last executing test programs: 57.100124399s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f0000000740)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x2, 0x0) write(r10, &(0x7f00000008c0)='2\x00', 0x2) 56.582153782s ago: executing program 2 (id=36): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, 'hub\x00'}) 55.375775361s ago: executing program 2 (id=80): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffffff, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) 55.356576341s ago: executing program 2 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:01.0\x00', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:01.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x11, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./data\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000200)='\n03U\x00\x00\x00\x00\b\x00\x00\x00', 0xc) pread64(r2, &(0x7f000000c120), 0x4, 0x0) pread64(r2, &(0x7f000000c140), 0x4, 0x4) pread64(r2, &(0x7f000000c14c), 0x4, 0x8) close(r2) close(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='dwc3-haps\x00', 0x9) close(r3) write(0xffffffffffffffff, &(0x7f0000000300)='0000:00:01.0\x00', 0xc) 55.274712853s ago: executing program 2 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f0000000740)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x2, 0x0) write(r10, &(0x7f00000008c0)='2\x00', 0x2) write(r10, &(0x7f00000008e0)='1\x00', 0x2) write(r10, &(0x7f0000000900)='0\x00', 0x2) 51.362089635s ago: executing program 2 (id=92): r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='hello world\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='hello again\n', 0xc) close(r1) 51.356721105s ago: executing program 32 (id=92): r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r0, &(0x7f0000000a00)='hello world\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='hello again\n', 0xc) close(r1) 48.967324082s ago: executing program 0 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) 48.868791075s ago: executing program 0 (id=105): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) 48.781388246s ago: executing program 0 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) 48.586761651s ago: executing program 0 (id=110): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) 48.382195926s ago: executing program 0 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41) write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) read(0xffffffffffffffff, &(0x7f0000004000), 0x2000) 46.94595767s ago: executing program 0 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) 46.900865761s ago: executing program 33 (id=122): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) 23.589403262s ago: executing program 5 (id=600): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='Conf 2\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r8, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb) r9 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x2, 0x0) write(r9, &(0x7f00000008c0)='2\x00', 0x2) write(r9, &(0x7f00000008e0)='1\x00', 0x2) write(r9, &(0x7f0000000900)='0\x00', 0x2) write(r8, &(0x7f0000000920)='\n\x00', 0x1) 21.074865812s ago: executing program 5 (id=605): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0\x00', 0x2) 21.074502932s ago: executing program 5 (id=606): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) 21.074242842s ago: executing program 5 (id=607): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='1\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x41) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(r0, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) read(r3, &(0x7f0000004000), 0x2000) 20.928809135s ago: executing program 5 (id=612): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/instances/inst1/events/enable\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/instances/inst1/events/kvm/enable\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1', 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 19.663225815s ago: executing program 5 (id=619): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r0, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 19.642493846s ago: executing program 34 (id=619): openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r0, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 7.057717973s ago: executing program 6 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='1\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x41) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(r0, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) read(r3, &(0x7f0000004000), 0x2000) 6.959215635s ago: executing program 3 (id=673): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./debug/failslab/times\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='10\x00', 0x3) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 6.864533768s ago: executing program 3 (id=674): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='0x0525\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0xa4a7\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_udc.0\n\x00', 0xc) close(r2) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) close(0xffffffffffffffff) 2.662132877s ago: executing program 3 (id=678): mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/kvm/kvm_hv_synic_set_irq/enable\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/instances/inst1/events/enable\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/instances/inst1/events/kvm/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 2.661690557s ago: executing program 6 (id=680): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f0000000740)='midi.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x2, 0x0) write(r9, &(0x7f00000008c0)='2\x00', 0x2) write(r9, &(0x7f00000008e0)='1\x00', 0x2) write(r9, &(0x7f0000000900)='0\x00', 0x2) 2.660512627s ago: executing program 1 (id=681): mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r2, &(0x7f0000000290)='1\x00', 0x1) 2.643303528s ago: executing program 4 (id=682): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000780)='1', 0x1) 2.636513238s ago: executing program 1 (id=683): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000006c0)='Conf 2\x00', 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r7, &(0x7f0000000740)='midi.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r8, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb) r9 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x2, 0x0) write(r9, &(0x7f00000008c0)='2\x00', 0x2) write(r9, &(0x7f00000008e0)='1\x00', 0x2) write(r9, &(0x7f0000000900)='0\x00', 0x2) write(r8, &(0x7f0000000920)='\n\x00', 0x1) 2.589675899s ago: executing program 4 (id=684): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) 2.589169129s ago: executing program 3 (id=685): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) 2.56754864s ago: executing program 1 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./debug/failslab/times\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='10\x00', 0x3) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2.56702751s ago: executing program 3 (id=687): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='0x0525\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0xa4a7\n\x00', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_udc.0\n\x00', 0xc) close(r2) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x0) close(0xffffffffffffffff) 2.463403482s ago: executing program 4 (id=688): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000800)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='0\x00', 0x2) 2.461657412s ago: executing program 1 (id=689): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:01.0', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(r1, 0x0, 0x0) 2.414152113s ago: executing program 3 (id=690): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='1\x00', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x41) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(r0, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) read(r3, &(0x7f0000004000), 0x2000) 2.150703149s ago: executing program 6 (id=691): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/options/context-info\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/tracing/trace_marker\x00', 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x41) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) write(r2, &(0x7f0000001000)='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA', 0x1fc7) ioctl$KVM_SIGNAL_MSI(r4, 0x4020aea5, &(0x7f0000000300)={0xfeeff000, 0x0, 0x40}) read(r5, &(0x7f0000004000), 0x2000) 214.494185ms ago: executing program 4 (id=692): mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000000250)='webusb/use\x00', 0x2, 0x0) write(r2, &(0x7f0000000290)='1\x00', 0x1) 167.857096ms ago: executing program 1 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls\x00', 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000780)='1', 0x1) 167.531736ms ago: executing program 4 (id=694): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000006c0)='Conf 2\x00', 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r7, &(0x7f0000000740)='midi.usb0\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r8, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb) r9 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x2, 0x0) write(r9, &(0x7f00000008c0)='2\x00', 0x2) write(r9, &(0x7f00000008e0)='1\x00', 0x2) write(r9, &(0x7f0000000900)='0\x00', 0x2) write(r8, &(0x7f0000000920)='\n\x00', 0x1) 167.335587ms ago: executing program 1 (id=695): mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./trace\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/kvm/kvm_hv_synic_set_irq/enable\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/instances/inst1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./trace/instances/inst1/events/enable\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./trace/instances/inst1/events/kvm/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000340)) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000440)={0x1, 0x1}) 86.167158ms ago: executing program 6 (id=696): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) 85.886238ms ago: executing program 4 (id=697): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) 85.714498ms ago: executing program 6 (id=698): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./debug/failslab/times\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='10\x00', 0x3) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 0s ago: executing program 6 (id=699): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f0000000740)='midi.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/2-1/bConfigurationValue\x00', 0x2, 0x0) write(r9, &(0x7f00000008c0)='2\x00', 0x2) write(r9, &(0x7f00000008e0)='1\x00', 0x2) write(r9, &(0x7f0000000900)='0\x00', 0x2) kernel console output (not intermixed with test programs): [ 84.782578][ T1688] ? __kasan_slab_alloc+0x73/0x90 [ 84.782599][ T1688] ? getname+0x1b/0x30 [ 84.782617][ T1688] ? x64_sys_call+0xe69/0x2ee0 [ 84.782634][ T1688] ? do_syscall_64+0x57/0xf0 [ 84.782655][ T1688] ? do_filp_open+0x440/0x440 [ 84.782679][ T1688] do_filp_open+0x1f2/0x440 [ 84.782702][ T1688] ? __cfi_do_filp_open+0x10/0x10 [ 84.782736][ T1688] ? alloc_fd+0x4c1/0x570 [ 84.782757][ T1688] do_sys_openat2+0x134/0x1d0 [ 84.782782][ T1688] ? do_sys_open+0x100/0x100 [ 84.782806][ T1688] ? __cfi_do_unlinkat+0x10/0x10 [ 84.782831][ T1688] __x64_sys_openat+0x13a/0x170 [ 84.782856][ T1688] x64_sys_call+0xe69/0x2ee0 [ 84.782872][ T1688] do_syscall_64+0x57/0xf0 [ 84.782890][ T1688] ? clear_bhb_loop+0x50/0xa0 [ 84.782914][ T1688] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.782936][ T1688] RIP: 0033:0x7f808f2a7407 [ 84.782953][ T1688] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 84.782969][ T1688] RSP: 002b:00007ffda20e2780 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 84.783011][ T1688] RAX: ffffffffffffffda RBX: 00007f808fa43880 RCX: 00007f808f2a7407 [ 84.783026][ T1688] RDX: 0000000000080000 RSI: 00007ffda20e2900 RDI: ffffffffffffff9c [ 84.783040][ T1688] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 84.783052][ T1688] R10: 0000000000000000 R11: 0000000000000202 R12: 00005647db3307f5 [ 84.783064][ T1688] R13: 00005647db3307f5 R14: 0000000000000001 R15: 0000000000000000 [ 84.783080][ T1688] [ 84.783134][ T1688] FAULT_INJECTION: forcing a failure. [ 84.783134][ T1688] name failslab, interval 1, probability 100, space 0, times 8 [ 84.794928][ T1756] CPU: 0 UID: 0 PID: 1756 Comm: syz.6.659 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 84.794958][ T1756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.794970][ T1756] Call Trace: [ 84.794977][ T1756] [ 84.794985][ T1756] __dump_stack+0x21/0x30 [ 84.795012][ T1756] dump_stack_lvl+0x140/0x1c0 [ 84.795036][ T1756] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.795062][ T1756] dump_stack+0x19/0x20 [ 84.795084][ T1756] should_fail_ex+0x3c2/0x510 [ 84.795106][ T1756] should_failslab+0xac/0x100 [ 84.795128][ T1756] __kmalloc_cache_noprof+0x41/0x470 [ 84.795148][ T1756] ? kvm_set_memslot+0x9b/0x13a0 [ 84.795174][ T1756] ? kvm_page_track_free_memslot+0x44/0x70 [ 84.795195][ T1756] kvm_set_memslot+0x9b/0x13a0 [ 84.795229][ T1756] __kvm_set_memory_region+0x5e0/0xb40 [ 84.795257][ T1756] __x86_set_memory_region+0x45e/0x590 [ 84.795285][ T1756] ? __cfi___x86_set_memory_region+0x10/0x10 [ 84.795310][ T1756] ? _raw_spin_lock_irqsave+0xc1/0x160 [ 84.795333][ T1756] ? __cfi_mutex_lock+0x10/0x10 [ 84.795357][ T1756] ? synchronize_srcu+0x2d9/0x4d0 [ 84.795376][ T1756] ? __cfi_synchronize_srcu+0x10/0x10 [ 84.795394][ T1756] kvm_arch_destroy_vm+0xe0/0x410 [ 84.795420][ T1756] ? __cfi_kvm_arch_destroy_vm+0x10/0x10 [ 84.795446][ T1756] ? mmu_notifier_unregister+0x2e9/0x360 [ 84.795468][ T1756] kvm_put_kvm+0xadf/0x12d0 [ 84.795493][ T1756] ? __cfi_kvm_vm_release+0x10/0x10 [ 84.795518][ T1756] kvm_vm_release+0x47/0x70 [ 84.795541][ T1756] __fput+0x208/0xa30 [ 84.795565][ T1756] ____fput+0x20/0x30 [ 84.795587][ T1756] task_work_run+0x1e8/0x260 [ 84.795610][ T1756] ? __cfi_task_work_run+0x10/0x10 [ 84.795632][ T1756] ? __kasan_check_write+0x18/0x20 [ 84.795650][ T1756] resume_user_mode_work+0x35/0x50 [ 84.795667][ T1756] syscall_exit_to_user_mode+0x63/0xb0 [ 84.795694][ T1756] do_syscall_64+0x63/0xf0 [ 84.795713][ T1756] ? clear_bhb_loop+0x50/0xa0 [ 84.795736][ T1756] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.795758][ T1756] RIP: 0033:0x7f445759df99 [ 84.795774][ T1756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.795790][ T1756] RSP: 002b:00007ffe190a1cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 84.795811][ T1756] RAX: 0000000000000000 RBX: 00007ffe190a1db0 RCX: 00007f445759df99 [ 84.795824][ T1756] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 84.795836][ T1756] RBP: 0000000000014a90 R08: 0000000000000001 R09: 0000000000000000 [ 84.795849][ T1756] R10: 0000001b33f20000 R11: 0000000000000246 R12: 00007ffe190a1df0 [ 84.795862][ T1756] R13: 00007f4457825fac R14: 0000000000014aeb R15: 00007f4457825fa0 [ 84.795878][ T1756] [ 84.806074][ C1] FAULT_INJECTION: forcing a failure. [ 84.806074][ C1] name failslab, interval 1, probability 100, space 0, times 7 [ 84.806105][ C1] CPU: 1 UID: 0 PID: 1688 Comm: udevd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 84.806129][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.806140][ C1] Call Trace: [ 84.806147][ C1] [ 84.806156][ C1] __dump_stack+0x21/0x30 [ 84.806182][ C1] dump_stack_lvl+0x140/0x1c0 [ 84.806207][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.806233][ C1] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 84.806244][ T12] FAULT_INJECTION: forcing a failure. [ 84.806244][ T12] name failslab, interval 1, probability 100, space 0, times 7 [ 84.806261][ C1] dump_stack+0x19/0x20 [ 84.806284][ C1] should_fail_ex+0x3c2/0x510 [ 84.806305][ C1] should_failslab+0xac/0x100 [ 84.806324][ C1] kmem_cache_alloc_node_noprof+0x45/0x420 [ 84.806343][ C1] ? __alloc_skb+0x10c/0x360 [ 84.806366][ C1] __alloc_skb+0x10c/0x360 [ 84.806387][ C1] ndisc_send_rs+0x322/0x880 [ 84.806406][ C1] ? ipv6_get_lladdr+0x1c2/0x200 [ 84.806429][ C1] addrconf_rs_timer+0x362/0x620 [ 84.806449][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 84.806470][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 84.806489][ C1] call_timer_fn+0x4c/0x300 [ 84.806512][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 84.806531][ C1] __run_timer_base+0x6c0/0x9b0 [ 84.806553][ C1] ? timer_expire_remote+0xa0/0xa0 [ 84.806573][ C1] ? kvm_sched_clock_read+0x15/0x30 [ 84.806598][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 84.806621][ C1] run_timer_softirq+0x35/0x70 [ 84.806641][ C1] handle_softirqs+0x1aa/0x620 [ 84.806660][ C1] __irq_exit_rcu+0x47/0xb0 [ 84.806676][ C1] irq_exit_rcu+0xd/0x30 [ 84.806692][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 84.806724][ C1] [ 84.806730][ C1] [ 