Warning: Permanently added '10.128.1.228' (ED25519) to the list of known hosts.
2026/02/19 06:55:56 parsed 1 programs
[ 110.787885][ T30] kauditd_printk_skb: 19 callbacks suppressed
[ 110.787902][ T30] audit: type=1400 audit(1771484159.344:105): avc: denied { unlink } for pid=6124 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[ 112.077139][ T6124] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 114.085926][ T30] audit: type=1400 audit(1771484162.634:106): avc: denied { read write } for pid=6137 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 114.099673][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 114.122954][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 114.130954][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 114.139804][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 114.147398][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 114.174586][ T30] audit: type=1400 audit(1771484162.644:107): avc: denied { open } for pid=6137 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[ 114.431459][ T30] audit: type=1400 audit(1771484162.984:108): avc: denied { unmount } for pid=6137 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 115.796186][ T30] audit: type=1401 audit(1771484164.344:109): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 116.170401][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.203655][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.422614][ T6173] chnl_net:caif_netlink_parms(): no params data found
[ 116.457186][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 116.476642][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 116.783854][ T6173] bridge0: port 1(bridge_slave_0) entered blocking state
[ 116.792202][ T6173] bridge0: port 1(bridge_slave_0) entered disabled state
[ 116.799542][ T6173] bridge_slave_0: entered allmulticast mode
[ 116.807037][ T6173] bridge_slave_0: entered promiscuous mode
[ 116.822722][ T6173] bridge0: port 2(bridge_slave_1) entered blocking state
[ 116.830022][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state
[ 116.838441][ T6173] bridge_slave_1: entered allmulticast mode
[ 116.845290][ T6173] bridge_slave_1: entered promiscuous mode
[ 116.899176][ T6173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 116.926978][ T6173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 117.029700][ T6173] team0: Port device team_slave_0 added
[ 117.048478][ T6173] team0: Port device team_slave_1 added
[ 117.105088][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 117.115966][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 117.142947][ T6173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 117.165224][ T6173] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 117.174199][ T6173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 117.200290][ T6173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 117.350906][ T6173] hsr_slave_0: entered promiscuous mode
[ 117.361148][ T6173] hsr_slave_1: entered promiscuous mode
[ 117.530944][ T6173] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 117.542153][ T6173] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 117.551483][ T6173] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 117.560818][ T6173] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 117.616417][ T6173] 8021q: adding VLAN 0 to HW filter on device bond0
[ 117.635391][ T6173] 8021q: adding VLAN 0 to HW filter on device team0
[ 117.646413][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.653516][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 117.666418][ T152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.673541][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 117.708214][ T6173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 117.813989][ T6173] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 117.846690][ T6173] veth0_vlan: entered promiscuous mode
[ 117.858638][ T6173] veth1_vlan: entered promiscuous mode
[ 117.882168][ T6173] veth0_macvtap: entered promiscuous mode
[ 117.891126][ T6173] veth1_macvtap: entered promiscuous mode
[ 117.907990][ T6173] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 117.921371][ T6173] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 117.934214][ T152] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.943918][ T152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.955649][ T152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 117.965083][ T152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/02/19 06:56:06 executed programs: 0
[ 118.170971][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 118.179754][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 118.187619][ T5128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 118.196118][ T6239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 118.206366][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 118.213579][ T5128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 118.223876][ T5128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 118.231860][ T5128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 118.235236][ T6243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 118.242825][ T5128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 118.248785][ T6243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 118.254538][ T5128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 118.261140][ T6240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 118.270111][ T5128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 118.282387][ T5128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 118.312167][ T5892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 118.321074][ T5892] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 118.337071][ T6239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 118.344919][ T6243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 118.345582][ T6239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 118.368005][ T6239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 118.377776][ T6239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 118.377990][ T6243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 118.396531][ T6243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 118.406353][ T6239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 118.920961][ T6242] chnl_net:caif_netlink_parms(): no params data found
[ 118.983555][ T6232] chnl_net:caif_netlink_parms(): no params data found
[ 119.001247][ T6231] chnl_net:caif_netlink_parms(): no params data found
[ 119.046755][ T6241] chnl_net:caif_netlink_parms(): no params data found
[ 119.138582][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 119.248159][ T6242] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.255283][ T6242] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.262747][ T6242] bridge_slave_0: entered allmulticast mode
[ 119.270139][ T6242] bridge_slave_0: entered promiscuous mode
[ 119.302623][ T6242] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.309894][ T6242] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.317460][ T6242] bridge_slave_1: entered allmulticast mode
[ 119.324364][ T6242] bridge_slave_1: entered promiscuous mode
[ 119.381723][ T6237] chnl_net:caif_netlink_parms(): no params data found
[ 119.394326][ T6242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 119.407112][ T6242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 119.416685][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.423825][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.431364][ T6232] bridge_slave_0: entered allmulticast mode
[ 119.438580][ T6232] bridge_slave_0: entered promiscuous mode
[ 119.446543][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.453649][ T6231] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.460924][ T6231] bridge_slave_0: entered allmulticast mode
[ 119.467881][ T6231] bridge_slave_0: entered promiscuous mode
[ 119.497225][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.504548][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.512180][ T6232] bridge_slave_1: entered allmulticast mode
[ 119.519278][ T6232] bridge_slave_1: entered promiscuous mode
[ 119.526020][ T6231] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.533162][ T6231] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.540514][ T6231] bridge_slave_1: entered allmulticast mode
[ 119.547764][ T6231] bridge_slave_1: entered promiscuous mode
[ 119.570361][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.577728][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.585157][ T6241] bridge_slave_0: entered allmulticast mode
[ 119.592515][ T6241] bridge_slave_0: entered promiscuous mode
[ 119.643425][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.650645][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.658265][ T6241] bridge_slave_1: entered allmulticast mode
[ 119.665134][ T6241] bridge_slave_1: entered promiscuous mode
[ 119.673562][ T6242] team0: Port device team_slave_0 added
[ 119.683008][ T6232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 119.694582][ T6231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 119.721681][ T6242] team0: Port device team_slave_1 added
[ 119.739411][ T6232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 119.751705][ T6231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 119.776092][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 119.817345][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 119.838058][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 119.845018][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 119.871272][ T6242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 119.927076][ T6242] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 119.934073][ T6242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 119.961053][ T6242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 119.973442][ T6232] team0: Port device team_slave_0 added
[ 119.981246][ T6232] team0: Port device team_slave_1 added
[ 119.988412][ T6231] team0: Port device team_slave_0 added
[ 119.996991][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state
[ 120.004083][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state
[ 120.011417][ T6237] bridge_slave_0: entered allmulticast mode
[ 120.018602][ T6237] bridge_slave_0: entered promiscuous mode
[ 120.027131][ T6241] team0: Port device team_slave_0 added
[ 120.032788][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state
[ 120.040841][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state
[ 120.048093][ T6237] bridge_slave_1: entered allmulticast mode
[ 120.055013][ T6237] bridge_slave_1: entered promiscuous mode
[ 120.079068][ T6231] team0: Port device team_slave_1 added
[ 120.093245][ T6241] team0: Port device team_slave_1 added
[ 120.128354][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 120.135318][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 120.161816][ T6232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 120.192356][ T6237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 120.204045][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 120.211075][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 120.237936][ T6232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 120.249474][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 120.256772][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 120.283843][ T6231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 120.315243][ T6237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 120.349702][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.360859][ T6239] Bluetooth: hci3: command tx timeout
[ 120.360891][ T5128] Bluetooth: hci1: command tx timeout
[ 120.366862][ T6243] Bluetooth: hci0: command tx timeout
[ 120.382739][ T6231] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 120.389917][ T6231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 120.416229][ T6231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 120.427576][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 120.434544][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 120.461501][ T6243] Bluetooth: hci4: command tx timeout
[ 120.464827][ T6241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 120.467428][ T6243] Bluetooth: hci2: command tx timeout
[ 120.485762][ T6241] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 120.492759][ T6241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 120.519046][ T6241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 120.543046][ T6242] hsr_slave_0: entered promiscuous mode
[ 120.549479][ T6242] hsr_slave_1: entered promiscuous mode
[ 120.555722][ T6242] debugfs: 'hsr0' already exists in 'hsr'
[ 120.561497][ T6242] Cannot create hsr debugfs directory
[ 120.584068][ T6237] team0: Port device team_slave_0 added
[ 120.597603][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.640074][ T6237] team0: Port device team_slave_1 added
[ 120.694257][ T6232] hsr_slave_0: entered promiscuous mode
[ 120.700739][ T6232] hsr_slave_1: entered promiscuous mode
[ 120.707348][ T6232] debugfs: 'hsr0' already exists in 'hsr'
[ 120.713073][ T6232] Cannot create hsr debugfs directory
[ 120.742108][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 120.749707][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 120.776261][ T6237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 120.788871][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 120.796257][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 120.822443][ T6237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 120.864748][ T6241] hsr_slave_0: entered promiscuous mode
[ 120.871005][ T6241] hsr_slave_1: entered promiscuous mode
[ 120.877261][ T6241] debugfs: 'hsr0' already exists in 'hsr'
[ 120.883067][ T6241] Cannot create hsr debugfs directory
[ 120.914974][ T6231] hsr_slave_0: entered promiscuous mode
[ 120.921703][ T6231] hsr_slave_1: entered promiscuous mode
[ 120.928007][ T6231] debugfs: 'hsr0' already exists in 'hsr'
[ 120.933857][ T6231] Cannot create hsr debugfs directory
[ 120.969297][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 121.122933][ T6237] hsr_slave_0: entered promiscuous mode
[ 121.129493][ T6237] hsr_slave_1: entered promiscuous mode
