last executing test programs: 2.867074266s ago: executing program 3 (id=381): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0', 0x1) 2.619748176s ago: executing program 3 (id=384): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000200)='dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(r0, &(0x7f00000002c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='zstd', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='algo=zstd dict=dict0 level=11', 0x1d) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='10485760', 0x8) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='dev_mnt/zram0\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20) close(r4) 2.496705776s ago: executing program 3 (id=386): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r2, &(0x7f0000000290)='1\x00', 0x1) 2.208184905s ago: executing program 3 (id=390): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000c00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.844174358s ago: executing program 3 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='sys_mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='sys_mnt\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000200)='dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(r0, &(0x7f00000002c0)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='zstd', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='algo=zstd dict=dict0 level=11', 0x1d) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='10485760', 0x8) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='dev_mnt/zram0\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20) close(r4) 1.705269107s ago: executing program 0 (id=396): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='get_crc.py\x00', 0x242, 0x1ff) write(r0, &(0x7f0000000300)='import struct, binascii\nmagic = 0x646d7a62\nversion = 2\ngen = 1\nsb_block = 0\nnr_meta_blocks = 16\nnr_reserved_seq = 16\nnr_chunks = 1\nnr_map_blocks = 1\nnr_bitmap_blocks = 1\ndmz_label = b\"dmz-test\" + b\"\\x00\" * 24\ndmz_uuid = b\"\\x01\" * 16\ndev_uuid = b\"\\x02\" * 16\nheader = struct.pack(\" 1 [ 99.809404][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.812297][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.845324][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.860185][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.861925][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.864067][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.871021][ T4913] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.888460][ T4913] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.891585][ T4913] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.980930][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.994721][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.008536][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.027698][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.037524][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.060748][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.061074][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.065725][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.138788][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.140975][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.964738][ T60] Bluetooth: hci0: command tx timeout [ 102.044357][ T60] Bluetooth: hci1: command tx timeout [ 102.203129][ T60] Bluetooth: hci3: command tx timeout [ 102.218217][ T60] Bluetooth: hci2: command tx timeout [ 102.564828][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.565101][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.565328][ T5602] bridge_slave_0: entered allmulticast mode [ 102.569318][ T5602] bridge_slave_0: entered promiscuous mode [ 102.618438][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.618694][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.618902][ T5605] bridge_slave_0: entered allmulticast mode [ 102.621517][ T5605] bridge_slave_0: entered promiscuous mode [ 102.671445][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.671720][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.671957][ T5602] bridge_slave_1: entered allmulticast mode [ 102.681890][ T5602] bridge_slave_1: entered promiscuous mode [ 102.726654][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.727077][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.727384][ T5605] bridge_slave_1: entered allmulticast mode [ 102.730138][ T5605] bridge_slave_1: entered promiscuous mode [ 102.731383][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.731634][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.731843][ T5603] bridge_slave_0: entered allmulticast mode [ 102.755233][ T5603] bridge_slave_0: entered promiscuous mode [ 102.814042][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.814322][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.814540][ T5609] bridge_slave_0: entered allmulticast mode [ 102.817094][ T5609] bridge_slave_0: entered promiscuous mode [ 102.860921][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.861306][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.861774][ T5603] bridge_slave_1: entered allmulticast mode [ 102.888398][ T5603] bridge_slave_1: entered promiscuous mode [ 102.914450][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.914743][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.914978][ T5609] bridge_slave_1: entered allmulticast mode [ 102.917556][ T5609] bridge_slave_1: entered promiscuous mode [ 102.984085][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.019280][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.048141][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.080990][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.094357][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.126178][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.156009][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.185956][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.240028][ T5602] team0: Port device team_slave_0 added [ 103.268228][ T5605] team0: Port device team_slave_0 added [ 103.294613][ T5602] team0: Port device team_slave_1 added [ 103.321647][ T5605] team0: Port device team_slave_1 added [ 103.334618][ T5603] team0: Port device team_slave_0 added [ 103.371111][ T5609] team0: Port device team_slave_0 added [ 103.399108][ T5603] team0: Port device team_slave_1 added [ 103.427289][ T5609] team0: Port device team_slave_1 added [ 103.474445][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.474463][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.474483][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.531736][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.531748][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.531768][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.587108][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.587122][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.587142][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.641362][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.641376][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.641396][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.645997][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.646063][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.646159][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.738109][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.738123][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.738142][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.791530][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.791544][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.791565][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.835695][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.835746][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.835901][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.042967][ T60] Bluetooth: hci0: command tx timeout [ 104.123108][ T60] Bluetooth: hci1: command tx timeout [ 104.282980][ T60] Bluetooth: hci2: command tx timeout [ 104.282990][ T5608] Bluetooth: hci3: command tx timeout [ 104.283789][ T5602] hsr_slave_0: entered promiscuous mode [ 104.286207][ T5602] hsr_slave_1: entered promiscuous mode [ 104.333177][ T5605] hsr_slave_0: entered promiscuous mode [ 104.335443][ T5605] hsr_slave_1: entered promiscuous mode [ 104.337058][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 104.337156][ T5605] Cannot create hsr debugfs directory [ 104.413473][ T5603] hsr_slave_0: entered promiscuous mode [ 104.415418][ T5603] hsr_slave_1: entered promiscuous mode [ 104.416904][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 104.416929][ T5603] Cannot create hsr debugfs directory [ 104.441012][ T5609] hsr_slave_0: entered promiscuous mode [ 104.448494][ T5609] hsr_slave_1: entered promiscuous mode [ 104.454797][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 104.456057][ T5609] Cannot create hsr debugfs directory [ 105.415109][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.460764][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.489017][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.507626][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.512234][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.561206][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.598873][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.642575][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.828116][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.866571][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.872445][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.909572][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.925519][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.968045][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.014131][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.058980][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.123791][ T60] Bluetooth: hci0: command tx timeout [ 106.203259][ T60] Bluetooth: hci1: command tx timeout [ 106.243096][ T5603] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.275275][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.294474][ T5603] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.327688][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.341761][ T5603] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.363217][ T60] Bluetooth: hci2: command tx timeout [ 106.363252][ T60] Bluetooth: hci3: command tx timeout [ 106.370431][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.415146][ T5603] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.458506][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.647222][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.692170][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.721624][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.747746][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.752383][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.817565][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.832509][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.869974][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.970012][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.118998][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.189117][ T1544] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.189311][ T1544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.312064][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.331572][ T1544] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.345067][ T1544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.477239][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.509750][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.548182][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.548358][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.601799][ T1544] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.601961][ T1544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.739494][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.770018][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.838570][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.838772][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.917958][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.918073][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.034185][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.128495][ T2367] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.128750][ T2367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.203019][ T5608] Bluetooth: hci0: command tx timeout [ 108.210544][ T2367] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.211023][ T2367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.282887][ T5608] Bluetooth: hci1: command tx timeout [ 108.444356][ T5608] Bluetooth: hci3: command tx timeout [ 108.444390][ T5608] Bluetooth: hci2: command tx timeout [ 109.376575][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.651608][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.764983][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.785055][ T5602] veth0_vlan: entered promiscuous mode [ 109.892019][ T5602] veth1_vlan: entered promiscuous mode [ 110.041988][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.080380][ T5605] veth0_vlan: entered promiscuous mode [ 110.152069][ T5603] veth0_vlan: entered promiscuous mode [ 110.164761][ T5605] veth1_vlan: entered promiscuous mode [ 110.199777][ T5602] veth0_macvtap: entered promiscuous mode [ 110.255640][ T5602] veth1_macvtap: entered promiscuous mode [ 110.276516][ T5603] veth1_vlan: entered promiscuous mode [ 110.388468][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.418004][ T5609] veth0_vlan: entered promiscuous mode [ 110.437137][ T5605] veth0_macvtap: entered promiscuous mode [ 110.453864][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.487814][ T5605] veth1_macvtap: entered promiscuous mode [ 110.515298][ T2367] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.519146][ T5609] veth1_vlan: entered promiscuous mode [ 110.545097][ T2367] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.572092][ T2367] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.593509][ T5603] veth0_macvtap: entered promiscuous mode [ 110.610085][ T102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.716057][ T5603] veth1_macvtap: entered promiscuous mode [ 110.737808][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.887194][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.059567][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.061703][ T102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.092445][ T102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.122088][ T102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.135866][ T5609] veth0_macvtap: entered promiscuous mode [ 111.156445][ T102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.176478][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.277192][ T5609] veth1_macvtap: entered promiscuous mode [ 111.348860][ T830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.360628][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.360649][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.408703][ T830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.453453][ T830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.490501][ T830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.746135][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.775361][ T2367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.775381][ T2367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.973815][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.003562][ T830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.003601][ T830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.279050][ T2367] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.324493][ T2367] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.350376][ T102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.351165][ T102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.475692][ T2367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.475714][ T2367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.669495][ T2367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.669517][ T2367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.555220][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.555276][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.612606][ T830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.612627][ T830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.663319][ T5753] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.799316][ T830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.799337][ T830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.692369][ T5705] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 115.834673][ T5706] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 116.057068][ T5705] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.057099][ T5705] usb 4-1: config 0 has no interfaces? [ 116.091479][ T5705] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 116.091512][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.091534][ T5705] usb 4-1: Product: syz [ 116.091549][ T5705] usb 4-1: Manufacturer: syz [ 116.091563][ T5705] usb 4-1: SerialNumber: syz [ 116.145874][ T5706] usb 2-1: config index 0 descriptor too short (expected 8251, got 59) [ 116.145914][ T5706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.145987][ T5706] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.150075][ T5706] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.150107][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.150128][ T5706] usb 2-1: SerialNumber: syz [ 116.271283][ T5705] usb 4-1: config 0 descriptor?? [ 116.431721][ T5706] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 116.930206][ T822] usb 2-1: USB disconnect, device number 2 [ 117.661437][ T5779] zram0: detected capacity change from 0 to 20480 [ 118.216730][ T5330] usb 4-1: USB disconnect, device number 2 [ 118.355905][ T5705] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.355969][ T5705] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.355995][ T5705] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.356022][ T5705] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.356049][ T5705] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.356084][ T5705] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.356111][ T5705] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.356138][ T5705] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.356164][ T5705] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.356188][ T5705] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 118.516664][ T5705] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 118.563331][ T5706] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.787035][ T5706] usb 1-1: config 0 has no interfaces? [ 118.787085][ T5706] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 118.787110][ T5706] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.904514][ T60] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 118.904760][ T5706] usb 1-1: config 0 descriptor?? [ 119.149204][ T37] usb 1-1: USB disconnect, device number 2 [ 119.939484][ T5815] zram: Cannot change disksize for initialized device [ 120.238295][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 120.407459][ T5824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.715522][ T5773] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 120.738416][ T5830] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET) [ 120.739415][ T5830] syzkaller1: entered promiscuous mode [ 120.739439][ T5830] syzkaller1: entered allmulticast mode [ 120.877017][ T5773] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.877045][ T5773] usb 3-1: config 0 has no interfaces? [ 120.882172][ T5773] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 120.882204][ T5773] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.882233][ T5773] usb 3-1: Product: syz [ 120.882247][ T5773] usb 3-1: Manufacturer: syz [ 120.882262][ T5773] usb 3-1: SerialNumber: syz [ 120.976350][ T5773] usb 3-1: config 0 descriptor?? [ 121.541790][ T5832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.673868][ T5837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.681070][ T5832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.790923][ T5832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.557592][ T5844] zram: Cannot change disksize for initialized device [ 123.386753][ T5852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.38'. [ 123.388817][ T5854] syzkaller1: entered promiscuous mode [ 123.388842][ T5854] syzkaller1: entered allmulticast mode [ 123.459113][ T5706] usb 3-1: USB disconnect, device number 2 [ 123.530808][ T5855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.599727][ T5872] zram: Cannot change disksize for initialized device [ 125.051313][ T5870] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 125.202029][ T5886] syzkaller1: entered promiscuous mode [ 125.202056][ T5886] syzkaller1: entered allmulticast mode [ 125.780541][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'. [ 125.897702][ T5900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.021930][ T5901] zram: Cannot change disksize for initialized device [ 126.253160][ T5330] hid_parser_main: 22 callbacks suppressed [ 126.253186][ T5330] playstation 0003:054C:05C4.0002: unknown main item tag 0x0 [ 126.253217][ T5330] playstation 0003:054C:05C4.0002: unknown main item tag 0x0 [ 126.253244][ T5330] playstation 0003:054C:05C4.0002: unknown main item tag 0x0 [ 126.253277][ T5330] playstation 0003:054C:05C4.0002: unknown main item tag 0x0 [ 126.253320][ T5330] playstation 0003:054C:05C4.0002: item fetching failed at offset 6/7 [ 126.253948][ T5330] playstation 0003:054C:05C4.0002: Parse failed [ 126.254006][ T5330] playstation 0003:054C:05C4.0002: probe with driver playstation failed with error -22 [ 127.140396][ T5923] zram: Cannot change disksize for initialized device [ 127.741700][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 127.824895][ T5944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.902881][ T822] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 128.074492][ T822] usb 2-1: not running at top speed; connect to a high speed hub [ 128.076330][ T822] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 128.076383][ T822] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 128.076408][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.279262][ T822] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 128.499834][ T822] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 128.520541][ T822] usb 2-1: USB disconnect, device number 3 [ 128.767162][ T5954] zram: Cannot change disksize for initialized device [ 128.796256][ T822] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 128.901707][ T822] garmin_gps 2-1:1.0: device disconnected [ 129.646044][ T5974] f_midi2: Invalid MIDI1 group definitions for block 0:0 [ 129.708451][ T5974] Config c/1 of g1 needs at least one function. [ 129.711464][ T5974] udc dummy_udc.0: failed to start g1: -22 [ 129.711495][ T5974] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 129.745053][ T5974] UDC core: g1: couldn't find an available UDC or it's busy [ 131.362333][ T5983] Dynamic Preempt: lazy [ 131.472515][ T6004] f_midi2: Invalid MIDI1 group definitions for block 0:0 [ 131.553588][ T6006] Config c/1 of g1 needs at least one function. [ 131.553746][ T6006] udc dummy_udc.0: failed to start g1: -22 [ 131.553771][ T6006] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 131.559409][ T6006] UDC core: g1: couldn't find an available UDC or it's busy [ 132.574064][ T6031] f_midi2: Invalid MIDI1 group definitions for block 0:0 [ 132.616760][ T6031] Config c/1 of g1 needs at least one function. [ 132.616921][ T6031] udc dummy_udc.0: failed to start g1: -22 [ 132.616946][ T6031] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 132.648064][ T6031] UDC core: g1: couldn't find an available UDC or it's busy [ 133.097595][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.097737][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.495588][ T38] audit: type=1800 audit(1785424973.686:2): pid=6064 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.130" name="idVendor" dev="configfs" ino=11323 res=0 errno=0 [ 134.497050][ T38] audit: type=1800 audit(1785424973.696:3): pid=6064 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.130" name="idProduct" dev="configfs" ino=11324 res=0 errno=0 [ 134.501164][ T38] audit: type=1800 audit(1785424973.696:4): pid=6064 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.130" name="use" dev="configfs" ino=11325 res=0 errno=0 [ 134.565708][ T38] audit: type=1800 audit(1785424973.776:5): pid=6064 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.130" name="serialnumber" dev="configfs" ino=11327 res=0 errno=0 [ 134.628087][ T38] audit: type=1800 audit(1785424973.826:6): pid=6064 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.130" name="UDC" dev="configfs" ino=11331 res=0 errno=0 [ 134.846315][ T6072] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 134.846346][ T6072] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 134.913671][ T6075] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 134.916774][ T6072] vhci_hcd vhci_hcd.0: Device attached [ 135.167209][ T9] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 135.373172][ T9] usb 33-1: SetAddress Request (2) to port 0 [ 135.604468][ T9] usb 33-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.02 [ 135.604490][ T9] usb 33-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.659343][ T38] audit: type=1800 audit(1785424975.846:7): pid=6105 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.143" name="idVendor" dev="configfs" ino=10932 res=0 errno=0 [ 136.678912][ T38] audit: type=1800 audit(1785424975.876:8): pid=6105 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.143" name="idProduct" dev="configfs" ino=10933 res=0 errno=0 [ 136.728122][ T38] audit: type=1800 audit(1785424975.926:9): pid=6105 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.143" name="use" dev="configfs" ino=10934 res=0 errno=0 [ 136.761152][ T38] audit: type=1800 audit(1785424975.956:10): pid=6105 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.143" name="serialnumber" dev="configfs" ino=10935 res=0 errno=0 [ 136.769364][ T38] audit: type=1800 audit(1785424975.966:11): pid=6105 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.143" name="UDC" dev="configfs" ino=10936 res=0 errno=0 [ 136.863818][ T6108] usbip-vudc usbip-vudc.0: Device already connected [ 136.889745][ T6108] vhci_hcd vhci_hcd.0: port 0 already used [ 137.431800][ T6121] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 138.698112][ T6150] usbip-vudc usbip-vudc.0: Device already connected [ 138.717046][ T6150] vhci_hcd vhci_hcd.0: port 0 already used [ 138.756453][ T6149] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 139.697931][ T6177] i2c i2c-0: new_device: Invalid device name [ 139.896318][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 140.057000][ T9] usb 1-1: config index 0 descriptor too short (expected 32, got 21) [ 140.057033][ T9] usb 1-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 140.057084][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.070226][ T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6001, bcdDevice= 0.00 [ 140.070314][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.070368][ T9] usb 1-1: Product: syz [ 140.070410][ T9] usb 1-1: Manufacturer: syz [ 140.070451][ T9] usb 1-1: SerialNumber: syz [ 140.190128][ T6185] FAULT_INJECTION: forcing a failure. [ 140.190128][ T6185] name failslab, interval 1, probability 100, space 0, times 10 [ 140.190181][ T6185] CPU: 1 UID: 0 PID: 6185 Comm: syz.1.175 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.190206][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.190202][ T9] FAULT_INJECTION: forcing a failure. [ 140.190202][ T9] name failslab, interval 1, probability 100, space 0, times 10 [ 140.190228][ T6185] Call Trace: [ 140.190236][ T6185] [ 140.190244][ T6185] dump_stack_lvl+0xe8/0x150 [ 140.190275][ T6185] should_fail_ex+0x467/0x600 [ 140.190305][ T6185] should_failslab+0xa8/0x100 [ 140.190324][ T6185] ? do_getname+0x2e/0x250 [ 140.190354][ T6185] kmem_cache_alloc_noprof+0x9e/0x680 [ 140.190382][ T6185] ? do_getname+0x2e/0x250 [ 140.190416][ T6185] do_getname+0x2e/0x250 [ 140.190444][ T6185] ? getname_flags+0x11/0x20 [ 140.190475][ T6185] do_sys_openat2+0xcc/0x200 [ 140.190507][ T6185] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.190543][ T6185] ? rcu_is_watching+0x15/0xb0 [ 140.190570][ T6185] __x64_sys_openat+0x138/0x170 [ 140.190604][ T6185] do_syscall_64+0x17b/0x530 [ 140.190626][ T6185] ? irqentry_exit+0x10f/0x8f0 [ 140.190644][ T6185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.190664][ T6185] ? clear_bhb_loop+0x40/0x90 [ 140.190687][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.190712][ T6185] RIP: 0033:0x7f8f575cdf99 [ 140.190734][ T6185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.190749][ T6185] RSP: 002b:00007f8f55826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.190773][ T6185] RAX: ffffffffffffffda RBX: 00007f8f57855fa0 RCX: 00007f8f575cdf99 [ 140.190787][ T6185] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 140.190798][ T6185] RBP: 00007f8f57664ec4 R08: 0000000000000000 R09: 0000000000000000 [ 140.190810][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.190823][ T6185] R13: 00007f8f57856038 R14: 00007f8f57855fa0 R15: 00007ffcdaed2f48 [ 140.190852][ T6185] [ 140.190864][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.190890][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.190905][ T9] Workqueue: usb_hub_wq hub_event [ 140.190933][ T9] Call Trace: [ 140.190941][ T9] [ 140.190956][ T9] dump_stack_lvl+0xe8/0x150 [ 140.190979][ T9] should_fail_ex+0x467/0x600 [ 140.191004][ T9] should_failslab+0xa8/0x100 [ 140.191020][ T9] kmem_cache_alloc_node_noprof+0xac/0x660 [ 140.191044][ T9] ? __alloc_skb+0x1d7/0x7a0 [ 140.191065][ T9] ? __alloc_skb+0x1d7/0x7a0 [ 140.191092][ T9] __alloc_skb+0x1d7/0x7a0 [ 140.191119][ T9] alloc_uevent_skb+0x7d/0x230 [ 140.191147][ T9] kobject_uevent_net_broadcast+0x2fd/0x560 [ 140.191175][ T9] kobject_uevent_env+0x569/0x9e0 [ 140.191203][ T9] device_add+0x544/0xb80 [ 140.191223][ T9] usb_new_device+0x98d/0x1610 [ 140.191243][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 140.191264][ T9] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 140.191286][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 140.191311][ T9] hub_event+0x28cf/0x4cf0 [ 140.191370][ T9] ? __pfx_hub_event+0x10/0x10 [ 140.191396][ T9] ? rcu_is_watching+0x15/0xb0 [ 140.191416][ T9] ? process_one_work+0x7fd/0x1480 [ 140.191433][ T9] process_one_work+0xaaf/0x1480 [ 140.191466][ T9] ? __pfx_process_one_work+0x10/0x10 [ 140.191481][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 140.191509][ T9] ? assign_work+0x3cf/0x5d0 [ 140.191530][ T9] worker_thread+0xb05/0x10d0 [ 140.191565][ T9] kthread+0x388/0x470 [ 140.191588][ T9] ? __pfx_worker_thread+0x10/0x10 [ 140.191604][ T9] ? __pfx_kthread+0x10/0x10 [ 140.191633][ T9] ret_from_fork+0x514/0xb70 [ 140.191659][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 140.191682][ T9] ? __switch_to+0xc89/0x1420 [ 140.191704][ T9] ? __pfx_kthread+0x10/0x10 [ 140.191727][ T9] ret_from_fork_asm+0x1a/0x30 [ 140.191763][ T9] [ 140.192263][ T6190] FAULT_INJECTION: forcing a failure. [ 140.192263][ T6190] name failslab, interval 1, probability 100, space 0, times 9 [ 140.192302][ T6190] CPU: 0 UID: 0 PID: 6190 Comm: syz.2.177 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.192320][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.192329][ T6190] Call Trace: [ 140.192336][ T6190] [ 140.192342][ T6190] dump_stack_lvl+0xe8/0x150 [ 140.192366][ T6190] should_fail_ex+0x467/0x600 [ 140.192390][ T6190] should_failslab+0xa8/0x100 [ 140.192405][ T6190] ? do_getname+0x2e/0x250 [ 140.192429][ T6190] kmem_cache_alloc_noprof+0x9e/0x680 [ 140.192453][ T6190] ? do_getname+0x2e/0x250 [ 140.192482][ T6190] do_getname+0x2e/0x250 [ 140.192505][ T6190] ? getname_flags+0x11/0x20 [ 140.192531][ T6190] do_sys_openat2+0xcc/0x200 [ 140.192559][ T6190] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.192590][ T6190] ? rcu_is_watching+0x15/0xb0 [ 140.192618][ T6190] __x64_sys_openat+0x138/0x170 [ 140.192648][ T6190] do_syscall_64+0x17b/0x530 [ 140.192664][ T6190] ? irqentry_exit+0x10f/0x8f0 [ 140.192680][ T6190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.192696][ T6190] ? clear_bhb_loop+0x40/0x90 [ 140.192745][ T6190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.192767][ T6190] RIP: 0033:0x7f83962cdf99 [ 140.192787][ T6190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.192805][ T6190] RSP: 002b:00007f8394526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.192828][ T6190] RAX: ffffffffffffffda RBX: 00007f8396555fa0 RCX: 00007f83962cdf99 [ 140.192844][ T6190] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 140.192859][ T6190] RBP: 00007f8396364ec4 R08: 0000000000000000 R09: 0000000000000000 [ 140.192874][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.192886][ T6190] R13: 00007f8396556038 R14: 00007f8396555fa0 R15: 00007ffe93cf51b8 [ 140.192919][ T6190] [ 140.193856][ T4953] FAULT_INJECTION: forcing a failure. [ 140.193856][ T4953] name failslab, interval 1, probability 100, space 0, times 9 [ 140.193932][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.193995][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.194026][ T4953] Call Trace: [ 140.194048][ T4953] [ 140.194077][ T4953] dump_stack_lvl+0xe8/0x150 [ 140.194147][ T4953] should_fail_ex+0x467/0x600 [ 140.194232][ T4953] should_failslab+0xa8/0x100 [ 140.194295][ T4953] kmem_cache_alloc_node_noprof+0xac/0x660 [ 140.194381][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 140.194450][ T4953] ? __alloc_skb+0x1d7/0x7a0 [ 140.194499][ T4953] __alloc_skb+0x1d7/0x7a0 [ 140.194623][ T4953] alloc_skb_with_frags+0xc6/0x760 [ 140.194709][ T4953] ? kasan_save_track+0x4f/0x80 [ 140.194787][ T4953] ? kasan_save_track+0x3e/0x80 [ 140.194869][ T4953] ? kasan_save_free_info+0x40/0x50 [ 140.194936][ T4953] ? __kasan_slab_free+0x5c/0x80 [ 140.195012][ T4953] ? kfree+0x1c5/0x6c0 [ 140.195084][ T4953] ? syslog_print+0x57c/0x610 [ 140.195144][ T4953] ? do_syslog+0x583/0x7d0 [ 140.195205][ T4953] ? __x64_sys_syslog+0x7c/0x90 [ 140.195278][ T4953] sock_alloc_send_pskb+0x884/0x9a0 [ 140.195383][ T4953] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 140.195467][ T4953] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 140.195562][ T4953] unix_dgram_sendmsg+0x4da/0x17b0 [ 140.195656][ T4953] ? lockdep_hardirqs_on+0x7a/0x110 [ 140.195728][ T4953] ? kfree+0x1c5/0x6c0 [ 140.195795][ T4953] ? syslog_print+0x57c/0x610 [ 140.195925][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 140.196048][ T4953] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 140.196122][ T4953] sock_sendmsg_nosec+0x13a/0x180 [ 140.196196][ T4953] __sys_sendto+0x41e/0x5d0 [ 140.196290][ T4953] ? __pfx___sys_sendto+0x10/0x10 [ 140.196399][ T4953] ? kvm_sched_clock_read+0x11/0x20 [ 140.196515][ T4953] ? rcu_is_watching+0x15/0xb0 [ 140.196598][ T4953] __x64_sys_sendto+0xde/0x100 [ 140.196691][ T4953] do_syscall_64+0x17b/0x530 [ 140.196746][ T4953] ? irqentry_exit+0x10f/0x8f0 [ 140.196799][ T4953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.196861][ T4953] ? clear_bhb_loop+0x40/0x90 [ 140.196933][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.196986][ T4953] RIP: 0033:0x7fc90e5c4407 [ 140.197040][ T4953] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 140.197084][ T4953] RSP: 002b:00007fff2d547290 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 140.197140][ T4953] RAX: ffffffffffffffda RBX: 00007fc90e474c80 RCX: 00007fc90e5c4407 [ 140.197182][ T4953] RDX: 0000000000000055 RSI: 00007fff2d5473d0 RDI: 0000000000000003 [ 140.197224][ T4953] RBP: 00007fff2d547800 R08: 0000000000000000 R09: 0000000000000000 [ 140.197270][ T4953] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff2d547818 [ 140.197318][ T4953] R13: 00007fff2d5473d0 R14: 000000000000003a R15: 00007fff2d5473d0 [ 140.197419][ T4953] [ 140.198074][ T9] FAULT_INJECTION: forcing a failure. [ 140.198074][ T9] name failslab, interval 1, probability 100, space 0, times 7 [ 140.198160][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.198223][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.198250][ T9] Workqueue: usb_hub_wq hub_event [ 140.198332][ T9] Call Trace: [ 140.198354][ T9] [ 140.198375][ T9] dump_stack_lvl+0xe8/0x150 [ 140.198462][ T9] should_fail_ex+0x467/0x600 [ 140.198559][ T9] should_failslab+0xa8/0x100 [ 140.198646][ T9] kmem_cache_alloc_node_noprof+0xac/0x660 [ 140.198754][ T9] ? __alloc_skb+0x1d7/0x7a0 [ 140.198829][ T9] ? __alloc_skb+0x1d7/0x7a0 [ 140.198965][ T9] __alloc_skb+0x1d7/0x7a0 [ 140.199052][ T9] alloc_uevent_skb+0x7d/0x230 [ 140.199154][ T9] kobject_uevent_net_broadcast+0x2fd/0x560 [ 140.199227][ T9] kobject_uevent_env+0x569/0x9e0 [ 140.199267][ T9] device_add+0x544/0xb80 [ 140.199295][ T9] usb_new_device+0x98d/0x1610 [ 140.199347][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 140.199423][ T9] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 140.199507][ T9] ? __pfx_usb_new_device+0x10/0x10 [ 140.199600][ T9] hub_event+0x28cf/0x4cf0 [ 140.199825][ T9] ? __pfx_hub_event+0x10/0x10 [ 140.199923][ T9] ? rcu_is_watching+0x15/0xb0 [ 140.200013][ T9] ? process_one_work+0x7fd/0x1480 [ 140.200099][ T9] process_one_work+0xaaf/0x1480 [ 140.200235][ T9] ? __pfx_process_one_work+0x10/0x10 [ 140.200288][ T9] ? do_raw_spin_lock+0x12b/0x2f0 [ 140.200394][ T9] ? assign_work+0x3cf/0x5d0 [ 140.200475][ T9] worker_thread+0xb05/0x10d0 [ 140.200621][ T9] kthread+0x388/0x470 [ 140.200706][ T9] ? __pfx_worker_thread+0x10/0x10 [ 140.200768][ T9] ? __pfx_kthread+0x10/0x10 [ 140.200828][ T9] ret_from_fork+0x514/0xb70 [ 140.200912][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 140.200997][ T9] ? __switch_to+0xc89/0x1420 [ 140.201079][ T9] ? __pfx_kthread+0x10/0x10 [ 140.201153][ T9] ret_from_fork_asm+0x1a/0x30 [ 140.201294][ T9] [ 140.202375][ T6184] FAULT_INJECTION: forcing a failure. [ 140.202375][ T6184] name failslab, interval 1, probability 100, space 0, times 6 [ 140.202459][ T6184] CPU: 0 UID: 0 PID: 6184 Comm: syz.1.175 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.202524][ T6184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.202556][ T6184] Call Trace: [ 140.202576][ T6184] [ 140.202598][ T6184] dump_stack_lvl+0xe8/0x150 [ 140.202683][ T6184] should_fail_ex+0x467/0x600 [ 140.202730][ T6184] should_failslab+0xa8/0x100 [ 140.202751][ T6184] ? taskstats_exit+0x19e/0xe10 [ 140.202783][ T6184] kmem_cache_alloc_noprof+0x9e/0x680 [ 140.202813][ T6184] ? taskstats_exit+0x19e/0xe10 [ 140.202851][ T6184] taskstats_exit+0x19e/0xe10 [ 140.202880][ T6184] ? acct_update_integrals+0x342/0x410 [ 140.202908][ C1] FAULT_INJECTION: forcing a failure. [ 140.202908][ C1] name failslab, interval 1, probability 100, space 0, times 6 [ 140.202914][ T6184] ? acct_update_integrals+0x38a/0x410 [ 140.202948][ T6184] ? __pfx_taskstats_exit+0x10/0x10 [ 140.202982][ T6184] ? seccomp_filter_release+0x18a/0x2d0 [ 140.203005][ T6184] do_exit+0x6ad/0x2360 [ 140.203036][ T6184] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 140.203062][ T6184] ? __pfx_do_exit+0x10/0x10 [ 140.203091][ T6184] ? rt_spin_unlock+0x157/0x200 [ 140.203121][ T6184] ? rt_spin_unlock+0x163/0x200 [ 140.203149][ T6184] do_group_exit+0x22d/0x2f0 [ 140.203179][ T6184] __x64_sys_exit_group+0x3f/0x40 [ 140.203206][ T6184] x64_sys_call+0x18bf/0x18c0 [ 140.203232][ T6184] do_syscall_64+0x17b/0x530 [ 140.203250][ T6184] ? irqentry_exit+0x10f/0x8f0 [ 140.203267][ T6184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.203308][ T6184] ? clear_bhb_loop+0x40/0x90 [ 140.203331][ T6184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.203349][ T6184] RIP: 0033:0x7f8f575cdf99 [ 140.203366][ T6184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.203381][ T6184] RSP: 002b:00007ffcdaed3288 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 140.203399][ T6184] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f575cdf99 [ 140.203412][ T6184] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.203423][ T6184] RBP: 00007ffcdaed32ec R08: 0000000000000000 R09: 00000000000927c0 [ 140.203435][ T6184] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000034 [ 140.203445][ T6184] R13: 00000000000927c0 R14: 000000000002209f R15: 00007ffcdaed3340 [ 140.203472][ T6184] [ 140.203485][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.203512][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.203525][ C1] Call Trace: [ 140.203534][ C1] [ 140.203543][ C1] dump_stack_lvl+0xe8/0x150 [ 140.203574][ C1] should_fail_ex+0x467/0x600 [ 140.203608][ C1] should_failslab+0xa8/0x100 [ 140.203631][ C1] kmem_cache_alloc_node_noprof+0xac/0x660 [ 140.203661][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 140.203686][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 140.203718][ C1] __alloc_skb+0x1d7/0x7a0 [ 140.203748][ C1] wg_packet_send_keepalive+0x65/0x2c0 [ 140.203779][ C1] call_timer_fn+0x192/0x5e0 [ 140.203801][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 140.203826][ C1] ? call_timer_fn+0xd4/0x5e0 [ 