last executing test programs: 8.062705583s ago: executing program 4 (id=1031): openat$tun(0xffffffffffffff9c, 0x0, 0x8080, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./drv\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./drv/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0000:00:1f.3', 0xc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pnp/drivers/serial\x00', 0x80, 0x0) r2 = openat(r1, &(0x7f0000000380)='unbind\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='00:03', 0x5) r3 = openat(r1, &(0x7f0000000400)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='00:03', 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x0, 0x0, 0x0, 0x5}, 0x94) 7.631408221s ago: executing program 4 (id=1032): openat$tun(0xffffffffffffff9c, 0x0, 0x8080, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000000100)='./sys/bus/pci/drivers/i801_smbus\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./drv\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./drv/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0000:00:1f.3', 0xc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pnp/drivers/serial\x00', 0x80, 0x0) r2 = openat(r1, &(0x7f0000000380)='unbind\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='00:03', 0x5) r3 = openat(r1, &(0x7f0000000400)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='00:03', 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 7.140538143s ago: executing program 4 (id=1036): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x34}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x3c, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6.916815837s ago: executing program 4 (id=1040): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000940)='./debug\x00', &(0x7f0000000980)='debugfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.732256503s ago: executing program 4 (id=1061): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) syz_usb_disconnect(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='saa7115 0x2', 0xb) 2.590043375s ago: executing program 2 (id=1069): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./drv/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0000:00:1f.3', 0xc) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pnp/drivers/serial\x00', 0x80, 0x0) r2 = openat(r1, &(0x7f0000000380)='unbind\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='00:03', 0x5) r3 = openat(r1, &(0x7f0000000400)='bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='00:03', 0x5) 2.301473379s ago: executing program 1 (id=1070): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x8) mount(0x0, &(0x7f0000000140)='./debug\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/dynamic_debug/control\x00', 0x802, 0x0) write(r0, &(0x7f0000000200)='+p', 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000e80)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000203000000400001802c0004001400010002004e227f00000100000000000000001400020002000000e000000200000000000000000d0001007564703a73797a32"], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={0x6c, r3, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2.111537441s ago: executing program 1 (id=1073): chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000005b80)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000005bc0)='./debug\x00', &(0x7f0000005c00)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000005c40)='./debug/failslab/times\x00', 0x2, 0x0) quotactl$Q_GETFMT(0xffffffff80000400, 0x0, 0xee00, &(0x7f0000002100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000005cc0)='./debug/failslab/probability\x00', 0x2, 0x0) write(r0, &(0x7f0000005d00)='5\x00', 0x1) r1 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000005d40)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) syz_create_resource$futex(&(0x7f0000003540)=0x2) write(r1, &(0x7f0000005d80), 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000002080)=@req={0x3, 0x5, 0x200, 0x5}, 0x10) openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x1d4) getpid() syz_emit_ethernet(0xe, &(0x7f0000005dc0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@generic={0x88a2}}}, 0x0) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000006ac0), 0x100, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000006b00)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000006b40)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000006d40)=@usbdevfs_connect) sendmsg$inet(r0, &(0x7f0000003500)={&(0x7f0000002140)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000003480)=[{&(0x7f0000002180)="6339b39da2b467c3bbb0d28c9a1fb7e40a3745c205b998ff0a83a9ceff1663d00a8e91ecd62e05f448d30fd1fc2ba57e2753321c5257e221e7ac24e5e5b78dda9b3f641d4bdef2609e63a336570eb214584828afcf6bdedb6cb5d861f1e3f1433ae9e24979c230ca7be7caccb1d0a2b035f66617d4226ace03bda819debc80be1f5c6e9d4b979e7af8ce4b66842f0c978b07218f2a2cdf2d7ff54979f733b46ef1b79b5169c0ef7468ebe3f8916bd0df83c99aa6a38ce2", 0xb7}, {&(0x7f0000002240)="c931945905f95c4a1c0c224e2614dd67434743b081e11ac4985bf9882a704710307ced2d95ef430586f2aa921995ea444cf5a27d349c0bc63384119fe2e795d4919f2cbaac922198e353438e8e66a0a4318d0294ec9841dc96301f4f15fb52c02f20e597ae175fccec1f93088ab2b6c6a2c4421ab5edc39a4c1c04e9091df47ef09f96cc0cbda54926286bae6ecc599b", 0x90}, {&(0x7f0000002300)="6b288a7da6970a", 0x7}, {&(0x7f0000002340)="d21a235fee28ea2da1f9be3ddea4ff38226e79cad9ebb024c8d8fbe2c1f856b26aaa50d7cab28aaf232b890abd7d5861b176afac2beec9113c4a257289325545bcb2f0d24c5221dfd5ccf97533cd5940919dd436c31e18deab3ab960ac6dae18abbd8d7aacc9ef2f209f5491bad609fd117fc27a12268650a6e6f26eb4f5a40a7d3d9ee6105ae8aa3bd0e8f52a00037e633ee486", 0x94}, {&(0x7f0000002400)="fea1923c3a76516446c3beadcc4ad3a4a0af4549ef79ebeaff1f038f7f258e4c0f3292b56c275d1981ae412cbdcc76362b5a3d1dadd614ebe7108105d085618494ecaeef3f643da7d4ca40af3fe2267c7e4fb1492c25804a893cb93c9cb7f4bb5ebea47209d340", 0x67}, {&(0x7f0000002480)="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", 0x1000}], 0x6}, 0x4) 2.023955899s ago: executing program 2 (id=1074): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000100)={0x200001ff6000, 0x3}) close(0x5) 1.95902545s ago: executing program 1 (id=1075): mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='md0', 0x3) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x400c0930, 0x0) 1.876214375s ago: executing program 2 (id=1076): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) 1.860473369s ago: executing program 2 (id=1077): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) listen(r0, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a300000000048000000030a01040000000000000000010000000900010073797a30000000000900030073797a31000000001400048008000140000000040800024000000064080007006e6174004c000000060a01040000000000000008010000000900010073797a30000000000900020073797a3100000000200004801c000180090001006d61"], 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x8040) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000200)='\x00', 0x1, 0x4048000, 0x0, 0x0) accept(r0, &(0x7f0000000280)=@can, 0x0) 1.661032227s ago: executing program 1 (id=1080): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.552913561s ago: executing program 3 (id=1082): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x4e20, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @loopback}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000005c0), 0x4) setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000600)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000640), 0x4) setsockopt$inet_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)='h', 0x1}], 0x1, &(0x7f0000000780)=[@ip_ttl={{0x14, 0x11a, 0x1, 0x15}}], 0x18}, 0x0) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)=""/256, 0x100}], 0x1, &(0x7f000000f7c0)=""/39, 0x27}, 0x40010101) 1.540992407s ago: executing program 1 (id=1083): openat(0xffffffffffffff9c, 0x0, 0x400, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x1, 0x0, 0xfa11, 0xac}, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x220001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e06, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = syz_open_procfs(0x0, 0x0) getdents(r1, &(0x7f00000001c0)=""/35, 0x23) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000080)={@mcast2, @local, 0x12, 0x15}}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) sendmmsg$inet(r0, 0x0, 0x0, 0x2400c8c4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$nl_route(0x10, 0x3, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x87, 0x7ffc0201}]}) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x8000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000b80)={0xaa, 0x420}) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) 1.502541977s ago: executing program 3 (id=1084): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x80, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x1, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r4, 0x0, 0x0) 1.364559505s ago: executing program 3 (id=1086): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000100)={0x200001ff6000, 0x3}) close(0x5) 1.3029588s ago: executing program 3 (id=1087): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0x26000, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0xc0000025}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000003000/0x400000)=nil) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1], 0x1, 0x20002}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 774.655698ms ago: executing program 0 (id=1090): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl(r0, 0x3b81, &(0x7f0000000180)='\f') ioctl(r0, 0x3ba0, &(0x7f00000001c0)="480000000200000001") ioctl(r0, 0x3b89, &(0x7f0000000200)="28000000010000000300000001") ioctl(r0, 0x3b90, &(0x7f0000000380)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 740.325042ms ago: executing program 2 (id=1091): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x401e, 0x4000, 0x0, 0xf}}], 0x68}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, 0x0) 473.46084ms ago: executing program 4 (id=1092): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000075c0)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e1301", @ANYRES8=r0], 0x16) 455.845069ms ago: executing program 0 (id=1093): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000180), 0x0, 0x80001) sendmsg$can_bcm(r1, &(0x7f0000011840)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) 369.930865ms ago: executing program 0 (id=1094): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x200000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0)={0x0, 0xca}, 0x8) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="92180200"], 0xc) 334.217617ms ago: executing program 1 (id=1095): r0 = socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='+p', 0x2) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x9f527ef601c99f49, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0xc0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 288.902712ms ago: executing program 2 (id=1096): syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c00010100803209"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1bf) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x144002, 0x0) 232.152746ms ago: executing program 0 (id=1097): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000100)={0x200001ff6000, 0x3}) close(0x5) 194.212897ms ago: executing program 0 (id=1098): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil}) 51.921224ms ago: executing program 3 (id=1099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 25.385995ms ago: executing program 3 (id=1100): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, 0x0, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@beacon, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x0) 0s ago: executing program 0 (id=1101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) kernel console output (not intermixed with test programs): -4 [ 187.088077][ T8106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.088338][ T8106] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 187.193178][ T8114] FAULT_INJECTION: forcing a failure. [ 187.193178][ T8114] name failslab, interval 1, probability 5, space 0, times 100 [ 187.193208][ T8114] CPU: 1 UID: 0 PID: 8114 Comm: syz.4.836 Not tainted syzkaller #0 PREEMPT(full) [ 187.193233][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 187.193255][ T8114] Call Trace: [ 187.193264][ T8114] [ 187.193274][ T8114] dump_stack_lvl+0x100/0x190 [ 187.193315][ T8114] should_fail_ex.cold+0x5/0xa [ 187.193349][ T8114] should_failslab+0xc2/0x120 [ 187.193375][ T8114] __kmalloc_cache_noprof+0x91/0x6d0 [ 187.193405][ T8114] ? psi_cgroup_alloc+0x52/0x2d0 [ 187.193436][ T8114] psi_cgroup_alloc+0x52/0x2d0 [ 187.193462][ T8114] cgroup_mkdir+0x527/0x13a0 [ 187.193500][ T8114] ? __pfx_cgroup_mkdir+0x10/0x10 [ 187.193534][ T8114] kernfs_iop_mkdir+0x111/0x190 [ 187.193555][ T8114] ? security_inode_mkdir+0xc9/0x2b0 [ 187.193582][ T8114] vfs_mkdir+0x36d/0x8a0 [ 187.193607][ T8114] filename_mkdirat+0x4c4/0x630 [ 187.193638][ T8114] ? __pfx_filename_mkdirat+0x10/0x10 [ 187.193666][ T8114] ? strncpy_from_user+0x19d/0x2d0 [ 187.193700][ T8114] ? do_getname+0x191/0x390 [ 187.193733][ T8114] __x64_sys_mkdirat+0x89/0xc0 [ 187.193760][ T8114] do_syscall_64+0x123/0x790 [ 187.193788][ T8114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.193810][ T8114] RIP: 0033:0x7f11e839fb19 [ 187.193828][ T8114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.193847][ T8114] RSP: 002b:00007f11e91ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 187.193871][ T8114] RAX: ffffffffffffffda RBX: 00007f11e8625fa0 RCX: 00007f11e839fb19 [ 187.193884][ T8114] RDX: 00000000000001ff RSI: 0000200000006b00 RDI: ffffffffffffff9c [ 187.193896][ T8114] RBP: 00007f11e8437b70 R08: 0000000000000000 R09: 0000000000000000 [ 187.193907][ T8114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.193919][ T8114] R13: 00007f11e8626038 R14: 00007f11e8625fa0 R15: 00007fff32aaa038 [ 187.193947][ T8114] [ 187.263487][ T8114] FAULT_INJECTION: forcing a failure. [ 187.263487][ T8114] name failslab, interval 1, probability 5, space 0, times 99 [ 187.263517][ T8114] CPU: 0 UID: 0 PID: 8114 Comm: syz.4.836 Not tainted syzkaller #0 PREEMPT(full) [ 187.263542][ T8114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 187.263554][ T8114] Call Trace: [ 187.263562][ T8114] [ 187.263569][ T8114] dump_stack_lvl+0x100/0x190 [ 187.263607][ T8114] should_fail_ex.cold+0x5/0xa [ 187.263635][ T8114] should_failslab+0xc2/0x120 [ 187.263661][ T8114] __kmalloc_cache_node_noprof+0x94/0x710 [ 187.263683][ T8114] ? blk_alloc_queue+0x627/0x790 [ 187.263702][ T8114] ? __alloc_disk_node+0x5a/0x730 [ 187.263732][ T8114] __alloc_disk_node+0x5a/0x730 [ 187.263766][ T8114] __blk_alloc_disk+0xd2/0x170 [ 187.263791][ T8114] ? __pfx___blk_alloc_disk+0x10/0x10 [ 187.263814][ T8114] ? __pfx___debug_object_init+0x10/0x10 [ 187.263857][ T8114] ? lockdep_init_map_type+0x5c/0x250 [ 187.263887][ T8114] ? lockdep_init_map_type+0x5c/0x250 [ 187.263919][ T8114] dm_create+0x5e8/0x1530 [ 187.263946][ T8114] dev_create+0x121/0x2a0 [ 187.263972][ T8114] ? __pfx_dev_create+0x10/0x10 [ 187.264004][ T8114] ctl_ioctl+0x4d2/0xcc0 [ 187.264029][ T8114] ? __pfx_dev_create+0x10/0x10 [ 187.264056][ T8114] ? __pfx_ctl_ioctl+0x10/0x10 [ 187.264104][ T8114] ? selinux_file_ioctl+0x1e0/0x290 [ 187.264126][ T8114] dm_ctl_ioctl+0x22/0x30 [ 187.264151][ T8114] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 187.264176][ T8114] __x64_sys_ioctl+0x18e/0x210 [ 187.264197][ T8114] do_syscall_64+0x123/0x790 [ 187.264221][ T8114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.264240][ T8114] RIP: 0033:0x7f11e839fb19 [ 187.264256][ T8114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.264274][ T8114] RSP: 002b:00007f11e91ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.264293][ T8114] RAX: ffffffffffffffda RBX: 00007f11e8625fa0 RCX: 00007f11e839fb19 [ 187.264305][ T8114] RDX: 0000200000006b40 RSI: 00000000c138fd03 RDI: 0000000000000006 [ 187.264317][ T8114] RBP: 00007f11e8437b70 R08: 0000000000000000 R09: 0000000000000000 [ 187.264327][ T8114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.264338][ T8114] R13: 00007f11e8626038 R14: 00007f11e8625fa0 R15: 00007fff32aaa038 [ 187.264362][ T8114] [ 187.287145][ T8112] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 188.132280][ T8143] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.132569][ T8143] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.132824][ T8143] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.133068][ T8143] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.133365][ T8143] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.174849][ T8135] rdma_rxe: rxe_newlink: failed to add ip6tnl0 [ 188.529632][ T8170] bridge_slave_0: left allmulticast mode [ 188.529643][ T8170] bridge_slave_0: left promiscuous mode [ 188.531151][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.533554][ T8170] bridge_slave_1: left allmulticast mode [ 188.533566][ T8170] bridge_slave_1: left promiscuous mode [ 188.533673][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.574940][ T8170] bond0: (slave bond_slave_0): Releasing backup interface [ 188.577342][ T8172] netlink: 52 bytes leftover after parsing attributes in process `syz.4.860'. [ 188.577655][ T8169] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.577923][ T8169] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.578142][ T8169] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.578357][ T8169] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.578578][ T8169] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.631555][ T8174] netlink: 76 bytes leftover after parsing attributes in process `syz.4.860'. [ 188.635747][ T8170] bond0: (slave bond_slave_1): Releasing backup interface [ 188.667740][ T8170] team0: Port device team_slave_0 removed [ 188.677270][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.677288][ T8170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.680479][ T8170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.680495][ T8170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.686299][ T8170] net_ratelimit: 171 callbacks suppressed [ 188.686311][ T8170] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 188.753029][ T8174] netlink: 52 bytes leftover after parsing attributes in process `syz.4.860'. [ 188.767247][ T5351] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.820166][ T5723] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 188.899354][ T8181] FAULT_INJECTION: forcing a failure. [ 188.899354][ T8181] name failslab, interval 1, probability 5, space 0, times 98 [ 188.899382][ T8181] CPU: 1 UID: 0 PID: 8181 Comm: syz.4.864 Not