Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts.
[ 121.585319][ T5934] gadgetfs: bound to dummy_udc driver
[*] Starting bug reproduction...
[+] debugfs mounted or already present.
[+] unshare successful.
[+] mount / private successful.
[+] mkdir /tmp/gadgetfs successful.
[+] mount gadgetfs successful.
[+] opendir /tmp/gadgetfs successful.
[+] Found ep0 file: dummy_udc
[+] open /tmp/gadgetfs/dummy_udc successful.
[*] Triggering bug with fail-nth=1...
[-] write to ep0 succeeded (fault injection missed).
[+] close fd successful.
[+] umount gadgetfs successful.
[*] Starting bug reproduction...
[+] debugfs mounted or already present.
[+] unshare successful.
[+] mount / private successful.
[+] mkdir /tmp/gadgetfs successful.
[+] mount gadgetfs successful.
[+] opendir /tmp/gadgetfs successful.
[+] Found ep0 file: dummy_udc
[+] open /tmp/gadgetfs/dummy_udc successful.
[*] Triggering bug with fail-nth=2...
[+] write to ep0 failed as expected (fault injection).
[+] close fd successful.
[+] umount gadgetfs successful.
[ 121.724386][ T5936] FAULT_INJECTION: forcing a failure.
[ 121.724386][ T5936] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 121.724431][ T5936] CPU: 1 UID: 0 PID: 5936 Comm: syz-executor187 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 121.724446][ T5936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 121.724458][ T5936] Call Trace:
[ 121.724462][ T5936]
[ 121.724467][ T5936] dump_stack_lvl+0xe8/0x150
[ 121.724494][ T5936] should_fail_ex+0x467/0x600
[ 121.724514][ T5936] _copy_from_user+0x2d/0xb0
[ 121.724527][ T5936] dev_config+0x2ab/0x12c0
[ 121.724541][ T5936] ? vfs_write+0x231/0xbb0
[ 121.724556][ T5936] ? __pfx_dev_config+0x10/0x10
[ 121.724570][ T5936] ? __pfx_dev_config+0x10/0x10
[ 121.724580][ T5936] vfs_write+0x29f/0xbb0
[ 121.724596][ T5936] ? __pfx_vfs_write+0x10/0x10
[ 121.724607][ T5936] ? lockdep_hardirqs_on+0x7a/0x110
[ 121.724627][ T5936] ? fput_close_sync+0x11f/0x240
[ 121.724642][ T5936] ksys_write+0x156/0x270
[ 121.724655][ T5936] ? __pfx_ksys_write+0x10/0x10
[ 121.724672][ T5936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.724683][ T5936] do_syscall_64+0x174/0x580
[ 121.724697][ T5936] ? trace_irq_disable+0x3b/0x140
[ 121.724707][ T5936] ? clear_bhb_loop+0x40/0x90
[ 121.724720][ T5936] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.724729][ T5936] RIP: 0033:0x7f9c403e3137
[*] Starting bug reproduction...
[+] debugfs mounted or already present.
[+] unshare successful.
[+] mount / private successful.
[+] mkdir /tmp/gadgetfs successful.
[+] mount gadgetfs successful.
[+] opendir /tmp/gadgetfs successful.
[+] Found ep0 file: dummy_udc
[+] open /tmp/gadgetfs/dummy_udc successful.
[*] Triggering bug with fail-nth=3...
[+] write to ep0 failed as expected (fault injection).
[+] close fd successful.
[+] umount gadgetfs successful.
[ 121.724743][ T5936] Code: 48 89 fa 4c 89 df e8 98 1e 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 121.724751][ T5936] RSP: 002b:00007ffc402c5530 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 121.724768][ T5936] RAX: ffffffffffffffda RBX: 000055555f765400 RCX: 00007f9c403e3137
[ 121.724775][ T5936] RDX: 000000000000001f RSI: 00007ffc402c5590 RDI: 0000000000000003
[ 121.724781][ T5936] RBP: 00007f9c4041d05e R08: 0000000000000000 R09: 0000000000000000
[ 121.724787][ T5936] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002
[ 121.724793][ T5936] R13: 00007ffc402c56d0 R14: 00007f9c4041f510 R15: 00007f9c4041f4e8
[ 121.724808][ T5936]
[ 121.965417][ T5939] FAULT_INJECTION: forcing a failure.
[ 121.965417][ T5939] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 121.965438][ T5939] CPU: 1 UID: 0 PID: 5939 Comm: syz-executor187 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 121.965450][ T5939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 121.965457][ T5939] Call Trace:
[ 121.965461][ T5939]
[ 121.965466][ T5939] dump_stack_lvl+0xe8/0x150
[ 121.965486][ T5939] should_fail_ex+0x467/0x600
[ 121.965506][ T5939] _copy_from_user+0x2d/0xb0
[ 121.965520][ T5939] memdup_user+0x5e/0xd0
[*] Starting bug reproduction...
[+] debugfs mounted or already present.
[+] unshare successful.
[+] mount / private successful.
[+] mkdir /tmp/gadgetfs successful.
[+] mount gadgetfs successful.
[+] opendir /tmp/gadgetfs successful.
[+] Found ep0 file: dummy_udc
[+] open /tmp/gadgetfs/dummy_udc successful.
[*] Triggering bug with fail-nth=4...
[+] write to ep0 failed as expected (fault injection).
[+] close fd successful.
[+] umount gadgetfs successful.
