last executing test programs: 32.884304515s ago: executing program 3 (id=34): r0 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff000705030200020007058402000200070588058003010705070580030107058a030800010904000105ffffff000705030200020007058402000200070588058003010705070580030107058a030800010904000805ffffff000705030200020007058402000200070588058003010705070580030107058a03080001"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/ttusb-dec/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='5-1:1.0\x00', 0x8) close(r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_read(r0, 0x3, 0x800, &(0x7f0000000880)=""/2048) (async) syz_usb_ep_write(r0, 0x84, 0x40, &(0x7f0000000700)="aa00080c0000000100070009017700"/64) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/drivers/ttusb-dec/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000840)='5-1:1.0\x00', 0x8) 32.805019723s ago: executing program 1 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf3f, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x7, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x50d0}, 0x40) 32.39056224s ago: executing program 1 (id=38): unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) socket$inet(0xa, 0x801, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000270009002dbd7000fedbdf2502000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 30.008414825s ago: executing program 1 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)="3c3f3ea0db2d3603c5d209649c9b04c52d544f4d4f594f5f434f4e4649473d300a", 0x21) 29.791547028s ago: executing program 1 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/usb1/speed\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/usb2/speed\x00', 0x0, 0x0) read(r1, &(0x7f0000000240)=""/100, 0x64) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/usb/devices/1-1/speed\x00', 0x0, 0x0) read(r2, &(0x7f0000000340)=""/100, 0x64) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/speed\x00', 0x0, 0x0) read(r3, &(0x7f0000000400)=""/100, 0x64) 29.782603147s ago: executing program 3 (id=48): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f0000000080)=[{r0, 0x8241}], 0x1, 0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect(0x0, 0x4e, &(0x7f0000002d80)=ANY=[@ANYBLOB="12010000c9d1c40899270a50b7e7010203010902"], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 27.966061423s ago: executing program 3 (id=59): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x4, 0x22, 0x0, 0x0, 0x8, 0xfffffff8, 0x5f4, 0x81, 0x6, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 27.852020441s ago: executing program 1 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='2049\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) 27.151477939s ago: executing program 1 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_final\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys_final\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_final/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0\x00', 0x8) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0), &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe, 0x8, "0200000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000100), &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe, 0x8, "0200000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x8, 0xb, 0x1}) (async) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000600)=0xb) (async) syz_usb_control_io(r1, &(0x7f0000000140), &(0x7f0000000180)={0x84, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000280), &(0x7f0000000340)={0x84, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000480), &(0x7f0000000540)={0x84, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000680), &(0x7f0000000740)={0x84, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000880), &(0x7f00000008c0)={0x84, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f00000009c0), &(0x7f0000000a00)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000b00), &(0x7f0000000b40)={0x84, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000c80), &(0x7f0000000d40)={0x84, &(0x7f0000000e00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 26.872044395s ago: executing program 3 (id=68): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000000c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x1000, 0x71, 0x10, 0xaf}}, &(0x7f0000000480)='GPL\x00'}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a40)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x48}}, 0x20000000) syz_emit_ethernet(0x66, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, '\x00', 0x9, 0xff, 0x0, @loopback, @loopback}}}}}}}, 0x0) 26.437598633s ago: executing program 3 (id=70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000100)) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x12, {"f4"}}], 0x12}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000200)={[{0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x1, 0x1000}, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x1, 0x1000}, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x1, 0x1000}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 23.051494738s ago: executing program 3 (id=75): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 20.923368744s ago: executing program 4 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000480)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f0000000540)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f00000006c0)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f0000000740)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000780)={0x0, 0x1dcd6500}, 0x0) r10 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x15, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000000800)=0x2) ioctl$USBDEVFS_SETCONFIGURATION(r10, 0x80045505, &(0x7f0000000804)) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000000840)={0x0, 0x9, 0x0, 0x0, 0x0, 0x3e8, 0x0}) 19.948216227s ago: executing program 4 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') symlink(&(0x7f0000000280)='functions/gser.usb0\x00', &(0x7f00000002c0)='configs/c.1/gser.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0x0525', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0xa4a6', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='0x0100', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='bcdUSB\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='0x0200', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='bMaxPacketSize0\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='64', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='invalid_udc\x00', 0xc) 19.514122068s ago: executing program 4 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010800000000000c000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 19.065335712s ago: executing program 4 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/portlist\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='2049\n', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\n', 0x2) close(r1) 18.206900712s ago: executing program 4 (id=97): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) 17.211014729s ago: executing program 4 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x6547, 0x232, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x3, 0x40, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000140)={0x40, 0xfe, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000140)={0x40, 0xfe, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000140)={0x40, 0xfe, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.94529465s ago: executing program 0 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') symlink(&(0x7f0000000280)='functions/gser.usb0\x00', &(0x7f00000002c0)='configs/c.1/gser.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0x0525', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0xa4a6', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='0x0100', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='bcdUSB\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='0x0200', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='bMaxPacketSize0\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='64', 0x2) 15.079844778s ago: executing program 2 (id=103): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)="62f5ff6ccf3d2ec97f0e4b", 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r2, &(0x7f0000000180), 0x1000) 15.078681138s ago: executing program 0 (id=115): r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='bMaxPacketSize0\x00', 0x1, 0x0) write(r0, &(0x7f0000000580)='64', 0x2) 14.885067051s ago: executing program 0 (id=104): ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000080)={'macvlan1\x00', 0x6}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x8}]}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='1', 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r4, &(0x7f0000000240), 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x4000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x89f0, &(0x7f00000000c0)={0x2, 0xfff7fff8, 0x4, 0xffffffff, 0x57, "bb40af00008000"}) 14.878099173s ago: executing program 2 (id=105): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000), 0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04100100"], 0x4) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="040e0401030c00"], 0x7) syz_emit_vhci(&(0x7f0000001100)=ANY=[@ANYBLOB="040e0c010310000000000040000000"], 0xf) syz_emit_vhci(&(0x7f0000001200)=ANY=[@ANYBLOB="040e0c010110000000000000000000"], 0xf) syz_emit_vhci(&(0x7f0000001300)=ANY=[@ANYBLOB="040e0a01091000001122334455"], 0xd) syz_emit_vhci(&(0x7f0000001400)=ANY=[@ANYBLOB="040e0c010320004000000000000000"], 0xf) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="040e44010210000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/73], 0x47) nanosleep(&(0x7f0000000600)={0x0, 0x2faf080}, 0x0) syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="040e0401030c00"], 0x7) syz_emit_vhci(&(0x7f0000001100)=ANY=[@ANYBLOB="040e0c010310000000000040000000"], 0xf) syz_emit_vhci(&(0x7f0000001200)=ANY=[@ANYBLOB="040e0c010110000000000000000000"], 0xf) syz_emit_vhci(&(0x7f0000001400)=ANY=[@ANYBLOB="040e0c010320004000000000000000"], 0xf) syz_emit_vhci(&(0x7f0000001500)=ANY=[@ANYBLOB="040e44010210000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/73], 0x47) syz_emit_vhci(&(0x7f0000001000)=ANY=[@ANYBLOB="040e0401030c00"], 0x7) syz_emit_vhci(&(0x7f0000001300)=ANY=[@ANYBLOB="040e0a01091000001122334455"], 0xd) 14.573540903s ago: executing program 2 (id=106): r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='4\x00', 0x2) 14.466382331s ago: executing program 0 (id=107): r0 = open(&(0x7f0000000480)='./mount_config/dlm/ocfs2/tcp_port\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)='21064', 0x5) close(r0) 14.380214238s ago: executing program 2 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)="3c3f3ea0db2d3603c5d209649c9b04c52d544f4d4f594f5f434f4e4649473d300a", 0x21) 14.251292712s ago: executing program 0 (id=110): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x1, 0x0) write(r0, &(0x7f00000005c0)='2000\x00', 0x5) 14.04568275s ago: executing program 0 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='mnt\x00', 0x1ff) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000000)={'lo\x00'}) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/tmp\x00', &(0x7f0000000400)='mnt\x00', &(0x7f0000000440)='nfs\x00', 0x0, &(0x7f0000000480)='addr=127.0.0.1,vers=3\x00') 14.045584112s ago: executing program 2 (id=113): r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/node/mynode/local\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='1\x00', 0x2) close(r0) 13.807570704s ago: executing program 2 (id=114): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='0x0100', 0x6) 0s ago: executing program 32 (id=66): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_final\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys_final\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_final/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0\x00', 0x8) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, &(0x7f00000000c0), &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe, 0x8, "0200000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000100), &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe, 0x8, "0200000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000400), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x8, 0xb, 0x1}) (async) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000600)=0xb) (async) syz_usb_control_io(r1, &(0x7f0000000140), &(0x7f0000000180)={0x84, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000280), &(0x7f0000000340)={0x84, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000480), &(0x7f0000000540)={0x84, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000680), &(0x7f0000000740)={0x84, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000880), &(0x7f00000008c0)={0x84, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f00000009c0), &(0x7f0000000a00)={0x84, &(0x7f0000000ac0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000b00), &(0x7f0000000b40)={0x84, &(0x7f0000000c40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000c80), &(0x7f0000000d40)={0x84, &(0x7f0000000e00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) kernel console output (not intermixed with test programs): 9 > 1 [ 64.960656][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.967618][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.975405][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.983388][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.988759][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.003225][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.004626][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.010418][ T5620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.020542][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.025906][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.031916][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.039064][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.047050][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.060982][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.060987][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.075795][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.078150][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.092913][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 66.453072][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.460238][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.467694][ T5608] bridge_slave_0: entered allmulticast mode [ 66.475655][ T5608] bridge_slave_0: entered promiscuous mode [ 66.519282][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.526507][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.533695][ T5608] bridge_slave_1: entered allmulticast mode [ 66.540443][ T5608] bridge_slave_1: entered promiscuous mode [ 66.652407][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.696295][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.714373][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.721551][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.728690][ T5609] bridge_slave_0: entered allmulticast mode [ 66.736043][ T5609] bridge_slave_0: entered promiscuous mode [ 66.743391][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.750478][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.757957][ T5607] bridge_slave_0: entered allmulticast mode [ 66.764983][ T5607] bridge_slave_0: entered promiscuous mode [ 66.772173][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.779257][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.786414][ T5621] bridge_slave_0: entered allmulticast