last executing test programs: 39.36031337s ago: executing program 2 (id=10): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x801, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @any, 0x1}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) listen(r0, 0x5) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x801, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000200)={0x1f, @any, 0x1}, 0x10) close(r1) close(r0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 39.12006465s ago: executing program 2 (id=11): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r2 = socket$nl_crypto(0x10, 0x3, 0x15) write(r2, &(0x7f00000000c0)="e0000000120005000000000000000000736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007368613235362d6c696200"/192, 0xe0) 38.877932385s ago: executing program 2 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/hdaudio/devices/hwC0D0/reconfig\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/hdaudio/devices/hwC1D0/reconfig\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1\x00', 0x1) 38.533189232s ago: executing program 2 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000400), 0x400) 38.349931628s ago: executing program 2 (id=14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) mmap(&(0x7f0000010000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000020000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000010000)=nil, 0x1000}, 0x1}) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000010000)) (async) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000010000)=nil, &(0x7f0000020000)=nil, 0x1000}) 37.198894685s ago: executing program 2 (id=16): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x15, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f00000000c0)=0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000140)=0x1) 35.993930007s ago: executing program 32 (id=16): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)=0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x15, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f00000000c0)=0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000140)=0x1) 29.42897466s ago: executing program 3 (id=36): r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040820582050002010203010902270001010080320904000003ff000000070581030800010705020200020007058302000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 26.180043478s ago: executing program 3 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 -4\n\x00', 0x9) 25.94196392s ago: executing program 3 (id=44): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x0, 0x0) read(r0, &(0x7f0000000080)=""/16, 0x10) 25.596954378s ago: executing program 3 (id=47): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x101301) ioctl$USBDEVFS_RESET(r1, 0x5514) 22.4834198s ago: executing program 3 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff) write(r0, 0x0, 0x0) 22.415769716s ago: executing program 3 (id=57): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000001100)="0200"/128, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./my_configfs/dlm/cluster1/toss_secs\x00', 0x2, 0x0) write(r3, &(0x7f0000001300)='1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) write(r4, &(0x7f0000001500)='1\x00', 0x2) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./my_dev/dlm-control\x00', 0x2, 0x0) write(r5, &(0x7f0000001b00)="0600000000000000020000000401000000000000000000006c733100"/96, 0x70) 21.421070164s ago: executing program 0 (id=66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@code={0xa, 0x15, {"31c90f33"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x2d}) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000500)={0x64, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000300)={0x3, 0x0, [{0x0, 0x0, 0x0, 0x1, 0x756e6547, 0x6c65746e, 0x49656e69}, {0x1, 0x0, 0x0, 0x10676}, {0xa, 0x0, 0x0, 0x7300402}]}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21.174913589s ago: executing program 0 (id=69): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/devices/QEMU0001:00/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ohci-platform\x00', 0xe) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/drivers/ohci-platform/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='QEMU0001:00\x00', 0xc) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/platform/devices/QEMU0002:00/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='ohci-platform\x00', 0xe) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/bus/platform/drivers/ohci-platform/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='QEMU0002:00\x00', 0xc) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/bus/platform/devices/ACPI0007:00/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='ohci-platform\x00', 0xe) close(r4) write(0xffffffffffffffff, &(0x7f0000000f00)='ACPI0007:00\x00', 0xc) write(0xffffffffffffffff, &(0x7f0000001100)='ohci-platform\x00', 0xe) openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys/bus/platform/drivers/ohci-platform/bind\x00', 0x1, 0x0) 21.087016559s ago: executing program 0 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 20.984830882s ago: executing program 0 (id=71): mkdir(&(0x7f0000000000)='./sysfs\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) 20.963796681s ago: executing program 0 (id=72): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000c3", 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x132, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, &(0x7f0000030000), 0x1000, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, &(0x7f0000000500), 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000001c0)='\x00') ptrace$cont(0x7, r3, 0x0, 0x0) 20.878801241s ago: executing program 0 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='freeze\n', 0x7) 6.670523629s ago: executing program 33 (id=57): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000001100)="0200"/128, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./my_configfs/dlm/cluster1/toss_secs\x00', 0x2, 0x0) write(r3, &(0x7f0000001300)='1\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0) write(r4, &(0x7f0000001500)='1\x00', 0x2) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./my_dev/dlm-control\x00', 0x2, 0x0) write(r5, &(0x7f0000001b00)="0600000000000000020000000401000000000000000000006c733100"/96, 0x70) 5.992330321s ago: executing program 4 (id=108): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000c3", 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x132, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, &(0x7f0000030000), 0x1000, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, &(0x7f0000000500), 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000001c0)='\x00') wait4(r3, &(0x7f0000000500), 0x0, 0x0) 5.890489946s ago: executing program 4 (id=109): r0 = syz_usb_connect(0x3, 0x4c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011002000000404c17aa5500010000000109023a00010100800009040000040806620007050102000200032401070581020002000324020705820200020003240307050202000200032404"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x82, 0x24, &(0x7f0000000200)="000006021f00000053797a554153202053797a4469736b202020202020202020312e3030") syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000300)="0300000100"/16) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x82, 0x24, &(0x7f0000000200)="000006021f00000053797a554153202053797a4469736b202020202020202020312e3030") syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000300)="0300000100"/16) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x82, 0x24, &(0x7f0000000200)="000006021f00000053797a554153202053797a4469736b202020202020202020312e3030") syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000300)="0300000100"/16) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x1, 0x2) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffd, 0xa, 0x20, @buffer={0x0, 0x200, &(0x7f0000000500)}, &(0x7f0000000600)="28000000000000000100", &(0x7f0000000700), 0x4e20, 0x0, 0x1, 0x0}) (async) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000200)="06000001") 4.850283909s ago: executing program 34 (id=73): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='freeze\n', 0x7) 2.605828062s ago: executing program 1 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000c3", 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x132, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, &(0x7f0000030000), 0x1000, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, &(0x7f0000000500), 0x0, 0x0) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, &(0x7f0000000500), 0x0, 0x0) 2.269665889s ago: executing program 1 (id=118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3', 0x5) 2.043238012s ago: executing program 1 (id=119): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000800000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000800000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)={0x1, 0x0, [{0x4b564d02, 0x0, 0x7f0000800001}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.869899873s ago: executing program 4 (id=120): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000800), &(0x7f0000000900)}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x22, {"48c7c01d00000048c7c7010000000f01c1"}}], 0x22}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) r5 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[@code={0xa, 0x12, {"f4"}}], 0x12}) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r4, 0x3, 0x11, r5, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.633180875s ago: executing program 1 (id=121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000040)={0x0, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.284238839s ago: executing program 4 (id=122): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x80, r2, 0x1, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={{{}, {}, @device_a, @device_b}, 0x0, 0x1, 0x0, @void}}]}, 0x80}}, 0x0) 1.268113905s ago: executing program 1 (id=123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000100)={0x0, 0x200000}) 1.109416061s ago: executing program 4 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='nodev\x00', &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='100\x00', 0x4) write(r0, &(0x7f00000001c0)='200\x00', 0x4) write(r0, &(0x7f0000000200)='300\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./tracefs_dir/buffer_subbuf_size_kb\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='8\x00', 0x2) write(r1, &(0x7f00000002c0)='16\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000340), 0x1000) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\x00', 0x2) write(r0, &(0x7f0000000400)='400\x00', 0x4) write(r1, &(0x7f0000000440)='4\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracefs_dir/trace\x00', 0x0, 0x0) read(r4, &(0x7f00000004c0), 0x1000) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='hello\x00', 0x6) close(r5) close(r0) close(r1) close(r3) 956.480273ms ago: executing program 1 (id=125): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e0010140120a010001000102000109022700010100e0000904000003e0010100070581031000010705820240000007050202400000"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000200)="040e0c01011000060000060a000000") syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000300)="040e0c010310000000000000000000") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000400)="040e0a01091000aaaaaaaaaaaa") syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000500)="040e0b0105100040001008000800") nanosleep(&(0x7f0000000100)={0x0, 0x2faf080}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000600)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="08000100010001"], 0x7) write$bt_hci(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="08000100010000"], 0x7) 936.951214ms ago: executing program 5 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='-2 -3 -4', 0x8) 760.020782ms ago: executing program 5 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000c3", 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x132, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, &(0x7f0000030000), 0x1000, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, &(0x7f0000000500), 0x0, 0x0) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, &(0x7f0000000500), 0x0, 0x0) 488.378732ms ago: executing program 4 (id=128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 479.404683ms ago: executing program 5 (id=129): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000040)={0xdf, 0x0, 0x1000}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@uexit={0x0, 0x0, 0x1}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 219.423404ms ago: executing program 5 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/hid.usb0/protocol\x00', 0x1, 0x1ff) write(r0, &(0x7f0000000e00)='1', 0x1) 87.453667ms ago: executing program 5 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='md0\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/dev-ram1/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='writemostly\n\x00', 0xc) 0s ago: executing program 5 (id=132): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='bxt_wcove_usbc\n\x00', 0xf) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/bxt_wcove_usbc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='pcspkr\n\x00', 