[ 121.965534][ T5939] dev_config+0x4d8/0x12c0
[ 121.965547][ T5939] ? vfs_write+0x231/0xbb0
[ 121.965562][ T5939] ? __pfx_dev_config+0x10/0x10
[ 121.965576][ T5939] ? __pfx_dev_config+0x10/0x10
[ 121.965586][ T5939] vfs_write+0x29f/0xbb0
[ 121.965602][ T5939] ? __pfx_vfs_write+0x10/0x10
[ 121.965613][ T5939] ? lockdep_hardirqs_on+0x7a/0x110
[ 121.965633][ T5939] ? fput_close_sync+0x11f/0x240
[ 121.965648][ T5939] ksys_write+0x156/0x270
[ 121.965661][ T5939] ? __pfx_ksys_write+0x10/0x10
[ 121.965678][ T5939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.965689][ T5939] do_syscall_64+0x174/0x580
[ 121.965703][ T5939] ? trace_irq_disable+0x3b/0x140
[ 121.965713][ T5939] ? clear_bhb_loop+0x40/0x90
[ 121.965725][ T5939] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 121.965735][ T5939] RIP: 0033:0x7f9c403e3137
[ 121.965746][ T5939] Code: 48 89 fa 4c 89 df e8 98 1e 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[*] Starting bug reproduction...
[+] debugfs mounted or already present.
[+] unshare successful.
[+] mount / private successful.
[+] mkdir /tmp/gadgetfs successful.
[+] mount gadgetfs successful.
[+] opendir /tmp/gadgetfs successful.
[+] Found ep0 file: dummy_udc
[+] open /tmp/gadgetfs/dummy_udc successful.
[*] Triggering bug with fail-nth=5...
[+] write to ep0 failed as expected (fault injection).
[+] close fd successful.
[+] umount gadgetfs successful.
[ 121.965754][ T5939] RSP: 002b:00007ffc402c5530 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 121.965765][ T5939] RAX: ffffffffffffffda RBX: 000055555f765400 RCX: 00007f9c403e3137
[ 121.965772][ T5939] RDX: 000000000000001f RSI: 00007ffc402c5590 RDI: 0000000000000003
[ 121.965778][ T5939] RBP: 00007f9c4041d05e R08: 0000000000000000 R09: 0000000000000000
[ 121.965784][ T5939] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[ 121.965790][ T5939] R13: 00007ffc402c56d0 R14: 00007f9c4041f510 R15: 00007f9c4041f4e8
[ 121.965805][ T5939]
[*] Starting bug reproduction...
[+] debugfs mounted or already present.
[+] unshare successful.
[+] mount / private successful.
[+] mkdir /tmp/gadgetfs successful.
[+] mount gadgetfs successful.
[+] opendir /tmp/gadgetfs successful.
[+] Found ep0 file: dummy_udc
[+] open /tmp/gadgetfs/dummy_udc successful.
[*] Triggering bug with fail-nth=6...
[+] write to ep0 failed as expected (fault injection).
[+] close fd successful.
[+] umount gadgetfs successful.
[ 122.098452][ T5940] FAULT_INJECTION: forcing a failure.
[ 122.098452][ T5940] name failslab, interval 1, probability 100, space 0, times 0
[ 122.098482][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: syz-executor187 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 122.098503][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 122.098513][ T5940] Call Trace:
[ 122.098520][ T5940]
[ 122.098527][ T5940] dump_stack_lvl+0xe8/0x150
[ 122.098559][ T5940] should_fail_ex+0x467/0x600
[ 122.098592][ T5940] should_failslab+0xa8/0x100
[ 122.098615][ T5940] __kmalloc_cache_noprof+0xa0/0x6b0
[ 122.098637][ T5940] ? bus_add_driver+0x165/0x670
[ 122.098657][ T5940] ? bus_add_driver+0x165/0x670
[ 122.098683][ T5940] bus_add_driver+0x165/0x670
[ 122.098705][ T5940] ? driver_find+0x195/0x1a0
[ 122.098729][ T5940] driver_register+0x23a/0x320
[ 122.098750][ T5940] usb_gadget_register_driver_owner+0xf9/0x270
[ 122.098782][ T5940] dev_config+0xe4e/0x12c0
[ 122.098809][ T5940] ? __pfx_dev_config+0x10/0x10
[ 122.098835][ T5940] ? __pfx_dev_config+0x10/0x10
[ 122.098852][ T5940] vfs_write+0x29f/0xbb0
[ 122.098883][ T5940] ? __pfx_vfs_write+0x10/0x10
[ 122.098901][ T5940] ? lockdep_hardirqs_on+0x7a/0x110
[ 122.098930][ T5940] ? fput_close_sync+0x11f/0x240
[ 122.098961][ T5940] ksys_write+0x156/0x270
[ 122.098984][ T5940] ? __pfx_ksys_write+0x10/0x10
[ 122.099012][ T5940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.099031][ T5940] do_syscall_64+0x174/0x580
[ 122.099055][ T5940] ? trace_irq_disable+0x3b/0x140
[ 122.099073][ T5940] ? clear_bhb_loop+0x40/0x90
[ 122.099095][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.099113][ T5940] RIP: 0033:0x7f9c403e3137
[ 122.099130][ T5940] Code: 48 89 fa 4c 89 df e8 98 1e 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 122.099145][ T5940] RSP: 002b:00007ffc402c5530 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 122.099164][ T5940] RAX: ffffffffffffffda RBX: 000055555f765400 RCX: 00007f9c403e3137
[*] Starting bug reproduction...
[+] debugfs mounted or already present.
[+] unshare successful.
[+] mount / private successful.
[+] mkdir /tmp/gadgetfs successful.
[+] mount gadgetfs successful.
[+] opendir /tmp/gadgetfs successful.
[+] Found ep0 file: dummy_udc
[+] open /tmp/gadgetfs/dummy_udc successful.
[*] Triggering bug with fail-nth=7...
[-] write to ep0 succeeded (fault injection missed).
[+] close fd successful.
[+] umount gadgetfs successful.
[ 122.099177][ T5940] RDX: 000000000000001f RSI: 00007ffc402c5590 RDI: 0000000000000003
[ 122.099189][ T5940] RBP: 00007f9c4041d05e R08: 0000000000000000 R09: 0000000000000000
[ 122.099199][ T5940] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000005
[ 122.099210][ T5940] R13: 00007ffc402c56d0 R14: 00007f9c4041f510 R15: 00007f9c4041f4e8
[ 122.099238][ T5940]
[ 122.106862][ T5940] UDC core: USB Gadget filesystem: driver registration failed: -12
[ 122.194720][ T5941] FAULT_INJECTION: forcing a failure.