[ 121.135538][ T6237] debugfs: 'hsr0' already exists in 'hsr'
[ 121.142151][ T6237] Cannot create hsr debugfs directory
[ 121.410744][ T63] bridge_slave_1: left allmulticast mode
[ 121.417281][ T63] bridge_slave_1: left promiscuous mode
[ 121.422990][ T63] bridge0: port 2(bridge_slave_1) entered disabled state
[ 121.432112][ T63] bridge_slave_0: left allmulticast mode
[ 121.438299][ T63] bridge_slave_0: left promiscuous mode
[ 121.444146][ T63] bridge0: port 1(bridge_slave_0) entered disabled state
[ 121.582843][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 121.593436][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 121.603278][ T63] bond0 (unregistering): Released all slaves
[ 121.760389][ T63] hsr_slave_0: left promiscuous mode
[ 121.774476][ T63] hsr_slave_1: left promiscuous mode
[ 121.781393][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 121.794893][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 121.808326][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 121.815735][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 121.826419][ T63] veth1_macvtap: left promiscuous mode
[ 121.831918][ T63] veth0_macvtap: left promiscuous mode
[ 121.837796][ T63] veth1_vlan: left promiscuous mode
[ 121.843045][ T63] veth0_vlan: left promiscuous mode
[ 121.992894][ T63] team0 (unregistering): Port device team_slave_1 removed
[ 122.005513][ T63] team0 (unregistering): Port device team_slave_0 removed
[ 122.379664][ T6242] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 122.419732][ T6242] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 122.436345][ T6239] Bluetooth: hci0: command tx timeout
[ 122.437653][ T5128] Bluetooth: hci3: command tx timeout
[ 122.442115][ T6243] Bluetooth: hci1: command tx timeout
[ 122.461065][ T6242] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 122.476850][ T6242] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 122.515990][ T6243] Bluetooth: hci2: command tx timeout
[ 122.517552][ T5128] Bluetooth: hci4: command tx timeout
[ 122.595497][ T6232] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 122.642964][ T6232] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 122.659329][ T6232] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 122.676757][ T6232] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 122.788594][ T6242] 8021q: adding VLAN 0 to HW filter on device bond0
[ 122.844502][ T6242] 8021q: adding VLAN 0 to HW filter on device team0
[ 122.866185][ T152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 122.873315][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 122.904099][ T6232] 8021q: adding VLAN 0 to HW filter on device bond0
[ 122.919165][ T152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 122.926299][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 122.954013][ T6232] 8021q: adding VLAN 0 to HW filter on device team0
[ 122.972954][ T152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 122.980300][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 123.031696][ T152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 123.038896][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 123.161973][ T6241] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 123.189201][ T6241] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 123.253853][ T6241] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 123.337830][ T6241] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 123.448695][ T6237] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 123.469647][ T6237] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 123.500440][ T6237] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 123.531614][ T6242] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 123.539952][ T6237] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 123.640406][ T6232] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 123.724608][ T6231] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 123.774022][ T6231] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 123.795221][ T6231] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 123.812528][ T6242] veth0_vlan: entered promiscuous mode
[ 123.843877][ T6231] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 123.904176][ T6242] veth1_vlan: entered promiscuous mode
[ 123.931926][ T6232] veth0_vlan: entered promiscuous mode
[ 124.004762][ T6241] 8021q: adding VLAN 0 to HW filter on device bond0
[ 124.027019][ T6232] veth1_vlan: entered promiscuous mode
[ 124.086764][ T6242] veth0_macvtap: entered promiscuous mode
[ 124.122853][ T6241] 8021q: adding VLAN 0 to HW filter on device team0
[ 124.134438][ T6242] veth1_macvtap: entered promiscuous mode
[ 124.165610][ T6237] 8021q: adding VLAN 0 to HW filter on device bond0
[ 124.180547][ T152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.187707][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 124.220194][ T6237] 8021q: adding VLAN 0 to HW filter on device team0
[ 124.239243][ T152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.246523][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 124.281634][ T6232] veth0_macvtap: entered promiscuous mode
[ 124.290439][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 124.304782][ T152] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.311969][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 124.327998][ T6232] veth1_macvtap: entered promiscuous mode
[ 124.350397][ T152] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.357578][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 124.374426][ T6242] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 124.405630][ T6231] 8021q: adding VLAN 0 to HW filter on device bond0
[ 124.436242][ T1138] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.476643][ T1138] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.485387][ T1138] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.511221][ T1138] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.520041][ T5128] Bluetooth: hci1: command tx timeout
[ 124.520074][ T5128] Bluetooth: hci0: command tx timeout
[ 124.526659][ T5128] Bluetooth: hci3: command tx timeout
[ 124.544660][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 124.571677][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 124.591442][ T6241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 124.602635][ T5128] Bluetooth: hci2: command tx timeout
[ 124.602979][ T6243] Bluetooth: hci4: command tx timeout
[ 124.613572][ T6231] 8021q: adding VLAN 0 to HW filter on device team0
[ 124.680853][ T1138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.693939][ T1138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.704005][ T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 124.711109][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 124.771315][ T1138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.781415][ T1138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 124.801496][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 124.808783][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 124.927383][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 124.952389][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 124.972020][ T6237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 125.102781][ T6241] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 125.109851][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.138018][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.276559][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.284399][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/02/19 06:56:13 executed programs: 10
[ 125.433775][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 125.477935][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 125.485150][ T30] audit: type=1400 audit(1771484174.034:110): avc: denied { read write } for pid=6397 comm="syz.3.20" name="raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 125.559391][ T30] audit: type=1400 audit(1771484174.034:111): avc: denied { open } for pid=6397 comm="syz.3.20" path="/dev/raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 125.599992][ T6237] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 125.643196][ T30] audit: type=1400 audit(1771484174.034:112): avc: denied { ioctl } for pid=6397 comm="syz.3.20" path="/dev/raw-gadget" dev="devtmpfs" ino=815 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 125.679653][ T6231] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 125.768671][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 125.800953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[ 125.866603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[ 125.875003][ T6237] veth0_vlan: entered promiscuous mode
[ 125.900792][ T6237] veth1_vlan: entered promiscuous mode
[ 125.921360][ T6231] veth0_vlan: entered promiscuous mode
[ 125.938053][ T5911] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 125.953866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[ 125.966114][ T9] usb 4-1: Using ep0 maxpacket: 8
[ 125.986284][ T6231] veth1_vlan: entered promiscuous mode
[ 126.005223][ T6241] veth0_vlan: entered promiscuous mode
[ 126.006539][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 126.025119][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 126.042755][ T6237] veth0_macvtap: entered promiscuous mode
[ 126.052005][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 126.062858][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 126.076676][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 126.087280][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 126.097042][ T6237] veth1_macvtap: entered promiscuous mode
[ 126.126482][ T5911] usb 2-1: Using ep0 maxpacket: 8
[ 126.159366][ T5911] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 126.170005][ T6241] veth1_vlan: entered promiscuous mode
[ 126.187068][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 126.196043][ T5911] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 126.216510][ T6231] veth0_macvtap: entered promiscuous mode
[ 126.223437][ T5911] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 126.238321][ T6237] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 126.247547][ T5911] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 126.266198][ T5911] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 126.275454][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 126.289027][ T6231] veth1_macvtap: entered promiscuous mode
[ 126.313460][ T152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.333596][ T152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.342793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 126.358138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 126.366855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 126.366978][ T9] usb 4-1: GET_CAPABILITIES returned 0
[ 126.395908][ T9] usbtmc 4-1:16.0: can't read capabilities
[ 126.409453][ T152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.426704][ T152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.478753][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 126.502532][ T6241] veth0_macvtap: entered promiscuous mode
[ 126.523343][ T6231] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 126.563701][ T6241] veth1_macvtap: entered promiscuous mode
[ 126.574384][ T6399] FAULT_INJECTION: forcing a failure.
[ 126.574384][ T6399] name failslab, interval 1, probability 0, space 0, times 1
[ 126.594349][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 126.603331][ T6243] Bluetooth: hci3: command tx timeout
[ 126.603363][ T6243] Bluetooth: hci0: command tx timeout
[ 126.603404][ T6243] Bluetooth: hci1: command tx timeout
[ 126.603452][ T30] audit: type=1400 audit(1771484175.124:113): avc: denied { write } for pid=6397 comm="syz.3.20" name="usbtmc0" dev="devtmpfs" ino=2795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 126.635841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 126.655908][ T5911] usb 2-1: GET_CAPABILITIES returned 0
[ 126.661410][ T5911] usbtmc 2-1:16.0: can't read capabilities
[ 126.675597][ T6399] CPU: 1 UID: 0 PID: 6399 Comm: syz.3.20 Not tainted syzkaller #0 PREEMPT(full)
[ 126.675632][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 126.675650][ T6399] Call Trace:
[ 126.675657][ T6399]
[ 126.675668][ T6399] dump_stack_lvl+0x100/0x190
[ 126.675710][ T6399] should_fail_ex.cold+0x5/0xa
[ 126.675726][ T6399] ? tomoyo_realpath_from_path+0xb6/0x690
[ 126.675740][ T6399] should_failslab+0xc2/0x120
[ 126.675758][ T6399] __kmalloc_noprof+0xe0/0x850
[ 126.675777][ T6399] tomoyo_realpath_from_path+0xb6/0x690
[ 126.675805][ T6399] tomoyo_path_number_perm+0x23c/0x580
[ 126.675835][ T6399] ? tomoyo_path_number_perm+0x22e/0x580
[ 126.675868][ T6399] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 126.675931][ T6399] ? find_held_lock+0x2b/0x80
[ 126.675957][ T6399] ? __fget_files+0x215/0x3d0
[ 126.675976][ T6399] ? hook_file_ioctl_common+0x146/0x410
[ 126.676011][ T6399] ? __fget_files+0x21f/0x3d0
[ 126.676036][ T6399] security_file_ioctl+0xd3/0x230
[ 126.676060][ T6399] __x64_sys_ioctl+0xb7/0x210
[ 126.676092][ T6399] do_syscall_64+0x106/0xf80
[ 126.676114][ T6399] ? clear_bhb_loop+0x40/0x90
[ 126.676141][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.676164][ T6399] RIP: 0033:0x7fc0d819aeb9
[ 126.676186][ T6399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 126.676209][ T6399] RSP: 002b:00007fc0d8fe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 126.676232][ T6399] RAX: ffffffffffffffda RBX: 00007fc0d8415fa0 RCX: 00007fc0d819aeb9
[ 126.676246][ T6399] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005
[ 126.676259][ T6399] RBP: 00007fc0d8fe2090 R08: 0000000000000000 R09: 0000000000000000
[ 126.676272][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 126.676285][ T6399] R13: 00007fc0d8416038 R14: 00007fc0d8415fa0 R15: 00007ffee4e99c38
[ 126.676315][ T6399]
[ 126.685849][ T5128] Bluetooth: hci4: command tx timeout
[ 126.696352][ T6243] Bluetooth: hci2: command tx timeout
[ 126.884385][ T6399] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 126.895258][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 126.905471][ T6406] FAULT_INJECTION: forcing a failure.