0x7) close(r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.168' (ED25519) to the list of known hosts. [ 85.498619][ T5602] cgroup: Unknown subsys name 'net' [ 85.587167][ T5602] cgroup: Unknown subsys name 'cpuset' [ 85.597182][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.357233][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.875084][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.911682][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.913683][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.914194][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.915668][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.919230][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.919941][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.921209][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.921879][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.922440][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.922635][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.923337][ T5627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.926777][ T5627] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.927966][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.929284][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.930407][ T5627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.931691][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.934828][ T5627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.938108][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.939068][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.669965][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.670148][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.670281][ T5612] bridge_slave_0: entered allmulticast mode [ 91.672369][ T5612] bridge_slave_0: entered promiscuous mode [ 91.719018][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.719243][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.719673][ T5612] bridge_slave_1: entered allmulticast mode [ 91.721659][ T5612] bridge_slave_1: entered promiscuous mode [ 91.800590][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.833045][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.846269][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.846449][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.846569][ T5614] bridge_slave_0: entered allmulticast mode [ 91.848317][ T5614] bridge_slave_0: entered promiscuous mode [ 91.891896][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.892745][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.894297][ T5614] bridge_slave_1: entered allmulticast mode [ 91.896157][ T5614] bridge_slave_1: entered promiscuous mode [ 91.927638][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.927842][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.927990][ T5613] bridge_slave_0: entered allmulticast mode [ 91.929834][ T5613] bridge_slave_0: entered promiscuous mode [ 91.952155][ T5612] team0: Port device team_slave_0 added [ 91.954054][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.954159][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.954583][ T5613] bridge_slave_1: entered allmulticast mode [ 91.957989][ T5613] bridge_slave_1: entered promiscuous mode [ 91.982063][ T5612] team0: Port device team_slave_1 added [ 91.984123][ T5617] Bluetooth: hci3: command tx timeout [ 91.984245][ T5617] Bluetooth: hci0: command tx timeout [ 91.984565][ T5627] Bluetooth: hci2: command tx timeout [ 92.019647][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.019838][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.020479][ T5611] bridge_slave_0: entered allmulticast mode [ 92.022558][ T5611] bridge_slave_0: entered promiscuous mode [ 92.048322][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.051685][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.073125][ T5627] Bluetooth: hci1: command tx timeout [ 92.081851][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.083139][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.083559][ T5611] bridge_slave_1: entered allmulticast mode [ 92.085361][ T5611] bridge_slave_1: entered promiscuous mode [ 92.129285][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.145296][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.145330][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.146970][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.151582][ T5614] team0: Port device team_slave_0 added [ 92.156864][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.160907][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.162210][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.162227][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.162251][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.168422][ T5614] team0: Port device team_slave_1 added [ 92.187434][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.297688][ T5613] team0: Port device team_slave_0 added [ 92.313936][ T5611] team0: Port device team_slave_0 added [ 92.314770][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.314783][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.314806][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.319359][ T5613] team0: Port device team_slave_1 added [ 92.355784][ T5611] team0: Port device team_slave_1 added [ 92.356533][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.356547][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.356570][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.448067][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.448101][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.448488][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.460333][ T5612] hsr_slave_0: entered promiscuous mode [ 92.461595][ T5612] hsr_slave_1: entered promiscuous mode [ 92.499520][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.499538][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.499561][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.501239][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.501261][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.501286][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.515241][ T5614] hsr_slave_0: entered promiscuous mode [ 92.516390][ T5614] hsr_slave_1: entered promiscuous mode [ 92.517683][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 92.517750][ T5614] Cannot create hsr debugfs directory [ 92.520169][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.520182][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.520205][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.735737][ T5613] hsr_slave_0: entered promiscuous mode [ 92.736944][ T5613] hsr_slave_1: entered promiscuous mode [ 92.737635][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 92.737654][ T5613] Cannot create hsr debugfs directory [ 92.746210][ T5611] hsr_slave_0: entered promiscuous mode [ 92.747214][ T5611] hsr_slave_1: entered promiscuous mode [ 92.747887][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 92.747906][ T5611] Cannot create hsr debugfs directory [ 93.111761][ T30] cfg80211: failed to load regulatory.db [ 93.213418][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.228862][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.230100][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.242855][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.245155][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.257293][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.260168][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.271471][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.351112][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.365112][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.369073][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.377017][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.385789][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.395401][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.396499][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.408063][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.522724][ T5611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.536956][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.549992][ T5611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.564851][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.565830][ T5611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.576979][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.578973][ T5611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.586779][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.678764][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.689872][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.707396][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.719198][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.721017][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.730334][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.748605][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.755818][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.788960][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.860647][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.876833][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.915759][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.915986][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.949153][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.949270][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.987686][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.018343][ T1515] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.018460][ T1515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.042412][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.042531][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.063211][ T5627] Bluetooth: hci2: command tx timeout [ 94.063267][ T5627] Bluetooth: hci0: command tx timeout [ 94.063307][ T5627] Bluetooth: hci3: command tx timeout [ 94.106178][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.144185][ T52] Bluetooth: hci1: command tx timeout [ 94.202446][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.209255][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.266279][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.266427][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.309687][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.309836][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.341722][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.407708][ T1515] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.407857][ T1515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.440181][ T1515] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.440895][ T1515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.253665][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.418727][ T5614] veth0_vlan: entered promiscuous mode [ 95.461800][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.518910][ T5614] veth1_vlan: entered promiscuous mode [ 95.616582][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.652651][ T5612] veth0_vlan: entered promiscuous mode [ 95.707266][ T5612] veth1_vlan: entered promiscuous mode [ 95.717291][ T5614] veth0_macvtap: entered promiscuous mode [ 95.727437][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.749214][ T5614] veth1_macvtap: entered promiscuous mode [ 95.794950][ T5611] veth0_vlan: entered promiscuous mode [ 95.841048][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.856215][ T5611] veth1_vlan: entered promiscuous mode [ 95.870085][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.900856][ T5612] veth0_macvtap: entered promiscuous mode [ 95.919076][ T5612] veth1_macvtap: entered promiscuous mode [ 95.976132][ T5613] veth0_vlan: entered promiscuous mode [ 96.029818][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.050664][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.060189][ T5611] veth0_macvtap: entered promiscuous mode [ 96.085533][ T5613] veth1_vlan: entered promiscuous mode [ 96.114820][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.114946][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.136742][ T5611] veth1_macvtap: entered promiscuous mode [ 96.143764][ T52] Bluetooth: hci3: command tx timeout [ 96.143801][ T52] Bluetooth: hci0: command tx timeout [ 96.143824][ T52] Bluetooth: hci2: command tx timeout [ 96.163530][ T1175] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.164806][ T1175] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.223355][ T5627] Bluetooth: hci1: command tx timeout [ 96.290175][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.290573][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.311146][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.329636][ T5613] veth0_macvtap: entered promiscuous mode [ 96.358787][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.380060][ T5613] veth1_macvtap: entered promiscuous mode [ 96.432335][ T5614] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.454054][ T1175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.454117][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.454132][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.454368][ T1175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.483815][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.483878][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.483913][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.483946][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.483979][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.484023][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.484057][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.484090][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.602609][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.631654][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.631710][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.676216][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.837161][ T747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.837210][ T747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.981642][ T747] FAULT_INJECTION: forcing a failure. [ 96.981642][ T747] name failslab, interval 1, probability 100, space 0, times 9 [ 96.981710][ T747] CPU: 1 UID: 0 PID: 747 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 96.981735][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.981747][ T747] Workqueue: ipv6_addrconf addrconf_dad_work [ 96.981779][ T747] Call Trace: [ 96.981786][ T747] [ 96.981795][ T747] dump_stack_lvl+0xe8/0x150 [ 96.981823][ T747] should_fail_ex+0x410/0x560 [ 96.981855][ T747] should_failslab+0xa8/0x100 [ 96.981964][ T747] __kmalloc_cache_noprof+0xa3/0x600 [ 96.981993][ T747] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 96.982014][ T747] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 96.982040][ T747] __ipv6_dev_mc_inc+0x447/0xa40 [ 96.982073][ T747] addrconf_dad_work+0x3fc/0x15c0 [ 96.982106][ T747] ? __pfx_addrconf_dad_work+0x10/0x10 [ 96.982140][ T747] ? rcu_is_watching+0x16/0xb0 [ 96.982163][ T747] ? process_scheduled_works+0x97a/0x1630 [ 96.982186][ T747] process_scheduled_works+0xc3d/0x1630 [ 96.982240][ T747] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.982270][ T747] ? assign_work+0x3cf/0x5d0 [ 96.982297][ T747] worker_thread+0xa47/0xfb0 [ 96.982347][ T747] kthread+0x38b/0x480 [ 96.982376][ T747] ? __pfx_worker_thread+0x10/0x10 [ 96.982396][ T747] ? __pfx_kthread+0x10/0x10 [ 96.982425][ T747] ret_from_fork+0x514/0xb70 [ 96.982454][ T747] ? __pfx_ret_from_fork+0x10/0x10 [ 96.982480][ T747] ? __switch_to+0xc89/0x1420 [ 96.982577][ T747] ? __pfx_kthread+0x10/0x10 [ 96.982611][ T747] ret_from_fork_asm+0x1a/0x30 [ 96.982654][ T747] [ 96.982728][ T5613] FAULT_INJECTION: forcing a failure. [ 96.982728][ T5613] name failslab, interval 1, probability 100, space 0, times 9 [ 96.982755][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 96.982784][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.982795][ T5613] Call Trace: [ 96.982803][ T5613] [ 96.982810][ T5613] dump_stack_lvl+0xe8/0x150 [ 96.982846][ T5613] should_fail_ex+0x410/0x560 [ 96.982876][ T5613] ? __alloc_skb+0x1db/0x7a0 [ 96.982898][ T5613] should_failslab+0xa8/0x100 [ 96.982923][ T5613] ? __alloc_skb+0x1db/0x7a0 [ 96.982939][ T5613] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 96.982958][ T5613] ? __alloc_skb+0x18d/0x7a0 [ 96.982975][ T5613] ? __alloc_skb+0x1db/0x7a0 [ 96.982998][ T5613] __alloc_skb+0x1db/0x7a0 [ 96.983020][ T5613] netlink_ack+0x136/0xb30 [ 96.983039][ T5613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.983066][ T5613] ? ref_tracker_free+0x689/0x830 [ 96.983096][ T5613] ? __pfx_ref_tracker_free+0x10/0x10 [ 96.983123][ T5613] ? __asan_memcpy+0x40/0x70 [ 96.983159][ T5613] netlink_rcv_skb+0x2a4/0x4a0 [ 96.983181][ T5613] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 96.983211][ T5613] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 96.983243][ T5613] ? netlink_deliver_tap+0x2e/0x1b0 [ 96.983265][ T5613] ? netlink_deliver_tap+0x2e/0x1b0 [ 96.983297][ T5613] netlink_unicast+0x7bd/0x940 [ 96.983332][ T5613] netlink_sendmsg+0x813/0xb40 [ 96.983398][ T5613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.983428][ T5613] ? apparmor_socket_sendmsg+0x98/0x360 [ 96.983455][ T5613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.983475][ T5613] sock_sendmsg_nosec+0x13a/0x180 [ 96.983504][ T5613] __sys_sendto+0x408/0x5a0 [ 96.983527][ T5613] ? __pfx___sys_sendto+0x10/0x10 [ 96.983543][ T5613] ? lockdep_hardirqs_on+0x7b/0x110 [ 96.983577][ T5613] ? fput_close_sync+0x11f/0x240 [ 96.983602][ T5613] ? kmem_cache_free+0x471/0x650 [ 96.983630][ T5613] ? __pfx_fput_close_sync+0x10/0x10 [ 96.983663][ T5613] __x64_sys_sendto+0xde/0x100 [ 96.983685][ T5613] do_syscall_64+0x166/0x520 [ 96.983710][ T5613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.983730][ T5613] ? clear_bhb_loop+0x70/0xc0 [ 96.983764][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.983783][ T5613] RIP: 0033:0x7f3a9175e90e [ 96.983802][ T5613] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 96.983818][ T5613] RSP: 002b:00007ffe46c49c08 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 96.983839][ T5613] RAX: ffffffffffffffda RBX: 000055556351f500 RCX: 00007f3a9175e90e [ 96.983853][ T5613] RDX: 0000000000000040 RSI: 00007f3a92554670 RDI: 0000000000000003 [ 96.983865][ T5613] RBP: 0000000000000001 R08: 00007ffe46c49c84 R09: 000000000000000c [ 96.983876][ T5613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 96.983887][ T5613] R13: 0000000000000000 R14: 00007f3a92554670 R15: 0000000000000000 [ 96.983915][ T5613] [ 96.984273][ T4971] FAULT_INJECTION: forcing a failure. [ 96.984273][ T4971] name failslab, interval 1, probability 100, space 0, times 9 [ 96.984298][ T4971] CPU: 1 UID: 0 PID: 4971 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 96.984317][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.984327][ T4971] Call Trace: [ 96.984334][ T4971] [ 96.984341][ T4971] dump_stack_lvl+0xe8/0x150 [ 96.984375][ T4971] should_fail_ex+0x410/0x560 [ 96.984403][ T4971] ? __alloc_skb+0x1db/0x7a0 [ 96.984420][ T4971] should_failslab+0xa8/0x100 [ 96.984444][ T4971] ? __alloc_skb+0x1db/0x7a0 [ 96.984460][ T4971] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 96.984478][ T4971] ? __alloc_skb+0x18d/0x7a0 [ 96.984496][ T4971] ? __alloc_skb+0x1db/0x7a0 [ 96.984519][ T4971] __alloc_skb+0x1db/0x7a0 [ 96.984541][ T4971] alloc_skb_with_frags+0xc6/0x760 [ 96.984562][ T4971] ? kasan_save_track+0x4f/0x80 [ 96.984581][ T4971] ? kasan_save_track+0x3e/0x80 [ 96.984600][ T4971] ? kasan_save_free_info+0x40/0x50 [ 96.984624][ T4971] ? __kasan_slab_free+0x5c/0x80 [ 96.984644][ T4971] ? kfree+0x1c5/0x650 [ 96.984668][ T4971] ? syslog_print+0x57c/0x610 [ 96.984685][ T4971] ? do_syslog+0x583/0x7d0 [ 96.984701][ T4971] ? __x64_sys_syslog+0x7c/0x90 [ 96.984722][ T4971] sock_alloc_send_pskb+0x878/0x990 [ 96.984761][ T4971] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 96.984794][ T4971] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 96.984824][ T4971] unix_dgram_sendmsg+0x4da/0x17b0 [ 96.984848][ T4971] ? lockdep_hardirqs_on+0x7b/0x110 [ 96.984876][ T4971] ? kfree+0x1c5/0x650 [ 96.984901][ T4971] ? syslog_print+0x57c/0x610 [ 96.984928][ T4971] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 96.984953][ T4971] ? aa_sock_msg_perm+0x129/0x210 [ 96.985002][ T4971] ? apparmor_socket_sendmsg+0x98/0x360 [ 96.985028][ T4971] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 96.985049][ T4971] sock_sendmsg_nosec+0x13a/0x180 [ 96.985089][ T4971] __sys_sendto+0x408/0x5a0 [ 96.985107][ T4971] ? bpf_lsm_capable+0x9/0x20 [ 96.985129][ T4971] ? __pfx___sys_sendto+0x10/0x10 [ 96.985158][ T4971] ? ktime_get+0x1f5/0x220 [ 96.985204][ T4971] ? rcu_is_watching+0x16/0xb0 [ 96.985230][ T4971] __x64_sys_sendto+0xde/0x100 [ 96.985253][ T4971] do_syscall_64+0x166/0x520 [ 96.985276][ T4971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.985296][ T4971] ? clear_bhb_loop+0x70/0xc0 [ 96.985319][ T4971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.985338][ T4971] RIP: 0033:0x7f0b02d48407 [ 96.985364][ T4971] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 96.985378][ T4971] RSP: 002b:00007ffc68c27d30 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 96.985397][ T4971] RAX: ffffffffffffffda RBX: 00007f0b02bf8c80 RCX: 00007f0b02d48407 [ 96.985410][ T4971] RDX: 0000000000000055 RSI: 00007ffc68c27e70 RDI: 0000000000000003 [ 96.985422][ T4971] RBP: 00007ffc68c282a0 R08: 0000000000000000 R09: 0000000000000000 [ 96.985434][ T4971] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc68c282b8 [ 96.985447][ T4971] R13: 00007ffc68c27e70 R14: 000000000000003a R15: 00007ffc68c27e70 [ 96.985475][ T4971] [ 96.987398][ T4971] FAULT_INJECTION: forcing a failure. [ 96.987398][ T4971] name failslab, interval 1, probability 100, space 0, times 6 [ 96.987428][ T4971] CPU: 1 UID: 0 PID: 4971 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 96.987456][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.987467][ T4971] Call Trace: [ 96.987474][ T4971] [ 96.987481][ T4971] dump_stack_lvl+0xe8/0x150 [ 96.987507][ T4971] should_fail_ex+0x410/0x560 [ 96.987536][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 96.987560][ T4971] should_failslab+0xa8/0x100 [ 96.987584][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 96.987607][ T4971] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 96.987638][ T4971] ? sock_alloc_inode+0x2c/0x1a0 [ 96.987661][ T4971] ? sock_alloc_inode+0x2c/0x1a0 [ 96.987690][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 96.987713][ T4971] sock_alloc_inode+0x2c/0x1a0 [ 96.987738][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 96.987760][ T4971] alloc_inode+0x6a/0x1b0 [ 96.987787][ T4971] __sock_create+0x12d/0x9d0 [ 96.987828][ T4971] __sys_socket+0xd6/0x1b0 [ 96.987858][ T4971] __x64_sys_socket+0x7a/0x90 [ 96.987885][ T4971] do_syscall_64+0x166/0x520 [ 96.987908][ T4971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.987928][ T4971] ? clear_bhb_loop+0x70/0xc0 [ 96.987951][ T4971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.987969][ T4971] RIP: 0033:0x7f0b02dc3707 [ 96.987986][ T4971] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 96.988000][ T4971] RSP: 002b:00007ffc68c27d48 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 96.988019][ T4971] RAX: ffffffffffffffda RBX: 0000000000000055 RCX: 00007f0b02dc3707 [ 96.988032][ T4971] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 96.988043][ T4971] RBP: 00007f0b02e4f560 R08: 0000000000000000 R09: 0000000000000000 [ 96.988055][ T4971] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 96.988066][ T4971] R13: 00007ffc68c27e70 R14: 000000000000003a R15: 00007ffc68c27e70 [ 96.988095][ T4971] [ 96.988211][ T4971] socket: no more sockets [ 96.988236][ T4971] FAULT_INJECTION: forcing a failure. [ 96.988236][ T4971] name failslab, interval 1, probability 100, space 0, times 5 [ 96.988256][ T4971] CPU: 1 UID: 0 PID: 4971 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 96.988276][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.988286][ T4971] Call Trace: [ 96.988293][ T4971] [ 96.988300][ T4971] dump_stack_lvl+0xe8/0x150 [ 96.988323][ T4971] should_fail_ex+0x410/0x560 [ 96.988360][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 96.988383][ T4971] should_failslab+0xa8/0x100 [ 96.988407][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 96.988430][ T4971] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 96.988460][ T4971] ? sock_alloc_inode+0x2c/0x1a0 [ 96.988482][ T4971] ? sock_alloc_inode+0x2c/0x1a0 [ 96.988510][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 96.988533][ T4971] sock_alloc_inode+0x2c/0x1a0 [ 96.988557][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 96.988579][ T4971] alloc_inode+0x6a/0x1b0 [ 96.988605][ T4971] __sock_create+0x12d/0x9d0 [ 96.988639][ T4971] __sys_socket+0xd6/0x1b0 [ 96.988668][ T4971] __x64_sys_socket+0x7a/0x90 [ 96.988695][ T4971] do_syscall_64+0x166/0x520 [ 96.988718][ T4971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.988737][ T4971] ? clear_bhb_loop+0x70/0xc0 [ 96.988763][ T4971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.988782][ T4971] RIP: 0033:0x7f0b02dc3707 [ 96.988798][ T4971] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 96.988812][ T4971] RSP: 002b:00007ffc68c27d48 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 96.988830][ T4971] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f0b02dc3707 [ 96.988842][ T4971] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 96.988854][ T4971] RBP: 00007f0b02e4f560 R08: 0000000000000073 R09: 0000000000000001 [ 96.988865][ T4971] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 96.988876][ T4971] R13: 00007ffc68c27e70 R14: 0000000000000053 R15: 00007ffc68c27e70 [ 96.988904][ T4971] [ 96.992769][ T4971] socket: no more sockets [ 97.023988][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.024033][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.024065][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.024094][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.062141][ T747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.062162][ T747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.449853][ T5771] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.460566][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.799179][ T5774] ubi0: attaching mtd0 [ 97.811958][ T5774] ubi0: scanning