[ 122.194720][ T5941] name failslab, interval 1, probability 100, space 0, times 0
[ 122.194753][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: syz-executor187 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 122.194775][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 122.194785][ T5941] Call Trace:
[ 122.194792][ T5941]
[ 122.194799][ T5941] dump_stack_lvl+0xe8/0x150
[ 122.194842][ T5941] should_fail_ex+0x467/0x600
[ 122.194876][ T5941] should_failslab+0xa8/0x100
[ 122.194899][ T5941] kmem_cache_alloc_noprof+0xa4/0x650
[ 122.194918][ T5941] ? __kernfs_new_node+0xe7/0xa70
[ 122.194938][ T5941] ? __kernfs_new_node+0xe7/0xa70
[ 122.194965][ T5941] __kernfs_new_node+0xe7/0xa70
[ 122.194993][ T5941] ? __pfx___kernfs_new_node+0x10/0x10
[ 122.195014][ T5941] ? kernfs_root+0x1c/0x230
[ 122.195039][ T5941] ? kernfs_root+0x1c/0x230
[ 122.195056][ T5941] ? kernfs_root+0x1c/0x230
[ 122.195073][ T5941] ? kernfs_root+0x1c/0x230
[ 122.195097][ T5941] kernfs_create_dir_ns+0xfe/0x230
[ 122.195123][ T5941] sysfs_create_dir_ns+0x12f/0x2a0
[ 122.195145][ T5941] ? __pfx_sysfs_create_dir_ns+0x10/0x10
[ 122.195168][ T5941] ? rt_spin_unlock+0x163/0x200
[ 122.195192][ T5941] kobject_add_internal+0x62c/0xce0
[ 122.195215][ T5941] kobject_init_and_add+0x12b/0x1a0
[ 122.195239][ T5941] ? __pfx_kobject_init_and_add+0x10/0x10
[ 122.195261][ T5941] ? __rt_spin_lock_init+0x3e/0x50
[ 122.195292][ T5941] bus_add_driver+0x258/0x670
[ 122.195320][ T5941] driver_register+0x23a/0x320
[ 122.195340][ T5941] usb_gadget_register_driver_owner+0xf9/0x270
[*] Starting bug reproduction...
[+] debugfs mounted or already present.
[+] unshare successful.
[+] mount / private successful.
[+] mkdir /tmp/gadgetfs successful.
[+] mount gadgetfs successful.
[+] opendir /tmp/gadgetfs successful.
[+] Found ep0 file: dummy_udc
[+] open /tmp/gadgetfs/dummy_udc successful.
[*] Triggering bug with fail-nth=8...
[-] write to ep0 succeeded (fault injection missed).
[+] close fd successful.
[+] umount gadgetfs successful.
[ 122.195371][ T5941] dev_config+0xe4e/0x12c0
[ 122.195399][ T5941] ? __pfx_dev_config+0x10/0x10
[ 122.195425][ T5941] ? __pfx_dev_config+0x10/0x10
[ 122.195442][ T5941] vfs_write+0x29f/0xbb0
[ 122.195473][ T5941] ? __pfx_vfs_write+0x10/0x10
[ 122.195493][ T5941] ? lockdep_hardirqs_on+0x7a/0x110
[ 122.195528][ T5941] ? fput_close_sync+0x11f/0x240
[ 122.195554][ T5941] ksys_write+0x156/0x270
[ 122.195578][ T5941] ? __pfx_ksys_write+0x10/0x10
[ 122.195608][ T5941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.195628][ T5941] do_syscall_64+0x174/0x580
[ 122.195650][ T5941] ? trace_irq_disable+0x3b/0x140
[ 122.195668][ T5941] ? clear_bhb_loop+0x40/0x90
[ 122.195690][ T5941] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.195708][ T5941] RIP: 0033:0x7f9c403e3137
[ 122.195725][ T5941] Code: 48 89 fa 4c 89 df e8 98 1e 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 122.195739][ T5941] RSP: 002b:00007ffc402c5530 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 122.195759][ T5941] RAX: ffffffffffffffda RBX: 000055555f765400 RCX: 00007f9c403e3137
[ 122.195772][ T5941] RDX: 000000000000001f RSI: 00007ffc402c5590 RDI: 0000000000000003
[ 122.195783][ T5941] RBP: 00007f9c4041d05e R08: 0000000000000000 R09: 0000000000000000
[ 122.195794][ T5941] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000006
[ 122.195805][ T5941] R13: 00007ffc402c56d0 R14: 00007f9c4041f510 R15: 00007f9c4041f4e8
[ 122.195839][ T5941]
[*] Starting bug reproduction...
[+] debugfs mounted or already present.
[+] unshare successful.
[+] mount / private successful.
[+] mkdir /tmp/gadgetfs successful.
[+] mount gadgetfs successful.
[+] opendir /tmp/gadgetfs successful.
[+] Found ep0 file: dummy_udc
[+] open /tmp/gadgetfs/dummy_udc successful.
[*] Triggering bug with fail-nth=9...
[-] write to ep0 succeeded (fault injection missed).
[+] close fd successful.
[+] umount gadgetfs successful.
[ 122.195850][ T5941] kobject: kobject_add_internal failed for gadgetfs (error: -12 parent: drivers)
[ 122.195878][ T5941] UDC core: USB Gadget filesystem: driver registration failed: -12
[ 122.254644][ T5942] gadgetfs: bound to dummy_udc driver
[ 122.447156][ T5945] FAULT_INJECTION: forcing a failure.