mode [ 66.793655][ T5621] bridge_slave_0: entered promiscuous mode [ 66.812418][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.819523][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.826744][ T5609] bridge_slave_1: entered allmulticast mode [ 66.833526][ T5609] bridge_slave_1: entered promiscuous mode [ 66.840096][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.847216][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.854334][ T5607] bridge_slave_1: entered allmulticast mode [ 66.861038][ T5607] bridge_slave_1: entered promiscuous mode [ 66.867636][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.874820][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.882190][ T5621] bridge_slave_1: entered allmulticast mode [ 66.888916][ T5621] bridge_slave_1: entered promiscuous mode [ 66.935756][ T5608] team0: Port device team_slave_0 added [ 66.972500][ T5608] team0: Port device team_slave_1 added [ 66.988430][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.000958][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.012244][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.028314][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.035533][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.042716][ T5610] bridge_slave_0: entered allmulticast mode [ 67.049465][ T5610] bridge_slave_0: entered promiscuous mode [ 67.058041][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.068849][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.079848][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.096812][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.104037][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.111157][ T5610] bridge_slave_1: entered allmulticast mode [ 67.118023][ T5610] bridge_slave_1: entered promiscuous mode [ 67.132298][ T50] Bluetooth: hci1: command tx timeout [ 67.132302][ T5613] Bluetooth: hci0: command tx timeout [ 67.132505][ T5613] Bluetooth: hci3: command tx timeout [ 67.138406][ T5622] Bluetooth: hci2: command tx timeout [ 67.144279][ T5619] Bluetooth: hci4: command tx timeout [ 67.168729][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.175701][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.201701][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.246490][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.253500][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.279454][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.299463][ T5609] team0: Port device team_slave_0 added [ 67.306626][ T5607] team0: Port device team_slave_0 added [ 67.313849][ T5621] team0: Port device team_slave_0 added [ 67.327896][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.338454][ T5609] team0: Port device team_slave_1 added [ 67.353047][ T5607] team0: Port device team_slave_1 added [ 67.359796][ T5621] team0: Port device team_slave_1 added [ 67.376917][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.424719][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.431753][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.457709][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.477082][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.484079][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.510142][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.522136][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.529078][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.555117][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.574877][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.581890][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.607832][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.626885][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.633887][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.660029][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.671370][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.678509][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.705459][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.717877][ T5610] team0: Port device team_slave_0 added [ 67.733483][ T5608] hsr_slave_0: entered promiscuous mode [ 67.739679][ T5608] hsr_slave_1: entered promiscuous mode [ 67.758827][ T5610] team0: Port device team_slave_1 added [ 67.782631][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.789573][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.816135][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.845103][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.852070][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.877978][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.923482][ T5609] hsr_slave_0: entered promiscuous mode [ 67.929508][ T5609] hsr_slave_1: entered promiscuous mode [ 67.935798][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 67.941685][ T5609] Cannot create hsr debugfs directory [ 67.972128][ T5621] hsr_slave_0: entered promiscuous mode [ 67.978164][ T5621] hsr_slave_1: entered promiscuous mode [ 67.984507][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 67.990216][ T5621] Cannot create hsr debugfs directory [ 68.011128][ T5607] hsr_slave_0: entered promiscuous mode [ 68.017347][ T5607] hsr_slave_1: entered promiscuous mode [ 68.023384][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 68.029091][ T5607] Cannot create hsr debugfs directory [ 68.119671][ T5610] hsr_slave_0: entered promiscuous mode [ 68.125932][ T5610] hsr_slave_1: entered promiscuous mode [ 68.132048][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 68.137789][ T5610] Cannot create hsr debugfs directory [ 68.493070][ T5608] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.507097][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.514861][ T5608] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.524331][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.532171][ T5608] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.542049][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.549721][ T5608] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.558817][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.612861][ T5621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.625057][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.632854][ T5621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.642491][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.650359][ T5621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.660248][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.669909][ T5621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.678758][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.773831][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.783052][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.790856][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.800006][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.807932][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.816639][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.825023][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.833758][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.925597][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.934978][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.944143][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.954272][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.962724][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.972139][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.979836][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.988865][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.003939][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.057566][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.080332][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.110923][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.118364][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.140956][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.150055][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.160453][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.175489][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.182558][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.195668][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.204387][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.212220][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.212477][ T5619] Bluetooth: hci2: command tx timeout [ 69.218935][ T5622] Bluetooth: hci1: command tx timeout [ 69.224394][ T4928] Bluetooth: hci4: command tx timeout [ 69.224419][ T4928] Bluetooth: hci3: command tx timeout [ 69.224598][ T5613] Bluetooth: hci0: command tx timeout [ 69.249013][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 69.257126][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.266583][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 69.285701][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.292783][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.331693][ T179] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.338777][ T179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.411352][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.465174][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.497395][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.504552][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.550109][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.578409][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.585562][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.629453][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.669342][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.676490][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.718490][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.730021][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.737187][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.825769][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.868565][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.875748][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.913394][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.920537][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.208383][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.347214][ T5621] veth0_vlan: entered promiscuous mode [ 70.400031][ T5621] veth1_vlan: entered promiscuous mode [ 70.430740][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.525154][ T5621] veth0_macvtap: entered promiscuous mode [ 70.548548][ T5621] veth1_macvtap: entered promiscuous mode [ 70.614864][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.658869][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.708778][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.729611][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.757702][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.775674][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.809277][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.998304][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.014885][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.016475][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.033515][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.056699][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.063701][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.104690][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.113012][ T5610] veth0_vlan: entered promiscuous mode [ 71.116373][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.128516][ T5609] veth0_vlan: entered promiscuous mode [ 71.150664][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 71.150678][ T30] audit: type=1400 audit(1785406274.102:152): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/root/syzkaller.7T1gjA/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.153995][ T5610] veth1_vlan: entered promiscuous mode [ 71.157083][ T30] audit: type=1400 audit(1785406274.102:153): avc: denied { mount } for pid=5621 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.211009][ T30] audit: type=1400 audit(1785406274.142:154): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/root/syzkaller.7T1gjA/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 71.242274][ T30] audit: type=1400 audit(1785406274.142:155): avc: denied { mount } for pid=5621 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 71.268316][ T30] audit: type=1400 audit(1785406274.142:156): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/root/syzkaller.7T1gjA/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 71.298072][ T5613] Bluetooth: hci2: command tx timeout [ 71.298861][ T5619] Bluetooth: hci1: command tx timeout [ 71.304319][ T5613] Bluetooth: hci0: command tx timeout [ 71.309860][ T5619] Bluetooth: hci3: command tx timeout [ 71.315706][ T5613] Bluetooth: hci4: command tx timeout [ 71.320435][ T30] audit: type=1400 audit(1785406274.142:157): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/root/syzkaller.7T1gjA/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 71.328570][ T5608] veth0_vlan: entered promiscuous mode [ 71.352887][ T30] audit: type=1400 audit(1785406274.142:158): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.380303][ T30] audit: type=1400 audit(1785406274.172:159): avc: denied { mounton } for pid=5621 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 71.405338][ T30] audit: type=1400 audit(1785406274.172:160): avc: denied { mount } for pid=5621 comm="syz-executor" name="/" dev="gadgetfs" ino=7709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 71.422321][ T5609] veth1_vlan: entered promiscuous mode [ 71.430406][ T30] audit: type=1400 audit(1785406274.172:161): avc: denied { mount } for pid=5621 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 71.477197][ T5621] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.501477][ T5610] veth0_macvtap: entered promiscuous mode [ 71.512852][ T5607] veth0_vlan: entered promiscuous mode [ 71.519059][ T5608] veth1_vlan: entered promiscuous mode [ 71.544677][ T5610] veth1_macvtap: entered promiscuous mode [ 71.572594][ T5607] veth1_vlan: entered promiscuous mode [ 71.629351][ T5608] veth0_macvtap: entered promiscuous mode [ 71.648599][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.659158][ T5609] veth0_macvtap: entered promiscuous mode [ 71.673433][ T5608] veth1_macvtap: entered promiscuous mode [ 71.687420][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.712564][ T5801] smpboot: CPU 1 is now offline [ 71.722218][ T5609] veth1_macvtap: entered promiscuous mode [ 71.744140][ T5607] veth0_macvtap: entered promiscuous mode [ 71.786937][ T5607] veth1_macvtap: entered promiscuous mode [ 71.805561][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.825288][ T91] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.835340][ T91] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.879450][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.919704][ T91] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.947481][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.983820][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.993630][ T91] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.014630][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.027524][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.040912][ T91] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.057214][ T5806] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 72.068278][ T91] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.110452][ T91] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.128034][ T91] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.214050][ T91] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.238121][ T91] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.323280][ T91] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.337692][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.365551][ T91] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.379388][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.409202][ T91] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.444875][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.465470][ T5813] FAULT_INJECTION: forcing a failure. [ 72.465470][ T5813] name failslab, interval 1, probability 10, space 0, times 1 [ 72.484077][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.497051][ T91] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.510553][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: syz.2.8 Not tainted syzkaller #0 PREEMPT(full) [ 72.510569][ T5813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 72.510581][ T5813] Call Trace: [ 72.510586][ T5813] [ 72.510591][ T5813] dump_stack_lvl+0x100/0x190 [ 72.510613][ T5813] should_fail_ex.cold+0x5/0xa [ 72.510628][ T5813] should_failslab+0xc2/0x120 [ 72.510647][ T5813] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 72.510662][ T5813] ? sock_alloc_inode+0x26/0x2c0 [ 72.510680][ T5813] ? __pfx_sock_alloc_inode+0x10/0x10 [ 72.510697][ T5813] sock_alloc_inode+0x26/0x2c0 [ 72.510713][ T5813] ? __pfx_sock_alloc_inode+0x10/0x10 [ 72.510734][ T5813] alloc_inode+0x68/0x250 [ 72.510753][ T5813] sock_alloc+0x44/0x280 [ 72.510767][ T5813] ? security_socket_create+0x7f/0x250 [ 72.510785][ T5813] __sock_create+0xc2/0x860 [ 72.510805][ T5813] __sys_socket+0x14d/0x260 [ 72.510815][ T5813] ? exc_page_fault+0x6f/0xd0 [ 72.510828][ T5813] ? __pfx___sys_socket+0x10/0x10 [ 72.510843][ T5813] __x64_sys_socket+0x72/0xb0 [ 72.510853][ T5813] ? lockdep_hardirqs_on+0x78/0x100 [ 72.510866][ T5813] do_syscall_64+0x115/0x870 [ 72.510878][ T5813] ? clear_bhb_loop+0x40/0x90 [ 72.510893][ T5813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.510905][ T5813] RIP: 0033:0x7fb41b39f807 [ 72.510918][ T5813] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.510929][ T5813] RSP: 002b:00007fb41c1d9f68 EFLAGS: 00000283 ORIG_RAX: 0000000000000029 [ 72.510943][ T5813] RAX: ffffffffffffffda RBX: 00007fb41b625fa0 RCX: 00007fb41b39f807 [ 72.510950][ T5813] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 72.510957][ T5813] RBP: 00007fb41b434ec4 R08: 0000000000000000 R09: 0000000000000000 [ 72.510964][ T5813] R10: 0000200000000300 R11: 0000000000000283 R12: 0000000000000000 [ 72.510971][ T5813] R13: 0000000000000010 R14: 0000000000000000 R15: 0000200000000300 [ 72.510986][ T5813] [ 72.713866][ T91] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.723112][ T91] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.780887][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.788905][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.815242][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.824381][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.915876][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.936836][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.945644][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.954650][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.963898][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.973022][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.995510][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.032786][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.209775][ T5608] FAULT_INJECTION: forcing a failure. [ 73.209775][ T5608] name failslab, interval 1, probability 10, space 0, times 10 [ 73.223390][ C0] FAULT_INJECTION: forcing a failure. [ 73.223390][ C0] name failslab, interval 1, probability 10, space 0, times 10 [ 73.223445][ C0] CPU: 0 UID: 0 PID: 5608 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 73.223460][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 73.223467][ C0] Call Trace: [ 73.223471][ C0] [ 73.223476][ C0] dump_stack_lvl+0x100/0x190 [ 73.223496][ C0] should_fail_ex.cold+0x5/0xa [ 73.223511][ C0] should_failslab+0xc2/0x120 [ 73.223528][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 73.223544][ C0] ? __alloc_skb+0x140/0x710 [ 73.223561][ C0] __alloc_skb+0x140/0x710 [ 73.223574][ C0] ? __alloc_skb+0x5b7/0x710 [ 73.223587][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 73.223601][ C0] ? __pfx_ipv6_get_ifaddr+0x10/0x10 [ 73.223619][ C0] ndisc_alloc_skb+0xd8/0x530 [ 73.223636][ C0] ndisc_send_rs+0x370/0x680 [ 73.223654][ C0] addrconf_rs_timer+0x424/0x880 [ 73.223669][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 73.223694][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 73.223708][ C0] call_timer_fn+0x19a/0x610 [ 73.223723][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 73.223739][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 73.223753][ C0] ? mark_held_locks+0x40/0x70 [ 73.223770][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 73.223783][ C0] __run_timers+0x757/0xb00 [ 73.223801][ C0] ? __pfx___run_timers+0x10/0x10 [ 73.223820][ C0] ? ktime_get+0x9f/0x320 [ 73.223834][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 73.223856][ C0] run_timer_base+0x114/0x190 [ 73.223870][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 73.223887][ C0] run_timer_softirq+0x1a/0x50 [ 73.223900][ C0] handle_softirqs+0x1ea/0x9b0 [ 73.223919][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 73.223935][ C0] ? _raw_spin_unlock+0x28/0x50 [ 73.223953][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 73.223967][ C0] __irq_exit_rcu+0x162/0x210 [ 73.223983][ C0] irq_exit_rcu+0x9/0x30 [ 73.223998][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 73.224011][ C0] [ 73.224015][ C0] [ 73.224019][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 73.224033][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 73.224053][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 73.224065][ C0] RSP: 0018:ffffc9000391f470 EFLAGS: 00000293 [ 73.224075][ C0] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 73.224083][ C0] RDX: ffff88807c980000 RSI: ffffffff81e88a0f RDI: ffff88807c980000 [ 73.224091][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 73.224097][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000a44 [ 73.224104][ C0] R13: ffffffff8f9acd98 R14: ffffc9000391f4f0 R15: dffffc0000000000 [ 73.224116][ C0] ? console_flush_one_record+0xab1/0xe50 [ 73.224134][ C0] ? console_flush_one_record+0xabf/0xe50 [ 73.224158][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 73.224181][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 73.224195][ C0] console_unlock+0x103/0x260 [ 73.224213][ C0] ? __pfx_console_unlock+0x10/0x10 [ 73.224237][ C0] ? _printk+0xcf/0x110 [ 73.224251][ C0] vprintk_emit+0x407/0x6b0 [ 73.224270][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 73.224293][ C0] _printk+0xcf/0x110 [ 73.224304][ C0] ? __pfx__printk+0x10/0x10 [ 73.224318][ C0] ? __pfx____ratelimit+0x10/0x10 [ 73.224334][ C0] should_fail_ex+0x4e4/0x640 [ 73.224353][ C0] should_failslab+0xc2/0x120 [ 73.224369][ C0] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 73.224384][ C0] ? __d_alloc+0x35/0xa50 [ 73.224401][ C0] __d_alloc+0x35/0xa50 [ 73.224414][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.224430][ C0] d_alloc_parallel+0x105/0x14b0 [ 73.224453][ C0] ? __pfx_d_alloc_parallel+0x10/0x10 [ 73.224471][ C0] ? __d_lookup+0x25c/0x4a0 [ 73.224491][ C0] ? __d_lookup+0x266/0x4a0 [ 73.224512][ C0] path_openat+0x271c/0x4280 [ 73.224531][ C0] ? __pfx_path_openat+0x10/0x10 [ 73.224548][ C0] do_file_open+0x20e/0x430 [ 73.224562][ C0] ? __pfx_do_file_open+0x10/0x10 [ 73.224585][ C0] ? alloc_fd+0x471/0x7a0 [ 73.224599][ C0] ? do_getname+0x191/0x390 [ 73.224616][ C0] do_sys_openat2+0x10f/0x1e0 [ 73.224632][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.224652][ C0] __x64_sys_openat+0x12d/0x210 [ 73.224668][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 73.224693][ C0] do_syscall_64+0x115/0x870 [ 73.224706][ C0] ? clear_bhb_loop+0x40/0x90 [ 73.224721][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.224733][ C0] RIP: 0033:0x7fb766b5e7ce [ 73.224743][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.224755][ C0] RSP: 002b:00007ffd4a166c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 73.224765][ C0] RAX: ffffffffffffffda RBX: 000055558635c500 RCX: 00007fb766b5e7ce [ 73.224773][ C0] RDX: 0000000000080001 RSI: 00007ffd4a1672b0 RDI: ffffffffffffff9c [ 73.224780][ C0] RBP: 00007ffd4a1672b0 R08: 0000000000000000 R09: 0000000000000000 [ 73.224787][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.224794][ C0] R13: 00007ffd4a166d40 R14: 00007ffd4a167270 R15: 00007ffd4a1672b0 [ 73.224809][ C0] [ 73.238313][ C0] FAULT_INJECTION: forcing a failure. [ 73.238313][ C0] name failslab, interval 1, probability 10, space 0, times 8 [ 73.238334][ C0] CPU: 0 UID: 0 PID: 5608 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 73.238349][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 73.238356][ C0] Call Trace: [ 73.238360][ C0] [ 73.238364][ C0] dump_stack_lvl+0x100/0x190 [ 73.238382][ C0] should_fail_ex.cold+0x5/0xa [ 73.238398][ C0] should_failslab+0xc2/0x120 [ 73.238415][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 73.238431][ C0] ? __alloc_skb+0x140/0x710 [ 73.238448][ C0] __alloc_skb+0x140/0x710 [ 73.238460][ C0] ? __alloc_skb+0x5b7/0x710 [ 73.238474][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 73.238488][ C0] ? lock_acquire+0x1b9/0x370 [ 73.238506][ C0] __netdev_alloc_skb+0x7a/0x960 [ 73.238522][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 73.238540][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.238556][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 73.238573][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 73.238593][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 73.238614][ C0] __iterate_interfaces+0x2e6/0x650 [ 73.238628][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 73.238646][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 73.238661][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 73.238683][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 73.238704][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 73.238723][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 73.238747][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 73.238768][ C0] handle_softirqs+0x1ea/0x9b0 [ 73.238786][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 73.238802][ C0] ? _raw_spin_unlock+0x28/0x50 [ 73.238821][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 73.238835][ C0] __irq_exit_rcu+0x162/0x210 [ 73.238850][ C0] irq_exit_rcu+0x9/0x30 [ 73.238865][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 73.238878][ C0] [ 73.238882][ C0] [ 73.238886][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 73.238901][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 73.238921][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 73.238933][ C0] RSP: 0018:ffffc9000391f470 EFLAGS: 00000293 [ 73.238942][ C0] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 73.238950][ C0] RDX: ffff88807c980000 RSI: ffffffff81e88a0f RDI: ffff88807c980000 [ 73.238958][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 73.238965][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000a45 [ 73.238972][ C0] R13: ffffffff8f9acd98 R14: ffffc9000391f4f0 R15: dffffc0000000000 [ 73.238984][ C0] ? console_flush_one_record+0xab1/0xe50 [ 73.239002][ C0] ? console_flush_one_record+0xabf/0xe50 [ 73.239026][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 73.239049][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 73.239063][ C0] console_unlock+0x103/0x260 [ 73.239081][ C0] ? __pfx_console_unlock+0x10/0x10 [ 73.239103][ C0] ? _printk+0xcf/0x110 [ 73.239117][ C0] vprintk_emit+0x407/0x6b0 [ 73.239136][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 73.239159][ C0] _printk+0xcf/0x110 [ 73.239170][ C0] ? __pfx__printk+0x10/0x10 [ 73.239185][ C0] ? __pfx____ratelimit+0x10/0x10 [ 73.239201][ C0] should_fail_ex+0x4e4/0x640 [ 73.239219][ C0] should_failslab+0xc2/0x120 [ 73.239235][ C0] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 73.239250][ C0] ? __d_alloc+0x35/0xa50 [ 73.239267][ C0] __d_alloc+0x35/0xa50 [ 73.239280][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.239296][ C0] d_alloc_parallel+0x105/0x14b0 [ 73.239320][ C0] ? __pfx_d_alloc_parallel+0x10/0x10 [ 73.239338][ C0] ? __d_lookup+0x25c/0x4a0 [ 73.239358][ C0] ? __d_lookup+0x266/0x4a0 [ 73.239380][ C0] path_openat+0x271c/0x4280 [ 73.239399][ C0] ? __pfx_path_openat+0x10/0x10 [ 73.239416][ C0] do_file_open+0x20e/0x430 [ 73.239430][ C0] ? __pfx_do_file_open+0x10/0x10 [ 73.239453][ C0] ? alloc_fd+0x471/0x7a0 [ 73.239468][ C0] ? do_getname+0x191/0x390 [ 73.239485][ C0] do_sys_openat2+0x10f/0x1e0 [ 73.239500][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.239521][ C0] __x64_sys_openat+0x12d/0x210 [ 73.239537][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 73.239561][ C0] do_syscall_64+0x115/0x870 [ 73.239574][ C0] ? clear_bhb_loop+0x40/0x90 [ 73.239588][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.239600][ C0] RIP: 0033:0x7fb766b5e7ce [ 73.239610][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.239621][ C0] RSP: 002b:00007ffd4a166c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 73.239632][ C0] RAX: ffffffffffffffda RBX: 000055558635c500 RCX: 00007fb766b5e7ce [ 73.239639][ C0] RDX: 0000000000080001 RSI: 00007ffd4a1672b0 RDI: ffffffffffffff9c [ 73.239647][ C0] RBP: 00007ffd4a1672b0 R08: 0000000000000000 R09: 0000000000000000 [ 73.239654][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.239661][ C0] R13: 00007ffd4a166d40 R14: 00007ffd4a167270 R15: 00007ffd4a1672b0 [ 73.239679][ C0] [ 73.239925][ C0] FAULT_INJECTION: forcing a failure. [ 73.239925][ C0] name failslab, interval 1, probability 10, space 0, times 7 [ 73.239940][ C0] CPU: 0 UID: 0 PID: 5608 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 73.239953][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 73.239960][ C0] Call Trace: [ 73.239963][ C0] [ 73.239967][ C0] dump_stack_lvl+0x100/0x190 [ 73.239982][ C0] should_fail_ex.cold+0x5/0xa [ 73.239997][ C0] should_failslab+0xc2/0x120 [ 73.240013][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 73.240028][ C0] ? __alloc_skb+0x140/0x710 [ 73.240044][ C0] __alloc_skb+0x140/0x710 [ 73.240057][ C0] ? __alloc_skb+0x5b7/0x710 [ 73.240070][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 73.240085][ C0] ? lock_acquire+0x1b9/0x370 [ 73.240102][ C0] __netdev_alloc_skb+0x7a/0x960 [ 73.240118][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 73.240135][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.240151][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 73.240167][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 73.240187][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 73.240207][ C0] __iterate_interfaces+0x2e6/0x650 [ 73.240221][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 73.240238][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 73.240254][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 73.240271][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 73.240291][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 73.240311][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 73.240335][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 73.240355][ C0] handle_softirqs+0x1ea/0x9b0 [ 73.240373][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 73.240389][ C0] ? _raw_spin_unlock+0x28/0x50 [ 73.240407][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 73.240421][ C0] __irq_exit_rcu+0x162/0x210 [ 73.240437][ C0] irq_exit_rcu+0x9/0x30 [ 73.240452][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 73.240464][ C0] [ 73.240468][ C0] [ 73.240472][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 73.240486][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 73.240505][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 73.240516][ C0] RSP: 0018:ffffc9000391f470 EFLAGS: 00000293 [ 73.240525][ C0] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 73.240533][ C0] RDX: ffff88807c980000 RSI: ffffffff81e88a0f RDI: ffff88807c980000 [ 73.240541][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 73.240547][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000a45 [ 73.240554][ C0] R13: ffffffff8f9acd98 R14: ffffc9000391f4f0 R15: dffffc0000000000 [ 73.240566][ C0] ? console_flush_one_record+0xab1/0xe50 [ 73.240584][ C0] ? console_flush_one_record+0xabf/0xe50 [ 73.240608][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 73.240631][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 73.240645][ C0] console_unlock+0x103/0x260 [ 73.240664][ C0] ? __pfx_console_unlock+0x10/0x10 [ 73.240690][ C0] ? _printk+0xcf/0x110 [ 73.240703][ C0] vprintk_emit+0x407/0x6b0 [ 73.240722][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 73.240745][ C0] _printk+0xcf/0x110 [ 73.240756][ C0] ? __pfx__printk+0x10/0x10 [ 73.240771][ C0] ? __pfx____ratelimit+0x10/0x10 [ 73.240786][ C0] should_fail_ex+0x4e4/0x640 [ 73.240804][ C0] should_failslab+0xc2/0x120 [ 73.240820][ C0] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 73.240835][ C0] ? __d_alloc+0x35/0xa50 [ 73.240851][ C0] __d_alloc+0x35/0xa50 [ 73.240864][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.240880][ C0] d_alloc_parallel+0x105/0x14b0 [ 73.240904][ C0] ? __pfx_d_alloc_parallel+0x10/0x10 [ 73.240922][ C0] ? __d_lookup+0x25c/0x4a0 [ 73.240942][ C0] ? __d_lookup+0x266/0x4a0 [ 73.240963][ C0] path_openat+0x271c/0x4280 [ 73.240982][ C0] ? __pfx_path_openat+0x10/0x10 [ 73.240999][ C0] do_file_open+0x20e/0x430 [ 73.241013][ C0] ? __pfx_do_file_open+0x10/0x10 [ 73.241037][ C0] ? alloc_fd+0x471/0x7a0 [ 73.241051][ C0] ? do_getname+0x191/0x390 [ 73.241068][ C0] do_sys_openat2+0x10f/0x1e0 [ 73.241083][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.241104][ C0] __x64_sys_openat+0x12d/0x210 [ 73.241120][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 73.241141][ C0] do_syscall_64+0x115/0x870 [ 73.241154][ C0] ? clear_bhb_loop+0x40/0x90 [ 73.241168][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.241181][ C0] RIP: 0033:0x7fb766b5e7ce [ 73.241190][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.241201][ C0] RSP: 002b:00007ffd4a166c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 73.241211][ C0] RAX: ffffffffffffffda RBX: 000055558635c500 RCX: 00007fb766b5e7ce [ 73.241219][ C0] RDX: 0000000000080001 RSI: 00007ffd4a1672b0 RDI: ffffffffffffff9c [ 73.241226][ C0] RBP: 00007ffd4a1672b0 R08: 0000000000000000 R09: 0000000000000000 [ 73.241233][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.241240][ C0] R13: 00007ffd4a166d40 R14: 00007ffd4a167270 R15: 00007ffd4a1672b0 [ 73.241256][ C0] [ 73.251155][ C0] FAULT_INJECTION: forcing a failure. [ 73.251155][ C0] name failslab, interval 1, probability 10, space 0, times 5 [ 73.251173][ C0] CPU: 0 UID: 0 PID: 5608 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 73.251187][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 73.251194][ C0] Call Trace: [ 73.251198][ C0] [ 73.251202][ C0] dump_stack_lvl+0x100/0x190 [ 73.251218][ C0] should_fail_ex.cold+0x5/0xa [ 73.251234][ C0] should_failslab+0xc2/0x120 [ 73.251250][ C0] __kmalloc_noprof+0xfc/0x820 [ 73.251263][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.251275][ C0] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 73.251295][ C0] cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 73.251316][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 73.251341][ C0] ? mark_held_locks+0x40/0x70 [ 73.251358][ C0] ? mark_held_locks+0x40/0x70 [ 73.251374][ C0] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 73.251390][ C0] cfg80211_inform_bss_data+0x230/0x3b60 [ 73.251410][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.251425][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 73.251447][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 73.251463][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.251480][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.251507][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.251528][ C0] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 73.251549][ C0] ieee80211_bss_info_update+0x310/0xab0 [ 73.251568][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 73.251591][ C0] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 73.251607][ C0] ieee80211_scan_rx+0x4e6/0xb60 [ 73.251624][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.251640][ C0] __ieee80211_rx_handle_packet+0xbab/0xfc0 [ 73.251662][ C0] ? __pfx___ieee80211_rx_handle_packet+0x10/0x10 [ 73.251686][ C0] ? do_raw_spin_lock+0x128/0x260 [ 73.251708][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 73.251721][ C0] ? ieee80211_clean_skb+0x1a7/0x740 [ 73.251740][ C0] ieee80211_rx_list+0xf19/0x2160 [ 73.251763][ C0] ? lock_acquire+0x1b9/0x370 [ 73.251777][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 73.251800][ C0] ieee80211_rx_napi+0xdc/0x400 [ 73.251819][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 73.251838][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 73.251851][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 73.251865][ C0] ieee80211_handle_queued_frames+0xc8/0x120 [ 73.251883][ C0] tasklet_action_common+0x2de/0x3d0 [ 73.251903][ C0] handle_softirqs+0x1ea/0x9b0 [ 73.251921][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 73.251937][ C0] ? _raw_spin_unlock+0x28/0x50 [ 73.251956][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 73.251970][ C0] __irq_exit_rcu+0x162/0x210 [ 73.251985][ C0] irq_exit_rcu+0x9/0x30 [ 73.252000][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 73.252013][ C0] [ 73.252016][ C0] [ 73.252020][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 73.252034][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 73.252054][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 73.252065][ C0] RSP: 0018:ffffc9000391f470 EFLAGS: 00000293 [ 73.252074][ C0] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 73.252082][ C0] RDX: ffff88807c980000 RSI: ffffffff81e88a0f RDI: ffff88807c980000 [ 73.252090][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 73.252097][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000a46 [ 73.252103][ C0] R13: ffffffff8f9acd98 R14: ffffc9000391f4f0 R15: dffffc0000000000 [ 73.252115][ C0] ? console_flush_one_record+0xab1/0xe50 [ 73.252133][ C0] ? console_flush_one_record+0xabf/0xe50 [ 73.252157][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 73.252180][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 73.252194][ C0] console_unlock+0x103/0x260 [ 73.252212][ C0] ? __pfx_console_unlock+0x10/0x10 [ 73.252234][ C0] ? _printk+0xcf/0x110 [ 73.252247][ C0] vprintk_emit+0x407/0x6b0 [ 73.252266][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 73.252289][ C0] _printk+0xcf/0x110 [ 73.252300][ C0] ? __pfx__printk+0x10/0x10 [ 73.252315][ C0] ? __pfx____ratelimit+0x10/0x10 [ 73.252330][ C0] should_fail_ex+0x4e4/0x640 [ 73.252348][ C0] should_failslab+0xc2/0x120 [ 73.252364][ C0] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 73.252379][ C0] ? __d_alloc+0x35/0xa50 [ 73.252396][ C0] __d_alloc+0x35/0xa50 [ 73.252409][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.252425][ C0] d_alloc_parallel+0x105/0x14b0 [ 73.252449][ C0] ? __pfx_d_alloc_parallel+0x10/0x10 [ 73.252466][ C0] ? __d_lookup+0x25c/0x4a0 [ 73.252486][ C0] ? __d_lookup+0x266/0x4a0 [ 73.252508][ C0] path_openat+0x271c/0x4280 [ 73.252526][ C0] ? __pfx_path_openat+0x10/0x10 [ 73.252543][ C0] do_file_open+0x20e/0x430 [ 73.252557][ C0] ? __pfx_do_file_open+0x10/0x10 [ 73.252580][ C0] ? alloc_fd+0x471/0x7a0 [ 73.252594][ C0] ? do_getname+0x191/0x390 [ 73.252611][ C0] do_sys_openat2+0x10f/0x1e0 [ 73.252626][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.252647][ C0] __x64_sys_openat+0x12d/0x210 [ 73.252663][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 73.252687][ C0] do_syscall_64+0x115/0x870 [ 73.252700][ C0] ? clear_bhb_loop+0x40/0x90 [ 73.252715][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.252727][ C0] RIP: 0033:0x7fb766b5e7ce [ 73.252737][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.252748][ C0] RSP: 002b:00007ffd4a166c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 73.252758][ C0] RAX: ffffffffffffffda RBX: 000055558635c500 RCX: 00007fb766b5e7ce [ 73.252766][ C0] RDX: 0000000000080001 RSI: 00007ffd4a1672b0 RDI: ffffffffffffff9c [ 73.252773][ C0] RBP: 00007ffd4a1672b0 R08: 0000000000000000 R09: 0000000000000000 [ 73.252780][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.252787][ C0] R13: 00007ffd4a166d40 R14: 00007ffd4a167270 R15: 00007ffd4a1672b0 [ 73.252802][ C0] [ 73.293930][ C0] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 73.293956][ C0] FAULT_INJECTION: forcing a failure. [ 73.293956][ C0] name failslab, interval 1, probability 10, space 0, times 3 [ 73.293971][ C0] CPU: 0 UID: 0 PID: 5608 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 73.293986][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 73.293993][ C0] Call Trace: [ 73.293997][ C0] [ 73.294002][ C0] dump_stack_lvl+0x100/0x190 [ 73.294019][ C0] should_fail_ex.cold+0x5/0xa [ 73.294035][ C0] should_failslab+0xc2/0x120 [ 73.294051][ C0] __kmalloc_cache_noprof+0x91/0x6c0 [ 73.294072][ C0] ? dst_cow_metrics_generic+0x4c/0x1e0 [ 73.294089][ C0] dst_cow_metrics_generic+0x4c/0x1e0 [ 73.294104][ C0] icmp6_dst_alloc+0x418/0x4f0 [ 73.294122][ C0] ndisc_send_skb+0x133f/0x1bf0 [ 73.294140][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 73.294157][ C0] ? kmalloc_reserve+0xf9/0x350 [ 73.294181][ C0] ? ndisc_alloc_skb+0x319/0x530 [ 73.294196][ C0] ? __asan_memset+0x23/0x50 [ 73.294210][ C0] ndisc_send_rs+0x129/0x680 [ 73.294228][ C0] addrconf_rs_timer+0x424/0x880 [ 73.294245][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 73.294262][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 73.294276][ C0] call_timer_fn+0x19a/0x610 [ 73.294290][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 73.294307][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 73.294320][ C0] ? mark_held_locks+0x40/0x70 [ 73.294337][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 73.294350][ C0] __run_timers+0x757/0xb00 [ 73.294368][ C0] ? __pfx___run_timers+0x10/0x10 [ 73.294387][ C0] ? ktime_get+0x9f/0x320 [ 73.294401][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 73.294423][ C0] run_timer_base+0x114/0x190 [ 73.294437][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 73.294454][ C0] run_timer_softirq+0x1a/0x50 [ 73.294467][ C0] handle_softirqs+0x1ea/0x9b0 [ 73.294486][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 73.294501][ C0] ? _raw_spin_unlock+0x28/0x50 [ 73.294520][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 73.294533][ C0] __irq_exit_rcu+0x162/0x210 [ 73.294549][ C0] irq_exit_rcu+0x9/0x30 [ 73.294563][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 73.294577][ C0] [ 73.294580][ C0] [ 73.294585][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 73.294599][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 73.294619][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 73.294631][ C0] RSP: 0018:ffffc9000391f470 EFLAGS: 00000293 [ 73.294640][ C0] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 73.294648][ C0] RDX: ffff88807c980000 RSI: ffffffff81e88a0f RDI: ffff88807c980000 [ 73.294656][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 73.294663][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000a4e [ 73.294676][ C0] R13: ffffffff8f9acd98 R14: ffffc9000391f4f0 R15: dffffc0000000000 [ 73.294688][ C0] ? console_flush_one_record+0xab1/0xe50 [ 73.294706][ C0] ? console_flush_one_record+0xabf/0xe50 [ 73.294730][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 73.294753][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 73.294768][ C0] console_unlock+0x103/0x260 [ 73.294786][ C0] ? __pfx_console_unlock+0x10/0x10 [ 73.294808][ C0] ? _printk+0xcf/0x110 [ 73.294822][ C0] vprintk_emit+0x407/0x6b0 [ 73.294841][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 73.294864][ C0] _printk+0xcf/0x110 [ 73.294875][ C0] ? __pfx__printk+0x10/0x10 [ 73.294890][ C0] ? __pfx____ratelimit+0x10/0x10 [ 73.294906][ C0] should_fail_ex+0x4e4/0x640 [ 73.294924][ C0] should_failslab+0xc2/0x120 [ 73.294940][ C0] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 73.294955][ C0] ? __d_alloc+0x35/0xa50 [ 73.294972][ C0] __d_alloc+0x35/0xa50 [ 73.294985][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.295001][ C0] d_alloc_parallel+0x105/0x14b0 [ 73.295025][ C0] ? __pfx_d_alloc_parallel+0x10/0x10 [ 73.295043][ C0] ? __d_lookup+0x25c/0x4a0 [ 73.295063][ C0] ? __d_lookup+0x266/0x4a0 [ 73.295084][ C0] path_openat+0x271c/0x4280 [ 73.295103][ C0] ? __pfx_path_openat+0x10/0x10 [ 73.295120][ C0] do_file_open+0x20e/0x430 [ 73.295134][ C0] ? __pfx_do_file_open+0x10/0x10 [ 73.295158][ C0] ? alloc_fd+0x471/0x7a0 [ 73.295172][ C0] ? do_getname+0x191/0x390 [ 73.295189][ C0] do_sys_openat2+0x10f/0x1e0 [ 73.295204][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.295225][ C0] __x64_sys_openat+0x12d/0x210 [ 73.295241][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 73.295263][ C0] do_syscall_64+0x115/0x870 [ 73.295275][ C0] ? clear_bhb_loop+0x40/0x90 [ 73.295290][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.295302][ C0] RIP: 0033:0x7fb766b5e7ce [ 73.295312][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.295323][ C0] RSP: 002b:00007ffd4a166c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 73.295334][ C0] RAX: ffffffffffffffda RBX: 000055558635c500 RCX: 00007fb766b5e7ce [ 73.295341][ C0] RDX: 0000000000080001 RSI: 00007ffd4a1672b0 RDI: ffffffffffffff9c [ 73.295349][ C0] RBP: 00007ffd4a1672b0 R08: 0000000000000000 R09: 0000000000000000 [ 73.295356][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.295363][ C0] R13: 00007ffd4a166d40 R14: 00007ffd4a167270 R15: 00007ffd4a1672b0 [ 73.295378][ C0] [ 73.334859][ C0] FAULT_INJECTION: forcing a failure. [ 73.334859][ C0] name failslab, interval 1, probability 10, space 0, times 1 [ 73.334880][ C0] CPU: 0 UID: 0 PID: 5608 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 73.334895][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 73.334903][ C0] Call Trace: [ 73.334906][ C0] [ 73.334911][ C0] dump_stack_lvl+0x100/0x190 [ 73.334929][ C0] should_fail_ex.cold+0x5/0xa [ 73.334945][ C0] should_failslab+0xc2/0x120 [ 73.334962][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 73.334977][ C0] ? __alloc_skb+0x140/0x710 [ 73.334994][ C0] __alloc_skb+0x140/0x710 [ 73.335007][ C0] ? __alloc_skb+0x5b7/0x710 [ 73.335020][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 73.335035][ C0] ? lock_acquire+0x1b9/0x370 [ 73.335052][ C0] __netdev_alloc_skb+0x7a/0x960 [ 73.335069][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 73.335088][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.335104][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 73.335121][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 73.335141][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 73.335162][ C0] __iterate_interfaces+0x2e6/0x650 [ 73.335176][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 73.335193][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 73.335209][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 73.335226][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 