tainted syzkaller #0 PREEMPT(full) [ 188.899401][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 188.899412][ T8181] Call Trace: [ 188.899419][ T8181] [ 188.899429][ T8181] dump_stack_lvl+0x100/0x190 [ 188.899463][ T8181] should_fail_ex.cold+0x5/0xa [ 188.899491][ T8181] should_failslab+0xc2/0x120 [ 188.899512][ T8181] __kmalloc_cache_noprof+0x91/0x6d0 [ 188.899537][ T8181] ? proc_thread_self_get_link+0x1a6/0x210 [ 188.899568][ T8181] proc_thread_self_get_link+0x1a6/0x210 [ 188.899595][ T8181] pick_link+0xabc/0x13c0 [ 188.899612][ T8181] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 188.899640][ T8181] step_into_slowpath+0x9ba/0xf90 [ 188.899662][ T8181] ? __pfx_step_into_slowpath+0x10/0x10 [ 188.899684][ T8181] ? lookup_fast+0x2da/0x600 [ 188.899700][ T8181] ? inode_permission+0x377/0x630 [ 188.899731][ T8181] link_path_walk+0xe4a/0x1bd0 [ 188.899757][ T8181] path_openat+0x1a7/0x23f0 [ 188.899787][ T8181] ? __pfx_path_openat+0x10/0x10 [ 188.899815][ T8181] do_file_open+0x20e/0x430 [ 188.899838][ T8181] ? __pfx_do_file_open+0x10/0x10 [ 188.899875][ T8181] ? _raw_spin_unlock+0x28/0x50 [ 188.899893][ T8181] ? alloc_fd+0x471/0x7a0 [ 188.899926][ T8181] do_sys_openat2+0x163/0x1d0 [ 188.899952][ T8181] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.899979][ T8181] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 188.900012][ T8181] __x64_sys_openat+0x12d/0x210 [ 188.900040][ T8181] ? __pfx___x64_sys_openat+0x10/0x10 [ 188.900081][ T8181] do_syscall_64+0x123/0x790 [ 188.900109][ T8181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.900131][ T8181] RIP: 0033:0x7f11e836034e [ 188.900150][ T8181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 188.900170][ T8181] RSP: 002b:00007f11e91ebec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.900192][ T8181] RAX: ffffffffffffffda RBX: 00007f11e91ec6c0 RCX: 00007f11e836034e [ 188.900207][ T8181] RDX: 0000000000000002 RSI: 00007f11e91ebf90 RDI: ffffffffffffff9c [ 188.900222][ T8181] RBP: 00007f11e8437b70 R08: 0000000000000000 R09: 0000000000000000 [ 188.900236][ T8181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.900250][ T8181] R13: 00007f11e8626038 R14: 00007f11e8625fa0 R15: 00007fff32aaa038 [ 188.900278][ T8181] [ 188.943533][ T5351] usb 2-1: New USB device found: idVendor=086a, idProduct=0100, bcdDevice=0.01 [ 188.953026][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.953070][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.960190][ T5351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.968008][ T5723] usb 4-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 188.969210][ T5723] usb 4-1: config 0 has no interfaces? [ 188.973371][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.973390][ T5723] usb 4-1: Product: syz [ 188.973405][ T5723] usb 4-1: Manufacturer: syz [ 188.973420][ T5723] usb 4-1: SerialNumber: syz [ 188.982237][ T5723] usb 4-1: config 0 descriptor?? [ 189.005937][ T8181] FAULT_INJECTION: forcing a failure. [ 189.005937][ T8181] name failslab, interval 1, probability 5, space 0, times 97 [ 189.005965][ T8181] CPU: 0 UID: 0 PID: 8181 Comm: syz.4.864 Not tainted syzkaller #0 PREEMPT(full) [ 189.005990][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 189.006002][ T8181] Call Trace: [ 189.006009][ T8181] [ 189.006016][ T8181] dump_stack_lvl+0x100/0x190 [ 189.006055][ T8181] should_fail_ex.cold+0x5/0xa [ 189.006083][ T8181] should_failslab+0xc2/0x120 [ 189.006106][ T8181] kmem_cache_alloc_noprof+0x92/0x6a0 [ 189.006151][ T8181] ? __asan_memcpy+0x3c/0x60 [ 189.006176][ T8181] ? __kernfs_new_node+0xd2/0xa10 [ 189.006200][ T8181] __kernfs_new_node+0xd2/0xa10 [ 189.006222][ T8181] ? __pfx___kernfs_new_node+0x10/0x10 [ 189.006242][ T8181] ? lock_acquire+0x1d1/0x380 [ 189.006271][ T8181] ? kernfs_root+0x23/0x2a0 [ 189.006300][ T8181] ? find_held_lock+0x2b/0x80 [ 189.006321][ T8181] ? kernfs_root+0xee/0x2a0 [ 189.006346][ T8181] ? kernfs_root+0xee/0x2a0 [ 189.006377][ T8181] kernfs_create_dir_ns+0xa4/0x2b0 [ 189.006400][ T8181] cgroup_mkdir+0x407/0x13a0 ** 110 printk messages dropped ** [ 189.056304][ T8181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 ** 367 printk messages dropped ** ** 6 printk messages dropped ** [ 189.324103][ T5723] usb 4-1: USB disconnect, device number 6 [ 189.399197][ T5351] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 189.413944][ T5351] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 189.414376][ T30] audit: type=1400 audit(1793998731.243:898): avc: denied { firmware_load } for pid=5351 comm="kworker/1:3" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 189.466140][ T43] IPVS: starting estimator thread 0... [ 189.547114][ T8189] IPVS: using max 43 ests per chain, 103200 per kthread [ 189.631734][ T8195] tipc: Started in network mode [ 189.631758][ T8195] tipc: Node identity 7f000001, cluster identity 4711 [ 189.632132][ T8195] tipc: Enabling of bearer rejected, failed to enable media [ 189.636291][ T8195] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 189.637335][ T8195] tipc: Enabled bearer , priority 10 [ 190.021484][ T8206] siw: device registration error -23 [ 190.124994][ T8206] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.365529][ T30] audit: type=1400 audit(1793998732.193:899): avc: denied { write } for pid=8219 comm="syz.0.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 190.388755][ T5805] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 190.493648][ T8224] netlink: 52 bytes leftover after parsing attributes in process `syz.0.882'. [ 190.496236][ T8224] netlink: 52 bytes leftover after parsing attributes in process `syz.0.882'. [ 190.548737][ T4936] Bluetooth: hci1: command 0x0406 tx timeout [ 190.564986][ T5805] usb 4-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 190.566048][ T5805] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.566104][ T5805] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 190.566142][ T5805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 190.599754][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 190.617191][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 190.617210][ T5805] usb 4-1: Product: syz [ 190.617226][ T5805] usb 4-1: Manufacturer: syz [ 190.617241][ T5805] usb 4-1: SerialNumber: syz [ 190.621571][ T5805] usb 4-1: config 0 descriptor?? [ 190.626984][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 190.627021][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 190.627097][ T5622] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.627147][ T4936] Bluetooth: hci4: command 0x0c1a tx timeout [ 190.642986][ T10] hid-sensor-hub 0003:1234:5678.0002: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 190.697470][ T45] tipc: Node number set to 2130706433 [ 190.777038][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 190.777745][ T24] usb 3-1: New USB device found: idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.793941][ T24] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 190.794003][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 190.794028][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 190.794050][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 190.794074][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 190.794095][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.794147][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.903996][ T5805] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 190.935759][ T5805] usb 4-1: USB disconnect, device number 7 [ 190.980873][ T8232] fido_id[8232]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 191.014053][ T7466] udevd[7466]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.142790][ T24] usb 3-1: usb_control_msg returned -71 [ 191.142816][ T24] usbtmc 3-1:16.0: can't read capabilities [ 191.169184][ T24] usb 3-1: USB disconnect, device number 5 [ 191.829527][ T5723] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 191.928062][ T5805] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.962682][ T8259] FAULT_INJECTION: forcing a failure. [ 191.962682][ T8259] name failslab, interval 1, probability 5, space 0, times 90 [ 191.962711][ T8259] CPU: 1 UID: 0 PID: 8259 Comm: syz.2.896 Not tainted syzkaller #0 PREEMPT(full) [ 191.962735][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 191.962748][ T8259] Call Trace: [ 191.962756][ T8259] [ 191.962764][ T8259] dump_stack_lvl+0x100/0x190 [ 191.962804][ T8259] should_fail_ex.cold+0x5/0xa [ 191.962836][ T8259] should_failslab+0xc2/0x120 [ 191.962861][ T8259] __kmalloc_cache_noprof+0x91/0x6d0 [ 191.962889][ T8259] ? lock_acquire+0x1d1/0x380 [ 191.962917][ T8259] ? dm_open+0x51/0x130 [ 191.962950][ T8259] dm_open+0x51/0x130 [ 191.962977][ T8259] ? __pfx_dm_open+0x10/0x10 [ 191.963003][ T8259] misc_open+0x26d/0x450 [ 191.963034][ T8259] ? __pfx_misc_open+0x10/0x10 [ 191.963063][ T8259] chrdev_open+0x234/0x6a0 [ 191.963091][ T8259] ? __pfx_chrdev_open+0x10/0x10 [ 191.963117][ T8259] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 191.963156][ T8259] do_dentry_open+0x674/0x1470 [ 191.963179][ T8259] ? __pfx_chrdev_open+0x10/0x10 [ 191.963209][ T8259] vfs_open_consume+0xcc/0x460 [ 191.963241][ T8259] path_openat+0x1547/0x23f0 [ 191.963272][ T8259] ? __pfx_path_openat+0x10/0x10 [ 191.963307][ T8259] do_file_open+0x20e/0x430 [ 191.963335][ T8259] ? __pfx_do_file_open+0x10/0x10 [ 191.963377][ T8259] ? _raw_spin_unlock+0x28/0x50 [ 191.963397][ T8259] ? alloc_fd+0x471/0x7a0 [ 191.963432][ T8259] do_sys_openat2+0x163/0x1d0 [ 191.963464][ T8259] ? __pfx_do_sys_openat2+0x10/0x10 [ 191.963503][ T8259] __x64_sys_openat+0x12d/0x210 [ 191.963531][ T8259] ? __pfx___x64_sys_openat+0x10/0x10 [ 191.963572][ T8259] do_syscall_64+0x123/0x790 [ 191.963600][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.963627][ T8259] RIP: 0033:0x7f4b5759fb19 [ 191.963646][ T8259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.963667][ T8259] RSP: 002b:00007f4b5838b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 191.963689][ T8259] RAX: ffffffffffffffda RBX: 00007f4b57825fa0 RCX: 00007f4b5759fb19 [ 191.963704][ T8259] RDX: 0000000000000100 RSI: 0000200000006ac0 RDI: ffffffffffffff9c [ 191.963719][ T8259] RBP: 00007f4b57637b70 R08: 0000000000000000 R09: 0000000000000000 [ 191.963732][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.963747][ T8259] R13: 00007f4b57826038 R14: 00007f4b57825fa0 R15: 00007ffc1d044028 [ 191.963777][ T8259] [ 191.977786][ T5723] usb 5-1: New USB device found: idVendor=086a, idProduct=0100, bcdDevice=0.01 [ 192.000369][ T5723] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.012698][ T5723] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 192.175088][ T5805] usb 1-1: Using ep0 maxpacket: 32 [ 192.193456][ T5805] usb 1-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 192.227278][ T5805] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 192.227317][ T5805] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 192.227346][ T5805] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.227376][ T5805] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 192.283290][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.283308][ T5805] usb 1-1: Product: syz [ 192.283322][ T5805] usb 1-1: Manufacturer: syz [ 192.283335][ T5805] usb 1-1: SerialNumber: syz [ 192.285094][ T8247] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 192.326916][ T5723] usb 5-1: emi26_load_firmware - request_firmware() failed [ 192.326937][ T5723] usb 5-1: emi26_load_firmware - error loading firmware: error = -2 [ 192.327000][ T5723] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 192.383962][ T5351] usb 2-1: emi26_load_firmware - request_firmware() failed [ 192.383997][ T5351] usb 2-1: emi26_load_firmware - error loading firmware: error = -2 [ 192.384039][ T5351] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 192.415143][ T5351] usb 2-1: USB disconnect, device number 4 [ 192.432920][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 192.472026][ T5805] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input6 [ 192.472604][ T5723] usb 5-1: USB disconnect, device number 4 [ 192.597510][ T8269] FAULT_INJECTION: forcing a failure. [ 192.597510][ T8269] name failslab, interval 1, probability 5, space 0, times 100 [ 192.597535][ T8269] CPU: 1 UID: 0 PID: 8269 Comm: syz.3.900 Not tainted syzkaller #0 PREEMPT(full) [ 192.597558][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 192.597573][ T8269] Call Trace: [ 192.597580][ T8269] [ 192.597589][ T8269] dump_stack_lvl+0x100/0x190 [ 192.597627][ T8269] should_fail_ex.cold+0x5/0xa [ 192.597659][ T8269] should_failslab+0xc2/0x120 [ 192.597685][ T8269] kmem_cache_alloc_noprof+0x92/0x6a0 [ 192.597719][ T8269] ? alloc_empty_file+0x5b/0x1c0 [ 192.597753][ T8269] alloc_empty_file+0x5b/0x1c0 [ 192.597783][ T8269] path_openat+0xd6/0x23f0 [ 192.597813][ T8269] ? __pfx_path_openat+0x10/0x10 [ 192.597846][ T8269] do_file_open+0x20e/0x430 [ 192.597874][ T8269] ? __pfx_do_file_open+0x10/0x10 [ 192.597916][ T8269] ? _raw_spin_unlock+0x28/0x50 [ 192.597936][ T8269] ? alloc_fd+0x471/0x7a0 [ 192.597970][ T8269] do_sys_openat2+0x163/0x1d0 [ 192.598002][ T8269] ? __pfx_do_sys_openat2+0x10/0x10 [ 192.598031][ T8269] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 192.598064][ T8269] __x64_sys_openat+0x12d/0x210 [ 192.598094][ T8269] ? __pfx___x64_sys_openat+0x10/0x10 [ 192.598143][ T8269] do_syscall_64+0x123/0x790 [ 192.598172][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.598193][ T8269] RIP: 0033:0x7fe417b6034e [ 192.598211][ T8269] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 192.598231][ T8269] RSP: 002b:00007fe418993ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 192.598252][ T8269] RAX: ffffffffffffffda RBX: 00007fe4189946c0 RCX: 00007fe417b6034e [ 192.598266][ T8269] RDX: 0000000000000002 RSI: 00007fe418993f90 RDI: ffffffffffffff9c [ 192.598279][ T8269] RBP: 00007fe417c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 192.598291][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.598304][ T8269] R13: 00007fe417e26038 R14: 00007fe417e25fa0 R15: 00007ffc5bcdb6c8 [ 192.598330][ T8269] [ 192.600764][ T8269] FAULT_INJECTION: forcing a failure. [ 192.600764][ T8269] name failslab, interval 1, probability 5, space 0, times 99 [ 192.600792][ T8269] CPU: 1 UID: 0 PID: 8269 Comm: syz.3.900 Not tainted syzkaller #0 PREEMPT(full) [ 192.600816][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 192.600828][ T8269] Call Trace: [ 192.600840][ T8269] [ 192.600848][ T8269] dump_stack_lvl+0x100/0x190 [ 192.600888][ T8269] should_fail_ex.cold+0x5/0xa [ 192.600923][ T8269] should_failslab+0xc2/0x120 [ 192.600949][ T8269] kmem_cache_alloc_noprof+0x92/0x6a0 [ 192.600982][ T8269] ? __asan_memcpy+0x3c/0x60 [ 192.601012][ T8269] ? __kernfs_new_node+0xd2/0xa10 [ 192.601037][ T8269] __kernfs_new_node+0xd2/0xa10 [ 192.601056][ T8269] ? lock_acquire+0x1d1/0x380 [ 192.601084][ T8269] ? kernfs_link_sibling+0x379/0x6f0 [ 192.601125][ T8269] ? __pfx___kernfs_new_node+0x10/0x10 [ 192.601150][ T8269] ? lock_acquire+0x1d1/0x380 [ 192.601177][ T8269] ? kernfs_root+0x23/0x2a0 [ 192.601207][ T8269] ? find_held_lock+0x2b/0x80 [ 192.601229][ T8269] ? kernfs_root+0xee/0x2a0 [ 192.601258][ T8269] ? kernfs_root+0xee/0x2a0 [ 192.601294][ T8269] kernfs_new_node+0x194/0x200 [ 192.601317][ T8269] ? __pfx_kernfs_new_node+0x10/0x10 [ 192.601336][ T8269] ? kernfs_add_one+0x213/0xb40 [ 192.601356][ T8269] __kernfs_create_file+0x53/0x350 [ 192.601385][ T8269] cgroup_addrm_files+0x48e/0xd30 [ 192.601417][ T8269] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 192.601445][ T8269] ? css_next_child+0xcf/0x2e0 [ 192.601472][ T8269] ? css_next_descendant_pre+0x58/0x1a0 [ 192.601502][ T8269] css_populate_dir+0x343/0x590 [ 192.601528][ T8269] cgroup_mkdir+0x975/0x13a0 [ 192.601565][ T8269] ? __pfx_cgroup_mkdir+0x10/0x10 [ 192.601597][ T8269] kernfs_iop_mkdir+0x111/0x190 [ 192.601615][ T8269] ? security_inode_mkdir+0xc9/0x2b0 [ 192.601640][ T8269] vfs_mkdir+0x36d/0x8a0 [ 192.601664][ T8269] filename_mkdirat+0x4c4/0x630 [ 192.601692][ T8269] ? __pfx_filename_mkdirat+0x10/0x10 [ 192.601718][ T8269] ? strncpy_from_user+0x19d/0x2d0 [ 192.601750][ T8269] ? do_getname+0x191/0x390 [ 192.601783][ T8269] __x64_sys_mkdirat+0x89/0xc0 [ 192.601810][ T8269] do_syscall_64+0x123/0x790 [ 192.601839][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.601861][ T8269] RIP: 0033:0x7fe417b9fb19 [ 192.601879][ T8269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.601901][ T8269] RSP: 002b:00007fe418994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 192.601922][ T8269] RAX: ffffffffffffffda RBX: 00007fe417e25fa0 RCX: 00007fe417b9fb19 [ 192.601936][ T8269] RDX: 00000000000001ff RSI: 0000200000006b00 RDI: ffffffffffffff9c [ 192.601949][ T8269] RBP: 00007fe417c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 192.601962][ T8269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.601974][ T8269] R13: 00007fe417e26038 R14: 00007fe417e25fa0 R15: 00007ffc5bcdb6c8 [ 192.602001][ T8269] [ 192.602104][ T8269] cgroup: cgroup_addrm_files: failed to add notify_on_release, err=-12 ** 272 printk messages dropped ** ** 24 printk messages dropped ** [ 193.199425][ T5805] rc_core: IR keymap rc-imon-pad not found [ 193.199437][ T5805] Registered IR keymap rc-empty [ 193.199661][ T5805] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 193.199671][ T5805] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 193.222752][ T5805] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 193.248731][ T5805] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input7 [ 193.281732][ T5805] imon 1-1:155.0: iMON device (15c2:ffdc) on usb<1:7> initialized [ 193.553368][ T5805] usb 1-1: USB disconnect, device number 7 [ 193.910061][ T8292] FAULT_INJECTION: forcing a failure. [ 193.910061][ T8292] name failslab, interval 1, probability 5, space 0, times 100 [ 193.910102][ T8292] CPU: 1 UID: 0 PID: 8292 Comm: syz.3.908 Not tainted syzkaller #0 PREEMPT(full) [ 193.910129][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 193.910142][ T8292] Call Trace: [ 193.910150][ T8292] [ 193.910160][ T8292] dump_stack_lvl+0x100/0x190 [ 193.910201][ T8292] should_fail_ex.cold+0x5/0xa [ 193.910234][ T8292] should_failslab+0xc2/0x120 [ 193.910259][ T8292] __kmalloc_noprof+0xfc/0x840 [ 193.910289][ T8292] ? tomoyo_encode2+0xfb/0x3c0 [ 193.910316][ T8292] tomoyo_encode2+0xfb/0x3c0 [ 193.910341][ T8292] tomoyo_encode+0x29/0x50 [ 193.910362][ T8292] tomoyo_realpath_from_path+0x18c/0x690 [ 193.910388][ T8292] tomoyo_check_open_permission+0x2af/0x3c0 [ 193.910411][ T8292] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 193.910435][ T8292] ? hook_file_open+0x245/0x8e0 [ 193.910450][ T8292] ? avc_has_perm_noaudit+0x11e/0x470 [ 