[ 126.905471][ T6406] name failslab, interval 1, probability 0, space 0, times 0
[ 126.933639][ T6406] CPU: 0 UID: 0 PID: 6406 Comm: syz.1.18 Not tainted syzkaller #0 PREEMPT(full)
[ 126.933664][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 126.933671][ T6406] Call Trace:
[ 126.933675][ T6406]
[ 126.933680][ T6406] dump_stack_lvl+0x100/0x190
[ 126.933704][ T6406] should_fail_ex.cold+0x5/0xa
[ 126.933719][ T6406] ? tomoyo_realpath_from_path+0xb6/0x690
[ 126.933733][ T6406] should_failslab+0xc2/0x120
[ 126.933751][ T6406] __kmalloc_noprof+0xe0/0x850
[ 126.933770][ T6406] tomoyo_realpath_from_path+0xb6/0x690
[ 126.933787][ T6406] tomoyo_path_number_perm+0x23c/0x580
[ 126.933805][ T6406] ? tomoyo_path_number_perm+0x22e/0x580
[ 126.933824][ T6406] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 126.933857][ T6406] ? find_held_lock+0x2b/0x80
[ 126.933871][ T6406] ? __fget_files+0x215/0x3d0
[ 126.933881][ T6406] ? hook_file_ioctl_common+0x146/0x410
[ 126.933899][ T6406] ? __fget_files+0x21f/0x3d0
[ 126.933912][ T6406] security_file_ioctl+0xd3/0x230
[ 126.933925][ T6406] __x64_sys_ioctl+0xb7/0x210
[ 126.933943][ T6406] do_syscall_64+0x106/0xf80
[ 126.933955][ T6406] ? clear_bhb_loop+0x40/0x90
[ 126.933969][ T6406] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 126.933981][ T6406] RIP: 0033:0x7fa556d9aeb9
[ 126.933992][ T6406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 126.934002][ T6406] RSP: 002b:00007fa557c08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 126.934014][ T6406] RAX: ffffffffffffffda RBX: 00007fa557015fa0 RCX: 00007fa556d9aeb9
[ 126.934021][ T6406] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005
[ 126.934028][ T6406] RBP: 00007fa557c08090 R08: 0000000000000000 R09: 0000000000000000
[ 126.934034][ T6406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 126.934041][ T6406] R13: 00007fa557016038 R14: 00007fa557015fa0 R15: 00007ffc9b0939f8
[ 126.934056][ T6406]
[ 126.934061][ T6406] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 127.086415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[ 127.143612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[ 127.154510][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.163587][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.172635][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.181783][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.190813][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.205068][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.220660][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.258823][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.267915][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.276963][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.276998][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.277032][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.287845][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.298095][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.304669][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.330441][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.339464][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.348474][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 127.364098][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.372742][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.385065][ T792] usb 4-1: USB disconnect, device number 2
[ 127.396326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[ 127.450016][ T29] usb 2-1: USB disconnect, device number 2
[ 127.569557][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 127.630503][ T6241] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 127.634513][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.648610][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.664762][ T63] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.711319][ T63] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.756090][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.763932][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.768939][ T63] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.816247][ T63] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.835871][ T792] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 127.907570][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.927144][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.996536][ T792] usb 4-1: Using ep0 maxpacket: 8
[ 128.016881][ T792] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 128.046259][ T792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 128.066554][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 128.081188][ T792] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 128.124328][ T792] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 128.142167][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.156350][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.177633][ T792] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 128.213940][ T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 128.236257][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 128.247071][ T24] usb 3-1: Using ep0 maxpacket: 8
[ 128.253877][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 128.269845][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 128.284340][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 128.315704][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 128.328990][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 128.337861][ T6309] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 128.346262][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 128.371849][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 128.406365][ T6403] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 128.453503][ T792] usb 4-1: GET_CAPABILITIES returned 0
[ 128.466351][ T792] usbtmc 4-1:16.0: can't read capabilities
[ 128.516004][ T6309] usb 1-1: Using ep0 maxpacket: 8
[ 128.528389][ T6309] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 128.544686][ T6309] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 128.556819][ T6309] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 128.567601][ T6309] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 128.581781][ T6309] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 128.591778][ T6403] usb 2-1: Using ep0 maxpacket: 8
[ 128.598156][ T6309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 128.612268][ T6403] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 128.624444][ T24] usb 3-1: GET_CAPABILITIES returned 0
[ 128.633458][ T24] usbtmc 3-1:16.0: can't read capabilities
[ 128.636803][ T6403] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 128.655557][ T6435] FAULT_INJECTION: forcing a failure.
[ 128.655557][ T6435] name failslab, interval 1, probability 0, space 0, times 0
[ 128.668692][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 128.683643][ T6435] CPU: 0 UID: 0 PID: 6435 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(full)
[ 128.683664][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 128.683671][ T6435] Call Trace:
[ 128.683675][ T6435]
[ 128.683680][ T6435] dump_stack_lvl+0x100/0x190
[ 128.683703][ T6435] should_fail_ex.cold+0x5/0xa
[ 128.683718][ T6435] ? tomoyo_realpath_from_path+0xb6/0x690
[ 128.683732][ T6435] should_failslab+0xc2/0x120
[ 128.683753][ T6435] __kmalloc_noprof+0xe0/0x850
[ 128.683772][ T6435] tomoyo_realpath_from_path+0xb6/0x690
[ 128.683800][ T6435] tomoyo_path_number_perm+0x23c/0x580
[ 128.683819][ T6435] ? tomoyo_path_number_perm+0x22e/0x580
[ 128.683838][ T6435] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 128.683870][ T6435] ? find_held_lock+0x2b/0x80
[ 128.683884][ T6435] ? __fget_files+0x215/0x3d0
[ 128.683898][ T6435] ? hook_file_ioctl_common+0x146/0x410
[ 128.683916][ T6435] ? __fget_files+0x21f/0x3d0
[ 128.683929][ T6435] security_file_ioctl+0xd3/0x230
[ 128.683943][ T6435] __x64_sys_ioctl+0xb7/0x210
[ 128.683960][ T6435] do_syscall_64+0x106/0xf80
[ 128.683973][ T6435] ? clear_bhb_loop+0x40/0x90
[ 128.683988][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 128.684000][ T6435] RIP: 0033:0x7fc0d819aeb9
[ 128.684010][ T6435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 128.684021][ T6435] RSP: 002b:00007fc0d8fe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 128.684033][ T6435] RAX: ffffffffffffffda RBX: 00007fc0d8415fa0 RCX: 00007fc0d819aeb9
[ 128.684041][ T6435] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005
[ 128.684047][ T6435] RBP: 00007fc0d8fe2090 R08: 0000000000000000 R09: 0000000000000000
[ 128.684054][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 128.684060][ T6435] R13: 00007fc0d8416038 R14: 00007fc0d8415fa0 R15: 00007ffee4e99c38
[ 128.684076][ T6435]
[ 128.684096][ T6435] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 128.893681][ T6403] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 128.903955][ T6403] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 128.919575][ T6403] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 128.928868][ T6403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 128.938695][ T6309] usb 1-1: GET_CAPABILITIES returned 0
[ 128.944219][ T6309] usbtmc 1-1:16.0: can't read capabilities
[ 128.962597][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 128.971776][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 128.980806][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 128.989847][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 128.998868][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 129.008715][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 129.018326][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 129.027481][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 129.036542][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 129.045570][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 129.054602][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 129.064676][ T9] usb 5-1: Using ep0 maxpacket: 8
[ 129.072062][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 129.082346][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 129.092123][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 129.102040][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 129.116396][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 129.128899][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 129.174306][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 129.183406][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 129.192486][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 129.201539][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 129.227309][ T6462] FAULT_INJECTION: forcing a failure.
[ 129.227309][ T6462] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 129.242875][ T6463] FAULT_INJECTION: forcing a failure.