73.335246][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 73.335266][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 73.335290][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 73.335310][ C0] handle_softirqs+0x1ea/0x9b0 [ 73.335329][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 73.335345][ C0] ? _raw_spin_unlock+0x28/0x50 [ 73.335364][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 73.335378][ C0] __irq_exit_rcu+0x162/0x210 [ 73.335394][ C0] irq_exit_rcu+0x9/0x30 [ 73.335417][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 73.335430][ C0] [ 73.335434][ C0] [ 73.335439][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 73.335453][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 73.335473][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 73.335485][ C0] RSP: 0018:ffffc9000391f470 EFLAGS: 00000293 [ 73.335495][ C0] RAX: ffffffff8f9acd98 RBX: ffffffff8f9acd40 RCX: ffffffff81e88a01 [ 73.335503][ C0] RDX: ffff88807c980000 RSI: ffffffff81e88a0f RDI: ffff88807c980000 [ 73.335511][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 73.335518][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000a56 [ 73.335524][ C0] R13: ffffffff8f9acd98 R14: ffffc9000391f4f0 R15: dffffc0000000000 [ 73.335536][ C0] ? console_flush_one_record+0xab1/0xe50 [ 73.335555][ C0] ? console_flush_one_record+0xabf/0xe50 [ 73.335579][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 73.335602][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 73.335617][ C0] console_unlock+0x103/0x260 [ 73.335635][ C0] ? __pfx_console_unlock+0x10/0x10 [ 73.335657][ C0] ? _printk+0xcf/0x110 [ 73.335674][ C0] vprintk_emit+0x407/0x6b0 [ 73.335694][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 73.335717][ C0] _printk+0xcf/0x110 [ 73.335728][ C0] ? __pfx__printk+0x10/0x10 [ 73.335743][ C0] ? __pfx____ratelimit+0x10/0x10 [ 73.335759][ C0] should_fail_ex+0x4e4/0x640 [ 73.335778][ C0] should_failslab+0xc2/0x120 [ 73.335793][ C0] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 73.335808][ C0] ? __d_alloc+0x35/0xa50 [ 73.335825][ C0] __d_alloc+0x35/0xa50 [ 73.335838][ C0] ? __lock_acquire+0x49f/0x1a40 [ 73.335854][ C0] d_alloc_parallel+0x105/0x14b0 [ 73.335878][ C0] ? __pfx_d_alloc_parallel+0x10/0x10 [ 73.335896][ C0] ? __d_lookup+0x25c/0x4a0 [ 73.335916][ C0] ? __d_lookup+0x266/0x4a0 [ 73.335938][ C0] path_openat+0x271c/0x4280 [ 73.335957][ C0] ? __pfx_path_openat+0x10/0x10 [ 73.335974][ C0] do_file_open+0x20e/0x430 [ 73.335988][ C0] ? __pfx_do_file_open+0x10/0x10 [ 73.336012][ C0] ? alloc_fd+0x471/0x7a0 [ 73.336026][ C0] ? do_getname+0x191/0x390 [ 73.336043][ C0] do_sys_openat2+0x10f/0x1e0 [ 73.336059][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 73.336080][ C0] __x64_sys_openat+0x12d/0x210 [ 73.336095][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 73.336117][ C0] do_syscall_64+0x115/0x870 [ 73.336130][ C0] ? clear_bhb_loop+0x40/0x90 [ 73.336145][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.336157][ C0] RIP: 0033:0x7fb766b5e7ce [ 73.336167][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.336178][ C0] RSP: 002b:00007ffd4a166c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 73.336189][ C0] RAX: ffffffffffffffda RBX: 000055558635c500 RCX: 00007fb766b5e7ce [ 73.336196][ C0] RDX: 0000000000080001 RSI: 00007ffd4a1672b0 RDI: ffffffffffffff9c [ 73.336204][ C0] RBP: 00007ffd4a1672b0 R08: 0000000000000000 R09: 0000000000000000 [ 73.336211][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.336218][ C0] R13: 00007ffd4a166d40 R14: 00007ffd4a167270 R15: 00007ffd4a1672b0 [ 73.336233][ C0] [ 76.581037][ T5813] socket: no more sockets [ 76.597115][ T5613] Bluetooth: hci2: command tx timeout [ 76.602527][ T5613] Bluetooth: hci1: command tx timeout [ 76.608534][ T5613] Bluetooth: hci0: command tx timeout [ 76.614347][ T5613] Bluetooth: hci3: command tx timeout [ 76.619697][ T5613] Bluetooth: hci4: command tx timeout [ 76.678837][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 76.678849][ T30] audit: type=1400 audit(1785406279.532:179): avc: denied { create } for pid=5812 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 76.837289][ T5824] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 76.934800][ T5826] gadgetfs: bound to dummy_udc driver [ 76.983173][ T30] audit: type=1400 audit(1785406279.752:180): avc: denied { mount } for pid=5823 comm="syz.3.4" name="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 77.009878][ T30] audit: type=1400 audit(1785406279.752:181): avc: denied { search } for pid=5823 comm="syz.3.4" name="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.037008][ T5824] Unable to extract alua_tg_pt_offline value [ 77.053068][ T30] audit: type=1400 audit(1785406279.752:182): avc: denied { search } for pid=5823 comm="syz.3.4" name="usb_gadget" dev="configfs" ino=3205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.075760][ T30] audit: type=1400 audit(1785406279.752:183): avc: denied { write search } for pid=5823 comm="syz.3.4" name="usb_gadget" dev="configfs" ino=3205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.099209][ T30] audit: type=1400 audit(1785406279.752:184): avc: denied { add_name } for pid=5823 comm="syz.3.4" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.125409][ T30] audit: type=1400 audit(1785406279.752:185): avc: denied { create } for pid=5823 comm="syz.3.4" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 77.161674][ T30] audit: type=1400 audit(1785406279.772:186): avc: denied { search } for pid=5823 comm="syz.3.4" name="/" dev="configfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.183542][ T30] audit: type=1400 audit(1785406279.772:187): avc: denied { search } for pid=5823 comm="syz.3.4" name="usb_gadget" dev="configfs" ino=3205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.206201][ T30] audit: type=1400 audit(1785406279.772:188): avc: denied { search } for pid=5823 comm="syz.3.4" name="g1" dev="configfs" ino=8999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.259868][ T5835] printk: legacy console [ttyS0] disabled [ 77.287783][ T5835] printk: legacy console [ttyS0] enabled [ 77.412844][ T5608] CPU: 0 UID: 0 PID: 5608 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 77.412860][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 77.412867][ T5608] Call Trace: [ 77.412871][ T5608] [ 77.412875][ T5608] dump_stack_lvl+0x100/0x190 [ 77.412894][ T5608] should_fail_ex.cold+0x5/0xa [ 77.412909][ T5608] should_failslab+0xc2/0x120 [ 77.412925][ T5608] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 77.412941][ T5608] ? __d_alloc+0x35/0xa50 [ 77.412957][ T5608] __d_alloc+0x35/0xa50 [ 77.412970][ T5608] ? __lock_acquire+0x49f/0x1a40 [ 77.412986][ T5608] d_alloc_parallel+0x105/0x14b0 [ 77.413009][ T5608] ? __pfx_d_alloc_parallel+0x10/0x10 [ 77.413026][ T5608] ? __d_lookup+0x25c/0x4a0 [ 77.413046][ T5608] ? __d_lookup+0x266/0x4a0 [ 77.413069][ T5608] path_openat+0x271c/0x4280 [ 77.413088][ T5608] ? __pfx_path_openat+0x10/0x10 [ 77.413104][ T5608] do_file_open+0x20e/0x430 [ 77.413118][ T5608] ? __pfx_do_file_open+0x10/0x10 [ 77.413141][ T5608] ? alloc_fd+0x471/0x7a0 [ 77.413156][ T5608] ? do_getname+0x191/0x390 [ 77.413172][ T5608] do_sys_openat2+0x10f/0x1e0 [ 77.413188][ T5608] ? __pfx_do_sys_openat2+0x10/0x10 [ 77.413208][ T5608] __x64_sys_openat+0x12d/0x210 [ 77.413223][ T5608] ? __pfx___x64_sys_openat+0x10/0x10 [ 77.413244][ T5608] do_syscall_64+0x115/0x870 [ 77.413258][ T5608] ? clear_bhb_loop+0x40/0x90 [ 77.413272][ T5608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.413284][ T5608] RIP: 0033:0x7fb766b5e7ce [ 77.413294][ T5608] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 77.413305][ T5608] RSP: 002b:00007ffd4a166c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 77.413317][ T5608] RAX: ffffffffffffffda RBX: 000055558635c500 RCX: 00007fb766b5e7ce [ 77.413324][ T5608] RDX: 0000000000080001 RSI: 00007ffd4a1672b0 RDI: ffffffffffffff9c [ 77.413331][ T5608] RBP: 00007ffd4a1672b0 R08: 0000000000000000 R09: 0000000000000000 [ 77.413338][ T5608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.413345][ T5608] R13: 00007ffd4a166d40 R14: 00007ffd4a167270 R15: 00007ffd4a1672b0 [ 77.413360][ T5608] [ 77.711752][ T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 77.719998][ C0] gadgetfs: connected [ 77.724740][ T9] gadgetfs: disconnected [ 77.781533][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.825850][ T5836] gadgetfs: suspended from state 2 [ 77.949625][ T10] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 77.960085][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.061649][ T9] usb 1-1: device not accepting address 2, error -71 [ 78.155996][ T5850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'. [ 78.235968][ T5856] syzkaller0: entered promiscuous mode [ 78.244778][ T5856] syzkaller0: entered allmulticast mode [ 78.315464][ T10] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 78.339947][ T5855] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15'. [ 78.405787][ T10] wwan wwan0: port wwan0qmi0 attached [ 78.465741][ T5855] nbd: device at index 64 is going down [ 78.597849][ T10] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, fe:58:bf:72:c3:4d [ 78.810281][ T5617] udevd[5617]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 79.471665][ T188] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 79.672411][ T188] usb 1-1: Using ep0 maxpacket: 16 [ 79.684515][ T188] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 79.725477][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.774287][ T188] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.827354][ T188] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 79.900381][ T188] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 79.958749][ T188] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.029389][ T188] usb 1-1: config 0 descriptor?? [ 80.276489][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.397817][ T9] usb 4-1: USB disconnect, device number 2 [ 80.460441][ T10] usb 3-1: config 1 interface 0 has no altsetting 2 [ 80.469202][ T9] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 80.497730][ T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 80.567920][ T188] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input5 [ 80.595887][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.671753][ T5913] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 80.682371][ T24] cfg80211: failed to load regulatory.db [ 80.852195][ T188] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0001/input/input6 [ 80.949805][ T9] wwan wwan0: port wwan0qmi0 disconnected [ 81.050524][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 81.086164][ T188] kye 0003:0458:5013.0001: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 81.152068][ T10] dvbdev: DVB: registering new adapter (DEC2000-t) [ 81.269445][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 81.297381][ T188] usb 1-1: USB disconnect, device number 4 [ 81.371735][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.554176][ T5930] fido_id[5930]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 81.598225][ T9] usb 4-1: config 1 interface 0 has no altsetting 2 [ 81.618280][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 81.679446][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.701065][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 81.701074][ T30] audit: type=1400 audit(1785406284.652:294): avc: denied { write } for pid=5908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.862358][ T5799] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 81.958515][ T30] audit: type=1400 audit(1785406284.832:295): avc: denied { create } for pid=5943 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 81.991008][ T5946] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.000398][ T5946] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.009361][ T5946] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.018303][ T5946] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.027231][ T5946] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.036156][ T5946] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.045086][ T5946] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.054016][ T5946] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.062947][ T5946] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.071869][ T5946] ip6_tunnel: non-ECT from fc01:0000:0000:0000:0000:0000:00fb:a200 with DS=0x5 [ 82.127785][ T5799] usb 2-1: config 0 has no interfaces? [ 82.141507][ T5799] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 82.152461][ T30] audit: type=1400 audit(1785406284.862:296): avc: denied { write } for pid=5943 comm="syz.0.39" name="strings" dev="configfs" ino=9002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.197510][ T5799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.258748][ T30] audit: type=1400 audit(1785406284.882:297): avc: denied { write } for pid=5943 comm="syz.0.39" name="configs" dev="configfs" ino=9001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.301969][ T5799] usb 2-1: config 0 descriptor?? [ 82.364835][ T9] dvbdev: DVB: registering new adapter (DEC2000-t) [ 82.383360][ T30] audit: type=1400 audit(1785406284.882:298): avc: denied { write } for pid=5943 comm="syz.0.39" name="functions" dev="configfs" ino=9000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 82.406322][ T10] ttusb_dec_send_command: command bulk message failed: error -71 [ 82.435013][ T9] usb 4-1: DVB: registering adapter 2 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 82.475323][ T10] usb 3-1: USB disconnect, device number 2 [ 82.505449][ T30] audit: type=1400 audit(1785406285.182:299): avc: denied { search } for pid=5947 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.656323][ T30] audit: type=1400 audit(1785406285.182:300): avc: denied { search } for pid=5947 comm="rm" name="dhcpcd" dev="tmpfs" ino=1772 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.766413][ T30] audit: type=1400 audit(1785406285.182:301): avc: denied { search } for pid=5947 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.866374][ T5936] NFSD: Failed to start, no listeners configured. [ 82.883860][ T30] audit: type=1400 audit(1785406285.182:302): avc: denied { write } for pid=5947 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.100234][ T10] usb 2-1: USB disconnect, device number 2 [ 83.109565][ T9] ttusb_dec_send_command: command bulk message failed: error -71 [ 83.130329][ T5961] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 83.147563][ T30] audit: type=1400 audit(1785406285.182:303): avc: denied { remove_name } for pid=5947 comm="rm" name="resolv.conf.lapb6.link" dev="tmpfs" ino=2058 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.244645][ T9] usb 4-1: USB disconnect, device number 3 [ 83.411407][ T5966] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.305261][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.347256][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.511625][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 84.517367][ T188] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.536731][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.547675][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 84.576234][ T10] usb 4-1: config 0 has no interfaces? [ 84.608517][ T10] usb 4-1: New USB device found, idVendor=2799, idProduct=500a, bcdDevice=e7.b7 [ 84.620622][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.658676][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.681378][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.708160][ T10] usb 4-1: Product: syz [ 84.716985][ T188] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 84.734399][ T10] usb 4-1: Manufacturer: syz [ 