vlan: entered promiscuous mode [ 80.472930][ T6049] usb 4-1: Using ep0 maxpacket: 8 [ 80.479452][ T5912] veth1_vlan: entered promiscuous mode [ 80.486699][ T6049] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.504012][ T6049] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.515205][ T6049] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.524913][ T5912] veth0_macvtap: entered promiscuous mode [ 80.540671][ T6049] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.548001][ T5912] veth1_macvtap: entered promiscuous mode [ 80.560096][ T6049] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 80.583957][ T6071] FAULT_INJECTION: forcing a failure. [ 80.583957][ T6071] name failslab, interval 1, probability 0, space 0, times 1 [ 80.597667][ T30] audit: type=1400 audit(1770242958.529:108): avc: denied { write } for pid=6070 comm="syz.4.21" name="usbtmc0" dev="devtmpfs" ino=2789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 80.600711][ T6049] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.624303][ T6071] CPU: 1 UID: 0 PID: 6071 Comm: syz.4.21 Not tainted syzkaller #0 PREEMPT(full) [ 80.624322][ T6071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 80.624330][ T6071] Call Trace: [ 80.624336][ T6071] [ 80.624342][ T6071] dump_stack_lvl+0x100/0x190 [ 80.624366][ T6071] should_fail_ex.cold+0x5/0xa [ 80.624383][ T6071] should_failslab+0xc2/0x120 [ 80.624402][ T6071] ? tomoyo_realpath_from_path+0xb6/0x690 [ 80.624419][ T6071] __kmalloc_noprof+0xf6/0x9c0 [ 80.624439][ T6071] ? tomoyo_realpath_from_path+0xb6/0x690 [ 80.624455][ T6071] tomoyo_realpath_from_path+0xb6/0x690 [ 80.624476][ T6071] tomoyo_path_number_perm+0x23c/0x580 [ 80.624498][ T6071] ? tomoyo_path_number_perm+0x22e/0x580 [ 80.624521][ T6071] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 80.624564][ T6071] ? find_held_lock+0x2b/0x80 [ 80.624583][ T6071] ? hook_file_ioctl_common+0x146/0x410 [ 80.624602][ T6071] ? __fget_files+0x215/0x3d0 [ 80.624628][ T6071] ? __fget_files+0x21f/0x3d0 [ 80.624649][ T6071] security_file_ioctl+0xd3/0x230 [ 80.624666][ T6071] __x64_sys_ioctl+0xb7/0x210 [ 80.624683][ T6071] do_syscall_64+0xc9/0xf80 [ 80.624702][ T6071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.624717][ T6071] RIP: 0033:0x7f7ea1d9aeb9 [ 80.624729][ T6071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.624742][ T6071] RSP: 002b:00007f7ea2cc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.624757][ T6071] RAX: ffffffffffffffda RBX: 00007f7ea2015fa0 RCX: 00007f7ea1d9aeb9 [ 80.624767][ T6071] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 80.624775][ T6071] RBP: 00007f7ea2cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 80.624784][ T6071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.624792][ T6071] R13: 00007f7ea2016038 R14: 00007f7ea2015fa0 R15: 00007ffe4dae39c8 [ 80.624812][ T6071] [ 80.624819][ T6071] ERROR: Out of memory at tomoyo_realpath_from_path. [ 80.702498][ T5904] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.761492][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 80.783462][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.859706][ T6072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.869160][ T6072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.877386][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 80.886605][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 80.895633][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 80.914315][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 80.924668][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 80.941014][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 80.950087][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 80.961058][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 80.966587][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 80.975675][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 80.984702][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 80.993750][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.002777][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.011787][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.024328][ T5904] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.034779][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.048309][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.048455][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.070411][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.072014][ T6049] usb 4-1: GET_CAPABILITIES returned 0 [ 81.083698][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.093097][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.102160][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 81.128813][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.138793][ T5904] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.153246][ T6049] usbtmc 4-1:16.0: can't read capabilities [ 81.160119][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.179298][ T5904] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 81.192918][ T6075] usb 5-1: USB disconnect, device number 2 [ 81.208961][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.220247][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.244752][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.258239][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.281203][ T6080] FAULT_INJECTION: forcing a failure. [ 81.281203][ T6080] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 81.297716][ T6080] CPU: 1 UID: 0 PID: 6080 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full) [ 81.297738][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 81.297747][ T6080] Call Trace: [ 81.297753][ T6080] [ 81.297759][ T6080] dump_stack_lvl+0x100/0x190 [ 81.297786][ T6080] should_fail_ex.cold+0x5/0xa [ 81.297804][ T6080] _copy_to_user+0x32/0xd0 [ 81.297823][ T6080] simple_read_from_buffer+0xcb/0x170 [ 81.297837][ T6080] proc_fail_nth_read+0x1af/0x230 [ 81.297853][ T6080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.297869][ T6080] ? rw_verify_area+0xce/0x6d0 [ 81.297883][ T6080] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.297905][ T6080] vfs_read+0x1e4/0xb30 [ 81.297924][ T6080] ? __pfx_vfs_read+0x10/0x10 [ 81.297938][ T6080] ? find_held_lock+0x2b/0x80 [ 81.297959][ T6080] ? __fget_files+0x215/0x3d0 [ 81.297974][ T6080] ? __fget_files+0x21f/0x3d0 [ 81.297989][ T6080] ksys_read+0x12a/0x250 [ 81.298000][ T6080] ? __pfx_ksys_read+0x10/0x10 [ 81.298012][ T6080] ? fdget+0x18b/0x210 [ 81.298031][ T6080] do_syscall_64+0xc9/0xf80 [ 81.298052][ T6080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.298068][ T6080] RIP: 0033:0x7f1cff35b78e [ 81.298080][ T6080] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 81.298094][ T6080] RSP: 002b:00007f1d00340fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.298107][ T6080] RAX: ffffffffffffffda RBX: 00007f1d003416c0 RCX: 00007f1cff35b78e [ 81.298113][ T6080] RDX: 000000000000000f RSI: 00007f1d003410a0 RDI: 0000000000000005 [ 81.298119][ T6080] RBP: 00007f1d00341090 R08: 0000000000000000 R09: 0000000000000000 [ 81.298125][ T6080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.298131][ T6080] R13: 00007f1cff616038 R14: 00007f1cff615fa0 R15: 00007ffd71e38b68 [ 81.298143][ T6080] [ 81.525201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.531774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 81.542052][ T6074] usb 4-1: USB disconnect, device number 2 [ 81.555976][ T5904] usb 1-1: GET_CAPABILITIES returned 0 [ 81.565307][ T5904] usbtmc 1-1:16.0: can't read capabilities [ 81.581655][ T5860] Bluetooth: hci0: command tx timeout [ 81.631585][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.639547][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.670748][ T5860] Bluetooth: hci1: command tx timeout [ 81.733604][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.742513][ T5129] Bluetooth: hci2: command tx timeout [ 81.747947][ T5860] Bluetooth: hci3: command tx timeout [ 81.754357][ T6084] FAULT_INJECTION: forcing a failure. [ 81.754357][ T6084] name failslab, interval 1, probability 0, space 0, times 0 [ 81.777281][ T6084] CPU: 1 UID: 0 PID: 6084 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 81.777305][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 81.777314][ T6084] Call Trace: [ 81.777319][ T6084] [ 81.777325][ T6084] dump_stack_lvl+0x100/0x190 [ 81.777343][ T6084] should_fail_ex.cold+0x5/0xa [ 81.777355][ T6084] should_failslab+0xc2/0x120 [ 81.777370][ T6084] ? tomoyo_realpath_from_path+0xb6/0x690 [ 81.777382][ T6084] __kmalloc_noprof+0xf6/0x9c0 [ 81.777396][ T6084] ? tomoyo_realpath_from_path+0xb6/0x690 [ 81.777409][ T6084] tomoyo_realpath_from_path+0xb6/0x690 [ 81.777424][ T6084] tomoyo_path_number_perm+0x23c/0x580 [ 81.777440][ T6084] ? tomoyo_path_number_perm+0x22e/0x580 [ 81.777457][ T6084] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 81.777486][ T6084] ? find_held_lock+0x2b/0x80 [ 81.777501][ T6084] ? hook_file_ioctl_common+0x146/0x410 [ 81.777514][ T6084] ? __fget_files+0x215/0x3d0 [ 81.777529][ T6084] ? __fget_files+0x21f/0x3d0 [ 81.777543][ T6084] security_file_ioctl+0xd3/0x230 [ 81.777555][ T6084] __x64_sys_ioctl+0xb7/0x210 [ 81.777567][ T6084] do_syscall_64+0xc9/0xf80 [ 81.777580][ T6084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.777590][ T6084] RIP: 0033:0x7f4244b9aeb9 [ 81.777599][ T6084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.777609][ T6084] RSP: 002b:00007f4245afc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.777619][ T6084] RAX: ffffffffffffffda RBX: 00007f4244e15fa0 RCX: 00007f4244b9aeb9 [ 81.777626][ T6084] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 81.777632][ T6084] RBP: 00007f4245afc090 R08: 0000000000000000 R09: 0000000000000000 [ 81.777637][ T6084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.777643][ T6084] R13: 00007f4244e16038 R14: 00007f4244e15fa0 R15: 00007fff49295e28 [ 81.777661][ T6084] [ 81.777665][ T6084] ERROR: Out of memory at tomoyo_realpath_from_path. [ 81.823038][ T5860] Bluetooth: hci4: command tx timeout [ 81.983988][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.000850][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.009931][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.018981][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.028040][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.037104][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.046155][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.055864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 82.073434][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.082496][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.083163][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 82.091526][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.108640][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.117640][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.126634][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.135638][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.144642][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.153642][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.162638][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 82.172932][ T6074] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.182837][ T5876] usb 1-1: USB disconnect, device number 2 [ 82.268196][ T5904] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.331458][ T6074] usb 4-1: Using ep0 maxpacket: 8 [ 82.339144][ T6074] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.349745][ T6074] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.360086][ T6074] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.370521][ T6074] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.383988][ T6074] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.393132][ T6074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.452577][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 82.458988][ T5904] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.469418][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.480405][ T5904] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.490371][ T5904] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.506449][ T5904] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.515577][ T6049] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.523281][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.543019][ T6075] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.605047][ T6074] usb 4-1: GET_CAPABILITIES returned 0 [ 82.610597][ T6074] usbtmc 4-1:16.0: can't read capabilities [ 82.641708][ T5876] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 82.691486][ T6049] usb 5-1: Using ep0 maxpacket: 8 [ 82.697768][ T6049] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.701722][ T6075] usb 2-1: Using ep0 maxpacket: 8 [ 82.708627][ T6049] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.723179][ T6049] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.727476][ T6075] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.733556][ T6049] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.743656][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.765821][ T5904] usb 3-1: GET_CAPABILITIES returned 0 [ 82.772600][ T6049] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.772612][ T6075] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.772633][ T6075] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.782562][ T5904] usbtmc 3-1:16.0: can't read capabilities [ 82.791795][ T5876] usb 1-1: Using ep0 maxpacket: 8 [ 82.794036][ T6075] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 82.804954][ T6049] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.810106][ T6089] FAULT_INJECTION: forcing a failure. [ 82.810106][ T6089] name failslab, interval 1, probability 0, space 0, times 0 [ 82.850006][ T6075] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 82.859312][ T5876] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 82.869341][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 82.879510][ T6075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.888887][ T5876] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 82.899758][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(full) [ 82.899778][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 82.899788][ T6089] Call Trace: [ 82.899793][ T6089] [ 82.899799][ T6089] dump_stack_lvl+0x100/0x190 [ 82.899825][ T6089] should_fail_ex.cold+0x5/0xa [ 82.899843][ T6089] should_failslab+0xc2/0x120 [ 82.899866][ T6089] ? tomoyo_realpath_from_path+0xb6/0x690 [ 82.899884][ T6089] __kmalloc_noprof+0xf6/0x9c0 [ 82.899907][ T6089] ? tomoyo_realpath_from_path+0xb6/0x690 [ 82.899925][ T6089] tomoyo_realpath_from_path+0xb6/0x690 [ 82.899948][ T6089] tomoyo_path_number_perm+0x23c/0x580 [ 82.899974][ T6089] ? tomoyo_path_number_perm+0x22e/0x580 [ 82.900002][ T6089] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 82.900048][ T6089] ? find_held_lock+0x2b/0x80 [ 82.900068][ T6089] ? hook_file_ioctl_common+0x146/0x410 [ 82.900088][ T6089] ? __fget_files+0x215/0x3d0 [ 82.900110][ T6089] ? __fget_files+0x21f/0x3d0 [ 82.900132][ T6089] security_file_ioctl+0xd3/0x230 [ 82.900150][ T6089] __x64_sys_ioctl+0xb7/0x210 [ 82.900168][ T6089] do_syscall_64+0xc9/0xf80 [ 82.900187][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.900203][ T6089] RIP: 0033:0x7f1cff39aeb9 [ 82.900216][ T6089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.900231][ T6089] RSP: 002b:00007f1d00341028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 82.900246][ T6089] RAX: ffffffffffffffda RBX: 00007f1cff615fa0 RCX: 00007f1cff39aeb9 [ 82.900256][ T6089] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 82.900264][ T6089] RBP: 00007f1d00341090 R08: 0000000000000000 R09: 0000000000000000 [ 82.900273][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.900282][ T6089] R13: 00007f1cff616038 R14: 00007f1cff615fa0 R15: 00007ffd71e38b68 [ 82.900303][ T6089] [ 82.900632][ T6089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 82.902569][ T6074] usb 4-1: USB disconnect, device number 3 [ 83.111034][ T5876] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.124226][ T5876] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.133281][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.146693][ T6049] usb 5-1: GET_CAPABILITIES returned 0 [ 83.165264][ T6049] usbtmc 5-1:16.0: can't read capabilities [ 83.171968][ T6092] FAULT_INJECTION: forcing a failure. [ 83.171968][ T6092] name failslab, interval 1, probability 0, space 0, times 0 [ 83.193389][ T6092] CPU: 0 UID: 0 PID: 6092 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full) [ 83.193414][ T6092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 83.193424][ T6092] Call Trace: [ 83.193430][ T6092] [ 83.193436][ T6092] dump_stack_lvl+0x100/0x190 [ 83.193463][ T6092] should_fail_ex.cold+0x5/0xa [ 83.193481][ T6092] should_failslab+0xc2/0x120 [ 83.193503][ T6092] ? tomoyo_realpath_from_path+0xb6/0x690 [ 83.193521][ T6092] __kmalloc_noprof+0xf6/0x9c0 [ 83.193542][ T6092] ? tomoyo_realpath_from_path+0xb6/0x690 [ 83.193560][ T6092] tomoyo_realpath_from_path+0xb6/0x690 [ 83.193582][ T6092] tomoyo_path_number_perm+0x23c/0x580 [ 83.193607][ T6092] ? tomoyo_path_number_perm+0x22e/0x580 [ 83.193633][ T6092] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 83.193688][ T6092] ? find_held_lock+0x2b/0x80 [ 83.193710][ T6092] ? hook_file_ioctl_common+0x146/0x410 [ 83.193730][ T6092] ? __fget_files+0x215/0x3d0 [ 83.193752][ T6092] ? __fget_files+0x21f/0x3d0 [ 83.193778][ T6092] security_file_ioctl+0xd3/0x230 [ 83.193797][ T6092] __x64_sys_ioctl+0xb7/0x210 [ 83.193814][ T6092] do_syscall_64+0xc9/0xf80 [ 83.193836][ T6092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.193852][ T6092] RIP: 0033:0x7fefbff9aeb9 [ 83.193865][ T6092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.193881][ T6092] RSP: 002b:00007fefc0e07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.193898][ T6092] RAX: ffffffffffffffda RBX: 00007fefc0215fa0 RCX: 00007fefbff9aeb9 [ 83.193909][ T6092] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 83.193919][ T6092] RBP: 00007fefc0e07090 R08: 0000000000000000 R09: 0000000000000000 [ 83.193929][ T6092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.193937][ T6092] R13: 00007fefc0216038 R14: 00007fefc0215fa0 R15: 00007ffe07349548 [ 83.193959][ T6092] [ 83.193966][ T6092] ERROR: Out of memory at tomoyo_realpath_from_path. [ 83.197798][ T24] usb 3-1: USB disconnect, device number 2 [ 83.443839][ T6075] usb 2-1: GET_CAPABILITIES returned 0 [ 83.449317][ T6075] usbtmc 2-1:16.0: can't read capabilities [ 83.455565][ T5876] usb 1-1: GET_CAPABILITIES returned 0 [ 83.464896][ T6095] FAULT_INJECTION: forcing a failure. [ 83.464896][ T6095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.471497][ T5876] usbtmc 1-1:16.0: can't read capabilities [ 83.524891][ T6095] CPU: 1 UID: 0 PID: 6095 Comm: syz.4.23 Not tainted syzkaller #0 PREEMPT(full) [ 83.524911][ T6095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 83.524919][ T6095] Call Trace: [ 83.524925][ T6095] [ 83.524933][ T6095] dump_stack_lvl+0x100/0x190 [ 83.524960][ T6095] should_fail_ex.cold+0x5/0xa [ 83.524977][ T6095] _copy_to_user+0x32/0xd0 [ 83.525000][ T6095] simple_read_from_buffer+0xcb/0x170 [ 83.525022][ T6095] proc_fail_nth_read+0x1af/0x230 [ 83.525046][ T6095] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.525071][ T6095] ? rw_verify_area+0xce/0x6d0 [ 83.525087][ T6095] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 83.525110][ T6095] vfs_read+0x1e4/0xb30 [ 83.525129][ T6095] ? __pfx_vfs_read+0x10/0x10 [ 83.525144][ T6095] ? find_held_lock+0x2b/0x80 [ 83.525166][ T6095] ? __fget_files+0x215/0x3d0 [ 83.525187][ T6095] ? __fget_files+0x21f/0x3d0 [ 83.525212][ T6095] ksys_read+0x12a/0x250 [ 83.525229][ T6095] ? __pfx_ksys_read+0x10/0x10 [ 83.525247][ T6095] ? fdget+0x18b/0x210 [ 83.525267][ T6095] do_syscall_64+0xc9/0xf80 [ 83.525287][ T6095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.525302][ T6095] RIP: 0033:0x7f7ea1d5b78e [ 83.525315][ T6095] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 83.525329][ T6095] RSP: 002b:00007f7ea2cc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 83.525344][ T6095] RAX: ffffffffffffffda RBX: 00007f7ea2cc76c0 RCX: 00007f7ea1d5b78e [ 83.525354][ T6095] RDX: 000000000000000f RSI: 00007f7ea2cc70a0 RDI: 0000000000000005 [ 83.525363][ T6095] RBP: 00007f7ea2cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.525372][ T6095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.525381][ T6095] R13: 00007f7ea2016038 R14: 00007f7ea2015fa0 R15: 00007ffe4dae39c8 [ 83.525403][ T6095] [ 83.526259][ T794] usb 5-1: USB disconnect, device number 3 [ 83.752002][ T6097] FAULT_INJECTION: forcing a failure. [ 83.752002][ T6097] name failslab, interval 1, probability 0, space 0, times 0 [ 83.773064][ T6099] FAULT_INJECTION: forcing a failure. [ 83.773064][ T6099] name failslab, interval 1, probability 0, space 0, times 0 [ 83.801653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.809994][ T6097] CPU: 0 UID: 0 PID: 6097 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(full) [ 83.810016][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 83.810025][ T6097] Call Trace: [ 83.810031][ T6097] [ 83.810037][ T6097] dump_stack_lvl+0x100/0x190 [ 83.810065][ T6097] should_fail_ex.cold+0x5/0xa [ 83.810084][ T6097] should_failslab+0xc2/0x120 [ 83.810108][ T6097] ? tomoyo_realpath_from_path+0xb6/0x690 [ 83.810126][ T6097] __kmalloc_noprof+0xf6/0x9c0 [ 83.810150][ T6097] ? tomoyo_realpath_from_path+0xb6/0x690 [ 83.810169][ T6097] tomoyo_realpath_from_path+0xb6/0x690 [ 83.810194][ T6097] tomoyo_path_number_perm+0x23c/0x580 [ 83.810220][ T6097] ? tomoyo_path_number_perm+0x22e/0x580 [ 83.810248][ T6097] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 83.810300][ T6097] ? find_held_lock+0x2b/0x80 [ 83.810323][ T6097] ? hook_file_ioctl_common+0x146/0x410 [ 83.810344][ T6097] ? __fget_files+0x215/0x3d0 [ 83.810370][ T6097] ? __fget_files+0x21f/0x3d0 [ 83.810398][ T6097] security_file_ioctl+0xd3/0x230 [ 83.810418][ T6097] __x64_sys_ioctl+0xb7/0x210 [ 83.810435][ T6097] do_syscall_64+0xc9/0xf80 [ 83.810456][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.810472][ T6097] RIP: 0033:0x7f4244b9aeb9 [ 83.810487][ T6097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.810503][ T6097] RSP: 002b:00007f4245afc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.810519][ T6097] RAX: ffffffffffffffda RBX: 00007f4244e15fa0 RCX: 00007f4244b9aeb9 [ 83.810530][ T6097] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 83.810540][ T6097] RBP: 00007f4245afc090 R08: 0000000000000000 R09: 0000000000000000 [ 83.810550][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.810559][ T6097] R13: 00007f4244e16038 R14: 00007f4244e15fa0 R15: 00007fff49295e28 [ 83.810583][ T6097] [ 83.810652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.810664][ T6097] ERROR: Out of memory at tomoyo_realpath_from_path. [ 84.028218][ T6099] CPU: 0 UID: 0 PID: 6099 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full) [ 84.028240][ T6099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 84.028249][ T6099] Call Trace: [ 84.028255][ T6099] [ 84.028261][ T6099] dump_stack_lvl+0x100/0x190 [ 84.028288][ T6099] should_fail_ex.cold+0x5/0xa [ 84.028307][ T6099] should_failslab+0xc2/0x120 [ 84.028327][ T6099] ? tomoyo_realpath_from_path+0xb6/0x690 [ 84.028345][ T6099] __kmalloc_noprof+0xf6/0x9c0 [ 84.028366][ T6099] ? tomoyo_realpath_from_path+0xb6/0x690 [ 84.028383][ T6099] tomoyo_realpath_from_path+0xb6/0x690 [ 84.028407][ T6099] tomoyo_path_number_perm+0x23c/0x580 [ 84.028431][ T6099] ? tomoyo_path_number_perm+0x22e/0x580 [ 84.028456][ T6099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 84.028504][ T6099] ? find_held_lock+0x2b/0x80 [ 84.028525][ T6099] ? hook_file_ioctl_common+0x146/0x410 [ 84.028545][ T6099] ? __fget_files+0x215/0x3d0 [ 84.028569][ T6099] ? __fget_files+0x21f/0x3d0 [ 84.028591][ T6099] security_file_ioctl+0xd3/0x230 [ 84.028609][ T6099] __x64_sys_ioctl+0xb7/0x210 [ 84.028627][ T6099] do_syscall_64+0xc9/0xf80 [ 84.028648][ T6099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.028665][ T6099] RIP: 0033:0x7f076bd9aeb9 [ 84.028686][ T6099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.028699][ T6099] RSP: 002b:00007f076cc4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.028715][ T6099] RAX: ffffffffffffffda RBX: 00007f076c015fa0 RCX: 00007f076bd9aeb9 [ 84.028725][ T6099] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 84.028735][ T6099] RBP: 00007f076cc4a090 R08: 0000000000000000 R09: 0000000000000000 [ 84.028745][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.028754][ T6099] R13: 00007f076c016038 R14: 00007f076c015fa0 R15: 00007ffea488f1b8 [ 84.028777][ T6099] [ 84.028790][ T6099] ERROR: Out of memory at tomoyo_realpath_from_path. [ 84.036934][ T5876] usb 2-1: USB disconnect, device number 2 [ 84.283785][ T5904] usb 1-1: USB disconnect, device number 3 [ 84.302829][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.412210][ T6074] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.451562][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 84.458676][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.469559][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.479424][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.490730][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.503959][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.513812][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.561621][ T794] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 84.561864][ T6074] usb 4-1: Using ep0 maxpacket: 8 [ 84.582240][ T5876] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.603873][ T6074] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.614538][ T6074] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.630607][ T6074] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.641034][ T6074] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.654469][ T6074] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.663701][ T6074] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.684205][ T5904] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 84.732102][ T794] usb 5-1: Using ep0 maxpacket: 8 [ 84.738179][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 84.744064][ T24] usbtmc 3-1:16.0: can't read capabilities [ 84.744175][ T794] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.751509][ T5876] usb 2-1: Using ep0 maxpacket: 8 [ 84.759990][ T794] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.786977][ T5876] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.808264][ T5876] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.820612][ T794] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.831000][ T5876] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.831443][ T794] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.854384][ T794] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.864180][ T5876] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.864223][ T5876] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.887792][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.891520][ T6074] usb 4-1: GET_CAPABILITIES returned 0 [ 84.897766][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 84.912754][ T6074] usbtmc 4-1:16.0: can't read capabilities [ 84.921047][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.921118][ T5904] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.939138][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.953574][ T6103] FAULT_INJECTION: forcing a failure. [ 84.953574][ T6103] name failslab, interval 1, probability 0, space 0, times 0 [ 84.980713][ T5904] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.992322][ T6103] CPU: 0 UID: 0 PID: 6103 Comm: syz.2.25 Not tainted syzkaller #0 PREEMPT(full) [ 84.992342][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 84.992357][ T6103] Call Trace: [ 84.992362][ T6103] [ 84.992368][ T6103] dump_stack_lvl+0x100/0x190 [ 84.992392][ T6103] should_fail_ex.cold+0x5/0xa [ 84.992412][ T6103] should_failslab+0xc2/0x120 [ 84.992431][ T6103] ? tomoyo_realpath_from_path+0xb6/0x690 [ 84.992447][ T6103] __kmalloc_noprof+0xf6/0x9c0 [ 84.992466][ T6103] ? tomoyo_realpath_from_path+0xb6/0x690 [ 84.992480][ T6103] tomoyo_realpath_from_path+0xb6/0x690 [ 84.992499][ T6103] tomoyo_path_number_perm+0x23c/0x580 [ 84.992520][ T6103] ? tomoyo_path_number_perm+0x22e/0x580 [ 84.992541][ T6103] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 84.992582][ T6103] ? find_held_lock+0x2b/0x80 [ 84.992599][ T6103] ? hook_file_ioctl_common+0x146/0x410 [ 84.992617][ T6103] ? __fget_files+0x215/0x3d0 [ 84.992636][ T6103] ? __fget_files+0x21f/0x3d0 [ 84.992655][ T6103] security_file_ioctl+0xd3/0x230 [ 84.992671][ T6103] __x64_sys_ioctl+0xb7/0x210 [ 84.992686][ T6103] do_syscall_64+0xc9/0xf80 [ 84.992704][ T6103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.992719][ T6103] RIP: 0033:0x7fefbff9aeb9 [ 84.992730][ T6103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.992743][ T6103] RSP: 002b:00007fefc0e07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.992757][ T6103] RAX: ffffffffffffffda RBX: 00007fefc0215fa0 RCX: 00007fefbff9aeb9 [ 84.992766][ T6103] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 84.992774][ T6103] RBP: 00007fefc0e07090 R08: 0000000000000000 R09: 0000000000000000 [ 84.992782][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.992790][ T6103] R13: 00007fefc0216038 R14: 00007fefc0215fa0 R15: 00007ffe07349548 [ 84.992810][ T6103] [ 84.992834][ T6103] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.197898][ T5904] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 85.197950][ T5876] usb 2-1: GET_CAPABILITIES returned 0 [ 85.211915][ T794] usb 5-1: GET_CAPABILITIES returned 0 [ 85.224107][ T6107] FAULT_INJECTION: forcing a failure. [ 85.224107][ T6107] name failslab, interval 1, probability 0, space 0, times 0 [ 85.237092][ T794] usbtmc 5-1:16.0: can't read capabilities [ 85.237126][ T5876] usbtmc 2-1:16.0: can't read capabilities [ 85.243010][ T6107] CPU: 0 UID: 0 PID: 6107 Comm: syz.3.26 Not tainted syzkaller #0 PREEMPT(full) [ 85.243029][ T6107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 85.243038][ T6107] Call Trace: [ 85.243043][ T6107] [ 85.243049][ T6107] dump_stack_lvl+0x100/0x190 [ 85.243072][ T6107] should_fail_ex.cold+0x5/0xa [ 85.243089][ T6107] should_failslab+0xc2/0x120 [ 85.243109][ T6107] ? tomoyo_realpath_from_path+0xb6/0x690 [ 85.243126][ T6107] __kmalloc_noprof+0xf6/0x9c0 [ 85.243148][ T6107] ? tomoyo_realpath_from_path+0xb6/0x690 [ 85.243163][ T6107] tomoyo_realpath_from_path+0xb6/0x690 [ 85.243185][ T6107] tomoyo_path_number_perm+0x23c/0x580 [ 85.243207][ T6107] ? tomoyo_path_number_perm+0x22e/0x580 [ 85.243230][ T6107] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 85.243273][ T6107] ? find_held_lock+0x2b/0x80 [ 85.243292][ T6107] ? hook_file_ioctl_common+0x146/0x410 [ 85.243311][ T6107] ? __fget_files+0x215/0x3d0 [ 85.243338][ T6107] ? __fget_files+0x21f/0x3d0 [ 85.243358][ T6107] security_file_ioctl+0xd3/0x230 [ 85.243375][ T6107] __x64_sys_ioctl+0xb7/0x210 [ 85.243391][ T6107] do_syscall_64+0xc9/0xf80 [ 85.243410][ T6107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.243426][ T6107] RIP: 0033:0x7f1cff39aeb9 [ 85.243439][ T6107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.243453][ T6107] RSP: 002b:00007f1d00341028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.243468][ T6107] RAX: ffffffffffffffda RBX: 00007f1cff615fa0 RCX: 00007f1cff39aeb9 [ 85.243478][ T6107] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 85.243487][ T6107] RBP: 00007f1d00341090 R08: 0000000000000000 R09: 0000000000000000 [ 85.243495][ T6107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.243504][ T6107] R13: 00007f1cff616038 R14: 00007f1cff615fa0 R15: 00007ffd71e38b68 [ 85.243525][ T6107] [ 85.243531][ T6107] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.452920][ T5904] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 85.464340][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.473782][ T6110] FAULT_INJECTION: forcing a failure. [ 85.473782][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 85.490844][ T6115] FAULT_INJECTION: forcing a failure. [ 85.490844][ T6115] name failslab, interval 1, probability 0, space 0, times 0 [ 85.513114][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.522272][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.531330][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.540384][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.549503][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.558538][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.567850][ T6110] CPU: 1 UID: 0 PID: 6110 Comm: syz.4.27 Not tainted syzkaller #0 PREEMPT(full) [ 85.567871][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 85.567881][ T6110] Call Trace: [ 85.567887][ T6110] [ 85.567893][ T6110] dump_stack_lvl+0x100/0x190 [ 85.567920][ T6110] should_fail_ex.cold+0x5/0xa [ 85.567939][ T6110] should_failslab+0xc2/0x120 [ 85.567960][ T6110] ? tomoyo_realpath_from_path+0xb6/0x690 [ 85.567979][ T6110] __kmalloc_noprof+0xf6/0x9c0 [ 85.567999][ T6110] ? tomoyo_realpath_from_path+0xb6/0x690 [ 85.568016][ T6110] tomoyo_realpath_from_path+0xb6/0x690 [ 85.568036][ T6110] tomoyo_path_number_perm+0x23c/0x580 [ 85.568061][ T6110] ? tomoyo_path_number_perm+0x22e/0x580 [ 85.568087][ T6110] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 85.568132][ T6110] ? find_held_lock+0x2b/0x80 [ 85.568153][ T6110] ? hook_file_ioctl_common+0x146/0x410 [ 85.568171][ T6110] ? __fget_files+0x215/0x3d0 [ 85.568192][ T6110] ? __fget_files+0x21f/0x3d0 [ 85.568214][ T6110] security_file_ioctl+0xd3/0x230 [ 85.568234][ T6110] __x64_sys_ioctl+0xb7/0x210 [ 85.568252][ T6110] do_syscall_64+0xc9/0xf80 [ 85.568271][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.568286][ T6110] RIP: 0033:0x7f7ea1d9aeb9 [ 85.568299][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.568314][ T6110] RSP: 002b:00007f7ea2cc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.568328][ T6110] RAX: ffffffffffffffda RBX: 00007f7ea2015fa0 RCX: 00007f7ea1d9aeb9 [ 85.568338][ T6110] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 85.568347][ T6110] RBP: 00007f7ea2cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 85.568355][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.568364][ T6110] R13: 00007f7ea2016038 R14: 00007f7ea2015fa0 R15: 00007ffe4dae39c8 [ 85.568392][ T6110] [ 85.768971][ T6110] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.779375][ T6115] CPU: 1 UID: 0 PID: 6115 Comm: syz.1.28 Not tainted syzkaller #0 PREEMPT(full) [ 85.779401][ T6115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 85.779409][ T6115] Call Trace: [ 85.779415][ T6115] [ 85.779421][ T6115] dump_stack_lvl+0x100/0x190 [ 85.779447][ T6115] should_fail_ex.cold+0x5/0xa [ 85.779465][ T6115] should_failslab+0xc2/0x120 [ 85.779486][ T6115] ? tomoyo_realpath_from_path+0xb6/0x690 [ 85.779503][ T6115] __kmalloc_noprof+0xf6/0x9c0 [ 85.779525][ T6115] ? tomoyo_realpath_from_path+0xb6/0x690 [ 85.779541][ T6115] tomoyo_realpath_from_path+0xb6/0x690 [ 85.779565][ T6115] tomoyo_path_number_perm+0x23c/0x580 [ 85.779591][ T6115] ? tomoyo_path_number_perm+0x22e/0x580 [ 85.779619][ T6115] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 85.779666][ T6115] ? find_held_lock+0x2b/0x80 [ 85.779689][ T6115] ? hook_file_ioctl_common+0x146/0x410 [ 85.779707][ T6115] ? __fget_files+0x215/0x3d0 [ 85.779731][ T6115] ? __fget_files+0x21f/0x3d0 [ 85.779753][ T6115] security_file_ioctl+0xd3/0x230 [ 85.779770][ T6115] __x64_sys_ioctl+0xb7/0x210 [ 85.779788][ T6115] do_syscall_64+0xc9/0xf80 [ 85.779808][ T6115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.779824][ T6115] RIP: 0033:0x7f076bd9aeb9 [ 85.779837][ T6115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.779850][ T6115] RSP: 002b:00007f076cc4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.779865][ T6115] RAX: ffffffffffffffda RBX: 00007f076c015fa0 RCX: 00007f076bd9aeb9 [ 85.779875][ T6115] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005 [ 85.779885][ T6115] RBP: 00007f076cc4a090 R08: 0000000000000000 R09: 0000000000000000 [ 85.779895][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.779904][ T6115] R13: 00007f076c016038 R14: 00007f076c015fa0 R15: 00007ffea488f1b8 [ 85.779926][ T6115] [ 85.779933][ T6115] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.985874][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 85.994916][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.003926][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.012969][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.021982][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.030998][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.040010][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.049019][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.058028][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.073201][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 86.081797][ T6074] usb 5-1: USB disconnect, device number 4 [ 86.082375][ C0] ================================================================== [ 86.096101][ C0] BUG: KASAN: slab-use-after-free in usb_anchor_suspend_wakeups+0x28/0x40 [ 86.104594][ C0] Write of size 4 at addr ffff888074da8910 by task ksoftirqd/0/15 [ 86.112367][ C0] [ 86.114664][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 86.114677][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 86.114684][ C0] Call Trace: [ 86.114688][ C0] [ 86.114693][ C0] dump_stack_lvl+0x100/0x190 [ 86.114708][ C0] print_report+0x156/0x4c9 [ 86.114723][ C0] ? __virt_addr_valid+0x81/0x620 [ 86.114734][ C0] ? __phys_addr+0xe8/0x180 [ 86.114744][ C0] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 86.114760][ C0] kasan_report+0xdf/0x1a0 [ 86.114774][ C0] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 86.114792][ C0] kasan_check_range+0x10f/0x1e0 [ 86.114808][ C0] usb_anchor_suspend_wakeups+0x28/0x40 [ 86.114825][ C0] __usb_hcd_giveback_urb+0x223/0x610 [ 86.114840][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 86.114855][ C0] dummy_timer+0xd85/0x3670 [ 86.114873][ C0] ? find_held_lock+0x2b/0x80 [ 86.114889][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 86.114902][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 86.114914][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 86.114929][ C0] ? __hrtimer_run_queues+0x433/0x990 [ 86.114943][ C0] ? rcu_is_watching+0x12/0xc0 [ 86.114957][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.114968][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 86.114983][ C0] __hrtimer_run_queues+0x516/0x990 [ 86.114997][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 86.115010][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 86.115024][ C0] hrtimer_run_softirq+0x17d/0x350 [ 86.115037][ C0] handle_softirqs+0x1ea/0x910 [ 86.115053][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 86.115069][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 86.115084][ C0] run_ksoftirqd+0x38/0x60 [ 86.115098][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 86.115110][ C0] ? kthread+0x17d/0x730 [ 86.115120][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 86.115130][ C0] kthread+0x3b3/0x730 [ 86.115140][ C0] ? __pfx_kthread+0x10/0x10 [ 86.115151][ C0] ? ret_from_fork+0x79/0xaf0 [ 86.115163][ C0] ? ret_from_fork+0x79/0xaf0 [ 86.115174][ C0] ? rcu_is_watching+0x12/0xc0 [ 86.115188][ C0] ? __pfx_kthread+0x10/0x10 [ 86.115199][ C0] ret_from_fork+0x754/0xaf0 [ 86.115211][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 86.115223][ C0] ? __switch_to+0x7b9/0x10c0 [ 86.115237][ C0] ? __pfx_kthread+0x10/0x10 [ 86.115248][ C0] ret_from_fork_asm+0x1a/0x30 [ 86.115260][ C0] [ 86.115264][ C0] [ 86.353869][ C0] Allocated by task 6110: [ 86.358165][ C0] kasan_save_stack+0x30/0x50 [ 86.362817][ C0] kasan_save_track+0x14/0x30 [ 86.367465][ C0] __kasan_kmalloc+0xaa/0xb0 [ 86.372023][ C0] usbtmc_open+0xa9/0x950 [ 86.376324][ C0] usb_open+0x189/0x220 [ 86.380451][ C0] chrdev_open+0x234/0x6a0 [ 86.384838][ C0] do_dentry_open+0x73e/0x1570 [ 86.389568][ C0] vfs_open+0x82/0x3f0 [ 86.395102][ C0] path_openat+0x21dc/0x3120 [ 86.401155][ C0] do_filp_open+0x1f7/0x420 [ 86.405643][ C0] do_sys_openat2+0x12e/0x220 [ 86.410311][ C0] __x64_sys_openat+0x12d/0x210 [ 86.415139][ C0] do_syscall_64+0xc9/0xf80 [ 86.419671][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.425533][ C0] [ 86.427825][ C0] Freed by task 6110: [ 86.431777][ C0] kasan_save_stack+0x30/0x50 [ 86.436434][ C0] kasan_save_track+0x14/0x30 [ 86.441091][ C0] kasan_save_free_info+0x3b/0x70 [ 86.446085][ C0] __kasan_slab_free+0x5f/0x80 [ 86.450821][ C0] kfree+0x1c7/0x690 [ 86.454695][ C0] usbtmc_release+0x271/0x380 [ 86.459343][ C0] __fput+0x3ff/0xb40 [ 86.463309][ C0] task_work_run+0x150/0x240 [ 86.467869][ C0] exit_to_user_mode_loop+0x100/0x4b0 [ 86.473210][ C0] do_syscall_64+0x4fe/0xf80 [ 86.477768][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.483628][ C0] [ 86.485922][ C0] The buggy address belongs to the object at ffff888074da8800 [ 86.485922][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 