Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. 2026/09/06 08:02:33 parsed 1 programs 2026/09/06 08:02:33 serving rpc on tcp://41955 [ 85.599526][ T4283] cgroup: Unknown subsys name 'net' [ 85.736875][ T4283] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.672317][ T126] cfg80211: failed to load regulatory.db [ 87.646454][ T4283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 90.315660][ T4319] chnl_net:caif_netlink_parms(): no params data found [ 90.378663][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.386643][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.394851][ T4319] device bridge_slave_0 entered promiscuous mode [ 90.404404][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.411841][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.419678][ T4319] device bridge_slave_1 entered promiscuous mode [ 90.445322][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.456456][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.485995][ T4319] team0: Port device team_slave_0 added [ 90.493500][ T4319] team0: Port device team_slave_1 added [ 90.513199][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.520340][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.546391][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.559449][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.566711][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.592895][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.637419][ T4319] device hsr_slave_0 entered promiscuous mode [ 90.644897][ T4319] device hsr_slave_1 entered promiscuous mode [ 90.760692][ T4319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.776742][ T4319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.804185][ T4319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.814577][ T4319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.838938][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.846277][ T4319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.854290][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.861479][ T4319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.873910][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.883342][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.937672][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.951461][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.963135][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.974422][ T4319] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.991815][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.001190][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.009652][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.016844][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.033752][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.042721][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.052223][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.059311][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.071688][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.087264][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.099618][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.110518][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.121953][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.138820][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.147578][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.159109][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.168829][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.182034][ T4319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.194104][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.208161][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.218187][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.415867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.425409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.437780][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.461780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.472614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.491728][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.500556][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.509707][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.518821][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.532108][ T4319] device veth0_vlan entered promiscuous mode [ 91.547628][ T4319] device veth1_vlan entered promiscuous mode [ 91.574848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.583287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.591563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.600307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.613190][ T4319] device veth0_macvtap entered promiscuous mode [ 91.623100][ T4319] device veth1_macvtap entered promiscuous mode [ 91.639300][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.647319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.657313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.666517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.675939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.687701][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.695381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.704750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.717744][ T4319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.726951][ T4319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.735746][ T4319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.744840][ T4319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.879661][ T4331] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.149911][ T4362] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.159663][ T4362] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.168642][ T4362] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.177072][ T4362] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.185313][ T4362] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.192686][ T4362] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.424921][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.433568][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.449053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.469072][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.477766][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.491507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/09/06 08:02:44 executed programs: 0 [ 94.000624][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.008495][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.016991][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.025495][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.034108][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.041832][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.168932][ T4374] chnl_net:caif_netlink_parms(): no params data found [ 94.219985][ T4374] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.228255][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.237147][ T4374] device bridge_slave_0 entered promiscuous mode [ 94.245838][ T4374] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.253208][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.261407][ T4374] device bridge_slave_1 entered promiscuous mode [ 94.284294][ T4374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.296693][ T4374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.321987][ T4374] team0: Port device team_slave_0 added [ 94.329573][ T4374] team0: Port device team_slave_1 added [ 94.354139][ T4374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.361193][ T4374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.388101][ T4374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.407493][ T4331] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.421000][ T4374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.427963][ T4374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.455979][ T4374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.491192][ T4374] device hsr_slave_0 entered promiscuous mode [ 94.497986][ T4374] device hsr_slave_1 entered promiscuous mode [ 94.504935][ T4374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.518144][ T4374] Cannot create hsr debugfs directory [ 96.111102][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 96.899688][ T4331] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.992462][ T4331] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.888382][ T4374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.907073][ T4331] device hsr_slave_0 left promiscuous mode [ 97.914439][ T4331] device hsr_slave_1 left promiscuous mode [ 97.924563][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.932882][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.944609][ T4331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.952173][ T4331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.960061][ T4331] device bridge_slave_1 left promiscuous mode [ 97.969557][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.985334][ T4331] device bridge_slave_0 left promiscuous mode [ 97.991717][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.023802][ T4331] device veth1_macvtap left promiscuous mode [ 98.031008][ T4331] device veth0_macvtap left promiscuous mode [ 98.037202][ T4331] device veth1_vlan left promiscuous mode [ 98.046149][ T4331] device veth0_vlan left promiscuous mode [ 98.191892][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 98.455637][ T4331] team0 (unregistering): Port device team_slave_1 removed [ 98.483634][ T4331] team0 (unregistering): Port device team_slave_0 removed [ 98.510924][ T4331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.540717][ T4331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.728804][ T4331] bond0 (unregistering): Released all slaves [ 98.811091][ T4374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.821805][ T4374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.833234][ T4374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.902945][ T4374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.916439][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.925175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.948123][ T4374] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.958889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.968298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.976995][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.984218][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.993739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.018360][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.028420][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.038233][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.045610][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.053633][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.066842][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.092799][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.103279][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.112557][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.129274][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.138107][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.146649][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.155150][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.164757][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.176325][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.191625][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.429457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.437017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.459245][ T4374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.484461][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.497516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.528182][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.537663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.550484][ T4374] device veth0_vlan entered promiscuous mode [ 99.558371][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.575661][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.599017][ T4374] device veth1_vlan entered promiscuous mode [ 99.625913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.634562][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.643758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.652393][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.663671][ T4374] device veth0_macvtap entered promiscuous mode [ 99.673261][ T4374] device veth1_macvtap entered promiscuous mode [ 99.688781][ T4374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.697271][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.706404][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.714841][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.725287][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.738303][ T4374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.746638][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.755534][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.766834][ T4374] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.776098][ T4374] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.785347][ T4374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.794607][ T4374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.847322][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.859540][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.868958][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/09/06 08:02:50 executed programs: 2 [ 99.890199][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.898134][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.906273][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.986110][ T4428] smpboot: CPU 1 is now offline [ 100.023689][ T4429] FAULT_INJECTION: forcing a failure. [ 100.023689][ T4429] name failslab, interval 1, probability 0, space 0, times 1 [ 100.048813][ T4429] CPU: 0 PID: 4429 Comm: syz.0.17 Not tainted syzkaller #0 [ 100.056066][ T4429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.066148][ T4429] Call Trace: [ 100.069439][ T4429] [ 100.072382][ T4429] dump_stack_lvl+0x188/0x24e [ 100.077096][ T4429] ? show_regs_print_info+0x12/0x12 [ 100.082317][ T4429] ? load_image+0x410/0x410 [ 100.086841][ T4429] ? __lock_acquire+0x7c40/0x7c40 [ 100.091887][ T4429] ? memset+0x1e/0x40 [ 100.095881][ T4429] should_fail_ex+0x390/0x4c0 [ 100.100579][ T4429] should_failslab+0x5/0x20 [ 100.105088][ T4429] slab_pre_alloc_hook+0x59/0x300 [ 100.110128][ T4429] kmem_cache_alloc+0x56/0x2f0 [ 100.114903][ T4429] ? security_inode_alloc+0x30/0x110 [ 100.120202][ T4429] security_inode_alloc+0x30/0x110 [ 100.125348][ T4429] inode_init_always+0x910/0xc90 [ 100.130320][ T4429] new_inode_pseudo+0x91/0x1c0 [ 100.135101][ T4429] new_inode+0x25/0x1d0 [ 100.139291][ T4429] ? start_creating+0x1f5/0x310 [ 100.144165][ T4429] __debugfs_create_file+0x147/0x500 [ 100.149482][ T4429] ? blk_subbuf_start_callback+0xa0/0xa0 [ 100.155147][ T4429] relay_open_buf+0x5a1/0xd00 [ 100.159845][ T4429] relay_open+0x3d8/0x930 [ 100.164190][ T4429] do_blk_trace_setup+0x56c/0x9e0 [ 100.169230][ T4429] blk_trace_ioctl+0x3f8/0x580 [ 100.174008][ T4429] ? __blk_trace_startstop+0x630/0x630 [ 100.179482][ T4429] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 100.184979][ T4429] blkdev_ioctl+0x1b2/0x740 [ 100.189500][ T4429] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 100.194973][ T4429] ? lock_chain_count+0x20/0x20 [ 100.199840][ T4429] ? bpf_lsm_file_ioctl+0x5/0x10 [ 100.204790][ T4429] ? security_file_ioctl+0x7c/0xa0 [ 100.209908][ T4429] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 100.215382][ T4429] __se_sys_ioctl+0xfa/0x170 [ 100.220064][ T4429] do_syscall_64+0x4c/0xa0 [ 100.224539][ T4429] ? clear_bhb_loop+0x60/0xb0 [ 100.229245][ T4429] ? clear_bhb_loop+0x60/0xb0 [ 100.233948][ T4429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.239860][ T4429] RIP: 0033:0x7fac2fd9e159 [ 100.244396][ T4429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.264018][ T4429] RSP: 002b:00007fff8ed78f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.272527][ T4429] RAX: ffffffffffffffda RBX: 00007fac30025fa0 RCX: 00007fac2fd9e159 [ 100.280698][ T4429] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000005 [ 100.288678][ T4429] RBP: 00007fac2fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 100.296654][ T4429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.304635][ T4429] R13: 00007fac30025fac R14: 00007fac30025fa0 R15: 00007fac30025fa0 [ 100.312633][ T4429] [ 100.321513][ T49] Bluetooth: hci0: command 0x040f tx timeout [ 100.335159][ T4429] debugfs: out of free dentries, can not create file 'trace0' [ 100.424558][ T4430] FAULT_INJECTION: forcing a failure. [ 100.424558][ T4430] name failslab, interval 1, probability 0, space 0, times 0 [ 100.450495][ T4430] CPU: 0 PID: 4430 Comm: syz.0.18 Not tainted syzkaller #0 [ 100.457748][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.467809][ T4430] Call Trace: [ 100.471096][ T4430] [ 100.474045][ T4430] dump_stack_lvl+0x188/0x24e [ 100.478748][ T4430] ? show_regs_print_info+0x12/0x12 [ 100.484001][ T4430] ? load_image+0x410/0x410 [ 100.488554][ T4430] ? __might_sleep+0xd0/0xd0 [ 100.493222][ T4430] ? __lock_acquire+0x7c40/0x7c40 [ 100.498277][ T4430] should_fail_ex+0x390/0x4c0 [ 100.502985][ T4430] should_failslab+0x5/0x20 [ 100.507500][ T4430] slab_pre_alloc_hook+0x59/0x300 [ 100.512542][ T4430] ? tracepoint_add_func+0x2f1/0xa10 [ 100.517846][ T4430] __kmem_cache_alloc_node+0x4f/0x270 [ 100.523230][ T4430] ? tracepoint_add_func+0x2f1/0xa10 [ 100.528546][ T4430] __kmalloc+0xa3/0x240 [ 100.532741][ T4430] ? blk_add_trace_bio_complete+0x60/0x60 [ 100.538478][ T4430] tracepoint_add_func+0x2f1/0xa10 [ 100.543614][ T4430] ? blk_add_trace_bio_complete+0x60/0x60 [ 100.549357][ T4430] tracepoint_probe_register+0x5a/0x90 [ 100.554834][ T4430] ? blk_add_trace_bio_complete+0x60/0x60 [ 100.560575][ T4430] get_probe_ref+0x130/0x3e0 [ 100.565184][ T4430] do_blk_trace_setup+0x7fb/0x9e0 [ 100.570235][ T4430] blk_trace_ioctl+0x3f8/0x580 [ 100.575015][ T4430] ? __blk_trace_startstop+0x630/0x630 [ 100.580491][ T4430] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 100.586078][ T4430] blkdev_ioctl+0x1b2/0x740 [ 100.590601][ T4430] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 100.596080][ T4430] ? lock_chain_count+0x20/0x20 [ 100.600986][ T4430] ? bpf_lsm_file_ioctl+0x5/0x10 [ 100.605937][ T4430] ? security_file_ioctl+0x7c/0xa0 [ 100.611054][ T4430] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 100.616528][ T4430] __se_sys_ioctl+0xfa/0x170 [ 100.621137][ T4430] do_syscall_64+0x4c/0xa0 [ 100.625571][ T4430] ? clear_bhb_loop+0x60/0xb0 [ 100.630302][ T4430] ? clear_bhb_loop+0x60/0xb0 [ 100.634994][ T4430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.640905][ T4430] RIP: 0033:0x7fac2fd9e159 [ 100.645346][ T4430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.664976][ T4430] RSP: 002b:00007fff8ed78f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.673418][ T4430] RAX: ffffffffffffffda RBX: 00007fac30025fa0 RCX: 00007fac2fd9e159 [ 100.681405][ T4430] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000005 [ 100.689391][ T4430] RBP: 00007fac2fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 100.697371][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.705352][ T4430] R13: 00007fac30025fac R14: 00007fac30025fa0 R15: 00007fac30025fa0 [ 100.713359][ T4430] [ 100.736543][ T4430] ------------[ cut here ]------------ [ 100.742519][ T4430] WARNING: CPU: 0 PID: 4430 at kernel/trace/blktrace.c:1110 get_probe_ref+0x358/0x3e0 [ 100.752154][ T4430] Modules linked in: [ 100.756060][ T4430] CPU: 0 PID: 4430 Comm: syz.0.18 Not tainted syzkaller #0 [ 100.763315][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.773422][ T4430] RIP: 0010:get_probe_ref+0x358/0x3e0 [ 100.778833][ T4430] Code: ff e8 8c 27 f9 ff 0f 0b e9 86 fd ff ff e8 80 27 f9 ff 0f 0b e9 a7 fd ff ff e8 74 27 f9 ff 0f 0b e9 c8 fd ff ff e8 68 27 f9 ff <0f> 0b e9 e9 fd ff ff e8 5c 27 f9 ff 0f 0b e9 0a fe ff ff e8 50 27 [ 100.798497][ T4430] RSP: 0018:ffffc90003397b88 EFLAGS: 00010293 [ 100.804600][ T4430] RAX: ffffffff81891a28 RBX: 00000000fffffff4 RCX: ffff88802b5fda00 [ 100.812619][ T4430] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 100.820647][ T4430] RBP: 1ffff1100387fb86 R08: ffffc90003397ac7 R09: 1ffff92000672f58 [ 100.828629][ T4430] R10: dffffc0000000000 R11: fffff52000672f59 R12: 0000000000000000 [ 100.836648][ T4430] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88801c3fdc00 [ 100.844672][ T4430] FS: 0000555578eff500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 