[ 129.242875][ T6463] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 129.275345][ T6462] CPU: 1 UID: 0 PID: 6462 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 129.275374][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 129.275387][ T6462] Call Trace:
[ 129.275394][ T6462]
[ 129.275402][ T6462] dump_stack_lvl+0x100/0x190
[ 129.275439][ T6462] should_fail_ex.cold+0x5/0xa
[ 129.275456][ T6462] _copy_to_user+0x32/0xd0
[ 129.275474][ T6462] simple_read_from_buffer+0xcb/0x170
[ 129.275495][ T6462] proc_fail_nth_read+0x1af/0x230
[ 129.275523][ T6462] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 129.275553][ T6462] ? rw_verify_area+0xce/0x6d0
[ 129.275581][ T6462] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 129.275705][ T6462] vfs_read+0x1e4/0xb30
[ 129.275740][ T6462] ? __pfx_vfs_read+0x10/0x10
[ 129.275771][ T6462] ? __fget_files+0x215/0x3d0
[ 129.275838][ T6462] ? __fget_files+0x21f/0x3d0
[ 129.275863][ T6462] ksys_read+0x12a/0x250
[ 129.275890][ T6462] ? __pfx_ksys_read+0x10/0x10
[ 129.275924][ T6462] do_syscall_64+0x106/0xf80
[ 129.275944][ T6462] ? clear_bhb_loop+0x40/0x90
[ 129.275969][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.275989][ T6462] RIP: 0033:0x7fe8db75b78e
[ 129.276006][ T6462] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 129.276024][ T6462] RSP: 002b:00007fe8dc662fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 129.276043][ T6462] RAX: ffffffffffffffda RBX: 00007fe8dc6636c0 RCX: 00007fe8db75b78e
[ 129.276057][ T6462] RDX: 000000000000000f RSI: 00007fe8dc6630a0 RDI: 0000000000000006
[ 129.276110][ T6462] RBP: 00007fe8dc663090 R08: 0000000000000000 R09: 0000000000000000
[ 129.276123][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 129.276135][ T6462] R13: 00007fe8dba16128 R14: 00007fe8dba16090 R15: 00007ffcf1850bf8
[ 129.276165][ T6462]
[ 129.467493][ T6403] usb 2-1: GET_CAPABILITIES returned 0
[ 129.473624][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 129.495704][ T6403] usbtmc 2-1:16.0: can't read capabilities
[ 129.509009][ T792] usb 1-1: USB disconnect, device number 2
[ 129.519002][ T9] usb 5-1: GET_CAPABILITIES returned 0
[ 129.519286][ T6463] CPU: 1 UID: 0 PID: 6463 Comm: syz.2.19 Not tainted syzkaller #0 PREEMPT(full)
[ 129.519312][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 129.519324][ T6463] Call Trace:
[ 129.519330][ T6463]
[ 129.519341][ T6463] dump_stack_lvl+0x100/0x190
[ 129.519379][ T6463] should_fail_ex.cold+0x5/0xa
[ 129.519406][ T6463] _copy_to_user+0x32/0xd0
[ 129.519437][ T6463] simple_read_from_buffer+0xcb/0x170
[ 129.519471][ T6463] proc_fail_nth_read+0x1af/0x230
[ 129.519500][ T6463] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 129.519528][ T6463] ? rw_verify_area+0xce/0x6d0
[ 129.519555][ T6463] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 129.519582][ T6463] vfs_read+0x1e4/0xb30
[ 129.519615][ T6463] ? __pfx_vfs_read+0x10/0x10
[ 129.519643][ T6463] ? __fget_files+0x215/0x3d0
[ 129.519668][ T6463] ? __fget_files+0x21f/0x3d0
[ 129.519696][ T6463] ksys_read+0x12a/0x250
[ 129.519722][ T6463] ? __pfx_ksys_read+0x10/0x10
[ 129.519759][ T6463] do_syscall_64+0x106/0xf80
[ 129.519781][ T6463] ? clear_bhb_loop+0x40/0x90
[ 129.519806][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.519828][ T6463] RIP: 0033:0x7f451af5b78e
[ 129.519846][ T6463] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 129.519865][ T6463] RSP: 002b:00007f451bdfefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 129.519884][ T6463] RAX: ffffffffffffffda RBX: 00007f451bdff6c0 RCX: 00007f451af5b78e
[ 129.519898][ T6463] RDX: 000000000000000f RSI: 00007f451bdff0a0 RDI: 0000000000000006
[ 129.519911][ T6463] RBP: 00007f451bdff090 R08: 0000000000000000 R09: 0000000000000000
[ 129.519923][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 129.519936][ T6463] R13: 00007f451b216128 R14: 00007f451b216090 R15: 00007ffd35a633b8
[ 129.519963][ T6463]
[ 129.718026][ T6454] FAULT_INJECTION: forcing a failure.
[ 129.718026][ T6454] name failslab, interval 1, probability 0, space 0, times 0
[ 129.875360][ T6403] usb 2-1: USB disconnect, device number 3
[ 129.890737][ T6446] FAULT_INJECTION: forcing a failure.
[ 129.890737][ T6446] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 129.914291][ T6454] CPU: 1 UID: 0 PID: 6454 Comm: syz.4.21 Not tainted syzkaller #0 PREEMPT(full)
[ 129.914316][ T6454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 129.914323][ T6454] Call Trace:
[ 129.914328][ T6454]
[ 129.914332][ T6454] dump_stack_lvl+0x100/0x190
[ 129.914356][ T6454] should_fail_ex.cold+0x5/0xa
[ 129.914371][ T6454] ? tomoyo_realpath_from_path+0xb6/0x690
[ 129.914385][ T6454] should_failslab+0xc2/0x120
[ 129.914403][ T6454] __kmalloc_noprof+0xe0/0x850
[ 129.914422][ T6454] tomoyo_realpath_from_path+0xb6/0x690
[ 129.914438][ T6454] tomoyo_path_number_perm+0x23c/0x580
[ 129.914457][ T6454] ? tomoyo_path_number_perm+0x22e/0x580
[ 129.914476][ T6454] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 129.914508][ T6454] ? find_held_lock+0x2b/0x80
[ 129.914522][ T6454] ? __fget_files+0x215/0x3d0
[ 129.914532][ T6454] ? hook_file_ioctl_common+0x146/0x410
[ 129.914550][ T6454] ? __fget_files+0x21f/0x3d0
[ 129.914563][ T6454] security_file_ioctl+0xd3/0x230
[ 129.914577][ T6454] __x64_sys_ioctl+0xb7/0x210
[ 129.914594][ T6454] do_syscall_64+0x106/0xf80
[ 129.914607][ T6454] ? clear_bhb_loop+0x40/0x90
[ 129.914621][ T6454] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 129.914633][ T6454] RIP: 0033:0x7f381419aeb9
[ 129.914643][ T6454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 129.914654][ T6454] RSP: 002b:00007f381501c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 129.914665][ T6454] RAX: ffffffffffffffda RBX: 00007f3814415fa0 RCX: 00007f381419aeb9
[ 129.914673][ T6454] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005
[ 129.914679][ T6454] RBP: 00007f381501c090 R08: 0000000000000000 R09: 0000000000000000
[ 129.914686][ T6454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 129.914692][ T6454] R13: 00007f3814416038 R14: 00007f3814415fa0 R15: 00007ffd147ec778
[ 129.914707][ T6454]
[ 129.914712][ T6454] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 130.124019][ T6235] usb 4-1: USB disconnect, device number 3
[ 130.143277][ T6234] usb 3-1: USB disconnect, device number 2
[ 130.166016][ T6446] CPU: 1 UID: 0 PID: 6446 Comm: syz.1.23 Not tainted syzkaller #0 PREEMPT(full)
[ 130.166036][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 130.166044][ T6446] Call Trace:
[ 130.166048][ T6446]
[ 130.166052][ T6446] dump_stack_lvl+0x100/0x190
[ 130.166075][ T6446] should_fail_ex.cold+0x5/0xa
[ 130.166091][ T6446] _copy_to_user+0x32/0xd0
[ 130.166108][ T6446] simple_read_from_buffer+0xcb/0x170
[ 130.166127][ T6446] proc_fail_nth_read+0x1af/0x230
[ 130.166143][ T6446] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 130.166158][ T6446] ? rw_verify_area+0xce/0x6d0
[ 130.166173][ T6446] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 130.166187][ T6446] vfs_read+0x1e4/0xb30
[ 130.166205][ T6446] ? __pfx_vfs_read+0x10/0x10
[ 130.166223][ T6446] ? __fget_files+0x215/0x3d0
[ 130.166237][ T6446] ? __fget_files+0x21f/0x3d0
[ 130.166251][ T6446] ksys_read+0x12a/0x250
[ 130.166267][ T6446] ? __pfx_ksys_read+0x10/0x10
[ 130.166287][ T6446] do_syscall_64+0x106/0xf80
[ 130.166299][ T6446] ? clear_bhb_loop+0x40/0x90
[ 130.166314][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 130.166326][ T6446] RIP: 0033:0x7fa556d5b78e
[ 130.166336][ T6446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 130.166346][ T6446] RSP: 002b:00007fa557c07fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 130.166357][ T6446] RAX: ffffffffffffffda RBX: 00007fa557c086c0 RCX: 00007fa556d5b78e
[ 130.166365][ T6446] RDX: 000000000000000f RSI: 00007fa557c080a0 RDI: 0000000000000006
[ 130.166371][ T6446] RBP: 00007fa557c08090 R08: 0000000000000000 R09: 0000000000000000
[ 130.166378][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 130.166384][ T6446] R13: 00007fa557016038 R14: 00007fa557015fa0 R15: 00007ffc9b0939f8
[ 130.166399][ T6446]
2026/02/19 06:56:18 executed programs: 20
[ 130.406021][ T9] usbtmc 5-1:16.0: can't read capabilities
[ 130.459496][ T9] usb 5-1: USB disconnect, device number 2
[ 130.527031][ T6309] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 130.665898][ T6234] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 130.689523][ T6403] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 130.704035][ T6309] usb 1-1: Using ep0 maxpacket: 8
[ 130.721407][ T6309] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 130.735771][ T6309] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 130.753857][ T6309] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 130.765280][ T6309] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 130.781034][ T6309] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 130.790791][ T6309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 130.825920][ T6234] usb 3-1: Using ep0 maxpacket: 8
[ 130.836444][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 130.860001][ T6234] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 130.874999][ T6234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 130.885223][ T6234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 130.889104][ T6403] usb 2-1: Using ep0 maxpacket: 8
[ 130.896009][ T6234] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 130.914345][ T6234] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 130.927411][ T6234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 130.938251][ T6403] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 130.957490][ T6403] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 130.976306][ T29] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 130.976360][ T6403] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 130.994154][ T6403] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 131.010697][ T6403] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 131.020632][ T6403] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 131.030134][ T9] usb 5-1: Using ep0 maxpacket: 8
[ 131.035346][ T6309] usb 1-1: GET_CAPABILITIES returned 0
[ 131.041816][ T6309] usbtmc 1-1:16.0: can't read capabilities
[ 131.051672][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 131.061914][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 131.095236][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 131.112040][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 131.125529][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 131.134685][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 131.137531][ T29] usb 4-1: Using ep0 maxpacket: 8
[ 131.160810][ T6234] usb 3-1: GET_CAPABILITIES returned 0
[ 131.175412][ T6234] usbtmc 3-1:16.0: can't read capabilities
[ 131.183149][ T29] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 131.213365][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 131.229828][ T6473] FAULT_INJECTION: forcing a failure.