86.499954][ C0] The buggy address is located 272 bytes inside of [ 86.499954][ C0] freed 1024-byte region [ffff888074da8800, ffff888074da8c00) [ 86.513804][ C0] [ 86.516098][ C0] The buggy address belongs to the physical page: [ 86.522489][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74da8 [ 86.531223][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 86.539712][ C0] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 86.547572][ C0] page_type: f5(slab) [ 86.551710][ C0] raw: 00fff00000000040 ffff88813fe26dc0 ffffea0001e75200 0000000000000003 [ 86.560261][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 86.568811][ C0] head: 00fff00000000040 ffff88813fe26dc0 ffffea0001e75200 0000000000000003 [ 86.577449][ C0] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 86.586097][ C0] head: 00fff00000000003 ffffea0001d36a01 00000000ffffffff 00000000ffffffff [ 86.594746][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 86.603380][ C0] page dumped because: kasan: bad access detected [ 86.609755][ C0] page_owner tracks the page as allocated [ 86.615435][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5910, tgid 5910 (syz-executor), ts 76530766860, free_ts 76489456477 [ 86.634676][ C0] post_alloc_hook+0x1e1/0x250 [ 86.639416][ C0] get_page_from_freelist+0xe3d/0x2e10 [ 86.644842][ C0] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 86.650704][ C0] alloc_pages_mpol+0x1fb/0x550 [ 86.655549][ C0] new_slab+0x2c4/0x440 [ 86.659672][ C0] ___slab_alloc+0xda3/0x1ca0 [ 86.664315][ C0] __slab_alloc.isra.0+0x63/0x110 [ 86.669305][ C0] __kmalloc_cache_noprof+0x531/0x810 [ 86.674641][ C0] batadv_hard_if_event+0x853/0x13e0 [ 86.679894][ C0] notifier_call_chain+0x99/0x3b0 [ 86.684885][ C0] call_netdevice_notifiers_info+0xbe/0x110 [ 86.690764][ C0] register_netdevice+0x16b9/0x21d0 [ 86.695936][ C0] macsec_newlink+0x4fb/0x1c50 [ 86.700673][ C0] rtnl_newlink+0x1494/0x2380 [ 86.705321][ C0] rtnetlink_rcv_msg+0x95e/0xe90 [ 86.710229][ C0] netlink_rcv_skb+0x159/0x420 [ 86.714976][ C0] page last free pid 154 tgid 154 stack trace: [ 86.721096][ C0] __free_pages_ok+0x7b6/0x1050 [ 86.725935][ C0] ieee80211_txq_teardown_flows+0x16f/0x280 [ 86.731802][ C0] ieee80211_unregister_hw+0x5d/0x360 [ 86.737149][ C0] hwsim_exit_net+0x88e/0x1530 [ 86.741886][ C0] ops_undo_list+0x2ee/0xab0 [ 86.746449][ C0] cleanup_net+0x419/0x830 [ 86.750850][ C0] process_one_work+0x9c2/0x1840 [ 86.755759][ C0] worker_thread+0x5da/0xe40 [ 86.760318][ C0] kthread+0x3b3/0x730 [ 86.764356][ C0] ret_from_fork+0x754/0xaf0 [ 86.768916][ C0] ret_from_fork_asm+0x1a/0x30 [ 86.773658][ C0] [ 86.775964][ C0] Memory state around the buggy address: [ 86.781599][ C0] ffff888074da8800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.789651][ C0] ffff888074da8880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.799112][ C0] >ffff888074da8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.807177][ C0] ^ [ 86.811739][ C0] ffff888074da8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.819768][ C0] ffff888074da8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.827793][ C0] ================================================================== [ 86.835835][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.843006][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 86.852174][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 86.862200][ C0] Call Trace: [ 86.865454][ C0] [ 86.868354][ C0] dump_stack_lvl+0x100/0x190 [ 86.873005][ C0] vpanic+0x20d/0x630 [ 86.876970][ C0] panic+0xd1/0xd1 [ 86.880659][ C0] ? __pfx_panic+0x10/0x10 [ 86.885042][ C0] ? end_report.part.0+0x23/0x90 [ 86.889949][ C0] ? rcu_is_watching+0x12/0xc0 [ 86.894684][ C0] ? end_report.part.0+0x23/0x90 [ 86.899597][ C0] ? check_panic_on_warn+0x1f/0x90 [ 86.904679][ C0] check_panic_on_warn.cold+0x19/0x34 [ 86.910018][ C0] end_report.part.0+0x3a/0x90 [ 86.914753][ C0] kasan_report.cold+0xe/0x18 [ 86.919402][ C0] ? usb_anchor_suspend_wakeups+0x28/0x40 [ 86.925142][ C0] kasan_check_range+0x10f/0x1e0 [ 86.930053][ C0] usb_anchor_suspend_wakeups+0x28/0x40 [ 86.935572][ C0] __usb_hcd_giveback_urb+0x223/0x610 [ 86.940931][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 86.946138][ C0] dummy_timer+0xd85/0x3670 [ 86.950628][ C0] ? find_held_lock+0x2b/0x80 [ 86.955290][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 86.960899][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 86.966849][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 86.971762][ C0] ? __hrtimer_run_queues+0x433/0x990 [ 86.977115][ C0] ? rcu_is_watching+0x12/0xc0 [ 86.981865][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 86.987653][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 86.992571][ C0] __hrtimer_run_queues+0x516/0x990 [ 86.997745][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 87.003437][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 87.009476][ C0] hrtimer_run_softirq+0x17d/0x350 [ 87.014571][ C0] handle_softirqs+0x1ea/0x910 [ 87.019322][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 87.024579][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 87.029675][ C0] run_ksoftirqd+0x38/0x60 [ 87.034064][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 87.038971][ C0] ? kthread+0x17d/0x730 [ 87.043189][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 87.048636][ C0] kthread+0x3b3/0x730 [ 87.052682][ C0] ? __pfx_kthread+0x10/0x10 [ 87.057244][ C0] ? ret_from_fork+0x79/0xaf0 [ 87.061907][ C0] ? ret_from_fork+0x79/0xaf0 [ 87.066553][ C0] ? rcu_is_watching+0x12/0xc0 [ 87.071290][ C0] ? __pfx_kthread+0x10/0x10 [ 87.075852][ C0] ret_from_fork+0x754/0xaf0 [ 87.080412][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 87.085492][ C0] ? __switch_to+0x7b9/0x10c0 [ 87.090140][ C0] ? __pfx_kthread+0x10/0x10 [ 87.094714][ C0] ret_from_fork_asm+0x1a/0x30 [ 87.099470][ C0] [ 87.102766][ C0] Kernel Offset: disabled [ 87.107094][ C0] Rebooting in 86400 seconds..