[ 122.447156][ T5945] name failslab, interval 1, probability 100, space 0, times 0
[ 122.447189][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz-executor187 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 122.447209][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 122.447220][ T5945] Call Trace:
[ 122.447227][ T5945]
[ 122.447234][ T5945] dump_stack_lvl+0xe8/0x150
[ 122.447283][ T5945] should_fail_ex+0x467/0x600
[ 122.447316][ T5945] should_failslab+0xa8/0x100
[ 122.447341][ T5945] __kmalloc_node_track_caller_noprof+0x102/0x7c0
[ 122.447362][ T5945] ? __lock_acquire+0x683/0x2ce0
[ 122.447381][ T5945] ? __kernfs_new_node+0xac/0xa70
[ 122.447400][ T5945] ? __kernfs_new_node+0xac/0xa70
[ 122.447426][ T5945] kstrdup+0x42/0x100
[ 122.447453][ T5945] __kernfs_new_node+0xac/0xa70
[ 122.447481][ T5945] ? __pfx___kernfs_new_node+0x10/0x10
[ 122.447501][ T5945] ? kernfs_root+0x1c/0x230
[ 122.447526][ T5945] ? kernfs_root+0x1c/0x230
[ 122.447545][ T5945] ? kernfs_root+0x1c/0x230
[ 122.447569][ T5945] kernfs_new_node+0xea/0x140
[ 122.447594][ T5945] kernfs_create_link+0xa7/0x200
[ 122.447622][ T5945] sysfs_do_create_link_sd+0x83/0x110
[ 122.447644][ T5945] driver_sysfs_add+0x89/0x210
[ 122.447672][ T5945] really_probe+0x142/0xae0
[ 122.447702][ T5945] __driver_probe_device+0x1e8/0x360
[*] Starting bug reproduction...
[+] debugfs mounted or already present.
[+] unshare successful.
[+] mount / private successful.
[+] mkdir /tmp/gadgetfs successful.
[+] mount gadgetfs successful.
[+] opendir /tmp/gadgetfs successful.
[+] Found ep0 file: dummy_udc
[+] open /tmp/gadgetfs/dummy_udc successful.
[*] Triggering bug with fail-nth=10...
[-] write to ep0 succeeded (fault injection missed).
[+] close fd successful.
[+] umount gadgetfs successful.
[ 122.447731][ T5945] driver_probe_device+0x4f/0x240
[ 122.447760][ T5945] __driver_attach+0x339/0x600
[ 122.447788][ T5945] bus_for_each_dev+0x23e/0x2c0
[ 122.447808][ T5945] ? __pfx___driver_attach+0x10/0x10
[ 122.447833][ T5945] ? __pfx_bus_for_each_dev+0x10/0x10
[ 122.447851][ T5945] ? rt_spin_unlock+0x157/0x200
[ 122.447876][ T5945] ? rt_spin_unlock+0x163/0x200
[ 122.447897][ T5945] bus_add_driver+0x348/0x670
[ 122.447925][ T5945] driver_register+0x23a/0x320
[ 122.447945][ T5945] usb_gadget_register_driver_owner+0xf9/0x270
[ 122.447982][ T5945] dev_config+0xe4e/0x12c0
[ 122.448010][ T5945] ? __pfx_dev_config+0x10/0x10
[ 122.448036][ T5945] ? __pfx_dev_config+0x10/0x10
[ 122.448054][ T5945] vfs_write+0x29f/0xbb0
[ 122.448084][ T5945] ? __pfx_vfs_write+0x10/0x10
[ 122.448104][ T5945] ? lockdep_hardirqs_on+0x7a/0x110
[ 122.448138][ T5945] ? fput_close_sync+0x11f/0x240
[ 122.448165][ T5945] ksys_write+0x156/0x270
[ 122.448191][ T5945] ? __pfx_ksys_write+0x10/0x10
[ 122.448221][ T5945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.448241][ T5945] do_syscall_64+0x174/0x580
[ 122.448264][ T5945] ? trace_irq_disable+0x3b/0x140
[ 122.448282][ T5945] ? clear_bhb_loop+0x40/0x90
[ 122.448304][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.448322][ T5945] RIP: 0033:0x7f9c403e3137
[ 122.448338][ T5945] Code: 48 89 fa 4c 89 df e8 98 1e 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 122.448352][ T5945] RSP: 002b:00007ffc402c5[ 122.448352][ T5945] RSP: 002b:00007ffc402c5530 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 122.448372][ T5945] RAX: ffffffffffffffda RBX: 000055555f765400 RCX: 00007f9c403e3137
[ 122.448385][ T5945] RDX: 000000000000001f RSI: 00007ffc402c5590 RDI: 0000000000000003
[ 122.448396][ T5945] RBP: 00007f9c4041d05e R08: 0000000000000000 R09: 0000000000000000
[ 122.448408][ T5945] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008
[ 122.448418][ T5945] R13: 00007ffc402c56d0 R14: 00007f9c4041f510 R15: 00007f9c4041f4e8
[ 122.448446][ T5945]
[ 122.448458][ T5945] gadgetfs gadget.0: really_probe: driver_sysfs_add failed
[ 122.466557][ T5945] gadgetfs: bound to dummy_udc driver
[ 122.638806][ T5949] FAULT_INJECTION: forcing a failure.