[ 131.229828][ T6473] name failslab, interval 1, probability 0, space 0, times 0
[ 131.242753][ T29] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 131.255112][ T6473] CPU: 0 UID: 0 PID: 6473 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full)
[ 131.255131][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 131.255138][ T6473] Call Trace:
[ 131.255143][ T6473]
[ 131.255148][ T6473] dump_stack_lvl+0x100/0x190
[ 131.255171][ T6473] should_fail_ex.cold+0x5/0xa
[ 131.255189][ T6473] ? tomoyo_realpath_from_path+0xb6/0x690
[ 131.255203][ T6473] should_failslab+0xc2/0x120
[ 131.255222][ T6473] __kmalloc_noprof+0xe0/0x850
[ 131.255240][ T6473] tomoyo_realpath_from_path+0xb6/0x690
[ 131.255257][ T6473] tomoyo_path_number_perm+0x23c/0x580
[ 131.255276][ T6473] ? tomoyo_path_number_perm+0x22e/0x580
[ 131.255295][ T6473] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 131.255328][ T6473] ? find_held_lock+0x2b/0x80
[ 131.255342][ T6473] ? __fget_files+0x215/0x3d0
[ 131.255352][ T6473] ? hook_file_ioctl_common+0x146/0x410
[ 131.255371][ T6473] ? __fget_files+0x21f/0x3d0
[ 131.255384][ T6473] security_file_ioctl+0xd3/0x230
[ 131.255397][ T6473] __x64_sys_ioctl+0xb7/0x210
[ 131.255415][ T6473] do_syscall_64+0x106/0xf80
[ 131.255427][ T6473] ? clear_bhb_loop+0x40/0x90
[ 131.255445][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.255457][ T6473] RIP: 0033:0x7fe8db79aeb9
[ 131.255470][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 131.255481][ T6473] RSP: 002b:00007fe8dc684028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 131.255492][ T6473] RAX: ffffffffffffffda RBX: 00007fe8dba15fa0 RCX: 00007fe8db79aeb9
[ 131.255500][ T6473] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005
[ 131.255506][ T6473] RBP: 00007fe8dc684090 R08: 0000000000000000 R09: 0000000000000000
[ 131.255513][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 131.255519][ T6473] R13: 00007fe8dba16038 R14: 00007fe8dba15fa0 R15: 00007ffcf1850bf8
[ 131.255534][ T6473]
[ 131.255557][ T6473] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 131.264470][ T29] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 131.474265][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.483365][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.492473][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.501730][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.510880][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.525867][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.535023][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.544051][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.553079][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.562912][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.571956][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.580985][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.590233][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.599274][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.609235][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.618282][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 131.628689][ T29] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 131.637612][ T9] usb 5-1: GET_CAPABILITIES returned 0
[ 131.640138][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 131.646431][ T6475] FAULT_INJECTION: forcing a failure.
[ 131.646431][ T6475] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 131.670512][ T6403] usb 2-1: GET_CAPABILITIES returned 0
[ 131.677547][ T9] usbtmc 5-1:16.0: can't read capabilities
[ 131.684356][ T6309] usb 1-1: USB disconnect, device number 3
[ 131.692593][ T6403] usbtmc 2-1:16.0: can't read capabilities
[ 131.711062][ T6475] CPU: 0 UID: 0 PID: 6475 Comm: syz.2.24 Not tainted syzkaller #0 PREEMPT(full)
[ 131.711087][ T6475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 131.711098][ T6475] Call Trace:
[ 131.711104][ T6475]
[ 131.711111][ T6475] dump_stack_lvl+0x100/0x190
[ 131.711149][ T6475] should_fail_ex.cold+0x5/0xa
[ 131.711176][ T6475] _copy_to_user+0x32/0xd0
[ 131.711204][ T6475] simple_read_from_buffer+0xcb/0x170
[ 131.711237][ T6475] proc_fail_nth_read+0x1af/0x230
[ 131.711265][ T6475] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 131.711296][ T6475] ? rw_verify_area+0xce/0x6d0
[ 131.711324][ T6475] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 131.711351][ T6475] vfs_read+0x1e4/0xb30
[ 131.711386][ T6475] ? __pfx_vfs_read+0x10/0x10
[ 131.711414][ T6475] ? __fget_files+0x215/0x3d0
[ 131.711439][ T6475] ? __fget_files+0x21f/0x3d0
[ 131.711466][ T6475] ksys_read+0x12a/0x250
[ 131.711492][ T6475] ? __pfx_ksys_read+0x10/0x10
[ 131.711527][ T6475] do_syscall_64+0x106/0xf80
[ 131.711547][ T6475] ? clear_bhb_loop+0x40/0x90
[ 131.711570][ T6475] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.711591][ T6475] RIP: 0033:0x7f451af5b78e
[ 131.711606][ T6475] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 131.711624][ T6475] RSP: 002b:00007f451bdfefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 131.711643][ T6475] RAX: ffffffffffffffda RBX: 00007f451bdff6c0 RCX: 00007f451af5b78e
[ 131.711656][ T6475] RDX: 000000000000000f RSI: 00007f451bdff0a0 RDI: 0000000000000006
[ 131.711671][ T6475] RBP: 00007f451bdff090 R08: 0000000000000000 R09: 0000000000000000
[ 131.711682][ T6475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 131.711692][ T6475] R13: 00007f451b216128 R14: 00007f451b216090 R15: 00007ffd35a633b8
[ 131.711720][ T6475]
[ 131.725693][ T6479] FAULT_INJECTION: forcing a failure.
[ 131.725693][ T6479] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 131.928878][ T29] usb 4-1: GET_CAPABILITIES returned 0
[ 131.938766][ T6479] CPU: 0 UID: 0 PID: 6479 Comm: syz.4.27 Not tainted syzkaller #0 PREEMPT(full)
[ 131.938794][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 131.938816][ T6479] Call Trace:
[ 131.938823][ T6479]
[ 131.938831][ T6479] dump_stack_lvl+0x100/0x190
[ 131.938867][ T6479] should_fail_ex.cold+0x5/0xa
[ 131.938896][ T6479] _copy_to_user+0x32/0xd0
[ 131.938928][ T6479] simple_read_from_buffer+0xcb/0x170
[ 131.938964][ T6479] proc_fail_nth_read+0x1af/0x230
[ 131.938992][ T6479] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 131.939019][ T6479] ? rw_verify_area+0xce/0x6d0
[ 131.939045][ T6479] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 131.939069][ T6479] vfs_read+0x1e4/0xb30
[ 131.939099][ T6479] ? __pfx_vfs_read+0x10/0x10
[ 131.939125][ T6479] ? __fget_files+0x215/0x3d0
[ 131.939149][ T6479] ? __fget_files+0x21f/0x3d0
[ 131.939176][ T6479] ksys_read+0x12a/0x250
[ 131.939205][ T6479] ? __pfx_ksys_read+0x10/0x10
[ 131.939239][ T6479] do_syscall_64+0x106/0xf80
[ 131.939261][ T6479] ? clear_bhb_loop+0x40/0x90
[ 131.939287][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 131.939306][ T6479] RIP: 0033:0x7f381415b78e
[ 131.939321][ T6479] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 131.939339][ T6479] RSP: 002b:00007f381501bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 131.939357][ T6479] RAX: ffffffffffffffda RBX: 00007f381501c6c0 RCX: 00007f381415b78e
[ 131.939369][ T6479] RDX: 000000000000000f RSI: 00007f381501c0a0 RDI: 0000000000000005
[ 131.939380][ T6479] RBP: 00007f381501c090 R08: 0000000000000000 R09: 0000000000000000
[ 131.939390][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 131.939401][ T6479] R13: 00007f3814416038 R14: 00007f3814415fa0 R15: 00007ffd147ec778
[ 131.939426][ T6479]
[ 131.940164][ T9] usb 3-1: USB disconnect, device number 3
[ 131.941214][ T6235] usb 5-1: USB disconnect, device number 3
[ 132.139610][ T29] usbtmc 4-1:16.0: can't read capabilities
[ 132.148947][ T6477] FAULT_INJECTION: forcing a failure.
[ 132.148947][ T6477] name failslab, interval 1, probability 0, space 0, times 0
[ 132.184454][ T6477] CPU: 1 UID: 0 PID: 6477 Comm: syz.1.26 Not tainted syzkaller #0 PREEMPT(full)
[ 132.184474][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 132.184481][ T6477] Call Trace:
[ 132.184485][ T6477]
[ 132.184489][ T6477] dump_stack_lvl+0x100/0x190
[ 132.184513][ T6477] should_fail_ex.cold+0x5/0xa
[ 132.184528][ T6477] ? tomoyo_realpath_from_path+0xb6/0x690
[ 132.184542][ T6477] should_failslab+0xc2/0x120
[ 132.184560][ T6477] __kmalloc_noprof+0xe0/0x850
[ 132.184579][ T6477] tomoyo_realpath_from_path+0xb6/0x690
[ 132.184595][ T6477] tomoyo_path_number_perm+0x23c/0x580
[ 132.184613][ T6477] ? tomoyo_path_number_perm+0x22e/0x580
[ 132.184632][ T6477] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 132.184665][ T6477] ? find_held_lock+0x2b/0x80
[ 132.184679][ T6477] ? __fget_files+0x215/0x3d0
[ 132.184689][ T6477] ? hook_file_ioctl_common+0x146/0x410
[ 132.184707][ T6477] ? __fget_files+0x21f/0x3d0
[ 132.184727][ T6477] security_file_ioctl+0xd3/0x230
[ 132.184741][ T6477] __x64_sys_ioctl+0xb7/0x210
[ 132.184758][ T6477] do_syscall_64+0x106/0xf80
[ 132.184771][ T6477] ? clear_bhb_loop+0x40/0x90
[ 132.184785][ T6477] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.184797][ T6477] RIP: 0033:0x7fa556d9aeb9
[ 132.184808][ T6477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 132.184818][ T6477] RSP: 002b:00007fa557c08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 132.184830][ T6477] RAX: ffffffffffffffda RBX: 00007fa557015fa0 RCX: 00007fa556d9aeb9
[ 132.184837][ T6477] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005
[ 132.184844][ T6477] RBP: 00007fa557c08090 R08: 0000000000000000 R09: 0000000000000000
[ 132.184851][ T6477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 132.184857][ T6477] R13: 00007fa557016038 R14: 00007fa557015fa0 R15: 00007ffc9b0939f8
[ 132.184872][ T6477]
[ 132.184877][ T6477] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 132.432114][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.441197][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.450229][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.459273][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.469080][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.478141][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.487259][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.496296][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.505352][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.514477][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.526656][ T6507] FAULT_INJECTION: forcing a failure.