140.203852][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 140.203887][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 140.203908][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 140.203936][ C1] __run_timer_base+0x67b/0x9b0 [ 140.203977][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 140.204008][ C1] ? lock_acquire+0x115/0x350 [ 140.204055][ C1] run_timer_softirq+0xb7/0x170 [ 140.204079][ C1] handle_softirqs+0x1d9/0x6c0 [ 140.204128][ C1] run_ktimerd+0x69/0x100 [ 140.204157][ C1] smpboot_thread_fn+0x57c/0xa80 [ 140.204188][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 140.204225][ C1] kthread+0x388/0x470 [ 140.204255][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 140.204280][ C1] ? __pfx_kthread+0x10/0x10 [ 140.204312][ C1] ret_from_fork+0x514/0xb70 [ 140.204346][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 140.204376][ C1] ? __switch_to+0xc89/0x1420 [ 140.204406][ C1] ? __pfx_kthread+0x10/0x10 [ 140.204438][ C1] ret_from_fork_asm+0x1a/0x30 [ 140.204488][ C1] [ 140.204508][ C1] FAULT_INJECTION: forcing a failure. [ 140.204508][ C1] name failslab, interval 1, probability 100, space 0, times 4 [ 140.204534][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.204546][ T4953] FAULT_INJECTION: forcing a failure. [ 140.204546][ T4953] name failslab, interval 1, probability 100, space 0, times 3 [ 140.204560][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.204573][ C1] Call Trace: [ 140.204580][ C1] [ 140.204587][ C1] dump_stack_lvl+0xe8/0x150 [ 140.204614][ C1] should_fail_ex+0x467/0x600 [ 140.204644][ C1] should_failslab+0xa8/0x100 [ 140.204664][ C1] kmem_cache_alloc_node_noprof+0xac/0x660 [ 140.204693][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 140.204718][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 140.204749][ C1] __alloc_skb+0x1d7/0x7a0 [ 140.204779][ C1] wg_packet_send_keepalive+0x65/0x2c0 [ 140.204809][ C1] call_timer_fn+0x192/0x5e0 [ 140.204831][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 140.204855][ C1] ? call_timer_fn+0xd4/0x5e0 [ 140.204876][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 140.204909][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 140.204928][ C1] ? __pfx_wg_expired_send_persistent_keepalive+0x10/0x10 [ 140.204953][ C1] __run_timer_base+0x67b/0x9b0 [ 140.204987][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 140.205013][ C1] ? lock_acquire+0x115/0x350 [ 140.205052][ C1] run_timer_softirq+0xb7/0x170 [ 140.205073][ C1] handle_softirqs+0x1d9/0x6c0 [ 140.205104][ C1] run_ktimerd+0x69/0x100 [ 140.205135][ C1] smpboot_thread_fn+0x57c/0xa80 [ 140.205161][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 140.205192][ C1] kthread+0x388/0x470 [ 140.205219][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 140.205241][ C1] ? __pfx_kthread+0x10/0x10 [ 140.205268][ C1] ret_from_fork+0x514/0xb70 [ 140.205298][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 140.205326][ C1] ? __switch_to+0xc89/0x1420 [ 140.205351][ C1] ? __pfx_kthread+0x10/0x10 [ 140.205379][ C1] ret_from_fork_asm+0x1a/0x30 [ 140.205422][ C1] [ 140.205434][ T4953] CPU: 0 UID: 0 PID: 4953 Comm: klogd Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.205457][ T4953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.205470][ T4953] Call Trace: [ 140.205511][ T4953] [ 140.205539][ T4953] dump_stack_lvl+0xe8/0x150 [ 140.205649][ T4953] should_fail_ex+0x467/0x600 [ 140.205724][ T4953] ? sock_alloc_inode+0x2c/0x1a0 [ 140.205798][ T4953] should_failslab+0xa8/0x100 [ 140.205868][ T4953] kmem_cache_alloc_lru_noprof+0xa2/0x670 [ 140.205952][ T4953] ? sock_alloc_inode+0x2c/0x1a0 [ 140.206034][ T4953] ? __pfx_sock_alloc_inode+0x10/0x10 [ 140.206095][ T4953] sock_alloc_inode+0x2c/0x1a0 [ 140.206153][ T4953] ? __pfx_sock_alloc_inode+0x10/0x10 [ 140.206209][ T4953] alloc_inode+0x6a/0x1b0 [ 140.206305][ T4953] __sock_create+0x11e/0x960 [ 140.206378][ T4953] ? fput_close_sync+0x11f/0x240 [ 140.206442][ T4953] __sys_socket+0xd9/0x320 [ 140.206525][ T4953] __x64_sys_socket+0x7a/0x90 [ 140.206597][ T4953] do_syscall_64+0x17b/0x530 [ 140.206660][ T4953] ? irqentry_exit+0x10f/0x8f0 [ 140.206714][ T4953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.206776][ T4953] ? clear_bhb_loop+0x40/0x90 [ 140.206847][ T4953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.206902][ T4953] RIP: 0033:0x7fc90e63f707 [ 140.206976][ T4953] Code: 54 24 0c e8 6b ac ff ff 83 f8 ff 74 04 8b 44 24 0c 48 83 c4 18 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c1 e6 0c 00 f7 d8 64 89 01 48 [ 140.207034][ T4953] RSP: 002b:00007fff2d5472a8 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 140.207063][ T4953] RAX: ffffffffffffffda RBX: 0000000000000055 RCX: 00007fc90e63f707 [ 140.207093][ T4953] RDX: 0000000000000000 RSI: 0000000000080002 RDI: 0000000000000001 [ 140.207119][ T4953] RBP: 00007fc90e6cb560 R08: 0000000000000000 R09: 0000000000000000 [ 140.207160][ T4953] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 140.207193][ T4953] R13: 00007fff2d5473d0 R14: 000000000000003a R15: 00007fff2d5473d0 [ 140.207277][ T4953] [ 140.207474][ T6185] FAULT_INJECTION: forcing a failure. [ 140.207474][ T6185] name failslab, interval 1, probability 100, space 0, times 2 [ 140.207548][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: syz.1.175 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.207622][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.207653][ T6185] Call Trace: [ 140.207674][ T6185] [ 140.207695][ T6185] dump_stack_lvl+0xe8/0x150 [ 140.207776][ T6185] should_fail_ex+0x467/0x600 [ 140.207859][ T6185] should_failslab+0xa8/0x100 [ 140.207913][ T6185] ? taskstats_exit+0x19e/0xe10 [ 140.207996][ T6185] kmem_cache_alloc_noprof+0x9e/0x680 [ 140.208079][ T6185] ? taskstats_exit+0x19e/0xe10 [ 140.208170][ T6185] taskstats_exit+0x19e/0xe10 [ 140.208255][ T6185] ? acct_update_integrals+0x342/0x410 [ 140.208358][ T6185] ? acct_update_integrals+0x38a/0x410 [ 140.208452][ T6185] ? __pfx_taskstats_exit+0x10/0x10 [ 140.208556][ T6185] ? seccomp_filter_release+0x18a/0x2d0 [ 140.208594][ T6185] do_exit+0x6ad/0x2360 [ 140.208645][ T6185] ? lockdep_hardirqs_on+0x7a/0x110 [ 140.208721][ T6185] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 140.208819][ T6185] ? __pfx_do_exit+0x10/0x10 [ 140.208895][ T6185] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 140.208999][ T6185] ? rt_spin_unlock+0x157/0x200 [ 140.209084][ T6185] do_group_exit+0x22d/0x2f0 [ 140.209155][ T6185] ? rt_spin_unlock+0x163/0x200 [ 140.209238][ T6185] get_signal+0x121b/0x12c0 [ 140.209355][ T6185] arch_do_signal_or_restart+0xbb/0x860 [ 140.209441][ T6185] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 140.209570][ T6185] exit_to_user_mode_loop+0x104/0x730 [ 140.209674][ T6185] ? rcu_is_watching+0x15/0xb0 [ 140.209749][ T6185] do_syscall_64+0x33d/0x530 [ 140.209805][ T6185] ? irqentry_exit+0x10f/0x8f0 [ 140.209858][ T6185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.209920][ T6185] ? clear_bhb_loop+0x40/0x90 [ 140.209994][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.210049][ T6185] RIP: 0033:0x7f8f575cdf99 [ 140.210108][ T6185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.210159][ T6185] RSP: 002b:00007f8f558260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.210181][ T6185] RAX: fffffffffffffe00 RBX: 00007f8f57855fa8 RCX: 00007f8f575cdf99 [ 140.210197][ T6185] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f57855fa8 [ 140.210244][ T6185] RBP: 00007f8f57855fa0 R08: 0000000000000000 R09: 0000000000000000 [ 140.210284][ T6185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.210323][ T6185] R13: 00007f8f57856038 R14: 00007ffcdaed2e60 R15: 00007ffcdaed2f48 [ 140.210409][ T6185] [ 140.210802][ T6188] FAULT_INJECTION: forcing a failure. [ 140.210802][ T6188] name failslab, interval 1, probability 100, space 0, times 2 [ 140.210876][ T6188] CPU: 0 UID: 0 PID: 6188 Comm: syz.1.175 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.210940][ T6188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.210971][ T6188] Call Trace: [ 140.210992][ T6188] [ 140.211013][ T6188] dump_stack_lvl+0xe8/0x150 [ 140.211090][ T6188] should_fail_ex+0x467/0x600 [ 140.211169][ T6188] should_failslab+0xa8/0x100 [ 140.211223][ T6188] ? taskstats_exit+0x19e/0xe10 [ 140.211300][ T6188] kmem_cache_alloc_noprof+0x9e/0x680 [ 140.211384][ T6188] ? taskstats_exit+0x19e/0xe10 [ 140.211499][ T6188] taskstats_exit+0x19e/0xe10 [ 140.211603][ T6188] ? acct_update_integrals+0x342/0x410 [ 140.211705][ T6188] ? acct_update_integrals+0x38a/0x410 [ 140.211777][ T6188] ? __pfx_taskstats_exit+0x10/0x10 [ 140.211877][ T6188] ? seccomp_filter_release+0x18a/0x2d0 [ 140.211950][ T6188] do_exit+0x6ad/0x2360 [ 140.212025][ T6188] ? lockdep_hardirqs_on+0x7a/0x110 [ 140.212086][ T6188] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 140.212151][ T6188] ? __pfx_do_exit+0x10/0x10 [ 140.212224][ T6188] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 140.212327][ T6188] ? rt_spin_unlock+0x157/0x200 [ 140.212405][ T6188] do_group_exit+0x22d/0x2f0 [ 140.212488][ T6188] ? rt_spin_unlock+0x163/0x200 [ 140.212575][ T6188] get_signal+0x121b/0x12c0 [ 140.212691][ T6188] arch_do_signal_or_restart+0xbb/0x860 [ 140.212728][ T6188] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 140.212776][ T6188] exit_to_user_mode_loop+0x104/0x730 [ 140.212810][ T6188] ? rcu_is_watching+0x15/0xb0 [ 140.212839][ T6188] do_syscall_64+0x33d/0x530 [ 140.212860][ T6188] ? irqentry_exit+0x10f/0x8f0 [ 140.212879][ T6188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.212900][ T6188] ? clear_bhb_loop+0x40/0x90 [ 140.212927][ T6188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.212948][ T6188] RIP: 0033:0x7f8f575cdf99 [ 140.212966][ T6188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.213004][ T6188] RSP: 002b:00007f8f558050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.213071][ T6188] RAX: fffffffffffffe00 RBX: 00007f8f57856098 RCX: 00007f8f575cdf99 [ 140.213122][ T6188] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f57856098 [ 140.213170][ T6188] RBP: 00007f8f57856090 R08: 0000000000000000 R09: 0000000000000000 [ 140.213210][ T6188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.213243][ T6188] R13: 00007f8f57856128 R14: 00007ffcdaed2e60 R15: 00007ffcdaed2f48 [ 140.213363][ T6188] [ 140.214276][ T6191] FAULT_INJECTION: forcing a failure. [ 140.214276][ T6191] name failslab, interval 1, probability 100, space 0, times 2 [ 