[ 122.638806][ T5949] name failslab, interval 1, probability 100, space 0, times 0
[ 122.638839][ T5949] CPU: 0 UID: 0 PID: 5949 Comm: syz-executor187 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 122.638860][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 122.638872][ T5949] Call Trace:
[ 122.638878][ T5949]
[ 122.638884][ T5949] dump_stack_lvl+0xe8/0x150
[ 122.638912][ T5949] should_fail_ex+0x467/0x600
[ 122.638943][ T5949] should_failslab+0xa8/0x100
[ 122.638974][ T5949] kmem_cache_alloc_noprof+0xa4/0x650
[ 122.638993][ T5949] ? __kernfs_new_node+0xe7/0xa70
[ 122.639013][ T5949] ? __kernfs_new_node+0xe7/0xa70
[ 122.639039][ T5949] __kernfs_new_node+0xe7/0xa70
[ 122.639068][ T5949] ? __pfx___kernfs_new_node+0x10/0x10
[ 122.639089][ T5949] ? kernfs_root+0x1c/0x230
[ 122.639113][ T5949] ? kernfs_root+0x1c/0x230
[ 122.639132][ T5949] ? kernfs_root+0x1c/0x230
[ 122.639156][ T5949] kernfs_new_node+0xea/0x140
[ 122.639181][ T5949] kernfs_create_link+0xa7/0x200
[ 122.639209][ T5949] sysfs_do_create_link_sd+0x83/0x110
[ 122.639230][ T5949] driver_sysfs_add+0x89/0x210
[ 122.639258][ T5949] really_probe+0x142/0xae0
[ 122.639288][ T5949] __driver_probe_device+0x1e8/0x360
[ 122.639316][ T5949] driver_probe_device+0x4f/0x240
[ 122.639344][ T5949] __driver_attach+0x339/0x600
[ 122.639372][ T5949] bus_for_each_dev+0x23e/0x2c0
[ 122.639393][ T5949] ? __pfx___driver_attach+0x10/0x10
[ 122.639418][ T5949] ? __pfx_bus_for_each_dev+0x10/0x10
[ 122.639436][ T5949] ? rt_spin_unlock+0x157/0x200
[ 122.639459][ T5949] ? rt_spin_unlock+0x163/0x200
[ 122.639480][ T5949] bus_add_driver+0x348/0x670
[ 122.639507][ T5949] driver_register+0x23a/0x320
[ 122.639526][ T5949] usb_gadget_register_driver_owner+0xf9/0x270
[ 122.639557][ T5949] dev_config+0xe4e/0x12c0
[ 122.639586][ T5949] ? __pfx_dev_config+0x10/0x10
[ 122.639612][ T5949] ? __pfx_dev_config+0x10/0x10
[ 122.639630][ T5949] vfs_write+0x29f/0xbb0
[ 122.639660][ T5949] ? __pfx_vfs_write+0x10/0x10
[ 122.639680][ T5949] ? lockdep_hardirqs_on+0x7a/0x110
[ 122.639714][ T5949] ? fput_close_sync+0x11f/0x240
[ 122.639741][ T5949] ksys_write+0x156/0x270
[ 122.639766][ T5949] ? __pfx_ksys_write+0x10/0x10
[ 122.639796][ T5949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.639816][ T5949] do_syscall_64+0x174/0x580
[ 122.639839][ T5949] ? trace_irq_disable+0x3b/0x140
[ 122.639858][ T5949] ? clear_bhb_loop+0x40/0x90
[ 122.639879][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.639897][ T5949] RIP: 0033:0x7f9c403e3137
[ 122.639914][ T5949] Code: 48 89 fa 4c 89 df e8 98 1e 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 122.639927][ T5949] RSP: 002b:00007ffc402c5530 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 122.639947][ T5949] RAX: ffffffffffffffda RBX: 000055555f765400 RCX: 00007f9c403e3137
[ 122.639966][ T5949] RDX: 000000000000001f RSI: 00007ffc402c5590 RDI: 0000000000000003
[ 122.639977][ T5949] RBP: 00007f9c4041d05e R08: 0000000000000000 R09: 0000000000000000
[ 122.639988][ T5949] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000009
[ 122.639999][ T5949] R13: 00007ffc402c56d0 R14: 00007f9c4041f510 R15: 00007f9c4041f4e8
[ 122.640027][ T5949]
[ 122.647500][ T5949] gadgetfs gadget.0: really_probe: driver_sysfs_add failed
[ 122.654378][ T5949] gadgetfs: bound to dummy_udc driver
[ 122.822781][ T5950] FAULT_INJECTION: forcing a failure.
[ 122.822781][ T5950] name failslab, interval 1, probability 100, space 0, times 0
[ 122.822814][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: syz-executor187 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 122.822835][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 122.822845][ T5950] Call Trace:
[ 122.822852][ T5950]
[ 122.822860][ T5950] dump_stack_lvl+0xe8/0x150
[ 122.822893][ T5950] should_fail_ex+0x467/0x600
[ 122.822926][ T5950] should_failslab+0xa8/0x100
[ 122.822949][ T5950] kmem_cache_alloc_noprof+0xa4/0x650
[ 122.822968][ T5950] ? __kernfs_new_node+0xe7/0xa70
[ 122.822987][ T5950] ? __kernfs_new_node+0xe7/0xa70
[ 122.823008][ T5950] ? do_raw_spin_lock+0x12b/0x2f0
[ 122.823038][ T5950] __kernfs_new_node+0xe7/0xa70
[ 122.823066][ T5950] ? __pfx___kernfs_new_node+0x10/0x10
[ 122.823087][ T5950] ? kernfs_root+0x1c/0x230
[ 122.823112][ T5950] ? kernfs_root+0x1c/0x230
[ 122.823131][ T5950] ? kernfs_root+0x1c/0x230
[ 122.823154][ T5950] kernfs_new_node+0xea/0x140
[ 122.823178][ T5950] kernfs_create_link+0xa7/0x200
[ 122.823207][ T5950] sysfs_do_create_link_sd+0x83/0x110
[ 122.823228][ T5950] driver_sysfs_add+0xec/0x210
[ 122.823255][ T5950] really_probe+0x142/0xae0
[ 122.823285][ T5950] __driver_probe_device+0x1e8/0x360
[ 122.823314][ T5950] driver_probe_device+0x4f/0x240
[ 122.823343][ T5950] __driver_attach+0x339/0x600
[ 122.823369][ T5950] bus_for_each_dev+0x23e/0x2c0
[ 122.823390][ T5950] ? __pfx___driver_attach+0x10/0x10
[ 122.823414][ T5950] ? __pfx_bus_for_each_dev+0x10/0x10