84.753654][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.768191][ T10] usb 4-1: SerialNumber: syz [ 84.784952][ T188] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 84.824035][ T10] usb 4-1: config 0 descriptor?? [ 84.831325][ T9] usb 2-1: config 0 descriptor?? [ 84.847210][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.909733][ T188] usb 5-1: Product: syz [ 84.934830][ T188] usb 5-1: Manufacturer: syz [ 84.950747][ T188] usb 5-1: SerialNumber: syz [ 84.975266][ T5992] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 85.091927][ T5799] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 85.121076][ T188] usb 4-1: USB disconnect, device number 4 [ 85.195421][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 85.232319][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 85.272930][ T5799] usb 1-1: New USB device found, idVendor=6547, idProduct=0232, bcdDevice= 0.00 [ 85.303271][ T9] usb 2-1: USB disconnect, device number 3 [ 85.312244][ T6023] CIFS: bad ip= option (1) [ 85.326561][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.342167][ T6023] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 85.391188][ T5799] usb 1-1: Product: syz [ 85.406682][ T5799] usb 1-1: Manufacturer: syz [ 85.416297][ T5799] usb 1-1: SerialNumber: syz [ 85.430801][ T5799] ark3116 1-1:1.0: ark3116 converter detected [ 85.454275][ T6023] CIFS: Attempting to mount (null) [ 85.474731][ T6023] CIFS: VFS: Error connecting to socket. Aborting operation. [ 85.494410][ T6023] CIFS: VFS: cifs_mount failed w/return code = -22 [ 85.572325][ T5734] usb 5-1: USB disconnect, device number 2 [ 85.958735][ T9] IPVS: starting estimator thread 0... [ 86.092863][ T6046] IPVS: using max 65 ests per chain, 156000 per kthread [ 86.241095][ T6054] CIFS: Attempting to mount //127.0.0.1/share [ 86.313218][ T6054] CIFS: VFS: Error connecting to socket. Aborting operation. [ 86.330629][ T6047] NFSD: Failed to start, no listeners configured. [ 86.366082][ T6054] CIFS: VFS: cifs_mount failed w/return code = -22 [ 86.428201][ T6057] no more MTRRs available [ 86.677423][ T6062] vivid-000: unregistering video7 [ 86.711225][ T6062] vivid-000: unregistering video8 [ 86.755972][ T6064] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 86.764914][ T6062] vivid-000: unregistering vbi0 [ 86.801173][ T6062] vivid-000: unregistering vbi1 [ 86.818774][ T6064] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 86.867016][ T6062] vivid-000: unregistering swradio0 [ 86.909686][ T6062] vivid-000: unregistering radio0 [ 86.938438][ T6062] vivid-000: unregistering radio1 [ 86.944851][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 86.964836][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 86.964847][ T30] audit: type=1400 audit(1785406289.922:405): avc: denied { create } for pid=6066 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 87.009265][ T6067] macvlan1: entered promiscuous mode [ 87.016827][ T6062] vivid-000: unregistering video9 [ 87.026719][ T6062] vivid-000: unregistering video10 [ 87.051022][ T6067] syz_tun: entered promiscuous mode [ 87.077314][ T6062] vivid-000: unregistering v4l-touch0 [ 87.167996][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 87.207808][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.254882][ T30] audit: type=1400 audit(1785406290.212:406): avc: denied { name_bind } for pid=6071 comm="syz.2.69" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 87.279865][ T9] usb 2-1: Product: syz [ 87.303632][ T4977] FAULT_INJECTION: forcing a failure. [ 87.303632][ T4977] name failslab, interval 1, probability 1, space 0, times 10 [ 87.318044][ T9] usb 2-1: Manufacturer: syz [ 87.331346][ T4966] FAULT_INJECTION: forcing a failure. [ 87.331346][ T4966] name failslab, interval 1, probability 1, space 0, times 10 [ 87.355321][ T9] usb 2-1: SerialNumber: syz [ 87.362820][ T1159] FAULT_INJECTION: forcing a failure. [ 87.362820][ T1159] name failslab, interval 1, probability 1, space 0, times 9 [ 87.375777][ T1159] CPU: 0 UID: 0 PID: 1159 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 87.375793][ T1159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 87.375809][ T1159] Workqueue: events_unbound nsim_dev_trap_report_work [ 87.375830][ T1159] Call Trace: [ 87.375834][ T1159] [ 87.375838][ T1159] dump_stack_lvl+0x100/0x190 [ 87.375855][ T1159] should_fail_ex.cold+0x5/0xa [ 87.375871][ T1159] should_failslab+0xc2/0x120 [ 87.375886][ T1159] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 87.375903][ T1159] ? __alloc_skb+0x140/0x710 [ 87.375920][ T1159] __alloc_skb+0x140/0x710 [ 87.375932][ T1159] ? __alloc_skb+0x5b7/0x710 [ 87.375944][ T1159] ? __pfx___alloc_skb+0x10/0x10 [ 87.375959][ T1159] ? kfree_skbmem+0x19f/0x210 [ 87.375979][ T1159] nsim_dev_trap_report_work+0x2af/0xd20 [ 87.376000][ T1159] process_one_work+0xa23/0x1940 [ 87.376021][ T1159] ? __pfx_process_one_work+0x10/0x10 [ 87.376039][ T1159] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 87.376055][ T1159] worker_thread+0x5ef/0xe50 [ 87.376073][ T1159] ? kthread+0x13a/0x450 [ 87.376084][ T1159] ? __pfx_worker_thread+0x10/0x10 [ 87.376095][ T1159] kthread+0x370/0x450 [ 87.376106][ T1159] ? __pfx_kthread+0x10/0x10 [ 87.376118][ T1159] ret_from_fork+0x72b/0xd50 [ 87.376137][ T1159] ? __pfx_ret_from_fork+0x10/0x10 [ 87.376159][ T1159] ? __switch_to+0x800/0x10f0 [ 87.376171][ T1159] ? __pfx_kthread+0x10/0x10 [ 87.376184][ T1159] ret_from_fork_asm+0x1a/0x30 [ 87.376209][ T1159] [ 87.378740][ T5609] FAULT_INJECTION: forcing a failure. [ 87.378740][ T5609] name failslab, interval 1, probability 1, space 0, times 8 [ 87.557568][ T9] FAULT_INJECTION: forcing a failure. [ 87.557568][ T9] name failslab, interval 1, probability 1, space 0, times 6 [ 87.575007][ T91] FAULT_INJECTION: forcing a failure. [ 87.575007][ T91] name failslab, interval 1, probability 1, space 0, times 6 [ 87.588127][ T91] CPU: 0 UID: 0 PID: 91 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 87.588149][ T91] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 87.588158][ T91] Workqueue: events_unbound cfg80211_wiphy_work [ 87.588180][ T91] Call Trace: [ 87.588184][ T91] [ 87.588189][ T91] dump_stack_lvl+0x100/0x190 [ 87.588207][ T91] should_fail_ex.cold+0x5/0xa [ 87.588223][ T91] should_failslab+0xc2/0x120 [ 87.588239][ T91] __kmalloc_noprof+0xfc/0x820 [ 87.588254][ T91] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 87.588276][ T91] ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 87.588297][ T91] ? kasan_save_stack+0x3f/0x50 [ 87.588310][ T91] ? kasan_save_stack+0x30/0x50 [ 87.588325][ T91] ? __kasan_kmalloc+0xaa/0xb0 [ 87.588337][ T91] ? __kmalloc_noprof+0x322/0x820 [ 87.588352][ T91] ? lock_acquire+0x1b9/0x370 [ 87.588367][ T91] ? find_held_lock+0x2b/0x80 [ 87.588385][ T91] ? __kfree_rcu_sheaf+0x195/0x730 [ 87.588399][ T91] ? __kfree_rcu_sheaf+0x195/0x730 [ 87.588413][ T91] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 87.588436][ T91] ? kvfree_call_rcu+0x1be/0x4f0 [ 87.588457][ T91] ? __asan_memcpy+0x3c/0x60 [ 87.588470][ T91] ieee80211_inform_bss+0x159/0x1170 [ 87.588490][ T91] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 87.588510][ T91] ? cfg80211_inform_single_bss_data+0x557/0x1dc0 [ 87.588528][ T91] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 87.588545][ T91] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 87.588560][ T91] ? unwind_next_frame+0x3be/0x2090 [ 87.588576][ T91] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 87.588592][ T91] ? ret_from_fork_asm+0x1a/0x30 [ 87.588620][ T91] ? stack_trace_save+0x8e/0xc0 [ 87.588632][ T91] ? __pfx_stack_trace_save+0x10/0x10 [ 87.588647][ T91] ? cfg80211_inform_bss_data+0x230/0x3b60 [ 87.588662][ T91] cfg80211_inform_bss_data+0x230/0x3b60 [ 87.588678][ T91] ? __kmalloc_noprof+0x322/0x820 [ 87.588690][ T91] ? ieee802_11_parse_elems_full+0x17c/0x3bc0 [ 87.588708][ T91] ? cfg80211_wiphy_work+0x2b7/0x550 [ 87.588723][ T91] ? process_one_work+0xa23/0x1940 [ 87.588735][ T91] ? worker_thread+0x5ef/0xe50 [ 87.588747][ T91] ? kthread+0x370/0x450 [ 87.588757][ T91] ? ret_from_fork+0x72b/0xd50 [ 87.588773][ T91] ? ret_from_fork_asm+0x1a/0x30 [ 87.588793][ T91] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 87.588812][ T91] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 87.588827][ T91] ? _ieee802_11_parse_elems_full+0x687/0x5200 [ 87.588849][ T91] ? __lock_acquire+0x49f/0x1a40 [ 87.588863][ T91] ? __lock_acquire+0x49f/0x1a40 [ 87.588883][ T91] ? __lock_acquire+0x49f/0x1a40 [ 87.588897][ T91] ? find_held_lock+0x2b/0x80 [ 87.588915][ T91] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 87.588932][ T91] ? ieee80211_update_sta_info.isra.0+0x5fd/0x1230 [ 87.588954][ T91] cfg80211_inform_bss_frame_data+0x245/0x7c0 [ 87.588974][ T91] ieee80211_bss_info_update+0x310/0xab0 [ 87.589000][ T91] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 87.589023][ T91] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 87.589038][ T91] ieee80211_ibss_rx_queued_mgmt+0xe04/0x1c70 [ 87.589058][ T91] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 87.589082][ T91] ieee80211_iface_work+0xa9a/0x1070 [ 87.589103][ T91] cfg80211_wiphy_work+0x2b7/0x550 [ 87.589122][ T91] process_one_work+0xa23/0x1940 [ 87.589145][ T91] ? __pfx_process_one_work+0x10/0x10 [ 87.589162][ T91] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 87.589180][ T91] worker_thread+0x5ef/0xe50 [ 87.589197][ T91] ? __pfx_worker_thread+0x10/0x10 [ 87.589210][ T91] ? kthread+0x13a/0x450 [ 87.589220][ T91] ? __pfx_worker_thread+0x10/0x10 [ 87.589232][ T91] kthread+0x370/0x450 [ 87.589243][ T91] ? __pfx_kthread+0x10/0x10 [ 87.589255][ T91] ret_from_fork+0x72b/0xd50 [ 87.589272][ T91] ? __pfx_ret_from_fork+0x10/0x10 [ 87.589289][ T91] ? __switch_to+0x800/0x10f0 [ 87.589301][ T91] ? __pfx_kthread+0x10/0x10 [ 87.589313][ T91] ret_from_fork_asm+0x1a/0x30 [ 87.589338][ T91] [ 87.982933][ T4977] CPU: 0 UID: 0 PID: 4977 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 87.982952][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 87.982959][ T4977] Call Trace: [ 87.982963][ T4977] [ 87.982968][ T4977] dump_stack_lvl+0x100/0x190 [ 87.982987][ T4977] should_fail_ex.cold+0x5/0xa [ 87.983002][ T4977] should_failslab+0xc2/0x120 [ 87.983018][ T4977] kmem_cache_alloc_noprof+0x91/0x6a0 [ 87.983032][ T4977] ? kmem_cache_free+0x43e/0x6b0 [ 87.983043][ T4977] ? do_getname+0x35/0x390 [ 87.983060][ T4977] do_getname+0x35/0x390 [ 87.983077][ T4977] do_readlinkat+0xa9/0x370 [ 87.983091][ T4977] ? __pfx_do_readlinkat+0x10/0x10 [ 87.983109][ T4977] __x64_sys_readlink+0x78/0xc0 [ 87.983124][ T4977] ? lockdep_hardirqs_on+0x78/0x100 [ 87.983137][ T4977] do_syscall_64+0x115/0x870 [ 87.983150][ T4977] ? clear_bhb_loop+0x40/0x90 [ 87.983165][ T4977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.983177][ T4977] RIP: 0033:0x7fe3dcb153a7 [ 87.983188][ T4977] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 87.983202][ T4977] RSP: 002b:00007ffe13d2a5e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 87.983217][ T4977] RAX: ffffffffffffffda RBX: 00007ffe13d2aac0 RCX: 00007fe3dcb153a7 [ 87.983224][ T4977] RDX: 0000000000000400 RSI: 00007ffe13d2a5f0 RDI: 00007ffe13d2aac0 [ 87.983231][ T4977] RBP: 00007ffe13d2a5f0 R08: 0000000000000073 R09: 0000000000000001 [ 87.983238][ T4977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 87.983245][ T4977] R13: 0000000000000100 R14: 000055ca8acfebe0 R15: 00007ffe13d2b540 [ 87.983260][ T4977] [ 87.984528][ T4977] FAULT_INJECTION: forcing a failure. [ 87.984528][ T4977] name failslab, interval 1, probability 1, space 0, times 4 [ 88.166427][ T4977] CPU: 0 UID: 0 PID: 4977 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 88.166443][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.166451][ T4977] Call Trace: [ 88.166456][ T4977] [ 88.166462][ T4977] dump_stack_lvl+0x100/0x190 [ 88.166481][ T4977] should_fail_ex.cold+0x5/0xa [ 88.166497][ T4977] should_failslab+0xc2/0x120 [ 88.166513][ T4977] kmem_cache_alloc_noprof+0x91/0x6a0 [ 88.166527][ T4977] ? dump_stack_lvl+0x176/0x190 [ 88.166540][ T4977] ? do_getname+0x35/0x390 [ 88.166557][ T4977] do_getname+0x35/0x390 [ 88.166574][ T4977] vfs_fstatat+0xd0/0xe0 [ 88.166595][ T4977] __do_sys_newfstatat+0x9d/0x120 [ 88.166613][ T4977] ? __pfx___do_sys_newfstatat+0x10/0x10 [ 88.166641][ T4977] do_syscall_64+0x115/0x870 [ 88.166655][ T4977] ? clear_bhb_loop+0x40/0x90 [ 88.166669][ T4977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.166682][ T4977] RIP: 0033:0x7fe3dcb11b0a [ 88.166693][ T4977] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 88.166704][ T4977] RSP: 002b:00007ffe13d2aa28 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 88.166715][ T4977] RAX: ffffffffffffffda RBX: 00007ffe13d2aec0 RCX: 00007fe3dcb11b0a [ 88.166723][ T4977] RDX: 00007ffe13d2aa30 RSI: 00007ffe13d2aec0 RDI: 00000000ffffff9c [ 88.166730][ T4977] RBP: 000055cab46952c0 R08: 0000000000000000 R09: 0000000000000001 [ 88.166737][ T4977] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe13d2aac0 [ 88.166743][ T4977] R13: 0000000000000100 R14: 000055ca8acfebe0 R15: 00007ffe13d2b540 [ 88.166758][ T4977] [ 88.169705][ T4977] FAULT_INJECTION: forcing a failure. [ 88.169705][ T4977] name failslab, interval 1, probability 1, space 0, times 3 [ 88.351695][ T4977] CPU: 0 UID: 0 PID: 4977 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 88.351712][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.351719][ T4977] Call Trace: [ 88.351723][ T4977] [ 88.351728][ T4977] dump_stack_lvl+0x100/0x190 [ 88.351747][ T4977] should_fail_ex.cold+0x5/0xa [ 88.351763][ T4977] should_failslab+0xc2/0x120 [ 88.351779][ T4977] __kmalloc_noprof+0xfc/0x820 [ 88.351793][ T4977] ? tomoyo_encode2+0xfb/0x3c0 [ 88.351807][ T4977] tomoyo_encode2+0xfb/0x3c0 [ 88.351821][ T4977] tomoyo_encode+0x29/0x50 [ 88.351831][ T4977] tomoyo_realpath_from_path+0x18c/0x690 [ 88.351847][ T4977] tomoyo_path_perm+0x276/0x460 [ 88.351864][ T4977] ? tomoyo_path_perm+0x262/0x460 [ 88.351882][ T4977] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 88.351915][ T4977] ? __pfx_ima_file_check+0x10/0x10 [ 88.351927][ T4977] ? hook_file_truncate+0xba/0x280 [ 88.351944][ T4977] security_file_truncate+0xb5/0x1e0 [ 88.351957][ T4977] path_openat+0x3584/0x4280 [ 88.351978][ T4977] ? __pfx_path_openat+0x10/0x10 [ 88.351994][ T4977] do_file_open+0x20e/0x430 [ 88.352008][ T4977] ? __pfx_do_file_open+0x10/0x10 [ 88.352032][ T4977] ? alloc_fd+0x471/0x7a0 [ 88.352046][ T4977] ? do_getname+0x191/0x390 [ 88.352062][ T4977] do_sys_openat2+0x10f/0x1e0 [ 88.352077][ T4977] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.352094][ T4977] ? __fput+0x692/0xb50 [ 88.352110][ T4977] __x64_sys_openat+0x12d/0x210 [ 88.352126][ T4977] ? __pfx___x64_sys_openat+0x10/0x10 [ 88.352147][ T4977] do_syscall_64+0x115/0x870 [ 88.352160][ T4977] ? clear_bhb_loop+0x40/0x90 [ 88.352174][ T4977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.352187][ T4977] RIP: 0033:0x7fe3dcaa7407 [ 88.352198][ T4977] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 88.352209][ T4977] RSP: 002b:00007ffe13d2b1e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 88.352220][ T4977] RAX: ffffffffffffffda RBX: 00007fe3dd196880 RCX: 00007fe3dcaa7407 [ 88.352228][ T4977] RDX: 0000000000080241 RSI: 00007ffe13d2b650 RDI: ffffffffffffff9c [ 88.352235][ T4977] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 88.352241][ T4977] R10: 00000000000001b6 R11: 0000000000000202 R12: 000055ca8acfadfc [ 88.352248][ T4977] R13: 000055ca8acfadfc R14: 0000000000000001 R15: 00007ffe13d2b540 [ 88.352264][ T4977] [ 88.352287][ T4977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 88.607082][ T4966] CPU: 0 UID: 0 PID: 4966 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 88.607100][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.607107][ T4966] Call Trace: [ 