[ 132.526656][ T6507] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 132.540124][ T6507] CPU: 1 UID: 0 PID: 6507 Comm: syz.3.28 Not tainted syzkaller #0 PREEMPT(full)
[ 132.540141][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 132.540148][ T6507] Call Trace:
[ 132.540152][ T6507]
[ 132.540156][ T6507] dump_stack_lvl+0x100/0x190
[ 132.540180][ T6507] should_fail_ex.cold+0x5/0xa
[ 132.540195][ T6507] _copy_to_user+0x32/0xd0
[ 132.540212][ T6507] simple_read_from_buffer+0xcb/0x170
[ 132.540233][ T6507] proc_fail_nth_read+0x1af/0x230
[ 132.540248][ T6507] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 132.540264][ T6507] ? rw_verify_area+0xce/0x6d0
[ 132.540279][ T6507] ? __pfx_proc_fail_nth_read+0x10/0x10
[ 132.540293][ T6507] vfs_read+0x1e4/0xb30
[ 132.540310][ T6507] ? __pfx_vfs_read+0x10/0x10
[ 132.540326][ T6507] ? __fget_files+0x215/0x3d0
[ 132.540340][ T6507] ? __fget_files+0x21f/0x3d0
[ 132.540354][ T6507] ksys_read+0x12a/0x250
[ 132.540369][ T6507] ? __pfx_ksys_read+0x10/0x10
[ 132.540395][ T6507] do_syscall_64+0x106/0xf80
[ 132.540408][ T6507] ? clear_bhb_loop+0x40/0x90
[ 132.540423][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 132.540435][ T6507] RIP: 0033:0x7fc0d815b78e
[ 132.540446][ T6507] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 132.540457][ T6507] RSP: 002b:00007fc0d8fc0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 132.540468][ T6507] RAX: ffffffffffffffda RBX: 00007fc0d8fc16c0 RCX: 00007fc0d815b78e
[ 132.540475][ T6507] RDX: 000000000000000f RSI: 00007fc0d8fc10a0 RDI: 0000000000000006
[ 132.540482][ T6507] RBP: 00007fc0d8fc1090 R08: 0000000000000000 R09: 0000000000000000
[ 132.540488][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 132.540494][ T6507] R13: 00007fc0d8416128 R14: 00007fc0d8416090 R15: 00007ffee4e99c38
[ 132.540509][ T6507]
[ 132.749649][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.758720][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.767763][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.777222][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.786245][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.795362][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 132.808246][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[ 132.814840][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[ 132.935603][ T5808] usb 2-1: USB disconnect, device number 4
[ 132.953212][ T6403] usb 4-1: USB disconnect, device number 4
[ 133.206605][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 133.215884][ T6235] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 133.345909][ T6403] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 133.376605][ T9] usb 3-1: Using ep0 maxpacket: 8
[ 133.401647][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 133.415473][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 133.416596][ T6235] usb 5-1: Using ep0 maxpacket: 8
[ 133.425761][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 133.441182][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 133.476550][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 133.478641][ T6235] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 133.496280][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 133.496622][ T6235] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 133.519570][ T6403] usb 4-1: Using ep0 maxpacket: 8
[ 133.533810][ T6403] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 133.533915][ T6235] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 133.573927][ T6403] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 133.584254][ T6235] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 133.599723][ T6235] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 133.609225][ T6235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 133.617046][ T6403] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 133.644903][ T6234] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 133.671062][ T6403] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 133.700108][ T6403] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 133.709567][ T6403] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 133.801843][ T9] usb 3-1: GET_CAPABILITIES returned 0
[ 133.815899][ T9] usbtmc 3-1:16.0: can't read capabilities
[ 133.835904][ T6234] usb 1-1: Using ep0 maxpacket: 8
[ 133.846215][ T6234] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 133.858914][ T6235] usb 5-1: GET_CAPABILITIES returned 0
[ 133.864444][ T6235] usbtmc 5-1:16.0: can't read capabilities
[ 133.874849][ T6234] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 133.887830][ T5808] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 133.900915][ T6234] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 133.912447][ T6234] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 133.925918][ T6234] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 133.934967][ T6234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 133.980286][ T6403] usb 4-1: GET_CAPABILITIES returned 0
[ 133.998636][ T6403] usbtmc 4-1:16.0: can't read capabilities
[ 134.018275][ T6509] FAULT_INJECTION: forcing a failure.
[ 134.018275][ T6509] name failslab, interval 1, probability 0, space 0, times 0
[ 134.055904][ T5808] usb 2-1: Using ep0 maxpacket: 8
[ 134.057298][ T6512] FAULT_INJECTION: forcing a failure.
[ 134.057298][ T6512] name failslab, interval 1, probability 0, space 0, times 0
[ 134.074480][ T6509] CPU: 0 UID: 0 PID: 6509 Comm: syz.2.29 Not tainted syzkaller #0 PREEMPT(full)
[ 134.074508][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 134.074517][ T6509] Call Trace:
[ 134.074524][ T6509]
[ 134.074530][ T6509] dump_stack_lvl+0x100/0x190
[ 134.074564][ T6509] should_fail_ex.cold+0x5/0xa
[ 134.074590][ T6509] ? tomoyo_realpath_from_path+0xb6/0x690
[ 134.074615][ T6509] should_failslab+0xc2/0x120
[ 134.074654][ T6509] __kmalloc_noprof+0xe0/0x850
[ 134.074683][ T6509] tomoyo_realpath_from_path+0xb6/0x690
[ 134.074713][ T6509] tomoyo_path_number_perm+0x23c/0x580
[ 134.074747][ T6509] ? tomoyo_path_number_perm+0x22e/0x580
[ 134.074784][ T6509] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 134.074848][ T6509] ? find_held_lock+0x2b/0x80
[ 134.074873][ T6509] ? __fget_files+0x215/0x3d0
[ 134.074889][ T6509] ? hook_file_ioctl_common+0x146/0x410
[ 134.074923][ T6509] ? __fget_files+0x21f/0x3d0
[ 134.074944][ T6509] security_file_ioctl+0xd3/0x230
[ 134.074966][ T6509] __x64_sys_ioctl+0xb7/0x210
[ 134.074994][ T6509] do_syscall_64+0x106/0xf80
[ 134.075013][ T6509] ? clear_bhb_loop+0x40/0x90
[ 134.075039][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.075060][ T6509] RIP: 0033:0x7f451af9aeb9
[ 134.075080][ T6509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 134.075097][ T6509] RSP: 002b:00007f451be20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 134.075115][ T6509] RAX: ffffffffffffffda RBX: 00007f451b215fa0 RCX: 00007f451af9aeb9
[ 134.075128][ T6509] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005
[ 134.075139][ T6509] RBP: 00007f451be20090 R08: 0000000000000000 R09: 0000000000000000
[ 134.075150][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 134.075160][ T6509] R13: 00007f451b216038 R14: 00007f451b215fa0 R15: 00007ffd35a633b8
[ 134.075187][ T6509]
[ 134.075196][ T6509] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 134.285023][ T6512] CPU: 1 UID: 0 PID: 6512 Comm: syz.4.30 Not tainted syzkaller #0 PREEMPT(full)
[ 134.285050][ T6512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 134.285061][ T6512] Call Trace:
[ 134.285069][ T6512]
[ 134.285077][ T6512] dump_stack_lvl+0x100/0x190
[ 134.285116][ T6512] should_fail_ex.cold+0x5/0xa
[ 134.285142][ T6512] ? tomoyo_realpath_from_path+0xb6/0x690
[ 134.285167][ T6512] should_failslab+0xc2/0x120
[ 134.285202][ T6512] __kmalloc_noprof+0xe0/0x850
[ 134.285237][ T6512] tomoyo_realpath_from_path+0xb6/0x690
[ 134.285271][ T6512] tomoyo_path_number_perm+0x23c/0x580
[ 134.285302][ T6512] ? tomoyo_path_number_perm+0x22e/0x580
[ 134.285337][ T6512] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 134.285392][ T6512] ? find_held_lock+0x2b/0x80
[ 134.285418][ T6512] ? __fget_files+0x215/0x3d0
[ 134.285434][ T6512] ? hook_file_ioctl_common+0x146/0x410
[ 134.285465][ T6512] ? __fget_files+0x21f/0x3d0
[ 134.285487][ T6512] security_file_ioctl+0xd3/0x230
[ 134.285508][ T6512] __x64_sys_ioctl+0xb7/0x210
[ 134.285536][ T6512] do_syscall_64+0x106/0xf80
[ 134.285557][ T6512] ? clear_bhb_loop+0x40/0x90
[ 134.285582][ T6512] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.285603][ T6512] RIP: 0033:0x7f381419aeb9
[ 134.285620][ T6512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 134.285638][ T6512] RSP: 002b:00007f381501c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 134.285656][ T6512] RAX: ffffffffffffffda RBX: 00007f3814415fa0 RCX: 00007f381419aeb9
[ 134.285670][ T6512] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005
[ 134.285683][ T6512] RBP: 00007f381501c090 R08: 0000000000000000 R09: 0000000000000000
[ 134.285696][ T6512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 134.285709][ T6512] R13: 00007f3814416038 R14: 00007f3814415fa0 R15: 00007ffd147ec778
[ 134.285739][ T6512]
[ 134.296740][ T6515] FAULT_INJECTION: forcing a failure.