193.910475][ T8292] ? __pfx_selinux_inode_permission+0x10/0x10 [ 193.910498][ T8292] tomoyo_file_open+0x6b/0x90 [ 193.910514][ T8292] security_file_open+0xb5/0x1e0 [ 193.910528][ T8292] do_dentry_open+0x552/0x1470 [ 193.910545][ T8292] vfs_open_consume+0xcc/0x460 [ 193.910564][ T8292] path_openat+0x1547/0x23f0 [ 193.910582][ T8292] ? __pfx_path_openat+0x10/0x10 [ 193.910604][ T8292] do_file_open+0x20e/0x430 [ 193.910621][ T8292] ? __pfx_do_file_open+0x10/0x10 [ 193.910646][ T8292] ? _raw_spin_unlock+0x28/0x50 [ 193.910658][ T8292] ? alloc_fd+0x471/0x7a0 [ 193.910678][ T8292] do_sys_openat2+0x163/0x1d0 [ 193.910696][ T8292] ? __pfx_do_sys_openat2+0x10/0x10 [ 193.910718][ T8292] __x64_sys_openat+0x12d/0x210 [ 193.910735][ T8292] ? __pfx___x64_sys_openat+0x10/0x10 [ 193.910758][ T8292] do_syscall_64+0x123/0x790 [ 193.910774][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.910788][ T8292] RIP: 0033:0x7fe417b9fb19 [ 193.910800][ T8292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.910812][ T8292] RSP: 002b:00007fe418994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.910825][ T8292] RAX: ffffffffffffffda RBX: 00007fe417e25fa0 RCX: 00007fe417b9fb19 [ 193.910836][ T8292] RDX: 0000000000000100 RSI: 0000200000006ac0 RDI: ffffffffffffff9c [ 193.910844][ T8292] RBP: 00007fe417c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 193.910851][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.910858][ T8292] R13: 00007fe417e26038 R14: 00007fe417e25fa0 R15: 00007ffc5bcdb6c8 [ 193.910874][ T8292] [ 193.910893][ T8292] ERROR: Out of memory at tomoyo_realpath_from_path. [ 193.910908][ T8292] FAULT_INJECTION: forcing a failure. [ 193.910908][ T8292] name failslab, interval 1, probability 5, space 0, times 99 [ 193.910922][ T8292] CPU: 1 UID: 0 PID: 8292 Comm: syz.3.908 Not tainted syzkaller #0 PREEMPT(full) [ 193.910940][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 193.910949][ T8292] Call Trace: [ 193.910954][ T8292] [ 193.910959][ T8292] dump_stack_lvl+0x100/0x190 [ 193.910983][ T8292] should_fail_ex.cold+0x5/0xa [ 193.911003][ T8292] should_failslab+0xc2/0x120 [ 193.911019][ T8292] __kmalloc_cache_noprof+0x91/0x6d0 [ 193.911037][ T8292] ? lock_acquire+0x1d1/0x380 [ 193.911054][ T8292] ? dm_open+0x51/0x130 [ 193.911074][ T8292] dm_open+0x51/0x130 [ 193.911096][ T8292] ? __pfx_dm_open+0x10/0x10 [ 193.911114][ T8292] misc_open+0x26d/0x450 [ 193.911135][ T8292] ? __pfx_misc_open+0x10/0x10 [ 193.911153][ T8292] chrdev_open+0x234/0x6a0 [ 193.911170][ T8292] ? __pfx_chrdev_open+0x10/0x10 [ 193.911188][ T8292] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 193.911213][ T8292] do_dentry_open+0x674/0x1470 [ 193.911226][ T8292] ? __pfx_chrdev_open+0x10/0x10 [ 193.911243][ T8292] vfs_open_consume+0xcc/0x460 [ 193.911262][ T8292] path_openat+0x1547/0x23f0 [ 193.911280][ T8292] ? __pfx_path_openat+0x10/0x10 [ 193.911300][ T8292] do_file_open+0x20e/0x430 [ 193.911317][ T8292] ? __pfx_do_file_open+0x10/0x10 [ 193.911343][ T8292] ? _raw_spin_unlock+0x28/0x50 [ 193.911355][ T8292] ? alloc_fd+0x471/0x7a0 [ 193.911380][ T8292] do_sys_openat2+0x163/0x1d0 [ 193.911398][ T8292] ? __pfx_do_sys_openat2+0x10/0x10 [ 193.911420][ T8292] __x64_sys_openat+0x12d/0x210 [ 193.911438][ T8292] ? __pfx___x64_sys_openat+0x10/0x10 [ 193.911462][ T8292] do_syscall_64+0x123/0x790 [ 193.911478][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.911490][ T8292] RIP: 0033:0x7fe417b9fb19 [ 193.911499][ T8292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.911511][ T8292] RSP: 002b:00007fe418994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 193.911522][ T8292] RAX: ffffffffffffffda RBX: 00007fe417e25fa0 RCX: 00007fe417b9fb19 [ 193.911529][ T8292] RDX: 0000000000000100 RSI: 0000200000006ac0 RDI: ffffffffffffff9c [ 193.911537][ T8292] RBP: 00007fe417c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 193.911544][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.911552][ T8292] R13: 00007fe417e26038 R14: 00007fe417e25fa0 R15: 00007ffc5bcdb6c8 [ 193.911567][ T8292] [ 193.960844][ T8292] FAULT_INJECTION: forcing a failure. [ 193.960844][ T8292] name failslab, interval 1, probability 5, space 0, times 98 [ 193.960869][ T8292] CPU: 1 UID: 0 PID: 8292 Comm: syz.3.908 Not tainted syzkaller #0 PREEMPT(full) [ 193.960889][ T8292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 193.960901][ T8292] Call Trace: [ 193.960907][ T8292] [ 193.960915][ T8292] dump_stack_lvl+0x100/0x190 [ 193.960951][ T8292] should_fail_ex.cold+0x5/0xa [ 193.960979][ T8292] should_failslab+0xc2/0x120 [ 193.961001][ T8292] kmem_cache_alloc_noprof+0x92/0x6a0 [ 193.961028][ T8292] ? __asan_memcpy+0x3c/0x60 [ 193.961054][ T8292] ? __kernfs_new_node+0xd2/0xa10 [ 193.961078][ T8292] __kernfs_new_node+0xd2/0xa10 [ 193.961100][ T8292] ? lock_acquire+0x1d1/0x380 [ 193.961127][ T8292] ? __pfx___kernfs_new_node+0x10/0x10 [ 193.961149][ T8292] ? lock_acquire+0x1d1/0x380 [ 193.961171][ T8292] ? kernfs_root+0x23/0x2a0 [ 193.961197][ T8292] ? find_held_lock+0x2b/0x80 [ 193.961217][ T8292] ? kernfs_root+0xee/0x2a0 [ 193.961244][ T8292] ? kernfs_root+0xee/0x2a0 [ 193.961278][ T8292] kernfs_new_node+0x194/0x200 [ 193.961300][ T8292] ? __pfx_kernfs_new_node+0x10/0x10 [ 193.961320][ T8292] ? kernfs_add_one+0x213/0xb40 [ 193.961342][ T8292] __kernfs_create_file+0x53/0x350 [ 193.961367][ T8292] cgroup_addrm_files+0x48e/0xd30 [ 193.961398][ T8292] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 193.961426][ T8292] ? css_next_descendant_pre+0x58/0x1a0 [ 193.961455][ T8292] css_populate_dir+0x161/0x590 [ 193.961479][ T8292] cgroup_apply_control_enable+0x441/0xdd0 [ 193.961518][ T8292] cgroup_mkdir+0x9da/0x13a0 [ 193.961550][ T8292] ? __pfx_cgroup_mkdir+0x10/0x10 [ 193.961578][ T8292] kernfs_iop_mkdir+0x111/0x190 [ 193.961596][ T8292] ? security_inode_mkdir+0xc9/0x2b0 [ 193.961619][ T8292] vfs_mkdir+0x36d/0x8a0 [ 193.961640][ T8292] filename_mkdirat+0x4c4/0x630 [ 193.961669][ T8292] ? __pfx_filename_mkdirat+0x10/0x10 [ 193.961693][ T8292] ? strncpy_from_user+0x19d/0x2d0 [ 193.961722][ T8292] ? do_getname+0x191/0x390 [ 193.961750][ T8292] __x64_sys_mkdirat+0x89/0xc0 [ 193.961775][ T8292] do_syscall_64+0x123/0x790 [ 193.961800][ T8292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.961819][ T8292] RIP: 0033:0x7fe417b9fb19 [ 193.961835][ T8292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.961853][ T8292] RSP: 002b:00007fe418994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 193.961872][ T8292] RAX: ffffffffffffffda RBX: 00007fe417e25fa0 RCX: 00007fe417b9fb19 [ 193.961884][ T8292] RDX: 00000000000001ff RSI: 0000200000006b00 RDI: ffffffffffffff9c [ 193.961897][ T8292] RBP: 00007fe417c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 193.961909][ T8292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.961921][ T8292] R13: 00007fe417e26038 R14: 00007fe417e25fa0 R15: 00007ffc5bcdb6c8 [ 193.961948][ T8292] [ 193.966140][ T8292] cgroup: cgroup_addrm_files: failed to add usage_percpu_user, err=-12 [ 194.068704][ C0] net_ratelimit: 1067 callbacks suppressed [ 194.370227][ T4936] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 195.027155][ T5805] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 195.134539][ T8319] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.179558][ T5805] usb 1-1: Using ep0 maxpacket: 16 [ 195.180364][ T5805] usb 1-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 195.181751][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 195.186586][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.186608][ T5805] usb 1-1: Product: syz [ 195.186621][ T5805] usb 1-1: Manufacturer: syz [ 195.186632][ T5805] usb 1-1: SerialNumber: syz [ 195.196834][ T5805] usb 1-1: config 0 descriptor?? [ 195.215622][ T5805] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 195.215647][ T5805] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 195.479840][ T5805] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 195.554347][ T5805] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 195.554365][ T5805] em28xx 1-1:0.0: board has no eeprom [ 195.636865][ T5805] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 195.636887][ T5805] em28xx 1-1:0.0: dvb set to bulk mode. [ 195.637383][ T24] em28xx 1-1:0.0: Binding DVB extension [ 195.668079][ T5805] usb 1-1: USB disconnect, device number 8 [ 195.680670][ T5805] em28xx 1-1:0.0: Disconnecting em28xx [ 195.786539][ T24] em28xx 1-1:0.0: Registering input extension [ 195.803098][ T5805] em28xx 1-1:0.0: Closing input extension [ 195.875949][ T5805] em28xx: Freeing device [ 196.456374][ T4936] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 196.609977][ T8370] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 196.610030][ T8370] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 196.625182][ T8372] bridge_slave_0: left allmulticast mode [ 196.625199][ T8372] bridge_slave_0: left promiscuous mode [ 196.625359][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.649055][ T8372] bridge_slave_1: left allmulticast mode [ 196.649067][ T8372] bridge_slave_1: left promiscuous mode [ 196.649160][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.671812][ T8373] netlink: 52 bytes leftover after parsing attributes in process `syz.1.928'. [ 196.695006][ T8372] bond0: (slave bond_slave_0): Releasing backup interface [ 196.709889][ T8372] bond0: (slave bond_slave_1): Releasing backup interface [ 196.734139][ T8372] team0: Port device team_slave_0 removed [ 196.740555][ T8374] netlink: 52 bytes leftover after parsing attributes in process `syz.1.928'. [ 196.763625][ T8372] team0: Port device team_slave_1 removed [ 196.764103][ T8372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.764114][ T8372] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.785415][ T8376] FAULT_INJECTION: forcing a failure. [ 196.785415][ T8376] name failslab, interval 1, probability 5, space 0, times 95 [ 196.785443][ T8376] CPU: 1 UID: 0 PID: 8376 Comm: syz.4.929 Not tainted syzkaller #0 PREEMPT(full) [ 196.785469][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 196.785481][ T8376] Call Trace: [ 196.785488][ T8376] [ 196.785495][ T8376] dump_stack_lvl+0x100/0x190 [ 196.785530][ T8376] should_fail_ex.cold+0x5/0xa [ 196.785561][ T8376] should_failslab+0xc2/0x120 [ 196.785590][ T8376] kmem_cache_alloc_noprof+0x92/0x6a0 [ 196.785621][ T8376] ? seq_open+0x55/0x170 [ 196.785646][ T8376] seq_open+0x55/0x170 [ 196.785668][ T8376] __seq_open_private+0x3e/0xd0 [ 196.785691][ T8376] pid_smaps_open+0x29/0xf0 [ 196.785716][ T8376] do_dentry_open+0x674/0x1470 [ 196.785736][ T8376] ? __pfx_pid_smaps_open+0x10/0x10 [ 196.785763][ T8376] vfs_open_consume+0xcc/0x460 [ 196.785791][ T8376] path_openat+0x1547/0x23f0 [ 196.785819][ T8376] ? __pfx_path_openat+0x10/0x10 [ 196.785848][ T8376] do_file_open+0x20e/0x430 [ 196.785872][ T8376] ? __pfx_do_file_open+0x10/0x10 [ 196.785903][ T8376] ? __pfx_kfree_link+0x10/0x10 [ 196.785931][ T8376] ? _raw_spin_unlock+0x28/0x50 [ 196.785950][ T8376] ? alloc_fd+0x471/0x7a0 [ 196.785980][ T8376] do_sys_openat2+0x163/0x1d0 [ 196.786017][ T8376] ? __pfx_do_sys_openat2+0x10/0x10 [ 196.786043][ T8376] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.786074][ T8376] __x64_sys_openat+0x12d/0x210 [ 196.786099][ T8376] ? __pfx___x64_sys_openat+0x10/0x10 [ 196.786137][ T8376] do_syscall_64+0x123/0x790 [ 196.786165][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.786184][ T8376] RIP: 0033:0x7f11e836034e [ 196.786201][ T8376] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 196.786219][ T8376] RSP: 002b:00007f11e91ebec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.786239][ T8376] RAX: ffffffffffffffda RBX: 00007f11e91ec6c0 RCX: 00007f11e836034e [ 196.786251][ T8376] RDX: 0000000000000002 RSI: 00007f11e91ebf90 RDI: ffffffffffffff9c [ 196.786263][ T8376] RBP: 00007f11e8437b70 R08: 0000000000000000 R09: 0000000000000000 [ 196.786275][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.786287][ T8376] R13: 00007f11e8626038 R14: 00007f11e8625fa0 R15: 00007fff32aaa038 [ 196.786311][ T8376] [ 196.803385][ T8376] FAULT_INJECTION: forcing a failure. [ 196.803385][ T8376] name failslab, interval 1, probability 5, space 0, times 94 [ 196.803417][ T8376] CPU: 1 UID: 0 PID: 8376 Comm: syz.4.929 Not tainted syzkaller #0 PREEMPT(full) [ 196.803437][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 196.803448][ T8376] Call Trace: [ 196.803454][ T8376] [ 196.803462][ T8376] dump_stack_lvl+0x100/0x190 [ 196.803497][ T8376] should_fail_ex.cold+0x5/0xa [ 196.803525][ T8376] should_failslab+0xc2/0x120 [ 196.803546][ T8376] kmem_cache_alloc_noprof+0x92/0x6a0 [ 196.803580][ T8376] ? alloc_empty_file+0x5b/0x1c0 [ 196.803608][ T8376] alloc_empty_file+0x5b/0x1c0 [ 196.803633][ T8376] path_openat+0xd6/0x23f0 [ 196.803659][ T8376] ? __pfx_path_openat+0x10/0x10 [ 196.803688][ T8376] do_file_open+0x20e/0x430 [ 196.803713][ T8376] ? __pfx_do_file_open+0x10/0x10 [ 196.803751][ T8376] ? _raw_spin_unlock+0x28/0x50 [ 196.803769][ T8376] ? alloc_fd+0x471/0x7a0 [ 196.803798][ T8376] do_sys_openat2+0x163/0x1d0 [ 196.803822][ T8376] ? __pfx_do_sys_openat2+0x10/0x10 [ 196.803855][ T8376] __x64_sys_openat+0x12d/0x210 [ 196.803879][ T8376] ? __pfx___x64_sys_openat+0x10/0x10 [ 196.803912][ T8376] do_syscall_64+0x123/0x790 [ 196.803935][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.803955][ T8376] RIP: 0033:0x7f11e839fb19 [ 196.803971][ T8376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.803993][ T8376] RSP: 002b:00007f11e91ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.804011][ T8376] RAX: ffffffffffffffda RBX: 00007f11e8625fa0 RCX: 00007f11e839fb19 [ 196.804023][ T8376] RDX: 0000000000000100 RSI: 0000200000006ac0 RDI: ffffffffffffff9c [ 196.804034][ T8376] RBP: 00007f11e8437b70 R08: 0000000000000000 R09: 0000000000000000 [ 196.804046][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.804059][ T8376] R13: 00007f11e8626038 R14: 00007f11e8625fa0 R15: 00007fff32aaa038 [ 196.804083][ T8376] [ 196.810937][ T8376] FAULT_INJECTION: forcing a failure. [ 196.810937][ T8376] name failslab, interval 1, probability 5, space 0, times 93 [ 196.810962][ T8376] CPU: 1 UID: 0 PID: 8376 Comm: syz.4.929 Not tainted syzkaller #0 PREEMPT(full) [ 196.810982][ T8376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 196.810993][ T8376] Call Trace: [ 196.810999][ T8376] [ 196.811006][ T8376] dump_stack_lvl+0x100/0x190 [ 196.811042][ T8376] should_fail_ex.cold+0x5/0xa [ 196.811070][ T8376] should_failslab+0xc2/0x120 [ 196.811093][ T8376] kmem_cache_alloc_noprof+0x92/0x6a0 [ 196.811120][ T8376] ? __asan_memcpy+0x3c/0x60 [ 196.811144][ T8376] ? __kernfs_new_node+0xd2/0xa10 [ 196.811170][ T8376] __kernfs_new_node+0xd2/0xa10 [ 196.811187][ T8376] ? lock_acquire+0x1d1/0x380 [ 196.811215][ T8376] ? __pfx___kernfs_new_node+0x10/0x10 [ 196.811235][ T8376] ? lock_acquire+0x1d1/0x380 [ 196.811258][ T8376] ? kernfs_root+0x23/0x2a0 [ 196.811283][ T8376] ? find_held_lock+0x2b/0x80 [ 196.811302][ T8376] ? kernfs_root+0xee/0x2a0 [ 196.811326][ T8376] ? kernfs_root+0xee/0x2a0 [ 196.811357][ T8376] kernfs_new_node+0x194/0x200 [ 196.811376][ T8376] ? __pfx_kernfs_new_node+0x10/0x10 [ 196.811396][ T8376] ? kernfs_add_one+0x213/0xb40 [ 196.811417][ T8376] __kernfs_create_file+0x53/0x350 [ 196.811442][ T8376] cgroup_addrm_files+0x48e/0xd30 [ 196.811472][ T8376] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 196.811500][ T8376] ? css_next_descendant_pre+0x58/0x1a0 [ 196.811529][ T8376] css_populate_dir+0x161/0x590 [ 196.811551][ T8376] cgroup_apply_control_enable+0x441/0xdd0 [ 196.811593][ T8376] cgroup_mkdir+0x9da/0x13a0 [ 196.811625][ T8376] ? __pfx_cgroup_mkdir+0x10/0x10 [ 196.811654][ T8376] kernfs_iop_mkdir+0x111/0x190 [ 196.811671][ T8376] ? security_inode_mkdir+0xc9/0x2b0 [ 196.811694][ T8376] vfs_mkdir+0x36d/0x8a0 [ 196.811719][ T8376] filename_mkdirat+0x4c4/0x630 [ 196.811748][ T8376] ? __pfx_filename_mkdirat+0x10/0x10 [ 196.811773][ T8376] ? strncpy_from_user+0x19d/0x2d0 [ 196.811803][ T8376] ? do_getname+0x191/0x390 [ 196.811832][ T8376] __x64_sys_mkdirat+0x89/0xc0 [ 196.811856][ T8376] do_syscall_64+0x123/0x790 [ 196.811880][ T8376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.811898][ T8376] RIP: 0033:0x7f11e839fb19 [ 196.811913][ T8376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.811930][ T8376] RSP: 002b:00007f11e91ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 196.811948][ T8376] RAX: ffffffffffffffda RBX: 00007f11e8625fa0 RCX: 00007f11e839fb19 [ 196.811960][ T8376] RDX: 00000000000001ff RSI: 0000200000006b00 RDI: ffffffffffffff9c [ 196.811971][ T8376] RBP: 00007f11e8437b70 R08: 0000000000000000 R09: 0000000000000000 [ 196.811982][ T8376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.811992][ T8376] R13: 00007f11e8626038 R14: 00007f11e8625fa0 R15: 00007fff32aaa038 [ 196.812020][ T8376] [ 196.814477][ T8376] cgroup: cgroup_addrm_files: failed to add usage_sys, err=-12 [ 196.865433][ T8372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.865448][ T8372] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.312870][ T8381] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 197.322163][ T8385] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 197.693741][ T30] audit: type=1400 audit(1793998739.523:900): avc: denied { create } for pid=8397 comm="syz.4.