140.214352][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: syz.1.175 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.214424][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.214470][ T6191] Call Trace: [ 140.214499][ T6191] [ 140.214527][ T6191] dump_stack_lvl+0xe8/0x150 [ 140.214617][ T6191] should_fail_ex+0x467/0x600 [ 140.214714][ T6191] should_failslab+0xa8/0x100 [ 140.214771][ T6191] ? taskstats_exit+0x19e/0xe10 [ 140.214855][ T6191] kmem_cache_alloc_noprof+0x9e/0x680 [ 140.214942][ T6191] ? taskstats_exit+0x19e/0xe10 [ 140.215045][ T6191] taskstats_exit+0x19e/0xe10 [ 140.215109][ T6191] ? acct_update_integrals+0x342/0x410 [ 140.215171][ T6191] ? acct_update_integrals+0x38a/0x410 [ 140.215267][ T6191] ? __pfx_taskstats_exit+0x10/0x10 [ 140.215372][ T6191] ? seccomp_filter_release+0x18a/0x2d0 [ 140.215439][ T6191] do_exit+0x6ad/0x2360 [ 140.215521][ T6191] ? lockdep_hardirqs_on+0x7a/0x110 [ 140.215576][ T6191] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 140.215651][ T6191] ? __pfx_do_exit+0x10/0x10 [ 140.215733][ T6191] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 140.215844][ T6191] ? rt_spin_unlock+0x157/0x200 [ 140.215962][ T6191] do_group_exit+0x22d/0x2f0 [ 140.216042][ T6191] ? rt_spin_unlock+0x163/0x200 [ 140.216118][ T6191] get_signal+0x121b/0x12c0 [ 140.216236][ T6191] arch_do_signal_or_restart+0xbb/0x860 [ 140.216322][ T6191] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 140.216447][ T6191] exit_to_user_mode_loop+0x104/0x730 [ 140.216533][ T6191] ? rcu_is_watching+0x15/0xb0 [ 140.216633][ T6191] do_syscall_64+0x33d/0x530 [ 140.216689][ T6191] ? irqentry_exit+0x10f/0x8f0 [ 140.216743][ T6191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.216804][ T6191] ? clear_bhb_loop+0x40/0x90 [ 140.216870][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.216930][ T6191] RIP: 0033:0x7f8f575cdf99 [ 140.216981][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.217028][ T6191] RSP: 002b:00007f8f557e40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.217082][ T6191] RAX: fffffffffffffe00 RBX: 00007f8f57856188 RCX: 00007f8f575cdf99 [ 140.217131][ T6191] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f57856188 [ 140.217164][ T6191] RBP: 00007f8f57856180 R08: 0000000000000000 R09: 0000000000000000 [ 140.217213][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.217259][ T6191] R13: 00007f8f57856218 R14: 00007ffcdaed2e60 R15: 00007ffcdaed2f48 [ 140.217357][ T6191] [ 140.219495][ T102] FAULT_INJECTION: forcing a failure. [ 140.219495][ T102] name failslab, interval 1, probability 100, space 0, times 1 [ 140.219579][ T102] CPU: 0 UID: 0 PID: 102 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.219650][ T102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.219690][ T102] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 140.219793][ T102] Call Trace: [ 140.219814][ T102] [ 140.219836][ T102] dump_stack_lvl+0xe8/0x150 [ 140.219912][ T102] should_fail_ex+0x467/0x600 [ 140.220004][ T102] should_failslab+0xa8/0x100 [ 140.220072][ T102] ? skb_clone+0x212/0x3a0 [ 140.220106][ T102] kmem_cache_alloc_noprof+0x9e/0x680 [ 140.220235][ T102] ? skb_clone+0x212/0x3a0 [ 140.220341][ T102] skb_clone+0x212/0x3a0 [ 140.220446][ T102] batadv_iv_send_outstanding_bat_ogm_packet+0x514/0x740 [ 140.220573][ T102] ? process_one_work+0x7fd/0x1480 [ 140.220646][ T102] process_one_work+0xaaf/0x1480 [ 140.220763][ T102] ? __pfx_process_one_work+0x10/0x10 [ 140.220815][ T102] ? do_raw_spin_lock+0x12b/0x2f0 [ 140.220921][ T102] ? assign_work+0x3cf/0x5d0 [ 140.220997][ T102] worker_thread+0xb05/0x10d0 [ 140.221125][ T102] kthread+0x388/0x470 [ 140.221201][ T102] ? __pfx_worker_thread+0x10/0x10 [ 140.221256][ T102] ? __pfx_kthread+0x10/0x10 [ 140.221340][ T102] ret_from_fork+0x514/0xb70 [ 140.221445][ T102] ? __pfx_ret_from_fork+0x10/0x10 [ 140.221549][ T102] ? __switch_to+0xc89/0x1420 [ 140.221635][ T102] ? __pfx_kthread+0x10/0x10 [ 140.221680][ T102] ret_from_fork_asm+0x1a/0x30 [ 140.221806][ T102] [ 140.222265][ T6192] FAULT_INJECTION: forcing a failure. [ 140.222265][ T6192] name failslab, interval 1, probability 100, space 0, times 1 [ 140.222338][ T6192] CPU: 0 UID: 0 PID: 6192 Comm: syz.1.175 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 140.222401][ T6192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.222425][ T6192] Call Trace: [ 140.222447][ T6192] [ 140.222469][ T6192] dump_stack_lvl+0xe8/0x150 [ 140.222546][ T6192] should_fail_ex+0x467/0x600 [ 140.222642][ T6192] should_failslab+0xa8/0x100 [ 140.222696][ T6192] ? taskstats_exit+0x19e/0xe10 [ 140.222736][ T6192] kmem_cache_alloc_noprof+0x9e/0x680 [ 140.222796][ T6192] ? taskstats_exit+0x19e/0xe10 [ 140.222927][ T6192] taskstats_exit+0x19e/0xe10 [ 140.223011][ T6192] ? acct_update_integrals+0x342/0x410 [ 140.223106][ T6192] ? acct_update_integrals+0x38a/0x410 [ 140.223189][ T6192] ? __pfx_taskstats_exit+0x10/0x10 [ 140.223287][ T6192] ? hrtimer_try_to_cancel+0x1f4/0x680 [ 140.223371][ T6192] ? tty_audit_exit+0x14d/0x1f0 [ 140.223468][ T6192] do_exit+0x6ad/0x2360 [ 140.223544][ T6192] ? lockdep_hardirqs_on+0x7a/0x110 [ 140.223598][ T6192] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 140.223685][ T6192] ? __pfx_do_exit+0x10/0x10 [ 140.223771][ T6192] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 140.223868][ T6192] ? rt_spin_unlock+0x157/0x200 [ 140.223952][ T6192] do_group_exit+0x22d/0x2f0 [ 140.224028][ T6192] ? rt_spin_unlock+0x163/0x200 [ 140.224117][ T6192] get_signal+0x121b/0x12c0 [ 140.224258][ T6192] arch_do_signal_or_restart+0xbb/0x860 [ 140.224357][ T6192] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 140.224492][ T6192] exit_to_user_mode_loop+0x104/0x730 [ 140.224579][ T6192] ? rcu_is_watching+0x15/0xb0 [ 140.224663][ T6192] do_syscall_64+0x33d/0x530 [ 140.224717][ T6192] ? irqentry_exit+0x10f/0x8f0 [ 140.224770][ T6192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.224832][ T6192] ? clear_bhb_loop+0x40/0x90 [ 140.224898][ T6192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.224962][ T6192] RIP: 0033:0x7f8f575cdf99 [ 140.225015][ T6192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.225059][ T6192] RSP: 002b:00007f8f553c10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 140.225113][ T6192] RAX: fffffffffffffe00 RBX: 00007f8f57856278 RCX: 00007f8f575cdf99 [ 140.225149][ T6192] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f57856278 [ 140.225190][ T6192] RBP: 00007f8f57856270 R08: 0000000000000000 R09: 0000000000000000 [ 140.225225][ T6192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.225258][ T6192] R13: 00007f8f57856308 R14: 00007ffcdaed2e60 R15: 00007ffcdaed2f48 [ 140.225343][ T6192] [ 140.235995][ T4953] socket: no more sockets [ 141.225457][ T9] ftdi_sio 1-1:1.0: FTDI USB Serial Device converter detected [ 141.667924][ T9] usb 1-1: Detected SIO [ 142.014967][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 143.296162][ T5773] usb 1-1: USB disconnect, device number 3 [ 143.529005][ T5773] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 143.534879][ T5773] ftdi_sio 1-1:1.0: device disconnected [ 143.596391][ T38] kauditd_printk_skb: 6 callbacks suppressed [ 143.596411][ T38] audit: type=1800 audit(1785424982.796:18): pid=6200 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.178" name="idVendor" dev="configfs" ino=12295 res=0 errno=0 [ 143.635316][ T38] audit: type=1800 audit(1785424982.836:19): pid=6200 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.178" name="idProduct" dev="configfs" ino=12296 res=0 errno=0 [ 143.674914][ T38] audit: type=1800 audit(1785424982.876:20): pid=6200 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.178" name="use" dev="configfs" ino=12297 res=0 errno=0 [ 143.701823][ T38] audit: type=1800 audit(1785424982.896:21): pid=6200 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.178" name="serialnumber" dev="configfs" ino=12298 res=0 errno=0 [ 143.728241][ T38] audit: type=1800 audit(1785424982.926:22): pid=6200 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.178" name="UDC" dev="configfs" ino=12299 res=0 errno=0 [ 143.793538][ T6203] usbip-vudc usbip-vudc.0: Device already connected [ 143.817288][ T6203] vhci_hcd vhci_hcd.0: port 0 already used [ 144.528901][ T6224] zram: Cannot change disksize for initialized device [ 145.255334][ T6244] zram: Cannot change disksize for initialized device [ 145.258936][ T38] audit: type=1800 audit(1785424984.456:23): pid=6245 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.198" name="idVendor" dev="configfs" ino=12347 res=0 errno=0 [ 145.266993][ T38] audit: type=1800 audit(1785424984.466:24): pid=6245 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.198" name="idProduct" dev="configfs" ino=12348 res=0 errno=0 [ 145.277770][ T38] audit: type=1800 audit(1785424984.466:25): pid=6245 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.198" name="use" dev="configfs" ino=12349 res=0 errno=0 [ 145.331866][ T38] audit: type=1800 audit(1785424984.496:26): pid=6245 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.198" name="serialnumber" dev="configfs" ino=12350 res=0 errno=0 [ 145.358451][ T38] audit: type=1800 audit(1785424984.556:27): pid=6245 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.198" name="UDC" dev="configfs" ino=12351 res=0 errno=0 [ 145.420565][ T6249] usbip-vudc usbip-vudc.0: Device already connected [ 145.444657][ T6249] vhci_hcd vhci_hcd.0: port 0 already used [ 145.531955][ T6253] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.228608][ T6266] binder_alloc: 6264: binder_alloc_buf, no vma [ 146.585807][ T6276] zram: Cannot change disksize for initialized device [ 146.702516][ T6278] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.533192][ T6302] binder_alloc: 6299: binder_alloc_buf, no vma [ 147.698467][ T6304] zram: Cannot change disksize for initialized device [ 147.729943][ T6309] usbip-vudc usbip-vudc.0: Device already connected [ 148.660003][ T6330] binder_alloc: 6329: binder_alloc_buf, no vma [ 148.792356][ T6332] zram: Cannot change disksize for initialized device [ 148.939696][ T38] kauditd_printk_skb: 14 callbacks suppressed [ 148.939715][ T38] audit: type=1800 audit(1785424988.136:42): pid=6338 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.236" name="idVendor" dev="configfs" ino=12261 res=0 errno=0 [ 148.940795][ T38] audit: type=1800 audit(1785424988.136:43): pid=6338 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.236" name="idProduct" dev="configfs" ino=12262 