[ 122.823433][ T5950] ? rt_spin_unlock+0x157/0x200
[ 122.823457][ T5950] ? rt_spin_unlock+0x163/0x200
[ 122.823486][ T5950] bus_add_driver+0x348/0x670
[ 122.823514][ T5950] driver_register+0x23a/0x320
[ 122.823534][ T5950] usb_gadget_register_driver_owner+0xf9/0x270
[ 122.823566][ T5950] dev_config+0xe4e/0x12c0
[ 122.823593][ T5950] ? __pfx_dev_config+0x10/0x10
[ 122.823619][ T5950] ? __pfx_dev_config+0x10/0x10
[ 122.823637][ T5950] vfs_write+0x29f/0xbb0
[ 122.823669][ T5950] ? __pfx_vfs_write+0x10/0x10
[ 122.823688][ T5950] ? lockdep_hardirqs_on+0x7a/0x110
[ 122.823722][ T5950] ? fput_close_sync+0x11f/0x240
[ 122.823750][ T5950] ksys_write+0x156/0x270
[ 122.823774][ T5950] ? __pfx_ksys_write+0x10/0x10
[ 122.823804][ T5950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.823823][ T5950] do_syscall_64+0x174/0x580
[ 122.823846][ T5950] ? trace_irq_disable+0x3b/0x140
[ 122.823865][ T5950] ? clear_bhb_loop+0x40/0x90
[ 122.823886][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.823904][ T5950] RIP: 0033:0x7f9c403e3137
[ 122.823922][ T5950] Code: 48 89 fa 4c 89 df e8 98 1e 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 122.823935][ T5950] RSP: 002b:00007ffc402c5530 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 122.823955][ T5950] RAX: ffffffffffffffda RBX: 000055555f765400 RCX: 00007f9c403e3137
[ 122.823967][ T5950] RDX: 000000000000001f RSI: 00007ffc402c5590 RDI: 0000000000000003
[ 122.823979][ T5950] RBP: 00007f9c4041d05e R08: 0000000000000000 R09: 0000000000000000
[ 122.823989][ T5950] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a
[ 122.823999][ T5950] R13: 00007ffc402c56d0 R14: 00007f9c4041f510 R15: 00007f9c4041f4e8
[ 122.824028][ T5950]
[ 122.824312][ T5950] gadgetfs gadget.0: really_probe: driver_sysfs_add failed
[ 122.827263][ T5950] gadgetfs: bound to dummy_udc driver
[ 122.938480][ T5951] FAULT_INJECTION: forcing a failure.
[ 122.938480][ T5951] name failslab, interval 1, probability 100, space 0, times 0
[ 122.938513][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz-executor187 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 122.938535][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 122.938545][ T5951] Call Trace:
[ 122.938552][ T5951]
[ 122.938559][ T5951] dump_stack_lvl+0xe8/0x150
[ 122.938592][ T5951] should_fail_ex+0x467/0x600
[ 122.938626][ T5951] should_failslab+0xa8/0x100
[ 122.938650][ T5951] __kmalloc_cache_noprof+0xa0/0x6b0
[ 122.938670][ T5951] ? dummy_alloc_request+0x7f/0x130
[ 122.938694][ T5951] ? dummy_alloc_request+0x7f/0x130
[ 122.938730][ T5951] dummy_alloc_request+0x7f/0x130
[ 122.938754][ T5951] usb_ep_alloc_request+0x67/0x280
[ 122.938780][ T5951] gadgetfs_bind+0x124/0xae0
[ 122.938812][ T5951] ? __pfx_gadgetfs_bind+0x10/0x10
[ 122.938831][ T5951] gadget_bind_driver+0x2ca/0x9e0
[ 122.938871][ T5951] ? __pfx_gadget_bind_driver+0x10/0x10
[ 122.938893][ T5951] really_probe+0x254/0xae0
[ 122.938920][ T5951] __driver_probe_device+0x1e8/0x360
[ 122.938946][ T5951] driver_probe_device+0x4f/0x240
[ 122.938972][ T5951] __driver_attach+0x339/0x600
[ 122.938997][ T5951] bus_for_each_dev+0x23e/0x2c0
[ 122.939016][ T5951] ? __pfx___driver_attach+0x10/0x10
[ 122.939038][ T5951] ? __pfx_bus_for_each_dev+0x10/0x10
[ 122.939054][ T5951] ? rt_spin_unlock+0x157/0x200
[ 122.939077][ T5951] ? rt_spin_unlock+0x163/0x200
[ 122.939099][ T5951] bus_add_driver+0x348/0x670
[ 122.939127][ T5951] driver_register+0x23a/0x320
[ 122.939147][ T5951] usb_gadget_register_driver_owner+0xf9/0x270
[ 122.939177][ T5951] dev_config+0xe4e/0x12c0
[ 122.939205][ T5951] ? __pfx_dev_config+0x10/0x10
[ 122.939230][ T5951] ? __pfx_dev_config+0x10/0x10
[ 122.939248][ T5951] vfs_write+0x29f/0xbb0
[ 122.939278][ T5951] ? __pfx_vfs_write+0x10/0x10
[ 122.939298][ T5951] ? lockdep_hardirqs_on+0x7a/0x110
[ 122.939333][ T5951] ? fput_close_sync+0x11f/0x240
[ 122.939359][ T5951] ksys_write+0x156/0x270
[ 122.939384][ T5951] ? __pfx_ksys_write+0x10/0x10
[ 122.939414][ T5951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.939434][ T5951] do_syscall_64+0x174/0x580
[ 122.939457][ T5951] ? trace_irq_disable+0x3b/0x140
[ 122.939475][ T5951] ? clear_bhb_loop+0x40/0x90
[ 122.939497][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 122.939515][ T5951] RIP: 0033:0x7f9c403e3137
[ 122.939532][ T5951] Code: 48 89 fa 4c 89 df e8 98 1e 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 122.939547][ T5951] RSP: 002b:00007ffc402c5530 EFLAGS: 00000202 ORIG_RAX: 0000000000000001
[ 122.939565][ T5951] RAX: ffffffffffffffda RBX: 000055555f765400 RCX: 00007f9c403e3137
[ 122.939578][ T5951] RDX: 000000000000001f RSI: 00007ffc402c5590 RDI: 0000000000000003
[ 122.939589][ T5951] RBP: 00007f9c4041d05e R08: 0000000000000000 R09: 0000000000000000
[ 122.939600][ T5951] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000b
[ 122.939610][ T5951] R13: 00007ffc402c56d0 R14: 00007f9c4041f510 R15: 00007f9c4041f4e8