84.806737][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 84.806759][ C1] RIP: 0010:console_flush_all+0x6fd/0xab0 [ 84.806785][ C1] Code: 89 de 48 81 e6 00 02 00 00 31 ff e8 2d 8f 1e 00 48 81 e3 00 02 00 00 75 07 e8 3f 8a 1e 00 eb 06 e8 38 8a 1e 00 fb 49 8d 5d 58 <48> 8b 44 24 28 42 80 3c 20 00 74 08 48 89 df e8 0f 4d 77 00 48 8b [ 84.806800][ C1] RSP: 0018:ffffc9000b5d7320 EFLAGS: 00000293 [ 84.806817][ C1] RAX: ffffffff8168e788 RBX: ffffffff878f48b8 RCX: ffff8881083ccc00 [ 84.806831][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 84.806844][ C1] RBP: ffffc9000b5d7450 R08: 0000000000000003 R09: 0000000000000004 [ 84.806855][ C1] R10: dffffc0000000000 R11: fffff520016bae54 R12: dffffc0000000000 [ 84.806868][ C1] R13: ffffffff878f4860 R14: ffffffff878f48b8 R15: 0000000000000001 [ 84.806882][ C1] ? console_flush_all+0x6f8/0xab0 [ 84.806908][ C1] ? __console_rewind_all+0x170/0x170 [ 84.806931][ C1] ? __kasan_check_read+0x15/0x20 [ 84.806947][ C1] ? is_printk_cpu_sync_owner+0x39/0x50 [ 84.806972][ C1] ? is_printk_legacy_deferred+0x5c/0x70 [ 84.806989][ C1] console_unlock+0xf8/0x2c0 [ 84.807009][ C1] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 84.807030][ C1] ? __cfi_console_unlock+0x10/0x10 [ 84.807050][ C1] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 84.807072][ C1] ? vprintk_emit+0x53f/0x650 [ 84.807094][ C1] vprintk_emit+0x282/0x650 [ 84.807115][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 84.807136][ C1] ? stack_depot_save_flags+0x38/0x800 [ 84.807157][ C1] vprintk_default+0x2a/0x40 [ 84.807179][ C1] vprintk+0x93/0xa0 [ 84.807195][ C1] _printk+0xde/0x140 [ 84.807214][ C1] ? __asan_memcpy+0x5a/0x80 [ 84.807231][ C1] ? __cfi__printk+0x10/0x10 [ 84.807252][ C1] ? cred_has_capability+0x296/0x3a0 [ 84.807270][ C1] should_fail_ex+0x3a4/0x510 [ 84.807288][ C1] should_failslab+0xac/0x100 [ 84.807309][ C1] kmem_cache_alloc_node_noprof+0x45/0x420 [ 84.807326][ C1] ? __alloc_skb+0x10c/0x360 [ 84.807347][ C1] ? selinux_capable+0x38/0x50 [ 84.807369][ C1] __alloc_skb+0x10c/0x360 [ 84.807390][ C1] netlink_alloc_large_skb+0xf7/0x1b0 [ 84.807414][ C1] netlink_sendmsg+0x576/0xad0 [ 84.807432][ C1] ? __cfi_netlink_sendmsg+0x10/0x10 [ 84.807450][ C1] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 84.807469][ C1] ? security_socket_sendmsg+0x3d/0x100 [ 84.807492][ C1] ____sys_sendmsg+0x99e/0xa00 [ 84.807510][ C1] ? __import_iovec+0x3fa/0x7d0 [ 84.807533][ C1] ? __sys_sendmsg_sock+0x50/0x50 [ 84.807550][ C1] ? import_iovec+0x80/0xb0 [ 84.807573][ C1] ___sys_sendmsg+0x2a6/0x370 [ 84.807591][ C1] ? __sys_sendmsg+0x2a0/0x2a0 [ 84.807612][ C1] ? putname+0x113/0x150 [ 84.807630][ C1] ? __kasan_check_read+0x15/0x20 [ 84.807647][ C1] __x64_sys_sendmsg+0x206/0x2e0 [ 84.807665][ C1] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 84.807683][ C1] ? __kasan_check_write+0x18/0x20 [ 84.807700][ C1] ? fpregs_restore_userregs+0x11c/0x260 [ 84.807729][ C1] ? switch_fpu_return+0x12/0x20 [ 84.807749][ C1] x64_sys_call+0x2a4c/0x2ee0 [ 84.807765][ C1] do_syscall_64+0x57/0xf0 [ 84.807783][ C1] ? clear_bhb_loop+0x50/0xa0 [ 84.807805][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.807825][ C1] RIP: 0033:0x7f808f2a7407 [ 84.807839][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 84.807853][ C1] RSP: 002b:00007ffda20e6d10 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 84.807871][ C1] RAX: ffffffffffffffda RBX: 00007f808fa43880 RCX: 00007f808f2a7407 [ 84.807884][ C1] RDX: 0000000000000000 RSI: 00007ffda20e6d70 RDI: 000000000000000c [ 84.807896][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.807907][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000b2 [ 84.807918][ C1] R13: 00005647e9c2f6e0 R14: 0000000000000000 R15: 0000000000000000 [ 84.807932][ C1] [ 84.807940][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 84.807967][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.807980][ T12] Workqueue: ipv6_addrconf addrconf_dad_work [ 84.808004][ T12] Call Trace: [ 84.808010][ T12] [ 84.808018][ T12] __dump_stack+0x21/0x30 [ 84.808042][ T12] dump_stack_lvl+0x140/0x1c0 [ 84.808066][ T12] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.808091][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 84.808108][ T12] dump_stack+0x19/0x20 [ 84.808132][ T12] should_fail_ex+0x3c2/0x510 [ 84.808151][ T12] should_failslab+0xac/0x100 [ 84.808173][ T12] kmem_cache_alloc_node_noprof+0x45/0x420 [ 84.808192][ T12] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 84.808221][ T12] ? __alloc_skb+0x10c/0x360 [ 84.808245][ T12] __alloc_skb+0x10c/0x360 [ 84.808268][ T12] ndisc_ns_create+0x2c0/0x8d0 [ 84.808286][ T12] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 84.808307][ T12] ? __mod_timer+0x881/0xd20 [ 84.808328][ T12] ? __cfi_ndisc_ns_create+0x10/0x10 [ 84.808347][ T12] ndisc_send_ns+0xbb/0x160 [ 84.808366][ T12] ? __cfi_ndisc_send_ns+0x10/0x10 [ 84.808385][ T12] addrconf_dad_work+0xa0e/0x1550 [ 84.808405][ T12] ? __cfi_addrconf_dad_work+0x10/0x10 [ 84.808424][ T12] ? __kasan_check_write+0x18/0x20 [ 84.808441][ T12] ? pwq_dec_nr_in_flight+0x943/0xba0 [ 84.808460][ T12] ? _raw_spin_lock_irq+0x93/0x120 [ 84.808480][ T12] ? kick_pool+0xb9/0x540 [ 84.808502][ T12] process_scheduled_works+0x7f7/0x1060 [ 84.808524][ T12] worker_thread+0xc99/0x13f0 [ 84.808546][ T12] kthread+0x2c7/0x360 [ 84.808566][ T12] ? __cfi_worker_thread+0x10/0x10 [ 84.808584][ T12] ? __cfi_kthread+0x10/0x10 [ 84.808610][ T12] ret_from_fork+0x67/0xa0 [ 84.808634][ T12] ? __cfi_kthread+0x10/0x10 [ 84.808654][ T12] ret_from_fork_asm+0x1a/0x30 [ 84.808672][ T12] [ 84.808688][ T12] FAULT_INJECTION: forcing a failure. [ 84.808688][ T12] name failslab, interval 1, probability 100, space 0, times 5 [ 84.818099][ C0] FAULT_INJECTION: forcing a failure. [ 84.818099][ C0] name failslab, interval 1, probability 100, space 0, times 5 [ 84.818124][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 84.818149][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.818162][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 84.818184][ C0] Call Trace: [ 84.818191][ C0] [ 84.818199][ C0] __dump_stack+0x21/0x30 [ 84.818234][ C0] dump_stack_lvl+0x140/0x1c0 [ 84.818260][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.818288][ C0] ? __cfi_enqueue_task+0x10/0x10 [ 84.818309][ C0] dump_stack+0x19/0x20 [ 84.818334][ C0] should_fail_ex+0x3c2/0x510 [ 84.818356][ C0] should_failslab+0xac/0x100 [ 84.818381][ C0] kmem_cache_alloc_node_noprof+0x45/0x420 [ 84.818403][ C0] ? __alloc_skb+0x10c/0x360 [ 84.818431][ C0] __alloc_skb+0x10c/0x360 [ 84.818458][ C0] ndisc_send_rs+0x322/0x880 [ 84.818477][ C0] ? ipv6_get_lladdr+0x1c2/0x200 [ 84.818504][ C0] addrconf_rs_timer+0x362/0x620 [ 84.818527][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 84.818551][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 84.818575][ C0] call_timer_fn+0x4c/0x300 [ 84.818607][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 84.818632][ C0] __run_timer_base+0x6c0/0x9b0 [ 84.818659][ C0] ? timer_expire_remote+0xa0/0xa0 [ 84.818683][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 84.818713][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 84.818740][ C0] run_timer_softirq+0x35/0x70 [ 84.818764][ C0] handle_softirqs+0x1aa/0x620 [ 84.818787][ C0] __irq_exit_rcu+0x47/0xb0 [ 84.818807][ C0] irq_exit_rcu+0xd/0x30 [ 84.818827][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 84.818855][ C0] [ 84.818863][ C0] [ 84.818870][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 84.818897][ C0] RIP: 0010:vprintk_emit+0x547/0x650 [ 84.818925][ C0] Code: 81 e6 00 02 00 00 31 ff e8 c6 c5 1e 00 48 81 e3 00 02 00 00 75 07 e8 d8 c0 1e 00 eb 06 e8 d1 c0 1e 00 fb c6 05 49 ea 54 07 00 31 fd ff ff e8 bf c0 1e 00 e9 94 fe ff ff 41 ff ce bf 58 89 41 [ 84.818944][ C0] RSP: 0018:ffffc900000c7620 EFLAGS: 00000293 [ 84.818962][ C0] RAX: ffffffff8168b0ef RBX: 0000000000000200 RCX: ffff888102652600 [ 84.818978][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 84.818992][ C0] RBP: ffffc900000c76e8 R08: 0000000000000003 R09: 0000000000000004 [ 84.819006][ C0] R10: dffffc0000000000 R11: fffff52000018eb4 R12: 1ffff92000018ec8 [ 84.819023][ C0] R13: 0000000000000060 R14: 0000000000000000 R15: dffffc0000000000 [ 84.819038][ C0] ? vprintk_emit+0x53f/0x650 [ 84.819065][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 84.819089][ C0] ? __show_trace_log_lvl+0x334/0x420 [ 84.819113][ C0] vprintk_default+0x2a/0x40 [ 84.819134][ C0] vprintk+0x93/0xa0 [ 84.819150][ C0] _printk+0xde/0x140 [ 84.819171][ C0] ? __cfi__printk+0x10/0x10 [ 84.819196][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 84.819222][ C0] should_fail_ex+0x3a4/0x510 [ 84.819242][ C0] should_failslab+0xac/0x100 [ 84.819261][ C0] kmem_cache_alloc_node_noprof+0x45/0x420 [ 84.819281][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 84.819301][ C0] ? __alloc_skb+0x10c/0x360 [ 84.819311][ T1762] FAULT_INJECTION: forcing a failure. [ 84.819311][ T1762] name failslab, interval 1, probability 100, space 0, times 5 [ 84.819327][ C0] __alloc_skb+0x10c/0x360 [ 84.819350][ C0] ndisc_ns_create+0x2c0/0x8d0 [ 84.819367][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 84.819386][ C0] ? __mod_timer+0x881/0xd20 [ 84.819405][ C0] ? __cfi_ndisc_ns_create+0x10/0x10 [ 84.819424][ C0] ndisc_send_ns+0xbb/0x160 [ 84.819440][ C0] ? __cfi_ndisc_send_ns+0x10/0x10 [ 84.819458][ C0] addrconf_dad_work+0xa0e/0x1550 [ 84.819477][ C0] ? __cfi_addrconf_dad_work+0x10/0x10 [ 84.819494][ C0] ? pwq_dec_nr_in_flight+0x943/0xba0 [ 84.819511][ C0] ? kick_pool+0xb9/0x540 [ 84.819531][ C0] process_scheduled_works+0x7f7/0x1060 [ 84.819551][ C0] worker_thread+0xc99/0x13f0 [ 84.819571][ C0] kthread+0x2c7/0x360 [ 84.819590][ C0] ? __cfi_worker_thread+0x10/0x10 [ 84.819607][ C0] ? __cfi_kthread+0x10/0x10 [ 84.819625][ C0] ret_from_fork+0x67/0xa0 [ 84.819649][ C0] ? __cfi_kthread+0x10/0x10 [ 84.819667][ C0] ret_from_fork_asm+0x1a/0x30 [ 84.819684][ C0] [ 84.819692][ T1762] CPU: 1 UID: 0 PID: 1762 Comm: syz.4.662 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 84.819706][ C0] FAULT_INJECTION: forcing a failure. [ 84.819706][ C0] name failslab, interval 1, probability 100, space 0, times 4 [ 84.819726][ T1762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.819737][ T1762] Call Trace: [ 84.819743][ T1762] [ 84.819749][ T1762] __dump_stack+0x21/0x30 [ 84.819772][ T1762] dump_stack_lvl+0x140/0x1c0 [ 84.819794][ T1762] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.819816][ T1762] ? vma_expand+0x5b0/0x5b0 [ 84.819834][ T1762] ? __cfi_perf_event_mmap+0x10/0x10 [ 84.819856][ T1762] dump_stack+0x19/0x20 [ 84.819877][ T1762] should_fail_ex+0x3c2/0x510 [ 84.819895][ T1762] should_failslab+0xac/0x100 [ 84.819915][ T1762] kmem_cache_alloc_noprof+0x42/0x410 [ 84.819932][ T1762] ? vma_merge_new_range+0x77e/0x900 [ 84.819949][ T1762] ? vm_area_dup+0x3f/0x560 [ 84.819969][ T1762] vm_area_dup+0x3f/0x560 [ 84.819985][ T1762] ? __split_vma+0x1b8/0xc10 [ 84.820003][ T1762] __split_vma+0x1ce/0xc10 [ 84.820020][ T1762] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 84.820041][ T1762] vma_modify+0x364/0x1540 [ 84.820059][ T1762] ? avc_has_perm_noaudit+0x289/0x360 [ 84.820080][ T1762] vma_modify_flags+0x182/0x1c0 [ 84.820100][ T1762] mprotect_fixup+0x432/0x8d0 [ 84.820121][ T1762] ? __cfi_selinux_file_mprotect+0x10/0x10 [ 84.820139][ T1762] ? __cfi_mprotect_fixup+0x10/0x10 [ 84.820160][ T1762] ? bpf_lsm_file_mprotect+0xd/0x20 [ 84.820182][ T1762] do_mprotect_pkey+0xa85/0xe50 [ 84.820203][ T1762] ? __cfi_do_mmap+0x10/0x10 [ 84.820220][ T1762] ? __cfi_down_write_killable+0x10/0x10 [ 84.820245][ T1762] ? prot_none_test+0x30/0x30 [ 84.820276][ T1762] ? __kasan_check_read+0x15/0x20 [ 84.820293][ T1762] __x64_sys_mprotect+0x84/0xa0 [ 84.820314][ T1762] x64_sys_call+0x2590/0x2ee0 [ 84.820330][ T1762] do_syscall_64+0x57/0xf0 [ 84.820348][ T1762] ? clear_bhb_loop+0x50/0xa0 [ 84.820369][ T1762] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.820390][ T1762] RIP: 0033:0x7fa7da59dd97 [ 84.820404][ T1762] Code: 89 38 eb 84 0f 1f 80 00 00 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 48 c7 c0 ff ff ff ff e9 7a ff ff ff b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.820419][ T1762] RSP: 002b:00007ffcd5632078 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 84.820438][ T1762] RAX: ffffffffffffffda RBX: 00007fa7db3d76c0 RCX: 00007fa7da59dd97 [ 84.820451][ T1762] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007fa7db3b8000 [ 84.820464][ T1762] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 84.820475][ T1762] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcd56321d0 [ 84.820488][ T1762] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 84.820503][ T1762] [ 84.820510][ C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 84.820535][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.820548][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 84.820570][ C0] Call Trace: [ 84.820565][ T1762] FAULT_INJECTION: forcing a failure. [ 84.820565][ T1762] name failslab, interval 1, probability 100, space 0, times 3 [ 84.820577][ C0] [ 84.820585][ C0] __dump_stack+0x21/0x30 [ 84.820607][ C0] dump_stack_lvl+0x140/0x1c0 [ 84.820628][ C0] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.820651][ C0] ? calc_wheel_index+0x1b9/0x8f0 [ 84.820672][ C0] ? __kasan_check_write+0x18/0x20 [ 84.820689][ C0] dump_stack+0x19/0x20 [ 84.820710][ C0] should_fail_ex+0x3c2/0x510 [ 84.820729][ C0] should_failslab+0xac/0x100 [ 84.820748][ C0] kmem_cache_alloc_node_noprof+0x45/0x420 [ 84.820766][ C0] ? enqueue_timer+0x1c5/0x4b0 [ 84.820787][ C0] ? __alloc_skb+0x10c/0x360 [ 84.820809][ C0] __alloc_skb+0x10c/0x360 [ 84.820830][ C0] ndisc_send_rs+0x322/0x880 [ 84.820847][ C0] ? ipv6_get_lladdr+0x1c2/0x200 [ 84.820870][ C0] addrconf_rs_timer+0x362/0x620 [ 84.820889][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 84.820909][ C0] ? _raw_spin_lock_irq+0x93/0x120 [ 84.820928][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 84.820946][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 84.820965][ C0] call_timer_fn+0x4c/0x300 [ 84.820986][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 84.821005][ C0] __run_timer_base+0x6c0/0x9b0 [ 84.821027][ C0] ? timer_expire_remote+0xa0/0xa0 [ 84.821047][ C0] ? kvm_sched_clock_read+0x15/0x30 [ 84.821072][ C0] ? irqtime_account_irq+0x51/0x1c0 [ 84.821094][ C0] run_timer_softirq+0x35/0x70 [ 84.821114][ C0] handle_softirqs+0x1aa/0x620 [ 84.821132][ C0] __irq_exit_rcu+0x47/0xb0 [ 84.821148][ C0] irq_exit_rcu+0xd/0x30 [ 84.821164][ C0] sysvec_apic_timer_interrupt+0x82/0x90 [ 84.821187][ C0] [ 84.821193][ C0] [ 84.821200][ C0] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 84.821229][ C0] RIP: 0010:vprintk_emit+0x547/0x650 [ 84.821251][ C0] Code: 81 e6 00 02 00 00 31 ff e8 c6 c5 1e 00 48 81 e3 00 02 00 00 75 07 e8 d8 c0 1e 00 eb 06 e8 d1 c0 1e 00 fb c6 05 49 ea 54 07 00 31 fd ff ff e8 bf c0 1e 00 e9 94 fe ff ff 41 ff ce bf 58 89 41 [ 84.821266][ C0] RSP: 0018:ffffc900000c7620 EFLAGS: 00000293 [ 84.821280][ C0] RAX: ffffffff8168b0ef RBX: 0000000000000200 RCX: ffff888102652600 [ 84.821293][ C0] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 84.821305][ C0] RBP: ffffc900000c76e8 R08: 0000000000000003 R09: 0000000000000004 [ 84.821316][ C0] R10: dffffc0000000000 R11: fffff52000018eb4 R12: 1ffff92000018ec8 [ 84.821330][ C0] R13: 0000000000000060 R14: 0000000000000000 R15: dffffc0000000000 [ 84.821343][ C0] ? vprintk_emit+0x53f/0x650 [ 84.821365][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 84.821385][ C0] ? __show_trace_log_lvl+0x334/0x420 [ 84.821405][ C0] vprintk_default+0x2a/0x40 [ 84.821426][ C0] vprintk+0x93/0xa0 [ 84.821441][ C0] _printk+0xde/0x140 [ 84.821460][ C0] ? __cfi__printk+0x10/0x10 [ 84.821481][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 84.821497][ C0] should_fail_ex+0x3a4/0x510 [ 84.821516][ C0] should_failslab+0xac/0x100 [ 84.821536][ C0] kmem_cache_alloc_node_noprof+0x45/0x420 [ 84.821553][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 84.821572][ C0] ? __alloc_skb+0x10c/0x360 [ 84.821594][ C0] __alloc_skb+0x10c/0x360 [ 84.821618][ C0] ndisc_ns_create+0x2c0/0x8d0 [ 84.821636][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 84.821656][ C0] ? __mod_timer+0x881/0xd20 [ 84.821674][ C0] ? __cfi_ndisc_ns_create+0x10/0x10 [ 84.821693][ C0] ndisc_send_ns+0xbb/0x160 [ 84.821710][ C0] ? __cfi_ndisc_send_ns+0x10/0x10 [ 84.821728][ C0] addrconf_dad_work+0xa0e/0x1550 [ 84.821746][ C0] ? __cfi_addrconf_dad_work+0x10/0x10 [ 84.821763][ C0] ? pwq_dec_nr_in_flight+0x943/0xba0 [ 84.821781][ C0] ? kick_pool+0xb9/0x540 [ 84.821800][ C0] process_scheduled_works+0x7f7/0x1060 [ 84.821820][ C0] worker_thread+0xc99/0x13f0 [ 84.821839][ C0] kthread+0x2c7/0x360 [ 84.821858][ C0] ? __cfi_worker_thread+0x10/0x10 [ 84.821874][ C0] ? __cfi_kthread+0x10/0x10 [ 84.821893][ C0] ret_from_fork+0x67/0xa0 [ 84.821915][ C0] ? __cfi_kthread+0x10/0x10 [ 84.821933][ C0] ret_from_fork_asm+0x1a/0x30 [ 84.821950][ C0] [ 84.821958][ T1759] CPU: 1 UID: 0 PID: 1759 Comm: syz.3.661 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 84.821988][ T1759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.821999][ T1759] Call Trace: [ 84.822006][ T1759] [ 84.822013][ T1759] __dump_stack+0x21/0x30 [ 84.822041][ T1759] dump_stack_lvl+0x140/0x1c0 [ 84.822066][ T1759] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.822092][ T1759] dump_stack+0x19/0x20 [ 84.822115][ T1759] should_fail_ex+0x3c2/0x510 [ 84.822136][ T1759] should_failslab+0xac/0x100 [ 84.822158][ T1759] __kmalloc_cache_noprof+0x41/0x470 [ 84.822179][ T1759] ? kobject_uevent_env+0x2a3/0x7e0 [ 84.822202][ T1759] ? __kasan_check_write+0x18/0x20 [ 84.822220][ T1759] kobject_uevent_env+0x2a3/0x7e0 [ 84.822242][ T1759] ? __dev_fwnode+0x54/0x90 [ 84.822266][ T1759] kobject_uevent+0x21/0x40 [ 84.822288][ T1759] device_del+0xb7f/0xcf0 [ 84.822315][ T1759] ? __cfi_device_del+0x10/0x10 [ 84.822340][ T1759] snd_card_disconnect+0x40a/0x7a0 [ 84.822364][ T1759] ? __cfi_snd_card_disconnect+0x10/0x10 [ 84.822387][ T1759] ? usb_ep_disable+0xcf/0x200 [ 84.822412][ T1759] ? f_midi_disable+0x3dd/0x460 [ 84.822440][ T1759] snd_card_free_when_closed+0x23/0x50 [ 84.822462][ T1759] f_midi_unbind+0x5f/0x80 [ 84.822487][ T1759] ? __cfi_f_midi_unbind+0x10/0x10 [ 84.822513][ T1759] purge_configs_funcs+0x236/0x320 [ 84.822538][ T1759] configfs_composite_unbind+0xbb/0x1f0 [ 84.822561][ T1759] ? dummy_udc_async_callbacks+0xfc/0x160 [ 84.822588][ T1759] gadget_unbind_driver+0x1ea/0x3f0 [ 84.822609][ T1759] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 84.822629][ T1759] device_release_driver_internal+0x4ad/0x830 [ 84.822656][ T1759] driver_detach+0x1f5/0x2d0 [ 84.822688][ T1759] bus_remove_driver+0x254/0x2b0 [ 84.822719][ T1759] driver_unregister+0x79/0xb0 [ 84.822738][ T1759] usb_gadget_unregister_driver+0x52/0x80 [ 84.822759][ T1759] gadget_dev_desc_UDC_store+0x1c6/0x350 [ 84.822782][ T1759] configfs_write_iter+0x32f/0x490 [ 84.822807][ T1759] ? __cfi_gadget_dev_desc_UDC_store+0x10/0x10 [ 84.822830][ T1759] vfs_write+0x762/0xfd0 [ 84.822852][ T1759] ? __cfi_vfs_write+0x10/0x10 [ 84.822871][ T1759] ? __cfi_mutex_lock+0x10/0x10 [ 84.822899][ T1759] ksys_write+0x145/0x260 [ 84.822919][ T1759] ? xfd_validate_state+0x68/0x140 [ 84.822946][ T1759] ? __cfi_ksys_write+0x10/0x10 [ 84.822966][ T1759] ? __kasan_check_write+0x18/0x20 [ 84.823008][ T1759] ? fpregs_restore_userregs+0x11c/0x260 [ 84.823031][ T1759] __x64_sys_write+0x7f/0x90 [ 84.823051][ T1759] x64_sys_call+0x271c/0x2ee0 [ 84.823069][ T1759] do_syscall_64+0x57/0xf0 [ 84.823089][ T1759] ? clear_bhb_loop+0x50/0xa0 [ 84.823114][ T1759] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.823137][ T1759] RIP: 0033:0x7ff5ecb9df99 [ 84.823154][ T1759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.823172][ T1759] RSP: 002b:00007ff5eb5e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.823194][ T1759] RAX: ffffffffffffffda RBX: 00007ff5ece25fa0 RCX: 00007ff5ecb9df99 [ 84.823211][ T1759] RDX: 0000000000000001 RSI: 0000200000000920 RDI: 000000000000000c [ 84.823224][ T1759] RBP: 00007ff5ecc34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 84.823239][ T1759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.823253][ T1759] R13: 00007ff5ece26038 R14: 00007ff5ece25fa0 R15: 00007ffee1c12908 [ 84.823269][ T1759] [ 84.823322][ T1762] CPU: 1 UID: 0 PID: 1762 Comm: syz.4.662 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 84.823346][ T1762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.823358][ T1762] Call Trace: [ 84.823364][ T1762] [ 84.823372][ T1762] __dump_stack+0x21/0x30 [ 84.823396][ T1762] dump_stack_lvl+0x140/0x1c0 [ 84.823420][ T1762] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.823444][ T1762] ? vma_expand+0x5b0/0x5b0 [ 84.823463][ T1762] ? __cfi_perf_event_mmap+0x10/0x10 [ 84.823487][ T1762] dump_stack+0x19/0x20 [ 84.823509][ T1762] should_fail_ex+0x3c2/0x510 [ 84.823529][ T1762] should_failslab+0xac/0x100 [ 84.823551][ T1762] kmem_cache_alloc_noprof+0x42/0x410 [ 84.823569][ T1762] ? vma_merge_new_range+0x77e/0x900 [ 84.823588][ T1762] ? vm_area_dup+0x3f/0x560 [ 84.823608][ T1762] vm_area_dup+0x3f/0x560 [ 84.823626][ T1762] ? __split_vma+0x1b8/0xc10 [ 84.823645][ T1762] __split_vma+0x1ce/0xc10 [ 84.823670][ T1762] ? vms_gather_munmap_vmas+0xd90/0xd90 [ 84.823693][ T1762] ? mas_find+0x415/0x620 [ 84.823724][ T1762] vms_gather_munmap_vmas+0x446/0xd90 [ 84.823747][ T1762] do_vmi_align_munmap+0x251/0x5f0 [ 84.823769][ T1762] ? __cfi_do_vmi_align_munmap+0x10/0x10 [ 84.823793][ T1762] do_vmi_munmap+0x245/0x2e0 [ 84.823813][ T1762] __vm_munmap+0x25b/0x3d0 [ 84.823833][ T1762] ? vm_munmap+0x40/0x40 [ 84.823853][ T1762] ? xfd_validate_state+0x68/0x140 [ 84.823877][ T1762] ? blocking_notifier_call_chain+0x7c/0x90 [ 84.823898][ T1762] __se_sys_munmap+0xb4/0x390 [ 84.823917][ T1762] __x64_sys_munmap+0x5f/0x80 [ 84.823937][ T1762] x64_sys_call+0x9c6/0x2ee0 [ 84.823954][ T1762] do_syscall_64+0x57/0xf0 [ 84.823974][ T1762] ? clear_bhb_loop+0x50/0xa0 [ 84.823997][ T1762] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.824019][ T1762] RIP: 0033:0x7fa7da59ddc7 [ 84.824034][ T1762] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.824050][ T1762] RSP: 002b:00007ffcd5632078 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 84.824070][ T1762] RAX: ffffffffffffffda RBX: 00007fa7db3d76c0 RCX: 00007fa7da59ddc7 [ 84.824085][ T1762] RDX: 000000000000000c RSI: 0000000000021000 RDI: 00007fa7db3b7000 [ 84.824098][ T1762] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 84.824111][ T1762] R10: 0000000000021000 R11: 0000000000000206 R12: 00007ffcd56321d0 [ 84.824124][ T1762] R13: ffffffffffffffe8 R14: 0000000000001000 R15: 0000000000000000 [ 84.824139][ T1762] [ 84.824258][ T1762] FAULT_INJECTION: forcing a failure. [ 84.824258][ T1762] name failslab, interval 1, probability 100, space 0, times 1 [ 84.825501][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 84.825527][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.825539][ T12] Workqueue: ipv6_addrconf addrconf_dad_work [ 84.825560][ T12] Call Trace: [ 84.825567][ T12] [ 84.825574][ T12] __dump_stack+0x21/0x30 [ 84.825598][ T12] dump_stack_lvl+0x140/0x1c0 [ 84.825622][ T12] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.825647][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 84.825665][ T12] dump_stack+0x19/0x20 [ 84.825687][ T12] should_fail_ex+0x3c2/0x510 [ 84.825708][ T12] should_failslab+0xac/0x100 [ 84.825730][ T12] kmem_cache_alloc_node_noprof+0x45/0x420 [ 84.825748][ T12] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 84.825770][ T12] ? __alloc_skb+0x10c/0x360 [ 84.825793][ T12] __alloc_skb+0x10c/0x360 [ 84.825816][ T12] ndisc_ns_create+0x2c0/0x8d0 [ 84.825834][ T12] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 84.825855][ T12] ? __mod_timer+0x881/0xd20 [ 84.825876][ T12] ? __cfi_ndisc_ns_create+0x10/0x10 [ 84.825896][ T12] ndisc_send_ns+0xbb/0x160 [ 84.825915][ T12] ? __cfi_ndisc_send_ns+0x10/0x10 [ 84.825934][ T12] addrconf_dad_work+0xa0e/0x1550 [ 84.825954][ T12] ? __cfi_addrconf_dad_work+0x10/0x10 [ 84.825973][ T12] ? pwq_dec_nr_in_flight+0x943/0xba0 [ 84.825993][ T12] ? kick_pool+0xb9/0x540 [ 84.826015][ T12] process_scheduled_works+0x7f7/0x1060 [ 84.826036][ T12] worker_thread+0xc99/0x13f0 [ 84.826058][ T12] kthread+0x2c7/0x360 [ 84.826077][ T12] ? __cfi_worker_thread+0x10/0x10 [ 84.826096][ T12] ? __cfi_kthread+0x10/0x10 [ 84.826116][ T12] ret_from_fork+0x67/0xa0 [ 84.826140][ T12] ? __cfi_kthread+0x10/0x10 [ 84.826160][ T12] ret_from_fork_asm+0x1a/0x30 [ 84.826179][ T12] [ 84.826337][ T1761] CPU: 0 UID: 0 PID: 1761 Comm: syz.1.660 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 84.826365][ T1761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.826378][ T1761] Call Trace: [ 84.826385][ T1761] [ 84.826392][ T1761] __dump_stack+0x21/0x30 [ 84.826420][ T1761] dump_stack_lvl+0x140/0x1c0 [ 84.826446][ T1761] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.826477][ T1761] ? futex_wait+0x2b8/0x7c0 [ 84.826496][ T1761] ? __cfi_futex_wait+0x10/0x10 [ 84.826515][ T1761] dump_stack+0x19/0x20 [ 84.826540][ T1761] should_fail_ex+0x3c2/0x510 [ 84.826563][ T1761] should_failslab+0xac/0x100 [ 84.826587][ T1761] kmem_cache_alloc_noprof+0x42/0x410 [ 84.826608][ T1761] ? do_futex+0x32a/0x510 [ 84.826632][ T1761] ? getname_flags+0xcc/0x6b0 [ 84.826653][ T1761] getname_flags+0xcc/0x6b0 [ 84.826673][ T1761] getname+0x1b/0x30 [ 84.826692][ T1761] do_sys_openat2+0xda/0x1d0 [ 84.826717][ T1761] ? fput+0x1a4/0x230 [ 84.826740][ T1761] ? do_sys_open+0x100/0x100 [ 84.826766][ T1761] __x64_sys_openat+0x13a/0x170 [ 84.826792][ T1761] x64_sys_call+0xe69/0x2ee0 [ 84.826810][ T1761] do_syscall_64+0x57/0xf0 [ 84.826830][ T1761] ? clear_bhb_loop+0x50/0xa0 [ 84.826854][ T1761] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.826876][ T1761] RIP: 0033:0x7f433ed9df99 [ 84.826892][ T1761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.826908][ T1761] RSP: 002b:00007f433fbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 84.826929][ T1761] RAX: ffffffffffffffda RBX: 00007f433f025fa0 RCX: 00007f433ed9df99 [ 84.826944][ T1761] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 84.826957][ T1761] RBP: 00007f433ee34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 84.826970][ T1761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.826983][ T1761] R13: 00007f433f026038 R14: 00007f433f025fa0 R15: 00007ffdd39cb4f8 [ 84.826999][ T1761] [ 84.827067][ T110] CPU: 0 UID: 0 PID: 110 Comm: udevd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 84.827090][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.827101][ T110] Call Trace: [ 84.827108][ T110] [ 84.827115][ T110] __dump_stack+0x21/0x30 [ 84.827139][ T110] dump_stack_lvl+0x140/0x1c0 [ 84.827162][ T110] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.827186][ T110] ? stack_trace_save+0xaa/0x100 [ 84.827215][ T110] dump_stack+0x19/0x20 [ 84.827238][ T110] should_fail_ex+0x3c2/0x510 [ 84.827259][ T110] should_failslab+0xac/0x100 [ 84.827279][ T110] kmem_cache_alloc_noprof+0x42/0x410 [ 84.827298][ T110] ? x64_sys_call+0x155b/0x2ee0 [ 84.827315][ T110] ? do_syscall_64+0x57/0xf0 [ 84.827334][ T110] ? getname_flags+0xcc/0x6b0 [ 84.827354][ T110] getname_flags+0xcc/0x6b0 [ 84.827374][ T110] vfs_fstatat+0xcb/0x1d0 [ 84.827396][ T110] __se_sys_newfstatat+0x127/0x3c0 [ 84.827419][ T110] ? __x64_sys_newfstatat+0xc0/0xc0 [ 84.827442][ T110] ? __kasan_slab_free+0x6a/0x80 [ 84.827466][ T110] ? xfd_validate_state+0x68/0x140 [ 84.827490][ T110] ? __kasan_check_write+0x18/0x20 [ 84.827507][ T110] ? fpregs_restore_userregs+0x11c/0x260 [ 84.827530][ T110] __x64_sys_newfstatat+0x9f/0xc0 [ 84.827552][ T110] x64_sys_call+0x1821/0x2ee0 [ 84.827569][ T110] do_syscall_64+0x57/0xf0 [ 84.827588][ T110] ? clear_bhb_loop+0x50/0xa0 [ 84.827611][ T110] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.827634][ T110] RIP: 0033:0x7f808f311b0a [ 84.827648][ T110] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 84.827664][ T110] RSP: 002b:00007ffda20e66c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 84.827683][ T110] RAX: ffffffffffffffda RBX: 00007ffda20e6b60 RCX: 00007f808f311b0a [ 84.827698][ T110] RDX: 00007ffda20e66d0 RSI: 00007ffda20e6b60 RDI: 00000000ffffff9c [ 84.827712][ T110] RBP: 00005647e99dc2c0 R08: 0000000000000000 R09: 0000000000000000 [ 84.827725][ T110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda20e6760 [ 84.827738][ T110] R13: 0000000000000100 R14: 00005647db334be0 R15: 00007ffda20e71e0 [ 84.827754][ T110] [ 84.829527][ T1763] CPU: 0 UID: 0 PID: 1763 Comm: syz.4.662 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 84.829555][ T1763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.829568][ T1763] Call Trace: [ 84.829574][ T1763] [ 84.829581][ T1763] __dump_stack+0x21/0x30 [ 84.829610][ T1763] dump_stack_lvl+0x140/0x1c0 [ 84.829637][ T1763] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.829665][ T1763] ? __kasan_check_write+0x18/0x20 [ 84.829686][ T1763] dump_stack+0x19/0x20 [ 84.829711][ T1763] should_fail_ex+0x3c2/0x510 [ 84.829733][ T1763] should_failslab+0xac/0x100 [ 84.829756][ T1763] kmem_cache_alloc_noprof+0x42/0x410 [ 84.829775][ T1763] ? getname_flags+0xcc/0x6b0 [ 84.829797][ T1763] getname_flags+0xcc/0x6b0 [ 84.829817][ T1763] ? __kasan_check_read+0x15/0x20 [ 84.829836][ T1763] __x64_sys_mkdirat+0x7e/0xa0 [ 84.829861][ T1763] x64_sys_call+0x2ba8/0x2ee0 [ 84.829878][ T1763] do_syscall_64+0x57/0xf0 [ 84.829899][ T1763] ? clear_bhb_loop+0x50/0xa0 [ 84.829923][ T1763] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.829945][ T1763] RIP: 0033:0x7fa7da59df99 [ 84.829961][ T1763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.829977][ T1763] RSP: 002b:00007fa7db3f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 84.829998][ T1763] RAX: ffffffffffffffda RBX: 00007fa7da825fa0 RCX: 00007fa7da59df99 [ 84.830013][ T1763] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 84.830026][ T1763] RBP: 00007fa7da634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 84.830040][ T1763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.830053][ T1763] R13: 00007fa7da826038 R14: 00007fa7da825fa0 R15: 00007ffcd56320d8 [ 84.830069][ T1763] [ 84.830177][ T1688] CPU: 0 UID: 0 PID: 1688 Comm: udevd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 84.830200][ T1688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 84.830221][ T1688] Call Trace: [ 84.830227][ T1688] [ 84.830234][ T1688] __dump_stack+0x21/0x30 [ 84.830258][ T1688] dump_stack_lvl+0x140/0x1c0 [ 84.830286][ T1688] ? __cfi_dump_stack_lvl+0x10/0x10 [ 84.830310][ T1688] ? cred_has_capability+0x296/0x3a0 [ 84.830331][ T1688] dump_stack+0x19/0x20 [ 84.830353][ T1688] should_fail_ex+0x3c2/0x510 [ 84.830374][ T1688] should_failslab+0xac/0x100 [ 84.830395][ T1688] kmem_cache_alloc_node_noprof+0x45/0x420 [ 84.830415][ T1688] ? __alloc_skb+0x10c/0x360 [ 84.830439][ T1688] ? selinux_capable+0x38/0x50 [ 84.830462][ T1688] __alloc_skb+0x10c/0x360 [ 84.830486][ T1688] netlink_alloc_large_skb+0xf7/0x1b0 [ 84.830511][ T1688] netlink_sendmsg+0x576/0xad0 [ 84.830531][ T1688] ? __cfi_netlink_sendmsg+0x10/0x10 [ 84.830550][ T1688] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 84.830570][ T1688] ? security_socket_sendmsg+0x3d/0x100 [ 84.830594][ T1688] ____sys_sendmsg+0x99e/0xa00 [ 84.830613][ T1688] ? __import_iovec+0x3fa/0x7d0 [ 84.830638][ T1688] ? __sys_sendmsg_sock+0x50/0x50 [ 84.830657][ T1688] ? import_iovec+0x80/0xb0 [ 84.830682][ T1688] ___sys_sendmsg+0x2a6/0x370 [ 84.830700][ T1688] ? __sys_sendmsg+0x2a0/0x2a0 [ 84.830722][ T1688] ? putname+0x113/0x150 [ 84.830742][ T1688] ? __kasan_check_read+0x15/0x20 [ 84.830759][ T1688] __x64_sys_sendmsg+0x206/0x2e0 [ 84.830778][ T1688] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 84.830798][ T1688] ? __kasan_check_write+0x18/0x20 [ 84.830815][ T1688] ? fpregs_restore_userregs+0x11c/0x260 [ 84.830838][ T1688] ? switch_fpu_return+0x12/0x20 [ 84.830859][ T1688] x64_sys_call+0x2a4c/0x2ee0 [ 84.830876][ T1688] do_syscall_64+0x57/0xf0 [ 84.830895][ T1688] ? clear_bhb_loop+0x50/0xa0 [ 84.830918][ T1688] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 84.830940][ T1688] RIP: 0033:0x7f808f2a7407 [ 84.830955][ T1688] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 84.830970][ T1688] RSP: 002b:00007ffda20e6d10 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 84.830989][ T1688] RAX: ffffffffffffffda RBX: 00007f808fa43880 RCX: 00007f808f2a7407 [ 84.831004][ T1688] RDX: 0000000000000000 RSI: 00007ffda20e6d70 RDI: 000000000000000c [ 84.831016][ T1688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 84.831028][ T1688] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000b2 [ 84.831040][ T1688] R13: 00005647e9c2f6e0 R14: 0000000000000000 R15: 0000000000000000 [ 84.831055][ T1688] [ 89.047824][ T312] CPU: 1 UID: 0 PID: 312 Comm: kworker/1:3 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.047859][ T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.047883][ T312] Workqueue: mld mld_ifc_work [ 89.047908][ T312] Call Trace: [ 89.047916][ T312] [ 89.047924][ T312] __dump_stack+0x21/0x30 [ 89.047951][ T312] dump_stack_lvl+0x140/0x1c0 [ 89.047973][ T312] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.047995][ T312] ? update_load_avg+0x4f3/0x1980 [ 89.048125][ T312] dump_stack+0x19/0x20 [ 89.048146][ T312] should_fail_ex+0x3c2/0x510 [ 89.048167][ T312] should_failslab+0xac/0x100 [ 89.048188][ T312] kmem_cache_alloc_node_noprof+0x45/0x420 [ 89.048207][ T312] ? __alloc_skb+0x10c/0x360 [ 89.048229][ T312] __alloc_skb+0x10c/0x360 [ 89.048251][ T312] mld_newpack+0x162/0xa10 [ 89.048269][ T312] ? __switch_to+0xc6b/0x1320 [ 89.048292][ T312] ? mld_sendpack+0xd10/0xd10 [ 89.048310][ T312] ? __cfi___switch_to+0x10/0x10 [ 89.048332][ T312] ? kthread_data+0x54/0xc0 [ 89.048349][ T312] add_grec+0xf20/0x1400 [ 89.048367][ T312] ? __kasan_check_write+0x18/0x20 [ 89.048383][ T312] ? mutex_lock+0x97/0x1d0 [ 89.048404][ T312] ? __cfi_mutex_lock+0x10/0x10 [ 89.048427][ T312] mld_ifc_work+0x71d/0xc40 [ 89.048443][ T312] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 89.048464][ T312] process_scheduled_works+0x7f7/0x1060 [ 89.048484][ T312] worker_thread+0xc99/0x13f0 [ 89.048503][ T312] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 89.048522][ T312] ? __kasan_check_read+0x15/0x20 [ 89.048539][ T312] kthread+0x2c7/0x360 [ 89.048557][ T312] ? __cfi_worker_thread+0x10/0x10 [ 89.048574][ T312] ? __cfi_kthread+0x10/0x10 [ 89.048593][ T312] ret_from_fork+0x67/0xa0 [ 89.048626][ T312] ? __cfi_kthread+0x10/0x10 [ 89.048645][ T312] ret_from_fork_asm+0x1a/0x30 [ 89.048662][ T312] [ 89.048671][ T1762] CPU: 0 UID: 0 PID: 1762 Comm: syz.4.662 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.048696][ T1762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.048707][ T1762] Call Trace: [ 89.048713][ T1762] [ 89.048720][ T1762] __dump_stack+0x21/0x30 [ 89.048746][ T1762] dump_stack_lvl+0x140/0x1c0 [ 89.048770][ T1762] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.048796][ T1762] dump_stack+0x19/0x20 [ 89.048819][ T1762] should_fail_ex+0x3c2/0x510 [ 89.048840][ T1762] should_failslab+0xac/0x100 [ 89.048861][ T1762] kmem_cache_alloc_noprof+0x42/0x410 [ 89.048880][ T1762] ? __kasan_check_write+0x18/0x20 [ 89.048899][ T1762] ? taskstats_exit+0x161/0xb50 [ 89.048926][ T1762] ? acct_update_integrals+0x2e5/0x330 [ 89.048950][ T1762] taskstats_exit+0x161/0xb50 [ 89.048975][ T1762] ? _raw_spin_unlock_irq+0x45/0x70 [ 89.048999][ T1762] do_exit+0x7f7/0x2850 [ 89.049024][ T1762] ? __cfi_try_to_wake_up+0x10/0x10 [ 89.049053][ T1762] ? __cfi_do_exit+0x10/0x10 [ 89.049075][ T1762] ? __kasan_check_write+0x18/0x20 [ 89.049092][ T1762] ? _raw_spin_lock_irq+0x93/0x120 [ 89.049112][ T1762] ? zap_other_threads+0x32f/0x370 [ 89.049134][ T1762] do_group_exit+0x21f/0x2f0 [ 89.049158][ T1762] __x64_sys_exit_group+0x43/0x50 [ 89.049180][ T1762] x64_sys_call+0x2ed2/0x2ee0 [ 89.049197][ T1762] do_syscall_64+0x57/0xf0 [ 89.049216][ T1762] ? clear_bhb_loop+0x50/0xa0 [ 89.049240][ T1762] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.049263][ T1762] RIP: 0033:0x7fa7da59df99 [ 89.049283][ T1762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.049300][ T1762] RSP: 002b:00007ffcd56320a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 89.049323][ T1762] RAX: ffffffffffffffda RBX: 00007fa7da634f9c RCX: 00007fa7da59df99 [ 89.049339][ T1762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 89.049352][ T1762] RBP: 000000000000000c R08: 0000000000000000 R09: 00007fa7da464320 [ 89.049366][ T1762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcd56321d0 [ 89.049381][ T1762] R13: 00007fa7da464320 R14: 00007ffcd56321c8 R15: 00007fa7da825fa0 [ 89.049398][ T1762] [ 89.625933][ T1795] FAULT_INJECTION: forcing a failure. [ 89.625933][ T1795] name failslab, interval 1, probability 100, space 0, times 10 [ 89.626175][ T1790] FAULT_INJECTION: forcing a failure. [ 89.626175][ T1790] name failslab, interval 1, probability 100, space 0, times 10 [ 89.639541][ T1781] FAULT_INJECTION: forcing a failure. [ 89.639541][ T1781] name failslab, interval 1, probability 100, space 0, times 10 [ 89.639558][ C1] FAULT_INJECTION: forcing a failure. [ 89.639558][ C1] name failslab, interval 1, probability 100, space 0, times 10 [ 89.639580][ T1781] CPU: 0 UID: 0 PID: 1781 Comm: syz.6.669 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.639610][ T1781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.639623][ T1781] Call Trace: [ 89.639629][ T1781] [ 89.639636][ T1781] __dump_stack+0x21/0x30 [ 89.639668][ T1781] dump_stack_lvl+0x140/0x1c0 [ 89.639693][ T1781] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.639718][ T1781] ? __cfi_interval_tree_augment_rotate+0x10/0x10 [ 89.639741][ T1781] ? __cfi_kvm_mmu_change_mmu_pages+0x10/0x10 [ 89.639765][ T1781] ? interval_tree_insert+0x2d2/0x2f0 [ 89.639786][ T1781] dump_stack+0x19/0x20 [ 89.639810][ T1781] should_fail_ex+0x3c2/0x510 [ 89.639831][ T1781] should_failslab+0xac/0x100 [ 89.639854][ T1781] __kmalloc_cache_noprof+0x41/0x470 [ 89.639873][ T1781] ? kvm_check_memslot_overlap+0x343/0x3d0 [ 89.639899][ T1781] ? __kvm_set_memory_region+0x6c7/0xb40 [ 89.639925][ T1781] __kvm_set_memory_region+0x6c7/0xb40 [ 89.639952][ T1781] __x86_set_memory_region+0x45e/0x590 [ 89.639978][ T1781] ? __cfi___x86_set_memory_region+0x10/0x10 [ 89.640005][ T1781] ? __cfi_mutex_lock+0x10/0x10 [ 89.640028][ T1781] ? kvm_msr_allowed+0x313/0x370 [ 89.640053][ T1781] kvm_alloc_apic_access_page+0xb6/0x210 [ 89.640075][ T1781] vmx_vcpu_create+0x7f1/0x1280 [ 89.640100][ T1781] ? kvm_pmu_reset+0x35f/0x3a0 [ 89.640130][ T1781] ? __cfi_vmx_vcpu_create+0x10/0x10 [ 89.640155][ T1781] ? __asan_memset+0x39/0x50 [ 89.640172][ T1781] ? kvm_pmu_refresh+0x327/0x510 [ 89.640192][ T1781] kvm_arch_vcpu_create+0x651/0xb90 [ 89.640218][ T1781] kvm_vm_ioctl_create_vcpu+0x3a7/0xab0 [ 89.640247][ T1781] kvm_vm_ioctl+0x7bd/0xc40 [ 89.640271][ T1781] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 89.640297][ T1781] ? ioctl_has_perm+0x1bc/0x500 [ 89.640316][ T1781] ? __asan_memcpy+0x5a/0x80 [ 89.640333][ T1781] ? ioctl_has_perm+0x408/0x500 [ 89.640351][ T1781] ? has_cap_mac_admin+0xd0/0xd0 [ 89.640369][ T1781] ? futex_wait+0x2b8/0x7c0 [ 89.640386][ T1781] ? __cfi_futex_wait+0x10/0x10 [ 89.640404][ T1781] ? selinux_file_ioctl+0x732/0x1480 [ 89.640422][ T1781] ? __sched_text_start+0x10/0x10 [ 89.640444][ T1781] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 89.640462][ T1781] ? do_futex+0x32a/0x510 [ 89.640484][ T1781] ? kfree+0xa0/0x440 [ 89.640499][ T1781] ? kvm_uevent_notify_change+0x4f6/0x560 [ 89.640523][ T1781] ? __cfi_do_futex+0x10/0x10 [ 89.640548][ T1781] ? bpf_lsm_file_ioctl+0xd/0x20 [ 89.640570][ T1781] ? security_file_ioctl+0x3e/0x110 [ 89.640595][ T1781] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 89.640618][ T1781] __se_sys_ioctl+0x132/0x1b0 [ 89.640640][ T1781] __x64_sys_ioctl+0x7f/0xa0 [ 89.640661][ T1781] x64_sys_call+0x1878/0x2ee0 [ 89.640677][ T1781] do_syscall_64+0x57/0xf0 [ 89.640696][ T1781] ? clear_bhb_loop+0x50/0xa0 [ 89.640719][ T1781] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.640741][ T1781] RIP: 0033:0x7f445759df99 [ 89.640757][ T1781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.640773][ T1781] RSP: 002b:00007f4458490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 89.640794][ T1781] RAX: ffffffffffffffda RBX: 00007f4457825fa0 RCX: 00007f445759df99 [ 89.640809][ T1781] RDX: 0000000000000041 RSI: 000000000000ae41 RDI: 0000000000000004 [ 89.640821][ T1781] RBP: 00007f4457634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 89.640833][ T1781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.640845][ T1781] R13: 00007f4457826038 R14: 00007f4457825fa0 R15: 00007ffe190a1b68 [ 89.640860][ T1781] [ 89.640870][ C1] CPU: 1 UID: 0 PID: 1790 Comm: udevd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.640895][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.640908][ C1] Call Trace: [ 89.640915][ C1] [ 89.640922][ C1] __dump_stack+0x21/0x30 [ 89.640948][ C1] dump_stack_lvl+0x140/0x1c0 [ 89.640972][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.640994][ C1] ? skb_network_protocol+0x533/0x7a0 [ 89.641018][ C1] ? __cfi_skb_network_protocol+0x10/0x10 [ 89.641041][ C1] dump_stack+0x19/0x20 [ 89.641067][ C1] should_fail_ex+0x3c2/0x510 [ 89.641089][ C1] should_failslab+0xac/0x100 [ 89.641113][ C1] kmem_cache_alloc_noprof+0x42/0x410 [ 89.641134][ C1] ? skb_clone+0x21d/0x470 [ 89.641154][ C1] skb_clone+0x21d/0x470 [ 89.641173][ C1] dev_queue_xmit_nit+0x251/0xac0 [ 89.641198][ C1] dev_hard_start_xmit+0x19e/0x730 [ 89.641227][ C1] sch_direct_xmit+0x27d/0x9c0 [ 89.641249][ C1] ? __kasan_check_write+0x18/0x20 [ 89.641269][ C1] ? _raw_spin_trylock+0xb5/0x140 [ 89.641292][ C1] ? __cfi_sch_direct_xmit+0x10/0x10 [ 89.641312][ C1] ? netdev_core_pick_tx+0x1ff/0x370 [ 89.641340][ C1] ? __dev_queue_xmit+0x26c/0x3780 [ 89.641367][ C1] __dev_queue_xmit+0x1611/0x3780 [ 89.641394][ C1] ? __dev_queue_xmit+0x26c/0x3780 [ 89.641422][ C1] ? update_curr+0xf1/0x9c0 [ 89.641444][ C1] ? get_stack_info+0x3e/0x100 [ 89.641464][ C1] ? __cfi___dev_queue_xmit+0x10/0x10 [ 89.641491][ C1] ? get_stack_info_noinstr+0x1d/0x130 [ 89.641518][ C1] ? get_stack_info+0x3e/0x100 [ 89.641538][ C1] ? __kasan_check_read+0x15/0x20 [ 89.641558][ C1] ? selinux_ip_postroute+0x291/0xfe0 [ 89.641579][ C1] ? is_bpf_text_address+0x17b/0x1a0 [ 89.641608][ C1] ? __cfi_selinux_ip_postroute+0x10/0x10 [ 89.641639][ C1] ? kernel_text_address+0xa9/0xe0 [ 89.641667][ C1] ? __kernel_text_address+0x11/0x40 [ 89.641694][ C1] ? __asan_memcpy+0x5a/0x80 [ 89.641715][ C1] ip_finish_output2+0xb82/0xfb0 [ 89.641738][ C1] ? __cfi_ip_finish_output2+0x10/0x10 [ 89.641759][ C1] ? ip_skb_dst_mtu+0x4b2/0x670 [ 89.641780][ C1] __ip_finish_output+0x17b/0x3e0 [ 89.641801][ C1] ip_finish_output+0x35/0x360 [ 89.641830][ C1] ? ip_output+0x306/0x330 [ 89.641859][ C1] ip_output+0x1a1/0x330 [ 89.641887][ C1] ? __cfi_ip_output+0x10/0x10 [ 89.641916][ C1] ? get_stack_info_noinstr+0x1d/0x130 [ 89.641943][ C1] ? __cfi_ip_finish_output+0x10/0x10 [ 89.641972][ C1] ? ipv4_dst_check+0xfc/0x170 [ 89.641993][ C1] ? __cfi_ip_output+0x10/0x10 [ 89.642021][ C1] __ip_queue_xmit+0x134d/0x1f70 [ 89.642050][ C1] ? __kasan_check_read+0x15/0x20 [ 89.642072][ C1] ip_queue_xmit+0x51/0x70 [ 89.642088][ C1] ? __cfi_ip_queue_xmit+0x10/0x10 [ 89.642104][ C1] __tcp_transmit_skb+0x23aa/0x38f0 [ 89.642127][ C1] ? __tcp_send_ack+0x6b0/0x6b0 [ 89.642131][ T1781] FAULT_INJECTION: forcing a failure. [ 89.642131][ T1781] name failslab, interval 1, probability 100, space 0, times 9 [ 89.642149][ C1] ? kasan_save_track+0x3e/0x80 [ 89.642170][ C1] ? kasan_save_free_info+0x44/0x50 [ 89.642193][ C1] ? __kasan_slab_free+0x5f/0x80 [ 89.642214][ C1] ? __kasan_check_read+0x15/0x20 [ 89.642230][ C1] ? tcp_small_queue_check+0x213/0x430 [ 89.642248][ C1] tcp_write_xmit+0x1a41/0x6d20 [ 89.642265][ C1] ? asm_common_interrupt+0x2b/0x40 [ 89.642287][ C1] ? __x64_sys_openat+0x13a/0x170 [ 89.642314][ C1] __tcp_push_pending_frames+0x9d/0x300 [ 89.642331][ C1] tcp_rcv_established+0xf0f/0x1d30 [ 89.642356][ C1] ? __cfi_tcp_rcv_established+0x10/0x10 [ 89.642378][ C1] ? ipv4_dst_check+0xfc/0x170 [ 89.642395][ C1] tcp_v4_do_rcv+0x49a/0xbb0 [ 89.642416][ C1] tcp_v4_rcv+0x285b/0x3390 [ 89.642438][ C1] ? __reset_page_owner+0x450/0x450 [ 89.642462][ C1] ? __cfi_tcp_v4_rcv+0x10/0x10 [ 89.642483][ C1] ? __inet_lookup_established+0x730/0x760 [ 89.642502][ C1] ? get_stack_info+0x3e/0x100 [ 89.642519][ C1] ? __cfi_tcp_v4_rcv+0x10/0x10 [ 89.642539][ C1] ip_protocol_deliver_rcu+0x1c6/0x390 [ 89.642562][ C1] ip_local_deliver_finish+0x272/0x470 [ 89.642584][ C1] ip_local_deliver+0x1e0/0x360 [ 89.642605][ C1] ? __cfi_ip_local_deliver+0x10/0x10 [ 89.642635][ C1] ? ip_rcv_finish_core+0xae1/0x1460 [ 89.642658][ C1] ? __cfi_ip_local_deliver+0x10/0x10 [ 89.642679][ C1] ip_sublist_rcv+0x83a/0x9b0 [ 89.642701][ C1] ? ip_list_rcv+0x450/0x450 [ 89.642722][ C1] ? __asan_memset+0x39/0x50 [ 89.642738][ C1] ? ip_rcv_core+0x833/0xd00 [ 89.642759][ C1] ip_list_rcv+0x3e8/0x450 [ 89.642780][ C1] ? should_failslab+0xac/0x100 [ 89.642801][ C1] ? __cfi_ip_list_rcv+0x10/0x10 [ 89.642821][ C1] ? dev_gro_receive+0x1296/0x22a0 [ 89.642846][ C1] ? __cfi_ip_list_rcv+0x10/0x10 [ 89.642867][ C1] __netif_receive_skb_list_core+0x830/0x880 [ 89.642893][ C1] ? set_rps_cpu+0x670/0x670 [ 89.642914][ C1] ? virtnet_receive_done+0x1146/0x1a30 [ 89.642959][ C1] netif_receive_skb_list_internal+0x847/0xb00 [ 89.642985][ C1] ? __cfi_netif_receive_skb_list_internal+0x10/0x10 [ 89.643010][ C1] ? receive_buf+0xb12/0x1080 [ 89.643028][ C1] napi_complete_done+0x323/0x790 [ 89.643052][ C1] ? __cfi_napi_complete_done+0x10/0x10 [ 89.643075][ C1] ? virtqueue_get_buf_ctx+0x47b/0xcf0 [ 89.643095][ C1] ? virtqueue_enable_cb_prepare+0x213/0x500 [ 89.643116][ C1] virtnet_poll+0x27df/0x3190 [ 89.643135][ C1] ? hrtimer_active+0x1ee/0x210 [ 89.643158][ C1] ? __cfi_virtnet_poll+0x10/0x10 [ 89.643176][ C1] ? __cfi_sched_balance_trigger+0x10/0x10 [ 89.643199][ C1] ? perf_adjust_freq_unthr_context+0x3d1/0x420 [ 89.643220][ C1] ? psi_account_irqtime+0x307/0x9a0 [ 89.643244][ C1] ? timerqueue_add+0x212/0x240 [ 89.643261][ C1] __napi_poll+0xd0/0x600 [ 89.643283][ C1] net_rx_action+0x5dc/0xd70 [ 89.643308][ C1] ? __cfi_net_rx_action+0x10/0x10 [ 89.643330][ C1] ? sched_clock_cpu+0x75/0x400 [ 89.643353][ C1] ? sched_clock+0x44/0x60 [ 89.643375][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 89.643398][ C1] handle_softirqs+0x1aa/0x620 [ 89.643417][ C1] __irq_exit_rcu+0x47/0xb0 [ 89.643433][ C1] irq_exit_rcu+0xd/0x30 [ 89.643448][ C1] common_interrupt+0x97/0xb0 [ 89.643469][ C1] [ 89.643475][ C1] [ 89.643482][ C1] asm_common_interrupt+0x2b/0x40 [ 89.643502][ C1] RIP: 0010:vprintk_emit+0x547/0x650 [ 89.643525][ C1] Code: 81 e6 00 02 00 00 31 ff e8 c6 c5 1e 00 48 81 e3 00 02 00 00 75 07 e8 d8 c0 1e 00 eb 06 e8 d1 c0 1e 00 fb c6 05 49 ea 54 07 00 31 fd ff ff e8 bf c0 1e 00 e9 94 fe ff ff 41 ff ce bf 58 89 41 [ 89.643540][ C1] RSP: 0018:ffffc90000f3f660 EFLAGS: 00000293 [ 89.643557][ C1] RAX: ffffffff8168b0ef RBX: 0000000000000200 RCX: ffff888132a91300 [ 89.643570][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 89.643582][ C1] RBP: ffffc90000f3f728 R08: 0000000000000003 R09: 0000000000000004 [ 89.643593][ C1] R10: dffffc0000000000 R11: fffff520001e7ebc R12: 1ffff920001e7ed0 [ 89.643607][ C1] R13: 0000000000000061 R14: 0000000000000000 R15: dffffc0000000000 [ 89.643627][ C1] ? vprintk_emit+0x53f/0x650 [ 89.643649][ C1] ? __cfi_vprintk_emit+0x10/0x10 [ 89.643676][ C1] vprintk_default+0x2a/0x40 [ 89.643697][ C1] vprintk+0x93/0xa0 [ 89.643712][ C1] _printk+0xde/0x140 [ 89.643732][ C1] ? __cfi__printk+0x10/0x10 [ 89.643754][ C1] should_fail_ex+0x3a4/0x510 [ 89.643773][ C1] should_failslab+0xac/0x100 [ 89.643793][ C1] kmem_cache_alloc_noprof+0x42/0x410 [ 89.643810][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 89.643830][ C1] ? alloc_empty_file+0xbf/0x270 [ 89.643852][ C1] ? arch_stack_walk+0x10a/0x170 [ 89.643869][ C1] alloc_empty_file+0xbf/0x270 [ 89.643890][ C1] path_openat+0xf4/0x35a0 [ 89.643912][ C1] ? stack_depot_save_flags+0x38/0x800 [ 89.643933][ C1] ? kasan_save_track+0x4f/0x80 [ 89.643951][ C1] ? kasan_save_track+0x3e/0x80 [ 89.643969][ C1] ? kasan_save_alloc_info+0x3a/0x50 [ 89.643993][ C1] ? __kasan_slab_alloc+0x73/0x90 [ 89.644012][ C1] ? getname+0x1b/0x30 [ 89.644029][ C1] ? do_sys_openat2+0xda/0x1d0 [ 89.644051][ C1] ? __x64_sys_openat+0x13a/0x170 [ 89.644073][ C1] ? x64_sys_call+0xe69/0x2ee0 [ 89.644089][ C1] ? do_syscall_64+0x57/0xf0 [ 89.644108][ C1] ? do_filp_open+0x440/0x440 [ 89.644131][ C1] do_filp_open+0x1f2/0x440 [ 89.644152][ C1] ? __cfi_do_filp_open+0x10/0x10 [ 89.644176][ C1] ? alloc_fd+0x4c1/0x570 [ 89.644196][ C1] do_sys_openat2+0x134/0x1d0 [ 89.644219][ C1] ? do_sys_open+0x100/0x100 [ 89.644242][ C1] __x64_sys_openat+0x13a/0x170 [ 89.644265][ C1] x64_sys_call+0xe69/0x2ee0 [ 89.644281][ C1] do_syscall_64+0x57/0xf0 [ 89.644298][ C1] ? clear_bhb_loop+0x50/0xa0 [ 89.644320][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.644341][ C1] RIP: 0033:0x7f808f2a7407 [ 89.644354][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 89.644368][ C1] RSP: 002b:00007ffda20e6400 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 89.644385][ C1] RAX: ffffffffffffffda RBX: 00007f808fa43880 RCX: 00007f808f2a7407 [ 89.644398][ C1] RDX: 0000000000080241 RSI: 00007ffda20e6960 RDI: ffffffffffffff9c [ 89.644410][ C1] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 89.644421][ C1] R10: 00000000000001b6 R11: 0000000000000202 R12: 00005647db330dfc [ 89.644433][ C1] R13: 00005647db330dfc R14: 0000000000000001 R15: 00005647db34b140 [ 89.644447][ C1] [ 89.644456][ T1781] CPU: 0 UID: 0 PID: 1781 Comm: syz.6.669 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.644483][ T1781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.644493][ T1781] Call Trace: [ 89.644500][ T1781] [ 89.644508][ T1781] __dump_stack+0x21/0x30 [ 89.644536][ T1781] dump_stack_lvl+0x140/0x1c0 [ 89.644561][ T1781] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.644586][ T1781] ? futex_wait+0x2b8/0x7c0 [ 89.644606][ T1781] ? __cfi_futex_wait+0x10/0x10 [ 89.644623][ T1781] dump_stack+0x19/0x20 [ 89.644645][ T1781] should_fail_ex+0x3c2/0x510 [ 89.644666][ T1781] should_failslab+0xac/0x100 [ 89.644688][ T1781] kmem_cache_alloc_noprof+0x42/0x410 [ 89.644708][ T1781] ? do_futex+0x32a/0x510 [ 89.644731][ T1781] ? getname_flags+0xcc/0x6b0 [ 89.644752][ T1781] getname_flags+0xcc/0x6b0 [ 89.644773][ T1781] getname+0x1b/0x30 [ 89.644791][ T1781] do_sys_openat2+0xda/0x1d0 [ 89.644817][ T1781] ? do_sys_open+0x100/0x100 [ 89.644843][ T1781] __x64_sys_openat+0x13a/0x170 [ 89.644868][ T1781] x64_sys_call+0xe69/0x2ee0 [ 89.644886][ T1781] do_syscall_64+0x57/0xf0 [ 89.644906][ T1781] ? clear_bhb_loop+0x50/0xa0 [ 89.644930][ T1781] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.644953][ T1781] RIP: 0033:0x7f445759df99 [ 89.644969][ T1781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.644985][ T1781] RSP: 002b:00007f4458490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.645006][ T1781] RAX: ffffffffffffffda RBX: 00007f4457825fa0 RCX: 00007f445759df99 [ 89.645021][ T1781] RDX: 0000000000000800 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 89.645035][ T1781] RBP: 00007f4457634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 89.645049][ T1781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.645062][ T1781] R13: 00007f4457826038 R14: 00007f4457825fa0 R15: 00007ffe190a1b68 [ 89.645078][ T1781] [ 89.646145][ T1780] FAULT_INJECTION: forcing a failure. [ 89.646145][ T1780] name failslab, interval 1, probability 100, space 0, times 7 [ 89.658062][ T1791] FAULT_INJECTION: forcing a failure. [ 89.658062][ T1791] name failslab, interval 1, probability 100, space 0, times 4 [ 89.671477][ T9] FAULT_INJECTION: forcing a failure. [ 89.671477][ T9] name failslab, interval 1, probability 100, space 0, times 4 [ 89.684550][ T45] FAULT_INJECTION: forcing a failure. [ 89.684550][ T45] name failslab, interval 1, probability 100, space 0, times 4 [ 89.696063][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.696093][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.696106][ T9] Workqueue: mld mld_dad_work [ 89.696138][ T9] Call Trace: [ 89.696147][ T9] [ 89.696154][ T9] __dump_stack+0x21/0x30 [ 89.696181][ T9] dump_stack_lvl+0x140/0x1c0 [ 89.696206][ T9] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.696230][ T9] ? enqueue_task+0x1049/0x1100 [ 89.696250][ T9] dump_stack+0x19/0x20 [ 89.696273][ T9] should_fail_ex+0x3c2/0x510 [ 89.696295][ T9] should_failslab+0xac/0x100 [ 89.696317][ T9] kmem_cache_alloc_node_noprof+0x45/0x420 [ 89.696338][ T9] ? __alloc_skb+0x10c/0x360 [ 89.696361][ T9] ? dequeue_task_fair+0x248/0x640 [ 89.696388][ T9] __alloc_skb+0x10c/0x360 [ 89.696411][ T9] mld_newpack+0x162/0xa10 [ 89.696431][ T9] ? mld_sendpack+0xd10/0xd10 [ 89.696452][ T9] ? __cfi___switch_to+0x10/0x10 [ 89.696479][ T9] add_grec+0xf20/0x1400 [ 89.696500][ T9] ? mutex_lock+0x97/0x1d0 [ 89.696525][ T9] mld_send_initial_cr+0x157/0x320 [ 89.696545][ T9] mld_dad_work+0x3e/0x4e0 [ 89.696564][ T9] process_scheduled_works+0x7f7/0x1060 [ 89.696586][ T9] worker_thread+0xc99/0x13f0 [ 89.696608][ T9] kthread+0x2c7/0x360 [ 89.696627][ T9] ? __cfi_worker_thread+0x10/0x10 [ 89.696646][ T9] ? __cfi_kthread+0x10/0x10 [ 89.696666][ T9] ret_from_fork+0x67/0xa0 [ 89.696691][ T9] ? __cfi_kthread+0x10/0x10 [ 89.696710][ T9] ret_from_fork_asm+0x1a/0x30 [ 89.696729][ T9] [ 89.696740][ T9] FAULT_INJECTION: forcing a failure. [ 89.696740][ T9] name failslab, interval 1, probability 100, space 0, times 3 [ 89.706389][ T110] FAULT_INJECTION: forcing a failure. [ 89.706389][ T110] name failslab, interval 1, probability 100, space 0, times 3 [ 89.709601][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.709627][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.709639][ T9] Workqueue: mld mld_dad_work [ 89.709660][ T9] Call Trace: [ 89.709667][ T9] [ 89.709675][ T9] __dump_stack+0x21/0x30 [ 89.709699][ T9] dump_stack_lvl+0x140/0x1c0 [ 89.709722][ T9] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.709746][ T9] ? enqueue_task+0x1049/0x1100 [ 89.709765][ T9] dump_stack+0x19/0x20 [ 89.709787][ T9] should_fail_ex+0x3c2/0x510 [ 89.709808][ T9] should_failslab+0xac/0x100 [ 89.709831][ T9] kmem_cache_alloc_node_noprof+0x45/0x420 [ 89.709850][ T9] ? __alloc_skb+0x10c/0x360 [ 89.709874][ T9] ? dequeue_task_fair+0x248/0x640 [ 89.709900][ T9] __alloc_skb+0x10c/0x360 [ 89.709923][ T9] mld_newpack+0x162/0xa10 [ 89.709943][ T9] ? mld_sendpack+0xd10/0xd10 [ 89.709962][ T9] ? __cfi___switch_to+0x10/0x10 [ 89.709988][ T9] add_grec+0xf20/0x1400 [ 89.710009][ T9] ? mutex_lock+0x97/0x1d0 [ 89.710032][ T9] mld_send_initial_cr+0x157/0x320 [ 89.710052][ T9] mld_dad_work+0x3e/0x4e0 [ 89.710072][ T9] process_scheduled_works+0x7f7/0x1060 [ 89.710094][ T9] worker_thread+0xc99/0x13f0 [ 89.710128][ T9] kthread+0x2c7/0x360 [ 89.710149][ T9] ? __cfi_worker_thread+0x10/0x10 [ 89.710167][ T9] ? __cfi_kthread+0x10/0x10 [ 89.710187][ T9] ret_from_fork+0x67/0xa0 [ 89.710213][ T9] ? __cfi_kthread+0x10/0x10 [ 89.710233][ T9] ret_from_fork_asm+0x1a/0x30 [ 89.710252][ T9] [ 89.710323][ T1785] FAULT_INJECTION: forcing a failure. [ 89.710323][ T1785] name failslab, interval 1, probability 100, space 0, times 2 [ 89.720040][ T1793] FAULT_INJECTION: forcing a failure. [ 89.720040][ T1793] name failslab, interval 1, probability 100, space 0, times 2 [ 89.722652][ T1785] CPU: 0 UID: 0 PID: 1785 Comm: udevd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.722678][ T1785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.722690][ T1785] Call Trace: [ 89.722697][ T1785] [ 89.722704][ T1785] __dump_stack+0x21/0x30 [ 89.722731][ T1785] dump_stack_lvl+0x140/0x1c0 [ 89.722754][ T1785] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.722779][ T1785] ? __cfi___switch_to+0x10/0x10 [ 89.722804][ T1785] dump_stack+0x19/0x20 [ 89.722827][ T1785] should_fail_ex+0x3c2/0x510 [ 89.722848][ T1785] should_failslab+0xac/0x100 [ 89.722869][ T1785] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 89.722889][ T1785] ? __d_alloc+0x42/0x8c0 [ 89.722907][ T1785] __d_alloc+0x42/0x8c0 [ 89.722924][ T1785] d_alloc_parallel+0xe4/0x1370 [ 89.722959][ T1785] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 89.722988][ T1785] ? __cfi_d_alloc_parallel+0x10/0x10 [ 89.723006][ T1785] ? preempt_schedule_common+0x2d/0x60 [ 89.723028][ T1785] ? preempt_schedule+0xc5/0xe0 [ 89.723049][ T1785] ? __cfi_preempt_schedule+0x10/0x10 [ 89.723071][ T1785] ? rwsem_read_trylock+0x275/0x5a0 [ 89.723098][ T1785] ? downgrade_write+0x470/0x470 [ 89.723132][ T1785] __lookup_slow+0x150/0x420 [ 89.723154][ T1785] ? lookup_one_len+0x300/0x300 [ 89.723176][ T1785] ? down_read+0xd9/0xe0 [ 89.723201][ T1785] lookup_slow+0x57/0x80 [ 89.723222][ T1785] walk_component+0x308/0x450 [ 89.723242][ T1785] path_lookupat+0x155/0x440 [ 89.723264][ T1785] filename_lookup+0x22d/0x5a0 [ 89.723285][ T1785] ? __cfi_filename_lookup+0x10/0x10 [ 89.723309][ T1785] ? __cfi___check_object_size+0x10/0x10 [ 89.723329][ T1785] ? kasan_save_alloc_info+0x3a/0x50 [ 89.723356][ T1785] vfs_statx+0x106/0x210 [ 89.723377][ T1785] ? vfs_fstatat+0x1d0/0x1d0 [ 89.723398][ T1785] ? getname_flags+0x203/0x6b0 [ 89.723418][ T1785] vfs_fstatat+0xe5/0x1d0 [ 89.723438][ T1785] __se_sys_newfstatat+0x127/0x3c0 [ 89.723462][ T1785] ? __x64_sys_newfstatat+0xc0/0xc0 [ 89.723485][ T1785] ? __cfi_handle_mm_fault+0x10/0x10 [ 89.723506][ T1785] ? lock_vma_under_rcu+0x4cf/0x590 [ 89.723530][ T1785] ? __kasan_check_write+0x18/0x20 [ 89.723548][ T1785] ? do_user_addr_fault+0xbf5/0x1230 [ 89.723575][ T1785] ? __kasan_check_read+0x15/0x20 [ 89.723592][ T1785] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 89.723615][ T1785] __x64_sys_newfstatat+0x9f/0xc0 [ 89.723637][ T1785] x64_sys_call+0x1821/0x2ee0 [ 89.723655][ T1785] do_syscall_64+0x57/0xf0 [ 89.723678][ T1785] ? clear_bhb_loop+0x50/0xa0 [ 89.723702][ T1785] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.723725][ T1785] RIP: 0033:0x7f808f311b0a [ 89.723742][ T1785] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 89.723758][ T1785] RSP: 002b:00007ffda20e5f88 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 89.723778][ T1785] RAX: ffffffffffffffda RBX: 00007ffda20e6960 RCX: 00007f808f311b0a [ 89.723793][ T1785] RDX: 00007ffda20e5fb0 RSI: 00007ffda20e6960 RDI: 00000000ffffff9c [ 89.723807][ T1785] RBP: 00007ffda20e6970 R08: 0000000000000075 R09: 0000000000000000 [ 89.723820][ T1785] R10: 0000000000000100 R11: 0000000000000206 R12: 00005647e9c2b4e5 [ 89.723833][ T1785] R13: 00007ffda20e6040 R14: 00005647db3306d7 R15: 00005647e9c2b4e0 [ 89.723848][ T1785] [ 89.723915][ T1785] FAULT_INJECTION: forcing a failure. [ 89.723915][ T1785] name failslab, interval 1, probability 100, space 0, times 1 [ 89.728005][ T1780] CPU: 1 UID: 0 PID: 1780 Comm: syz.6.669 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.728035][ T1780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.728165][ T1780] Call Trace: [ 89.728178][ T1780] [ 89.728187][ T1780] __dump_stack+0x21/0x30 [ 89.728216][ T1780] dump_stack_lvl+0x140/0x1c0 [ 89.728240][ T1780] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.728264][ T1780] ? mutex_unlock+0x90/0x240 [ 89.728289][ T1780] ? __cfi_mutex_unlock+0x10/0x10 [ 89.728313][ T1780] ? flush_workqueue_prep_pwqs+0x417/0x4b0 [ 89.728339][ T1780] dump_stack+0x19/0x20 [ 89.728362][ T1780] should_fail_ex+0x3c2/0x510 [ 89.728384][ T1780] should_failslab+0xac/0x100 [ 89.728406][ T1780] __kmalloc_cache_noprof+0x41/0x470 [ 89.728426][ T1780] ? kvm_uevent_notify_change+0xd9/0x560 [ 89.728451][ T1780] ? __cfi_kvm_vm_release+0x10/0x10 [ 89.728476][ T1780] kvm_uevent_notify_change+0xd9/0x560 [ 89.728499][ T1780] ? blocking_notifier_chain_unregister+0x6f/0xc0 [ 89.728519][ T1780] ? __cfi_kvm_vm_release+0x10/0x10 [ 89.728543][ T1780] kvm_put_kvm+0x9f/0x12d0 [ 89.728582][ T1780] ? kvm_irqfd_release+0x1b5/0x1d0 [ 89.728602][ T1780] ? __cfi_kvm_vm_release+0x10/0x10 [ 89.728625][ T1780] kvm_vm_release+0x47/0x70 [ 89.728648][ T1780] __fput+0x208/0xa30 [ 89.728673][ T1780] ____fput+0x20/0x30 [ 89.728695][ T1780] task_work_run+0x1e8/0x260 [ 89.728717][ T1780] ? __cfi_task_work_run+0x10/0x10 [ 89.728740][ T1780] ? __kasan_check_write+0x18/0x20 [ 89.728830][ T1780] resume_user_mode_work+0x35/0x50 [ 89.728849][ T1780] syscall_exit_to_user_mode+0x63/0xb0 [ 89.728876][ T1780] do_syscall_64+0x63/0xf0 [ 89.728896][ T1780] ? clear_bhb_loop+0x50/0xa0 [ 89.728920][ T1780] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.728943][ T1780] RIP: 0033:0x7f445759df99 [ 89.728961][ T1780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.728977][ T1780] RSP: 002b:00007ffe190a1cc8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 89.728998][ T1780] RAX: 0000000000000000 RBX: 00007ffe190a1db0 RCX: 00007f445759df99 [ 89.729013][ T1780] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 89.729025][ T1780] RBP: 0000000000015dac R08: 0000000000000001 R09: 0000000000000000 [ 89.729038][ T1780] R10: 0000001b33f20000 R11: 0000000000000246 R12: 00007ffe190a1df0 [ 89.729052][ T1780] R13: 00007f4457825fac R14: 0000000000015e48 R15: 00007f4457825fa0 [ 89.729068][ T1780] [ 89.730660][ T1795] CPU: 1 UID: 0 PID: 1795 Comm: syz.3.673 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.730694][ T1795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.730707][ T1795] Call Trace: [ 89.730714][ T1795] [ 89.730722][ T1795] __dump_stack+0x21/0x30 [ 89.730755][ T1795] dump_stack_lvl+0x140/0x1c0 [ 89.730783][ T1795] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.730811][ T1795] ? futex_wait+0x2b8/0x7c0 [ 89.730829][ T1795] ? __cfi_futex_wait+0x10/0x10 [ 89.730848][ T1795] dump_stack+0x19/0x20 [ 89.730872][ T1795] should_fail_ex+0x3c2/0x510 [ 89.730894][ T1795] should_failslab+0xac/0x100 [ 89.730917][ T1795] kmem_cache_alloc_noprof+0x42/0x410 [ 89.730938][ T1795] ? do_futex+0x32a/0x510 [ 89.730961][ T1795] ? getname_flags+0xcc/0x6b0 [ 89.730983][ T1795] getname_flags+0xcc/0x6b0 [ 89.731004][ T1795] getname+0x1b/0x30 [ 89.731024][ T1795] do_sys_openat2+0xda/0x1d0 [ 89.731049][ T1795] ? fput+0x1a4/0x230 [ 89.731072][ T1795] ? do_sys_open+0x100/0x100 [ 89.731100][ T1795] __x64_sys_openat+0x13a/0x170 [ 89.731127][ T1795] x64_sys_call+0xe69/0x2ee0 [ 89.731144][ T1795] do_syscall_64+0x57/0xf0 [ 89.731166][ T1795] ? clear_bhb_loop+0x50/0xa0 [ 89.731190][ T1795] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.731213][ T1795] RIP: 0033:0x7ff5ecb9df99 [ 89.731231][ T1795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.731248][ T1795] RSP: 002b:00007ff5eb5e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.731270][ T1795] RAX: ffffffffffffffda RBX: 00007ff5ece25fa0 RCX: 00007ff5ecb9df99 [ 89.731285][ T1795] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 89.731299][ T1795] RBP: 00007ff5ecc34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 89.731313][ T1795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.731326][ T1795] R13: 00007ff5ece26038 R14: 00007ff5ece25fa0 R15: 00007ffee1c12908 [ 89.731343][ T1795] [ 89.732255][ T110] CPU: 1 UID: 0 PID: 110 Comm: udevd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.732285][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.732297][ T110] Call Trace: [ 89.732304][ T110] [ 89.732320][ T110] __dump_stack+0x21/0x30 [ 89.732347][ T110] dump_stack_lvl+0x140/0x1c0 [ 89.732370][ T110] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.732394][ T110] ? bpf_lsm_file_permission+0xd/0x20 [ 89.732419][ T110] dump_stack+0x19/0x20 [ 89.732442][ T110] should_fail_ex+0x3c2/0x510 [ 89.732463][ T110] should_failslab+0xac/0x100 [ 89.732486][ T110] kmem_cache_alloc_noprof+0x42/0x410 [ 89.732506][ T110] ? getname_flags+0xcc/0x6b0 [ 89.732525][ T110] ? __cfi_ep_autoremove_wake_function+0x10/0x10 [ 89.732551][ T110] getname_flags+0xcc/0x6b0 [ 89.732571][ T110] do_readlinkat+0xcd/0x520 [ 89.732594][ T110] ? cp_old_stat+0x4d0/0x4d0 [ 89.732625][ T110] ? __kasan_check_read+0x15/0x20 [ 89.732645][ T110] __x64_sys_readlink+0x83/0xa0 [ 89.732667][ T110] x64_sys_call+0x155b/0x2ee0 [ 89.732685][ T110] do_syscall_64+0x57/0xf0 [ 89.732705][ T110] ? clear_bhb_loop+0x50/0xa0 [ 89.732728][ T110] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.732750][ T110] RIP: 0033:0x7f808f3153a7 [ 89.732765][ T110] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 89.732781][ T110] RSP: 002b:00007ffda20e69b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000059 [ 89.732802][ T110] RAX: ffffffffffffffda RBX: 00007ffda20e6bc0 RCX: 00007f808f3153a7 [ 89.732816][ T110] RDX: 0000000000000200 RSI: 00007ffda20e69c0 RDI: 00007ffda20e6bc0 [ 89.732831][ T110] RBP: 00005647e99dc2c0 R08: 0000000000000064 R09: 0000000000000000 [ 89.732844][ T110] R10: 0000000000000000 R11: 0000000000000206 R12: 00007ffda20e69c0 [ 89.732857][ T110] R13: 00005647db34b100 R14: 0000000000000001 R15: 00007ffda20e71e0 [ 89.732880][ T110] [ 89.738745][ T1793] CPU: 1 UID: 0 PID: 1793 Comm: syz.4.672 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.738779][ T1793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.738792][ T1793] Call Trace: [ 89.738799][ T1793] [ 89.738807][ T1793] __dump_stack+0x21/0x30 [ 89.738837][ T1793] dump_stack_lvl+0x140/0x1c0 [ 89.738864][ T1793] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.738891][ T1793] ? do_futex+0x32a/0x510 [ 89.738916][ T1793] dump_stack+0x19/0x20 [ 89.738941][ T1793] should_fail_ex+0x3c2/0x510 [ 89.738964][ T1793] should_failslab+0xac/0x100 [ 89.738988][ T1793] kmem_cache_alloc_noprof+0x42/0x410 [ 89.739008][ T1793] ? getname_flags+0xcc/0x6b0 [ 89.739046][ T1793] getname_flags+0xcc/0x6b0 [ 89.739067][ T1793] ? __kasan_check_write+0x18/0x20 [ 89.739087][ T1793] __x64_sys_mkdirat+0x7e/0xa0 [ 89.739114][ T1793] x64_sys_call+0x2ba8/0x2ee0 [ 89.739133][ T1793] do_syscall_64+0x57/0xf0 [ 89.739155][ T1793] ? clear_bhb_loop+0x50/0xa0 [ 89.739182][ T1793] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.739205][ T1793] RIP: 0033:0x7fa7da59df99 [ 89.739221][ T1793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.739238][ T1793] RSP: 002b:00007fa7db3f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 89.739261][ T1793] RAX: ffffffffffffffda RBX: 00007fa7da825fa0 RCX: 00007fa7da59df99 [ 89.739277][ T1793] RDX: 00000000000001ff RSI: 0000200000000100 RDI: ffffffffffffff9c [ 89.739292][ T1793] RBP: 00007fa7da634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 89.739306][ T1793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.739320][ T1793] R13: 00007fa7da826038 R14: 00007fa7da825fa0 R15: 00007ffcd56320d8 [ 89.739337][ T1793] [ 89.741553][ T45] CPU: 1 UID: 0 PID: 45 Comm: kworker/1:1 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.741580][ T45] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.741593][ T45] Workqueue: mld mld_dad_work [ 89.741625][ T45] Call Trace: [ 89.741632][ T45] [ 89.741639][ T45] __dump_stack+0x21/0x30 [ 89.741664][ T45] dump_stack_lvl+0x140/0x1c0 [ 89.741688][ T45] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.741713][ T45] ? usb_suspend_both+0x1037/0x11f0 [ 89.741740][ T45] dump_stack+0x19/0x20 [ 89.741762][ T45] should_fail_ex+0x3c2/0x510 [ 89.741784][ T45] should_failslab+0xac/0x100 [ 89.741806][ T45] kmem_cache_alloc_node_noprof+0x45/0x420 [ 89.741826][ T45] ? __kasan_check_write+0x18/0x20 [ 89.741844][ T45] ? __alloc_skb+0x10c/0x360 [ 89.741867][ T45] ? __virt_addr_valid+0x2a1/0x370 [ 89.741890][ T45] __alloc_skb+0x10c/0x360 [ 89.741914][ T45] mld_newpack+0x162/0xa10 [ 89.741934][ T45] ? mld_sendpack+0xd10/0xd10 [ 89.741954][ T45] ? _raw_spin_lock_irq+0x93/0x120 [ 89.741975][ T45] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 89.741995][ T45] ? _raw_spin_lock_irq+0x93/0x120 [ 89.742015][ T45] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 89.742035][ T45] add_grec+0xf20/0x1400 [ 89.742055][ T45] ? srcu_reschedule+0xc2/0x2a0 [ 89.742074][ T45] ? mutex_lock+0x97/0x1d0 [ 89.742098][ T45] ? pwq_dec_nr_in_flight+0x943/0xba0 [ 89.742117][ T45] mld_send_initial_cr+0x157/0x320 [ 89.742137][ T45] mld_dad_work+0x3e/0x4e0 [ 89.742156][ T45] process_scheduled_works+0x7f7/0x1060 [ 89.742178][ T45] worker_thread+0xc99/0x13f0 [ 89.742198][ T45] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 89.742219][ T45] ? __kasan_check_read+0x15/0x20 [ 89.742238][ T45] kthread+0x2c7/0x360 [ 89.742258][ T45] ? __cfi_worker_thread+0x10/0x10 [ 89.742277][ T45] ? __cfi_kthread+0x10/0x10 [ 89.742297][ T45] ret_from_fork+0x67/0xa0 [ 89.742322][ T45] ? __cfi_kthread+0x10/0x10 [ 89.742342][ T45] ret_from_fork_asm+0x1a/0x30 [ 89.742361][ T45] [ 89.742882][ T1791] CPU: 1 UID: 0 PID: 1791 Comm: syz.1.671 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.742909][ T1791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.742922][ T1791] Call Trace: [ 89.742952][ T1791] [ 89.742960][ T1791] __dump_stack+0x21/0x30 [ 89.742987][ T1791] dump_stack_lvl+0x140/0x1c0 [ 89.743013][ T1791] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.743039][ T1791] dump_stack+0x19/0x20 [ 89.743063][ T1791] should_fail_ex+0x3c2/0x510 [ 89.743084][ T1791] should_failslab+0xac/0x100 [ 89.743108][ T1791] __kmalloc_cache_noprof+0x41/0x470 [ 89.743129][ T1791] ? kobject_uevent_env+0x2a3/0x7e0 [ 89.743153][ T1791] ? __kasan_check_write+0x18/0x20 [ 89.743173][ T1791] kobject_uevent_env+0x2a3/0x7e0 [ 89.743196][ T1791] ? __dev_fwnode+0x54/0x90 [ 89.743220][ T1791] kobject_uevent+0x21/0x40 [ 89.743242][ T1791] device_del+0xb7f/0xcf0 [ 89.743267][ T1791] ? __cfi_device_del+0x10/0x10 [ 89.743292][ T1791] ? down_read+0x7f/0xe0 [ 89.743317][ T1791] ? __cfi_down_read+0x10/0x10 [ 89.743342][ T1791] snd_unregister_device+0x1b3/0x200 [ 89.743365][ T1791] snd_ctl_dev_disconnect+0x1e3/0x200 [ 89.743392][ T1791] snd_device_disconnect_all+0xe7/0x210 [ 89.743413][ T1791] snd_card_disconnect+0x38f/0x7a0 [ 89.743436][ T1791] ? __cfi_snd_card_disconnect+0x10/0x10 [ 89.743459][ T1791] ? usb_ep_disable+0xcf/0x200 [ 89.743484][ T1791] ? f_midi_disable+0x3dd/0x460 [ 89.743513][ T1791] snd_card_free_when_closed+0x23/0x50 [ 89.743536][ T1791] f_midi_unbind+0x5f/0x80 [ 89.743561][ T1791] ? __cfi_f_midi_unbind+0x10/0x10 [ 89.743586][ T1791] purge_configs_funcs+0x236/0x320 [ 89.743619][ T1791] configfs_composite_unbind+0xbb/0x1f0 [ 89.743643][ T1791] ? dummy_udc_async_callbacks+0xfc/0x160 [ 89.743675][ T1791] gadget_unbind_driver+0x1ea/0x3f0 [ 89.743696][ T1791] ? __cfi_gadget_unbind_driver+0x10/0x10 [ 89.743716][ T1791] device_release_driver_internal+0x4ad/0x830 [ 89.743745][ T1791] driver_detach+0x1f5/0x2d0 [ 89.743770][ T1791] bus_remove_driver+0x254/0x2b0 [ 89.743793][ T1791] driver_unregister+0x79/0xb0 [ 89.743811][ T1791] usb_gadget_unregister_driver+0x52/0x80 [ 89.743831][ T1791] gadget_dev_desc_UDC_store+0x1c6/0x350 [ 89.743852][ T1791] configfs_write_iter+0x32f/0x490 [ 89.743875][ T1791] ? __cfi_gadget_dev_desc_UDC_store+0x10/0x10 [ 89.743896][ T1791] vfs_write+0x762/0xfd0 [ 89.743917][ T1791] ? __cfi_vfs_write+0x10/0x10 [ 89.743936][ T1791] ? __cfi_mutex_lock+0x10/0x10 [ 89.743962][ T1791] ksys_write+0x145/0x260 [ 89.743981][ T1791] ? xfd_validate_state+0x68/0x140 [ 89.744007][ T1791] ? __cfi_ksys_write+0x10/0x10 [ 89.744026][ T1791] ? __kasan_check_write+0x18/0x20 [ 89.744044][ T1791] ? fpregs_restore_userregs+0x11c/0x260 [ 89.744068][ T1791] __x64_sys_write+0x7f/0x90 [ 89.744088][ T1791] x64_sys_call+0x271c/0x2ee0 [ 89.744107][ T1791] do_syscall_64+0x57/0xf0 [ 89.744127][ T1791] ? clear_bhb_loop+0x50/0xa0 [ 89.744151][ T1791] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.744175][ T1791] RIP: 0033:0x7f433ed9df99 [ 89.744191][ T1791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.744207][ T1791] RSP: 002b:00007f433fbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 89.744229][ T1791] RAX: ffffffffffffffda RBX: 00007f433f025fa0 RCX: 00007f433ed9df99 [ 89.744243][ T1791] RDX: 0000000000000001 RSI: 0000200000000920 RDI: 000000000000000c [ 89.744257][ T1791] RBP: 00007f433ee34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 89.744270][ T1791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.744282][ T1791] R13: 00007f433f026038 R14: 00007f433f025fa0 R15: 00007ffdd39cb4f8 [ 89.744299][ T1791] [ 89.744550][ T1790] CPU: 1 UID: 0 PID: 1790 Comm: udevd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 89.744577][ T1790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.744588][ T1790] Call Trace: [ 89.744594][ T1790] [ 89.744601][ T1790] __dump_stack+0x21/0x30 [ 89.744634][ T1790] dump_stack_lvl+0x140/0x1c0 [ 89.744658][ T1790] ? __cfi_dump_stack_lvl+0x10/0x10 [ 89.744684][ T1790] dump_stack+0x19/0x20 [ 89.744706][ T1790] should_fail_ex+0x3c2/0x510 [ 89.744726][ T1790] should_failslab+0xac/0x100 [ 89.744748][ T1790] kmem_cache_alloc_noprof+0x42/0x410 [ 89.744767][ T1790] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 89.744789][ T1790] ? alloc_empty_file+0xbf/0x270 [ 89.744811][ T1790] ? arch_stack_walk+0x10a/0x170 [ 89.744830][ T1790] alloc_empty_file+0xbf/0x270 [ 89.744853][ T1790] path_openat+0xf4/0x35a0 [ 89.744876][ T1790] ? stack_depot_save_flags+0x38/0x800 [ 89.744899][ T1790] ? kasan_save_track+0x4f/0x80 [ 89.744918][ T1790] ? kasan_save_track+0x3e/0x80 [ 89.744938][ T1790] ? kasan_save_alloc_info+0x3a/0x50 [ 89.744963][ T1790] ? __kasan_slab_alloc+0x73/0x90 [ 89.744984][ T1790] ? getname+0x1b/0x30 [ 89.745003][ T1790] ? do_sys_openat2+0xda/0x1d0 [ 89.745026][ T1790] ? __x64_sys_openat+0x13a/0x170 [ 89.745050][ T1790] ? x64_sys_call+0xe69/0x2ee0 [ 89.745067][ T1790] ? do_syscall_64+0x57/0xf0 [ 89.745088][ T1790] ? do_filp_open+0x440/0x440 [ 89.745113][ T1790] do_filp_open+0x1f2/0x440 [ 89.745137][ T1790] ? __cfi_do_filp_open+0x10/0x10 [ 89.745162][ T1790] ? alloc_fd+0x4c1/0x570 [ 89.745183][ T1790] do_sys_openat2+0x134/0x1d0 [ 89.745207][ T1790] ? do_sys_open+0x100/0x100 [ 89.745233][ T1790] __x64_sys_openat+0x13a/0x170 [ 89.745258][ T1790] x64_sys_call+0xe69/0x2ee0 [ 89.745275][ T1790] do_syscall_64+0x57/0xf0 [ 89.745295][ T1790] ? clear_bhb_loop+0x50/0xa0 [ 89.745318][ T1790] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 89.745341][ T1790] RIP: 0033:0x7f808f2a7407 [ 89.745357][ T1790] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 89.745371][ T1790] RSP: 002b:00007ffda20e6400 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 89.745391][ T1790] RAX: ffffffffffffffda RBX: 00007f808fa43880 RCX: 00007f808f2a7407 [ 89.745406][ T1790] RDX: 0000000000080241 RSI: 00007ffda20e6960 RDI: ffffffffffffff9c [ 89.745420][ T1790] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000 [ 89.745433][ T1790] R10: 00000000000001b6 R11: 0000000000000202 R12: 00005647db330dfc [ 89.745450][ T1790] R13: 00005647db330dfc R14: 0000000000000001 R15: 00005647db34b140 [ 89.745466][ T1790] [ 93.637271][ T1785] CPU: 0 UID: 0 PID: 1785 Comm: udevd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 93.637307][ T1785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.637320][ T1785] Call Trace: [ 93.637327][ T1785] [ 93.637335][ T1785] __dump_stack+0x21/0x30 [ 93.637368][ T1785] dump_stack_lvl+0x140/0x1c0 [ 93.637394][ T1785] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.637420][ T1785] ? wp_page_reuse+0x158/0x2a0 [ 93.637447][ T1785] ? do_wp_page+0xd85/0x2e80 [ 93.637470][ T1785] dump_stack+0x19/0x20 [ 93.637494][ T1785] should_fail_ex+0x3c2/0x510 [ 93.637518][ T1785] should_failslab+0xac/0x100 [ 93.637542][ T1785] kmem_cache_alloc_noprof+0x42/0x410 [ 93.637594][ T1785] ? __kasan_check_write+0x18/0x20 [ 93.637615][ T1785] ? getname_flags+0xcc/0x6b0 [ 93.637637][ T1785] ? __cfi__raw_spin_lock+0x10/0x10 [ 93.637659][ T1785] ? kmem_cache_free+0x1bd/0x4f0 [ 93.637681][ T1785] getname_flags+0xcc/0x6b0 [ 93.637703][ T1785] vfs_fstatat+0xcb/0x1d0 [ 93.637727][ T1785] __se_sys_newfstatat+0x127/0x3c0 [ 93.637753][ T1785] ? __x64_sys_newfstatat+0xc0/0xc0 [ 93.637779][ T1785] ? __cfi_handle_mm_fault+0x10/0x10 [ 93.637802][ T1785] ? lock_vma_under_rcu+0x4cf/0x590 [ 93.637829][ T1785] ? __kasan_check_write+0x18/0x20 [ 93.637849][ T1785] ? do_user_addr_fault+0xbf5/0x1230 [ 93.637880][ T1785] ? __kasan_check_read+0x15/0x20 [ 93.637898][ T1785] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 93.637923][ T1785] __x64_sys_newfstatat+0x9f/0xc0 [ 93.637947][ T1785] x64_sys_call+0x1821/0x2ee0 [ 93.637966][ T1785] do_syscall_64+0x57/0xf0 [ 93.637988][ T1785] ? clear_bhb_loop+0x50/0xa0 [ 93.638012][ T1785] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.638038][ T1785] RIP: 0033:0x7f808f311b0a [ 93.638057][ T1785] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 93.638073][ T1785] RSP: 002b:00007ffda20e4e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 93.638098][ T1785] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f808f311b0a [ 93.638114][ T1785] RDX: 00007ffda20e4e70 RSI: 00007ffda20e4f40 RDI: 00000000ffffff9c [ 93.638129][ T1785] RBP: 00007ffda20e5f80 R08: 0000000000000075 R09: 0000000000000000 [ 93.638142][ T1785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda20e6960 [ 93.638155][ T1785] R13: 0000000000000000 R14: 00005647db3306d7 R15: 00005647e9c2b4e0 [ 93.638172][ T1785] [ 94.045119][ T1827] FAULT_INJECTION: forcing a failure. [ 94.045119][ T1827] name failslab, interval 1, probability 100, space 0, times 10 [ 94.045236][ T110] FAULT_INJECTION: forcing a failure. [ 94.045236][ T110] name failslab, interval 1, probability 100, space 0, times 10 [ 94.058260][ T1826] FAULT_INJECTION: forcing a failure. [ 94.058260][ T1826] name failslab, interval 1, probability 100, space 0, times 10 [ 94.071004][ T110] CPU: 0 UID: 0 PID: 110 Comm: udevd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 94.071040][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.071053][ T110] Call Trace: [ 94.071061][ T110] [ 94.071071][ T110] __dump_stack+0x21/0x30 [ 94.071103][ T110] dump_stack_lvl+0x140/0x1c0 [ 94.071128][ T110] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.071153][ T110] ? vfs_fstatat+0xf0/0x1d0 [ 94.071174][ T110] dump_stack+0x19/0x20 [ 94.071198][ T110] should_fail_ex+0x3c2/0x510 [ 94.071220][ T110] should_failslab+0xac/0x100 [ 94.071251][ T110] kmem_cache_alloc_noprof+0x42/0x410 [ 94.071272][ T110] ? getname_flags+0xcc/0x6b0 [ 94.071297][ T110] ? kasan_quarantine_put+0x161/0x190 [ 94.071318][ T110] getname_flags+0xcc/0x6b0 [ 94.071338][ T110] getname+0x1b/0x30 [ 94.071356][ T110] do_sys_openat2+0xda/0x1d0 [ 94.071381][ T110] ? do_sys_open+0x100/0x100 [ 94.071404][ T110] ? cp_old_stat+0x4d0/0x4d0 [ 94.071428][ T110] __x64_sys_openat+0x13a/0x170 [ 94.071454][ T110] x64_sys_call+0xe69/0x2ee0 [ 94.071480][ T110] do_syscall_64+0x57/0xf0 [ 94.071501][ T110] ? clear_bhb_loop+0x50/0xa0 [ 94.071525][ T110] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.071548][ T110] RIP: 0033:0x7f808f315c3a [ 94.071566][ T110] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 94.071582][ T110] RSP: 002b:00007ffda20e6f58 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 94.071603][ T110] RAX: ffffffffffffffda RBX: 00005647e9c3d460 RCX: 00007f808f315c3a [ 94.071618][ T110] RDX: 0000000000090800 RSI: 00005647e9c17600 RDI: 00000000ffffff9c [ 94.071631][ T110] RBP: 00005647e9c17600 R08: 0000000000000000 R09: 0000000000000001 [ 94.071645][ T110] R10: 0000000000000000 R11: 0000000000000206 R12: 00005647e9c24ef0 [ 94.071657][ T110] R13: 00000000000000ff R14: 00005647db334be0 R15: 00007ffda20e71f0 [ 94.071673][ T110] [ 94.071700][ T110] FAULT_INJECTION: forcing a failure. [ 94.071700][ T110] name failslab, interval 1, probability 100, space 0, times 9 [ 94.084090][ T1827] CPU: 1 UID: 0 PID: 1827 Comm: syz.1.686 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 94.084122][ T1827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.084135][ T1827] Call Trace: [ 94.084143][ T1827] [ 94.084151][ T1827] __dump_stack+0x21/0x30 [ 94.084182][ T1827] dump_stack_lvl+0x140/0x1c0 [ 94.084208][ T1827] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.084235][ T1827] ? futex_wait+0x2b8/0x7c0 [ 94.084255][ T1827] ? __cfi_futex_wait+0x10/0x10 [ 94.084274][ T1827] dump_stack+0x19/0x20 [ 94.084300][ T1827] should_fail_ex+0x3c2/0x510 [ 94.084322][ T1827] should_failslab+0xac/0x100 [ 94.084345][ T1827] kmem_cache_alloc_noprof+0x42/0x410 [ 94.084365][ T1827] ? do_futex+0x32a/0x510 [ 94.084388][ T1827] ? getname_flags+0xcc/0x6b0 [ 94.084410][ T1827] getname_flags+0xcc/0x6b0 [ 94.084431][ T1827] getname+0x1b/0x30 [ 94.084450][ T1827] do_sys_openat2+0xda/0x1d0 [ 94.084475][ T1827] ? fput+0x1a4/0x230 [ 94.084497][ T1827] ? do_sys_open+0x100/0x100 [ 94.084523][ T1827] __x64_sys_openat+0x13a/0x170 [ 94.084549][ T1827] x64_sys_call+0xe69/0x2ee0 [ 94.084567][ T1827] do_syscall_64+0x57/0xf0 [ 94.084587][ T1827] ? clear_bhb_loop+0x50/0xa0 [ 94.084611][ T1827] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.084635][ T1827] RIP: 0033:0x7f433ed9df99 [ 94.084651][ T1827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.084668][ T1827] RSP: 002b:00007f433fbc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 94.084691][ T1827] RAX: ffffffffffffffda RBX: 00007f433f025fa0 RCX: 00007f433ed9df99 [ 94.084707][ T1827] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 94.084720][ T1827] RBP: 00007f433ee34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 94.084733][ T1827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.084745][ T1827] R13: 00007f433f026038 R14: 00007f433f025fa0 R15: 00007ffdd39cb4f8 [ 94.084762][ T1827] [ 94.085493][ T1824] FAULT_INJECTION: forcing a failure. [ 94.085493][ T1824] name failslab, interval 1, probability 100, space 0, times 7 [ 94.095041][ T110] CPU: 0 UID: 0 PID: 110 Comm: udevd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 94.095070][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.095082][ T110] Call Trace: [ 94.095089][ T110] [ 94.095097][ T110] __dump_stack+0x21/0x30 [ 94.095126][ T110] dump_stack_lvl+0x140/0x1c0 [ 94.095149][ T110] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.095173][ T110] ? vfs_fstatat+0xf0/0x1d0 [ 94.095194][ T110] ? __kasan_check_write+0x18/0x20 [ 94.095214][ T110] dump_stack+0x19/0x20 [ 94.095237][ T110] should_fail_ex+0x3c2/0x510 [ 94.095258][ T110] should_failslab+0xac/0x100 [ 94.095280][ T110] kmem_cache_alloc_noprof+0x42/0x410 [ 94.095299][ T110] ? getname_flags+0xcc/0x6b0 [ 94.095319][ T110] getname_flags+0xcc/0x6b0 [ 94.095339][ T110] do_readlinkat+0xcd/0x520 [ 94.095363][ T110] ? cp_old_stat+0x4d0/0x4d0 [ 94.095387][ T110] ? __kasan_check_read+0x15/0x20 [ 94.095405][ T110] __x64_sys_readlink+0x83/0xa0 [ 94.095427][ T110] x64_sys_call+0x155b/0x2ee0 [ 94.095444][ T110] do_syscall_64+0x57/0xf0 [ 94.095465][ T110] ? clear_bhb_loop+0x50/0xa0 [ 94.095497][ T110] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.095519][ T110] RIP: 0033:0x7f808f3153a7 [ 94.095536][ T110] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 94.095552][ T110] RSP: 002b:00007ffda20e6288 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 94.095573][ T110] RAX: ffffffffffffffda RBX: 00007ffda20e6760 RCX: 00007f808f3153a7 [ 94.095588][ T110] RDX: 0000000000000400 RSI: 00007ffda20e6290 RDI: 00007ffda20e6760 [ 94.095602][ T110] RBP: 00007ffda20e6290 R08: 00005647e9c17604 R09: 0000000000000001 [ 94.095615][ T110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 94.095628][ T110] R13: 0000000000000100 R14: 00005647db334be0 R15: 00007ffda20e71f0 [ 94.095643][ T110] [ 94.095665][ T110] FAULT_INJECTION: forcing a failure. [ 94.095665][ T110] name failslab, interval 1, probability 100, space 0, times 5 [ 94.105862][ T1826] CPU: 1 UID: 0 PID: 1826 Comm: syz.3.687 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 94.105897][ T1826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.105910][ T1826] Call Trace: [ 94.105918][ T1826] [ 94.105926][ T1826] __dump_stack+0x21/0x30 [ 94.105958][ T1826] dump_stack_lvl+0x140/0x1c0 [ 94.105985][ T1826] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.106011][ T1826] ? do_futex+0x32a/0x510 [ 94.106035][ T1826] ? __kasan_check_write+0x18/0x20 [ 94.106056][ T1826] dump_stack+0x19/0x20 [ 94.106081][ T1826] should_fail_ex+0x3c2/0x510 [ 94.106103][ T1826] should_failslab+0xac/0x100 [ 94.106126][ T1826] kmem_cache_alloc_noprof+0x42/0x410 [ 94.106147][ T1826] ? getname_flags+0xcc/0x6b0 [ 94.106168][ T1826] getname_flags+0xcc/0x6b0 [ 94.106188][ T1826] ? __kasan_check_read+0x15/0x20 [ 94.106207][ T1826] __x64_sys_mkdirat+0x7e/0xa0 [ 94.106232][ T1826] x64_sys_call+0x2ba8/0x2ee0 [ 94.106249][ T1826] do_syscall_64+0x57/0xf0 [ 94.106270][ T1826] ? clear_bhb_loop+0x50/0xa0 [ 94.106295][ T1826] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.106319][ T1826] RIP: 0033:0x7ff5ecb9df99 [ 94.106336][ T1826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.106353][ T1826] RSP: 002b:00007ff5eb5e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 94.106374][ T1826] RAX: ffffffffffffffda RBX: 00007ff5ece25fa0 RCX: 00007ff5ecb9df99 [ 94.106390][ T1826] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 