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.776883][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 197.926866][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 197.932737][ T24] usb 2-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 197.933690][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 197.935576][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.935595][ T24] usb 2-1: Product: syz [ 197.935608][ T24] usb 2-1: Manufacturer: syz [ 197.935618][ T24] usb 2-1: SerialNumber: syz [ 197.959719][ T8310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 197.992090][ T24] usb 2-1: config 0 descriptor?? [ 198.006628][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 198.006657][ T24] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 198.154150][ T8407] netlink: 52 bytes leftover after parsing attributes in process `syz.2.943'. [ 198.167574][ T8407] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.168400][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.204896][ T8410] FAULT_INJECTION: forcing a failure. [ 198.204896][ T8410] name failslab, interval 1, probability 5, space 0, times 89 [ 198.204929][ T8410] CPU: 1 UID: 0 PID: 8410 Comm: syz.0.941 Not tainted syzkaller #0 PREEMPT(full) [ 198.204954][ T8410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 198.204969][ T8410] Call Trace: [ 198.204976][ T8410] [ 198.204983][ T8410] dump_stack_lvl+0x100/0x190 [ 198.205026][ T8410] should_fail_ex.cold+0x5/0xa [ 198.205058][ T8410] should_failslab+0xc2/0x120 [ 198.205080][ T8410] kmem_cache_alloc_noprof+0x92/0x6a0 [ 198.205111][ T8410] ? __send_signal_locked+0x1d1/0x1420 [ 198.205136][ T8410] __send_signal_locked+0x1d1/0x1420 [ 198.205162][ T8410] send_signal_locked+0x15e/0x970 [ 198.205185][ T8410] ? __pfx_send_signal_locked+0x10/0x10 [ 198.205206][ T8410] ? do_raw_spin_lock+0x128/0x260 [ 198.205231][ T8410] ? _raw_spin_lock_irqsave+0x52/0x60 [ 198.205257][ T8410] force_sig_info_to_task+0x450/0x660 [ 198.205287][ T8410] force_sig_fault+0xc3/0x100 [ 198.205313][ T8410] ? __pfx_force_sig_fault+0x10/0x10 [ 198.205342][ T8410] ? __pfx___up_read+0x10/0x10 [ 198.205360][ T8410] ? fixup_vdso_exception+0x2d1/0x370 [ 198.205391][ T8410] __bad_area_nosemaphore+0x31b/0x3f0 [ 198.205425][ T8410] ? lock_mm_and_find_vma+0xaa/0x750 [ 198.205449][ T8410] do_user_addr_fault+0x8ca/0x12f0 [ 198.205486][ T8410] exc_page_fault+0x6f/0xd0 [ 198.205509][ T8410] asm_exc_page_fault+0x26/0x30 [ 198.205528][ T8410] RIP: 0033:0x7f08b5389161 [ 198.205546][ T8410] Code: 0f 1f 84 00 00 00 00 00 90 48 ff ca 0f 8c ef 04 00 00 62 a1 c5 00 ef ff 89 f0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 e0 04 00 00 <62> e1 fe 28 6f 06 62 b2 7e 20 26 c0 c5 fb 93 c8 48 89 f8 48 83 fa [ 198.205565][ T8410] RSP: 002b:00007f08b35f5bd8 EFLAGS: 00010283 [ 198.205583][ T8410] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 198.205595][ T8410] RDX: 00000000000003fe RSI: 0000000000000000 RDI: 00007f08b35f5c00 [ 198.205607][ T8410] RBP: 00007f08b35f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 198.205619][ T8410] R10: 0000000000000000 R11: 0000000000000002 R12: cccccccccccccccd [ 198.205632][ T8410] R13: 00007f08b5626038 R14: 00007f08b5625fa0 R15: 00007ffc486cedd8 [ 198.205659][ T8410] [ 198.260481][ T4936] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 198.267541][ T8407] netlink: 76 bytes leftover after parsing attributes in process `syz.2.943'. [ 198.267718][ T8407] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.267801][ T8407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.268102][ T8407] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.268176][ T8407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.268845][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 198.274728][ T8407] netlink: 52 bytes leftover after parsing attributes in process `syz.2.943'. [ 198.275408][ T8407] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.276497][ T8407] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.338637][ T24] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 198.338661][ T24] em28xx 2-1:0.0: board has no eeprom [ 198.417726][ T24] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 198.417748][ T24] em28xx 2-1:0.0: dvb set to bulk mode. [ 198.445401][ T24] usb 2-1: USB disconnect, device number 5 [ 198.451521][ T29] em28xx 2-1:0.0: Binding DVB extension [ 198.465247][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 198.541629][ T29] em28xx 2-1:0.0: Registering input extension [ 198.542358][ T24] em28xx 2-1:0.0: Closing input extension [ 198.595080][ T24] em28xx: Freeing device [ 198.680843][ T8422] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 198.717749][ T8422] md: array md0 already has disks! [ 198.881096][ T8430] tipc: Started in network mode [ 198.881120][ T8430] tipc: Node identity 7f000001, cluster identity 4711 [ 198.881518][ T8430] tipc: Enabling of bearer rejected, failed to enable media [ 198.881525][ T8425] md/raid:md0: not enough operational devices (3/3 failed) [ 198.886574][ T8430] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 198.893954][ T8430] tipc: Enabled bearer , priority 10 [ 199.086808][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 199.113793][ T8425] md/raid:md0: failed to run raid set. [ 199.113803][ T8425] md: pers->run() failed ... [ 199.132572][ T30] audit: type=1400 audit(1793998740.963:901): avc: denied { setopt } for pid=8437 comm="syz.1.954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 199.157122][ C1] net_ratelimit: 173 callbacks suppressed [ 199.237237][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 199.245875][ T10] usb 3-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 199.257084][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 199.269241][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.269262][ T10] usb 3-1: Product: syz [ 199.269275][ T10] usb 3-1: Manufacturer: syz [ 199.269289][ T10] usb 3-1: SerialNumber: syz [ 199.275100][ T10] usb 3-1: config 0 descriptor?? [ 199.361524][ T8422] md: could not open device unknown-block(0,0). [ 199.361575][ T8422] md: error, md_import_device() returned -6 [ 199.466853][ T8448] FAULT_INJECTION: forcing a failure. [ 199.466853][ T8448] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 199.466885][ T8448] CPU: 1 UID: 0 PID: 8448 Comm: syz.3.958 Not tainted syzkaller #0 PREEMPT(full) [ 199.466908][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 199.466921][ T8448] Call Trace: [ 199.466928][ T8448] [ 199.466937][ T8448] dump_stack_lvl+0x100/0x190 [ 199.466977][ T8448] should_fail_ex.cold+0x5/0xa [ 199.467011][ T8448] strncpy_from_user+0x3b/0x2d0 [ 199.467045][ T8448] do_getname+0x78/0x390 [ 199.467081][ T8448] user_path_at+0x26/0x60 [ 199.467106][ T8448] __x64_sys_mount+0x1fb/0x310 [ 199.467141][ T8448] ? __pfx___x64_sys_mount+0x10/0x10 [ 199.467184][ T8448] do_syscall_64+0x123/0x790 [ 199.467212][ T8448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.467234][ T8448] RIP: 0033:0x7fe417b9fb19 [ 199.467252][ T8448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.467273][ T8448] RSP: 002b:00007fe418994028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 199.467294][ T8448] RAX: ffffffffffffffda RBX: 00007fe417e25fa0 RCX: 00007fe417b9fb19 [ 199.467307][ T8448] RDX: 0000200000000900 RSI: 00002000000008c0 RDI: 0000000000000000 [ 199.467320][ T8448] RBP: 00007fe417c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 199.467333][ T8448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.467345][ T8448] R13: 00007fe417e26038 R14: 00007fe417e25fa0 R15: 00007ffc5bcdb6c8 [ 199.467375][ T8448] [ 199.473667][ T8448] 0x000000000000-0x000000020000 : "" [ 199.510430][ T8448] ftl_cs: FTL header not found. [ 199.546835][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 199.551050][ T5351] usb 3-1: USB disconnect, device number 6 [ 199.588395][ T4936] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 200.232125][ T5805] tipc: Node number set to 2130706433 [ 200.250320][ T24] usb 5-1: New USB device found: idVendor=086a, idProduct=0100, bcdDevice=0.01 [ 200.252200][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.259003][ T24] emi26 - firmware loader 5-1:1.0: emi26_probe start [ 200.261546][ T24] usb 5-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 200.261565][ T24] usb 5-1: Falling back to sysfs fallback for: emi26/loader.fw [ 200.543349][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 200.543374][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 200.589383][ T8476] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 200.666846][ T5805] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 200.746818][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 200.816806][ T5805] usb 2-1: Using ep0 maxpacket: 16 [ 200.817460][ T5805] usb 2-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 200.818651][ T5805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 200.820670][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.820691][ T5805] usb 2-1: Product: syz [ 200.820705][ T5805] usb 2-1: Manufacturer: syz [ 200.820720][ T5805] usb 2-1: SerialNumber: syz [ 200.825287][ T5805] usb 2-1: config 0 descriptor?? [ 200.885733][ T5805] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 200.885760][ T5805] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 200.908626][ T10] usb 3-1: New USB device found: idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 200.909160][ T10] usb 3-1: config 0 has no interfaces? [ 200.911137][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.911158][ T10] usb 3-1: Product: syz [ 200.911173][ T10] usb 3-1: Manufacturer: syz [ 200.911186][ T10] usb 3-1: SerialNumber: syz [ 200.916515][ T10] usb 3-1: config 0 descriptor?? [ 200.965745][ T8481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.967155][ T8481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.967394][ T8481] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.967618][ T8481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.967826][ T8481] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.107465][ T5805] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 201.176463][ T5805] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 201.176495][ T5805] em28xx 2-1:0.0: board has no eeprom [ 201.204046][ T10] usb 3-1: USB disconnect, device number 7 [ 201.247106][ T5805] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 201.247130][ T5805] em28xx 2-1:0.0: dvb set to bulk mode. [ 201.252767][ T5351] em28xx 2-1:0.0: Binding DVB extension [ 201.256356][ T5805] usb 2-1: USB disconnect, device number 6 [ 201.294480][ T5805] em28xx 2-1:0.0: Disconnecting em28xx [ 201.314611][ T5351] em28xx 2-1:0.0: Registering input extension [ 201.315874][ T5805] em28xx 2-1:0.0: Closing input extension [ 201.370701][ T5805] em28xx: Freeing device [ 201.411057][ T8503] loop0: detected capacity change from 0 to 6 [ 201.449304][ T8503] ldm_validate_privheads(): Disk read failed. [ 201.449352][ T8503] loop0: [ 201.449374][ T8503] loop0: partition table partially beyond EOD, truncated [ 201.452112][ T5351] hid-sensor-hub 0003:1234:5678.0003: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 201.606064][ T8507] FAULT_INJECTION: forcing a failure. [ 201.606064][ T8507] name failslab, interval 1, probability 5, space 0, times 85 [ 201.606083][ T8507] CPU: 1 UID: 0 PID: 8507 Comm: syz.0.979 Not tainted syzkaller #0 PREEMPT(full) [ 201.606099][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 201.606106][ T8507] Call Trace: [ 201.606111][ T8507] [ 201.606117][ T8507] dump_stack_lvl+0x100/0x190 [ 201.606145][ T8507] should_fail_ex.cold+0x5/0xa [ 201.606165][ T8507] should_failslab+0xc2/0x120 [ 201.606180][ T8507] kmem_cache_alloc_noprof+0x92/0x6a0 [ 201.606201][ T8507] ? __asan_memcpy+0x3c/0x60 [ 201.606219][ T8507] ? __kernfs_new_node+0xd2/0xa10 [ 201.606236][ T8507] __kernfs_new_node+0xd2/0xa10 [ 201.606248][ T8507] ? lock_acquire+0x1d1/0x380 [ 201.606267][ T8507] ? __pfx___kernfs_new_node+0x10/0x10 [ 201.606281][ T8507] ? lock_acquire+0x1d1/0x380 [ 201.606298][ T8507] ? kernfs_root+0x23/0x2a0 [ 201.606316][ T8507] ? find_held_lock+0x2b/0x80 [ 201.606329][ T8507] ? kernfs_root+0xee/0x2a0 [ 201.606346][ T8507] ? kernfs_root+0xee/0x2a0 [ 201.606368][ T8507] kernfs_new_node+0x194/0x200 [ 201.606382][ T8507] ? __pfx_kernfs_new_node+0x10/0x10 [ 201.606397][ T8507] ? kernfs_add_one+0x213/0xb40 [ 201.606412][ T8507] __kernfs_create_file+0x53/0x350 [ 201.606429][ T8507] cgroup_addrm_files+0x48e/0xd30 [ 201.606449][ T8507] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 201.606462][ T8507] ? find_held_lock+0x2b/0x80 [ 201.606480][ T8507] ? css_next_descendant_pre+0x58/0x1a0 [ 201.606505][ T8507] css_populate_dir+0x161/0x590 [ 201.606520][ T8507] cgroup_apply_control_enable+0x441/0xdd0 [ 201.606544][ T8507] cgroup_mkdir+0x9da/0x13a0 [ 201.606567][ T8507] ? __pfx_cgroup_mkdir+0x10/0x10 [ 201.606590][ T8507] kernfs_iop_mkdir+0x111/0x190 [ 201.606602][ T8507] ? security_inode_mkdir+0xc9/0x2b0 [ 201.606623][ T8507] vfs_mkdir+0x36d/0x8a0 [ 201.606637][ T8507] filename_mkdirat+0x4c4/0x630 [ 201.606655][ T8507] ? __pfx_filename_mkdirat+0x10/0x10 [ 201.606672][ T8507] ? strncpy_from_user+0x19d/0x2d0 [ 201.606692][ T8507] ? do_getname+0x191/0x390 [ 201.606716][ T8507] __x64_sys_mkdirat+0x89/0xc0 [ 201.606742][ T8507] do_syscall_64+0x123/0x790 [ 201.606767][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.606788][ T8507] RIP: 0033:0x7f08b539fb19 [ 201.606807][ T8507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.606829][ T8507] RSP: 002b:00007f08b35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 201.606850][ T8507] RAX: ffffffffffffffda RBX: 00007f08b5625fa0 RCX: 00007f08b539fb19 [ 201.606865][ T8507] RDX: 00000000000001ff RSI: 0000200000006b00 RDI: ffffffffffffff9c [ 201.606880][ T8507] RBP: 00007f08b5437b70 R08: 0000000000000000 R09: 0000000000000000 [ 201.606893][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.606907][ T8507] R13: 00007f08b5626038 R14: 00007f08b5625fa0 R15: 00007ffc486cedd8 [ 201.606936][ T8507] [ 201.612493][ T8507] cgroup: cgroup_addrm_files: failed to add max_usage_in_bytes, err=-12 [ 201.671904][ T8507] FAULT_INJECTION: forcing a failure. [ 201.671904][ T8507] name failslab, interval 1, probability 5, space 0, times 84 [ 201.671930][ T8507] CPU: 1 UID: 0 PID: 8507 Comm: syz.0.979 Not tainted syzkaller #0 PREEMPT(full) [ 201.671953][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 201.671964][ T8507] Call Trace: [ 201.671971][ T8507] [ 201.671979][ T8507] dump_stack_lvl+0x100/0x190 [ 201.672012][ T8507] should_fail_ex.cold+0x5/0xa [ 201.672042][ T8507] should_failslab+0xc2/0x120 [ 201.672066][ T8507] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 201.672095][ T8507] ? bdev_alloc_inode+0x26/0x90 [ 201.672121][ T8507] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 201.672146][ T8507] bdev_alloc_inode+0x26/0x90 [ 201.672170][ T8507] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 201.672195][ T8507] alloc_inode+0x68/0x250 [ 201.672213][ T8507] new_inode+0x22/0x1c0 [ 201.672233][ T8507] bdev_alloc+0x2b/0x420 [ 201.672248][ T8507] ? bdi_init+0x3f4/0x5b0 [ 201.672269][ T8507] ? bdi_init+0x49f/0x5b0 [ 201.672292][ T8507] __alloc_disk_node+0x116/0x730 [ 201.672320][ T8507] __blk_alloc_disk+0xd2/0x170 [ 201.672348][ T8507] ? __pfx___blk_alloc_disk+0x10/0x10 [ 201.672371][ T8507] ? __pfx___debug_object_init+0x10/0x10 [ 201.672410][ T8507] ? lockdep_init_map_type+0x5c/0x250 [ 201.672437][ T8507] ? lockdep_init_map_type+0x5c/0x250 [ 201.672466][ T8507] dm_create+0x5e8/0x1530 [ 201.672498][ T8507] dev_create+0x121/0x2a0 [ 201.672524][ T8507] ? __pfx_dev_create+0x10/0x10 [ 201.672555][ T8507] ctl_ioctl+0x4d2/0xcc0 [ 201.672580][ T8507] ? __pfx_dev_create+0x10/0x10 [ 201.672607][ T8507] ? __pfx_ctl_ioctl+0x10/0x10 [ 201.672658][ T8507] ? selinux_file_ioctl+0x1e0/0x290 [ 201.672682][ T8507] dm_ctl_ioctl+0x22/0x30 [ 201.672707][ T8507] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 201.672732][ T8507] __x64_sys_ioctl+0x18e/0x210 [ 201.672752][ T8507] do_syscall_64+0x123/0x790 [ 201.672776][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.672794][ T8507] RIP: 0033:0x7f08b539fb19 [ 201.672811][ T8507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.672828][ T8507] RSP: 002b:00007f08b35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.672849][ T8507] RAX: ffffffffffffffda RBX: 00007f08b5625fa0 RCX: 00007f08b539fb19 [ 201.672861][ T8507] RDX: 0000200000006b40 RSI: 00000000c138fd03 RDI: 0000000000000006 [ 201.672872][ T8507] RBP: 00007f08b5437b70 R08: 0000000000000000 R09: 0000000000000000 [ 201.672882][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.672892][ T8507] R13: 00007f08b5626038 R14: 00007f08b5625fa0 R15: 00007ffc486cedd8 [ 201.672917][ T8507] [ 201.746074][ T8506] fido_id[8506]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 202.097509][ T8520] netlink: 52 bytes leftover after parsing attributes in process `syz.1.987'. [ 202.099463][ T8520] netlink: 52 bytes leftover after parsing attributes in process `syz.1.987'. [ 202.459880][ T8524] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 202.497495][ T5805] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 202.518332][ T8530] netlink: 44 bytes leftover after parsing attributes in process `syz.2.989'. [ 202.694610][ T5805] usb 1-1: New USB device found: idVendor=086a, idProduct=0100, bcdDevice=0.01 [ 202.695544][ T5805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.710801][ T5805] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 202.946858][ T4936] Bluetooth: hci1: command 0x0406 tx timeout [ 203.026918][ T5621] Bluetooth: hci4: command 0x0c1a tx timeout [ 203.026969][ T5621] Bluetooth: hci3: command 0x0c1a tx timeout [ 203.027051][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 203.027108][ T4936] Bluetooth: hci0: command 0x0406 tx timeout [ 203.070838][ T8537] bridge_slave_0: left allmulticast mode [ 203.070849][ T8537] bridge_slave_0: left promiscuous mode [ 203.070954][ T8537] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.095767][ T8541] FAULT_INJECTION: forcing a failure. [ 203.095767][ T8541] name failslab, interval 1, probability 5, space 0, times 83 [ 203.095785][ T8541] CPU: 1 UID: 0 PID: 8541 Comm: syz.4.991 Not tainted syzkaller #0 PREEMPT(full) [ 203.095799][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 203.095808][ T8541] Call Trace: [ 203.095812][ T8541] [ 203.095817][ T8541] dump_stack_lvl+0x100/0x190 [ 203.095842][ T8541] should_fail_ex.cold+0x5/0xa [ 203.095863][ T8541] should_failslab+0xc2/0x120 [ 203.095880][ T8541] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 203.095901][ T8541] ? proc_alloc_inode+0x25/0x200 [ 203.095921][ T8541] ? __pfx_proc_alloc_inode+0x10/0x10 [ 203.095944][ T8541] proc_alloc_inode+0x25/0x200 [ 203.095962][ T8541] alloc_inode+0x68/0x250 [ 203.095975][ T8541] new_inode+0x22/0x1c0 [ 203.095988][ T8541] proc_pid_make_inode+0x22/0x160 [ 203.096008][ T8541] proc_pident_instantiate+0x85/0x310 [ 203.096029][ T8541] proc_pident_lookup+0x1e3/0x270 [ 203.096052][ T8541] ? __pfx_proc_tid_base_lookup+0x10/0x10 [ 203.096071][ T8541] lookup_open+0xb29/0x19e0 [ 203.096089][ T8541] path_openat+0xe75/0x23f0 [ 203.096107][ T8541] ? __pfx_path_openat+0x10/0x10 [ 203.096126][ T8541] do_file_open+0x20e/0x430 [ 203.096143][ T8541] ? __pfx_do_file_open+0x10/0x10 [ 203.096163][ T8541] ? __pfx_kfree_link+0x10/0x10 [ 203.096182][ T8541] ? _raw_spin_unlock+0x28/0x50 [ 203.096193][ T8541] ? alloc_fd+0x471/0x7a0 [ 203.096213][ T8541] do_sys_openat2+0x163/0x1d0 [ 203.096230][ T8541] ? __pfx_do_sys_openat2+0x10/0x10 [ 203.096248][ T8541] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 203.096267][ T8541] __x64_sys_openat+0x12d/0x210 [ 203.096285][ T8541] ? __pfx___x64_sys_openat+0x10/0x10 [ 203.096309][ T8541] do_syscall_64+0x123/0x790 [ 203.096325][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.096339][ T8541] RIP: 0033:0x7f11e836034e [ 203.096350][ T8541] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 203.096362][ T8541] RSP: 002b:00007f11e91ebec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.096375][ T8541] RAX: ffffffffffffffda RBX: 