last executing test programs: 4.995478987s ago: executing program 0 (id=1461): add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000340)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000580)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.931550103s ago: executing program 0 (id=1463): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x3, 0x11, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b00)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000001b80)="09790000ffffff082b5108da88a8a5a186dda7614d93e7321db30e13c9a8316d8ceb3c470400", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.259538845s ago: executing program 3 (id=1468): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000001800)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000001840)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) 3.235224117s ago: executing program 0 (id=1469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.131435998s ago: executing program 1 (id=1470): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000580)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000005c0), 0x4) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="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", 0x3f1}, {&(0x7f0000000c80)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c", 0x30}, {&(0x7f0000000cc0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000d40)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x20000020, 0x0) 3.090408332s ago: executing program 3 (id=1471): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @empty}], 0x10) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0/file0'}, 0x11) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0xffe0) 3.047919567s ago: executing program 1 (id=1472): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x107) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='9', 0x1) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1000004, 0x2) 3.028109089s ago: executing program 0 (id=1473): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0x1a43) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_LOAD(r3, 0xc138fd09, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@error={0x0, 0x80, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r3, 0xc138fd06, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r3, 0xc138fd0e, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x158, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '-', 0x20, '/1'}}}) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000a00)='./dm0\x00', 0x6180, r4) r5 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000a40)='./dm0\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000a80)="010203", 0x3, 0x1000) shutdown(r2, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24008818, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000001c0)={@local}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x25, &(0x7f0000000200)={0xffffff01, 0x3}, 0x1) pipe2(&(0x7f0000000100), 0x80800) 2.930198069s ago: executing program 1 (id=1475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003240)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000003380)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) 2.889288563s ago: executing program 3 (id=1476): r0 = open$dir(&(0x7f0000000280)='./config/nullb/nullb1/irqmode/../file0\x00', 0x301000, 0x46) mkdirat(r0, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@filename='./debug\x00', &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/x86/topo/domains\x00', 0x0, 0x0) read(r4, &(0x7f0000000400)=""/100, 0x64) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000000400000000070000000700002c6dce90", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write(r3, &(0x7f0000000070)='syz0:', 0x5) 2.844803468s ago: executing program 1 (id=1477): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x12c) write(r2, &(0x7f0000000280)='27', 0x2) sendfile(r1, r0, 0x0, 0x8010002b) 2.829222519s ago: executing program 2 (id=1478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003200)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000003380)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) 2.708698691s ago: executing program 2 (id=1479): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000640)={0x0, 0x0, {0x3, 0x3}}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x20002, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0xf1) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x16, &(0x7f0000000300)=ANY=[@ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000034000000b703000000e5ff008500000083000000bf0900000000000055090100000040009500000000000000950000000000000085000000c900000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x6, 0xc6, &(0x7f0000000940)=""/198, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000cc0)=[r5, 0xffffffffffffffff], &(0x7f0000000d00)=[{0x5, 0x4, 0x3, 0xb}, {0x2, 0x3, 0xb, 0x3}, {0x2, 0x3, 0xd, 0xc}, {0x0, 0x3, 0xa, 0x9}], 0x10, 0x2}, 0x94) pwrite64(r5, &(0x7f0000000600)="1bd6", 0x2, 0x8) 1.2593537s ago: executing program 2 (id=1482): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000580)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000005c0), 0x4) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="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", 0x3f1}, {&(0x7f0000000c80)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045", 0x33}, {&(0x7f0000000cc0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000d40)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x20000020, 0x0) 1.086645558s ago: executing program 0 (id=1483): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000680)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}, 0x24000008) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, 0x0) setns(0xc9, 0x0) r3 = socket(0x2a, 0x2, 0x5) connect$inet6(r3, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40002122, 0x0) sendmsg$tipc(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004800}, 0x4800) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./proc\x00', 0x173) mount(0x0, &(0x7f00000009c0)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000a80)='14', 0x2) setsockopt$inet_tcp_int(r5, 0x6, 0x10, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 1.083584289s ago: executing program 4 (id=1484): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001a40)={0x20, r1, 0x7, 0x3, 0x1fff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48041}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) 1.083139129s ago: executing program 1 (id=1485): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0xb, &(0x7f00000000c0)=""/193, &(0x7f0000000200)=0xc1) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000700)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x38, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000840)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 1.055337472s ago: executing program 2 (id=1486): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x107) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='9', 0x1) syz_open_dev$vim2m(&(0x7f00000000c0), 0x1000004, 0x2) 999.802517ms ago: executing program 3 (id=1487): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0xa2fac000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 999.462447ms ago: executing program 4 (id=1488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003240)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000003380)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) 994.681028ms ago: executing program 2 (id=1489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 968.40035ms ago: executing program 4 (id=1490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003200)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003340)={&(0x7f0000003380)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c050}, 0x0) 946.584563ms ago: executing program 0 (id=1491): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x60) r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000440), 