[ 122.939639][ T5951]
[ 122.941966][ T5951] udc dummy_udc.0: failed to start USB Gadget filesystem: -12
[ 122.941989][ T5951] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12
[ 122.952964][ T5951] gadgetfs: bound to dummy_udc driver
[ 123.029625][ T5951] ==================================================================
[ 123.029640][ T5951] BUG: KASAN: slab-use-after-free in gadgetfs_kill_sb+0x46/0x110
[ 123.029665][ T5951] Write of size 4 at addr ffff888034069080 by task syz-executor187/5951
[ 123.029681][ T5951]
[ 123.029691][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz-executor187 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 123.029711][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 123.029722][ T5951] Call Trace:
[ 123.029729][ T5951]
[ 123.029736][ T5951] dump_stack_lvl+0xe8/0x150
[ 123.029762][ T5951] print_address_description+0x55/0x1e0
[ 123.029789][ T5951] ? gadgetfs_kill_sb+0x46/0x110
[ 123.029806][ T5951] print_report+0x58/0x70
[ 123.029829][ T5951] kasan_report+0x117/0x150
[ 123.029851][ T5951] ? gadgetfs_kill_sb+0x46/0x110
[ 123.029872][ T5951] kasan_check_range+0x264/0x2c0
[ 123.029894][ T5951] gadgetfs_kill_sb+0x46/0x110
[ 123.029911][ T5951] deactivate_locked_super+0xbc/0x130
[ 123.029939][ T5951] cleanup_mnt+0x3d3/0x460
[ 123.029963][ T5951] task_work_run+0x1d9/0x270
[ 123.029982][ T5951] ? __pfx_task_work_run+0x10/0x10
[ 123.030002][ T5951] exit_to_user_mode_loop+0x1fa/0x730
[ 123.030020][ T5951] ? rcu_is_watching+0x15/0xb0
[ 123.030042][ T5951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.030061][ T5951] do_syscall_64+0x353/0x580
[ 123.030084][ T5951] ? trace_irq_disable+0x3b/0x140
[ 123.030101][ T5951] ? clear_bhb_loop+0x40/0x90
[ 123.030121][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.030138][ T5951] RIP: 0033:0x7f9c403c3027
[ 123.030154][ T5951] Code: a2 c7 05 54 b0 08 00 00 00 00 00 eb 96 e8 a1 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8
[ 123.030169][ T5951] RSP: 002b:00007ffc402c5578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 123.030189][ T5951] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f9c403c3027
[ 123.030201][ T5951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f9c4041d05e
[ 123.030212][ T5951] RBP: 00007f9c4041d05e R08: 0000000000000000 R09: 0000000000000000
[ 123.030223][ T5951] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c4041d623
[ 123.030234][ T5951] R13: 00007ffc402c56d0 R14: 00007f9c4041f510 R15: 00007f9c4041f4e8
[ 123.030254][ T5951]
[ 123.030260][ T5951]
[ 123.030264][ T5951] Allocated by task 5951:
[ 123.030273][ T5951] kasan_save_track+0x3e/0x80
[ 123.030290][ T5951] __kasan_kmalloc+0x93/0xb0
[ 123.030306][ T5951] __kmalloc_cache_noprof+0x3d2/0x6b0
[ 123.030324][ T5951] gadgetfs_fill_super+0x27b/0x7a0
[ 123.030339][ T5951] get_tree_single+0xc0/0x150
[ 123.030358][ T5951] vfs_get_tree+0x92/0x2a0
[ 123.030377][ T5951] do_new_mount+0x319/0xdc0
[ 123.030392][ T5951] __se_sys_mount+0x31d/0x420
[ 123.030409][ T5951] do_syscall_64+0x174/0x580
[ 123.030430][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.030445][ T5951]
[ 123.030449][ T5951] Freed by task 5951:
[ 123.030457][ T5951] kasan_save_track+0x3e/0x80
[ 123.030472][ T5951] kasan_save_free_info+0x40/0x50
[ 123.030493][ T5951] __kasan_slab_free+0x5c/0x80
[ 123.030510][ T5951] kfree+0x1c5/0x6c0
[ 123.030522][ T5951] dev_release+0x173/0x210
[ 123.030538][ T5951] __fput+0x42a/0xa80
[ 123.030553][ T5951] fput_close_sync+0x11f/0x240
[ 123.030568][ T5951] __x64_sys_close+0x7e/0x110
[ 123.030585][ T5951] do_syscall_64+0x174/0x580
[ 123.030605][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.030621][ T5951]
[ 123.030625][ T5951] The buggy address belongs to the object at ffff888034069000
[ 123.030625][ T5951] which belongs to the cache kmalloc-1k of size 1024
[ 123.030639][ T5951] The buggy address is located 128 bytes inside of
[ 123.030639][ T5951] freed 1024-byte region [ffff888034069000, ffff888034069400)
[ 123.030657][ T5951]
[ 123.030662][ T5951] The buggy address belongs to the physical page:
[ 123.030676][ T5951] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888034069800 pfn:0x34068
[ 123.030698][ T5951] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 123.030713][ T5951] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[ 123.030732][ T5951] page_type: f5(slab)
[ 123.030752][ T5951] raw: 0080000000000240 ffff88813ffb2dc0 ffffea0000d33e10 ffffea0000a85210
[ 123.030767][ T5951] raw: ffff888034069800 0000000800100007 00000000f5000000 0000000000000000
[ 123.030783][ T5951] head: 0080000000000240 ffff88813ffb2dc0 ffffea0000d33e10 ffffea0000a85210
[ 123.030798][ T5951] head: ffff888034069800 0000000800100007 00000000f5000000 0000000000000000
[ 123.030814][ T5951] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 123.030828][ T5951] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 123.030836][ T5951] page dumped because: kasan: bad access detected