[ 134.296740][ T6515] name failslab, interval 1, probability 0, space 0, times 0
[ 134.497061][ T6515] CPU: 0 UID: 0 PID: 6515 Comm: syz.3.31 Not tainted syzkaller #0 PREEMPT(full)
[ 134.497086][ T6515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 134.497096][ T6515] Call Trace:
[ 134.497103][ T6515]
[ 134.497110][ T6515] dump_stack_lvl+0x100/0x190
[ 134.497147][ T6515] should_fail_ex.cold+0x5/0xa
[ 134.497174][ T6515] ? tomoyo_realpath_from_path+0xb6/0x690
[ 134.497198][ T6515] should_failslab+0xc2/0x120
[ 134.497228][ T6515] __kmalloc_noprof+0xe0/0x850
[ 134.497259][ T6515] tomoyo_realpath_from_path+0xb6/0x690
[ 134.497292][ T6515] tomoyo_path_number_perm+0x23c/0x580
[ 134.497325][ T6515] ? tomoyo_path_number_perm+0x22e/0x580
[ 134.497361][ T6515] ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 134.497423][ T6515] ? find_held_lock+0x2b/0x80
[ 134.497448][ T6515] ? __fget_files+0x215/0x3d0
[ 134.497466][ T6515] ? hook_file_ioctl_common+0x146/0x410
[ 134.497497][ T6515] ? __fget_files+0x21f/0x3d0
[ 134.497518][ T6515] security_file_ioctl+0xd3/0x230
[ 134.497548][ T6515] __x64_sys_ioctl+0xb7/0x210
[ 134.497579][ T6515] do_syscall_64+0x106/0xf80
[ 134.497601][ T6515] ? clear_bhb_loop+0x40/0x90
[ 134.497625][ T6515] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.497646][ T6515] RIP: 0033:0x7fc0d819aeb9
[ 134.497663][ T6515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 134.497681][ T6515] RSP: 002b:00007fc0d8fe2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 134.497701][ T6515] RAX: ffffffffffffffda RBX: 00007fc0d8415fa0 RCX: 00007fc0d819aeb9
[ 134.497715][ T6515] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005
[ 134.497728][ T6515] RBP: 00007fc0d8fe2090 R08: 0000000000000000 R09: 0000000000000000
[ 134.497740][ T6515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 134.497752][ T6515] R13: 00007fc0d8416038 R14: 00007fc0d8415fa0 R15: 00007ffee4e99c38
[ 134.497781][ T6515]
[ 134.497789][ T6515] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 134.656000][ T6512] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 134.660382][ T6403] usb 5-1: USB disconnect, device number 4
[ 134.719993][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 134.729150][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 134.738206][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 134.747447][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 134.776376][ T6234] usb 1-1: GET_CAPABILITIES returned 0
[ 134.789935][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 134.806328][ T6234] usbtmc 1-1:16.0: can't read capabilities
[ 134.816399][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 134.825459][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 134.834575][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 134.843615][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 134.852673][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 134.861714][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 134.870741][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 134.879788][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 134.903387][ T5808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 134.929732][ C1] ==================================================================
[ 134.937860][ C1] BUG: KASAN: slab-use-after-free in usb_anchor_suspend_wakeups+0x28/0x40
[ 134.946379][ C1] Write of size 4 at addr ffff888079932110 by task syz.4.30/6512
[ 134.954080][ C1]
[ 134.956405][ C1] CPU: 1 UID: 0 PID: 6512 Comm: syz.4.30 Not tainted syzkaller #0 PREEMPT(full)
[ 134.956422][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 134.956430][ C1] Call Trace:
[ 134.956436][ C1]
[ 134.956442][ C1] dump_stack_lvl+0x100/0x190
[ 134.956469][ C1] print_report+0x156/0x4c9
[ 134.956486][ C1] ? __virt_addr_valid+0x81/0x620
[ 134.956504][ C1] ? __phys_addr+0xe8/0x180
[ 134.956520][ C1] ? usb_anchor_suspend_wakeups+0x28/0x40
[ 134.956536][ C1] kasan_report+0xdf/0x1e0
[ 134.956555][ C1] ? usb_anchor_suspend_wakeups+0x28/0x40
[ 134.956572][ C1] kasan_check_range+0x10f/0x1e0
[ 134.956584][ C1] usb_anchor_suspend_wakeups+0x28/0x40
[ 134.956600][ C1] __usb_hcd_giveback_urb+0x223/0x610
[ 134.956615][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0
[ 134.956629][ C1] dummy_timer+0xd85/0x3670
[ 134.956646][ C1] ? find_held_lock+0x2b/0x80
[ 134.956664][ C1] ? debug_object_deactivate+0x2e4/0x3b0
[ 134.956678][ C1] ? __pfx_debug_object_deactivate+0x10/0x10
[ 134.956698][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 134.956712][ C1] ? rcu_is_watching+0x12/0xc0
[ 134.956735][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 134.956771][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 134.956794][ C1] __hrtimer_run_queues+0x50e/0xa70
[ 134.956809][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 134.956822][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0
[ 134.956842][ C1] hrtimer_run_softirq+0x17d/0x350
[ 134.956855][ C1] handle_softirqs+0x1eb/0x9e0
[ 134.956870][ C1] ? __pfx_handle_softirqs+0x10/0x10
[ 134.956885][ C1] __irq_exit_rcu+0xef/0x150
[ 134.956899][ C1] irq_exit_rcu+0x9/0x30
[ 134.956913][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 134.956925][ C1]
[ 134.956929][ C1]
[ 134.956933][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 134.956947][ C1] RIP: 0010:is_module_text_address+0x136/0x220
[ 134.956968][ C1] Code: c0 03 38 d0 7c 08 84 d2 0f 85 ef 00 00 00 8b 83 ec 02 00 00 4c 29 e5 48 39 c5 0f 83 b8 00 00 00 bb 01 00 00 00 e8 9a e5 9c 09 <85> c0 75 23 48 c7 c7 e0 93 7e 8e 48 8d 35 00 00 00 00 e8 13 64 f2
[ 134.956980][ C1] RSP: 0018:ffffc90004367940 EFLAGS: 00000246
[ 134.956990][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000
[ 134.956997][ C1] RDX: 0000000000000000 RSI: ffffffff8c1aef20 RDI: 00007f381419aeb9
[ 134.957005][ C1] RBP: 00007f381419aeb9 R08: 0000000086db7919 R09: 0000000000000007
[ 134.957013][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff81f32f30
[ 134.957022][ C1] R13: ffffc90004367a60 R14: 0000000000000000 R15: ffff888036d64900
[ 134.957031][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 134.957050][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 134.957065][ C1] kernel_text_address+0x81/0x100
[ 134.957079][ C1] __kernel_text_address+0xd/0x30
[ 134.957091][ C1] unwind_get_return_address+0x59/0xa0
[ 134.957106][ C1] arch_stack_walk+0xa6/0xf0
[ 134.957126][ C1] ? __fput+0x68a/0xb40
[ 134.957139][ C1] stack_trace_save+0x8e/0xc0
[ 134.957153][ C1] ? __pfx_stack_trace_save+0x10/0x10
[ 134.957169][ C1] ? __lock_acquire+0x4a5/0x2630
[ 134.957187][ C1] kasan_save_stack+0x30/0x50
[ 134.957203][ C1] ? kasan_save_stack+0x30/0x50
[ 134.957217][ C1] ? kasan_record_aux_stack+0xa7/0xc0
[ 134.957230][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0
[ 134.957249][ C1] ? kmem_cache_free+0x44b/0x6a0
[ 134.957263][ C1] ? __fput+0x68a/0xb40
[ 134.957273][ C1] ? task_work_run+0x150/0x240
[ 134.957284][ C1] ? exit_to_user_mode_loop+0x100/0x4a0
[ 134.957302][ C1] ? do_syscall_64+0x67c/0xf80
[ 134.957314][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.957335][ C1] kasan_record_aux_stack+0xa7/0xc0
[ 134.957348][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[ 134.957363][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0
[ 134.957383][ C1] ? __fput+0x68a/0xb40
[ 134.957394][ C1] kmem_cache_free+0x44b/0x6a0
[ 134.957407][ C1] ? percpu_counter_add_batch+0xb9/0x230
[ 134.957424][ C1] __fput+0x68a/0xb40
[ 134.957437][ C1] task_work_run+0x150/0x240
[ 134.957449][ C1] ? __pfx_task_work_run+0x10/0x10
[ 134.957461][ C1] ? selinux_file_ioctl+0xb4/0x290
[ 134.957479][ C1] exit_to_user_mode_loop+0x100/0x4a0
[ 134.957498][ C1] do_syscall_64+0x67c/0xf80
[ 134.957510][ C1] ? clear_bhb_loop+0x40/0x90
[ 134.957527][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 134.957539][ C1] RIP: 0033:0x7f381419aeb9
[ 134.957550][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 134.957562][ C1] RSP: 002b:00007f381501c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 134.957573][ C1] RAX: ffffffffffffffea RBX: 00007f3814415fa0 RCX: 00007f381419aeb9
[ 134.957581][ C1] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005
[ 134.957588][ C1] RBP: 00007f381501c090 R08: 0000000000000000 R09: 0000000000000000
[ 134.957595][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 134.957602][ C1] R13: 00007f3814416038 R14: 00007f3814415fa0 R15: 00007ffd147ec778
[ 134.957614][ C1]
[ 134.957618][ C1]
[ 135.461146][ C1] Allocated by task 6512:
[ 135.465458][ C1] kasan_save_stack+0x30/0x50
[ 135.470507][ C1] kasan_save_track+0x14/0x30
[ 135.475167][ C1] __kasan_kmalloc+0xaa/0xb0
[ 135.480095][ C1] usbtmc_open+0xa9/0x950
[ 135.484400][ C1] usb_open+0x189/0x220
[ 135.488711][ C1] chrdev_open+0x234/0x6a0
[ 135.493105][ C1] do_dentry_open+0x6d8/0x1660
[ 135.497845][ C1] vfs_open+0x82/0x3f0
[ 135.501894][ C1] path_openat+0x208c/0x31a0
[ 135.506484][ C1] do_file_open+0x20e/0x430
[ 135.510966][ C1] do_sys_openat2+0x10d/0x1e0
[ 135.515616][ C1] __x64_sys_openat+0x12d/0x210
[ 135.520451][ C1] do_syscall_64+0x106/0xf80
[ 135.525011][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.530873][ C1]
[ 135.533168][ C1] Freed by task 6512:
[ 135.537113][ C1] kasan_save_stack+0x30/0x50