0x80000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000480)={0x0, @aes128, 0x0, @desc4}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='-', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB]) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000340)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000440), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x80002c1, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x11, &(0x7f00000004c0)=0x100000001, 0x56) write$P9_RVERSION(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="150000006bffff"], 0x15) ioctl$KDFONTOP_SET_DEF(0xffffffffffffffff, 0x4b72, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000e80)={&(0x7f0000000ec0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000f00)=[{0x0}, {&(0x7f0000000f80)="e196bc1480bb", 0x6}], 0x2}, 0x2400c004) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x800000) recvmsg(r7, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x40000000) 942.437883ms ago: executing program 3 (id=1492): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001900)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x3, 0x11, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000001ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b00)={r1, 0x18000000000002a0, 0x27, 0x0, &(0x7f0000001b80)="09790000ffffff082b5108da88a8a5a186dda7614d93e7321db30e13c9a8316d8ceb3c47040000", 0x0, 0x1000fe2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 920.491075ms ago: executing program 4 (id=1493): add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x32, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000340)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) listen(r1, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000580)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 895.088888ms ago: executing program 4 (id=1494): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56170, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2}, {0xd, 0xffe5}}}, 0x24}}, 0x4008000) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='GPL\x00'}, 0x48) 21.981098ms ago: executing program 2 (id=1495): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') prlimit64(0x0, 0xe, &(0x7f00000001c0)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x3000007, 0x10, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000009c0), 0x80002c1, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000b40), &(0x7f0000000b80)='./file1\x00', 0x10048, &(0x7f0000000bc0)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6c6f7765722c696f636861727365743d63703836312c00f54f36778e7c2defd4a177283254efa9174a5aac6eb8992e9861f2eb7095940f9f27e0992164c730e09565585f5699f069051edce5a2147e9e052030e269ba9d31870e1b471c24470fb136a11da4a9f11c4d77af199ac1acf0a65e2c4807829751de53d1fab4506199601b9d8115c3efc59d88b3a16dcba162c362a91457e038b2da16203c62867d82e8af74e7a2142f9fd66d2fc999ad8be012dbb24071220de3a2bc8aca31c6e39f1eaaeccbe8bd029c0e6a01f580abd3da1661d05a43e96773526dbe520e441238346c0980694218c41fcad26443c5ee7be70c"], 0x1, 0x2a5, &(0x7f0000000d00)="$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") syz_open_dev$loop(0x0, 0x10, 0x800c2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='blkio.bfq.empty_time\x00', 0x275a, 0x0) pwritev2(r3, &(0x7f0000001100)=[{&(0x7f0000001140)="dd701cca9a7585783490822566f7f977a412eba9c2b32ba3b128e6df89cda8945d85d4d603bafc264aca7235201f63e7bc5dd9c7b7b5bed42b8fc6ff1e7c72225830cb1c1ce15e58470500766825832785d0c1eef6f579fabe9f4b59d69197d156c55858eb16fe5776e3643bb2d23bfda439c61ff19d1ab566389c9d37948752d2242285d6557d482f34e638f064ad3a5aa6e34e14e63f170eec35204390c805008415be4049d6369df37c25e08ca65b8134", 0xb2}], 0x1, 0x6, 0x6e, 0x4) 20.467258ms ago: executing program 3 (id=1496): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000580)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00000005c0), 0x4) bind$inet(r0, &(0x7f0000000600)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f0000000c80)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045", 