88.607112][ T4966] [ 88.607117][ T4966] dump_stack_lvl+0x100/0x190 [ 88.607136][ T4966] should_fail_ex.cold+0x5/0xa [ 88.607151][ T4966] should_failslab+0xc2/0x120 [ 88.607168][ T4966] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 88.607182][ T4966] ? __alloc_skb+0x5b7/0x710 [ 88.607196][ T4966] ? __alloc_skb+0x140/0x710 [ 88.607211][ T4966] __alloc_skb+0x140/0x710 [ 88.607225][ T4966] ? __alloc_skb+0x5b7/0x710 [ 88.607238][ T4966] ? __pfx___alloc_skb+0x10/0x10 [ 88.607255][ T4966] alloc_skb_with_frags+0xdd/0x760 [ 88.607270][ T4966] ? find_held_lock+0x2b/0x80 [ 88.607289][ T4966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 88.607303][ T4966] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 88.607320][ T4966] sock_alloc_send_pskb+0x801/0x980 [ 88.607335][ T4966] ? avc_has_perm+0x135/0x1e0 [ 88.607349][ T4966] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 88.607362][ T4966] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 88.607379][ T4966] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 88.607397][ T4966] ? sock_def_readable+0x1d2/0x600 [ 88.607414][ T4966] unix_dgram_sendmsg+0x3c7/0x1810 [ 88.607434][ T4966] ? __pfx_syslog_print+0x10/0x10 [ 88.607449][ T4966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 88.607466][ T4966] ? selinux_socket_sendmsg+0x198/0x2f0 [ 88.607487][ T4966] __sys_sendto+0x48b/0x4e0 [ 88.607500][ T4966] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 88.607515][ T4966] ? __pfx___sys_sendto+0x10/0x10 [ 88.607539][ T4966] ? do_syslog+0x18c/0x6d0 [ 88.607561][ T4966] ? xfd_validate_state+0x129/0x190 [ 88.607581][ T4966] __x64_sys_sendto+0xe0/0x1c0 [ 88.607598][ T4966] ? do_syscall_64+0x90/0x870 [ 88.607612][ T4966] ? lockdep_hardirqs_on+0x78/0x100 [ 88.607625][ T4966] do_syscall_64+0x115/0x870 [ 88.607637][ T4966] ? clear_bhb_loop+0x40/0x90 [ 88.607652][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.607664][ T4966] RIP: 0033:0x7fe53935d407 [ 88.607675][ T4966] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 88.607686][ T4966] RSP: 002b:00007ffcd0925ec0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 88.607698][ T4966] RAX: ffffffffffffffda RBX: 00007fe53920dc80 RCX: 00007fe53935d407 [ 88.607706][ T4966] RDX: 000000000000004c RSI: 00007ffcd0926000 RDI: 0000000000000003 [ 88.607712][ T4966] RBP: 00007ffcd0926430 R08: 0000000000000000 R09: 0000000000000000 [ 88.607719][ T4966] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffcd0926448 [ 88.607726][ T4966] R13: 00007ffcd0926000 R14: 0000000000000031 R15: 00007ffcd0926000 [ 88.607741][ T4966] [ 88.608203][ T5799] ark3116 ttyUSB0: using RS232 mode [ 88.904928][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 88.904948][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 88.904957][ T9] Workqueue: usb_hub_wq hub_event [ 88.904976][ T9] Call Trace: [ 88.904981][ T9] [ 88.904986][ T9] dump_stack_lvl+0x100/0x190 [ 88.905003][ T9] should_fail_ex.cold+0x5/0xa [ 88.905020][ T9] should_failslab+0xc2/0x120 [ 88.905036][ T9] kmem_cache_alloc_noprof+0x91/0x6a0 [ 88.905051][ T9] ? __kernfs_new_node+0xd2/0xa10 [ 88.905069][ T9] __kernfs_new_node+0xd2/0xa10 [ 88.905085][ T9] ? __pfx___kernfs_new_node+0x10/0x10 [ 88.905103][ T9] ? find_held_lock+0x2b/0x80 [ 88.905121][ T9] ? kernfs_root+0xee/0x2a0 [ 88.905131][ T9] ? kernfs_root+0xee/0x2a0 [ 88.905146][ T9] kernfs_new_node+0x117/0x150 [ 88.905163][ T9] __kernfs_create_file+0x53/0x350 [ 88.905182][ T9] sysfs_add_file_mode_ns+0x207/0x3c0 [ 88.905205][ T9] internal_create_group+0x593/0xfb0 [ 88.905221][ T9] ? sysfs_create_file_ns+0x14c/0x1e0 [ 88.905239][ T9] ? __pfx_internal_create_group+0x10/0x10 [ 88.905251][ T9] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 88.905268][ T9] ? __pfx_usb_acpi_find_companion+0x10/0x10 [ 88.905287][ T9] ? acpi_device_notify+0xcf/0x500 [ 88.905304][ T9] ? lockdep_init_map_type+0x5c/0x250 [ 88.905321][ T9] internal_create_groups+0x9d/0x150 [ 88.905335][ T9] device_add+0x7c8/0x1970 [ 88.905354][ T9] ? __pfx_device_add+0x10/0x10 [ 88.905370][ T9] ? add_device_randomness+0xc9/0x110 [ 88.905387][ T9] ? __pfx_add_device_randomness+0x10/0x10 [ 88.905407][ T9] usb_new_device.cold+0x685/0x115c [ 88.905426][ T9] ? _mutex_trylock_nest_lock+0x241/0x310 [ 88.905440][ T9] ? do_raw_spin_lock+0x128/0x260 [ 88.905457][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 88.905472][ T9] ? mark_held_locks+0x40/0x70 [ 88.905489][ T9] hub_event+0x30a3/0x4a60 [ 88.905520][ T9] ? __pfx_hub_event+0x10/0x10 [ 88.905535][ T9] ? debug_object_deactivate+0x2e4/0x3b0 [ 88.905557][ T9] ? rcu_is_watching+0x12/0xc0 [ 88.905584][ T9] process_one_work+0xa23/0x1940 [ 88.905605][ T9] ? __pfx_process_one_work+0x10/0x10 [ 88.905623][ T9] ? __pfx_hub_event+0x10/0x10 [ 88.905639][ T9] worker_thread+0x5ef/0xe50 [ 88.905658][ T9] ? kthread+0x13a/0x450 [ 88.905669][ T9] ? __pfx_worker_thread+0x10/0x10 [ 88.905680][ T9] kthread+0x370/0x450 [ 88.905691][ T9] ? __pfx_kthread+0x10/0x10 [ 88.905703][ T9] ret_from_fork+0x72b/0xd50 [ 88.905720][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 88.905737][ T9] ? __switch_to+0x800/0x10f0 [ 88.905750][ T9] ? __pfx_kthread+0x10/0x10 [ 88.905762][ T9] ret_from_fork_asm+0x1a/0x30 [ 88.905787][ T9] [ 89.184858][ T9] usb 2-1: can't device_add, error -12 [ 89.225152][ T6062] vivid-001: unregistering video11 [ 89.232914][ T30] audit: type=1400 audit(1785406292.182:407): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 89.256296][ T6062] vivid-001: unregistering video12 [ 89.264045][ T6062] vivid-001: unregistering vbi2 [ 89.271312][ T6062] vivid-001: unregistering vbi3 [ 89.276837][ T6062] vivid-001: unregistering swradio1 [ 89.282694][ T6062] vivid-001: unregistering radio2 [ 89.288327][ T6062] vivid-001: unregistering radio3 [ 89.293970][ T6062] vivid-001: unregistering video13 [ 89.299685][ T6062] vivid-001: unregistering video14 [ 89.320329][ T6062] vivid-001: unregistering v4l-touch1 [ 89.342071][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 89.342086][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 89.342094][ T5609] Call Trace: [ 89.342098][ T5609] [ 89.342102][ T5609] dump_stack_lvl+0x100/0x190 [ 89.342122][ T5609] should_fail_ex.cold+0x5/0xa [ 89.342138][ T5609] should_failslab+0xc2/0x120 [ 89.342154][ T5609] kmem_cache_alloc_noprof+0x91/0x6a0 [ 89.342169][ T5609] ? anon_vma_clone+0x2ba/0xcd0 [ 89.342189][ T5609] anon_vma_clone+0x2ba/0xcd0 [ 89.342204][ T5609] ? kmem_cache_alloc_noprof+0x2d7/0x6a0 [ 89.342222][ T5609] anon_vma_fork+0x1bb/0x6b0 [ 89.342243][ T5609] dup_mmap+0x143e/0x21b0 [ 89.342267][ T5609] ? __pfx_dup_mmap+0x10/0x10 [ 89.342283][ T5609] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 89.342299][ T5609] ? __lock_acquire+0x49f/0x1a40 [ 89.342314][ T5609] ? find_held_lock+0x2b/0x80 [ 89.342332][ T5609] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 89.342360][ T5609] copy_process+0x4588/0x8030 [ 89.342387][ T5609] ? __pfx_copy_process+0x10/0x10 [ 89.342403][ T5609] ? do_raw_spin_lock+0x128/0x260 [ 89.342421][ T5609] ? pte_offset_map_rw_nolock+0x7e/0x1c0 [ 89.342439][ T5609] kernel_clone+0x176/0x9d0 [ 89.342457][ T5609] ? __pfx_kernel_clone+0x10/0x10 [ 89.342478][ T5609] ? find_held_lock+0x2b/0x80 [ 89.342496][ T5609] ? __might_fault+0xc5/0x140 [ 89.342509][ T5609] __do_sys_clone+0xd9/0x120 [ 89.342525][ T5609] ? __pfx___do_sys_clone+0x10/0x10 [ 89.342562][ T5609] do_syscall_64+0x115/0x870 [ 89.342574][ T5609] ? clear_bhb_loop+0x40/0x90 [ 89.342590][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.342602][ T5609] RIP: 0033:0x7fe2b37c6a12 [ 89.342613][ T5609] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 89.342624][ T5609] RSP: 002b:00007fff2fb36cd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 89.342635][ T5609] RAX: ffffffffffffffda RBX: 00007fff2fb36cd0 RCX: 00007fe2b37c6a12 [ 89.342643][ T5609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 89.342649][ T5609] RBP: 00007fff2fb36e5c R08: 0000000000000000 R09: 0000000000000001 [ 89.342656][ T5609] R10: 0000555566fe97d0 R11: 0000000000000246 R12: 0000000000000001 [ 89.342663][ T5609] R13: 00000000000927c0 R14: 000000000001548a R15: 00007fff2fb36eb0 [ 89.342679][ T5609] [ 89.653537][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 89.881019][ T5799] usb 1-1: ark3116 converter now attached to ttyUSB0 [ 89.957902][ T5799] usb 1-1: USB disconnect, device number 5 [ 89.983612][ T6062] vivid-002: unregistering video15 [ 90.046013][ T5799] ark3116 ttyUSB0: ark3116 converter now disconnected from ttyUSB0 [ 90.058291][ T6062] vivid-002: unregistering video16 [ 90.077387][ T6062] vivid-002: unregistering vbi4 [ 90.090522][ T5799] ark3116 1-1:1.0: device disconnected [ 90.157836][ T6062] vivid-002: unregistering vbi5 [ 90.198079][ T6062] vivid-002: unregistering swradio2 [ 90.280016][ T6062] vivid-002: unregistering radio4 [ 90.323406][ T6062] vivid-002: unregistering radio5 [ 90.364820][ T6062] vivid-002: unregistering video17 [ 90.406126][ T6062] vivid-002: unregistering video18 [ 90.424683][ T5609] syz_tun (unregistering): left promiscuous mode [ 90.466792][ T6062] vivid-002: unregistering v4l-touch2 [ 90.518608][ T30] audit: type=1400 audit(1785406293.472:408): avc: denied { create } for pid=6084 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 90.717518][ T6062] vivid-003: unregistering video19 [ 90.773200][ T6062] vivid-003: unregistering video20 [ 90.802440][ T1169] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.847938][ T6062] vivid-003: unregistering vbi6 [ 90.896327][ T6062] vivid-003: unregistering vbi7 [ 90.930214][ T6062] vivid-003: unregistering swradio3 [ 90.984830][ T6062] vivid-003: unregistering radio6 [ 91.007517][ T1169] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.022098][ T6062] vivid-003: unregistering radio7 [ 91.043873][ T6062] vivid-003: unregistering video21 [ 91.061690][ T6062] vivid-003: unregistering video22 [ 91.095240][ T1169] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.106091][ T6062] vivid-003: unregistering v4l-touch3 [ 91.261067][ T1169] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.272573][ T6062] vivid-004: unregistering video23 [ 91.289596][ T6094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 91.321026][ T6062] vivid-004: unregistering video24 [ 91.362108][ T6094] Zero length message leads to an empty skb [ 91.379823][ T6062] vivid-004: unregistering vbi8 [ 91.429721][ T6062] vivid-004: unregistering vbi9 [ 91.473731][ T6062] vivid-004: unregistering swradio4 [ 91.519925][ T6062] vivid-004: unregistering radio8 [ 91.526072][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.587191][ T6062] vivid-004: unregistering radio9 [ 91.639712][ T6062] vivid-004: unregistering video25 [ 91.670040][ T30] audit: type=1400 audit(1785406294.622:409): avc: denied { read write } for pid=6095 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 91.719959][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.730563][ T6062] vivid-004: unregistering video26 [ 91.744409][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.753522][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.778381][ T10] usb 1-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice= 1.00 [ 91.797751][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.812597][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.837692][ T6062] vivid-004: unregistering v4l-touch4 [ 91.885149][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.945636][ T1169] bridge_slave_1: left allmulticast mode [ 91.987222][ T10] usb 1-1: Product: syz [ 91.999874][ T30] audit: type=1400 audit(1785406294.622:410): avc: denied { open } for pid=6095 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 92.031050][ T1169] bridge_slave_1: left promiscuous mode [ 92.047468][ T10] usb 1-1: Manufacturer: syz [ 92.081841][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.098797][ T10] usb 1-1: SerialNumber: syz [ 92.119487][ T6062] vivid-005: unregistering video27 [ 92.152309][ T10] gspca_main: conex-2.14.0 probing 0572:0041 [ 92.177085][ T6062] vivid-005: unregistering video28 [ 92.206365][ T1169] bridge_slave_0: left allmulticast mode [ 92.230936][ T6062] vivid-005: unregistering vbi10 [ 92.252305][ T30] audit: type=1400 audit(1785406294.672:411): avc: denied { ioctl } for pid=6095 comm="syz-executor" path="socket:[10646]" dev="sockfs" ino=10646 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.288615][ T1169] bridge_slave_0: left promiscuous mode [ 92.323549][ T6062] vivid-005: unregistering vbi11 [ 92.346772][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.386104][ T6062] vivid-005: unregistering swradio5 [ 92.429904][ T6062] vivid-005: unregistering radio10 [ 92.438595][ T6107] Line length is too long: Should be less than 4094 [ 92.487909][ T6062] vivid-005: unregistering radio11 [ 92.528984][ T6062] vivid-005: unregistering video29 [ 92.574698][ T6062] vivid-005: unregistering video30 [ 92.608546][ T6093] syz.4.78 (6093): drop_caches: 2 [ 92.634146][ T6062] vivid-005: unregistering v4l-touch5 [ 92.887913][ T6062] vivid-006: unregistering video31 [ 92.900877][ T30] audit: type=1800 audit(1785406295.852:412): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.83" name="idVendor" dev="configfs" ino=10770 res=0 errno=0 [ 92.989697][ T6062] vivid-006: unregistering video32 [ 93.046281][ T6118] gspca_main: conex-2.14.0 probing 0572:0041 [ 93.053467][ T6062] vivid-006: unregistering vbi12 [ 93.073208][ T6122] UDC core: g1: couldn't find an available UDC or it's busy [ 93.111302][ T30] audit: type=1800 audit(1785406295.882:413): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.83" name="idProduct" dev="configfs" ino=10771 res=0 errno=0 [ 93.159879][ T6062] vivid-006: unregistering vbi13 [ 93.259203][ T6062] vivid-006: unregistering swradio6 [ 93.304326][ T30] audit: type=1800 audit(1785406295.892:414): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.83" name="serialnumber" dev="configfs" ino=10772 res=0 errno=0 [ 93.351410][ T6062] vivid-006: unregistering radio12 [ 93.434440][ T6062] vivid-006: unregistering radio13 [ 93.454453][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.480029][ T6062] vivid-006: unregistering video33 [ 93.506438][ T30] audit: type=1800 audit(1785406295.902:415): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.83" name="manufacturer" dev="configfs" ino=10773 res=0 errno=0 [ 93.545034][ T6062] vivid-006: unregistering video34 [ 93.587886][ T6062] vivid-006: unregistering v4l-touch6 [ 93.600377][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.624762][ T188] usb 1-1: USB disconnect, device number 6 [ 93.735967][ T30] audit: type=1800 audit(1785406295.902:416): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.83" name="product" dev="configfs" ino=10774 res=0 errno=0 [ 93.764697][ T1169] bond0 (unregistering): Released all slaves [ 93.897653][ T6139] gadgetfs: bound to dummy_udc driver [ 93.916473][ T6062] vivid-007: unregistering video35 [ 93.935521][ T50] Bluetooth: hci3: command tx timeout [ 93.977759][ T30] audit: type=1400 audit(1785406295.922:417): avc: denied { write } for pid=6120 comm="syz.4.83" name="functions" dev="configfs" ino=9000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.008790][ T6062] vivid-007: unregistering video36 [ 94.095016][ T6062] vivid-007: unregistering vbi14 [ 94.195112][ T6062] vivid-007: unregistering vbi15 [ 94.253399][ T6062] vivid-007: unregistering swradio7 [ 94.288065][ T30] audit: type=1400 audit(1785406295.922:418): avc: denied { write } for pid=6120 comm="syz.4.83" name="strings" dev="configfs" ino=9861 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.321622][ T188] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 94.362290][ T6062] vivid-007: unregistering radio14 [ 94.370582][ C0] gadgetfs: connected [ 94.375963][ T6138] gadgetfs: suspended from state 3 [ 