[ 135.541767][ C1] kasan_save_track+0x14/0x30
[ 135.546416][ C1] kasan_save_free_info+0x3b/0x70
[ 135.551425][ C1] __kasan_slab_free+0x5f/0x80
[ 135.556170][ C1] kfree+0x1f6/0x6b0
[ 135.560036][ C1] usbtmc_release+0x271/0x380
[ 135.564725][ C1] __fput+0x3ff/0xb40
[ 135.568702][ C1] task_work_run+0x150/0x240
[ 135.573289][ C1] exit_to_user_mode_loop+0x100/0x4a0
[ 135.578640][ C1] do_syscall_64+0x67c/0xf80
[ 135.583203][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.589076][ C1]
[ 135.591370][ C1] The buggy address belongs to the object at ffff888079932000
[ 135.591370][ C1] which belongs to the cache kmalloc-1k of size 1024
[ 135.605438][ C1] The buggy address is located 272 bytes inside of
[ 135.605438][ C1] freed 1024-byte region [ffff888079932000, ffff888079932400)
[ 135.619295][ C1]
[ 135.621597][ C1] The buggy address belongs to the physical page:
[ 135.628015][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79930
[ 135.636842][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 135.645309][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 135.652849][ C1] page_type: f5(slab)
[ 135.656806][ C1] raw: 00fff00000000040 ffff88813fe3adc0 dead000000000100 dead000000000122
[ 135.665376][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 135.673933][ C1] head: 00fff00000000040 ffff88813fe3adc0 dead000000000100 dead000000000122
[ 135.682575][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[ 135.691224][ C1] head: 00fff00000000003 ffffea0001e64c01 00000000ffffffff 00000000ffffffff
[ 135.699875][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 135.708522][ C1] page dumped because: kasan: bad access detected
[ 135.714929][ C1] page_owner tracks the page as allocated
[ 135.720619][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6512, tgid 6511 (syz.4.30), ts 134056818967, free_ts 133989681961
[ 135.741783][ C1] post_alloc_hook+0x153/0x170
[ 135.746535][ C1] get_page_from_freelist+0x111d/0x3140
[ 135.752063][ C1] __alloc_frozen_pages_noprof+0x27c/0x2ba0
[ 135.757936][ C1] new_slab+0xa6/0x6d0
[ 135.761983][ C1] refill_objects+0x26b/0x400
[ 135.766636][ C1] __pcs_replace_empty_main+0x19f/0x600
[ 135.772183][ C1] __kmalloc_cache_noprof+0x493/0x6f0
[ 135.777542][ C1] usbtmc_open+0xa9/0x950
[ 135.781848][ C1] usb_open+0x189/0x220
[ 135.786026][ C1] chrdev_open+0x234/0x6a0
[ 135.790424][ C1] do_dentry_open+0x6d8/0x1660
[ 135.795186][ C1] vfs_open+0x82/0x3f0
[ 135.799229][ C1] path_openat+0x208c/0x31a0
[ 135.803807][ C1] do_file_open+0x20e/0x430
[ 135.808285][ C1] do_sys_openat2+0x10d/0x1e0
[ 135.812941][ C1] __x64_sys_openat+0x12d/0x210
[ 135.817774][ C1] page last free pid 6545 tgid 6545 stack trace:
[ 135.824070][ C1] __free_frozen_pages+0x7ca/0x10a0
[ 135.829255][ C1] qlist_free_all+0x47/0xe0
[ 135.833748][ C1] kasan_quarantine_reduce+0x1a0/0x1f0
[ 135.839186][ C1] __kasan_slab_alloc+0x69/0x90
[ 135.844189][ C1] kmem_cache_alloc_noprof+0x241/0x6e0
[ 135.849646][ C1] do_getname+0x35/0x390
[ 135.853964][ C1] do_sys_openat2+0xc5/0x1e0
[ 135.858545][ C1] __x64_sys_openat+0x12d/0x210
[ 135.863383][ C1] do_syscall_64+0x106/0xf80
[ 135.867960][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 135.873847][ C1]
[ 135.876176][ C1] Memory state around the buggy address:
[ 135.881882][ C1] ffff888079932000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 135.889931][ C1] ffff888079932080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 135.897980][ C1] >ffff888079932100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 135.906015][ C1] ^
[ 135.910571][ C1] ffff888079932180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 135.918636][ C1] ffff888079932200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 135.926844][ C1] ==================================================================
[ 135.934876][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 135.942048][ C1] CPU: 1 UID: 0 PID: 6512 Comm: syz.4.30 Not tainted syzkaller #0 PREEMPT(full)
[ 135.951133][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 135.961184][ C1] Call Trace:
[ 135.964482][ C1]
[ 135.967346][ C1] dump_stack_lvl+0x100/0x190
[ 135.972012][ C1] vpanic+0x552/0x970
[ 135.975966][ C1] ? __pfx_vpanic+0x10/0x10
[ 135.980451][ C1] ? __pfx_vprintk_emit+0x10/0x10
[ 135.985450][ C1] ? usb_anchor_suspend_wakeups+0x28/0x40
[ 135.991145][ C1] panic+0xd1/0xe0
[ 135.994842][ C1] ? __pfx_panic+0x10/0x10
[ 135.999247][ C1] ? end_report.part.0+0x23/0x90
[ 136.004349][ C1] ? rcu_is_watching+0x12/0xc0
[ 136.009222][ C1] ? end_report.part.0+0x23/0x90
[ 136.014148][ C1] ? check_panic_on_warn+0x1f/0x90
[ 136.019249][ C1] check_panic_on_warn.cold+0x19/0x34
[ 136.024623][ C1] end_report.part.0+0x3a/0x90
[ 136.029377][ C1] kasan_report.cold+0xe/0x18
[ 136.034041][ C1] ? usb_anchor_suspend_wakeups+0x28/0x40
[ 136.039848][ C1] kasan_check_range+0x10f/0x1e0
[ 136.044868][ C1] usb_anchor_suspend_wakeups+0x28/0x40
[ 136.050424][ C1] __usb_hcd_giveback_urb+0x223/0x610
[ 136.055794][ C1] usb_hcd_giveback_urb+0x3ca/0x4a0
[ 136.061010][ C1] dummy_timer+0xd85/0x3670
[ 136.065498][ C1] ? find_held_lock+0x2b/0x80
[ 136.070177][ C1] ? debug_object_deactivate+0x2e4/0x3b0
[ 136.075978][ C1] ? __pfx_debug_object_deactivate+0x10/0x10
[ 136.081939][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 136.086857][ C1] ? rcu_is_watching+0x12/0xc0
[ 136.091607][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 136.097395][ C1] ? __pfx_dummy_timer+0x10/0x10
[ 136.102310][ C1] __hrtimer_run_queues+0x50e/0xa70
[ 136.107491][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10
[ 136.113189][ C1] ? ktime_get_update_offsets_now+0x2cd/0x4d0
[ 136.119248][ C1] hrtimer_run_softirq+0x17d/0x350
[ 136.124364][ C1] handle_softirqs+0x1eb/0x9e0
[ 136.129119][ C1] ? __pfx_handle_softirqs+0x10/0x10
[ 136.134395][ C1] __irq_exit_rcu+0xef/0x150
[ 136.138979][ C1] irq_exit_rcu+0x9/0x30
[ 136.143205][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0
[ 136.148829][ C1]
[ 136.151749][ C1]
[ 136.154656][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 136.160623][ C1] RIP: 0010:is_module_text_address+0x136/0x220
[ 136.166765][ C1] Code: c0 03 38 d0 7c 08 84 d2 0f 85 ef 00 00 00 8b 83 ec 02 00 00 4c 29 e5 48 39 c5 0f 83 b8 00 00 00 bb 01 00 00 00 e8 9a e5 9c 09 <85> c0 75 23 48 c7 c7 e0 93 7e 8e 48 8d 35 00 00 00 00 e8 13 64 f2
[ 136.186355][ C1] RSP: 0018:ffffc90004367940 EFLAGS: 00000246
[ 136.192455][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000
[ 136.200416][ C1] RDX: 0000000000000000 RSI: ffffffff8c1aef20 RDI: 00007f381419aeb9
[ 136.208405][ C1] RBP: 00007f381419aeb9 R08: 0000000086db7919 R09: 0000000000000007
[ 136.216480][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: ffffffff81f32f30
[ 136.224443][ C1] R13: ffffc90004367a60 R14: 0000000000000000 R15: ffff888036d64900
[ 136.232441][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 136.238619][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 136.244873][ C1] kernel_text_address+0x81/0x100
[ 136.249900][ C1] __kernel_text_address+0xd/0x30
[ 136.254923][ C1] unwind_get_return_address+0x59/0xa0
[ 136.260411][ C1] arch_stack_walk+0xa6/0xf0
[ 136.265002][ C1] ? __fput+0x68a/0xb40
[ 136.269165][ C1] stack_trace_save+0x8e/0xc0
[ 136.273845][ C1] ? __pfx_stack_trace_save+0x10/0x10
[ 136.279218][ C1] ? __lock_acquire+0x4a5/0x2630
[ 136.284142][ C1] kasan_save_stack+0x30/0x50
[ 136.288803][ C1] ? kasan_save_stack+0x30/0x50
[ 136.293636][ C1] ? kasan_record_aux_stack+0xa7/0xc0
[ 136.299001][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0
[ 136.305051][ C1] ? kmem_cache_free+0x44b/0x6a0
[ 136.309975][ C1] ? __fput+0x68a/0xb40
[ 136.314107][ C1] ? task_work_run+0x150/0x240
[ 136.318850][ C1] ? exit_to_user_mode_loop+0x100/0x4a0
[ 136.324475][ C1] ? do_syscall_64+0x67c/0xf80
[ 136.329324][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.335384][ C1] kasan_record_aux_stack+0xa7/0xc0
[ 136.340559][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10
[ 136.346705][ C1] __call_rcu_common.constprop.0+0xa5/0x9b0
[ 136.352942][ C1] ? __fput+0x68a/0xb40
[ 136.357119][ C1] kmem_cache_free+0x44b/0x6a0
[ 136.361876][ C1] ? percpu_counter_add_batch+0xb9/0x230
[ 136.367519][ C1] __fput+0x68a/0xb40
[ 136.371482][ C1] task_work_run+0x150/0x240
[ 136.376066][ C1] ? __pfx_task_work_run+0x10/0x10
[ 136.381359][ C1] ? selinux_file_ioctl+0xb4/0x290
[ 136.386547][ C1] exit_to_user_mode_loop+0x100/0x4a0
[ 136.391922][ C1] do_syscall_64+0x67c/0xf80
[ 136.396492][ C1] ? clear_bhb_loop+0x40/0x90
[ 136.401162][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 136.407027][ C1] RIP: 0033:0x7f381419aeb9
[ 136.411420][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 136.431099][ C1] RSP: 002b:00007f381501c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 136.439534][ C1] RAX: ffffffffffffffea RBX: 00007f3814415fa0 RCX: 00007f381419aeb9
[ 136.447497][ C1] RDX: 0000200000000040 RSI: 00000000c0145b0e RDI: 0000000000000005
[ 136.455476][ C1] RBP: 00007f381501c090 R08: 0000000000000000 R09: 0000000000000000
[ 136.463517][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 136.471479][ C1] R13: 00007f3814416038 R14: 00007f3814415fa0 R15: 00007ffd147ec778
[ 136.479625][ C1]
[ 136.482945][ C1] Kernel Offset: disabled
[ 136.487297][ C1] Rebooting in 86400 seconds..