res=0 errno=0 [ 149.019148][ T38] audit: type=1800 audit(1785424988.226:44): pid=6338 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.236" name="use" dev="configfs" ino=12263 res=0 errno=0 [ 149.210864][ T38] audit: type=1800 audit(1785424988.406:45): pid=6344 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.238" name="idVendor" dev="configfs" ino=12658 res=0 errno=0 [ 149.243767][ T38] audit: type=1800 audit(1785424988.446:46): pid=6344 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.238" name="idProduct" dev="configfs" ino=12659 res=0 errno=0 [ 149.267698][ T38] audit: type=1800 audit(1785424988.466:47): pid=6344 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.238" name="use" dev="configfs" ino=12660 res=0 errno=0 [ 149.429821][ T6349] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.822977][ T6365] zram: Cannot change disksize for initialized device [ 150.218973][ T38] audit: type=1800 audit(1785424989.416:48): pid=6376 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.251" name="idVendor" dev="configfs" ino=12693 res=0 errno=0 [ 150.219841][ T38] audit: type=1800 audit(1785424989.416:49): pid=6376 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.251" name="idProduct" dev="configfs" ino=12694 res=0 errno=0 [ 150.220626][ T38] audit: type=1800 audit(1785424989.416:50): pid=6376 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.251" name="use" dev="configfs" ino=12695 res=0 errno=0 [ 150.222002][ T38] audit: type=1800 audit(1785424989.416:51): pid=6376 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.251" name="serialnumber" dev="configfs" ino=12696 res=0 errno=0 [ 150.315903][ T6377] usbip-vudc usbip-vudc.0: Device already connected [ 150.320037][ T6377] vhci_hcd vhci_hcd.0: port 0 already used [ 150.604658][ T6388] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.855207][ T6394] zram: Cannot change disksize for initialized device [ 151.333731][ T6412] vhci_hcd vhci_hcd.0: port 0 already used [ 151.884587][ T6430] zram: Cannot change disksize for initialized device [ 152.022976][ T6434] usbip-vudc usbip-vudc.0: Device already connected [ 152.403214][ T6444] vhci_hcd vhci_hcd.0: port 0 already used [ 152.697470][ T6456] binder_alloc: 6455: binder_alloc_buf, no vma [ 152.874678][ T6460] zram: Cannot change disksize for initialized device [ 152.904575][ T6459] usbip-vudc usbip-vudc.0: Device already connected [ 153.250858][ T6467] vhci_hcd vhci_hcd.0: port 0 already used [ 153.736707][ T6480] binder_alloc: 6479: binder_alloc_buf, no vma [ 153.964566][ T6484] zram: Cannot change disksize for initialized device [ 154.120219][ T38] kauditd_printk_skb: 34 callbacks suppressed [ 154.120252][ T38] audit: type=1800 audit(1785424993.316:86): pid=6486 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.296" name="idVendor" dev="configfs" ino=13126 res=0 errno=0 [ 154.122902][ T38] audit: type=1800 audit(1785424993.316:87): pid=6486 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.296" name="idProduct" dev="configfs" ino=13127 res=0 errno=0 [ 154.129044][ T38] audit: type=1800 audit(1785424993.326:88): pid=6486 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.296" name="use" dev="configfs" ino=13128 res=0 errno=0 [ 154.139063][ T38] audit: type=1800 audit(1785424993.336:89): pid=6486 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.296" name="serialnumber" dev="configfs" ino=13129 res=0 errno=0 [ 154.229533][ T38] audit: type=1800 audit(1785424993.426:90): pid=6489 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.297" name="use" dev="configfs" ino=13668 res=0 errno=0 [ 154.651519][ T38] audit: type=1800 audit(1785424993.856:91): pid=6498 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.299" name="idVendor" dev="configfs" ino=13136 res=0 errno=0 [ 154.706214][ T38] audit: type=1800 audit(1785424993.906:92): pid=6498 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.299" name="idProduct" dev="configfs" ino=13137 res=0 errno=0 [ 154.710043][ T38] audit: type=1800 audit(1785424993.906:93): pid=6498 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.299" name="use" dev="configfs" ino=13138 res=0 errno=0 [ 154.773257][ T38] audit: type=1800 audit(1785424993.976:94): pid=6500 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.300" name="idVendor" dev="configfs" ino=13695 res=0 errno=0 [ 154.775241][ T38] audit: type=1800 audit(1785424993.976:95): pid=6500 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.300" name="idProduct" dev="configfs" ino=13696 res=0 errno=0 [ 154.825972][ T6500] vhci_hcd vhci_hcd.0: port 0 already used [ 155.251856][ T6512] zram: Cannot change disksize for initialized device [ 155.374223][ T6514] binder_alloc: 6513: binder_alloc_buf, no vma [ 155.819222][ T6526] vhci_hcd vhci_hcd.0: port 0 already used [ 155.854581][ T6528] usbip-vudc usbip-vudc.0: Device already connected [ 155.969084][ T6534] zram: Cannot change disksize for initialized device [ 156.290603][ T6548] binder_alloc: 6539: binder_alloc_buf, no vma [ 156.650732][ T6556] vhci_hcd vhci_hcd.0: port 0 already used [ 156.735206][ T6562] zram: Cannot change disksize for initialized device [ 156.842630][ T6564] usbip-vudc usbip-vudc.0: Device already connected [ 157.226209][ T6575] vhci_hcd vhci_hcd.0: port 0 already used [ 157.938700][ T6597] usbip-vudc usbip-vudc.0: Device already connected [ 157.986505][ T6604] binder_alloc: 6599: binder_alloc_buf, no vma [ 158.260471][ T6608] vhci_hcd vhci_hcd.0: port 0 already used [ 158.700061][ T6621] zram: Cannot change disksize for initialized device [ 159.051697][ T6630] usbip-vudc usbip-vudc.0: Device already connected [ 159.288041][ T38] kauditd_printk_skb: 38 callbacks suppressed [ 159.288062][ T38] audit: type=1800 audit(1785424998.486:134): pid=6640 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.360" name="idVendor" dev="configfs" ino=14071 res=0 errno=0 [ 159.319179][ T38] audit: type=1800 audit(1785424998.516:135): pid=6640 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.360" name="idProduct" dev="configfs" ino=14073 res=0 errno=0 [ 159.360212][ T38] audit: type=1800 audit(1785424998.556:136): pid=6640 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.360" name="use" dev="configfs" ino=14567 res=0 errno=0 [ 159.386579][ T38] audit: type=1800 audit(1785424998.586:137): pid=6640 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.360" name="serialnumber" dev="configfs" ino=14569 res=0 errno=0 [ 159.439432][ T6640] vhci_hcd vhci_hcd.0: port 0 already used [ 159.532632][ T6646] zram: Cannot change disksize for initialized device [ 159.744192][ T6656] binder_alloc: 6652: binder_alloc_buf, no vma [ 159.958564][ T38] audit: type=1800 audit(1785424999.156:138): pid=6664 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.370" name="idVendor" dev="configfs" ino=14104 res=0 errno=0 [ 159.959568][ T38] audit: type=1800 audit(1785424999.156:139): pid=6664 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.370" name="idProduct" dev="configfs" ino=14105 res=0 errno=0 [ 159.960504][ T38] audit: type=1800 audit(1785424999.156:140): pid=6664 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.370" name="use" dev="configfs" ino=14106 res=0 errno=0 [ 159.961810][ T38] audit: type=1800 audit(1785424999.156:141): pid=6664 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.370" name="serialnumber" dev="configfs" ino=14107 res=0 errno=0 [ 159.962375][ T6664] usbip-vudc usbip-vudc.0: Device already connected [ 160.215325][ T38] audit: type=1800 audit(1785424999.416:142): pid=6668 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.372" name="idVendor" dev="configfs" ino=14665 res=0 errno=0 [ 160.217900][ T38] audit: type=1800 audit(1785424999.416:143): pid=6668 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.372" name="idProduct" dev="configfs" ino=14666 res=0 errno=0 [ 160.249823][ T6668] vhci_hcd vhci_hcd.0: port 0 already used [ 160.353706][ T6675] zram: Cannot change disksize for initialized device [ 160.843194][ T60] Bluetooth: hci3: command tx timeout [ 160.895662][ T6693] usbip-vudc usbip-vudc.0: Device already connected [ 161.020196][ T6696] zram: Cannot change disksize for initialized device [ 161.195819][ T6698] vhci_hcd vhci_hcd.0: port 0 already used [ 161.757467][ T6715] usbip-vudc usbip-vudc.0: Device already connected [ 161.803122][ T60] Bluetooth: hci1: command tx timeout [ 161.839819][ T6719] zram: Cannot change disksize for initialized device [ 162.074561][ T6727] vhci_hcd vhci_hcd.0: port 0 already used [ 162.322966][ T822] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 162.473030][ T822] usb 4-1: Using ep0 maxpacket: 8 [ 162.477022][ T822] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 162.477052][ T822] usb 4-1: config 0 has no interface number 0 [ 162.477100][ T822] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 162.477125][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.521241][ T822] usb 4-1: config 0 descriptor?? [ 162.622855][ T6740] usbip-vudc usbip-vudc.0: Device already connected [ 162.707309][ T822] viperboard 4-1:0.143: version 0.00 found at bus 004 address 003 [ 162.749523][ T6746] zram: Cannot change disksize for initialized device [ 162.827870][ T822] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 162.827903][ T822] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 162.846050][ T60] Bluetooth: hci0: command tx timeout [ 162.916573][ T6748] WARNING! power/level is deprecated; use power/control instead [ 162.982169][ T6750] usbip-vudc usbip-vudc.0: Device already connected [ 163.246586][ T6759] vhci_hcd vhci_hcd.0: port 0 already used [ 163.534389][ T6769] usbip-vudc usbip-vudc.0: Device already connected [ 163.607121][ T6771] ================================================================== [ 163.607402][ T6771] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 163.607439][ T6771] Read of size 1 at addr ffff88803d700398 by task syz.1.415/6771 [ 163.607465][ T6771] [ 163.607478][ T6771] CPU: 0 UID: 0 PID: 6771 Comm: syz.1.415 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 163.607504][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.607527][ T6771] Call Trace: [ 163.607536][ T6771] [ 163.607545][ T6771] dump_stack_lvl+0xe8/0x150 [ 163.607576][ T6771] print_address_description+0x55/0x1e0 [ 163.607762][ T6771] ? rt_spin_lock+0x83/0x400 [ 163.607790][ T6771] print_report+0x58/0x70 [ 163.607822][ T6771] kasan_report+0x117/0x150 [ 163.607846][ T6771] ? rt_spin_lock+0x83/0x400 [ 163.607887][ T6771] __kasan_check_byte+0x2a/0x40 [ 163.607913][ T6771] lock_acquire+0x7d/0x350 [ 163.607946][ T6771] rt_spin_lock+0x83/0x400 [ 163.607968][ T6771] ? ref_tracker_debugfs_show+0x106/0x1c0 [ 163.608007][ T6771] ? __pfx_rt_spin_lock+0x10/0x10 [ 163.608034][ T6771] ref_tracker_debugfs_show+0x106/0x1c0 [ 163.608114][ T6771] ? __pfx_ref_tracker_debugfs_show+0x10/0x10 [ 163.608138][ T6771] ? seq_read_iter+0x1eb/0xcb0 [ 163.608164][ T6771] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 163.608194][ T6771] ? seq_read_iter+0x1eb/0xcb0 [ 163.608221][ T6771] seq_read_iter+0x464/0xcb0 [ 163.608252][ T6771] seq_read+0x36a/0x490 [ 163.608284][ T6771] ? __pfx_seq_read+0x10/0x10 [ 163.608355][ T6771] ? __debugfs_file_get+0x5d5/0x710 [ 163.608390][ T6771] ? __pfx___debugfs_file_get+0x10/0x10 [ 163.608425][ T6771] full_proxy_read+0x127/0x1f0 [ 163.608460][ T6771] ? __pfx_full_proxy_read+0x10/0x10 [ 163.608491][ T6771] vfs_read+0x219/0xa90 [ 163.608526][ T6771] ? __pfx_vfs_read+0x10/0x10 [ 163.608552][ T6771] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 163.608575][ T6771] ? lockdep_hardirqs_on+0x7a/0x110 [ 163.608596][ T6771] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 163.608618][ T6771] ? mutex_lock_nested+0x152/0x1d0 [ 163.608647][ T6771] ? fdget_pos+0x252/0x320 [ 163.608674][ T6771] ksys_read+0x156/0x270 [ 163.608702][ T6771] ? __pfx_ksys_read+0x10/0x10 [ 163.608738][ T6771] do_syscall_64+0x17b/0x530 [ 163.608755][ T6771] ? irqentry_exit+0x10f/0x8f0 [ 163.608770][ T6771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.608789][ T6771] ? clear_bhb_loop+0x40/0x90 [ 163.608808][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.608824][ T6771] RIP: 0033:0x7f8f575cdf99 [ 163.608839][ T6771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.608853][ T6771] RSP: 002b:00007f8f55826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.608870][ T6771] RAX: ffffffffffffffda RBX: 00007f8f57855fa0 RCX: 00007f8f575cdf99 [ 163.608886][ T6771] RDX: 0000000000000064 RSI: 0000200000000580 RDI: 0000000000000004 [ 163.608896][ T6771] RBP: 00007f8f57664ec4 R08: 0000000000000000 R09: 0000000000000000 [ 163.608906][ T6771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.608915][ T6771] R13: 00007f8f57856038 R14: 00007f8f57855fa0 R15: 00007ffcdaed2f48 [ 163.608934][ T6771] [ 163.608940][ T6771] [ 163.608944][ T6771] Allocated by task 6471: [ 163.608952][ T6771] kasan_save_track+0x3e/0x80 [ 163.608974][ T6771] __kasan_slab_alloc+0x6c/0x80 [ 163.608997][ T6771] kmem_cache_alloc_noprof+0x358/0x680 [ 163.609018][ T6771] copy_net_ns+0x1e0/0x720 [ 163.609036][ T6771] create_new_namespaces+0x3f0/0x6b0 [ 163.609050][ T6771] copy_namespaces+0x432/0x4b0 [ 163.609063][ T6771] copy_process+0x1ec8/0x43f0 [ 163.609086][ T6771] kernel_clone+0x2d7/0x940 [ 163.609101][ T6771] __x64_sys_clone+0x1b6/0x230 [ 163.609118][ T6771] do_syscall_64+0x17b/0x530 [ 163.609132][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.609147][ T6771] [ 163.609150][ T6771] Freed by task 2368: [ 163.609157][ T6771] kasan_save_track+0x3e/0x80 [ 163.609178][ T6771] kasan_save_free_info+0x40/0x50 [ 163.609196][ T6771] __kasan_slab_free+0x5c/0x80 [ 163.609219][ T6771] kmem_cache_free+0x187/0x6c0 [ 163.609241][ T6771] cleanup_net+0x5e0/0x810 [ 163.609261][ T6771] process_one_work+0xaaf/0x1480 [ 163.609274][ T6771] worker_thread+0xb05/0x10d0 [ 163.609290][ T6771] kthread+0x388/0x470 [ 163.609308][ T6771] ret_from_fork+0x514/0xb70 [ 163.609329][ T6771] ret_from_fork_asm+0x1a/0x30 [ 163.609350][ T6771] [ 163.609353][ T6771] The buggy address belongs to the object at ffff88803d700000 [ 163.609353][ T6771] which belongs to the cache net_namespace of size 11072 [ 163.609367][ T6771] The buggy address is located 920 bytes inside of [ 163.609367][ T6771] freed 11072-byte region [ffff88803d700000, ffff88803d702b40) [ 163.609383][ T6771] [ 163.609387][ T6771] The buggy address belongs to the physical page: [ 163.609404][ T6771] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3d700 [ 163.609419][ T6771] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 163.609431][ T6771] memcg:ffff88802a9a03a1 [ 163.609439][ T6771] flags: 0x80000000000040(head|node=0|zone=1) [ 163.609459][ T6771] page_type: f5(slab) [ 163.609473][ T6771] raw: 0080000000000040 ffff88801c6af280 dead000000000122 0000000000000000 [ 163.609488][ T6771] raw: 0000000000000000 0000000800020002 00000000f5000000 ffff88802a9a03a1 [ 163.609503][ T6771] head: 0080000000000040 ffff88801c6af280 dead000000000122 0000000000000000 [ 163.609517][ T6771] head: 0000000000000000 0000000800020002 00000000f5000000 ffff88802a9a03a1 [ 163.609532][ T6771] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 163.609545][ T6771] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 163.609554][ T6771] page dumped because: kasan: bad access detected [ 163.609567][ T6771] page_owner tracks the page as allocated [ 163.609575][ T6771] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5602, tgid 5602 (syz-executor), ts 101050044016 [ 163.609606][ T6771] post_alloc_hook+0x1f9/0x250 [ 163.609628][ T6771] get_page_from_freelist+0x264c/0x26c0 [ 163.609654][ T6771] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 163.609678][ T6771] allocate_slab+0x7c/0x5e0 [ 163.609694][ T6771] refill_objects+0x2d8/0x350 [ 163.609711][ T6771] __pcs_replace_empty_main+0x330/0x690 [ 163.609754][ T6771] kmem_cache_alloc_noprof+0x455/0x680 [ 163.609783][ T6771] copy_net_ns+0x1e0/0x720 [ 163.609806][ T6771] create_new_namespaces+0x3f0/0x6b0 [ 163.609825][ T6771] unshare_nsproxy_namespaces+0x149/0x190 [ 163.609847][ T6771] ksys_unshare+0x5a7/0x950 [ 163.609872][ T6771] __x64_sys_unshare+0x38/0x50 [ 163.609897][ T6771] do_syscall_64+0x17b/0x530 [ 163.609924][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.609940][ T6771] page last free pid 5641 tgid 5641 ts 100804532427 stack trace: [ 163.609951][ T6771] __free_frozen_pages+0x1185/0x1270 [ 163.609972][ T6771] __slab_free+0x252/0x2a0 [ 163.609994][ T6771] qlist_free_all+0x99/0x100 [ 163.610014][ T6771] kasan_quarantine_reduce+0x148/0x160 [ 163.610034][ T6771] __kasan_slab_alloc+0x22/0x80 [ 163.610057][ T6771] kmem_cache_alloc_noprof+0x358/0x680 [ 163.610083][ T6771] __anon_vma_prepare+0xc3/0x4d0 [ 163.610104][ T6771] do_pte_missing+0x1d2a/0x28f0 [ 163.610128][ T6771] handle_mm_fault+0xf95/0x28d0 [ 163.610149][ T6771] do_user_addr_fault+0xa4d/0x1340 [ 163.610170][ T6771] exc_page_fault+0x6a/0xc0 [ 163.610182][ T6771] asm_exc_page_fault+0x26/0x30 [ 163.610196][ T6771] [ 163.610200][ T6771] Memory state around the buggy address: [ 163.610209][ T6771] ffff88803d700280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 163.610220][ T6771] ffff88803d700300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 163.610231][ T6771] >ffff88803d700380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 163.610238][ T6771] ^ [ 163.610246][ T6771] ffff88803d700400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 163.610256][ T6771] ffff88803d700480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 163.610264][ T6771] ================================================================== [ 163.610548][ T6771] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 163.610562][ T6771] CPU: 0 UID: 0 PID: 6771 Comm: syz.1.415 Not tainted syzkaller #0 PREEMPT_{RT,(lazy)} [ 163.610583][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 163.610593][ T6771] Call Trace: [ 163.610599][ T6771] [ 163.610606][ T6771] vpanic+0x56c/0xa60 [ 163.610624][ T6771] ? __pfx_vpanic+0x10/0x10 [ 163.610640][ T6771] ? __pfx___schedule+0x10/0x10 [ 163.610666][ T6771] panic+0xc5/0xd0 [ 163.610680][ T6771] ? __pfx_panic+0x10/0x10 [ 163.610698][ T6771] ? preempt_schedule_thunk+0x16/0x40 [ 163.610727][ T6771] ? rt_spin_lock+0x83/0x400 [ 163.610753][ T6771] check_panic_on_warn+0x89/0xb0 [ 163.610776][ T6771] ? rt_spin_lock+0x83/0x400 [ 163.610796][ T6771] end_report+0x73/0x170 [ 163.610811][ T6771] ? rt_spin_lock+0x83/0x400 [ 163.610831][ T6771] kasan_report+0x128/0x150 [ 163.610846][ T6771] ? rt_spin_lock+0x83/0x400 [ 163.610869][ T6771] __kasan_check_byte+0x2a/0x40 [ 163.610894][ T6771] lock_acquire+0x7d/0x350 [ 163.610958][ T6771] rt_spin_lock+0x83/0x400 [ 163.610986][ T6771] ? ref_tracker_debugfs_show+0x106/0x1c0 [ 163.611021][ T6771] ? __pfx_rt_spin_lock+0x10/0x10 [ 163.611058][ T6771] ref_tracker_debugfs_show+0x106/0x1c0 [ 163.611105][ T6771] ? __pfx_ref_tracker_debugfs_show+0x10/0x10 [ 163.611128][ T6771] ? seq_read_iter+0x1eb/0xcb0 [ 163.611151][ T6771] ? __kvmalloc_node_noprof+0x5cc/0x880 [ 163.611178][ T6771] ? seq_read_iter+0x1eb/0xcb0 [ 163.611202][ T6771] seq_read_iter+0x464/0xcb0 [ 163.611230][ T6771] seq_read+0x36a/0x490 [ 163.611255][ T6771] ? __pfx_seq_read+0x10/0x10 [ 163.611277][ T6771] ? __debugfs_file_get+0x5d5/0x710 [ 163.611301][ T6771] ? __pfx___debugfs_file_get+0x10/0x10 [ 163.611328][ T6771] full_proxy_read+0x127/0x1f0 [ 163.611353][ T6771] ? __pfx_full_proxy_read+0x10/0x10 [ 163.611376][ T6771] vfs_read+0x219/0xa90 [ 163.611397][ T6771] ? __pfx_vfs_read+0x10/0x10 [ 163.611414][ T6771] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 163.611429][ T6771] ? lockdep_hardirqs_on+0x7a/0x110 [ 163.611444][ T6771] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 163.611459][ T6771] ? mutex_lock_nested+0x152/0x1d0 [ 163.611479][ T6771] ? fdget_pos+0x252/0x320 [ 163.611498][ T6771] ksys_read+0x156/0x270 [ 163.611517][ T6771] ? __pfx_ksys_read+0x10/0x10 [ 163.611538][ T6771] do_syscall_64+0x17b/0x530 [ 163.611553][ T6771] ? irqentry_exit+0x10f/0x8f0 [ 163.611568][ T6771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.611585][ T6771] ? clear_bhb_loop+0x40/0x90 [ 163.611603][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.611618][ T6771] RIP: 0033:0x7f8f575cdf99 [ 163.611632][ T6771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.611646][ T6771] RSP: 002b:00007f8f55826028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.611663][ T6771] RAX: ffffffffffffffda RBX: 00007f8f57855fa0 RCX: 00007f8f575cdf99 [ 163.611675][ T6771] RDX: 0000000000000064 RSI: 0000200000000580 RDI: 0000000000000004 [ 163.611685][ T6771] RBP: 00007f8f57664ec4 R08: 0000000000000000 R09: 0000000000000000 [ 163.611695][ T6771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.611704][ T6771] R13: 00007f8f57856038 R14: 00007f8f57855fa0 R15: 00007ffcdaed2f48 [ 163.611723][ T6771] [ 163.612334][ T6771] Kernel Offset: disabled