94.386597][ T6138] gadgetfs: disconnected [ 94.394364][ T6062] vivid-007: unregistering radio15 [ 94.405426][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.90'. [ 94.419617][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 94.446464][ T6062] vivid-007: unregistering video37 [ 94.473713][ T6062] vivid-007: unregistering video38 [ 94.480519][ T30] audit: type=1800 audit(1785406295.922:419): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.83" name="configuration" dev="configfs" ino=10779 res=0 errno=0 [ 94.544774][ T6062] vivid-007: unregistering v4l-touch7 [ 94.676304][ T5799] IPVS: starting estimator thread 0... [ 94.802218][ T6154] IPVS: using max 65 ests per chain, 156000 per kthread [ 94.850515][ T6062] vivid-008: unregistering video39 [ 94.861651][ T9] usb 2-1: device descriptor read/64, error -110 [ 94.930360][ T1169] macvlan1: left promiscuous mode [ 94.937849][ T6062] vivid-008: unregistering video40 [ 94.971758][ T9] usb usb2-port1: attempt power cycle [ 95.022997][ T6062] vivid-008: unregistering vbi16 [ 95.049674][ T5613] Bluetooth: hci1: hardware error 0x00 [ 95.075755][ T1169] hsr_slave_0: left promiscuous mode [ 95.092938][ T6160] NFSD: Failed to start, no listeners configured. [ 95.111908][ T6062] vivid-008: unregistering vbi17 [ 95.139245][ T1169] hsr_slave_1: left promiscuous mode [ 95.153052][ T6062] vivid-008: unregistering swradio8 [ 95.183739][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.211170][ T6062] vivid-008: unregistering radio16 [ 95.249013][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.256722][ T6062] vivid-008: unregistering radio17 [ 95.293470][ T6062] vivid-008: unregistering video41 [ 95.305663][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.332552][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.352837][ T6062] vivid-008: unregistering video42 [ 95.373101][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.397126][ T6062] vivid-008: unregistering v4l-touch8 [ 95.419493][ T9] usb 2-1: device descriptor read/8, error -32 [ 95.530586][ T1169] veth1_macvtap: left promiscuous mode [ 95.584726][ T1169] veth0_macvtap: left promiscuous mode [ 95.601742][ T6062] vivid-009: unregistering video43 [ 95.623766][ T1169] veth1_vlan: left promiscuous mode [ 95.646962][ T6062] vivid-009: unregistering video44 [ 95.666236][ T1169] veth0_vlan: left promiscuous mode [ 95.691059][ T6062] vivid-009: unregistering vbi18 [ 95.731641][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.756691][ T6062] vivid-009: unregistering vbi19 [ 95.790081][ T6062] vivid-009: unregistering swradio9 [ 95.814181][ T9] usb 2-1: device descriptor read/8, error -32 [ 95.842957][ T6062] vivid-009: unregistering radio18 [ 95.875039][ T6062] vivid-009: unregistering radio19 [ 95.903510][ T6062] vivid-009: unregistering video45 [ 95.931099][ T6062] vivid-009: unregistering video46 [ 95.964144][ T9] usb usb2-port1: unable to enumerate USB device [ 95.979232][ T6062] vivid-009: unregistering v4l-touch9 [ 96.014106][ T50] Bluetooth: hci3: command tx timeout [ 96.147158][ T6062] vivid-010: unregistering video47 [ 96.191914][ T6062] vivid-010: unregistering video48 [ 96.233474][ T6062] vivid-010: unregistering vbi20 [ 96.293367][ T6062] vivid-010: unregistering vbi21 [ 96.327411][ T6062] vivid-010: unregistering swradio10 [ 96.378268][ T6062] vivid-010: unregistering radio20 [ 96.410705][ T6062] vivid-010: unregistering radio21 [ 96.460050][ T6062] vivid-010: unregistering video49 [ 96.483116][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.527679][ T6062] vivid-010: unregistering video50 [ 96.547269][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 96.572738][ T6062] vivid-010: unregistering v4l-touch10 [ 96.643973][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 96.670234][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice= 1.00 [ 96.703902][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.744569][ T6062] vivid-011: unregistering video51 [ 96.756878][ T9] usb 3-1: Product: syz [ 96.771031][ T9] usb 3-1: Manufacturer: syz [ 96.785376][ T6062] vivid-011: unregistering video52 [ 96.805808][ T9] usb 3-1: SerialNumber: syz [ 96.814648][ T6062] vivid-011: unregistering vbi22 [ 96.842455][ T5734] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.871135][ T6062] vivid-011: unregistering vbi23 [ 96.877127][ T9] gspca_main: conex-2.14.0 probing 0572:0041 [ 96.915455][ T6062] vivid-011: unregistering swradio11 [ 96.953215][ T6062] vivid-011: unregistering radio22 [ 96.976496][ T6062] vivid-011: unregistering radio23 [ 96.995626][ T6062] vivid-011: unregistering video53 [ 97.008112][ T6062] vivid-011: unregistering video54 [ 97.029729][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 97.043392][ T6062] vivid-011: unregistering v4l-touch11 [ 97.064181][ T5734] usb 5-1: New USB device found, idVendor=6547, idProduct=0232, bcdDevice= 0.00 [ 97.116054][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.165082][ T5734] usb 5-1: Product: syz [ 97.193285][ T5734] usb 5-1: Manufacturer: syz [ 97.212592][ T5613] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 97.218763][ T50] Bluetooth: hci1: command 0x1003 tx timeout [ 97.226210][ T6062] vivid-012: unregistering video55 [ 97.234256][ T5734] usb 5-1: SerialNumber: syz [ 97.266431][ T6062] vivid-012: unregistering video56 [ 97.288006][ T5734] ark3116 5-1:1.0: ark3116 converter detected [ 97.331178][ T6062] vivid-012: unregistering vbi24 [ 97.385884][ T6062] vivid-012: unregistering vbi25 [ 97.450651][ T6062] vivid-012: unregistering swradio12 [ 97.495384][ T6062] vivid-012: unregistering radio24 [ 97.528317][ T6062] vivid-012: unregistering radio25 [ 97.568681][ T6062] vivid-012: unregistering video57 [ 97.597118][ T6062] vivid-012: unregistering video58 [ 97.629424][ T6204] gspca_main: conex-2.14.0 probing 0572:0041 [ 97.646171][ T6062] vivid-012: unregistering v4l-touch12 [ 97.779274][ T6062] vivid-013: unregistering video59 [ 97.809114][ T6062] vivid-013: unregistering video60 [ 97.848175][ T6062] vivid-013: unregistering vbi26 [ 97.895141][ T6062] vivid-013: unregistering vbi27 [ 97.928175][ T5799] usb 3-1: USB disconnect, device number 3 [ 97.942076][ T6062] vivid-013: unregistering swradio13 [ 97.996469][ T6062] vivid-013: unregistering radio26 [ 98.030898][ T6062] vivid-013: unregistering radio27 [ 98.063802][ T6062] vivid-013: unregistering video61 [ 98.092976][ T5613] Bluetooth: hci3: command tx timeout [ 98.103642][ T6062] vivid-013: unregistering video62 [ 98.123358][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.140510][ T6062] vivid-013: unregistering v4l-touch13 [ 98.168095][ T6095] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.212400][ T6095] bridge_slave_0: entered allmulticast mode [ 98.221400][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 98.221409][ T30] audit: type=1400 audit(1785406301.172:442): avc: denied { write } for pid=6206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.296497][ T6095] bridge_slave_0: entered promiscuous mode [ 98.302783][ T6062] vivid-014: unregistering video63 [ 98.320356][ T6062] vivid-014: unregistering video64 [ 98.338195][ T6095] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.355719][ T6062] vivid-014: unregistering vbi28 [ 98.399242][ T6095] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.412409][ T6062] vivid-014: unregistering vbi29 [ 98.436233][ T6062] vivid-014: unregistering swradio14 [ 98.445226][ T6095] bridge_slave_1: entered allmulticast mode [ 98.461926][ T30] audit: type=1400 audit(1785406301.412:443): avc: denied { write } for pid=6228 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.489636][ T6062] vivid-014: unregistering radio28 [ 98.497551][ T6095] bridge_slave_1: entered promiscuous mode [ 98.506844][ T6062] vivid-014: unregistering radio29 [ 98.540365][ T6062] vivid-014: unregistering video65 [ 98.580900][ T6062] vivid-014: unregistering video66 [ 98.625099][ T6062] vivid-014: unregistering v4l-touch14 [ 98.650604][ T6095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.724165][ T6095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.778450][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 98.793058][ T6062] vivid-015: unregistering video67 [ 98.822263][ T6062] vivid-015: unregistering video68 [ 98.850055][ T30] audit: type=1326 audit(1785406301.802:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.104" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffa79df99 code=0x7ffc0000 [ 98.896815][ T6062] vivid-015: unregistering vbi30 [ 98.940607][ T6062] vivid-015: unregistering vbi31 [ 98.947163][ T5613] Bluetooth: hci4: hardware error 0x00 [ 98.974424][ T6095] team0: Port device team_slave_0 added [ 98.990300][ T6062] vivid-015: unregistering swradio15 [ 99.026138][ T6062] vivid-015: unregistering radio30 [ 99.038339][ T6095] team0: Port device team_slave_1 added [ 99.063081][ T30] audit: type=1326 audit(1785406301.832:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.104" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffa79df99 code=0x7ffc0000 [ 99.090461][ T6062] vivid-015: unregistering radio31 [ 99.119686][ T6062] vivid-015: unregistering video69 [ 99.152911][ T6062] vivid-015: unregistering video70 [ 99.228235][ T6062] vivid-015: unregistering v4l-touch15 [ 99.256724][ T30] audit: type=1326 audit(1785406301.832:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.104" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fdffa79df99 code=0x7ffc0000 [ 99.296054][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.308140][ T5734] ark3116 ttyUSB0: using RS232 mode [ 99.338198][ T5734] usb 5-1: ark3116 converter now attached to ttyUSB0 [ 99.357425][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.470634][ T6062] vivid-016: unregistering video71 [ 99.486352][ T30] audit: type=1326 audit(1785406301.842:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.104" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffa79df99 code=0x7ffc0000 [ 99.553961][ T6062] vivid-016: unregistering video72 [ 99.571248][ T6095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.594916][ T6062] vivid-016: unregistering vbi32 [ 99.668536][ T6062] vivid-016: unregistering vbi33 [ 99.678272][ T6095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.715322][ T6062] vivid-016: unregistering swradio16 [ 99.740142][ T30] audit: type=1326 audit(1785406301.842:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.0.104" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdffa79df99 code=0x7ffc0000 [ 99.775031][ T6095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.824479][ T6062] vivid-016: unregistering radio32 [ 99.839805][ T6062] vivid-016: unregistering radio33 [ 99.880452][ T6062] vivid-016: unregistering video73 [ 99.901275][ T6062] vivid-016: unregistering video74 [ 100.506995][ T50] Bluetooth: hci3: command tx timeout [ 102.175074][ T5613] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 108.331451][ C0] sched: DL replenish lagged too much [ 183.834575][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.086110][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 192.096415][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 204.951394][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 204.958340][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6255/1:b..l [ 204.966490][ C0] rcu: (detected by 0, t=10502 jiffies, g=20857, q=1442 ncpus=1) [ 204.974262][ C0] task:dhcpcd-run-hook state:R running task stack:27160 pid:6255 tgid:6255 ppid:6240 task_flags:0x40004c flags:0x00080000 [ 204.988105][ C0] Call Trace: [ 204.991365][ C0] [ 204.994279][ C0] __schedule+0x125c/0x6730 [ 204.998776][ C0] ? __lock_acquire+0x49f/0x1a40 [ 205.003690][ C0] ? __pfx___schedule+0x10/0x10 [ 205.008514][ C0] ? mark_held_locks+0x40/0x70 [ 205.013250][ C0] preempt_schedule_irq+0x50/0x90 [ 205.018246][ C0] irqentry_exit+0x205/0xa00 [ 205.022813][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.028765][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x26/0x40 [ 205.034978][ C0] Code: 90 90 90 90 f3 0f 1e fa 8b 05 ae 68 67 05 85 c0 74 20 8b 05 60 9b 67 05 85 c0 74 16 65 48 8b 05 c8 2d a9 08 8b 80 9c 0b 00 00 <85> c0 0f 94 c0 0f b6 c0 e9 7d 40 03 00 66 2e 0f 1f 84 00 00 00 00 [ 205.054556][ C0] RSP: 0018:ffffc900034ff538 EFLAGS: 00000202 [ 205.060593][ C0] RAX: 0000000000000000 RBX: ffffc900034fff08 RCX: ffffffff91beb701 [ 205.068533][ C0] RDX: ffffc900034fff10 RSI: 0000000000000001 RDI: ffffc900034ff5c0 [ 205.076475][ C0] RBP: 0000000000000001 R08: ffffffff91beb7f4 R09: 0000000000000007 [ 205.084417][ C0] R10: 0000000000000200 R11: 000000000000759b R12: ffffc900034ff600 [ 205.092360][ C0] R13: ffffc900034ff5b0 R14: ffffc900034fff08 R15: ffffc900034ff5e4 [ 205.100310][ C0] unwind_next_frame+0x3a8/0x2090 [ 205.105309][ C0] ? x64_sys_call+0x102c/0x1530 [ 205.110137][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 205.116261][ C0] arch_stack_walk+0x94/0xf0 [ 205.120829][ C0] ? do_syscall_64+0x115/0x870 [ 205.125568][ C0] ? unlink_anon_vmas+0x228/0x8e0 [ 205.130570][ C0] stack_trace_save+0x8e/0xc0 [ 205.135217][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 205.140563][ C0] ? __lock_acquire+0x49f/0x1a40 [ 205.145476][ C0] kasan_save_stack+0x30/0x50 [ 205.150127][ C0] ? kasan_save_stack+0x30/0x50 [ 205.154949][ C0] ? kasan_save_track+0x14/0x30 [ 205.159768][ C0] ? kasan_save_free_info+0x3b/0x70 [ 205.164941][ C0] ? __kasan_slab_free+0x5f/0x80 [ 205.169851][ C0] ? kmem_cache_free+0x127/0x6b0 [ 205.174760][ C0] ? unlink_anon_vmas+0x228/0x8e0 [ 205.179760][ C0] ? free_pgtables+0x2e7/0xd80 [ 205.184497][ C0] ? exit_mmap+0x44c/0xa00 [ 205.188887][ C0] ? __mmput+0x12a/0x410 [ 205.193121][ C0] ? mmput+0x67/0x80 [ 205.197001][ C0] ? do_exit+0x8b1/0x2ae0 [ 205.201305][ C0] ? do_group_exit+0xd5/0x2a0 [ 205.205949][ C0] ? __x64_sys_exit_group+0x3e/0x50 [ 205.211118][ C0] ? x64_sys_call+0x102c/0x1530 [ 205.215960][ C0] kasan_save_track+0x14/0x30 [ 205.220610][ C0] kasan_save_free_info+0x3b/0x70 [ 205.225610][ C0] __kasan_slab_free+0x5f/0x80 [ 205.230345][ C0] kmem_cache_free+0x127/0x6b0 [ 205.235082][ C0] unlink_anon_vmas+0x228/0x8e0 [ 205.239914][ C0] free_pgtables+0x2e7/0xd80 [ 205.244480][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 205.249573][ C0] exit_mmap+0x44c/0xa00 [ 205.253789][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 205.258527][ C0] ? rcu_is_watching+0x12/0xc0 [ 205.263271][ C0] ? __lock_acquire+0x49f/0x1a40 [ 205.268182][ C0] ? find_held_lock+0x2b/0x80 [ 205.272833][ C0] ? uprobe_clear_state+0x5f/0x260 [ 205.277925][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 205.283535][ C0] ? arch_uprobe_clear_state+0x107/0x150 [ 205.289157][ C0] __mmput+0x12a/0x410 [ 205.293201][ C0] mmput+0x67/0x80 [ 205.296895][ C0] do_exit+0x8b1/0x2ae0 [ 205.301031][ C0] ? do_raw_spin_lock+0x128/0x260 [ 205.306029][ C0] ? __pfx_do_exit+0x10/0x10 [ 205.310592][ C0] ? do_group_exit+0x1bd/0x2a0 [ 205.315323][ C0] ? rcu_is_watching+0x12/0xc0 [ 205.320065][ C0] do_group_exit+0xd5/0x2a0 [ 205.324540][ C0] __x64_sys_exit_group+0x3e/0x50 [ 205.329550][ C0] x64_sys_call+0x102c/0x1530 [ 205.334203][ C0] do_syscall_64+0x115/0x870 [ 205.338764][ C0] ? clear_bhb_loop+0x40/0x90 [ 205.343414][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.349276][ C0] RIP: 0033:0x7f7ebc7b36c5 [ 205.353667][ C0] RSP: 002b:00007ffebb4c4398 EFLAGS: 00000202 ORIG_RAX: 00000000000000e7 [ 205.362049][ C0] RAX: ffffffffffffffda RBX: 00007ffebb4c4604 RCX: 00007f7ebc7b36c5 [ 205.369993][ C0] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000000 [ 205.377938][ C0] RBP: 0000000000000003 R08: 00007ffebb4c4490 R09: 0000000000000002 [ 205.385880][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 205.393820][ C0] R13: 00007ffebb4c46d0 R14: 00007f7ebc9c3000 R15: 000055c0ee268d98 [ 205.401769][ C0]