94.106404][ T1826] RBP: 00007ff5ecc34ec4 R08: 0000000000000000 R09: 0000000000000000 [ 94.106418][ T1826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.106431][ T1826] R13: 00007ff5ece26038 R14: 00007ff5ece25fa0 R15: 00007ffee1c12908 [ 94.106453][ T1826] [ 94.110066][ T1827] FAULT_INJECTION: forcing a failure. [ 94.110066][ T1827] name failslab, interval 1, probability 100, space 0, times 4 [ 94.111575][ T110] CPU: 0 UID: 0 PID: 110 Comm: udevd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 94.111604][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.111616][ T110] Call Trace: [ 94.111624][ T110] [ 94.111632][ T110] __dump_stack+0x21/0x30 [ 94.111661][ T110] dump_stack_lvl+0x140/0x1c0 [ 94.111686][ T110] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.111711][ T110] dump_stack+0x19/0x20 [ 94.111735][ T110] should_fail_ex+0x3c2/0x510 [ 94.111756][ T110] should_failslab+0xac/0x100 [ 94.111779][ T110] kmem_cache_alloc_noprof+0x42/0x410 [ 94.111798][ T110] ? asm_sysvec_reschedule_ipi+0x1f/0x30 [ 94.111822][ T110] ? getname_flags+0xcc/0x6b0 [ 94.111843][ T110] getname_flags+0xcc/0x6b0 [ 94.111863][ T110] vfs_fstatat+0xcb/0x1d0 [ 94.111885][ T110] __se_sys_newfstatat+0x127/0x3c0 [ 94.111908][ T110] ? __x64_sys_newfstatat+0xc0/0xc0 [ 94.111930][ T110] ? __kasan_check_write+0x18/0x20 [ 94.111948][ T110] ? should_fail_ex+0x2a6/0x510 [ 94.111968][ T110] ? should_failslab+0xac/0x100 [ 94.111989][ T110] ? kmem_cache_alloc_noprof+0x42/0x410 [ 94.112007][ T110] ? getname_flags+0xcc/0x6b0 [ 94.112029][ T110] ? cp_old_stat+0x4d0/0x4d0 [ 94.112053][ T110] __x64_sys_newfstatat+0x9f/0xc0 [ 94.112075][ T110] x64_sys_call+0x1821/0x2ee0 [ 94.112098][ T110] do_syscall_64+0x57/0xf0 [ 94.112119][ T110] ? clear_bhb_loop+0x50/0xa0 [ 94.112142][ T110] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.112164][ T110] RIP: 0033:0x7f808f311b0a [ 94.112181][ T110] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 94.112197][ T110] RSP: 002b:00007ffda20e66c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 94.112218][ T110] RAX: ffffffffffffffda RBX: 00007ffda20e6b60 RCX: 00007f808f311b0a [ 94.112233][ T110] RDX: 00007ffda20e66d0 RSI: 00007ffda20e6b60 RDI: 00000000ffffff9c [ 94.112246][ T110] RBP: 00005647e99dc2c0 R08: 0000000000000000 R09: 0000000000000001 [ 94.112259][ T110] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffda20e6760 [ 94.112271][ T110] R13: 0000000000000100 R14: 00005647db334be0 R15: 00007ffda20e71f0 [ 94.112287][ T110] [ 94.112307][ T110] FAULT_INJECTION: forcing a failure. [ 94.112307][ T110] name failslab, interval 1, probability 100, space 0, times 3 [ 94.118200][ T1825] FAULT_INJECTION: forcing a failure. [ 94.118200][ T1825] name failslab, interval 1, probability 100, space 0, times 3 [ 94.120968][ T110] CPU: 0 UID: 0 PID: 110 Comm: udevd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 94.120996][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.121008][ T110] Call Trace: [ 94.121014][ T110] [ 94.121021][ T110] __dump_stack+0x21/0x30 [ 94.121048][ T110] dump_stack_lvl+0x140/0x1c0 [ 94.121073][ T110] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.121105][ T110] ? vfs_fstatat+0xf0/0x1d0 [ 94.121127][ T110] dump_stack+0x19/0x20 [ 94.121150][ T110] should_fail_ex+0x3c2/0x510 [ 94.121171][ T110] should_failslab+0xac/0x100 [ 94.121193][ T110] kmem_cache_alloc_noprof+0x42/0x410 [ 94.121212][ T110] ? getname_flags+0xcc/0x6b0 [ 94.121231][ T110] ? should_failslab+0xac/0x100 [ 94.121252][ T110] getname_flags+0xcc/0x6b0 [ 94.121272][ T110] getname+0x1b/0x30 [ 94.121291][ T110] do_sys_openat2+0xda/0x1d0 [ 94.121316][ T110] ? do_sys_open+0x100/0x100 [ 94.121339][ T110] ? cp_old_stat+0x4d0/0x4d0 [ 94.121363][ T110] __x64_sys_openat+0x13a/0x170 [ 94.121389][ T110] x64_sys_call+0xe69/0x2ee0 [ 94.121406][ T110] do_syscall_64+0x57/0xf0 [ 94.121426][ T110] ? clear_bhb_loop+0x50/0xa0 [ 94.121451][ T110] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.121474][ T110] RIP: 0033:0x7f808f315c3a [ 94.121490][ T110] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 94.121505][ T110] RSP: 002b:00007ffda20e6f58 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 94.121526][ T110] RAX: ffffffffffffffda RBX: 00005647e9c3d460 RCX: 00007f808f315c3a [ 94.121541][ T110] RDX: 0000000000090800 RSI: 00005647e9c17600 RDI: 00000000ffffff9c [ 94.121554][ T110] RBP: 00005647e9c17600 R08: 0000000000000000 R09: 0000000000000001 [ 94.121567][ T110] R10: 0000000000000000 R11: 0000000000000206 R12: 00005647e9c24ef0 [ 94.121580][ T110] R13: 00000000000000ff R14: 00005647db334be0 R15: 00007ffda20e71f0 [ 94.121595][ T110] [ 94.121646][ T110] FAULT_INJECTION: forcing a failure. [ 94.121646][ T110] name failslab, interval 1, probability 100, space 0, times 1 [ 94.126347][ T1827] CPU: 1 UID: 0 PID: 1827 Comm: syz.1.686 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 94.126371][ T1827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.126383][ T1827] Call Trace: [ 94.126389][ T1827] [ 94.126397][ T1827] __dump_stack+0x21/0x30 [ 94.126421][ T1827] dump_stack_lvl+0x140/0x1c0 [ 94.126444][ T1827] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.126468][ T1827] ? preempt_schedule+0xc5/0xe0 [ 94.126491][ T1827] dump_stack+0x19/0x20 [ 94.126513][ T1827] should_fail_ex+0x3c2/0x510 [ 94.126533][ T1827] should_failslab+0xac/0x100 [ 94.126554][ T1827] kmem_cache_alloc_noprof+0x42/0x410 [ 94.126572][ T1827] ? __kasan_check_write+0x18/0x20 [ 94.126590][ T1827] ? taskstats_exit+0x161/0xb50 [ 94.126622][ T1827] ? acct_update_integrals+0x2e5/0x330 [ 94.126648][ T1827] taskstats_exit+0x161/0xb50 [ 94.126672][ T1827] ? __kasan_check_write+0x18/0x20 [ 94.126690][ T1827] do_exit+0x7f7/0x2850 [ 94.126714][ T1827] ? futex_wake+0x666/0x950 [ 94.126731][ T1827] ? __cfi_do_exit+0x10/0x10 [ 94.126753][ T1827] ? __cfi_futex_wake+0x10/0x10 [ 94.126770][ T1827] ? __kasan_check_write+0x18/0x20 [ 94.126788][ T1827] ? _raw_spin_lock_irq+0x93/0x120 [ 94.126809][ T1827] do_group_exit+0x21f/0x2f0 [ 94.126831][ T1827] ? __kasan_check_write+0x18/0x20 [ 94.126849][ T1827] ? recalc_sigpending+0x16c/0x1d0 [ 94.126870][ T1827] get_signal+0x134c/0x1490 [ 94.126895][ T1827] arch_do_signal_or_restart+0xbc/0x700 [ 94.126914][ T1827] ? fput+0x1a4/0x230 [ 94.126935][ T1827] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 94.126955][ T1827] ? __kasan_check_write+0x18/0x20 [ 94.126974][ T1827] syscall_exit_to_user_mode+0x57/0xb0 [ 94.127000][ T1827] do_syscall_64+0x63/0xf0 [ 94.127020][ T1827] ? clear_bhb_loop+0x50/0xa0 [ 94.127042][ T1827] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.127065][ T1827] RIP: 0033:0x7f433ed9df99 [ 94.127080][ T1827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.127096][ T1827] RSP: 002b:00007f433fbc60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 94.127115][ T1827] RAX: 0000000000000001 RBX: 00007f433f025fa8 RCX: 00007f433ed9df99 [ 94.127129][ T1827] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f433f025fac [ 94.127143][ T1827] RBP: 00007f433f025fa0 R08: 4000000000000000 R09: 0000000000000000 [ 94.127156][ T1827] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 94.127169][ T1827] R13: 00007f433f026038 R14: 00007ffdd39cb410 R15: 00007ffdd39cb4f8 [ 94.127185][ T1827] [ 94.127249][ T1824] CPU: 1 UID: 0 PID: 1824 Comm: syz.1.686 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 94.127271][ T1824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.127282][ T1824] Call Trace: [ 94.127288][ T1824] [ 94.127299][ T1824] __dump_stack+0x21/0x30 [ 94.127323][ T1824] dump_stack_lvl+0x140/0x1c0 [ 94.127346][ T1824] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.127371][ T1824] dump_stack+0x19/0x20 [ 94.127394][ T1824] should_fail_ex+0x3c2/0x510 [ 94.127414][ T1824] should_failslab+0xac/0x100 [ 94.127435][ T1824] kmem_cache_alloc_noprof+0x42/0x410 [ 94.127453][ T1824] ? __kasan_check_write+0x18/0x20 [ 94.127471][ T1824] ? taskstats_exit+0x161/0xb50 [ 94.127494][ T1824] ? acct_update_integrals+0x2e5/0x330 [ 94.127520][ T1824] taskstats_exit+0x161/0xb50 [ 94.127544][ T1824] ? _raw_spin_unlock_irq+0x45/0x70 [ 94.127565][ T1824] do_exit+0x7f7/0x2850 [ 94.127587][ T1824] ? __fput+0x71e/0xa30 [ 94.127617][ T1824] ? __cfi_try_to_wake_up+0x10/0x10 [ 94.127638][ T1824] ? __cfi_do_exit+0x10/0x10 [ 94.127660][ T1824] ? __kasan_check_write+0x18/0x20 [ 94.127679][ T1824] ? _raw_spin_lock_irq+0x93/0x120 [ 94.127699][ T1824] ? zap_other_threads+0x32f/0x370 [ 94.127721][ T1824] do_group_exit+0x21f/0x2f0 [ 94.127744][ T1824] __x64_sys_exit_group+0x43/0x50 [ 94.127768][ T1824] x64_sys_call+0x2ed2/0x2ee0 [ 94.127785][ T1824] do_syscall_64+0x57/0xf0 [ 94.127804][ T1824] ? clear_bhb_loop+0x50/0xa0 [ 94.127827][ T1824] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.127849][ T1824] RIP: 0033:0x7f433ed9df99 [ 94.127864][ T1824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.127880][ T1824] RSP: 002b:00007ffdd39cb838 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 94.127898][ T1824] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f433ed9df99 [ 94.127911][ T1824] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 94.127923][ T1824] RBP: 00007ffdd39cb89c R08: 0000000000000000 R09: 00000000000927c0 [ 94.127937][ T1824] R10: 0000000000000001 R11: 0000000000000246 R12: 00000000000000a1 [ 94.127949][ T1824] R13: 00000000000927c0 R14: 0000000000016f35 R15: 00007ffdd39cb8f0 [ 94.127964][ T1824] [ 94.131280][ T1825] CPU: 1 UID: 0 PID: 1825 Comm: syz.3.687 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 94.131305][ T1825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.131316][ T1825] Call Trace: [ 94.131322][ T1825] [ 94.131330][ T1825] __dump_stack+0x21/0x30 [ 94.131356][ T1825] dump_stack_lvl+0x140/0x1c0 [ 94.131379][ T1825] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.131405][ T1825] dump_stack+0x19/0x20 [ 94.131428][ T1825] should_fail_ex+0x3c2/0x510 [ 94.131447][ T1825] should_failslab+0xac/0x100 [ 94.131470][ T1825] kmem_cache_alloc_noprof+0x42/0x410 [ 94.131489][ T1825] ? jbd2__journal_start+0x16d/0x860 [ 94.131512][ T1825] jbd2__journal_start+0x16d/0x860 [ 94.131533][ T1825] __ext4_journal_start_sb+0x111/0x3f0 [ 94.131561][ T1825] ext4_dirty_inode+0x97/0x110 [ 94.131582][ T1825] ? __cfi_ext4_dirty_inode+0x10/0x10 [ 94.131611][ T1825] __mark_inode_dirty+0x251/0xc50 [ 94.131631][ T1825] ? __cfi___mark_inode_dirty+0x10/0x10 [ 94.131650][ T1825] ? filemap_map_pages+0x17c0/0x1b80 [ 94.131675][ T1825] ? mnt_get_write_access_file+0x1af/0x3b0 [ 94.131700][ T1825] ? __kasan_check_read+0x15/0x20 [ 94.131718][ T1825] file_update_time+0x1d3/0x210 [ 94.131743][ T1825] ext4_page_mkwrite+0x2bf/0x1120 [ 94.131766][ T1825] ? __kasan_check_write+0x18/0x20 [ 94.131784][ T1825] ? folio_unlock+0x137/0x1b0 [ 94.131804][ T1825] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 94.131825][ T1825] ? cgroup_rstat_updated+0x144/0x800 [ 94.131846][ T1825] ? vma_data_pages+0x105/0x140 [ 94.131864][ T1825] do_pte_missing+0x12c1/0x4440 [ 94.131888][ T1825] ? __cfi___update_load_avg_cfs_rq+0x10/0x10 [ 94.131913][ T1825] ? pte_marker_clear+0x1b0/0x1b0 [ 94.131935][ T1825] ? __thp_vma_allowable_orders+0x820/0x9a0 [ 94.131960][ T1825] ? __cfi_cgroup_rstat_updated+0x10/0x10 [ 94.131980][ T1825] ? __cfi___thp_vma_allowable_orders+0x10/0x10 [ 94.132004][ T1825] ? __switch_to+0xc6b/0x1320 [ 94.132030][ T1825] handle_mm_fault+0x1189/0x1ba0 [ 94.132053][ T1825] ? __cfi_handle_mm_fault+0x10/0x10 [ 94.132073][ T1825] ? lock_vma_under_rcu+0x4cf/0x590 [ 94.132096][ T1825] ? sched_clock+0x44/0x60 [ 94.132118][ T1825] ? sched_clock_cpu+0x75/0x400 [ 94.132144][ T1825] do_user_addr_fault+0x951/0x1230 [ 94.132170][ T1825] ? __kasan_check_read+0x15/0x20 [ 94.132189][ T1825] exc_page_fault+0x58/0xc0 [ 94.132214][ T1825] asm_exc_page_fault+0x2b/0x30 [ 94.132235][ T1825] RIP: 0033:0x7ff5eca726c0 [ 94.132250][ T1825] Code: 89 dc 41 83 e4 03 0f 85 ca 01 00 00 4c 89 ff be 04 00 00 00 e8 e1 92 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 94.132266][ T1825] RSP: 002b:00007ffee1c12950 EFLAGS: 00010202 [ 94.132283][ T1825] RAX: 0000001b2f424000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 94.132300][ T1825] RDX: 0000001b2f423ffc RSI: 00000000003ffde8 RDI: 00007ff5ed955700 [ 94.132314][ T1825] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ff5ece12000 [ 94.132326][ T1825] R10: 00007ff5ed955700 R11: 0000000000000000 R12: 0000000000000000 [ 94.132339][ T1825] R13: 0000000000055662 R14: ffffffff813cf1fc R15: 00007ff5ed955720 [ 94.132353][ T1825] ? fpregs_restore_userregs+0xfc/0x260 [ 94.132377][ T1825] [ 96.179836][ T110] CPU: 1 UID: 0 PID: 110 Comm: udevd Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 96.179872][ T110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.179885][ T110] Call Trace: [ 96.179892][ T110] [ 96.179899][ T110] __dump_stack+0x21/0x30 [ 96.179931][ T110] dump_stack_lvl+0x140/0x1c0 [ 96.179956][ T110] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.179984][ T110] dump_stack+0x19/0x20 [ 96.180007][ T110] should_fail_ex+0x3c2/0x510 [ 96.180030][ T110] should_failslab+0xac/0x100 [ 96.180053][ T110] kmem_cache_alloc_noprof+0x42/0x410 [ 96.180074][ T110] ? getname_flags+0xcc/0x6b0 [ 96.180095][ T110] getname_flags+0xcc/0x6b0 [ 96.180116][ T110] do_readlinkat+0xcd/0x520 [ 96.180142][ T110] ? cp_old_stat+0x4d0/0x4d0 [ 96.180167][ T110] ? __kasan_check_read+0x15/0x20 [ 96.180185][ T110] __x64_sys_readlink+0x83/0xa0 [ 96.180209][ T110] x64_sys_call+0x155b/0x2ee0 [ 96.180226][ T110] do_syscall_64+0x57/0xf0 [ 96.180246][ T110] ? clear_bhb_loop+0x50/0xa0 [ 96.180271][ T110] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.180295][ T110] RIP: 0033:0x7f808f3153a7 [ 96.180311][ T110] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 96.180327][ T110] RSP: 002b:00007ffda20e62e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 96.180350][ T110] RAX: ffffffffffffffda RBX: 00007ffda20e67c0 RCX: 00007f808f3153a7 [ 96.180365][ T110] RDX: 0000000000000400 RSI: 00007ffda20e62f0 RDI: 00007ffda20e67c0 [ 96.180380][ T110] RBP: 00007ffda20e62f0 R08: 00c0fcff00000000 R09: 0000000000000001 [ 96.180393][ T110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 96.180403][ T110] R13: 00005647db34b100 R14: 0000000000000000 R15: 00007ffda20e71f0 [ 96.180419][ T110] [ 96.530351][ T1849] FAULT_INJECTION: forcing a failure. [ 96.530351][ T1849] name failslab, interval 1, probability 100, space 0, times 10 [ 96.530367][ T1850] FAULT_INJECTION: forcing a failure. [ 96.530367][ T1850] name failslab, interval 1, probability 100, space 0, times 10 [ 96.530393][ T1850] CPU: 1 UID: 0 PID: 1850 Comm: syz.6.698 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 96.530418][ T1850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.530430][ T1850] Call Trace: [ 96.530437][ T1850] [ 96.530445][ T1850] __dump_stack+0x21/0x30 [ 96.530478][ T1850] dump_stack_lvl+0x140/0x1c0 [ 96.530505][ T1850] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.530532][ T1850] ? futex_wait+0x2b8/0x7c0 [ 96.530551][ T1850] ? __cfi_futex_wait+0x10/0x10 [ 96.530569][ T1850] dump_stack+0x19/0x20 [ 96.530592][ T1850] should_fail_ex+0x3c2/0x510 [ 96.530614][ T1850] should_failslab+0xac/0x100 [ 96.530637][ T1850] kmem_cache_alloc_noprof+0x42/0x410 [ 96.530656][ T1850] ? do_futex+0x32a/0x510 [ 96.530679][ T1850] ? getname_flags+0xcc/0x6b0 [ 96.530711][ T1850] getname_flags+0xcc/0x6b0 [ 96.530731][ T1850] getname+0x1b/0x30 [ 96.530751][ T1850] do_sys_openat2+0xda/0x1d0 [ 96.530776][ T1850] ? fput+0x1a4/0x230 [ 96.530799][ T1850] ? do_sys_open+0x100/0x100 [ 96.530826][ T1850] __x64_sys_openat+0x13a/0x170 [ 96.530854][ T1850] x64_sys_call+0xe69/0x2ee0 [ 96.530872][ T1850] do_syscall_64+0x57/0xf0 [ 96.530894][ T1850] ? clear_bhb_loop+0x50/0xa0 [ 96.530922][ T1850] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.530949][ T1850] RIP: 0033:0x7f445759df99 [ 96.530966][ T1850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.530984][ T1850] RSP: 002b:00007f4458490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.531005][ T1850] RAX: ffffffffffffffda RBX: 00007f4457825fa0 RCX: 00007f445759df99 [ 96.531021][ T1850] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 96.531043][ T1850] RBP: 00007f4457634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 96.531057][ T1850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.531070][ T1850] R13: 00007f4457826038 R14: 00007f4457825fa0 R15: 00007ffe190a1b68 [ 96.531088][ T1850] [ 96.531617][ T1848] FAULT_INJECTION: forcing a failure. [ 96.531617][ T1848] name failslab, interval 1, probability 100, space 0, times 8 [ 96.543824][ T1850] FAULT_INJECTION: forcing a failure. [ 96.543824][ T1850] name failslab, interval 1, probability 100, space 0, times 8 [ 96.556759][ T1848] CPU: 1 UID: 0 PID: 1848 Comm: syz.6.698 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 96.556788][ T1848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.556801][ T1848] Call Trace: [ 96.556808][ T1848] [ 96.556816][ T1848] __dump_stack+0x21/0x30 [ 96.556847][ T1848] dump_stack_lvl+0x140/0x1c0 [ 96.556871][ T1848] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.556895][ T1848] ? enqueue_task+0x1049/0x1100 [ 96.556915][ T1848] dump_stack+0x19/0x20 [ 96.556938][ T1848] should_fail_ex+0x3c2/0x510 [ 96.556960][ T1848] should_failslab+0xac/0x100 [ 96.556982][ T1848] kmem_cache_alloc_noprof+0x42/0x410 [ 96.557000][ T1848] ? __kasan_check_write+0x18/0x20 [ 96.557019][ T1848] ? taskstats_exit+0x161/0xb50 [ 96.557051][ T1848] ? acct_update_integrals+0x2e5/0x330 [ 96.557076][ T1848] taskstats_exit+0x161/0xb50 [ 96.557099][ T1848] ? _raw_spin_unlock_irq+0x45/0x70 [ 96.557121][ T1848] do_exit+0x7f7/0x2850 [ 96.557144][ T1848] ? __fput+0x71e/0xa30 [ 96.557167][ T1848] ? __cfi_try_to_wake_up+0x10/0x10 [ 96.557187][ T1848] ? __cfi_do_exit+0x10/0x10 [ 96.557208][ T1848] ? __kasan_check_write+0x18/0x20 [ 96.557225][ T1848] ? _raw_spin_lock_irq+0x93/0x120 [ 96.557246][ T1848] ? wake_up_state+0xf/0x20 [ 96.557265][ T1848] ? zap_other_threads+0x32f/0x370 [ 96.557288][ T1848] do_group_exit+0x21f/0x2f0 [ 96.557310][ T1848] __x64_sys_exit_group+0x43/0x50 [ 96.557333][ T1848] x64_sys_call+0x2ed2/0x2ee0 [ 96.557351][ T1848] do_syscall_64+0x57/0xf0 [ 96.557371][ T1848] ? clear_bhb_loop+0x50/0xa0 [ 96.557394][ T1848] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.557417][ T1848] RIP: 0033:0x7f445759df99 [ 96.557434][ T1848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.557450][ T1848] RSP: 002b:00007ffe190a1ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 96.557472][ T1848] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f445759df99 [ 96.557487][ T1848] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.557500][ T1848] RBP: 00007ffe190a1f0c R08: 0000000000000000 R09: 00000000000927c0 [ 96.557513][ T1848] R10: 0000000000000001 R11: 0000000000000246 R12: 000000000000000b [ 96.557525][ T1848] R13: 00000000000927c0 R14: 00000000000178ea R15: 00007ffe190a1f60 [ 96.557541][ T1848] [ 96.557608][ T1849] CPU: 1 UID: 0 PID: 1849 Comm: syz.4.697 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 96.557634][ T1849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.557646][ T1849] Call Trace: [ 96.557652][ T1849] [ 96.557660][ T1849] __dump_stack+0x21/0x30 [ 96.557688][ T1849] dump_stack_lvl+0x140/0x1c0 [ 96.557714][ T1849] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.557741][ T1849] ? class_find_device+0x318/0x390 [ 96.557762][ T1849] dump_stack+0x19/0x20 [ 96.557788][ T1849] should_fail_ex+0x3c2/0x510 [ 96.557809][ T1849] ? __kfifo_alloc+0x140/0x300 [ 96.557829][ T1849] should_failslab+0xac/0x100 [ 96.557853][ T1849] __kmalloc_noprof+0x69/0x510 [ 96.557874][ T1849] ? __kfifo_alloc+0x140/0x300 [ 96.557892][ T1849] ? __kasan_check_write+0x18/0x20 [ 96.557912][ T1849] ? _raw_spin_lock_irq+0x93/0x120 [ 96.557935][ T1849] __kfifo_alloc+0x140/0x300 [ 96.557954][ T1849] gs_open+0x19d/0x3f0 [ 96.557979][ T1849] tty_open+0x611/0x10b0 [ 96.558002][ T1849] ? __cfi_tty_open+0x10/0x10 [ 96.558024][ T1849] ? selinux_file_open+0x46c/0x630 [ 96.558052][ T1849] chrdev_open+0x4eb/0x610 [ 96.558073][ T1849] ? __cfi_chrdev_open+0x10/0x10 [ 96.558094][ T1849] ? bpf_lsm_file_open+0xd/0x20 [ 96.558118][ T1849] ? __cfi_chrdev_open+0x10/0x10 [ 96.558139][ T1849] do_dentry_open+0x97c/0x1510 [ 96.558166][ T1849] vfs_open+0x86/0x240 [ 96.558190][ T1849] ? __cfi_vfs_open+0x10/0x10 [ 96.558214][ T1849] ? may_open+0x352/0x430 [ 96.558237][ T1849] path_openat+0x2c49/0x35a0 [ 96.558263][ T1849] ? kasan_save_alloc_info+0x3a/0x50 [ 96.558293][ T1849] ? getname+0x1b/0x30 [ 96.558313][ T1849] ? x64_sys_call+0xe69/0x2ee0 [ 96.558330][ T1849] ? do_syscall_64+0x57/0xf0 [ 96.558353][ T1849] ? do_filp_open+0x440/0x440 [ 96.558380][ T1849] do_filp_open+0x1f2/0x440 [ 96.558404][ T1849] ? __cfi_do_filp_open+0x10/0x10 [ 96.558431][ T1849] ? alloc_fd+0x4c1/0x570 [ 96.558453][ T1849] do_sys_openat2+0x134/0x1d0 [ 96.558478][ T1849] ? putname+0x113/0x150 [ 96.558498][ T1849] ? do_sys_open+0x100/0x100 [ 96.558525][ T1849] __x64_sys_openat+0x13a/0x170 [ 96.558551][ T1849] x64_sys_call+0xe69/0x2ee0 [ 96.558569][ T1849] do_syscall_64+0x57/0xf0 [ 96.558589][ T1849] ? clear_bhb_loop+0x50/0xa0 [ 96.558619][ T1849] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.558642][ T1849] RIP: 0033:0x7fa7da59df99 [ 96.558658][ T1849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.558675][ T1849] RSP: 002b:00007fa7db3f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.558695][ T1849] RAX: ffffffffffffffda RBX: 00007fa7da825fa0 RCX: 00007fa7da59df99 [ 96.558709][ T1849] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 96.558723][ T1849] RBP: 00007fa7da634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 96.558735][ T1849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.558748][ T1849] R13: 00007fa7da826038 R14: 00007fa7da825fa0 R15: 00007ffcd56320d8 [ 96.558764][ T1849] [ 96.558778][ T1849] ================================================================== [ 96.568650][ T1850] CPU: 0 UID: 0 PID: 1850 Comm: syz.6.698 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 96.568682][ T1850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.568694][ T1850] Call Trace: [ 96.568701][ T1850] [ 96.568709][ T1850] __dump_stack+0x21/0x30 [ 96.568740][ T1850] dump_stack_lvl+0x140/0x1c0 [ 96.568764][ T1850] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.568789][ T1850] dump_stack+0x19/0x20 [ 96.568811][ T1850] should_fail_ex+0x3c2/0x510 [ 96.568833][ T1850] should_failslab+0xac/0x100 [ 96.568855][ T1850] kmem_cache_alloc_noprof+0x42/0x410 [ 96.568874][ T1850] ? __kasan_check_write+0x18/0x20 [ 96.568892][ T1850] ? taskstats_exit+0x161/0xb50 [ 96.568916][ T1850] ? acct_update_integrals+0x2e5/0x330 [ 96.568942][ T1850] taskstats_exit+0x161/0xb50 [ 96.568966][ T1850] ? __kasan_check_write+0x18/0x20 [ 96.568984][ T1850] do_exit+0x7f7/0x2850 [ 96.569008][ T1850] ? futex_wake+0x666/0x950 [ 96.569025][ T1850] ? futex_setup_timer+0xb4/0xd0 [ 96.569046][ T1850] ? __cfi_do_exit+0x10/0x10 [ 96.569068][ T1850] ? futex_wait+0x2b8/0x7c0 [ 96.569085][ T1850] ? __cfi_futex_wait+0x10/0x10 [ 96.569102][ T1850] ? __kasan_check_write+0x18/0x20 [ 96.569120][ T1850] ? _raw_spin_lock_irq+0x93/0x120 [ 96.569142][ T1850] do_group_exit+0x21f/0x2f0 [ 96.569165][ T1850] ? __kasan_check_write+0x18/0x20 [ 96.569183][ T1850] ? recalc_sigpending+0x16c/0x1d0 [ 96.569205][ T1850] get_signal+0x134c/0x1490 [ 96.569230][ T1850] arch_do_signal_or_restart+0xbc/0x700 [ 96.569249][ T1850] ? fput+0x1a4/0x230 [ 96.569270][ T1850] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 96.569291][ T1850] syscall_exit_to_user_mode+0x57/0xb0 [ 96.569318][ T1850] do_syscall_64+0x63/0xf0 [ 96.569337][ T1850] ? clear_bhb_loop+0x50/0xa0 [ 96.569361][ T1850] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.569384][ T1850] RIP: 0033:0x7f445759df99 [ 96.569401][ T1850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.569417][ T1850] RSP: 002b:00007f44584900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 96.569439][ T1850] RAX: fffffffffffffe00 RBX: 00007f4457825fa8 RCX: 00007f445759df99 [ 96.569454][ T1850] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4457825fa8 [ 96.569467][ T1850] RBP: 00007f4457825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 96.569479][ T1850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.569491][ T1850] R13: 00007f4457826038 R14: 00007ffe190a1a80 R15: 00007ffe190a1b68 [ 96.569507][ T1850] [ 97.584736][ T1849] BUG: KASAN: null-ptr-deref in _raw_spin_lock_irq+0x86/0x120 [ 97.592193][ T1849] Write of size 4 at addr 00000000000001b0 by task syz.4.697/1849 [ 97.599988][ T1849] [ 97.602309][ T1849] CPU: 1 UID: 0 PID: 1849 Comm: syz.4.697 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 97.602329][ T1849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.602337][ T1849] Call Trace: [ 97.602343][ T1849] [ 97.602350][ T1849] __dump_stack+0x21/0x30 [ 97.602370][ T1849] dump_stack_lvl+0x140/0x1c0 [ 97.602386][ T1849] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.602409][ T1849] print_report+0x3d/0x70 [ 97.602425][ T1849] kasan_report+0x162/0x1a0 [ 97.602440][ T1849] ? _raw_spin_lock_irq+0x86/0x120 [ 97.602455][ T1849] ? _raw_spin_lock_irq+0x86/0x120 [ 97.602468][ T1849] kasan_check_range+0x25a/0x2b0 [ 97.602483][ T1849] __kasan_check_write+0x18/0x20 [ 97.602495][ T1849] _raw_spin_lock_irq+0x86/0x120 [ 97.602508][ T1849] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 97.602522][ T1849] ? dump_stack_lvl+0x16b/0x1c0 [ 97.602538][ T1849] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.602554][ T1849] gs_close+0xb1/0x9c0 [ 97.602569][ T1849] ? __cfi__raw_spin_lock+0x10/0x10 [ 97.602582][ T1849] ? _raw_spin_lock+0x92/0x120 [ 97.602595][ T1849] ? __cfi__raw_spin_lock+0x10/0x10 [ 97.602608][ T1849] ? __cfi_gs_close+0x10/0x10 [ 97.602623][ T1849] ? mutex_lock+0x97/0x1d0 [ 97.602638][ T1849] ? _raw_spin_unlock+0x45/0x60 [ 97.602651][ T1849] ? fasync_remove_entry+0x19a/0x1d0 [ 97.602666][ T1849] ? fasync_helper+0x9a/0x160 [ 97.602679][ T1849] ? __cfi_gs_close+0x10/0x10 [ 97.602694][ T1849] tty_release+0x32f/0x11e0 [ 97.602706][ T1849] ? __cfi_mutex_unlock+0x10/0x10 [ 97.602723][ T1849] tty_open+0x687/0x10b0 [ 97.602738][ T1849] ? __cfi_tty_open+0x10/0x10 [ 97.602752][ T1849] ? selinux_file_open+0x46c/0x630 [ 97.602765][ T1849] chrdev_open+0x4eb/0x610 [ 97.602779][ T1849] ? __cfi_chrdev_open+0x10/0x10 [ 97.602792][ T1849] ? bpf_lsm_file_open+0xd/0x20 [ 97.602809][ T1849] ? __cfi_chrdev_open+0x10/0x10 [ 97.602822][ T1849] do_dentry_open+0x97c/0x1510 [ 97.602853][ T1849] vfs_open+0x86/0x240 [ 97.602869][ T1849] ? __cfi_vfs_open+0x10/0x10 [ 97.602884][ T1849] ? may_open+0x352/0x430 [ 97.602900][ T1849] path_openat+0x2c49/0x35a0 [ 97.602919][ T1849] ? kasan_save_alloc_info+0x3a/0x50 [ 97.602936][ T1849] ? getname+0x1b/0x30 [ 97.602948][ T1849] ? x64_sys_call+0xe69/0x2ee0 [ 97.602959][ T1849] ? do_syscall_64+0x57/0xf0 [ 97.602973][ T1849] ? do_filp_open+0x440/0x440 [ 97.602989][ T1849] do_filp_open+0x1f2/0x440 [ 97.603005][ T1849] ? __cfi_do_filp_open+0x10/0x10 [ 97.603022][ T1849] ? alloc_fd+0x4c1/0x570 [ 97.603036][ T1849] do_sys_openat2+0x134/0x1d0 [ 97.603052][ T1849] ? putname+0x113/0x150 [ 97.603065][ T1849] ? do_sys_open+0x100/0x100 [ 97.603081][ T1849] __x64_sys_openat+0x13a/0x170 [ 97.603098][ T1849] x64_sys_call+0xe69/0x2ee0 [ 97.603109][ T1849] do_syscall_64+0x57/0xf0 [ 97.603122][ T1849] ? clear_bhb_loop+0x50/0xa0 [ 97.603138][ T1849] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.603153][ T1849] RIP: 0033:0x7fa7da59df99 [ 97.603165][ T1849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.603176][ T1849] RSP: 002b:00007fa7db3f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.603191][ T1849] RAX: ffffffffffffffda RBX: 00007fa7da825fa0 RCX: 00007fa7da59df99 [ 97.603201][ T1849] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 97.603211][ T1849] RBP: 00007fa7da634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 97.603219][ T1849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.603228][ T1849] R13: 00007fa7da826038 R14: 00007fa7da825fa0 R15: 00007ffcd56320d8 [ 97.603238][ T1849] [ 97.603243][ T1849] ================================================================== [ 97.969992][ T1849] Disabling lock debugging due to kernel taint [ 97.976224][ T1849] BUG: kernel NULL pointer dereference, address: 00000000000001b0 [ 97.984135][ T1849] #PF: supervisor write access in kernel mode [ 97.990289][ T1849] #PF: error_code(0x0002) - not-present page [ 97.996266][ T1849] PGD 8000000119022067 P4D 8000000119022067 PUD 0 [ 98.002786][ T1849] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 98.008872][ T1849] CPU: 1 UID: 0 PID: 1849 Comm: syz.4.697 Tainted: G B syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 98.021899][ T1849] Tainted: [B]=BAD_PAGE [ 98.026053][ T1849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.036111][ T1849] RIP: 0010:_raw_spin_lock_irq+0x9c/0x120 [ 98.041846][ T1849] Code: 04 04 c7 44 24 20 00 00 00 00 be 04 00 00 00 e8 8a 69 3a fc 4c 89 f7 be 04 00 00 00 e8 7d 69 3a fc 8b 44 24 20 b9 01 00 00 00 0f b1 0b 75 38 43 c6 44 3c 04 f8 48 c7 04 24 0e 36 e0 45 4b c7 [ 98.061481][ T1849] RSP: 0018:ffffc90006f9f400 EFLAGS: 00010097 [ 98.067644][ T1849] RAX: 0000000000000000 RBX: 00000000000001b0 RCX: 0000000000000001 [ 98.075624][ T1849] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90006f9f420 [ 98.083862][ T1849] RBP: ffffc90006f9f490 R08: 0000000000000003 R09: 0000000000000004 [ 98.091842][ T1849] R10: dffffc0000000000 R11: fffff52000df3e84 R12: 1ffff92000df3e80 [ 98.099816][ T1849] R13: dffffc0000000000 R14: ffffc90006f9f420 R15: dffffc0000000000 [ 98.107819][ T1849] FS: 00007fa7db3f86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 98.117016][ T1849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.123601][ T1849] CR2: 00000000000001b0 CR3: 0000000135718000 CR4: 00000000003526b0 [ 98.131576][ T1849] Call Trace: [ 98.134878][ T1849] [ 98.137816][ T1849] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 98.143395][ T1849] ? dump_stack_lvl+0x16b/0x1c0 [ 98.148256][ T1849] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.154431][ T1849] gs_close+0xb1/0x9c0 [ 98.158532][ T1849] ? __cfi__raw_spin_lock+0x10/0x10 [ 98.163745][ T1849] ? _raw_spin_lock+0x92/0x120 [ 98.168524][ T1849] ? __cfi__raw_spin_lock+0x10/0x10 [ 98.173732][ T1849] ? __cfi_gs_close+0x10/0x10 [ 98.178418][ T1849] ? mutex_lock+0x97/0x1d0 [ 98.182932][ T1849] ? _raw_spin_unlock+0x45/0x60 [ 98.187886][ T1849] ? fasync_remove_entry+0x19a/0x1d0 [ 98.193444][ T1849] ? fasync_helper+0x9a/0x160 [ 98.198143][ T1849] ? __cfi_gs_close+0x10/0x10 [ 98.202845][ T1849] tty_release+0x32f/0x11e0 [ 98.207355][ T1849] ? __cfi_mutex_unlock+0x10/0x10 [ 98.212387][ T1849] tty_open+0x687/0x10b0 [ 98.216723][ T1849] ? __cfi_tty_open+0x10/0x10 [ 98.221403][ T1849] ? selinux_file_open+0x46c/0x630 [ 98.226625][ T1849] chrdev_open+0x4eb/0x610 [ 98.231135][ T1849] ? __cfi_chrdev_open+0x10/0x10 [ 98.236108][ T1849] ? bpf_lsm_file_open+0xd/0x20 [ 98.241335][ T1849] ? __cfi_chrdev_open+0x10/0x10 [ 98.246288][ T1849] do_dentry_open+0x97c/0x1510 [ 98.251062][ T1849] vfs_open+0x86/0x240 [ 98.255346][ T1849] ? __cfi_vfs_open+0x10/0x10 [ 98.260567][ T1849] ? may_open+0x352/0x430 [ 98.265015][ T1849] path_openat+0x2c49/0x35a0 [ 98.269639][ T1849] ? kasan_save_alloc_info+0x3a/0x50 [ 98.274938][ T1849] ? getname+0x1b/0x30 [ 98.279016][ T1849] ? x64_sys_call+0xe69/0x2ee0 [ 98.283785][ T1849] ? do_syscall_64+0x57/0xf0 [ 98.288385][ T1849] ? do_filp_open+0x440/0x440 [ 98.293070][ T1849] do_filp_open+0x1f2/0x440 [ 98.297584][ T1849] ? __cfi_do_filp_open+0x10/0x10 [ 98.302703][ T1849] ? alloc_fd+0x4c1/0x570 [ 98.307039][ T1849] do_sys_openat2+0x134/0x1d0 [ 98.311727][ T1849] ? putname+0x113/0x150 [ 98.315975][ T1849] ? do_sys_open+0x100/0x100 [ 98.320578][ T1849] __x64_sys_openat+0x13a/0x170 [ 98.325532][ T1849] x64_sys_call+0xe69/0x2ee0 [ 98.330134][ T1849] do_syscall_64+0x57/0xf0 [ 98.334558][ T1849] ? clear_bhb_loop+0x50/0xa0 [ 98.339248][ T1849] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.345154][ T1849] RIP: 0033:0x7fa7da59df99 [ 98.349581][ T1849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.369451][ T1849] RSP: 002b:00007fa7db3f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 98.377873][ T1849] RAX: ffffffffffffffda RBX: 00007fa7da825fa0 RCX: 00007fa7da59df99 [ 98.385851][ T1849] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 98.393830][ T1849] RBP: 00007fa7da634ec4 R08: 0000000000000000 R09: 0000000000000000 [ 98.401806][ T1849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.410043][ T1849] R13: 00007fa7da826038 R14: 00007fa7da825fa0 R15: 00007ffcd56320d8 [ 98.418230][ T1849] [ 98.421265][ T1849] Modules linked in: [ 98.425171][ T1849] CR2: 00000000000001b0 [ 98.429373][ T1849] ---[ end trace 0000000000000000 ]--- [ 98.434843][ T1849] RIP: 0010:_raw_spin_lock_irq+0x9c/0x120 [ 98.440591][ T1849] Code: 04 04 c7 44 24 20 00 00 00 00 be 04 00 00 00 e8 8a 69 3a fc 4c 89 f7 be 04 00 00 00 e8 7d 69 3a fc 8b 44 24 20 b9 01 00 00 00 0f b1 0b 75 38 43 c6 44 3c 04 f8 48 c7 04 24 0e 36 e0 45 4b c7 [ 98.460336][ T1849] RSP: 0018:ffffc90006f9f400 EFLAGS: 00010097 [ 98.466415][ T1849] RAX: 0000000000000000 RBX: 00000000000001b0 RCX: 0000000000000001 [ 98.474482][ T1849] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90006f9f420 [ 98.482463][ T1849] RBP: ffffc90006f9f490 R08: 0000000000000003 R09: 0000000000000004 [ 98.490448][ T1849] R10: dffffc0000000000 R11: fffff52000df3e84 R12: 1ffff92000df3e80 [ 98.498440][ T1849] R13: dffffc0000000000 R14: ffffc90006f9f420 R15: dffffc0000000000 [ 98.506444][ T1849] FS: 00007fa7db3f86c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 98.515384][ T1849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.522360][ T1849] CR2: 00000000000001b0 CR3: 0000000135718000 CR4: 00000000003526b0 [ 98.530434][ T1849] Kernel panic - not syncing: Fatal exception [ 98.536810][ T1849] Kernel Offset: disabled [ 98.541148][ T1849] Rebooting in 86400 seconds..