is finished [ 97.811979][ T5774] ubi0: empty MTD device detected [ 97.986741][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=0901, bcdDevice= 0.00 [ 98.102532][ T747] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.225999][ T52] Bluetooth: hci3: command tx timeout [ 98.226050][ T5627] Bluetooth: hci0: command tx timeout [ 98.307796][ T5627] Bluetooth: hci1: command tx timeout [ 98.314132][ T5779] Zero length message leads to an empty skb [ 98.418554][ T747] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.501694][ T5774] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 98.501724][ T5774] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 98.501741][ T5774] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 98.501755][ T5774] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 98.501770][ T5774] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 98.501784][ T5774] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 98.501797][ T5774] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 254112611 [ 98.501814][ T5774] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 98.506779][ T5781] ubi0: background thread "ubi_bgt0d" started, PID 5781 [ 98.597409][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 98.597456][ T30] usb 4-1: Product: syz [ 98.597499][ T30] usb 4-1: Manufacturer: syz [ 98.661419][ T30] gspca_main: spca500-2.14.0 probing 046d:0901 [ 98.680013][ T5783] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 98.680042][ T5783] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.681317][ T747] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.691318][ T5783] vhci_hcd vhci_hcd.0: Device attached [ 98.836244][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.843769][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.851596][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.874965][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.884808][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.974999][ T5618] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 98.993617][ T747] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.105573][ T5784] vhci_hcd: connection reset by peer [ 99.117493][ T36] vhci_hcd vhci_hcd.2: stop threads [ 99.127613][ T36] vhci_hcd vhci_hcd.2: release socket [ 99.131747][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 99.233197][ T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.373175][ T30] usb 2-1: device descriptor read/64, error -71 [ 99.437635][ T747] bridge_slave_1: left allmulticast mode [ 99.445590][ T747] bridge_slave_1: left promiscuous mode [ 99.447606][ T747] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.463283][ T747] bridge_slave_0: left allmulticast mode [ 99.469362][ T747] bridge_slave_0: left promiscuous mode [ 99.469645][ T747] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.613023][ T30] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.742550][ T747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.753956][ T30] usb 2-1: device descriptor read/64, error -71 [ 99.766332][ T747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.777771][ T747] bond0 (unregistering): Released all slaves [ 99.863369][ T30] usb usb2-port1: attempt power cycle [ 99.927436][ T10] usb 4-1: USB disconnect, device number 2 [ 100.057103][ T747] hsr_slave_0: left promiscuous mode [ 100.068190][ T747] hsr_slave_1: left promiscuous mode [ 100.077165][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.086804][ T747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.100464][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.100518][ T747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.186887][ T747] veth1_macvtap: left promiscuous mode [ 100.186972][ T747] veth0_macvtap: left promiscuous mode [ 100.187081][ T747] veth1_vlan: left promiscuous mode [ 100.187211][ T747] veth0_vlan: left promiscuous mode [ 100.224969][ T30] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.266448][ T30] usb 2-1: device descriptor read/8, error -71 [ 100.513421][ T30] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.545426][ T30] usb 2-1: device descriptor read/8, error -71 [ 100.664152][ T30] usb usb2-port1: unable to enumerate USB device [ 100.696808][ T5826] FAULT_INJECTION: forcing a failure. [ 100.696808][ T5826] name failslab, interval 1, probability 100, space 0, times 10 [ 100.697345][ T747] FAULT_INJECTION: forcing a failure. [ 100.697345][ T747] name failslab, interval 1, probability 100, space 0, times 10 [ 100.697386][ T747] CPU: 0 UID: 0 PID: 747 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 100.697408][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.697420][ T747] Workqueue: netns cleanup_net [ 100.697446][ T747] Call Trace: [ 100.697455][ T747] [ 100.697462][ T747] dump_stack_lvl+0xe8/0x150 [ 100.697488][ T747] should_fail_ex+0x410/0x560 [ 100.697519][ T747] should_failslab+0xa8/0x100 [ 100.697552][ T747] __kmalloc_cache_noprof+0xa3/0x600 [ 100.697573][ T747] ? netdevice_event+0x3aa/0x8a0 [ 100.697608][ T747] ? netdevice_event+0x3aa/0x8a0 [ 100.697639][ T747] netdevice_event+0x3aa/0x8a0 [ 100.697665][ T747] ? rcu_is_watching+0x16/0xb0 [ 100.697685][ T747] ? __up_read+0x29c/0x930 [ 100.697705][ T747] ? __pfx_netdevice_event+0x10/0x10 [ 100.697729][ T747] ? __pfx_del_netdev_ips+0x10/0x10 [ 100.697752][ T747] ? __pfx_pass_all_filter+0x10/0x10 [ 100.697798][ T747] notifier_call_chain+0x1a5/0x3d0 [ 100.697833][ T747] unregister_netdevice_many_notify+0x17f9/0x2140 [ 100.697874][ T747] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 100.697901][ T747] ? unregister_netdevice_queue+0x17d/0x340 [ 100.697928][ T747] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 100.697976][ T747] default_device_exit_batch+0x91e/0x9a0 [ 100.698015][ T747] ? __pfx_default_device_exit_batch+0x10/0x10 [ 100.698056][ T747] ? __pfx_default_device_exit_batch+0x10/0x10 [ 100.698084][ T747] ops_undo_list+0x4b4/0x8d0 [ 100.698119][ T747] ? __pfx_ops_undo_list+0x10/0x10 [ 100.698150][ T747] ? idr_destroy+0x218/0x290 [ 100.698172][ T747] ? do_raw_spin_unlock+0xf5/0x200 [ 100.698199][ T747] cleanup_net+0x572/0x810 [ 100.698221][ T747] ? __pfx_cleanup_net+0x10/0x10 [ 100.698245][ T747] ? rcu_is_watching+0x16/0xb0 [ 100.698266][ T747] ? process_scheduled_works+0x97a/0x1630 [ 100.698289][ T747] process_scheduled_works+0xc3d/0x1630 [ 100.698342][ T747] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.698371][ T747] ? assign_work+0x3cf/0x5d0 [ 100.698397][ T747] worker_thread+0xa47/0xfb0 [ 100.698447][ T747] kthread+0x38b/0x480 [ 100.698475][ T747] ? __pfx_worker_thread+0x10/0x10 [ 100.698495][ T747] ? __pfx_kthread+0x10/0x10 [ 100.698523][ T747] ret_from_fork+0x514/0xb70 [ 100.698552][ T747] ? __pfx_ret_from_fork+0x10/0x10 [ 100.698586][ T747] ? __switch_to+0xc89/0x1420 [ 100.698617][ T747] ? __pfx_kthread+0x10/0x10 [ 100.698645][ T747] ret_from_fork_asm+0x1a/0x30 [ 100.698687][ T747] [ 100.699838][ T5612] FAULT_INJECTION: forcing a failure. [ 100.699838][ T5612] name failslab, interval 1, probability 100, space 0, times 10 [ 100.699871][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.699891][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.699902][ T5612] Call Trace: [ 100.699909][ T5612] [ 100.699916][ T5612] dump_stack_lvl+0xe8/0x150 [ 100.699997][ T5612] should_fail_ex+0x410/0x560 [ 100.700067][ T5612] should_failslab+0xa8/0x100 [ 100.700092][ T5612] ? do_getname+0x2e/0x250 [ 100.700115][ T5612] kmem_cache_alloc_noprof+0xa1/0x600 [ 100.700147][ T5612] ? do_getname+0x2e/0x250 [ 100.700176][ T5612] do_getname+0x2e/0x250 [ 100.700203][ T5612] ? user_path_at+0x1e/0x160 [ 100.700233][ T5612] user_path_at+0x2a/0x160 [ 100.700264][ T5612] __x64_sys_umount+0xf6/0x170 [ 100.700289][ T5612] ? __pfx___x64_sys_umount+0x10/0x10 [ 100.700323][ T5612] do_syscall_64+0x166/0x520 [ 100.700347][ T5612] ? trace_irq_disable+0x3b/0x140 [ 100.700373][ T5612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.700393][ T5612] ? clear_bhb_loop+0x70/0xc0 [ 100.700417][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.700437][ T5612] RIP: 0033:0x7fe6b999f317 [ 100.700457][ T5612] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 100.700473][ T5612] RSP: 002b:00007ffeb0c11bb8 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 100.700495][ T5612] RAX: ffffffffffffffda RBX: 00007fe6b9a34474 RCX: 00007fe6b999f317 [ 100.700509][ T5612] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb0c11c70 [ 100.700521][ T5612] RBP: 00007ffeb0c11c70 R08: 00007ffeb0c12c70 R09: 00000000ffffffff [ 100.700534][ T5612] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffeb0c12d00 [ 100.700545][ T5612] R13: 00007fe6b9a34474 R14: 0000000000018872 R15: 00007ffeb0c12d40 [ 100.700574][ T5612] [ 100.700853][ T4971] FAULT_INJECTION: forcing a failure. [ 100.700853][ T4971] name failslab, interval 1, probability 100, space 0, times 10 [ 100.700880][ T4971] CPU: 0 UID: 0 PID: 4971 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 100.700901][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.700912][ T4971] Call Trace: [ 100.700919][ T4971] [ 100.700927][ T4971] dump_stack_lvl+0xe8/0x150 [ 100.700953][ T4971] should_fail_ex+0x410/0x560 [ 100.700981][ T4971] ? __alloc_skb+0x1db/0x7a0 [ 100.700999][ T4971] should_failslab+0xa8/0x100 [ 100.701022][ T4971] ? __alloc_skb+0x1db/0x7a0 [ 100.701038][ T4971] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 100.701057][ T4971] ? __alloc_skb+0x18d/0x7a0 [ 100.701074][ T4971] ? __alloc_skb+0x1db/0x7a0 [ 100.701097][ T4971] __alloc_skb+0x1db/0x7a0 [ 100.701119][ T4971] alloc_skb_with_frags+0xc6/0x760 [ 100.701139][ T4971] ? kasan_save_track+0x4f/0x80 [ 100.701159][ T4971] ? kasan_save_track+0x3e/0x80 [ 100.701177][ T4971] ? kasan_save_free_info+0x40/0x50 [ 100.701203][ T4971] ? __kasan_slab_free+0x5c/0x80 [ 100.701223][ T4971] ? kfree+0x1c5/0x650 [ 100.701248][ T4971] ? syslog_print+0x57c/0x610 [ 100.701264][ T4971] ? do_syslog+0x583/0x7d0 [ 100.701280][ T4971] ? __x64_sys_syslog+0x7c/0x90 [ 100.701301][ T4971] sock_alloc_send_pskb+0x878/0x990 [ 100.701340][ T4971] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 100.701373][ T4971] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 100.701403][ T4971] unix_dgram_sendmsg+0x4da/0x17b0 [ 100.701427][ T4971] ? lockdep_hardirqs_on+0x7b/0x110 [ 100.701456][ T4971] ? kfree+0x1c5/0x650 [ 100.701481][ T4971] ? syslog_print+0x57c/0x610 [ 100.701509][ T4971] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 100.701534][ T4971] ? aa_sock_msg_perm+0x129/0x210 [ 100.701566][ T4971] ? apparmor_socket_sendmsg+0x98/0x360 [ 100.701592][ T4971] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 100.701613][ T4971] sock_sendmsg_nosec+0x13a/0x180 [ 100.701641][ T4971] __sys_sendto+0x408/0x5a0 [ 100.701660][ T4971] ? bpf_lsm_capable+0x9/0x20 [ 100.701687][ T4971] ? __pfx___sys_sendto+0x10/0x10 [ 100.701730][ T4971] ? rcu_is_watching+0x16/0xb0 [ 100.701755][ T4971] __x64_sys_sendto+0xde/0x100 [ 100.701778][ T4971] do_syscall_64+0x166/0x520 [ 100.701801][ T4971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.701820][ T4971] ? clear_bhb_loop+0x70/0xc0 [ 100.701850][ T4971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.701868][ T4971] RIP: 0033:0x7f0b02d48407 [ 100.701886][ T4971] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 100.701900][ T4971] RSP: 002b:00007ffc68c27d30 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 100.701920][ T4971] RAX: ffffffffffffffda RBX: 00007f0b02bf8c80 RCX: 00007f0b02d48407 [ 100.701933][ T4971] RDX: 0000000000000055 RSI: 00007ffc68c27e70 RDI: 0000000000000003 [ 100.701945][ T4971] RBP: 00007ffc68c282a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.701957][ T4971] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc68c282b8 [ 100.701969][ T4971] R13: 00007ffc68c27e70 R14: 000000000000003a R15: 00007ffc68c27e70 [ 100.701996][ T4971] [ 100.702241][ T5825] FAULT_INJECTION: forcing a failure. [ 100.702241][ T5825] name failslab, interval 1, probability 100, space 0, times 9 [ 100.702271][ T5825] CPU: 0 UID: 0 PID: 5825 Comm: syz.3.13 Not tainted syzkaller #0 PREEMPT(full) [ 100.702292][ T5825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.702303][ T5825] Call Trace: [ 100.702311][ T5825] [ 100.702318][ T5825] dump_stack_lvl+0xe8/0x150 [ 100.702346][ T5825] should_fail_ex+0x410/0x560 [ 100.702376][ T5825] should_failslab+0xa8/0x100 [ 100.702399][ T5825] ? do_getname+0x2e/0x250 [ 100.702423][ T5825] kmem_cache_alloc_noprof+0xa1/0x600 [ 100.702451][ T5825] ? do_futex+0x3e7/0x4e0 [ 100.702471][ T5825] ? do_getname+0x2e/0x250 [ 100.702500][ T5825] do_getname+0x2e/0x250 [ 100.702522][ T5825] ? getname_flags+0x11/0x20 [ 100.702547][ T5825] do_sys_openat2+0xcc/0x200 [ 100.702571][ T5825] ? __se_sys_futex+0x3a8/0x450 [ 100.702592][ T5825] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.702621][ T5825] ? rcu_is_watching+0x16/0xb0 [ 100.702644][ T5825] __x64_sys_openat+0x138/0x170 [ 100.702673][ T5825] do_syscall_64+0x166/0x520 [ 100.702696][ T5825] ? trace_irq_disable+0x3b/0x140 [ 100.702721][ T5825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.702740][ T5825] ? clear_bhb_loop+0x70/0xc0 [ 100.702763][ T5825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.702781][ T5825] RIP: 0033:0x7fede859e0d9 [ 100.702799][ T5825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.702813][ T5825] RSP: 