no interfaces have a carrier [ 55.752931][ T3933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.763680][ T3933] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. 2026/09/06 15:00:02 parsed 1 programs 2026/09/06 15:00:02 serving rpc on tcp://33079 syzkaller login: [ 86.186609][ T4282] cgroup: Unknown subsys name 'net' [ 86.305928][ T4282] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 88.051839][ T4282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 90.389199][ T4308] chnl_net:caif_netlink_parms(): no params data found [ 90.459788][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.467613][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.476506][ T4308] device bridge_slave_0 entered promiscuous mode [ 90.486647][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.494343][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.502467][ T4308] device bridge_slave_1 entered promiscuous mode [ 90.532903][ T4308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.546200][ T4308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.574081][ T4308] team0: Port device team_slave_0 added [ 90.581773][ T4308] team0: Port device team_slave_1 added [ 90.601935][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.609069][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.635180][ T4308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.647751][ T4308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.655007][ T4308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.681341][ T4308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.716551][ T4308] device hsr_slave_0 entered promiscuous mode [ 90.723728][ T4308] device hsr_slave_1 entered promiscuous mode [ 90.856716][ T4308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.876826][ T4308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.887816][ T4308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.897560][ T4308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.931866][ T4308] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.939219][ T4308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.947185][ T4308] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.954905][ T4308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.017555][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.031512][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.045722][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.054690][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.063828][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 91.084229][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.097118][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.107700][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.115187][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.127638][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.137129][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.144509][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.171099][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.181637][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.194760][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.214619][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.227039][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.238868][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.450762][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.458986][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.480005][ T4308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.503634][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.517625][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.543647][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.559768][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.573336][ T4308] device veth0_vlan entered promiscuous mode [ 91.581190][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.591414][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.605432][ T4308] device veth1_vlan entered promiscuous mode [ 91.627407][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.637601][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.647611][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.656708][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.668853][ T4308] device veth0_macvtap entered promiscuous mode [ 91.681368][ T4308] device veth1_macvtap entered promiscuous mode [ 91.698435][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.706149][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.715160][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.724162][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.733394][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.745950][ T4308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.754732][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.764540][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.776538][ T4308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.786277][ T4308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.795988][ T4308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.805429][ T4308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.952033][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.089835][ T14] cfg80211: failed to load regulatory.db [ 92.334758][ T4329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.343935][ T4329] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.352190][ T4329] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.362299][ T4329] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.372041][ T4329] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.379727][ T4329] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.657495][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.669420][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.680846][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.702504][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.710490][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.721546][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.436950][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/09/06 15:00:13 executed programs: 0 [ 94.593105][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.601913][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.611259][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.620136][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.629601][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.637588][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.775309][ T4375] chnl_net:caif_netlink_parms(): no params data found [ 94.828882][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.836406][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.844777][ T4375] device bridge_slave_0 entered promiscuous mode [ 94.853372][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.860679][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.869522][ T4375] device bridge_slave_1 entered promiscuous mode [ 94.895539][ T4375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.908297][ T4375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.934757][ T4375] team0: Port device team_slave_0 added [ 94.942901][ T4375] team0: Port device team_slave_1 added [ 94.962582][ T4375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.969685][ T4375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.996135][ T4375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.008505][ T4375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.015521][ T4375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.042083][ T4375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.077130][ T4375] device hsr_slave_0 entered promiscuous mode [ 95.085692][ T4375] device hsr_slave_1 entered promiscuous mode [ 95.092723][ T4375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.100864][ T4375] Cannot create hsr debugfs directory [ 96.719565][ T4329] Bluetooth: hci0: command 0x0409 tx timeout [ 96.989498][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.053384][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.977341][ T11] device hsr_slave_0 left promiscuous mode [ 97.988299][ T11] device hsr_slave_1 left promiscuous mode [ 98.027334][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.038125][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.062753][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.081460][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.117274][ T11] device bridge_slave_1 left promiscuous mode [ 98.139684][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.163049][ T11] device bridge_slave_0 left promiscuous mode [ 98.188499][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.232001][ T11] device veth1_macvtap left promiscuous mode [ 98.248277][ T11] device veth0_macvtap left promiscuous mode [ 98.254818][ T11] device veth1_vlan left promiscuous mode [ 98.268319][ T11] device veth0_vlan left promiscuous mode [ 98.727654][ T11] team0 (unregistering): Port device team_slave_1 removed [ 98.759235][ T11] team0 (unregistering): Port device team_slave_0 removed [ 98.787181][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.798223][ T4329] Bluetooth: hci0: command 0x041b tx timeout [ 98.824082][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.023863][ T11] bond0 (unregistering): Released all slaves [ 99.101126][ T4375] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.112052][ T4375] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.130955][ T4375] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.141025][ T4375] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.225569][ T4375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.240578][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.249661][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.260728][ T4375] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.275043][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.285506][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.295185][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.302571][ T4336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.311790][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.322815][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.332146][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.340945][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.348103][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.366781][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.380102][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.391835][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.402596][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.419576][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.440443][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.450821][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.467360][ T4375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.478862][ T4375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.493777][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.502727][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.512004][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.521871][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.530722][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.788997][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.796566][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.815376][ T4375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.845527][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.863286][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.911767][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.927332][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.938256][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.946318][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.962700][ T4375] device veth0_vlan entered promiscuous mode [ 99.975396][ T4375] device veth1_vlan entered promiscuous mode [ 100.002112][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.010740][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.019932][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.028829][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.039901][ T4375] device veth0_macvtap entered promiscuous mode [ 100.050240][ T4375] device veth1_macvtap entered promiscuous mode [ 100.066139][ T4375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.073684][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.084196][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.093030][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.102287][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.115419][ T4375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.124356][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.133173][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.144553][ T4375] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.153520][ T4375] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.163155][ T4375] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.172010][ T4375] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.225761][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.241474][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.259017][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/09/06 15:00:19 executed programs: 2 [ 100.275368][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.283912][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.292576][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.377509][ T14] smpboot: CPU 1 is now offline [ 100.404696][ T4436] FAULT_INJECTION: forcing a failure. [ 100.404696][ T4436] name failslab, interval 1, probability 0, space 0, times 1 [ 100.439330][ T4436] CPU: 0 PID: 4436 Comm: syz.0.17 Not tainted syzkaller #0 [ 100.446666][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.456744][ T4436] Call Trace: [ 100.460034][ T4436] [ 100.462981][ T4436] dump_stack_lvl+0x188/0x24e [ 100.467697][ T4436] ? show_regs_print_info+0x12/0x12 [ 100.473037][ T4436] ? load_image+0x410/0x410 [ 100.477654][ T4436] ? __lock_acquire+0x7c40/0x7c40 [ 100.482728][ T4436] ? memset+0x1e/0x40 [ 100.486724][ T4436] should_fail_ex+0x390/0x4c0 [ 100.491430][ T4436] should_failslab+0x5/0x20 [ 100.495952][ T4436] slab_pre_alloc_hook+0x59/0x300 [ 100.501010][ T4436] kmem_cache_alloc+0x56/0x2f0 [ 100.505786][ T4436] ? security_inode_alloc+0x30/0x110 [ 100.511092][ T4436] security_inode_alloc+0x30/0x110 [ 100.516246][ T4436] inode_init_always+0x910/0xc90 [ 100.521207][ T4436] new_inode_pseudo+0x91/0x1c0 [ 100.526093][ T4436] new_inode+0x25/0x1d0 [ 100.530263][ T4436] ? start_creating+0x1f5/0x310 [ 100.535132][ T4436] __debugfs_create_file+0x147/0x500 [ 100.540437][ T4436] ? blk_subbuf_start_callback+0xa0/0xa0 [ 100.546089][ T4436] relay_open_buf+0x5a1/0xd00 [ 100.550879][ T4436] relay_open+0x3d8/0x930 [ 100.555237][ T4436] do_blk_trace_setup+0x56c/0x9e0 [ 100.560291][ T4436] blk_trace_ioctl+0x3f8/0x580 [ 100.565095][ T4436] ? __blk_trace_startstop+0x630/0x630 [ 100.570592][ T4436] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 100.576098][ T4436] blkdev_ioctl+0x1b2/0x740 [ 100.580727][ T4436] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 100.586209][ T4436] ? lock_chain_count+0x20/0x20 [ 100.591096][ T4436] ? bpf_lsm_file_ioctl+0x5/0x10 [ 100.596073][ T4436] ? security_file_ioctl+0x7c/0xa0 [ 100.601213][ T4436] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 100.606719][ T4436] __se_sys_ioctl+0xfa/0x170 [ 100.611439][ T4436] do_syscall_64+0x4c/0xa0 [ 100.615885][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 100.620589][ T4436] ? clear_bhb_loop+0x60/0xb0 [ 100.625326][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.631269][ T4436] RIP: 0033:0x7fdfea99e159 [ 100.635721][ T4436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.655348][ T4436] RSP: 002b:00007ffff35f2738 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 100.664295][ T4436] RAX: ffffffffffffffda RBX: 00007fdfeac25fa0 RCX: 00007fdfea99e159 [ 100.673113][ T4436] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000005 [ 100.681657][ T4436] RBP: 00007fdfeaa35024 R08: 0000000000000000 R09: 0000000000000000 [ 100.689676][ T4436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.697671][ T4436] R13: 00007fdfeac25fac R14: 00007fdfeac25fa0 R15: 00007fdfeac25fa0 [ 100.705678][ T4436] [ 100.735765][ T4436] debugfs: out of free dentries, can not create file 'trace0' [ 100.809305][ T4329] Bluetooth: hci0: command 0x040f tx timeout [ 100.827078][ T4437] FAULT_INJECTION: forcing a failure. [ 100.827078][ T4437] name failslab, interval 1, probability 0, space 0, times 0 [ 100.851862][ T4437] CPU: 0 PID: 4437 Comm: syz.0.18 Not tainted syzkaller #0 [ 100.859141][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.869204][ T4437] Call Trace: [ 100.872492][ T4437] [ 100.875436][ T4437] dump_stack_lvl+0x188/0x24e [ 100.880137][ T4437] ? show_regs_print_info+0x12/0x12 [ 100.885356][ T4437] ? load_image+0x410/0x410 [ 100.890072][ T4437] ? __might_sleep+0xd0/0xd0 [ 100.894676][ T4437] ? __lock_acquire+0x7c40/0x7c40 [ 100.899758][ T4437] should_fail_ex+0x390/0x4c0 [ 100.904458][ T4437] should_failslab+0x5/0x20 [ 100.909169][ T4437] slab_pre_alloc_hook+0x59/0x300 [ 100.914302][ T4437] ? tracepoint_add_func+0x2f1/0xa10 [ 100.919637][ T4437] __kmem_cache_alloc_node+0x4f/0x270 [ 100.925034][ T4437] ? tracepoint_add_func+0x2f1/0xa10 [ 100.930441][ T4437] __kmalloc+0xa3/0x240 [ 100.934717][ T4437] ? blk_add_trace_bio_bounce+0x90/0x90 [ 100.940306][ T4437] tracepoint_add_func+0x2f1/0xa10 [ 100.945473][ T4437] ? blk_add_trace_bio_bounce+0x90/0x90 [ 100.951091][ T4437] tracepoint_probe_register+0x5a/0x90 [ 100.956763][ T4437] ? blk_add_trace_bio_bounce+0x90/0x90 [ 100.962359][ T4437] get_probe_ref+0x103/0x3e0 [ 100.966982][ T4437] do_blk_trace_setup+0x7fb/0x9e0 [ 100.972038][ T4437] blk_trace_ioctl+0x3f8/0x580 [ 100.976834][ T4437] ? __blk_trace_startstop+0x630/0x630 [ 100.982417][ T4437] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 100.988024][ T4437] blkdev_ioctl+0x1b2/0x740 [ 100.992567][ T4437] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 100.998074][ T4437] ? lock_chain_count+0x20/0x20 [ 101.002957][ T4437] ? bpf_lsm_file_ioctl+0x5/0x10 [ 101.007915][ T4437] ? security_file_ioctl+0x7c/0xa0 [ 101.013042][ T4437] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 101.018522][ T4437] __se_sys_ioctl+0xfa/0x170 [ 101.023136][ T4437] do_syscall_64+0x4c/0xa0 [ 101.027589][ T4437] ? clear_bhb_loop+0x60/0xb0 [ 101.032282][ T4437] ? clear_bhb_loop+0x60/0xb0 [ 101.037071][ T4437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.042984][ T4437] RIP: 0033:0x7fdfea99e159 [ 101.047412][ T4437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.067056][ T4437] RSP: 002b:00007ffff35f2738 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.075486][ T4437] RAX: ffffffffffffffda RBX: 00007fdfeac25fa0 RCX: 00007fdfea99e159 [ 101.083471][ T4437] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000005 [ 101.091480][ T4437] RBP: 00007fdfeaa35024 R08: 0000000000000000 R09: 0000000000000000 [ 101.099820][ T4437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.107825][ T4437] R13: 00007fdfeac25fac R14: 00007fdfeac25fa0 R15: 00007fdfeac25fa0 [ 101.115833][ T4437] [ 101.133135][ T4437] ------------[ cut here ]------------ [ 101.139169][ T4437] WARNING: CPU: 0 PID: 4437 at kernel/trace/blktrace.c:1108 get_probe_ref+0x34c/0x3e0 [ 101.148818][ T4437] Modules linked in: [ 101.152730][ T4437] CPU: 0 PID: 4437 Comm: syz.0.18 Not tainted syzkaller #0 [ 101.160056][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.170162][ T4437] RIP: 0010:get_probe_ref+0x34c/0x3e0 [ 101.175561][ T4437] Code: ff e8 98 27 f9 ff 0f 0b e9 65 fd ff ff e8 8c 27 f9 ff 0f 0b e9 86 fd ff ff e8 80 27 f9 ff 0f 0b e9 a7 fd ff ff e8 74 27 f9 ff <0f> 0b e9 c8 fd ff ff e8 68 27 f9 ff 0f 0b e9 e9 fd ff ff e8 5c 27 [ 101.195366][ T4437] RSP: 0018:ffffc90003477b88 EFLAGS: 00010293 [ 101.201498][ T4437] RAX: ffffffff81891a1c RBX: 00000000fffffff4 RCX: ffff88802981bc00 [ 101.210053][ T4437] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 101.218094][ T4437] RBP: 1ffff1100e6da676 R08: ffffc90003477ac7 R09: 1ffff9200068ef58 [ 101.226105][ T4437] R10: dffffc0000000000 R11: fffff5200068ef59 R12: 0000000000000000 [ 101.234141][ T4437] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880736d3380 [ 101.242159][ T4437] FS: 0000555557b61500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 101.251181][ T4437] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.257837][ T4437] CR2: 0000200000003ac0 CR3: 000000001ff39000 CR4: 00000000003506f0 [ 101.265899][ T4437] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 101.273951][ T4437] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 101.282065][ T4437] Call Trace: [ 101.285352][ T4437] [ 101.288331][ T4437] do_blk_trace_setup+0x7fb/0x9e0 [ 101.293388][ T4437] blk_trace_ioctl+0x3f8/0x580 [ 101.298227][ T4437] ? __blk_trace_startstop+0x630/0x630 [ 101.303713][ T4437] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 101.309325][ T4437] blkdev_ioctl+0x1b2/0x740 [ 101.313889][ T4437] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 101.319654][ T4437] ? lock_chain_count+0x20/0x20 [ 101.324923][ T4437] ? bpf_lsm_file_ioctl+0x5/0x10 [ 101.329962][ T4437] ? security_file_ioctl+0x7c/0xa0 [ 101.335101][ T4437] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 101.340649][ T4437] __se_sys_ioctl+0xfa/0x170 [ 101.345405][ T4437] do_syscall_64+0x4c/0xa0 [ 101.349884][ T4437] ? clear_bhb_loop+0x60/0xb0 [ 101.354589][ T4437] ? clear_bhb_loop+0x60/0xb0 [ 101.359319][ T4437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.365237][ T4437] RIP: 0033:0x7fdfea99e159 [ 101.369719][ T4437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.389388][ T4437] RSP: 002b:00007ffff35f2738 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.397841][ T4437] RAX: ffffffffffffffda RBX: 00007fdfeac25fa0 RCX: 00007fdfea99e159 [ 101.405932][ T4437] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000005 [ 101.413977][ T4437] RBP: 00007fdfeaa35024 R08: 0000000000000000 R09: 0000000000000000 [ 101.422011][ T4437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.430125][ T4437] R13: 00007fdfeac25fac R14: 00007fdfeac25fa0 R15: 00007fdfeac25fa0 [ 101.438199][ T4437] [ 101.441246][ T4437] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 101.448752][ T4437] CPU: 0 PID: 4437 Comm: syz.0.18 Not tainted syzkaller #0 [ 101.455991][ T4437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.466068][ T4437] Call Trace: [ 101.469382][ T4437] [ 101.472328][ T4437] dump_stack_lvl+0x188/0x24e [ 101.477206][ T4437] ? memcpy+0x3c/0x60 [ 101.481196][ T4437] ? show_regs_print_info+0x12/0x12 [ 101.486410][ T4437] ? load_image+0x410/0x410 [ 101.490939][ T4437] panic+0x2d3/0x710 [ 101.494852][ T4437] ? bpf_jit_dump+0xd0/0xd0 [ 101.499374][ T4437] __warn+0x2f8/0x4f0 [ 101.503376][ T4437] ? get_probe_ref+0x34c/0x3e0 [ 101.508160][ T4437] ? get_probe_ref+0x34c/0x3e0 [ 101.512962][ T4437] report_bug+0x2ba/0x4f0 [ 101.517400][ T4437] ? get_probe_ref+0x34c/0x3e0 [ 101.522233][ T4437] handle_bug+0x3a/0x70 [ 101.527487][ T4437] exc_invalid_op+0x16/0x40 [ 101.532118][ T4437] asm_exc_invalid_op+0x16/0x20 [ 101.537009][ T4437] RIP: 0010:get_probe_ref+0x34c/0x3e0 [ 101.542428][ T4437] Code: ff e8 98 27 f9 ff 0f 0b e9 65 fd ff ff e8 8c 27 f9 ff 0f 0b e9 86 fd ff ff e8 80 27 f9 ff 0f 0b e9 a7 fd ff ff e8 74 27 f9 ff <0f> 0b e9 c8 fd ff ff e8 68 27 f9 ff 0f 0b e9 e9 fd ff ff e8 5c 27 [ 101.562401][ T4437] RSP: 0018:ffffc90003477b88 EFLAGS: 00010293 [ 101.568504][ T4437] RAX: ffffffff81891a1c RBX: 00000000fffffff4 RCX: ffff88802981bc00 [ 101.576495][ T4437] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 101.584484][ T4437] RBP: 1ffff1100e6da676 R08: ffffc90003477ac7 R09: 1ffff9200068ef58 [ 101.592467][ T4437] R10: dffffc0000000000 R11: fffff5200068ef59 R12: 0000000000000000 [ 101.600449][ T4437] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff8880736d3380 [ 101.608439][ T4437] ? get_probe_ref+0x34c/0x3e0 [ 101.613229][ T4437] ? get_probe_ref+0x34c/0x3e0 [ 101.618316][ T4437] do_blk_trace_setup+0x7fb/0x9e0 [ 101.623388][ T4437] blk_trace_ioctl+0x3f8/0x580 [ 101.628182][ T4437] ? __blk_trace_startstop+0x630/0x630 [ 101.633663][ T4437] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 101.639163][ T4437] blkdev_ioctl+0x1b2/0x740 [ 101.643730][ T4437] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 101.649260][ T4437] ? lock_chain_count+0x20/0x20 [ 101.654138][ T4437] ? bpf_lsm_file_ioctl+0x5/0x10 [ 101.659098][ T4437] ? security_file_ioctl+0x7c/0xa0 [ 101.664399][ T4437] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 101.669877][ T4437] __se_sys_ioctl+0xfa/0x170 [ 101.674553][ T4437] do_syscall_64+0x4c/0xa0 [ 101.679247][ T4437] ? clear_bhb_loop+0x60/0xb0 [ 101.683944][ T4437] ? clear_bhb_loop+0x60/0xb0 [ 101.688639][ T4437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.694581][ T4437] RIP: 0033:0x7fdfea99e159 [ 101.699007][ T4437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.718816][ T4437] RSP: 002b:00007ffff35f2738 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.727255][ T4437] RAX: ffffffffffffffda RBX: 00007fdfeac25fa0 RCX: 00007fdfea99e159 [ 101.735354][ T4437] RDX: 0000200000000440 RSI: 00000000c0481273 RDI: 0000000000000005 [ 101.743339][ T4437] RBP: 00007fdfeaa35024 R08: 0000000000000000 R09: 0000000000000000 [ 101.751363][ T4437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.759352][ T4437] R13: 00007fdfeac25fac R14: 00007fdfeac25fa0 R15: 00007fdfeac25fa0 [ 101.767347][ T4437] [ 101.770443][ T4437] Kernel Offset: disabled [ 101.774820][ T4437] Rebooting in 86400 seconds..