00007f11e91ec6c0 RCX: 00007f11e836034e [ 203.096383][ T8541] RDX: 0000000000000002 RSI: 00007f11e91ebf90 RDI: ffffffffffffff9c [ 203.096390][ T8541] RBP: 00007f11e8437b70 R08: 0000000000000000 R09: 0000000000000000 [ 203.096398][ T8541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.096405][ T8541] R13: 00007f11e8626038 R14: 00007f11e8625fa0 R15: 00007fff32aaa038 [ 203.096420][ T8541] [ 203.110685][ T8537] bridge_slave_1: left allmulticast mode [ 203.110709][ T8537] bridge_slave_1: left promiscuous mode [ 203.110877][ T8537] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.124142][ T8542] netlink: 52 bytes leftover after parsing attributes in process `syz.2.992'. [ 203.152186][ T8541] FAULT_INJECTION: forcing a failure. [ 203.152186][ T8541] name failslab, interval 1, probability 5, space 0, times 82 [ 203.152212][ T8541] CPU: 1 UID: 0 PID: 8541 Comm: syz.4.991 Not tainted syzkaller #0 PREEMPT(full) [ 203.152235][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 203.152247][ T8541] Call Trace: [ 203.152254][ T8541] [ 203.152261][ T8541] dump_stack_lvl+0x100/0x190 [ 203.152298][ T8541] should_fail_ex.cold+0x5/0xa [ 203.152326][ T8541] should_failslab+0xc2/0x120 [ 203.152349][ T8541] __kmalloc_cache_noprof+0x91/0x6d0 [ 203.152373][ T8541] ? lock_acquire+0x1d1/0x380 [ 203.152396][ T8541] ? dm_open+0x51/0x130 [ 203.152425][ T8541] dm_open+0x51/0x130 [ 203.152457][ T8541] ? __pfx_dm_open+0x10/0x10 [ 203.152481][ T8541] misc_open+0x26d/0x450 [ 203.152510][ T8541] ? __pfx_misc_open+0x10/0x10 [ 203.152536][ T8541] chrdev_open+0x234/0x6a0 [ 203.152562][ T8541] ? __pfx_chrdev_open+0x10/0x10 [ 203.152585][ T8541] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 203.152619][ T8541] do_dentry_open+0x674/0x1470 [ 203.152638][ T8541] ? __pfx_chrdev_open+0x10/0x10 [ 203.152664][ T8541] vfs_open_consume+0xcc/0x460 [ 203.152691][ T8541] path_openat+0x1547/0x23f0 [ 203.152717][ T8541] ? __pfx_path_openat+0x10/0x10 [ 203.152746][ T8541] do_file_open+0x20e/0x430 [ 203.152769][ T8541] ? __pfx_do_file_open+0x10/0x10 [ 203.152808][ T8541] ? _raw_spin_unlock+0x28/0x50 [ 203.152826][ T8541] ? alloc_fd+0x471/0x7a0 [ 203.152855][ T8541] do_sys_openat2+0x163/0x1d0 [ 203.152880][ T8541] ? __pfx_do_sys_openat2+0x10/0x10 [ 203.152912][ T8541] __x64_sys_openat+0x12d/0x210 [ 203.152938][ T8541] ? __pfx___x64_sys_openat+0x10/0x10 [ 203.152972][ T8541] do_syscall_64+0x123/0x790 [ 203.152995][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.153014][ T8541] RIP: 0033:0x7f11e839fb19 [ 203.153029][ T8541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.153046][ T8541] RSP: 002b:00007f11e91ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.153066][ T8541] RAX: ffffffffffffffda RBX: 00007f11e8625fa0 RCX: 00007f11e839fb19 [ 203.153078][ T8541] RDX: 0000000000000100 RSI: 0000200000006ac0 RDI: ffffffffffffff9c [ 203.153089][ T8541] RBP: 00007f11e8437b70 R08: 0000000000000000 R09: 0000000000000000 [ 203.153100][ T8541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.153110][ T8541] R13: 00007f11e8626038 R14: 00007f11e8625fa0 R15: 00007fff32aaa038 [ 203.153135][ T8541] [ 203.194107][ T8541] FAULT_INJECTION: forcing a failure. [ 203.194107][ T8541] name failslab, interval 1, probability 5, space 0, times 81 [ 203.194136][ T8541] CPU: 1 UID: 0 PID: 8541 Comm: syz.4.991 Not tainted syzkaller #0 PREEMPT(full) [ 203.194159][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 203.194170][ T8541] Call Trace: [ 203.194177][ T8541] [ 203.194184][ T8541] dump_stack_lvl+0x100/0x190 [ 203.194220][ T8541] should_fail_ex.cold+0x5/0xa [ 203.194249][ T8541] should_failslab+0xc2/0x120 [ 203.194272][ T8541] kmem_cache_alloc_noprof+0x92/0x6a0 [ 203.194298][ T8541] ? __asan_memcpy+0x3c/0x60 [ 203.194323][ T8541] ? __kernfs_new_node+0xd2/0xa10 [ 203.194347][ T8541] __kernfs_new_node+0xd2/0xa10 [ 203.194364][ T8541] ? lock_acquire+0x1d1/0x380 [ 203.194392][ T8541] ? __pfx___kernfs_new_node+0x10/0x10 [ 203.194413][ T8541] ? lock_acquire+0x1d1/0x380 [ 203.194441][ T8541] ? kernfs_root+0x23/0x2a0 [ 203.194467][ T8541] ? find_held_lock+0x2b/0x80 [ 203.194485][ T8541] ? kernfs_root+0xee/0x2a0 [ 203.194509][ T8541] ? kernfs_root+0xee/0x2a0 [ 203.194541][ T8541] kernfs_new_node+0x194/0x200 [ 203.194561][ T8541] ? __pfx_kernfs_new_node+0x10/0x10 [ 203.194580][ T8541] ? kernfs_add_one+0x213/0xb40 [ 203.194603][ T8541] __kernfs_create_file+0x53/0x350 [ 203.194631][ T8541] cgroup_addrm_files+0x48e/0xd30 [ 203.194662][ T8541] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 203.194680][ T8541] ? find_held_lock+0x2b/0x80 [ 203.194708][ T8541] ? css_next_descendant_pre+0x58/0x1a0 [ 203.194736][ T8541] css_populate_dir+0x161/0x590 [ 203.194760][ T8541] cgroup_apply_control_enable+0x441/0xdd0 [ 203.194795][ T8541] cgroup_mkdir+0x9da/0x13a0 [ 203.194826][ T8541] ? __pfx_cgroup_mkdir+0x10/0x10 [ 203.194854][ T8541] kernfs_iop_mkdir+0x111/0x190 [ 203.194871][ T8541] ? security_inode_mkdir+0xc9/0x2b0 [ 203.194894][ T8541] vfs_mkdir+0x36d/0x8a0 [ 203.194916][ T8541] filename_mkdirat+0x4c4/0x630 [ 203.194942][ T8541] ? __pfx_filename_mkdirat+0x10/0x10 [ 203.194965][ T8541] ? strncpy_from_user+0x19d/0x2d0 [ 203.194994][ T8541] ? do_getname+0x191/0x390 [ 203.195022][ T8541] __x64_sys_mkdirat+0x89/0xc0 [ 203.195048][ T8541] do_syscall_64+0x123/0x790 [ 203.195072][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.195091][ T8541] RIP: 0033:0x7f11e839fb19 [ 203.195108][ T8541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.195126][ T8541] RSP: 002b:00007f11e91ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 203.195145][ T8541] RAX: ffffffffffffffda RBX: 00007f11e8625fa0 RCX: 00007f11e839fb19 [ 203.195158][ T8541] RDX: 00000000000001ff RSI: 0000200000006b00 RDI: ffffffffffffff9c [ 203.195171][ T8541] RBP: 00007f11e8437b70 R08: 0000000000000000 R09: 0000000000000000 [ 203.195182][ T8541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.195192][ T8541] R13: 00007f11e8626038 R14: 00007f11e8625fa0 R15: 00007fff32aaa038 [ 203.195217][ T8541] [ 203.195245][ T8541] cgroup: cgroup_addrm_files: failed to add limit_in_bytes, err=-12 [ 203.218890][ T8537] bond0: (slave bond_slave_0): Releasing backup interface [ 203.359205][ T8537] bond0: (slave bond_slave_1): Releasing backup interface [ 203.390118][ T8546] FAULT_INJECTION: forcing a failure. [ 203.390118][ T8546] name failslab, interval 1, probability 5, space 0, times 79 [ 203.390143][ T8546] CPU: 1 UID: 0 PID: 8546 Comm: syz.1.995 Not tainted syzkaller #0 PREEMPT(full) [ 203.390165][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 203.390177][ T8546] Call Trace: [ 203.390185][ T8546] [ 203.390193][ T8546] dump_stack_lvl+0x100/0x190 [ 203.390233][ T8546] should_fail_ex.cold+0x5/0xa [ 203.390262][ T8546] should_failslab+0xc2/0x120 [ 203.390286][ T8546] __kmalloc_noprof+0xfc/0x840 [ 203.390313][ T8546] ? rcu_is_watching+0x13/0xc0 [ 203.390333][ T8546] ? tomoyo_realpath_from_path+0xb6/0x690 [ 203.390358][ T8546] tomoyo_realpath_from_path+0xb6/0x690 [ 203.390383][ T8546] tomoyo_check_open_permission+0x2af/0x3c0 [ 203.390412][ T8546] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 203.390447][ T8546] ? hook_file_open+0x245/0x8e0 ** 206 printk messages dropped ** [ 203.491342][ T8546] Call Trace: ** 142 printk messages dropped ** ** 145 printk messages dropped ** ** 148 printk messages dropped ** ** 31 printk messages dropped ** ** 75 printk messages dropped ** ** 102 printk messages dropped ** ** 79 printk messages dropped ** [ 204.112302][ T29] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 204.118762][ T45] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 204.167154][ T5351] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 204.180527][ T45] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 204.180544][ T45] em28xx 4-1:0.0: board has no eeprom [ 204.227163][ C1] net_ratelimit: 1639 callbacks suppressed [ 204.247772][ T45] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 204.247791][ T45] em28xx 4-1:0.0: dvb set to bulk mode. [ 204.263608][ T45] usb 4-1: USB disconnect, device number 8 [ 204.267476][ T29] usb 3-1: New USB device found: idVendor=086a, idProduct=0100, bcdDevice=0.01 [ 204.268485][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.272859][ T45] em28xx 4-1:0.0: Disconnecting em28xx [ 204.272914][ T5737] em28xx 4-1:0.0: Binding DVB extension [ 204.295057][ T29] emi26 - firmware loader 3-1:1.0: emi26_probe start [ 204.317248][ T5351] usb 2-1: Using ep0 maxpacket: 32 [ 204.317957][ T5351] usb 2-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 204.320990][ T5351] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 204.321033][ T5351] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 204.321057][ T5351] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.321080][ T5351] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 204.330049][ T5351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.330068][ T5351] usb 2-1: Product: syz [ 204.330081][ T5351] usb 2-1: Manufacturer: syz [ 204.330094][ T5351] usb 2-1: SerialNumber: syz [ 204.351010][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 204.378770][ T5351] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input11 [ 204.478738][ T5737] em28xx 4-1:0.0: Registering input extension [ 204.479439][ T45] em28xx 4-1:0.0: Closing input extension [ 204.543554][ T45] em28xx: Freeing device [ 204.596832][ T5351] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 204.596848][ T5351] (id 0x00) [ 204.757010][ T5351] rc_core: IR keymap rc-imon-pad not found [ 204.757028][ T5351] Registered IR keymap rc-empty [ 204.757138][ T5351] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 204.757154][ T5351] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 204.806560][ T5351] imon:send_packet: packet tx failed (-71) [ 204.816916][ T5351] imon 2-1:155.0: remote input dev register failed [ 204.817121][ T5351] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 204.924629][ T5351] imon 2-1:155.0: unable to initialize intf0, err 0 [ 204.949228][ T5351] usb 2-1: USB disconnect, device number 7 [ 205.117604][ T8571] FAULT_INJECTION: forcing a failure. [ 205.117604][ T8571] name failslab, interval 1, probability 5, space 0, times 100 [ 205.117630][ T8571] CPU: 0 UID: 0 PID: 8571 Comm: syz.0.1005 Not tainted syzkaller #0 PREEMPT(full) [ 205.117656][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 205.117670][ T8571] Call Trace: [ 205.117677][ T8571] [ 205.117685][ T8571] dump_stack_lvl+0x100/0x190 [ 205.117726][ T8571] should_fail_ex.cold+0x5/0xa [ 205.117760][ T8571] should_failslab+0xc2/0x120 [ 205.117786][ T8571] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 205.117822][ T8571] ? kstrdup_const+0x63/0x80 [ 205.117851][ T8571] kstrdup+0x51/0xe0 [ 205.117874][ T8571] kstrdup_const+0x63/0x80 [ 205.117897][ T8571] __kernfs_new_node+0x9b/0xa10 [ 205.117917][ T8571] ? lock_acquire+0x1d1/0x380 [ 205.117947][ T8571] ? kernfs_link_sibling+0x379/0x6f0 [ 205.117981][ T8571] ? __pfx___kernfs_new_node+0x10/0x10 [ 205.118005][ T8571] ? lock_acquire+0x1d1/0x380 [ 205.118030][ T8571] ? kernfs_root+0x23/0x2a0 [ 205.118057][ T8571] ? find_held_lock+0x2b/0x80 [ 205.118076][ T8571] ? kernfs_root+0xee/0x2a0 [ 205.118102][ T8571] ? kernfs_root+0xee/0x2a0 [ 205.118135][ T8571] kernfs_new_node+0x194/0x200 [ 205.118157][ T8571] ? __pfx_kernfs_new_node+0x10/0x10 [ 205.118177][ T8571] ? kernfs_add_one+0x213/0xb40 [ 205.118201][ T8571] __kernfs_create_file+0x53/0x350 [ 205.118228][ T8571] cgroup_addrm_files+0x48e/0xd30 [ 205.118260][ T8571] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 205.118289][ T8571] ? css_next_child+0xcf/0x2e0 [ 205.118314][ T8571] ? css_next_descendant_pre+0x58/0x1a0 [ 205.118342][ T8571] css_populate_dir+0x343/0x590 [ 205.118367][ T8571] cgroup_mkdir+0x975/0x13a0 [ 205.118412][ T8571] ? __pfx_cgroup_mkdir+0x10/0x10 [ 205.118446][ T8571] kernfs_iop_mkdir+0x111/0x190 [ 205.118468][ T8571] ? security_inode_mkdir+0xc9/0x2b0 [ 205.118492][ T8571] vfs_mkdir+0x36d/0x8a0 [ 205.118518][ T8571] filename_mkdirat+0x4c4/0x630 [ 205.118546][ T8571] ? __pfx_filename_mkdirat+0x10/0x10 [ 205.118571][ T8571] ? strncpy_from_user+0x19d/0x2d0 [ 205.118604][ T8571] ? do_getname+0x191/0x390 [ 205.118635][ T8571] __x64_sys_mkdirat+0x89/0xc0 [ 205.118662][ T8571] do_syscall_64+0x123/0x790 [ 205.118688][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.118710][ T8571] RIP: 0033:0x7f08b539fb19 [ 205.118729][ T8571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.118748][ T8571] RSP: 002b:00007f08b35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 205.118769][ T8571] RAX: ffffffffffffffda RBX: 00007f08b5625fa0 RCX: 00007f08b539fb19 [ 205.118783][ T8571] RDX: 00000000000001ff RSI: 0000200000006b00 RDI: ffffffffffffff9c [ 205.118797][ T8571] RBP: 00007f08b5437b70 R08: 0000000000000000 R09: 0000000000000000 [ 205.118810][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.118822][ T8571] R13: 00007f08b5626038 R14: 00007f08b5625fa0 R15: 00007ffc486cedd8 [ 205.118847][ T8571] [ 205.124222][ T8571] cgroup: cgroup_addrm_files: failed to add cgroup.clone_children, err=-12 [ 205.176078][ T8571] FAULT_INJECTION: forcing a failure. [ 205.176078][ T8571] name failslab, interval 1, probability 5, space 0, times 99 [ 205.176107][ T8571] CPU: 1 UID: 0 PID: 8571 Comm: syz.0.1005 Not tainted syzkaller #0 PREEMPT(full) [ 205.176131][ T8571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 205.176142][ T8571] Call Trace: [ 205.176149][ T8571] [ 205.176156][ T8571] dump_stack_lvl+0x100/0x190 [ 205.176194][ T8571] should_fail_ex.cold+0x5/0xa [ 205.176224][ T8571] should_failslab+0xc2/0x120 [ 205.176249][ T8571] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 205.176279][ T8571] ? bdev_alloc_inode+0x26/0x90 [ 205.176306][ T8571] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 205.176332][ T8571] bdev_alloc_inode+0x26/0x90 [ 205.176356][ T8571] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 205.176380][ T8571] alloc_inode+0x68/0x250 [ 205.176403][ T8571] new_inode+0x22/0x1c0 [ 205.176423][ T8571] bdev_alloc+0x2b/0x420 [ 205.176437][ T8571] ? bdi_init+0x3f4/0x5b0 [ 205.176457][ T8571] ? bdi_init+0x49f/0x5b0 [ 205.176481][ T8571] __alloc_disk_node+0x116/0x730 [ 205.176511][ T8571] __blk_alloc_disk+0xd2/0x170 [ 205.176538][ T8571] ? __pfx___blk_alloc_disk+0x10/0x10 [ 205.176562][ T8571] ? __pfx___debug_object_init+0x10/0x10 [ 205.176600][ T8571] ? lockdep_init_map_type+0x5c/0x250 [ 205.176627][ T8571] ? lockdep_init_map_type+0x5c/0x250 [ 205.176655][ T8571] dm_create+0x5e8/0x1530 [ 205.176682][ T8571] dev_create+0x121/0x2a0 [ 205.176711][ T8571] ? __pfx_dev_create+0x10/0x10 [ 205.176743][ T8571] ctl_ioctl+0x4d2/0xcc0 [ 205.176767][ T8571] ? __pfx_dev_create+0x10/0x10 [ 205.176793][ T8571] ? __pfx_ctl_ioctl+0x10/0x10 [ 205.176842][ T8571] ? selinux_file_ioctl+0x1e0/0x290 [ 205.176864][ T8571] dm_ctl_ioctl+0x22/0x30 [ 205.176887][ T8571] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 205.176911][ T8571] __x64_sys_ioctl+0x18e/0x210 [ 205.176932][ T8571] do_syscall_64+0x123/0x790 [ 205.176955][ T8571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.176974][ T8571] RIP: 0033:0x7f08b539fb19 [ 205.176990][ T8571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.177007][ T8571] RSP: 002b:00007f08b35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.177027][ T8571] RAX: ffffffffffffffda RBX: 00007f08b5625fa0 RCX: 00007f08b539fb19 [ 205.177040][ T8571] RDX: 0000200000006b40 RSI: 00000000c138fd03 RDI: 0000000000000007 [ 205.177052][ T8571] RBP: 00007f08b5437b70 R08: 0000000000000000 R09: 0000000000000000 [ 205.177063][ T8571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.177074][ T8571] R13: 00007f08b5626038 R14: 00007f08b5625fa0 R15: 00007ffc486cedd8 [ 205.177098][ T8571] [ 205.416392][ T8574] warning: `syz.2.1006' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 205.445403][ T8577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1007'. [ 205.445448][ T8577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1007'. [ 205.597229][ T8579] bridge_slave_0: left allmulticast mode [ 205.597245][ T8579] bridge_slave_0: left promiscuous mode [ 205.597393][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.659188][ T8581] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1008'. [ 205.886693][ T8587] FAULT_INJECTION: forcing a failure. [ 205.886693][ T8587] name failslab, interval 1, probability 5, space 0, times 100 [ 205.886764][ T8587] CPU: 1 UID: 0 PID: 8587 Comm: syz.1.1010 Not tainted syzkaller #0 PREEMPT(full) [ 205.886789][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 205.886803][ T8587] Call Trace: [ 205.886811][ T8587] [ 205.886820][ T8587] dump_stack_lvl+0x100/0x190 [ 205.886862][ T8587] should_fail_ex.cold+0x5/0xa [ 205.886898][ T8587] should_failslab+0xc2/0x120 [ 205.886924][ T8587] __kmalloc_cache_noprof+0x91/0x6d0 [ 205.886952][ T8587] ? lock_acquire+0x1d1/0x380 [ 205.886981][ T8587] ? dm_open+0x51/0x130 [ 205.887015][ T8587] dm_open+0x51/0x130 [ 205.887048][ T8587] ? __pfx_dm_open+0x10/0x10 [ 205.887075][ T8587] misc_open+0x26d/0x450 [ 205.887108][ T8587] ? __pfx_misc_open+0x10/0x10 [ 205.887137][ T8587] chrdev_open+0x234/0x6a0 [ 205.887163][ T8587] ? __pfx_chrdev_open+0x10/0x10 [ 205.887189][ T8587] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 205.887224][ T8587] do_dentry_open+0x674/0x1470 [ 205.887246][ T8587] ? __pfx_chrdev_open+0x10/0x10 [ 205.887275][ T8587] vfs_open_consume+0xcc/0x460 [ 205.887307][ T8587] path_openat+0x1547/0x23f0 [ 205.887338][ T8587] ? __pfx_path_openat+0x10/0x10 [ 205.887372][ T8587] do_file_open+0x20e/0x430 [ 205.887401][ T8587] ? __pfx_do_file_open+0x10/0x10 [ 205.887446][ T8587] ? _raw_spin_unlock+0x28/0x50 [ 205.887467][ T8587] ? alloc_fd+0x471/0x7a0 [ 205.887502][ T8587] do_sys_openat2+0x163/0x1d0 [ 205.887530][ T8587] ? __pfx_do_sys_openat2+0x10/0x10 [ 205.887566][ T8587] __x64_sys_openat+0x12d/0x210 [ 205.887592][ T8587] ? __pfx___x64_sys_openat+0x10/0x10 [ 205.887629][ T8587] do_syscall_64+0x123/0x790 [ 205.887655][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.887675][ T8587] RIP: 0033:0x7ff9c899fb19 [ 205.887692][ T8587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.887710][ T8587] RSP: 002b:00007ff9c9803028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 205.887729][ T8587] RAX: ffffffffffffffda RBX: 00007ff9c8c25fa0 RCX: 00007ff9c899fb19 [ 205.887743][ T8587] RDX: 0000000000000100 RSI: 0000200000006ac0 RDI: ffffffffffffff9c [ 205.887755][ T8587] RBP: 00007ff9c8a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 205.887765][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.887777][ T8587] R13: 00007ff9c8c26038 R14: 00007ff9c8c25fa0 R15: 00007ffecadf1648 [ 205.887803][ T8587] [ 206.024767][ T8587] FAULT_INJECTION: forcing a failure. [ 206.024767][ T8587] name failslab, interval 1, probability 5, space 0, times 98 [ 206.024793][ T8587] CPU: 0 UID: 0 PID: 8587 Comm: syz.1.1010 Not tainted syzkaller #0 PREEMPT(full) [ 206.024813][ T8587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 206.024824][ T8587] Call Trace: [ 206.024831][ T8587] [ 206.024838][ T8587] dump_stack_lvl+0x100/0x190 [ 206.024874][ T8587] should_fail_ex.cold+0x5/0xa [ 206.024906][ T8587] should_failslab+0xc2/0x120 [ 206.024928][ T8587] kmem_cache_alloc_noprof+0x92/0x6a0 [ 206.024958][ T8587] ? mem_cgroup_css_alloc+0x5d/0x1da0 [ 206.024982][ T8587] mem_cgroup_css_alloc+0x5d/0x1da0 [ 206.025007][ T8587] cgroup_apply_control_enable+0x602/0xdd0 [ 206.025047][ T8587] cgroup_mkdir+0x9da/0x13a0 [ 206.025081][ T8587] ? __pfx_cgroup_mkdir+0x10/0x10 [ 206.025111][ T8587] kernfs_iop_mkdir+0x111/0x190 [ 206.025130][ T8587] ? security_inode_mkdir+0xc9/0x2b0 [ 206.025153][ T8587] vfs_mkdir+0x36d/0x8a0 [ 206.025175][ T8587] filename_mkdirat+0x4c4/0x630 [ 206.025201][ T8587] ? __pfx_filename_mkdirat+0x10/0x10 [ 206.025224][ T8587] ? strncpy_from_user+0x19d/0x2d0 [ 206.025254][ T8587] ? do_getname+0x191/0x390 [ 206.025282][ T8587] __x64_sys_mkdirat+0x89/0xc0 [ 206.025307][ T8587] do_syscall_64+0x123/0x790 [ 206.025330][ T8587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.025349][ T8587] RIP: 0033:0x7ff9c899fb19 [ 206.025364][ T8587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.025381][ T8587] RSP: 002b:00007ff9c9803028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 206.025400][ T8587] RAX: ffffffffffffffda RBX: 00007ff9c8c25fa0 RCX: 00007ff9c899fb19 [ 206.025412][ T8587] RDX: 00000000000001ff RSI: 0000200000006b00 RDI: ffffffffffffff9c [ 206.025424][ T8587] RBP: 00007ff9c8a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 206.025435][ T8587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.025446][ T8587] R13: 00007ff9c8c26038 R14: 00007ff9c8c25fa0 R15: 00007ffecadf1648 [ 206.025476][ T8587] [ 206.034520][ T8579] bridge_slave_1: left allmulticast mode [ 206.034536][ T8579] bridge_slave_1: left promiscuous mode [ 206.034707][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.119375][ T8579] bond0: (slave bond_slave_0): Releasing backup interface [ 206.216062][ T8579] bond0: (slave bond_slave_1): Releasing backup interface [ 206.319064][ T8579] team0: Port device team_slave_0 removed [ 206.410001][ T8579] team0: Port device team_slave_1 removed [ 206.415640][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.415653][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.428057][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.428072][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.669502][ T30] audit: type=1400 audit(1793998748.503:902): avc: denied { create } for pid=8598 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 206.671661][ T30] audit: type=1400 audit(1793998748.503:903): avc: denied { bind } for pid=8598 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 206.672389][ T30] audit: type=1400 audit(1793998748.503:904): avc: denied { listen } for pid=8598 comm="syz.4.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 206.928295][ T8602] FAULT_INJECTION: forcing a failure. [ 206.928295][ T8602] name failslab, interval 1, probability 5, space 0, times 96 [ 206.928329][ T8602] CPU: 0 UID: 0 PID: 8602 Comm: syz.3.1016 Not tainted syzkaller #0 PREEMPT(full) [ 206.928355][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 206.928368][ T8602] Call Trace: [ 206.928376][ T8602] [ 206.928386][ T8602] dump_stack_lvl+0x100/0x190 [ 206.928436][ T8602] should_fail_ex.cold+0x5/0xa [ 206.928473][ T8602] should_failslab+0xc2/0x120 [ 206.928505][ T8602] kmem_cache_alloc_noprof+0x92/0x6a0 [ 206.928540][ T8602] ? __asan_memcpy+0x3c/0x60 [ 206.928575][ T8602] ? __kernfs_new_node+0xd2/0xa10 [ 206.928604][ T8602] __kernfs_new_node+0xd2/0xa10 [ 206.928624][ T8602] ? lock_acquire+0x1d1/0x380 [ 206.928652][ T8602] ? kernfs_link_sibling+0x379/0x6f0 [ 206.928686][ T8602] ? __pfx___kernfs_new_node+0x10/0x10 [ 206.928713][ T8602] ? lock_acquire+0x1d1/0x380 [ 206.928742][ T8602] ? kernfs_root+0x23/0x2a0 [ 206.928776][ T8602] ? find_held_lock+0x2b/0x80 [ 206.928800][ T8602] ? kernfs_root+0xee/0x2a0 [ 206.928831][ T8602] ? kernfs_root+0xee/0x2a0 [ 206.928869][ T8602] kernfs_new_node+0x194/0x200 [ 206.928893][ T8602] ? __pfx_kernfs_new_node+0x10/0x10 [ 206.928915][ T8602] ? kernfs_add_one+0x213/0xb40 [ 206.928942][ T8602] __kernfs_create_file+0x53/0x350 [ 206.928972][ T8602] cgroup_addrm_files+0x48e/0xd30 [ 206.929007][ T8602] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 206.929039][ T8602] ? css_next_child+0xcf/0x2e0 [ 206.929068][ T8602] ? css_next_descendant_pre+0x58/0x1a0 [ 206.929100][ T8602] css_populate_dir+0x343/0x590 [ 206.929128][ T8602] cgroup_mkdir+0x975/0x13a0 [ 206.929165][ T8602] ? __pfx_cgroup_mkdir+0x10/0x10 [ 206.929199][ T8602] kernfs_iop_mkdir+0x111/0x190 [ 206.929220][ T8602] ? security_inode_mkdir+0xc9/0x2b0 [ 206.929247][ T8602] vfs_mkdir+0x36d/0x8a0 [ 206.929273][ T8602] filename_mkdirat+0x4c4/0x630 [ 206.929304][ T8602] ? __pfx_filename_mkdirat+0x10/0x10 [ 206.929335][ T8602] ? strncpy_from_user+0x19d/0x2d0 [ 206.929370][ T8602] ? do_getname+0x191/0x390 [ 206.929410][ T8602] __x64_sys_mkdirat+0x89/0xc0 [ 206.929438][ T8602] do_syscall_64+0x123/0x790 [ 206.929466][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.929490][ T8602] RIP: 0033:0x7fe417b9fb19 [ 206.929509][ T8602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.929531][ T8602] RSP: 002b:00007fe418994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 206.929552][ T8602] RAX: ffffffffffffffda RBX: 00007fe417e25fa0 RCX: 00007fe417b9fb19 [ 206.929566][ T8602] RDX: 00000000000001ff RSI: 0000200000006b00 RDI: ffffffffffffff9c [ 206.929581][ T8602] RBP: 00007fe417c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 206.929595][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.929609][ T8602] R13: 00007fe417e26038 R14: 00007fe417e25fa0 R15: 00007ffc5bcdb6c8 [ 206.929640][ T8602] [ 206.933853][ T8602] cgroup: cgroup_addrm_files: failed to add cgroup.clone_children, err=-12 [ 207.614995][ T8615] md/raid:md0: not enough operational devices (3/3 failed) [ 207.633887][ T8604] rdma_rxe: rxe_newlink: failed to add ip6tnl0 [ 207.849449][ T8622] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1023'. [ 207.905436][ T8615] md/raid:md0: failed to run raid set. [ 207.905448][ T8615] md: pers->run() failed ... [ 207.987186][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 208.048227][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1024'. [ 208.198157][ T8634] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 208.198180][ T8634] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 208.629519][ T8644] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 209.065206][ T8647] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 209.266959][ C1] net_ratelimit: 611 callbacks suppressed [ 209.412698][ T8657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.597412][ T8661] tipc: Started in network mode [ 209.597437][ T8661] tipc: Node identity 080211000001, cluster identity 4711 [ 209.597618][ T8661] tipc: Enabled bearer , priority 0 [ 209.776261][ T8669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.066881][ T4936] Bluetooth: hci4: command 0x0c1a tx timeout [ 210.183653][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 210.183705][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 210.310345][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 210.310388][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 210.405973][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 210.406016][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1046'. [ 210.684438][ T8689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.720462][ T8691] FAULT_INJECTION: forcing a failure. [ 210.720462][ T8691] name failslab, interval 1, probability 5, space 0, times 100 [ 210.720494][ T8691] CPU: 1 UID: 0 PID: 8691 Comm: syz.3.1049 Not tainted syzkaller #0 PREEMPT(full) [ 210.720518][ T8691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 210.720532][ T8691] Call Trace: [ 210.720540][ T8691] [ 210.720549][ T8691] dump_stack_lvl+0x100/0x190 [ 210.720587][ T8691] should_fail_ex.cold+0x5/0xa [ 210.720619][ T8691] should_failslab+0xc2/0x120 [ 210.720643][ T8691] __kmalloc_noprof+0xfc/0x840 [ 210.720674][ T8691] ? tomoyo_encode2+0xfb/0x3c0 [ 210.720701][ T8691] tomoyo_encode2+0xfb/0x3c0 [ 210.720726][ T8691] tomoyo_encode+0x29/0x50 [ 210.720745][ T8691] tomoyo_realpath_from_path+0x18c/0x690 [ 210.720774][ T8691] tomoyo_path_number_perm+0x23c/0x580 [ 210.720803][ T8691] ? tomoyo_path_number_perm+0x22e/0x580 [ 210.720839][ T8691] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 210.720878][ T8691] ? d_splice_alias_ops+0x2e8/0x1350 [ 210.720903][ T8691] ? d_splice_alias_ops+0x2e8/0x1350 [ 210.720942][ T8691] ? kernfs_iop_lookup+0x234/0x2d0 [ 210.720962][ T8691] ? current_check_access_path+0x25c/0x420 [ 210.721000][ T8691] ? __pfx_current_check_access_path+0x10/0x10 [ 210.721034][ T8691] ? kernfs_iop_lookup+0x247/0x2d0 [ 210.721055][ T8691] ? lookup_one_qstr_excl+0xaf/0x250 [ 210.721090][ T8691] tomoyo_path_mkdir+0x9b/0xe0 [ 210.721115][ T8691] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 210.721142][ T8691] ? lock_acquire+0x1d1/0x380 [ 210.721177][ T8691] security_path_mkdir+0x154/0x2e0 [ 210.721202][ T8691] filename_mkdirat+0x168/0x630 [ 210.721234][ T8691] ? __pfx_filename_mkdirat+0x10/0x10 [ 210.721260][ T8691] ? strncpy_from_user+0x19d/0x2d0 [ 210.721292][ T8691] ? do_getname+0x191/0x390 [ 210.721323][ T8691] __x64_sys_mkdirat+0x89/0xc0 [ 210.721350][ T8691] do_syscall_64+0x123/0x790 [ 210.721377][ T8691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.721398][ T8691] RIP: 0033:0x7fe417b9fb19 [ 210.721417][ T8691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.721434][ T8691] RSP: 002b:00007fe418994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 210.721454][ T8691] RAX: ffffffffffffffda RBX: 00007fe417e25fa0 RCX: 00007fe417b9fb19 [ 210.721469][ T8691] RDX: 00000000000001ff RSI: 0000200000006b00 RDI: ffffffffffffff9c [ 210.721482][ T8691] RBP: 00007fe417c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 210.721493][ T8691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.721506][ T8691] R13: 00007fe417e26038 R14: 00007fe417e25fa0 R15: 00007ffc5bcdb6c8 [ 210.721532][ T8691] [ 210.721562][ T8691] ERROR: Out of memory at tomoyo_realpath_from_path. [ 210.721722][ T8691] FAULT_INJECTION: forcing a failure. [ 210.721722][ T8691] name failslab, interval 1, probability 5, space 0, times 99 [ 210.721767][ T8691] CPU: 1 UID: 0 PID: 8691 Comm: syz.3.1049 Not tainted syzkaller #0 PREEMPT(full) [ 210.721791][ T8691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 210.721804][ T8691] Call Trace: [ 210.721812][ T8691] [ 210.721821][ T8691] dump_stack_lvl+0x100/0x190 [ 210.721856][ T8691] should_fail_ex.cold+0x5/0xa [ 210.721888][ T8691] should_failslab+0xc2/0x120 [ 210.721911][ T8691] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 210.721944][ T8691] ? is_bpf_text_address+0x8a/0x1a0 [ 210.721970][ T8691] ? kstrdup_const+0x63/0x80 [ 210.722007][ T8691] kstrdup+0x51/0xe0 [ 210.722030][ T8691] kstrdup_const+0x63/0x80 [ 210.722054][ T8691] __kernfs_new_node+0x9b/0xa10 [ 210.722071][ T8691] ? arch_stack_walk+0xa6/0xf0 [ 210.722102][ T8691] ? __pfx___kernfs_new_node+0x10/0x10 [ 210.722122][ T8691] ? lock_acquire+0x1d1/0x380 [ 210.722148][ T8691] ? kernfs_root+0x23/0x2a0 [ 210.722175][ T8691] ? find_held_lock+0x2b/0x80 [ 210.722195][ T8691] ? kernfs_root+0xee/0x2a0 [ 210.722222][ T8691] ? kernfs_root+0xee/0x2a0 [ 210.722259][ T8691] kernfs_new_node+0x194/0x200 [ 210.722282][ T8691] ? __pfx_kernfs_new_node+0x10/0x10 [ 210.722305][ T8691] ? trace_contention_end+0x126/0x160 [ 210.722339][ T8691] __kernfs_create_file+0x53/0x350 [ 210.722368][ T8691] cgroup_addrm_files+0x48e/0xd30 [ 210.722402][ T8691] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 210.722436][ T8691] ? css_next_child+0xcf/0x2e0 [ 210.722467][ T8691] ? css_next_descendant_pre+0x58/0x1a0 [ 210.722497][ T8691] css_populate_dir+0x343/0x590 [ 210.722523][ T8691] cgroup_mkdir+0x975/0x13a0 [ 210.722557][ T8691] ? __pfx_cgroup_mkdir+0x10/0x10 [ 210.722589][ T8691] kernfs_iop_mkdir+0x111/0x190 [ 210.722608][ T8691] ? security_inode_mkdir+0xc9/0x2b0 [ 210.722634][ T8691] vfs_mkdir+0x36d/0x8a0 [ 210.722656][ T8691] filename_mkdirat+0x4c4/0x630 [ 210.722682][ T8691] ? __pfx_filename_mkdirat+0x10/0x10 [ 210.722708][ T8691] ? strncpy_from_user+0x19d/0x2d0 [ 210.722740][ T8691] ? do_getname+0x191/0x390 [ 210.722774][ T8691] __x64_sys_mkdirat+0x89/0xc0 [ 210.722800][ T8691] do_syscall_64+0x123/0x790 [ 210.722827][ T8691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.722849][ T8691] RIP: 0033:0x7fe417b9fb19 [ 210.722867][ T8691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.722887][ T8691] RSP: 002b:00007fe418994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 210.722906][ T8691] RAX: ffffffffffffffda RBX: 00007fe417e25fa0 RCX: 00007fe417b9fb19 [ 210.722918][ T8691] RDX: 00000000000001ff RSI: 0000200000006b00 RDI: ffffffffffffff9c [ 210.722930][ T8691] RBP: 00007fe417c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 210.722942][ T8691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.722953][ T8691] R13: 00007fe417e26038 R14: 00007fe417e25fa0 R15: 00007ffc5bcdb6c8 [ 210.722985][ T8691] [ 210.722994][ T8691] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 210.736678][ T988] tipc: Node number set to 134418688 [ 210.741384][ T8691] FAULT_INJECTION: forcing a failure. [ 210.741384][ T8691] name failslab, interval 1, probability 5, space 0, times 98 ** 234 printk messages dropped ** ** 113 printk messages dropped ** [ 211.142706][ T8700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1053'. ** 182 printk messages dropped ** [ 211.472117][ T8703] FAULT_INJECTION: forcing a failure. [ 211.472117][ T8703] name failslab, interval 1, probability 5, space 0, times 95 [ 211.472151][ T8703] CPU: 1 UID: 0 PID: 8703 Comm: syz.1.1054 Not tainted syzkaller #0 PREEMPT(full) [ 211.472176][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 211.472190][ T8703] Call Trace: [ 211.472197][ T8703] [ 211.472207][ T8703] dump_stack_lvl+0x100/0x190 [ 211.472248][ T8703] should_fail_ex.cold+0x5/0xa [ 211.472282][ T8703] should_failslab+0xc2/0x120 [ 211.472307][ T8703] __kmalloc_cache_noprof+0x91/0x6d0 [ 211.472336][ T8703] ? lock_acquire+0x1d1/0x380 [ 211.472363][ T8703] ? dm_open+0x51/0x130 [ 211.472396][ T8703] dm_open+0x51/0x130 [ 211.472423][ T8703] ? __pfx_dm_open+0x10/0x10 [ 211.472449][ T8703] misc_open+0x26d/0x450 [ 211.472480][ T8703] ? __pfx_misc_open+0x10/0x10 [ 211.472508][ T8703] chrdev_open+0x234/0x6a0 [ 211.472535][ T8703] ? __pfx_chrdev_open+0x10/0x10 [ 211.472561][ T8703] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 211.472601][ T8703] do_dentry_open+0x674/0x1470 [ 211.472624][ T8703] ? __pfx_chrdev_open+0x10/0x10 [ 211.472654][ T8703] vfs_open_consume+0xcc/0x460 [ 211.472687][ T8703] path_openat+0x1547/0x23f0 [ 211.472718][ T8703] ? __pfx_path_openat+0x10/0x10 [ 211.472757][ T8703] do_file_open+0x20e/0x430 [ 211.472785][ T8703] ? __pfx_do_file_open+0x10/0x10 [ 211.472830][ T8703] ? _raw_spin_unlock+0x28/0x50 [ 211.472860][ T8703] ? alloc_fd+0x471/0x7a0 [ 211.472897][ T8703] do_sys_openat2+0x163/0x1d0 [ 211.472927][ T8703] ? __pfx_do_sys_openat2+0x10/0x10 [ 211.472970][ T8703] __x64_sys_openat+0x12d/0x210 [ 211.473000][ T8703] ? __pfx___x64_sys_openat+0x10/0x10 [ 211.473041][ T8703] do_syscall_64+0x123/0x790 [ 211.473069][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.473091][ T8703] RIP: 0033:0x7ff9c899fb19 [ 211.473108][ T8703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.473129][ T8703] RSP: 002b:00007ff9c9803028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 211.473150][ T8703] RAX: ffffffffffffffda RBX: 00007ff9c8c25fa0 RCX: 00007ff9c899fb19 [ 211.473164][ T8703] RDX: 0000000000000100 RSI: 0000200000006ac0 RDI: ffffffffffffff9c [ 211.473176][ T8703] RBP: 00007ff9c8a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 211.473189][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.473201][ T8703] R13: 00007ff9c8c26038 R14: 00007ff9c8c25fa0 R15: 00007ffecadf1648 [ 211.473230][ T8703] [ 211.483653][ T8703] FAULT_INJECTION: forcing a failure. [ 211.483653][ T8703] name failslab, interval 1, probability 5, space 0, times 94 [ 211.483685][ T8703] CPU: 1 UID: 0 PID: 8703 Comm: syz.1.1054 Not tainted syzkaller #0 PREEMPT(full) [ 211.483706][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 211.483717][ T8703] Call Trace: [ 211.483724][ T8703] [ 211.483732][ T8703] dump_stack_lvl+0x100/0x190 [ 211.483769][ T8703] should_fail_ex.cold+0x5/0xa [ 211.483796][ T8703] should_failslab+0xc2/0x120 [ 211.483817][ T8703] kmem_cache_alloc_noprof+0x92/0x6a0 [ 211.483852][ T8703] ? do_getname+0x35/0x390 [ 211.483884][ T8703] do_getname+0x35/0x390 [ 211.483912][ T8703] __x64_sys_mkdirat+0x78/0xc0 [ 211.483935][ T8703] do_syscall_64+0x123/0x790 [ 211.483959][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.483978][ T8703] RIP: 0033:0x7ff9c899fb19 [ 211.483993][ T8703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.484010][ T8703] RSP: 002b:00007ff9c9803028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 211.484028][ T8703] RAX: ffffffffffffffda RBX: 00007ff9c8c25fa0 RCX: 00007ff9c899fb19 [ 211.484040][ T8703] RDX: 00000000000001ff RSI: 0000200000006b00 RDI: ffffffffffffff9c [ 211.484051][ T8703] RBP: 00007ff9c8a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 211.484062][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.484072][ T8703] R13: 00007ff9c8c26038 R14: 00007ff9c8c25fa0 R15: 00007ffecadf1648 [ 211.484096][ T8703] [ 211.523306][ T8703] FAULT_INJECTION: forcing a failure. [ 211.523306][ T8703] name failslab, interval 1, probability 5, space 0, times 86 [ 211.523332][ T8703] CPU: 1 UID: 0 PID: 8703 Comm: syz.1.1054 Not tainted syzkaller #0 PREEMPT(full) [ 211.523351][ T8703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 211.523362][ T8703] Call Trace: [ 211.523369][ T8703] [ 211.523375][ T8703] dump_stack_lvl+0x100/0x190 [ 211.523411][ T8703] should_fail_ex.cold+0x5/0xa [ 211.523440][ T8703] should_failslab+0xc2/0x120 [ 211.523461][ T8703] kmem_cache_alloc_noprof+0x92/0x6a0 [ 211.523492][ T8703] ? __send_signal_locked+0x1d1/0x1420 [ 211.523514][ T8703] __send_signal_locked+0x1d1/0x1420 [ 211.523537][ T8703] do_notify_parent+0xf15/0x10c0 [ 211.523557][ T8703] ? __pfx_do_notify_parent+0x10/0x10 [ 211.523575][ T8703] ? do_raw_spin_lock+0x128/0x260 [ 211.523594][ T8703] ? __wake_up+0x3f/0x60 [ 211.523617][ T8703] ? release_task+0xc27/0x1ca0 [ 211.523646][ T8703] release_task+0x14ea/0x1ca0 [ 211.523677][ T8703] ? __pfx_release_task+0x10/0x10 [ 211.523700][ T8703] ? do_raw_spin_lock+0x128/0x260 [ 211.523717][ T8703] ? find_held_lock+0x2b/0x80 [ 211.523736][ T8703] ? __wake_up+0x3f/0x60 [ 211.523755][ T8703] ? __wake_up+0x3f/0x60 [ 211.523778][ T8703] ? rcu_is_watching+0x13/0xc0 [ 211.523802][ T8703] do_exit+0x1300/0x2a00 [ 211.523829][ T8703] ? __pfx_do_exit+0x10/0x10 [ 211.523858][ T8703] ? do_raw_spin_lock+0x128/0x260 [ 211.523873][ T8703] ? find_held_lock+0x2b/0x80 [ 211.523892][ T8703] ? get_signal+0xa28/0x22e0 [ 211.523915][ T8703] do_group_exit+0xd5/0x2a0 [ 211.523941][ T8703] get_signal+0x1f58/0x22e0 [ 211.523961][ T8703] ? __pfx_futex_wait+0x10/0x10 [ 211.523995][ T8703] ? __pfx_get_signal+0x10/0x10 [ 211.524018][ T8703] ? do_futex+0x190/0x440 [ 211.524041][ T8703] arch_do_signal_or_restart+0x91/0x7e0 [ 211.524061][ T8703] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 211.524095][ T8703] exit_to_user_mode_loop+0x139/0x700 [ 211.524113][ T8703] ? rcu_is_watching+0x13/0xc0 [ 211.524134][ T8703] do_syscall_64+0x661/0x790 [ 211.524158][ T8703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.524176][ T8703] RIP: 0033:0x7ff9c899fb19 [ 211.524191][ T8703] Code: Unable to access opcode bytes at 0x7ff9c899faef. [ 211.524199][ T8703] RSP: 002b:00007ff9c98030e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 211.524217][ T8703] RAX: fffffffffffffe00 RBX: 00007ff9c8c25fa8 RCX: 00007ff9c899fb19 [ 211.524228][ T8703] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff9c8c25fa8 [ 211.524238][ T8703] RBP: 00007ff9c8c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 211.524248][ T8703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.524259][ T8703] R13: 00007ff9c8c26038 R14: 00007ffecadf1560 R15: 00007ffecadf1648 [ 211.524282][ T8703] [ 211.828939][ T8712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 211.858160][ T8711] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 213.081589][ T30] audit: type=1326 audit(1793998754.913:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.3.1065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe417b9fb19 code=0x7ffc0000 [ 213.082637][ T30] audit: type=1326 audit(1793998754.913:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.3.1065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe417b9fb19 code=0x7ffc0000 [ 213.106932][ T30] audit: type=1326 audit(1793998754.923:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.3.1065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe417b9fb19 code=0x7ffc0000 [ 213.106982][ T30] audit: type=1326 audit(1793998754.923:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.3.1065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe417b9fb19 code=0x7ffc0000 [ 213.107018][ T30] audit: type=1326 audit(1793998754.923:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.3.1065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe417b9fb19 code=0x7ffc0000 [ 213.107055][ T30] audit: type=1326 audit(1793998754.933:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.3.1065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe417b9fb19 code=0x7ffc0000 [ 213.107091][ T30] audit: type=1326 audit(1793998754.933:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.3.1065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe417b9fb19 code=0x7ffc0000 [ 213.107125][ T30] audit: type=1326 audit(1793998754.933:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.3.1065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe417b9fb19 code=0x7ffc0000 [ 213.120971][ T30] audit: type=1326 audit(1793998754.953:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.3.1065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe417b6034e code=0x7ffc0000 [ 213.121015][ T30] audit: type=1326 audit(1793998754.953:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8732 comm="syz.3.1065" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe417b9fb19 code=0x7ffc0000 [ 213.442278][ T8737] 0x000000000000-0x000000020000 : "" [ 213.463806][ T8737] ftl_cs: FTL header not found. [ 213.483143][ T8737] FAULT_INJECTION: forcing a failure. [ 213.483143][ T8737] name failslab, interval 1, probability 5, space 0, times 82 [ 213.483161][ T8737] CPU: 1 UID: 0 PID: 8737 Comm: syz.2.1066 Not tainted syzkaller #0 PREEMPT(full) [ 213.483177][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 213.483186][ T8737] Call Trace: [ 213.483190][ T8737] [ 213.483195][ T8737] dump_stack_lvl+0x100/0x190 [ 213.483222][ T8737] should_fail_ex.cold+0x5/0xa [ 213.483244][ T8737] should_failslab+0xc2/0x120 [ 213.483262][ T8737] kmem_cache_alloc_noprof+0x92/0x6a0 [ 213.483282][ T8737] ? __kernfs_new_node+0xd2/0xa10 [ 213.483298][ T8737] __kernfs_new_node+0xd2/0xa10 [ 213.483315][ T8737] ? __pfx___kernfs_new_node+0x10/0x10 [ 213.483330][ T8737] ? lock_acquire+0x1d1/0x380 [ 213.483348][ T8737] ? kernfs_root+0x23/0x2a0 [ 213.483368][ T8737] ? find_held_lock+0x2b/0x80 [ 213.483388][ T8737] ? kernfs_root+0xee/0x2a0 [ 213.483415][ T8737] ? kernfs_root+0xee/0x2a0 [ 213.483451][ T8737] kernfs_new_node+0x194/0x200 [ 213.483475][ T8737] ? __pfx_kernfs_new_node+0x10/0x10 [ 213.483499][ T8737] ? kernfs_add_one+0x213/0xb40 [ 213.483525][ T8737] __kernfs_create_file+0x53/0x350 [ 213.483554][ T8737] sysfs_add_file_mode_ns+0x207/0x3c0 [ 213.483589][ T8737] internal_create_group+0x593/0xfb0 [ 213.483626][ T8737] ? kernfs_create_dir_ns+0x16d/0x2b0 [ 213.483648][ T8737] ? __pfx_internal_create_group+0x10/0x10 [ 213.483680][ T8737] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 213.483710][ T8737] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 213.483740][ T8737] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 213.483771][ T8737] internal_create_groups+0x9d/0x150 [ 213.483805][ T8737] kobject_add_internal+0x317/0x930 [ 213.483853][ T8737] kobject_add+0x16a/0x1e0 [ 213.483886][ T8737] ? __pfx_kobject_add+0x10/0x10 [ 213.483920][ T8737] ? __pfx_kobject_add+0x10/0x10 [ 213.483962][ T8737] blk_register_queue+0x8d/0x640 [ 213.484001][ T8737] __add_disk+0x7dd/0xf10 [ 213.484035][ T8737] add_disk_fwnode+0x118/0x480 [ 213.484068][ T8737] add_mtd_blktrans_dev+0xd0b/0x1520 [ 213.484100][ T8737] ? __pfx_add_mtd_blktrans_dev+0x10/0x10 [ 213.484144][ T8737] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 213.484175][ T8737] ? mtdblock_add_mtd+0x4a/0x270 [ 213.484206][ T8737] mtdblock_add_mtd+0x1cc/0x270 [ 213.484234][ T8737] blktrans_notify_add+0xa2/0xf0 [ 213.484260][ T8737] add_mtd_device+0xb6d/0x1820 [ 213.484298][ T8737] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 213.484325][ T8737] ? __pfx_add_mtd_device+0x10/0x10 [ 213.484365][ T8737] mtd_add_partition+0x376/0x6a0 [ 213.484389][ T8737] ? __pfx_mtd_add_partition+0x10/0x10 [ 213.484411][ T8737] ? __might_fault+0xc5/0x140 [ 213.484437][ T8737] ? __might_fault+0xc5/0x140 [ 213.484474][ T8737] mtdchar_blkpg_ioctl+0x207/0x250 [ 213.484498][ T8737] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 213.484547][ T8737] mtdchar_ioctl+0x1670/0x1fd0 [ 213.484576][ T8737] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 213.484602][ T8737] ? lock_acquire+0x1d1/0x380 [ 213.484632][ T8737] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 213.484662][ T8737] ? rcu_is_watching+0x13/0xc0 [ 213.484685][ T8737] ? trace_contention_end+0x126/0x160 [ 213.484718][ T8737] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 213.484744][ T8737] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 213.484764][ T8737] ? ioctl_has_perm.constprop.0.isra.0+0x37d/0x530 [ 213.484791][ T8737] ? __pfx___mutex_lock+0x10/0x10 [ 213.484823][ T8737] ? __fget_files+0x34/0x3d0 [ 213.484866][ T8737] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 213.484890][ T8737] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 213.484917][ T8737] __x64_sys_ioctl+0x18e/0x210 [ 213.484941][ T8737] do_syscall_64+0x123/0x790 [ 213.484969][ T8737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.484991][ T8737] RIP: 0033:0x7f4b5759fb19 [ 213.485011][ T8737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.485030][ T8737] RSP: 002b:00007f4b5838b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 213.485053][ T8737] RAX: ffffffffffffffda RBX: 00007f4b57825fa0 RCX: 00007f4b5759fb19 [ 213.485066][ T8737] RDX: 00002000000006c0 RSI: 0000000000001269 RDI: 0000000000000004 [ 213.485080][ T8737] RBP: 00007f4b57637b70 R08: 0000000000000000 R09: 0000000000000000 [ 213.485094][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 213.485106][ T8737] R13: 00007f4b57826038 R14: 00007f4b57825fa0 R15: 00007ffc1d044028 [ 213.485135][ T8737] [ 213.492173][ T8737] kobject: kobject_add_internal failed for queue (error: -12 parent: mtdblock10) [ 214.042555][ T8742] __nla_validate_parse: 1 callbacks suppressed [ 214.042566][ T8742] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1068'. [ 214.193933][ T8747] tipc: Enabling of bearer rejected, failed to enable media [ 214.214633][ T8745] 00:03: ttyS1 I/O:0x2f8 (irq = 3, base_baud = 115200) is a 16550A [ 214.228106][ T8747] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 214.229056][ T8747] tipc: Enabled bearer , priority 10 [ 214.306935][ C1] net_ratelimit: 1816 callbacks suppressed [ 214.423058][ T8750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.567403][ T8760] md/raid:md0: not enough operational devices (3/3 failed) [ 214.636184][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'. [ 214.636229][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'. [ 214.681761][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'. [ 214.681809][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'. [ 214.713988][ T8760] md/raid:md0: failed to run raid set. [ 214.713998][ T8760] md: pers->run() failed ... [ 214.785928][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'. [ 214.785980][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1077'. [ 214.838703][ T8778] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1080'. [ 215.425307][ T8796] FAULT_INJECTION: forcing a failure. [ 215.425307][ T8796] name failslab, interval 1, probability 5, space 0, times 81 [ 215.425327][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.0.1089 Not tainted syzkaller #0 PREEMPT(full) [ 215.425350][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 215.425363][ T8796] Call Trace: [ 215.425370][ T8796] [ 215.425378][ T8796] dump_stack_lvl+0x100/0x190 [ 215.425417][ T8796] should_fail_ex.cold+0x5/0xa [ 215.425447][ T8796] should_failslab+0xc2/0x120 [ 215.425462][ T8796] kmem_cache_alloc_noprof+0x92/0x6a0 [ 215.425482][ T8796] ? security_file_alloc+0x34/0x2c0 [ 215.425498][ T8796] security_file_alloc+0x34/0x2c0 [ 215.425511][ T8796] init_file+0x95/0x480 [ 215.425530][ T8796] alloc_empty_file+0x79/0x1c0 [ 215.425548][ T8796] path_openat+0xd6/0x23f0 [ 215.425566][ T8796] ? __pfx_path_openat+0x10/0x10 [ 215.425592][ T8796] do_file_open+0x20e/0x430 [ 215.425619][ T8796] ? __pfx_do_file_open+0x10/0x10 [ 215.425660][ T8796] ? _raw_spin_unlock+0x28/0x50 [ 215.425674][ T8796] ? alloc_fd+0x471/0x7a0 [ 215.425695][ T8796] do_sys_openat2+0x163/0x1d0 [ 215.425712][ T8796] ? __pfx_do_sys_openat2+0x10/0x10 [ 215.425734][ T8796] __x64_sys_openat+0x12d/0x210 [ 215.425766][ T8796] ? __pfx___x64_sys_openat+0x10/0x10 [ 215.425789][ T8796] do_syscall_64+0x123/0x790 [ 215.425807][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.425824][ T8796] RIP: 0033:0x7f08b539fb19 [ 215.425836][ T8796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.425849][ T8796] RSP: 002b:00007f08b35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 215.425863][ T8796] RAX: ffffffffffffffda RBX: 00007f08b5625fa0 RCX: 00007f08b539fb19 [ 215.425872][ T8796] RDX: 0000000000000100 RSI: 0000200000006ac0 RDI: ffffffffffffff9c [ 215.425880][ T8796] RBP: 00007f08b5437b70 R08: 0000000000000000 R09: 0000000000000000 [ 215.425887][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.425895][ T8796] R13: 00007f08b5626038 R14: 00007f08b5625fa0 R15: 00007ffc486cedd8 [ 215.425910][ T8796] [ 215.448070][ T8796] FAULT_INJECTION: forcing a failure. [ 215.448070][ T8796] name failslab, interval 1, probability 5, space 0, times 80 [ 215.448094][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.0.1089 Not tainted syzkaller #0 PREEMPT(full) [ 215.448115][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 215.448126][ T8796] Call Trace: [ 215.448132][ T8796] [ 215.448140][ T8796] dump_stack_lvl+0x100/0x190 [ 215.448178][ T8796] should_fail_ex.cold+0x5/0xa [ 215.448207][ T8796] should_failslab+0xc2/0x120 [ 215.448230][ T8796] kmem_cache_alloc_noprof+0x92/0x6a0 [ 215.448257][ T8796] ? __asan_memcpy+0x3c/0x60 [ 215.448282][ T8796] ? __kernfs_new_node+0xd2/0xa10 [ 215.448311][ T8796] __kernfs_new_node+0xd2/0xa10 [ 215.448328][ T8796] ? lock_acquire+0x1d1/0x380 [ 215.448352][ T8796] ? kernfs_link_sibling+0x379/0x6f0 [ 215.448382][ T8796] ? __pfx___kernfs_new_node+0x10/0x10 [ 215.448403][ T8796] ? lock_acquire+0x1d1/0x380 [ 215.448426][ T8796] ? kernfs_root+0x23/0x2a0 [ 215.448452][ T8796] ? find_held_lock+0x2b/0x80 [ 215.448471][ T8796] ? kernfs_root+0xee/0x2a0 [ 215.448496][ T8796] ? kernfs_root+0xee/0x2a0 [ 215.448531][ T8796] kernfs_new_node+0x194/0x200 [ 215.448554][ T8796] ? __pfx_kernfs_new_node+0x10/0x10 [ 215.448574][ T8796] ? kernfs_add_one+0x213/0xb40 [ 215.448598][ T8796] __kernfs_create_file+0x53/0x350 [ 215.448624][ T8796] cgroup_addrm_files+0x48e/0xd30 [ 215.448655][ T8796] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 215.448674][ T8796] ? find_held_lock+0x2b/0x80 [ 215.448703][ T8796] ? css_next_descendant_pre+0x58/0x1a0 [ 215.448733][ T8796] css_populate_dir+0x161/0x590 [ 215.448756][ T8796] cgroup_apply_control_enable+0x441/0xdd0 [ 215.448793][ T8796] cgroup_mkdir+0x9da/0x13a0 [ 215.448825][ T8796] ? __pfx_cgroup_mkdir+0x10/0x10 [ 215.448853][ T8796] kernfs_iop_mkdir+0x111/0x190 [ 215.448871][ T8796] ? security_inode_mkdir+0xc9/0x2b0 [ 215.448894][ T8796] vfs_mkdir+0x36d/0x8a0 [ 215.448917][ T8796] filename_mkdirat+0x4c4/0x630 [ 215.448943][ T8796] ? __pfx_filename_mkdirat+0x10/0x10 [ 215.448966][ T8796] ? strncpy_from_user+0x19d/0x2d0 [ 215.448996][ T8796] ? do_getname+0x191/0x390 [ 215.449024][ T8796] __x64_sys_mkdirat+0x89/0xc0 [ 215.449048][ T8796] do_syscall_64+0x123/0x790 [ 215.449074][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.449091][ T8796] RIP: 0033:0x7f08b539fb19 [ 215.449107][ T8796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.449124][ T8796] RSP: 002b:00007f08b35f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 215.449144][ T8796] RAX: ffffffffffffffda RBX: 00007f08b5625fa0 RCX: 00007f08b539fb19 [ 215.449156][ T8796] RDX: 00000000000001ff RSI: 0000200000006b00 RDI: ffffffffffffff9c [ 215.449168][ T8796] RBP: 00007f08b5437b70 R08: 0000000000000000 R09: 0000000000000000 [ 215.449180][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.449192][ T8796] R13: 00007f08b5626038 R14: 00007f08b5625fa0 R15: 00007ffc486cedd8 [ 215.449218][ T8796] [ 215.489631][ T8796] cgroup: cgroup_addrm_files: failed to add cgroup.event_control, err=-12 [ 215.822588][ T8801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.445196][ T5805] firmware_class: fw_set_page_data: fw-emi26/loader.fw fw_priv=ffff88807bfa6c00 data=0000000000000000 size=0 [ 216.445281][ T5805] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 216.447649][ C0] virtqueue callback for ffff888028837e00 (ffffffff86ffd670) [ 216.447674][ C0] No more buffers in queue [ 216.447702][ C0] Receiving skb proto 0x0800 len 140 type 0 [ 216.447722][ C0] No more buffers in queue [ 216.447877][ C0] eth0: xmit ffff8880594ad780 42:01:0a:80:00:01 [ 216.447899][ C0] Added buffer head 3 to ffff888028837c00 [ 216.447919][ C0] virtqueue callback for ffff888028837c00 (ffffffff87006600) [ 216.447938][ C0] Sent skb ffff8880594ad780 [ 216.447966][ C0] No more buffers in queue [ 216.497308][ C0] virtqueue callback for ffff888028837e00 (ffffffff86ffd670) [ 216.497337][ C0] No more buffers in queue [ 216.497382][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 216.497401][ C0] No more buffers in queue [ 216.536850][ C0] eth0: xmit ffff888042071dc0 42:01:0a:80:00:01 [ 216.536878][ C0] Added buffer head 3 to ffff888028837c00 [ 216.536906][ C0] virtqueue callback for ffff888028837c00 (ffffffff87006600) [ 216.537003][ C0] Sent skb ffff888042071dc0 [ 216.537026][ C0] No more buffers in queue [ 216.568982][ T5805] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 216.577383][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: kworker/1:9 Not tainted syzkaller #0 PREEMPT(full) [ 216.586743][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 216.596796][ T5805] Workqueue: usb_hub_wq hub_event [ 216.601928][ T5805] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 216.609038][ T5805] Code: 48 89 04 24 e8 c3 2f bb 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 2f bb 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 216.628646][ T5805] RSP: 0018:ffffc900043eee20 EFLAGS: 00010202 [ 216.634724][ T5805] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9001a142000 [ 216.642708][ T5805] RDX: 0000000000100000 RSI: 0000000000000004 RDI: 0000000000000004 [ 216.650673][ T5805] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 216.658631][ T5805] R10: ffffc900043ee8c7 R11: 0000000000000001 R12: 0000000000000000 [ 216.666597][ T5805] R13: ffff8880289208c0 R14: ffffc900043eef40 R15: dffffc0000000000 [ 216.674557][ T5805] FS: 0000000000000000(0000) GS:ffff888122575000(0000) knlGS:0000000000000000 [ 216.683474][ T5805] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.690067][ T5805] CR2: 0000001b33a13ff8 CR3: 0000000074888000 CR4: 00000000003526f0 [ 216.690356][ T8810] kcov: kcov_task_exit: t = ffff888032902580, kcov->t = ffff888032902580 [ 216.706430][ T5805] Call Trace: [ 216.709705][ T5805] [ 216.712623][ T5805] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 216.719465][ T5805] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 216.725006][ T5805] ? emi26_probe+0x114/0xe30 [ 216.729586][ T5805] emi26_probe+0x13c/0xe30 [ 216.733989][ T5805] ? _raw_spin_lock_irqsave+0x52/0x60 [ 216.739347][ T5805] ? __pfx_emi26_probe+0x10/0x10 [ 216.744272][ T5805] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 216.750063][ T5805] ? lockdep_hardirqs_on+0x7d/0x110 [ 216.755247][ T5805] ? __pm_runtime_set_status+0x13c/0x970 [ 216.760894][ T5805] usb_probe_interface+0x386/0x980 [ 216.766000][ T5805] ? __pfx_usb_probe_interface+0x10/0x10 [ 216.771624][ T5805] ? kernfs_put+0x3f/0x60 [ 216.775938][ T5805] ? sysfs_create_link+0x68/0xc0 [ 216.780868][ T5805] ? __pfx_usb_probe_interface+0x10/0x10 [ 216.786495][ T5805] really_probe+0x241/0xa60 [ 216.790989][ T5805] __driver_probe_device+0x210/0x460 [ 216.796263][ T5805] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 216.802054][ T5805] driver_probe_device+0x4a/0x140 [ 216.807066][ T5805] __device_attach_driver+0x1df/0x320 [ 216.812431][ T5805] ? __pfx___device_attach_driver+0x10/0x10 [ 216.818314][ T5805] bus_for_each_drv+0x159/0x1e0 [ 216.823160][ T5805] ? __pfx_bus_for_each_drv+0x10/0x10 [ 216.828536][ T5805] ? lockdep_hardirqs_on+0x7d/0x110 [ 216.833735][ T5805] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 216.839544][ T5805] __device_attach+0x1e4/0x4c0 [ 216.844301][ T5805] ? __pfx___device_attach+0x10/0x10 [ 216.849575][ T5805] ? do_raw_spin_unlock+0x145/0x1e0 [ 216.854761][ T5805] device_initial_probe+0xaf/0xf0 [ 216.859781][ T5805] __bus_probe_device+0x60/0x160 [ 216.864703][ T5805] device_add+0x121d/0x1970 [ 216.869197][ T5805] ? __pfx_device_add+0x10/0x10 [ 216.874036][ T5805] ? mark_held_locks+0x40/0x70 [ 216.878795][ T5805] usb_set_configuration+0xd97/0x1dc0 [ 216.884165][ T5805] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 216.890216][ T5805] usb_generic_driver_probe+0xa1/0xe0 [ 216.895576][ T5805] usb_probe_device+0xef/0x400 [ 216.900328][ T5805] ? __pfx_usb_probe_device+0x10/0x10 [ 216.905692][ T5805] really_probe+0x241/0xa60 [ 216.910189][ T5805] __driver_probe_device+0x210/0x460 [ 216.915463][ T5805] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 216.921269][ T5805] driver_probe_device+0x4a/0x140 [ 216.926285][ T5805] __device_attach_driver+0x1df/0x320 [ 216.931647][ T5805] ? __pfx___device_attach_driver+0x10/0x10 [ 216.937531][ T5805] bus_for_each_drv+0x159/0x1e0 [ 216.942364][ T5805] ? __pfx_bus_for_each_drv+0x10/0x10 [ 216.947718][ T5805] ? lockdep_hardirqs_on+0x7d/0x110 [ 216.952910][ T5805] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 216.958702][ T5805] __device_attach+0x1e4/0x4c0 [ 216.963457][ T5805] ? __pfx___device_attach+0x10/0x10 [ 216.968729][ T5805] ? do_raw_spin_unlock+0x145/0x1e0 [ 216.973916][ T5805] device_initial_probe+0xaf/0xf0 [ 216.978930][ T5805] __bus_probe_device+0x60/0x160 [ 216.983852][ T5805] device_add+0x121d/0x1970 [ 216.988347][ T5805] ? __pfx_device_add+0x10/0x10 [ 216.993192][ T5805] ? usb_detect_static_quirks+0x335/0x3e0 [ 216.998900][ T5805] usb_new_device.part.0+0xcc2/0x1686 [ 217.004259][ T5805] ? do_raw_spin_lock+0x128/0x260 [ 217.009264][ T5805] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 217.015058][ T5805] ? mark_held_locks+0x40/0x70 [ 217.019812][ T5805] hub_event.cold+0x1e3/0xe90 [ 217.024484][ T5805] ? __pfx_hub_event+0x10/0x10 [ 217.029234][ T5805] ? init_data_structures_once+0x360/0x390 [ 217.035032][ T5805] ? lock_acquire+0x1d1/0x380 [ 217.039697][ T5805] ? process_one_work+0xa2c/0x1b10 [ 217.044795][ T5805] ? process_one_work+0x906/0x1b10 [ 217.049891][ T5805] ? process_one_work+0x906/0x1b10 [ 217.054990][ T5805] process_one_work+0xac7/0x1b10 [ 217.059917][ T5805] ? __pfx_process_one_work+0x10/0x10 [ 217.065274][ T5805] ? lock_acquire+0x1d1/0x380 [ 217.069948][ T5805] ? __pfx_hub_event+0x10/0x10 [ 217.074702][ T5805] worker_thread+0x5ef/0xe50 [ 217.079294][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 217.084393][ T5805] ? kthread+0x13a/0x450 [ 217.088635][ T5805] ? __pfx_worker_thread+0x10/0x10 [ 217.093737][ T5805] kthread+0x373/0x450 [ 217.097804][ T5805] ? __pfx_kthread+0x10/0x10 [ 217.102377][ T5805] ret_from_fork+0x730/0xd60 [ 217.106957][ T5805] ? __pfx_ret_from_fork+0x10/0x10 [ 217.112071][ T5805] ? __switch_to+0x800/0x10e0 [ 217.116736][ T5805] ? __pfx_kthread+0x10/0x10 [ 217.121320][ T5805] ret_from_fork_asm+0x1a/0x30 [ 217.126079][ T5805] [ 217.129078][ T5805] Modules linked in: [ 217.134835][ T5805] ---[ end trace 0000000000000000 ]--- [ 217.140932][ T29] firmware_class: fw_set_page_data: fw-emi26/loader.fw fw_priv=ffff88807bfa6c00 data=0000000000000000 size=0 [ 217.140986][ T29] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] SMP KASAN NOPTI [ 217.164573][ T29] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 217.172978][ T29] CPU: 1 UID: 0 PID: 29 Comm: kworker/1:1 Tainted: G D syzkaller #0 PREEMPT(full) [ 217.183729][ T29] Tainted: [D]=DIE [ 217.187425][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 217.197484][ T29] Workqueue: usb_hub_wq hub_event [ 217.202497][ T29] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 217.209588][ T29] Code: 48 89 04 24 e8 c3 2f bb 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 2f bb 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 217.229178][ T29] RSP: 0018:ffffc90000a56e20 EFLAGS: 00010202 [ 217.235236][ T29] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9001a943000 [ 217.243187][ T29] RDX: 0000000000100000 RSI: 0000000000000004 RDI: 0000000000000004 [ 217.251142][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.259106][ T29] R10: ffffffff90e06fa3 R11: 0000000000c1c3c8 R12: 0000000000000000 [ 217.267066][ T29] R13: ffff888046ffff00 R14: ffffc90000a56f40 R15: dffffc0000000000 [ 217.275037][ T29] FS: 0000000000000000(0000) GS:ffff888122575000(0000) knlGS:0000000000000000 [ 217.283956][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.290523][ T29] CR2: 0000001b33a13ff8 CR3: 0000000074888000 CR4: 00000000003526f0 [ 217.298491][ T29] Call Trace: [ 217.301762][ T29] [ 217.304679][ T29] ? __pfx_request_ihex_firmware.constprop.0+0x10/0x10 [ 217.311532][ T29] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 217.317071][ T29] ? emi26_probe+0x114/0xe30 [ 217.321651][ T29] emi26_probe+0x13c/0xe30 [ 217.326059][ T29] ? _raw_spin_lock_irqsave+0x52/0x60 [ 217.331422][ T29] ? __pfx_emi26_probe+0x10/0x10 [ 217.336345][ T29] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 217.342133][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 217.346595][ T8824] kcov: kcov_task_exit: t = ffff888034108000, kcov->t = ffff888034108000 [ 217.355704][ T29] ? __pm_runtime_set_status+0x13c/0x970 [ 217.361341][ T29] usb_probe_interface+0x386/0x980 [ 217.366453][ T29] ? __pfx_usb_probe_interface+0x10/0x10 [ 217.372080][ T29] ? kernfs_put+0x3f/0x60 [ 217.376397][ T29] ? sysfs_create_link+0x68/0xc0 [ 217.381325][ T29] ? __pfx_usb_probe_interface+0x10/0x10 [ 217.386948][ T29] really_probe+0x241/0xa60 [ 217.391441][ T29] __driver_probe_device+0x210/0x460 [ 217.396715][ T29] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 217.402511][ T29] driver_probe_device+0x4a/0x140 [ 217.407520][ T29] __device_attach_driver+0x1df/0x320 [ 217.412877][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 217.418756][ T29] bus_for_each_drv+0x159/0x1e0 [ 217.423611][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 217.428969][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 217.434152][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 217.439942][ T29] __device_attach+0x1e4/0x4c0 [ 217.444690][ T29] ? __pfx___device_attach+0x10/0x10 [ 217.449965][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 217.455152][ T29] device_initial_probe+0xaf/0xf0 [ 217.460165][ T29] __bus_probe_device+0x60/0x160 [ 217.465084][ T29] device_add+0x121d/0x1970 [ 217.469577][ T29] ? __pfx_device_add+0x10/0x10 [ 217.474415][ T29] ? mark_held_locks+0x40/0x70 [ 217.479169][ T29] usb_set_configuration+0xd97/0x1dc0 [ 217.484534][ T29] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 217.490582][ T29] usb_generic_driver_probe+0xa1/0xe0 [ 217.495939][ T29] usb_probe_device+0xef/0x400 [ 217.500694][ T29] ? __pfx_usb_probe_device+0x10/0x10 [ 217.506054][ T29] really_probe+0x241/0xa60 [ 217.510543][ T29] __driver_probe_device+0x210/0x460 [ 217.515816][ T29] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 217.521604][ T29] driver_probe_device+0x4a/0x140 [ 217.526616][ T29] __device_attach_driver+0x1df/0x320 [ 217.531974][ T29] ? __pfx___device_attach_driver+0x10/0x10 [ 217.537854][ T29] bus_for_each_drv+0x159/0x1e0 [ 217.542686][ T29] ? __pfx_bus_for_each_drv+0x10/0x10 [ 217.548041][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 217.553223][ T29] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 217.559014][ T29] __device_attach+0x1e4/0x4c0 [ 217.563767][ T29] ? __pfx___device_attach+0x10/0x10 [ 217.569040][ T29] ? do_raw_spin_unlock+0x145/0x1e0 [ 217.574223][ T29] device_initial_probe+0xaf/0xf0 [ 217.579235][ T29] __bus_probe_device+0x60/0x160 [ 217.584157][ T29] device_add+0x121d/0x1970 [ 217.588651][ T29] ? __pfx_device_add+0x10/0x10 [ 217.593489][ T29] ? usb_detect_static_quirks+0x335/0x3e0 [ 217.599196][ T29] usb_new_device.part.0+0xcc2/0x1686 [ 217.604568][ T29] ? do_raw_spin_lock+0x128/0x260 [ 217.609580][ T29] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 217.615369][ T29] ? mark_held_locks+0x40/0x70 [ 217.620124][ T29] hub_event.cold+0x1e3/0xe90 [ 217.624791][ T29] ? __pfx_hub_event+0x10/0x10 [ 217.629543][ T29] ? lock_acquire+0x1d1/0x380 [ 217.634209][ T29] ? process_one_work+0xa2c/0x1b10 [ 217.639306][ T29] ? process_one_work+0x906/0x1b10 [ 217.644400][ T29] ? process_one_work+0x906/0x1b10 [ 217.649495][ T29] process_one_work+0xac7/0x1b10 [ 217.654419][ T29] ? __pfx_process_one_work+0x10/0x10 [ 217.659774][ T29] ? lock_acquire+0x1d1/0x380 [ 217.664442][ T29] ? __pfx_hub_event+0x10/0x10 [ 217.669199][ T29] worker_thread+0x5ef/0xe50 [ 217.673775][ T29] ? kthread+0x13a/0x450 [ 217.677998][ T29] ? __pfx_worker_thread+0x10/0x10 [ 217.683095][ T29] kthread+0x373/0x450 [ 217.687145][ T29] ? __pfx_kthread+0x10/0x10 [ 217.691715][ T29] ret_from_fork+0x730/0xd60 [ 217.696297][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 217.701394][ T29] ? __switch_to+0x800/0x10e0 [ 217.706055][ T29] ? __pfx_kthread+0x10/0x10 [ 217.710628][ T29] ret_from_fork_asm+0x1a/0x30 [ 217.715387][ T29] [ 217.718386][ T29] Modules linked in: [ 217.722919][ T29] ---[ end trace 0000000000000000 ]--- [ 217.728827][ T24] kernfs runtime_status: removing [ 217.728867][ T24] kernfs control: removing [ 217. ** replaying previous printk message ** [ 217.728896][ T24] kernfs runtime_suspended_time: removing [ 217.728925][ T24] kernfs runtime_active_time: removing [ 217.728951][ T24] kernfs autosuspend_delay_ms: removing [ 217.728983][ T24] kernfs power: removing [ 217.729016][ T24] kernfs device: removing [ 217.729039][ T24] kernfs subsystem: removing [ 217.729063][ T24] kernfs emi26!loader.fw: removing [ 217.729078][ T24] kernfs uevent: removing [ 217.729095][ T24] kernfs loading: removing [ 217.729478][ T24] kernfs data: removing [ 217.729502][ T24] PM: Removing info for No Bus:emi26!loader.fw [ 217.729519][ T24] kobject: 'emi26!loader.fw' (ffff8880378c5008): kobject_uevent_env [ 217.729595][ T24] kobject: 'emi26!loader.fw' (ffff8880378c5008): fill_kobj_path: path = '/devices/platform/dummy_hcd.4/usb5/5-1/firmware/emi26!loader.fw' [ 217.729723][ T24] kernfs emi26!loader.fw: removing [ 217.729747][ T24] kernfs firmware: removing [ 217.729764][ T24] kobject: 'firmware' (ffff888073f20080): kobject_cleanup, parent 0000000000000000 [ 217.729784][ T24] kobject: 'firmware' (ffff888073f20080): calling ktype release [ 217.729811][ T24] kobject: 'firmware': free name [ 217.729822][ T24] kobject: 'emi26!loader.fw' (ffff8880378c5008): kobject_cleanup, parent 0000000000000000 [ 217.729841][ T24] kobject: 'emi26!loader.fw' (ffff8880378c5008): calling ktype release [ 217.729878][ T24] kobject: 'emi26!loader.fw': free name [ 217.729915][ T24] usb 5-1: emi26_load_firmware - request_firmware() failed [ 217.729929][ T24] usb 5-1: emi26_load_firmware - error loading firmware: error = -12 [ 217.729960][ T24] emi26 - firmware loader 5-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 217.729979][ T24] kernfs 5-1:1.0: removing [ 217.730007][ T24] kernfs driver: removing [ 217.730056][ T24] usb 5-1:1.0: bus: 'usb': __driver_probe_device: matched device with driver usbtest [ 217.730078][ T24] usb 5-1:1.0: bus: 'usb': really_probe: probing driver usbtest with device [ 217.730138][ T24] usbtest 5-1:1.0: usb_probe_interface [ 217.730153][ T24] usbtest 5-1:1.0: usb_probe_interface - got id [ 217.730172][ T24] usbtest 5-1:1.0: probe with driver usbtest rejects match -19 [ 217.730187][ T24] kernfs 5-1:1.0: removing [ 217.730209][ T24] kernfs driver: removing [ 217.730576][ T24] usb 5-1: driver: 'usb': driver_bound: bound to device [ 217.730606][ T24] kobject: '5-1' (ffff88802cbd00b0): kobject_uevent_env [ 217.730635][ T24] kobject: '5-1' (ffff88802cbd00b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.4/usb5/5-1' [ 217.730743][ T24] usb 5-1: bus: 'usb': really_probe: bound device to driver usb [ 217.730805][ T24] device: 'ep_00': device_add [ 217.730818][ T24] kobject: 'ep_00' (ffff8880480fd010): kobject_add_internal: parent: '5-1', set: 'devices' [ 217.730975][ T24] PM: Adding info for No Bus:ep_00 [ 217.730987][ T24] kobject: 'ep_00' (ffff8880480fd010): kobject_uevent_env [ 217.731001][ T24] kobject: 'ep_00' (ffff8880480fd010): kobject_uevent_env: filter function caused the event to drop! [ 217.731021][ T24] kcov: kcov_move_area: ffffc90017d3d000 1048576 <= ffffc90019941000 253660 [ 217.731343][ T24] kcov: kcov_remote_start: handle = 100000000000005, context: task [ 217.731359][ T24] kcov: kcov_start: t = ffff8880202e8000, size = 1048576, area = ffffc90019941000 [ 217.731377][ T24] hub 5-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 217.731422][ T24] dummy_hcd dummy_hcd.4: port status 0x00010100 has changes [ 217.731507][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 217.731525][ C1] kcov: kcov_start: t = ffff88801fed4b00, size = 262144, area = ffffc900022e2000 [ 217.731557][ C1] kcov: kcov_move_area: ffffc90017d3d000 1048576 <= ffffc900022e2000 167 [ 217.731580][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 217.731594][ C1] kcov: kcov_start: t = ffff88801fed4b00, size = 262144, area = ffffc900022e2000 [ 217.731616][ C1] kcov: kcov_move_area: ffffc90017d3d000 1048576 <= ffffc900022e2000 27 [ 217.734813][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 217.734832][ C1] kcov: kcov_start: t = ffff888014344b00, size = 262144, area = ffffc900022e2000 [ 217.734854][ C1] kcov: kcov_move_area: ffffc90017d3d000 1048576 <= ffffc900022e2000 27 [ 217.735219][ T24] usb usb5-port1: status 0100, change 0001, 12 Mb/s [ 217.735251][ T24] usb 5-1: USB disconnect, device number 5 [ 217.735276][ T24] usb 5-1: unregistering device [ 217.735290][ T24] usb 5-1: unregistering interface 5-1:1.0 [ 217.735340][ T24] kernfs power: removing [ 217.735372][ T24] kernfs uevent: removing [ 217.735393][ T24] kernfs bInterfaceNumber: removing [ 217.735426][ T24] kernfs bAlternateSetting: removing [ 217.735445][ T24] kernfs bNumEndpoints: removing [ 217.735465][ T24] kernfs bInterfaceClass: removing [ 217.735485][ T24] kernfs bInterfaceSubClass: removing [ 217.735503][ T24] kernfs bInterfaceProtocol: removing [ 217.735522][ T24] kernfs modalias: removing [ 217.735540][ T24] kernfs supports_autosuspend: removing [ 217.735558][ T24] kernfs authorized: removing [ 217.735585][ T24] kernfs subsystem: removing [ 217.735606][ T24] kernfs 5-1:1.0: removing [ 217.735624][ T24] bus: 'usb': remove device 5-1:1.0 [ 217.735636][ T24] PM: Removing info for usb:5-1:1.0 [ 217.735653][ T24] kobject: '5-1:1.0' (ffff88807fba1078): kobject_uevent_env [ 217.735679][ T24] kobject: '5-1:1.0' (ffff88807fba1078): fill_kobj_path: path = '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0' [ 217.735769][ T24] kernfs 5-1:1.0: removing [ 217.735784][ T24] kobject: '5-1:1.0' (ffff88807fba1078): kobject_cleanup, parent 0000000000000000 [ 217.735801][ T24] kobject: '5-1:1.0' (ffff88807fba1078): calling ktype release [ 217.735825][ T24] kobject: '5-1:1.0': free name [ 217.735843][ T24] usb 5-1: usb_disable_device nuking all URBs [ 217.735860][ T24] kernfs port: removing [ 217.735880][ T24] kernfs device: removing [ 217.735897][ T24] device: 'ep_00': device_unregister [ 217.735918][ T24] kernfs runtime_status: removing [ 217.735938][ T24] kernfs control: removing [ 217.735956][ T24] kernfs runtime_suspended_time: removing [ 217.735981][ T24] kernfs runtime_active_time: removing [ 217.735999][ T24] kernfs autosuspend_delay_ms: removing [ 217.736026][ T24] kernfs power: removing [ 217.736044][ T24] kernfs uevent: removing [ 217.736068][ T24] kernfs bLength: removing [ 217.736088][ T24] kernfs bEndpointAddress: removing [ 217.736107][ T24] kernfs bmAttributes: removing [ 217.736126][ T24] kernfs bInterval: removing [ 217.736143][ T24] kernfs wMaxPacketSize: removing [ 217.736162][ T24] kernfs interval: removing [ 217.736180][ T24] kernfs type: removing [ 217.736198][ T24] kernfs direction: removing [ 217.736216][ T24] PM: Removing info for No Bus:ep_00 [ 217.736228][ T24] kobject: 'ep_00' (ffff8880480fd010): kobject_uevent_env [ 217.736241][ T24] kobject: 'ep_00' (ffff8880480fd010): kobject_uevent_env: filter function caused the event to drop! [ 217.736261][ T24] kernfs ep_00: removing [ 217.736280][ T24] kobject: 'ep_00' (ffff8880480fd010): kobject_cleanup, parent 0000000000000000 [ 217.736295][ T24] kobject: 'ep_00' (ffff8880480fd010): calling ktype release [ 217.736315][ T24] kobject: 'ep_00': free name [ 217.736341][ T24] kernfs autosuspend: removing [ 217.736360][ T24] kernfs level: removing [ 217.736379][ T24] kernfs connected_duration: removing [ 217.736399][ T24] kernfs active_duration: removing [ 217.736419][ T24] kernfs persist: removing [ 217.736446][ T24] kernfs runtime_status: removing [ 217.736465][ T24] kernfs control: removing [ 217.736482][ T24] kernfs runtime_suspended_time: removing [ 217.736500][ T24] kernfs runtime_active_time: removing [ 217.736518][ T24] kernfs autosuspend_delay_ms: removing [ 217.736544][ T24] kernfs power: removing [ 217.740025][ T29] RIP: 0010:request_ihex_firmware.constprop.0+0x11e/0x250 [ 217.740059][ T29] Code: 48 89 04 24 e8 c3 2f bb 00 4c 39 24 24 0f 82 94 00 00 00 e8 b4 2f bb 00 49 8d 7c 24 04 48 89 f8 48 89 fe 48 c1 e8 03 83 e6 07 <42> 8a 0c 38 49 8d 44 24 05 48 89 c2 48 c1 ea 03 40 38 f1 40 0f 9e [ 217.740077][ T29] RSP: 0018:ffffc900043eee20 EFLAGS: 00010202 [ 217.740094][ T29] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc9001a142000 [ 217.740107][ T29] RDX: 0000000000100000 RSI: 0000000000000004 RDI: 0000000000000004 [ 217.740118][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 217.740130][ T29] R10: ffffc900043ee8c7 R11: 0000000000000001 R12: 0000000000000000 [ 217.740142][ T29] R13: ffff8880289208c0 R14: ffffc900043eef40 R15: dffffc0000000000 [ 217.740155][ T29] FS: 0000000000000000(0000) GS:ffff888122575000(0000) knlGS:0000000000000000 [ 217.740173][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.740185][ T29] CR2: 0000001b33a13ff8 CR3: 0000000059f40000 CR4: 00000000003526f0 [ 217.740199][ T29] Kernel panic - not syncing: Fatal exception [ 218.577845][ T29] Kernel Offset: disabled [ 218.582146][ T29] Rebooting in 86400 seconds..