100.853726][ T4430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 100.860349][ T4430] CR2: 0000200000003ac0 CR3: 000000007dd35000 CR4: 00000000003506f0 [ 100.868342][ T4430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 100.876434][ T4430] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 100.884438][ T4430] Call Trace: [ 100.887728][ T4430] [ 100.890692][ T4430] do_blk_trace_setup+0x7fb/0x9e0 [ 100.895742][ T4430] blk_trace_ioctl+0x3f8/0x580 [ 100.900550][ T4430] ? __blk_trace_startstop+0x630/0x630 [ 100.906050][ T4430] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 100.911583][ T4430] blkdev_ioctl+0x1b2/0x740 [ 100.916106][ T4430] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 100.921635][ T4430] ? lock_chain_count+0x20/0x20 [ 100.926554][ T4430] ? bpf_lsm_file_ioctl+0x5/0x10 [ 100.931566][ T4430] ? security_file_ioctl+0x7c/0xa0 [ 100.936694][ T4430] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 100.942204][ T4430] __se_sys_ioctl+0xfa/0x170 [ 100.946835][ T4430] do_syscall_64+0x4c/0xa0 [ 100.951323][ T4430] ? clear_bhb_loop+0x60/0xb0 [ 100.956019][ T4430] ? clear_bhb_loop+0x60/0xb0 [ 100.960744][ T4430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.966660][ T4430] RIP: 0033:0x7fac2fd9e159 [ 100.971131][ T4430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.990807][ T4430] RSP: 002b:00007fff8ed78f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.999250][ T4430] RAX: ffffffffffffffda RBX: 00007fac30025fa0 RCX: 00007fac2fd9e159 [ 101.007293][ T4430] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000005 [ 101.015297][ T4430] RBP: 00007fac2fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 101.023322][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.031325][ T4430] R13: 00007fac30025fac R14: 00007fac30025fa0 R15: 00007fac30025fa0 [ 101.039316][ T4430] [ 101.042560][ T4430] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.049843][ T4430] CPU: 0 PID: 4430 Comm: syz.0.18 Not tainted syzkaller #0 [ 101.057042][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.067128][ T4430] Call Trace: [ 101.070410][ T4430] [ 101.073365][ T4430] dump_stack_lvl+0x188/0x24e [ 101.078061][ T4430] ? memcpy+0x3c/0x60 [ 101.082139][ T4430] ? show_regs_print_info+0x12/0x12 [ 101.087351][ T4430] ? load_image+0x410/0x410 [ 101.091956][ T4430] panic+0x2d3/0x710 [ 101.095900][ T4430] ? bpf_jit_dump+0xd0/0xd0 [ 101.100427][ T4430] __warn+0x2f8/0x4f0 [ 101.104442][ T4430] ? get_probe_ref+0x358/0x3e0 [ 101.109232][ T4430] ? get_probe_ref+0x358/0x3e0 [ 101.114010][ T4430] report_bug+0x2ba/0x4f0 [ 101.118370][ T4430] ? get_probe_ref+0x358/0x3e0 [ 101.123153][ T4430] handle_bug+0x3a/0x70 [ 101.127319][ T4430] exc_invalid_op+0x16/0x40 [ 101.131836][ T4430] asm_exc_invalid_op+0x16/0x20 [ 101.136695][ T4430] RIP: 0010:get_probe_ref+0x358/0x3e0 [ 101.142078][ T4430] Code: ff e8 8c 27 f9 ff 0f 0b e9 86 fd ff ff e8 80 27 f9 ff 0f 0b e9 a7 fd ff ff e8 74 27 f9 ff 0f 0b e9 c8 fd ff ff e8 68 27 f9 ff <0f> 0b e9 e9 fd ff ff e8 5c 27 f9 ff 0f 0b e9 0a fe ff ff e8 50 27 [ 101.161697][ T4430] RSP: 0018:ffffc90003397b88 EFLAGS: 00010293 [ 101.167784][ T4430] RAX: ffffffff81891a28 RBX: 00000000fffffff4 RCX: ffff88802b5fda00 [ 101.175759][ T4430] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 101.183818][ T4430] RBP: 1ffff1100387fb86 R08: ffffc90003397ac7 R09: 1ffff92000672f58 [ 101.191809][ T4430] R10: dffffc0000000000 R11: fffff52000672f59 R12: 0000000000000000 [ 101.199787][ T4430] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88801c3fdc00 [ 101.207767][ T4430] ? get_probe_ref+0x358/0x3e0 [ 101.212559][ T4430] ? get_probe_ref+0x358/0x3e0 [ 101.217356][ T4430] do_blk_trace_setup+0x7fb/0x9e0 [ 101.222495][ T4430] blk_trace_ioctl+0x3f8/0x580 [ 101.227273][ T4430] ? __blk_trace_startstop+0x630/0x630 [ 101.232806][ T4430] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 101.238298][ T4430] blkdev_ioctl+0x1b2/0x740 [ 101.242815][ T4430] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 101.248300][ T4430] ? lock_chain_count+0x20/0x20 [ 101.253188][ T4430] ? bpf_lsm_file_ioctl+0x5/0x10 [ 101.258160][ T4430] ? security_file_ioctl+0x7c/0xa0 [ 101.263306][ T4430] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 101.268781][ T4430] __se_sys_ioctl+0xfa/0x170 [ 101.273390][ T4430] do_syscall_64+0x4c/0xa0 [ 101.277822][ T4430] ? clear_bhb_loop+0x60/0xb0 [ 101.282515][ T4430] ? clear_bhb_loop+0x60/0xb0 [ 101.287222][ T4430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.293150][ T4430] RIP: 0033:0x7fac2fd9e159 [ 101.297574][ T4430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.317624][ T4430] RSP: 002b:00007fff8ed78f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.326064][ T4430] RAX: ffffffffffffffda RBX: 00007fac30025fa0 RCX: 00007fac2fd9e159 [ 101.334044][ T4430] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000005 [ 101.342019][ T4430] RBP: 00007fac2fe35024 R08: 0000000000000000 R09: 0000000000000000 [ 101.349996][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.357967][ T4430] R13: 00007fac30025fac R14: 00007fac30025fa0 R15: 00007fac30025fa0 [ 101.365970][ T4430] [ 101.369059][ T4430] Kernel Offset: disabled [ 101.373448][ T4430] Rebooting in 86400 seconds..