[ 123.030849][ T5951] page_owner tracks the page as allocated
[ 123.030855][ T5951] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5659, tgid 5659 (syz-executor), ts 91566899744, free_ts 90984522889
[ 123.030884][ T5951] post_alloc_hook+0x1f9/0x250
[ 123.030900][ T5951] get_page_from_freelist+0x262a/0x26a0
[ 123.030920][ T5951] __alloc_frozen_pages_noprof+0x18d/0x380
[ 123.030945][ T5951] allocate_slab+0x79/0x5e0
[ 123.030965][ T5951] refill_objects+0x2d8/0x350
[ 123.030987][ T5951] __pcs_replace_empty_main+0x330/0x690
[ 123.031008][ T5951] __kmalloc_cache_noprof+0x468/0x6b0
[ 123.031025][ T5951] afs_alloc_call+0x79/0x580
[ 123.031048][ T5951] afs_charge_preallocation+0x273/0x570
[ 123.031071][ T5951] afs_open_socket+0x33c/0x3f0
[ 123.031092][ T5951] afs_net_init+0x6ce/0x8f0
[ 123.031111][ T5951] ops_init+0x35d/0x5d0
[ 123.031128][ T5951] setup_net+0x118/0x350
[ 123.031144][ T5951] copy_net_ns+0x4f9/0x720
[ 123.031159][ T5951] create_new_namespaces+0x3f0/0x6b0
[ 123.031178][ T5951] unshare_nsproxy_namespaces+0x149/0x190
[ 123.031197][ T5951] page last free pid 10 tgid 10 stack trace:
[ 123.031206][ T5951] __free_frozen_pages+0x10e7/0x11c0
[ 123.031222][ T5951] kasan_depopulate_vmalloc_pte+0x6d/0x90
[ 123.031248][ T5951] __apply_to_page_range+0xbd8/0x1420
[ 123.031271][ T5951] __kasan_release_vmalloc+0xa2/0xd0
[ 123.031294][ T5951] purge_vmap_node+0x220/0x960
[ 123.031312][ T5951] __purge_vmap_area_lazy+0x783/0xb40
[ 123.031330][ T5951] drain_vmap_area_work+0x27/0x40
[ 123.031348][ T5951] process_scheduled_works+0xa8e/0x14e0
[ 123.031367][ T5951] worker_thread+0xa47/0xfb0
[ 123.031385][ T5951] kthread+0x388/0x470
[ 123.031407][ T5951] ret_from_fork+0x514/0xb70
[ 123.031431][ T5951] ret_from_fork_asm+0x1a/0x30
[ 123.031447][ T5951]
[ 123.031450][ T5951] Memory state around the buggy address:
[ 123.031460][ T5951] ffff888034068f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 123.031471][ T5951] ffff888034069000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 123.031482][ T5951] >ffff888034069080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 123.031490][ T5951] ^
[ 123.031498][ T5951] ffff888034069100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 123.031510][ T5951] ffff888034069180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 123.031518][ T5951] ==================================================================
[ 123.031556][ T5951] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 123.031569][ T5951] CPU: 0 UID: 0 PID: 5951 Comm: syz-executor187 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 123.031589][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 123.031599][ T5951] Call Trace:
[ 123.031605][ T5951]
[ 123.031612][ T5951] vpanic+0x56c/0xa60
[ 123.031630][ T5951] ? __pfx_vpanic+0x10/0x10
[ 123.031647][ T5951] ? __pfx___schedule+0x10/0x10
[ 123.031671][ T5951] panic+0xc5/0xd0
[ 123.031686][ T5951] ? __pfx_panic+0x10/0x10
[ 123.031702][ T5951] ? preempt_schedule_thunk+0x16/0x40
[ 123.031727][ T5951] ? gadgetfs_kill_sb+0x46/0x110
[ 123.031745][ T5951] check_panic_on_warn+0x89/0xb0
[ 123.031762][ T5951] ? gadgetfs_kill_sb+0x46/0x110
[ 123.031779][ T5951] end_report+0x73/0x170
[ 123.031799][ T5951] ? gadgetfs_kill_sb+0x46/0x110
[ 123.031815][ T5951] kasan_report+0x128/0x150
[ 123.031836][ T5951] ? gadgetfs_kill_sb+0x46/0x110
[ 123.031857][ T5951] kasan_check_range+0x264/0x2c0
[ 123.031879][ T5951] gadgetfs_kill_sb+0x46/0x110
[ 123.031897][ T5951] deactivate_locked_super+0xbc/0x130
[ 123.031917][ T5951] cleanup_mnt+0x3d3/0x460
[ 123.031946][ T5951] task_work_run+0x1d9/0x270
[ 123.031964][ T5951] ? __pfx_task_work_run+0x10/0x10
[ 123.031985][ T5951] exit_to_user_mode_loop+0x1fa/0x730
[ 123.032003][ T5951] ? rcu_is_watching+0x15/0xb0
[ 123.032024][ T5951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.032042][ T5951] do_syscall_64+0x353/0x580
[ 123.032064][ T5951] ? trace_irq_disable+0x3b/0x140
[ 123.032081][ T5951] ? clear_bhb_loop+0x40/0x90
[ 123.032101][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 123.032118][ T5951] RIP: 0033:0x7f9c403c3027
[ 123.032132][ T5951] Code: a2 c7 05 54 b0 08 00 00 00 00 00 eb 96 e8 a1 08 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 d8 ff ff ff f7 d8 64 89 02 b8
[ 123.032145][ T5951] RSP: 002b:00007ffc402c5578 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 123.032163][ T5951] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00007f9c403c3027
[ 123.032174][ T5951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f9c4041d05e
[ 123.032185][ T5951] RBP: 00007f9c4041d05e R08: 0000000000000000 R09: 0000000000000000
[ 123.032197][ T5951] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c4041d623
[ 123.032208][ T5951] R13: 00007ffc402c56d0 R14: 00007f9c4041f510 R15: 00007f9c4041f4e8
[ 123.032228][ T5951]
[ 123.032515][ T5951] Kernel Offset: disabled