0x33}, {&(0x7f0000000cc0)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000d40)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x40) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x20000020, 0x0) 19.356448ms ago: executing program 4 (id=1497): r0 = add_key(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f00000004c0)='asymmetric\x00', 0x0, &(0x7f00000006c0)="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", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000c40)={r1, 0x0, 0x5a}, &(0x7f0000000c80)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha224'], 0x0, &(0x7f0000000d00)=""/90) 0s ago: executing program 1 (id=1498): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000880)={0x0, 0x1c, &(0x7f00000008c0)=[@in6={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7}]}, &(0x7f0000000900)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000940)={r1, 0x3}, 0x8) kernel console output (not intermixed with test programs): [ 34.976411][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.978080][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.982488][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.989939][ T4343] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.993093][ T4343] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.995388][ T4343] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.996982][ T4343] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.015938][ T4404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.017312][ T4404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.019312][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.021104][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.024788][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.033846][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.070546][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.072354][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.076854][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.099399][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.101399][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.103498][ T91] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.137077][ T4456] Zero length message leads to an empty skb [ 35.151800][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.153290][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.154788][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.224023][ T4472] loop1: detected capacity change from 0 to 1024 [ 35.224128][ T4471] device syzkaller0 entered promiscuous mode [ 35.235197][ T4472] EXT4-fs: Ignoring removed bh option [ 35.258466][ T4472] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 35.275939][ T4472] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10: bg 0: block 64: padding at end of block bitmap is not set [ 35.282427][ T4472] EXT4-fs (loop1): Remounting filesystem read-only [ 35.450959][ T4345] Bluetooth: hci1: command 0x041b tx timeout [ 35.452877][ T4332] Bluetooth: hci4: command 0x041b tx timeout [ 35.455739][ T4339] Bluetooth: hci3: command 0x041b tx timeout [ 35.461445][ T4345] Bluetooth: hci0: command 0x041b tx timeout [ 35.531745][ T4345] Bluetooth: hci2: command 0x041b tx timeout [ 36.295780][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 36.658122][ T4550] loop2: detected capacity change from 0 to 1156 [ 36.693004][ T4550] ISOFS: unable to read i-node block [ 36.701250][ T4550] isofs_fill_super: get root inode failed [ 36.749892][ T4550] FAULT_INJECTION: forcing a failure. [ 36.749892][ T4550] name failslab, interval 1, probability 0, space 0, times 1 [ 36.752370][ T4550] CPU: 1 PID: 4550 Comm: syz.2.46 Not tainted syzkaller #0 [ 36.753597][ T4550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.755368][ T4550] Call trace: [ 36.755921][ T4550] dump_backtrace+0x1c4/0x1f0 [ 36.756733][ T4550] show_stack+0x2c/0x3c [ 36.757438][ T4550] __dump_stack+0x30/0x40 [ 36.758249][ T4550] dump_stack_lvl+0xf4/0x15c [ 36.759189][ T4550] dump_stack+0x1c/0x5c [ 36.760029][ T4550] should_fail_ex+0x3cc/0x524 [ 36.760861][ T4550] __should_failslab+0xc0/0x11c [ 36.761824][ T4550] should_failslab+0x10/0x28 [ 36.762691][ T4550] __kmem_cache_alloc_node+0x7c/0x318 [ 36.763668][ T4550] kmalloc_trace+0x48/0x94 [ 36.764501][ T4550] tipc_nametbl_insert_publ+0x74/0xf10 [ 36.765477][ T4550] tipc_nametbl_publish+0x10c/0x250 [ 36.766595][ T4550] tipc_sk_publish+0x17c/0x384 [ 36.767631][ T4550] tipc_sk_join+0x2d4/0x508 [ 36.768530][ T4550] tipc_setsockopt+0x3b8/0x7a8 [ 36.769447][ T4550] __sys_setsockopt+0x2fc/0x50c [ 36.770498][ T4550] __arm64_sys_setsockopt+0xc0/0xdc [ 36.771693][ T4550] invoke_syscall+0x98/0x290 [ 36.772742][ T4550] el0_svc_common+0x13c/0x258 [ 36.773589][ T4550] do_el0_svc+0x5c/0x134 [ 36.774300][ T4550] el0_svc+0x58/0x12c [ 36.774983][ T4550] el0t_64_sync_handler+0x84/0xf0 [ 36.775869][ T4550] el0t_64_sync+0x18c/0x190 [ 36.943138][ T4578] netlink: 104 bytes leftover after parsing attributes in process `syz.0.58'. [ 37.028832][ T4588] loop2: detected capacity change from 0 to 1024 [ 37.034697][ T4588] EXT4-fs: Mount option(s) incompatible with ext3 [ 37.108041][ T4322] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 37.530953][ T4345] Bluetooth: hci4: command 0x040f tx timeout [ 37.541044][ T4339] Bluetooth: hci0: command 0x040f tx timeout [ 37.541891][ T4345] Bluetooth: hci1: command 0x040f tx timeout [ 37.542164][ T4339] Bluetooth: hci3: command 0x040f tx timeout [ 37.611813][ T4332] Bluetooth: hci2: command 0x040f tx timeout [ 37.624825][ T4613] loop1: detected capacity change from 0 to 2048 [ 37.634650][ T4615] device syzkaller1 entered promiscuous mode [ 37.657891][ T4617] loop3: detected capacity change from 0 to 1024 [ 37.662122][ T4617] EXT4-fs: Mount option(s) incompatible with ext3 [ 37.726472][ T4613] loop1: p1 < > p4 [ 37.726472][ T4613] p4: [ 37.729152][ T4613] loop1: p4 size 722688 extends beyond EOD, truncated [ 38.004742][ T4630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 38.137156][ T4636] FAULT_INJECTION: forcing a failure. [ 38.137156][ T4636] name failslab, interval 1, probability 0, space 0, times 0 [ 38.139496][ T4636] CPU: 0 PID: 4636 Comm: syz.0.83 Not tainted syzkaller #0 [ 38.140982][ T4636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.142909][ T4636] Call trace: [ 38.143505][ T4636] dump_backtrace+0x1c4/0x1f0 [ 38.144490][ T4636] show_stack+0x2c/0x3c [ 38.145297][ T4636] __dump_stack+0x30/0x40 [ 38.146146][ T4636] dump_stack_lvl+0xf4/0x15c [ 38.146970][ T4636] dump_stack+0x1c/0x5c [ 38.147804][ T4636] should_fail_ex+0x3cc/0x524 [ 38.148630][ T4636] __should_failslab+0xc0/0x11c [ 38.149542][ T4636] should_failslab+0x10/0x28 [ 38.150454][ T4636] __kmem_cache_alloc_node+0x7c/0x318 [ 38.151505][ T4636] kmalloc_trace+0x48/0x94 [ 38.152283][ T4636] legacy_init_fs_context+0x5c/0xc8 [ 38.153245][ T4636] alloc_fs_context+0x530/0x778 [ 38.154168][ T4636] fs_context_for_mount+0x34/0x44 [ 38.155056][ T4636] do_new_mount+0xfc/0x818 [ 38.155871][ T4636] path_mount+0x5ac/0xe6c [ 38.156673][ T4636] __arm64_sys_mount+0x4a0/0x5a0 [ 38.157664][ T4636] invoke_syscall+0x98/0x290 [ 38.158616][ T4636] el0_svc_common+0x13c/0x258 [ 38.159582][ T4636] do_el0_svc+0x5c/0x134 [ 38.160479][ T4636] el0_svc+0x58/0x12c [ 38.161246][ T4636] el0t_64_sync_handler+0x84/0xf0 [ 38.162137][ T4636] el0t_64_sync+0x18c/0x190 [ 38.293530][ T4647] loop4: detected capacity change from 0 to 1024 [ 38.302175][ T4647] EXT4-fs: Mount option(s) incompatible with ext3 [ 38.365919][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'. [ 38.410123][ T4655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.92'. [ 38.523614][ T4668] device syzkaller0 entered promiscuous mode [ 38.720600][ T4678] loop0: detected capacity change from 0 to 1024 [ 38.724582][ T4678] EXT4-fs: Mount option(s) incompatible with ext3 [ 38.755485][ T4322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 