002b:00007fede9427028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.702843][ T5825] RAX: ffffffffffffffda RBX: 00007fede8825fa0 RCX: 00007fede859e0d9 [ 100.702857][ T5825] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 100.702869][ T5825] RBP: 00007fede8635024 R08: 0000000000000000 R09: 0000000000000000 [ 100.702885][ T5825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.702896][ T5825] R13: 00007fede8826038 R14: 00007fede8825fa0 R15: 00007ffe83859fe8 [ 100.702926][ T5825] [ 100.705751][ T5612] FAULT_INJECTION: forcing a failure. [ 100.705751][ T5612] name failslab, interval 1, probability 100, space 0, times 7 [ 100.705783][ T5612] CPU: 0 UID: 0 PID: 5612 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 100.705804][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.705814][ T5612] Call Trace: [ 100.705822][ T5612] [ 100.705830][ T5612] dump_stack_lvl+0xe8/0x150 [ 100.705864][ T5612] should_fail_ex+0x410/0x560 [ 100.705893][ T5612] should_failslab+0xa8/0x100 [ 100.705916][ T5612] ? do_getname+0x2e/0x250 [ 100.705939][ T5612] kmem_cache_alloc_noprof+0xa1/0x600 [ 100.705970][ T5612] ? do_getname+0x2e/0x250 [ 100.705998][ T5612] do_getname+0x2e/0x250 [ 100.706019][ T5612] ? getname_flags+0x11/0x20 [ 100.706045][ T5612] vfs_fstatat+0x45/0x170 [ 100.706071][ T5612] __x64_sys_newfstatat+0x151/0x200 [ 100.706098][ T5612] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 100.706139][ T5612] ? rcu_is_watching+0x16/0xb0 [ 100.706168][ T5612] do_syscall_64+0x166/0x520 [ 100.706191][ T5612] ? trace_irq_disable+0x3b/0x140 [ 100.706219][ T5612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.706238][ T5612] ? clear_bhb_loop+0x70/0xc0 [ 100.706260][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.706279][ T5612] RIP: 0033:0x7fe6b999c71a [ 100.706296][ T5612] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 [ 100.706310][ T5612] RSP: 002b:00007ffeb0c11bb8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 100.706330][ T5612] RAX: ffffffffffffffda RBX: 00007fe6b9a34474 RCX: 00007fe6b999c71a [ 100.706344][ T5612] RDX: 00007ffeb0c11be0 RSI: 00007ffeb0c11c70 RDI: 00000000ffffff9c [ 100.706356][ T5612] RBP: 00007ffeb0c11c70 R08: 00007ffeb0c12c70 R09: 00000000ffffffff [ 100.706368][ T5612] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffeb0c12d00 [ 100.706379][ T5612] R13: 00007fe6b9a34474 R14: 0000000000018872 R15: 00007ffeb0c12d40 [ 100.706413][ T5612] [ 100.706544][ T4971] FAULT_INJECTION: forcing a failure. [ 100.706544][ T4971] name failslab, interval 1, probability 100, space 0, times 6 [ 100.706566][ T4971] CPU: 0 UID: 0 PID: 4971 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 100.706586][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.706596][ T4971] Call Trace: [ 100.706602][ T4971] [ 100.706609][ T4971] dump_stack_lvl+0xe8/0x150 [ 100.706633][ T4971] should_fail_ex+0x410/0x560 [ 100.706661][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.706685][ T4971] should_failslab+0xa8/0x100 [ 100.706709][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.706731][ T4971] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 100.706769][ T4971] ? sock_alloc_inode+0x2c/0x1a0 [ 100.706791][ T4971] ? sock_alloc_inode+0x2c/0x1a0 [ 100.706819][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.706852][ T4971] sock_alloc_inode+0x2c/0x1a0 [ 100.706877][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.706899][ T4971] alloc_inode+0x6a/0x1b0 [ 100.706925][ T4971] __sock_create+0x12d/0x9d0 [ 100.706959][ T4971] __sys_socket+0xd6/0x1b0 [ 100.706988][ T4971] __x64_sys_socket+0x7a/0x90 [ 100.707015][ T4971] do_syscall_64+0x166/0x520 [ 100.707038][ T4971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.707056][ T4971] ? clear_bhb_loop+0x70/0xc0 [ 100.707079][ T4971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.707097][ T4971] RIP: 0033:0x7f0b02dc3707 [ 100.707113][ T4971] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 100.707127][ T4971] RSP: 002b:00007ffc68c27d48 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 100.707146][ T4971] RAX: ffffffffffffffda RBX: 0000000000000055 RCX: 00007f0b02dc3707 [ 100.707159][ T4971] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 100.707170][ T4971] RBP: 00007f0b02e4f560 R08: 0000000000000000 R09: 0000000000000000 [ 100.707181][ T4971] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 100.707192][ T4971] R13: 00007ffc68c27e70 R14: 000000000000003a R15: 00007ffc68c27e70 [ 100.707220][ T4971] [ 100.707229][ T4971] socket: no more sockets [ 100.707254][ T4971] FAULT_INJECTION: forcing a failure. [ 100.707254][ T4971] name failslab, interval 1, probability 100, space 0, times 5 [ 100.707274][ T4971] CPU: 0 UID: 0 PID: 4971 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 100.707292][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.707302][ T4971] Call Trace: [ 100.707309][ T4971] [ 100.707316][ T4971] dump_stack_lvl+0xe8/0x150 [ 100.707339][ T4971] should_fail_ex+0x410/0x560 [ 100.707366][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.707389][ T4971] should_failslab+0xa8/0x100 [ 100.707413][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.707435][ T4971] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 100.707465][ T4971] ? sock_alloc_inode+0x2c/0x1a0 [ 100.707487][ T4971] ? sock_alloc_inode+0x2c/0x1a0 [ 100.707515][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.707539][ T4971] sock_alloc_inode+0x2c/0x1a0 [ 100.707563][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.707585][ T4971] alloc_inode+0x6a/0x1b0 [ 100.707611][ T4971] __sock_create+0x12d/0x9d0 [ 100.707644][ T4971] __sys_socket+0xd6/0x1b0 [ 100.707673][ T4971] __x64_sys_socket+0x7a/0x90 [ 100.707699][ T4971] do_syscall_64+0x166/0x520 [ 100.707723][ T4971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.707742][ T4971] ? clear_bhb_loop+0x70/0xc0 [ 100.707765][ T4971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.707782][ T4971] RIP: 0033:0x7f0b02dc3707 [ 100.707798][ T4971] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 100.707811][ T4971] RSP: 002b:00007ffc68c27d48 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 100.707829][ T4971] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f0b02dc3707 [ 100.707849][ T4971] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 100.707860][ T4971] RBP: 00007f0b02e4f560 R08: 0000000000000073 R09: 0000000000000001 [ 100.707871][ T4971] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 100.707882][ T4971] R13: 00007ffc68c27e70 R14: 0000000000000054 R15: 00007ffc68c27e70 [ 100.707910][ T4971] [ 100.707918][ T4971] socket: no more sockets [ 100.707931][ T4971] FAULT_INJECTION: forcing a failure. [ 100.707931][ T4971] name failslab, interval 1, probability 100, space 0, times 4 [ 100.707950][ T4971] CPU: 0 UID: 0 PID: 4971 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 100.707969][ T4971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.707978][ T4971] Call Trace: [ 100.707985][ T4971] [ 100.707992][ T4971] dump_stack_lvl+0xe8/0x150 [ 100.708015][ T4971] should_fail_ex+0x410/0x560 [ 100.708046][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.708069][ T4971] should_failslab+0xa8/0x100 [ 100.708092][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.708115][ T4971] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 100.708145][ T4971] ? sock_alloc_inode+0x2c/0x1a0 [ 100.708167][ T4971] ? sock_alloc_inode+0x2c/0x1a0 [ 100.708195][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.708218][ T4971] sock_alloc_inode+0x2c/0x1a0 [ 100.708241][ T4971] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.708263][ T4971] alloc_inode+0x6a/0x1b0 [ 100.708289][ T4971] __sock_create+0x12d/0x9d0 [ 100.708322][ T4971] __sys_socket+0xd6/0x1b0 [ 100.708351][ T4971] __x64_sys_socket+0x7a/0x90 [ 100.708378][ T4971] do_syscall_64+0x166/0x520 [ 100.708401][ T4971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.708419][ T4971] ? clear_bhb_loop+0x70/0xc0 [ 100.708442][ T4971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.708460][ T4971] RIP: 0033:0x7f0b02dc3707 [ 100.708475][ T4971] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 100.708488][ T4971] RSP: 002b:00007ffc68c27d48 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 100.708506][ T4971] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f0b02dc3707 [ 100.708518][ T4971] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 100.708529][ T4971] RBP: 00007f0b02e4f560 R08: 0000000000000073 R09: 0000000000000001 [ 100.708540][ T4971] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 100.708551][ T4971] R13: 00007ffc68c27e70 R14: 000000000000003a R15: 00007ffc68c27e70 [ 100.708579][ T4971] [ 100.709444][ T747] FAULT_INJECTION: forcing a failure. [ 100.709444][ T747] name failslab, interval 1, probability 100, space 0, times 2 [ 100.709468][ T747] CPU: 0 UID: 0 PID: 747 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 100.709487][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.709499][ T747] Workqueue: netns cleanup_net [ 100.709518][ T747] Call Trace: [ 100.709525][ T747] [ 100.709532][ T747] dump_stack_lvl+0xe8/0x150 [ 100.709556][ T747] should_fail_ex+0x410/0x560 [ 100.709585][ T747] ? __alloc_skb+0x1db/0x7a0 [ 100.709601][ T747] should_failslab+0xa8/0x100 [ 100.709626][ T747] ? __alloc_skb+0x1db/0x7a0 [ 100.709641][ T747] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 100.709661][ T747] ? __alloc_skb+0x18d/0x7a0 [ 100.709678][ T747] ? __alloc_skb+0x1db/0x7a0 [ 100.709702][ T747] __alloc_skb+0x1db/0x7a0 [ 100.709724][ T747] rtmsg_ifa+0xf8/0x1f0 [ 100.709750][ T747] __inet_del_ifa+0xa55/0x1040 [ 100.709785][ T747] inetdev_event+0x64b/0x15e0 [ 100.709803][ T747] ? __pfx_del_netdev_ips+0x10/0x10 [ 100.709827][ T747] ? __pfx_pass_all_filter+0x10/0x10 [ 100.709863][ T747] ? __pfx_inetdev_event+0x10/0x10 [ 100.709894][ T747] notifier_call_chain+0x1a5/0x3d0 [ 100.709931][ T747] unregister_netdevice_many_notify+0x17f9/0x2140 [ 100.709971][ T747] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 100.709998][ T747] ? unregister_netdevice_queue+0x17d/0x340 [ 100.710024][ T747] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 100.710058][ T747] default_device_exit_batch+0x91e/0x9a0 [ 100.710096][ T747] ? __pfx_default_device_exit_batch+0x10/0x10 [ 100.710136][ T747] ? __pfx_default_device_exit_batch+0x10/0x10 [ 100.710163][ T747] ops_undo_list+0x4b4/0x8d0 [ 100.710198][ T747] ? __pfx_ops_undo_list+0x10/0x10 [ 100.710229][ T747] ? idr_destroy+0x218/0x290 [ 100.710250][ T747] ? do_raw_spin_unlock+0xf5/0x200 [ 100.710277][ T747] cleanup_net+0x572/0x810 [ 100.710298][ T747] ? __pfx_cleanup_net+0x10/0x10 [ 100.710321][ T747] ? rcu_is_watching+0x16/0xb0 [ 100.710352][ T747] ? process_scheduled_works+0x97a/0x1630 [ 100.710372][ T747] process_scheduled_works+0xc3d/0x1630 [ 100.710424][ T747] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.710452][ T747] ? assign_work+0x3cf/0x5d0 [ 100.710478][ T747] worker_thread+0xa47/0xfb0 [ 100.710547][ T747] kthread+0x38b/0x480 [ 100.710574][ T747] ? __pfx_worker_thread+0x10/0x10 [ 100.710594][ T747] ? __pfx_kthread+0x10/0x10 [ 100.710621][ T747] ret_from_fork+0x514/0xb70 [ 100.710650][ T747] ? __pfx_ret_from_fork+0x10/0x10 [ 100.710675][ T747] ? __switch_to+0xc89/0x1420 [ 100.710701][ T747] ? __pfx_kthread+0x10/0x10 [ 100.710728][ T747] ret_from_fork_asm+0x1a/0x30 [ 100.710770][ T747] [ 100.710784][ T747] FAULT_INJECTION: forcing a failure. [ 100.710784][ T747] name failslab, interval 1, probability 100, space 0, times 1 [ 100.710805][ T747] CPU: 0 UID: 0 PID: 747 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 100.710824][ T747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.710842][ T747] Workqueue: netns cleanup_net [ 100.710859][ T747] Call Trace: [ 100.710866][ T747] [ 100.710873][ T747] dump_stack_lvl+0xe8/0x150 [ 100.710896][ T747] should_fail_ex+0x410/0x560 [ 100.710926][ T747] should_failslab+0xa8/0x100 [ 100.710951][ T747] __kmalloc_cache_noprof+0xa3/0x600 [ 100.710977][ T747] ? addr_event+0xc3/0x470 [ 100.710998][ T747] ? addr_event+0xc3/0x470 [ 100.711027][ T747] addr_event+0xc3/0x470 [ 100.711068][ T747] inetaddr_event+0xef/0x150 [ 100.711092][ T747] ? __pfx_inetaddr_event+0x10/0x10 [ 100.711128][ T747] notifier_call_chain+0x1a5/0x3d0 [ 100.711162][ T747] blocking_notifier_call_chain+0x6a/0x90 [ 100.711192][ T747] __inet_del_ifa+0xa69/0x1040 [ 100.711227][ T747] inetdev_event+0x64b/0x15e0 [ 100.711245][ T747] ? __pfx_del_netdev_ips+0x10/0x10 [ 100.711267][ T747] ? __pfx_pass_all_filter+0x10/0x10 [ 100.711295][ T747] ? __pfx_inetdev_event+0x10/0x10 [ 100.711327][ T747] notifier_call_chain+0x1a5/0x3d0 [ 100.711361][ T747] unregister_netdevice_many_notify+0x17f9/0x2140 [ 100.711399][ T747] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 100.711427][ T747] ? unregister_netdevice_queue+0x17d/0x340 [ 100.711453][ T747] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 100.711487][ T747] default_device_exit_batch+0x91e/0x9a0 [ 100.711526][ T747] ? __pfx_default_device_exit_batch+0x10/0x10 [ 100.711567][ T747] ? __pfx_default_device_exit_batch+0x10/0x10 [ 100.711594][ T747] ops_undo_list+0x4b4/0x8d0 [ 100.711628][ T747] ? __pfx_ops_undo_list+0x10/0x10 [ 100.711659][ T747] ? idr_destroy+0x218/0x290 [ 100.711680][ T747] ? do_raw_spin_unlock+0xf5/0x200 [ 100.711706][ T747] cleanup_net+0x572/0x810 [ 100.711727][ T747] ? __pfx_cleanup_net+0x10/0x10 [ 100.711751][ T747] ? rcu_is_watching+0x16/0xb0 [ 100.711772][ T747] ? process_scheduled_works+0x97a/0x1630 [ 100.711794][ T747] process_scheduled_works+0xc3d/0x1630 [ 100.711908][ T747] ? __pfx_process_scheduled_works+0x10/0x10 [ 100.711952][ T747] ? assign_work+0x3cf/0x5d0 [ 100.711980][ T747] worker_thread+0xa47/0xfb0 [ 100.712106][ T747] kthread+0x38b/0x480 [ 100.712134][ T747] ? __pfx_worker_thread+0x10/0x10 [ 100.712154][ T747] ? __pfx_kthread+0x10/0x10 [ 100.712182][ T747] ret_from_fork+0x514/0xb70 [ 100.712211][ T747] ? __pfx_ret_from_fork+0x10/0x10 [ 100.712238][ T747] ? __switch_to+0xc89/0x1420 [ 100.712264][ T747] ? __pfx_kthread+0x10/0x10 [ 100.712291][ T747] ret_from_fork_asm+0x1a/0x30 [ 100.712334][ T747] [ 100.716488][ T4971] socket: no more sockets [ 100.743047][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(full) [ 100.743078][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.743090][ T5826] Call Trace: [ 100.743099][ T5826] [ 100.743109][ T5826] dump_stack_lvl+0xe8/0x150 [ 100.743142][ T5826] should_fail_ex+0x410/0x560 [ 100.743177][ T5826] should_failslab+0xa8/0x100 [ 100.743206][ T5826] __kmalloc_cache_noprof+0xa3/0x600 [ 100.743230][ T5826] ? tomoyo_find_next_domain+0x10f5/0x1a90 [ 100.743255][ T5826] ? tomoyo_find_next_domain+0x10f5/0x1a90 [ 100.743289][ T5826] tomoyo_find_next_domain+0x10f5/0x1a90 [ 100.743332][ T5826] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 100.743359][ T5826] ? __srcu_check_read_flavor+0x1c/0x260 [ 100.743394][ T5826] ? tomoyo_bprm_check_security+0xef/0x180 [ 100.743417][ T5826] tomoyo_bprm_check_security+0x11b/0x180 [ 100.743443][ T5826] security_bprm_check+0x85/0x240 [ 100.743473][ T5826] bprm_execve+0x888/0x1590 [ 100.743522][ T5826] ? __pfx_bprm_execve+0x10/0x10 [ 100.743553][ T5826] do_execveat_common+0x4f4/0x670 [ 100.743584][ T5826] __x64_sys_execve+0x97/0xc0 [ 100.743608][ T5826] do_syscall_64+0x166/0x520 [ 100.743633][ T5826] ? trace_irq_disable+0x3b/0x140 [ 100.743660][ T5826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.743681][ T5826] ? clear_bhb_loop+0x70/0xc0 [ 100.743707][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.743727][ T5826] RIP: 0033:0x7f778056d107 [ 100.743748][ T5826] Code: 0f 00 64 c7 00 07 00 00 00 b8 ff ff ff ff c9 c3 0f 1f 00 48 8b 05 a9 ee 0f 00 48 8b 10 e9 01 00 00 00 90 b8 3b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 ec 0f 00 f7 d8 64 89 01 48 [ 100.743763][ T5826] RSP: 002b:00007ffd7b38ed18 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 100.743787][ T5826] RAX: ffffffffffffffda RBX: 00005561cea5dfe0 RCX: 00007f778056d107 [ 100.743802][ T5826] RDX: 00005561cea5e000 RSI: 00005561cea5dfe0 RDI: 00005561cea5e088 [ 100.743816][ T5826] RBP: 00005561cea5e088 R08: 00007ffd7b390eb8 R09: 0000000000000000 [ 100.743829][ T5826] R10: 0000000000000008 R11: 0000000000000246 R12: 00005561cea5e000 [ 100.743842][ T5826] R13: 00007f7780732e8b R14: 00005561cea5e000 R15: 0000000000000000 [ 100.743876][ T5826] [ 100.945281][ T5627] Bluetooth: hci2: command tx timeout [ 101.274835][ T747] team0 (unregistering): Port device team_slave_1 removed [ 101.291604][ T747] team0 (unregistering): Port device team_slave_0 removed [ 101.503098][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 101.625884][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 101.654778][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 101.657129][ T10] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 101.658507][ T10] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 101.658531][ T10] usb 4-1: config 0 has no interface number 0 [ 101.658572][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.677494][ T10] usb 4-1: config 0 descriptor?? [ 101.828660][ T10] viperboard 4-1:0.143: version 0.00 found at bus 004 address 003 [ 102.055431][ T10] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 102.055465][ T10] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 102.207569][ T10] usb 4-1: USB disconnect, device number 3 [ 102.930161][ T747] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.024699][ T5627] Bluetooth: hci2: command tx timeout [ 103.414226][ T747] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.657678][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.663329][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.666056][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.670671][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.671397][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.861547][ T747] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.905286][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.914015][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.914193][ T5786] bridge_slave_0: entered allmulticast mode [ 103.917198][ T5786] bridge_slave_0: entered promiscuous mode [ 103.954697][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.962499][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.971040][ T5786] bridge_slave_1: entered allmulticast mode [ 103.981051][ T5786] bridge_slave_1: entered promiscuous mode [ 104.060462][ T5618] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 104.065236][ T747] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.211261][ T5863] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found [ 104.313464][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.329421][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.479481][ T5786] team0: Port device team_slave_0 added [ 104.518607][ T5786] team0: Port device team_slave_1 added [ 104.683173][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 104.693406][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.693564][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.693618][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.714008][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.714027][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.714051][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.914115][ T5697] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.967251][ T5786] hsr_slave_0: entered promiscuous mode [ 104.969366][ T5786] hsr_slave_1: entered promiscuous mode [ 104.970498][ T5786] debugfs: 'hsr0' already exists in 'hsr' [ 104.970522][ T5786] Cannot create hsr debugfs directory [ 105.084014][ T5697] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 105.095026][ T5697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.104078][ T52] Bluetooth: hci2: command tx timeout [ 105.181841][ T747] bridge_slave_1: left allmulticast mode [ 105.181910][ T747] bridge_slave_1: left promiscuous mode [ 105.182186][ T747] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.197463][ T747] bridge_slave_0: left allmulticast mode [ 105.197490][ T747] bridge_slave_0: left promiscuous mode [ 105.198837][ T747] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.349027][ T5697] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 105.464316][ T747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.476830][ T747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.486964][ T747] bond0 (unregistering): Released all slaves [ 105.583104][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.743176][ T52] Bluetooth: hci1: command tx timeout [ 105.754997][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 105.761425][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 105.776896][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.776964][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.777027][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.789344][ T10] usb 2-1: config 0 descriptor?? [ 105.927562][ T747] hsr_slave_0: left promiscuous mode [ 105.935918][ T747] hsr_slave_1: left promiscuous mode [ 105.937145][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.937165][ T747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.942423][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.942444][ T747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.982394][ T747] veth1_macvtap: left promiscuous mode [ 105.982456][ T747] veth0_macvtap: left promiscuous mode [ 105.990230][ T747] veth1_vlan: left promiscuous mode [ 105.990303][ T747] veth0_vlan: left promiscuous mode [ 106.257750][ T10] kye 0003:0458:5010.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 106.329550][ T10] kye 0003:0458:5010.0001: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 106.329618][ T10] kye 0003:0458:5010.0001: tablet-enabling feature report not found [ 106.329654][ T10] kye 0003:0458:5010.0001: tablet enabling failed [ 106.467928][ T747] team0 (unregistering): Port device team_slave_1 removed [ 106.515408][ T747] team0 (unregistering): Port device team_slave_0 removed [ 106.557845][ T10] usb 4-1: USB disconnect, device number 4 [ 106.794348][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 107.189832][ T52] Bluetooth: hci2: command tx timeout [ 107.414501][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.416290][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.416456][ T5848] bridge_slave_0: entered allmulticast mode [ 107.418337][ T5848] bridge_slave_0: entered promiscuous mode [ 107.421966][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.422149][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.422269][ T5848] bridge_slave_1: entered allmulticast mode [ 107.424898][ T5848] bridge_slave_1: entered promiscuous mode [ 107.459011][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.462257][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.494814][ T10] usb 2-1: USB disconnect, device number 6 [ 107.514466][ T5697] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.620786][ T5848] team0: Port device team_slave_0 added [ 107.628830][ T5848] team0: Port device team_slave_1 added [ 107.696512][ T5697] usb 4-1: New USB device found, idVendor=1110, idProduct=9001, bcdDevice= 1.00 [ 107.706553][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.706571][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.706593][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.713344][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.713365][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.713389][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.766288][ T5697] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 107.834471][ T5627] Bluetooth: hci1: command tx timeout [ 107.841124][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.841153][ T5697] usb 4-1: Product: syz [ 107.841168][ T5697] usb 4-1: Manufacturer: syz [ 107.841182][ T5697] usb 4-1: SerialNumber: syz [ 107.858445][ T5917] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 107.859072][ T5848] hsr_slave_0: entered promiscuous mode [ 107.870288][ T5848] hsr_slave_1: entered promiscuous mode [ 107.928551][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.941535][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.942463][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.955149][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.995049][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.008107][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.011257][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.020990][ T5786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.030311][ T5697] usb 4-1: reset high-speed USB device number 5 using dummy_hcd [ 108.273113][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 108.482873][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.499435][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.513144][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.523693][ T5618] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.534352][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.542682][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.559150][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.562793][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.576065][ T5848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.624235][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.674456][ T5618] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 108.679428][ T5618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.698424][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.755461][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.755638][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.799000][ T747] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.799848][ T747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.855003][ T5955] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found [ 108.880069][ T5697] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 108.889772][ T5697] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw [ 108.920069][ T5697] usb 4-1: USB disconnect, device number 5 [ 108.945258][ T1219] usb 4-1: Direct firmware load for ueagle-atm/adi930.fw failed with error -2 [ 108.963296][ T1219] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/adi930.fw [ 109.202517][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.261213][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.293823][ T747] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.294019][ T747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.354161][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.354309][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.591837][ T5277] 8021q: adding VLAN 0 to HW filter on device eth6 [ 109.903220][ T5627] Bluetooth: hci1: command tx timeout [ 110.301550][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.444656][ T5786] veth0_vlan: entered promiscuous mode [ 110.471501][ T5786] veth1_vlan: entered promiscuous mode [ 110.538196][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.594765][ T5786] veth0_macvtap: entered promiscuous mode [ 110.605498][ T5786] veth1_macvtap: entered promiscuous mode [ 110.656668][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.696171][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.793966][ T5618] cxacru 2-1:1.0: send of cm 0x90 failed (-104) [ 110.798382][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.798432][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.798465][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.813967][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.848704][ T6010] cxacru 2-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 110.848766][ T6010] cxacru 2-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 111.011076][ T5277] 8021q: adding VLAN 0 to HW filter on device eth7 [ 111.048403][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.048453][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.118354][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.118402][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.226475][ T5848] veth0_vlan: entered promiscuous mode [ 111.260268][ T5848] veth1_vlan: entered promiscuous mode [ 111.383806][ T4943] usb 2-1: USB disconnect, device number 7 [ 111.427190][ T5848] veth0_macvtap: entered promiscuous mode [ 111.441551][ T5848] veth1_macvtap: entered promiscuous mode [ 111.508581][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.537001][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.598314][ T1175] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.600876][ T747] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.601373][ T747] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.634371][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.653054][ T30] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 111.701823][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.701879][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.822675][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.822756][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.843024][ T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 111.859917][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.868515][ T30] usb 1-1: Product: syz [ 111.874694][ T30] usb 1-1: Manufacturer: syz [ 111.880726][ T30] usb 1-1: SerialNumber: syz [ 111.910860][ T30] usbtest 1-1:1.0: Linux gadget zero [ 111.916542][ T30] usbtest 1-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 111.984128][ T5627] Bluetooth: hci1: command tx timeout [ 112.230124][ T6038] svc: failed to register lockdv1 RPC service (errno 111). [ 112.230400][ T6038] lockd_up: makesock failed, error=-111 [ 112.364254][ T5277] 8021q: adding VLAN 0 to HW filter on device eth8 [ 112.490780][ T6038] svc: failed to register nfsdv3 RPC service (errno 111). [ 112.507607][ T6038] svc: failed to register nfsaclv3 RPC service (errno 111). [ 112.515686][ T6038] failed to unregister tcp with rpcbind [ 112.532267][ T6038] svc: failed to register nfsdv3 RPC service (errno 97). [ 112.541198][ T6038] svc: failed to register nfsaclv3 RPC service (errno 97). [ 112.552676][ T6038] failed to unregister tcp with rpcbind [ 112.779239][ T6056] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found [ 114.257353][ T6104] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found [ 115.003133][ T6021] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.134705][ T6021] usb 5-1: device descriptor read/64, error -71 [ 115.383037][ T6021] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.514991][ T6021] usb 5-1: device descriptor read/64, error -71 [ 115.626178][ T6021] usb usb5-port1: attempt power cycle [ 115.984729][ T6021] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 116.014012][ T6021] usb 5-1: device descriptor read/8, error -71 [ 116.273064][ T6021] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.293628][ T6021] usb 5-1: device descriptor read/8, error -71 [ 116.403894][ T6021] usb usb5-port1: unable to enumerate USB device [ 116.666997][ T31] audit: type=1800 audit(1787020868.372:2): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.57" name="cluster_name" dev="configfs" ino=11286 res=0 errno=0 [ 116.688968][ T31] audit: type=1800 audit(1787020868.372:3): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.57" name="local" dev="configfs" ino=11288 res=0 errno=0 [ 116.689018][ T31] audit: type=1800 audit(1787020868.392:4): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.57" name="toss_secs" dev="configfs" ino=11290 res=0 errno=0 [ 116.689052][ T31] audit: type=1800 audit(1787020868.392:5): pid=6162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.57" name="scan_secs" dev="configfs" ino=11291 res=0 errno=0 [ 116.725020][ T6162] dlm: Using TCP for communications [ 116.732799][ T6162] dlm: ls1: joining the lockspace group... [ 117.166850][ T6171] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found [ 117.267407][ T6044] usbtest 1-1:1.0: set altsetting to 0 failed, -110 [ 117.321796][ T6021] usb 1-1: USB disconnect, device number 2 [ 117.912341][ T6194] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found [ 118.003139][ T189] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.184118][ T189] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 118.194201][ T189] usb 1-1: Dual-Role OTG device on HNP port [ 118.195037][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.218691][ T189] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 118.243442][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 118.280365][ T6203] PM: suspend entry (s2idle) [ 118.409365][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 118.409456][ T9] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 118.411077][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.483675][ T36] Filesystems sync: 0.197 seconds [ 120.627380][ T6203] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 120.627562][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.130890][ C0] usb 5-1: NFC: Urb failure (status -71) [ 121.139626][ T9] usb 5-1: NFC: Unable to get FW version [ 121.152295][ T9] pn533_usb 5-1:1.0: probe with driver pn533_usb failed with error -71 [ 121.181670][ T9] usb 5-1: USB disconnect, device number 6 [ 121.230035][ T6203] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.241986][ T6203] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.256395][ T6203] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.256489][ T6203] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.275786][ T6203] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.284812][ T6203] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.287012][ T6203] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.299099][ T6203] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.309966][ T6203] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.316666][ T6203] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.327418][ T6203] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.543125][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 121.670679][ T6218] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found [ 121.695325][ T9] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 0.00 [ 121.697977][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 121.698002][ T9] usb 5-1: Product: syz [ 121.698015][ T9] usb 5-1: Manufacturer: syz [ 121.718462][ T9] i2c-tiny-usb 5-1:1.0: version 0.00 found at bus 005 address 007 [ 121.877499][ T6222] svc: failed to register nfsdv3 RPC service (errno 111). [ 121.886801][ T6222] svc: failed to register nfsaclv3 RPC service (errno 111). [ 121.944519][ T6223] NFSD: Failed to start, no listeners configured. [ 121.974631][ T6225] PM: suspend entry (s2idle) [ 121.980327][ T6225] PM: suspend exit [ 122.703031][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.917332][ T9] (null): error -EIO: failure setting delay to 10us [ 122.924993][ T9] i2c-tiny-usb 5-1:1.0: probe with driver i2c-tiny-usb failed with error -5 [ 122.940198][ T9] usb 5-1: USB disconnect, device number 7 [ 123.273149][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.343074][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.344681][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.763051][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 123.937215][ T9] usb 5-1: New USB device found, idVendor=1a2b, idProduct=3c4d, bcdDevice= 1.00 [ 123.938312][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 123.938357][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.952923][ T9] hub 5-1:1.0: USB hub found [ 124.558617][ T9] hub 5-1:1.0: config failed, can't read hub descriptor (err -22) [ 124.783290][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.343123][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.423128][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.423227][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.199685][ T6255] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found [ 126.927741][ T6282] ubi: mtd0 is already attached to ubi0 [ 127.077578][ T6289] ubi0 error: get_exclusive: 2 users for volume 0 [ 127.293348][ T9] usb 5-1: USB disconnect, device number 8 [ 127.342531][ T6294] ohci-platform QEMU0001:00: error -ENXIO: IRQ index 0 not found [ 127.423266][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.503636][ T5627] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.504395][ T5627] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.904713][ T30] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 127.919548][ T6315] loop0: detected capacity change from 0 to 2048 [ 127.954606][ T6315] (syz.1.100,6315,1):ocfs2_get_sector:1713 ERROR: status = -5 [ 127.963777][ T6315] (syz.1.100,6315,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 127.972701][ T6315] (syz.1.100,6315,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 127.982496][ T6315] (syz.1.100,6315,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 128.063878][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.077214][ T30] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 128.092856][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 128.092952][ T30] usb 5-1: SerialNumber: syz [ 128.749719][ T30] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 129.140859][ T9] usb 5-1: USB disconnect, device number 9 [ 129.143891][ T9] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 129.973085][ T30] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 130.124032][ T30] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 130.127525][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.127551][ T30] usb 5-1: Product: syz [ 130.127565][ T30] usb 5-1: Manufacturer: syz [ 130.127578][ T30] usb 5-1: SerialNumber: syz [ 130.142140][ T30] usb 5-1: NFC: intf ffff888075755000 id ffffffff8fa61c40 [ 130.169869][ T30] nfcmrvl 5-1:1.0: NFC: registered with nci successfully [ 130.607993][ T59] nfcmrvl 5-1:1.0: NFC: send entry, len 4 [ 130.610192][ T59] nfcmrvl 5-1:1.0: NFC: send entry, len 7 [ 130.809586][ T59] nfcmrvl 5-1:1.0: NFC: send entry, len 3 [ 131.316257][ T6379] PM: suspend entry (s2idle) [ 131.316284][ T6379] PM: suspend exit [ 132.497088][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 132.507444][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.516329][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.527529][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.536863][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.742829][ T6377] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.753983][ C1] nfcmrvl 5-1:1.0: NFC: urb ffff888026c03d00 status -2 count 0 [ 132.762562][ C1] nfcmrvl 5-1:1.0: NFC: urb ffff8880292ab100 status -2 count 0 [ 132.772170][ C1] nfcmrvl 5-1:1.0: NFC: urb ffff8880292aba00 status -2 count 0 [ 132.804464][ T6021] usb 5-1: USB disconnect, device number 10 [ 132.814874][ T6021] usb 5-1: NFC: intf ffff888075755000 [ 133.311405][ T6383] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.311633][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.311777][ T6383] bridge_slave_0: entered allmulticast mode [ 133.314658][ T6383] bridge_slave_0: entered promiscuous mode [ 133.318807][ T6383] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.319019][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.319446][ T6383] bridge_slave_1: entered allmulticast mode [ 133.322365][ T6383] bridge_slave_1: entered promiscuous mode [ 133.359802][ T6383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.363846][ T6383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.399094][ T6383] team0: Port device team_slave_0 added [ 133.402153][ T6383] team0: Port device team_slave_1 added [ 133.428376][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.428410][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.428435][ T6383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.431272][ T6383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.431288][ T6383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.431311][ T6383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.475039][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 133.487028][ T6383] hsr_slave_0: entered promiscuous mode [ 133.490203][ T6383] hsr_slave_1: entered promiscuous mode [ 133.491252][ T6383] debugfs: 'hsr0' already exists in 'hsr' [ 133.491280][ T6383] Cannot create hsr debugfs directory [ 133.667766][ T6383] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.675728][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 133.675800][ T10] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 133.679296][ T6383] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.680600][ T6383] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.688057][ T6383] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.689285][ T6383] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.700674][ T6383] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.702123][ T6383] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.707758][ T6383] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.712174][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.767710][ T6383] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.767879][ T6383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.769309][ T6383] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.769439][ T6383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.850502][ T6383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.868862][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.878265][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.900434][ T6383] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.909764][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.909894][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.931505][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.931643][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.067130][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.075479][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.393673][ T5627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.406578][ T5627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.421184][ T5627] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.431189][ T5627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.444843][ T5627] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.624844][ T52] Bluetooth: hci4: command tx timeout [ 134.741103][ T6383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.834314][ T30] nintendo 0005:057E:2009.0002: unknown main item tag 0x0 [ 134.834379][ T30] nintendo 0005:057E:2009.0002: unknown main item tag 0x0 [ 134.835094][ T30] nintendo 0005:057E:2009.0002: unknown main item tag 0x0 [ 134.836740][ T30] nintendo 0005:057E:2009.0002: unknown main item tag 0x0 [ 134.836772][ T30] nintendo 0005:057E:2009.0002: unknown main item tag 0x0 [ 134.836796][ T30] nintendo 0005:057E:2009.0002: unknown main item tag 0x0 [ 134.836818][ T30] nintendo 0005:057E:2009.0002: unknown main item tag 0x0 [ 134.836841][ T30] nintendo 0005:057E:2009.0002: unknown main item tag 0x0 [ 134.836863][ T30] nintendo 0005:057E:2009.0002: unknown main item tag 0x0 [ 134.836885][ T30] nintendo 0005:057E:2009.0002: unknown main item tag 0x0 [ 134.837139][ T30] nintendo 0005:057E:2009.0002: unbalanced collection at end of report description [ 134.837776][ T30] nintendo 0005:057E:2009.0002: HID parse failed [ 134.839880][ T30] nintendo 0005:057E:2009.0002: probe - fail = -22 [ 134.839964][ T30] nintendo 0005:057E:2009.0002: probe with driver nintendo failed with error -22 [ 135.150465][ T52] Bluetooth: hci0: unexpected event for opcode 0x041b [ 135.258673][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c03 [ 135.387250][ T6454] device-mapper: table: 248:0: zero-length target [ 135.395262][ T6454] device-mapper: ioctl: error adding target to table [ 135.447931][ T6383] veth0_vlan: entered promiscuous mode [ 135.469445][ T6383] veth1_vlan: entered promiscuous mode [ 135.610516][ T6383] veth0_macvtap: entered promiscuous mode [ 135.626117][ T6383] veth1_macvtap: entered promiscuous mode [ 135.658689][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.665656][ T6383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.728133][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.774244][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.774446][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.774481][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.985245][ T747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.986706][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.986915][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.987077][ T6422] bridge_slave_0: entered allmulticast mode [ 135.989094][ T6422] bridge_slave_0: entered promiscuous mode [ 135.995168][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.995455][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.995611][ T6422] bridge_slave_1: entered allmulticast mode [ 135.998028][ T6422] bridge_slave_1: entered promiscuous mode [ 136.061183][ T747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.068885][ T6422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.079628][ T6422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.140506][ T6422] team0: Port device team_slave_0 added [ 136.169039][ T6422] team0: Port device team_slave_1 added [ 136.220036][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.220084][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.220109][ T6422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.223475][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.223497][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.262431][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.262449][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.262472][ T6422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.398585][ T6422] hsr_slave_0: entered promiscuous mode [ 136.401877][ T6422] hsr_slave_1: entered promiscuous mode [ 136.402663][ T6422] debugfs: 'hsr0' already exists in 'hsr' [ 136.402682][ T6422] Cannot create hsr debugfs directory [ 136.544239][ T52] Bluetooth: hci5: command tx timeout [ 136.703328][ T52] Bluetooth: hci4: command tx timeout [ 137.041684][ T6422] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 137.053758][ T5618] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 137.069958][ T6422] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 137.074168][ T6422] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 137.094327][ T6422] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 137.106522][ T6422] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 137.124807][ T6422] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 137.136846][ T6422] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 137.160769][ T6422] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 137.188864][ T10] usb 5-1: USB disconnect, device number 11 [ 137.213975][ T5618] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 137.231990][ T5618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.232045][ T5618] usb 6-1: Product: syz [ 137.232079][ T5618] usb 6-1: Manufacturer: syz [ 137.232096][ T5618] usb 6-1: SerialNumber: syz [ 137.302036][ T5618] pl2303 6-1:1.0: pl2303 converter detected [ 137.335349][ T5618] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 137.509181][ T10] usb 6-1: USB disconnect, device number 2 [ 137.558318][ T6422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.581493][ T6422] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.590540][ T10] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 137.599249][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.599391][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.612260][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.612430][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.637036][ T10] pl2303 6-1:1.0: device disconnected [ 137.875661][ T6494] netlink: 64 bytes leftover after parsing attributes in process `syz.4.122'. [ 138.599212][ T6422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.624014][ T52] Bluetooth: hci5: command tx timeout [ 138.783121][ T52] Bluetooth: hci4: command tx timeout [ 139.042632][ T6422] veth0_vlan: entered promiscuous mode [ 139.057409][ T6422] veth1_vlan: entered promiscuous mode [ 139.125841][ T6532] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 139.127012][ T6422] veth0_macvtap: entered promiscuous mode [ 139.130017][ T6422] veth1_macvtap: entered promiscuous mode [ 139.140021][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.146317][ T6422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.168960][ T6532] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 139.178943][ T6532] CPU: 1 UID: 0 PID: 6532 Comm: syz.5.132 Not tainted syzkaller #0 PREEMPT(full) [ 139.190046][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.200972][ T6532] RIP: 0010:wcove_typec_probe+0xd5/0x570 [ 139.207173][ T6532] Code: 27 00 74 13 49 8d be 88 00 00 00 e8 a5 24 48 fa 49 8d 86 88 00 00 00 48 89 6c 24 18 48 89 28 49 83 c5 08 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 8c 23 48 fa 49 8b 6d 00 4d 8d ae [ 139.229856][ T6532] RSP: 0018:ffffc900054efaa8 EFLAGS: 00010202 [ 139.236303][ T6532] RAX: 0000000000000001 RBX: ffff88801bfb5000 RCX: 0000000000000001 [ 139.244488][ T6532] RDX: ffffffff9af9c840 RSI: ffffffff8cd82280 RDI: ffff8880789b3c98 [ 139.252838][ T6532] RBP: ffff88801bfb5010 R08: 0000000000000004 R09: 0000000000000000 [ 139.261180][ T6532] R10: dffffc0000000000 R11: ffffed100f136791 R12: dffffc0000000000 [ 139.269452][ T6532] R13: 0000000000000008 R14: ffff8880789b3c38 R15: 1ffff1100f136798 [ 139.280698][ T6532] FS: 00007fdceadad6c0(0000) GS:ffff8881249ab000(0000) knlGS:0000000000000000 [ 139.291003][ T6532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.298699][ T6532] CR2: 000000110c2ec25a CR3: 0000000026932000 CR4: 00000000003526f0 [ 139.309244][ T6532] Call Trace: [ 139.312697][ T6532] [ 139.315928][ T6532] ? __pfx_wcove_typec_probe+0x10/0x10 [ 139.322031][ T6532] platform_probe+0xf9/0x190 [ 139.327080][ T6532] ? __pfx_platform_probe+0x10/0x10 [ 139.332650][ T6532] really_probe+0x254/0xae0 [ 139.337551][ T6532] __driver_probe_device+0x1e8/0x360 [ 139.343233][ T6532] device_driver_attach+0xe0/0x1d0 [ 139.348850][ T6532] bind_store+0x1d0/0x220 [ 139.353567][ T6532] ? __pfx_sysfs_kf_write+0x10/0x10 [ 139.359067][ T6532] kernfs_fop_write_iter+0x3a4/0x540 [ 139.365555][ T6532] vfs_write+0x612/0xba0 [ 139.371477][ T6532] ? __pfx_vfs_write+0x10/0x10 [ 139.377112][ T6532] ? __fget_files+0x2a/0x420 [ 139.381944][ T6532] ksys_write+0x150/0x270 [ 139.386383][ T6532] ? __pfx_ksys_write+0x10/0x10 [ 139.391727][ T6532] do_syscall_64+0x166/0x520 [ 139.396800][ T6532] ? trace_irq_disable+0x3b/0x140 [ 139.402139][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.409561][ T6532] ? clear_bhb_loop+0x70/0xc0 [ 139.414623][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.420669][ T6532] RIP: 0033:0x7fdce9f9e0d9 [ 139.425894][ T6532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.446894][ T6532] RSP: 002b:00007fdceadad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.455865][ T6532] RAX: ffffffffffffffda RBX: 00007fdcea225fa0 RCX: 00007fdce9f9e0d9 [ 139.464135][ T6532] RDX: 0000000000000007 RSI: 0000200000000400 RDI: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 139.472954][ T6532] RBP: 00007fdcea035024 R08: 0000000000000000 R09: 0000000000000000 [ 139.481837][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.490453][ T6532] R13: 00007fdcea226038 R14: 00007fdcea225fa0 R15: 00007ffc8eccb3b8 [ 139.498720][ T6532] [ 139.501926][ T6532] Modules linked in: [ 139.508779][ T6532] ---[ end trace 0000000000000000 ]--- [ 139.523208][ T1175] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.538734][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.551666][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.564775][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 ** replaying previous printk message ** [ 139.564775][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.572846][ T6532] RIP: 0010:wcove_typec_probe+0xd5/0x570 [ 139.573076][ T6532] Code: 27 00 74 13 49 8d be 88 00 00 00 e8 a5 24 48 fa 49 8d 86 88 00 00 00 48 89 6c 24 18 48 89 28 49 83 c5 08 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 8c 23 48 fa 49 8b 6d 00 4d 8d ae [ 139.573095][ T6532] RSP: 0018:ffffc900054efaa8 EFLAGS: 00010202 [ 139.573114][ T6532] RAX: 0000000000000001 RBX: ffff88801bfb5000 RCX: 0000000000000001 [ 139.573128][ T6532] RDX: ffffffff9af9c840 RSI: ffffffff8cd82280 RDI: ffff8880789b3c98 [ 139.573142][ T6532] RBP: ffff88801bfb5010 R08: 0000000000000004 R09: 0000000000000000 [ 139.573155][ T6532] R10: dffffc0000000000 R11: ffffed100f136791 R12: dffffc0000000000 [ 139.573168][ T6532] R13: 0000000000000008 R14: ffff8880789b3c38 R15: 1ffff1100f136798 [ 139.573181][ T6532] FS: 00007fdceadad6c0(0000) GS:ffff8881249ab000(0000) knlGS:0000000000000000 [ 139.573197][ T6532] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.573210][ T6532] CR2: 000055e5bd437ee8 CR3: 0000000026932000 CR4: 00000000003526f0 [ 139.573231][ T6532] Kernel panic - not syncing: Fatal exception [ 139.696607][ T6532] Kernel Offset: disabled [ 139.701046][ T6532] Rebooting in 86400 seconds..