38.817626][ T4678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 38.865207][ T4690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.108'. [ 39.213442][ T4715] loop0: detected capacity change from 0 to 1024 [ 39.215639][ T4715] EXT4-fs: Mount option(s) incompatible with ext3 [ 39.252666][ T4322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.314944][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 39.500092][ T4730] loop0: detected capacity change from 0 to 512 [ 39.513717][ T4730] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.526574][ T4730] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3877: comm syz.0.126: Allocating blocks 41-42 which overlap fs metadata [ 39.530478][ T4730] EXT4-fs (loop0): Remounting filesystem read-only [ 39.533367][ T4730] Quota error (device loop0): write_blk: dquota write failed [ 39.535196][ T4730] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 39.537354][ T4730] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3877: comm syz.0.126: Allocating blocks 41-42 which overlap fs metadata [ 39.540377][ T4730] EXT4-fs (loop0): Remounting filesystem read-only [ 39.542687][ T4730] Quota error (device loop0): write_blk: dquota write failed [ 39.544497][ T4730] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 39.546638][ T4730] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.126: Failed to acquire dquot type 1 [ 39.548904][ T4730] EXT4-fs (loop0): Remounting filesystem read-only [ 39.550597][ T4730] EXT4-fs error (device loop0): mb_free_blocks:1853: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 39.554780][ T4730] EXT4-fs (loop0): Remounting filesystem read-only [ 39.556110][ T4730] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #12: comm syz.0.126: corrupted inode contents [ 39.558489][ T4730] EXT4-fs (loop0): Remounting filesystem read-only [ 39.559895][ T4730] EXT4-fs error (device loop0): ext4_dirty_inode:6199: inode #12: comm syz.0.126: mark_inode_dirty error [ 39.563573][ T4730] EXT4-fs (loop0): Remounting filesystem read-only [ 39.565083][ T4730] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #12: comm syz.0.126: corrupted inode contents [ 39.567422][ T4730] EXT4-fs (loop0): Remounting filesystem read-only [ 39.568796][ T4730] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.126: mark_inode_dirty error [ 39.573324][ T4730] EXT4-fs (loop0): Remounting filesystem read-only [ 39.574926][ T4730] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #12: comm syz.0.126: corrupted inode contents [ 39.580283][ T4730] EXT4-fs (loop0): Remounting filesystem read-only [ 39.582557][ T4730] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 39.584766][ T4730] EXT4-fs (loop0): Remounting filesystem read-only [ 39.585941][ T4739] FAULT_INJECTION: forcing a failure. [ 39.585941][ T4739] name failslab, interval 1, probability 0, space 0, times 0 [ 39.586122][ T4730] EXT4-fs error (device loop0): ext4_do_update_inode:5312: inode #12: comm syz.0.126: corrupted inode contents [ 39.588505][ T4739] CPU: 1 PID: 4739 Comm: syz.1.129 Not tainted syzkaller #0 [ 39.592131][ T4739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.594247][ T4739] Call trace: [ 39.594881][ T4739] dump_backtrace+0x1c4/0x1f0 [ 39.595748][ T4739] show_stack+0x2c/0x3c [ 39.596036][ T4730] EXT4-fs (loop0): Remounting filesystem read-only [ 39.596542][ T4739] __dump_stack+0x30/0x40 [ 39.598051][ T4730] EXT4-fs error (device loop0): ext4_truncate:4328: inode #12: comm syz.0.126: mark_inode_dirty error [ 39.598759][ T4739] dump_stack_lvl+0xf4/0x15c [ 39.601505][ T4730] EXT4-fs (loop0): Remounting filesystem read-only [ 39.601804][ T4739] dump_stack+0x1c/0x5c [ 39.603367][ T4730] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 39.604065][ T4739] should_fail_ex+0x3cc/0x524 [ 39.606322][ T4730] EXT4-fs (loop0): Remounting filesystem read-only [ 39.606802][ T4739] __should_failslab+0xc0/0x11c [ 39.608578][ T4730] EXT4-fs (loop0): 1 truncate cleaned up [ 39.609146][ T4739] should_failslab+0x10/0x28 [ 39.610667][ T4730] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 39.611124][ T4739] __kmem_cache_alloc_node+0x7c/0x318 [ 39.613980][ T4739] kmalloc_node_trace+0x44/0x90 [ 39.614988][ T4739] __alloc_disk_node+0x70/0x438 [ 39.615868][ T4739] __blk_alloc_disk+0x40/0xb8 [ 39.616708][ T4739] dm_create+0x514/0xf48 [ 39.617140][ T4730] EXT4-fs (loop0): shut down requested (2) [ 39.617524][ T4739] dev_create+0xf4/0x25c [ 39.619519][ T4739] dm_ctl_ioctl+0xaac/0xf1c [ 39.620305][ T4739] __arm64_sys_ioctl+0x14c/0x1c8 [ 39.621153][ T4739] invoke_syscall+0x98/0x290 [ 39.622056][ T4739] el0_svc_common+0x13c/0x258 [ 39.622849][ T4739] do_el0_svc+0x5c/0x134 [ 39.623573][ T4739] el0_svc+0x58/0x12c [ 39.624325][ T4739] el0t_64_sync_handler+0x84/0xf0 [ 39.625329][ T4739] el0t_64_sync+0x18c/0x190 [ 39.629836][ T4339] Bluetooth: hci3: command 0x0419 tx timeout [ 39.631129][ T4339] Bluetooth: hci1: command 0x0419 tx timeout [ 39.632149][ T4339] Bluetooth: hci0: command 0x0419 tx timeout [ 39.633205][ T4339] Bluetooth: hci4: command 0x0419 tx timeout [ 39.641429][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 39.691908][ T4332] Bluetooth: hci2: command 0x0419 tx timeout [ 39.719741][ T4745] loop0: detected capacity change from 0 to 1024 [ 39.721820][ T4745] EXT4-fs: Ignoring removed bh option [ 39.738318][ T4745] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.744035][ T4745] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.130: bg 0: block 64: padding at end of block bitmap is not set [ 39.746767][ T4745] EXT4-fs (loop0): Remounting filesystem read-only [ 39.851990][ T4752] ======================================================= [ 39.851990][ T4752] WARNING: The mand mount option has been deprecated and [ 39.851990][ T4752] and is ignored by this kernel. Remove the mand [ 39.851990][ T4752] option from the mount to silence this warning. [ 39.851990][ T4752] ======================================================= [ 40.033624][ T4753] block device autoloading is deprecated and will be removed. [ 40.094402][ T4753] md: md3 stopped. [ 40.101213][ T4753] md: md3 stopped. [ 41.130845][ C1] sched: RT throttling activated [ 41.427700][ T4337] EXT4-fs (loop0): unmounting filesystem. [ 41.728291][ T4778] FAULT_INJECTION: forcing a failure. [ 41.728291][ T4778] name failslab, interval 1, probability 0, space 0, times 0 [ 41.732909][ T4778] CPU: 1 PID: 4778 Comm: syz.0.142 Not tainted syzkaller #0 [ 41.734342][ T4778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 41.736362][ T4778] Call trace: [ 41.737006][ T4778] dump_backtrace+0x1c4/0x1f0 [ 41.737837][ T4778] show_stack+0x2c/0x3c [ 41.738555][ T4778] __dump_stack+0x30/0x40 [ 41.739312][ T4778] dump_stack_lvl+0xf4/0x15c [ 41.740189][ T4778] dump_stack+0x1c/0x5c [ 41.741010][ T4778] should_fail_ex+0x3cc/0x524 [ 41.741959][ T4778] __should_failslab+0xc0/0x11c [ 41.742968][ T4778] should_failslab+0x10/0x28 [ 41.743934][ T4778] slab_pre_alloc_hook+0x6c/0x31c [ 41.745002][ T4778] kmem_cache_alloc_lru+0x60/0x284 [ 41.745959][ T4778] bdev_alloc_inode+0x2c/0x68 [ 41.746817][ T4778] new_inode_pseudo+0x68/0x1cc [ 41.747712][ T4778] new_inode+0x38/0x174 [ 41.748494][ T4778] bdev_alloc+0x30/0x240 [ 41.749321][ T4778] __alloc_disk_node+0x104/0x438 [ 41.750299][ T4778] __blk_alloc_disk+0x40/0xb8 [ 41.751129][ T4778] dm_create+0x514/0xf48 [ 41.752082][ T4778] dev_create+0xf4/0x25c [ 41.752850][ T4778] dm_ctl_ioctl+0xaac/0xf1c [ 41.753750][ T4778] __arm64_sys_ioctl+0x14c/0x1c8 [ 41.754741][ T4778] invoke_syscall+0x98/0x290 [ 41.755664][ T4778] el0_svc_common+0x13c/0x258 [ 41.756595][ T4778] do_el0_svc+0x5c/0x134 [ 41.757369][ T4778] el0_svc+0x58/0x12c [ 41.758161][ T4778] el0t_64_sync_handler+0x84/0xf0 [ 41.759095][ T4778] el0t_64_sync+0x18c/0x190 [ 41.787930][ T4784] device syzkaller0 entered promiscuous mode [ 41.887521][ T4790] tipc: Started in network mode [ 41.888602][ T4790] tipc: Node identity f2f607e964a7, cluster identity 4711 [ 41.890104][ T4790] tipc: Enabled bearer , priority 0 [ 41.901049][ T4790] device syzkaller0 entered promiscuous mode [ 41.902522][ T4790] tipc: Resetting bearer [ 41.906674][ T4789] tipc: Resetting bearer [ 42.189797][ T4801] set_capacity_and_notify: 1 callbacks suppressed [ 42.189817][ T4801] loop2: detected capacity change from 0 to 256 [ 46.572659][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 53.487510][ T4789] tipc: Disabling bearer [ 53.510927][ T24] tipc: Node number set to 2521892841 [ 53.521022][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.548864][ T4830] netlink: 88 bytes leftover after parsing attributes in process `syz.4.161'. [ 53.554642][ T4830] device syzkaller1 entered promiscuous mode [ 53.576697][ T4835] loop3: detected capacity change from 0 to 1156 [ 53.614059][ T4835] ISOFS: unable to read i-node block [ 53.615421][ T4835] isofs_fill_super: get root inode failed [ 53.623907][ T4835] FAULT_INJECTION: forcing a failure. [ 53.623907][ T4835] name failslab, interval 1, probability 0, space 0, times 0 [ 53.626069][ T4835] CPU: 0 PID: 4835 Comm: syz.3.160 Not tainted syzkaller #0 [ 53.627315][ T4835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 53.629023][ T4835] Call trace: [ 53.629528][ T4835] dump_backtrace+0x1c4/0x1f0 [ 53.630371][ T4835] show_stack+0x2c/0x3c [ 53.631209][ T4835] __dump_stack+0x30/0x40 [ 53.632207][ T4835] dump_stack_lvl+0xf4/0x15c [ 53.633152][ T4835] dump_stack+0x1c/0x5c [ 53.633991][ T4835] should_fail_ex+0x3cc/0x524 [ 53.634879][ T4835] __should_failslab+0xc0/0x11c [ 53.635770][ T4835] should_failslab+0x10/0x28 [ 53.636627][ T4835] __kmem_cache_alloc_node+0x7c/0x318 [ 53.637642][ T4835] kmalloc_trace+0x48/0x94 [ 53.638517][ T4835] tipc_nametbl_insert_publ+0x74/0xf10 [ 53.639590][ T4835] tipc_nametbl_publish+0x10c/0x250 [ 53.640562][ T4835] tipc_sk_publish+0x17c/0x384 [ 53.641470][ T4835] tipc_sk_join+0x2d4/0x508 [ 53.642329][ T4835] tipc_setsockopt+0x3b8/0x7a8 [ 53.643271][ T4835] __sys_setsockopt+0x2fc/0x50c [ 53.644204][ T4835] __arm64_sys_setsockopt+0xc0/0xdc [ 53.645227][ T4835] invoke_syscall+0x98/0x290 [ 53.646136][ T4835] el0_svc_common+0x13c/0x258 [ 53.646986][ T4835] do_el0_svc+0x5c/0x134 [ 53.647778][ T4835] el0_svc+0x58/0x12c [ 53.648508][ T4835] el0t_64_sync_handler+0x84/0xf0 [ 53.649450][ T4835] el0t_64_sync+0x18c/0x190 [ 53.765930][ T4851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 54.258937][ T4856] loop2: detected capacity change from 0 to 256 [ 56.224678][ T4866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.168'. [ 56.540161][ T4901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'. [ 56.558347][ T4904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.182'. [ 56.560114][ T4904] device batadv_slave_0 entered promiscuous mode [ 56.567315][ T4897] FAULT_INJECTION: forcing a failure. [ 56.567315][ T4897] name failslab, interval 1, probability 0, space 0, times 0 [ 56.640172][ T4897] CPU: 1 PID: 4897 Comm: syz.0.177 Not tainted syzkaller #0 [ 56.641632][ T4897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 56.643848][ T4897] Call trace: [ 56.644487][ T4897] dump_backtrace+0x1c4/0x1f0 [ 56.645516][ T4897] show_stack+0x2c/0x3c [ 56.646336][ T4897] __dump_stack+0x30/0x40 [ 56.647184][ T4897] dump_stack_lvl+0xf4/0x15c [ 56.648102][ T4897] dump_stack+0x1c/0x5c [ 56.648984][ T4897] should_fail_ex+0x3cc/0x524 [ 56.649980][ T4897] __should_failslab+0xc0/0x11c [ 56.651087][ T4897] should_failslab+0x10/0x28 [ 56.652089][ T4897] __kmem_cache_alloc_node+0x7c/0x318 [ 56.653258][ T4897] kmalloc_trace+0x48/0x94 [ 56.654208][ T4897] tipc_sub_subscribe+0x128/0x6f0 [ 56.655221][ T4897] tipc_conn_rcv_sub+0x120/0x31c [ 56.656189][ T4897] tipc_topsrv_kern_subscr+0x15c/0x228 [ 56.657377][ T4897] tipc_group_create+0x2c0/0x440 [ 56.658390][ T4897] tipc_sk_join+0x1dc/0x508 [ 56.659178][ T4897] tipc_setsockopt+0x3b8/0x7a8 [ 56.660073][ T4897] __sys_setsockopt+0x2fc/0x50c [ 56.661033][ T4897] __arm64_sys_setsockopt+0xc0/0xdc [ 56.662080][ T4897] invoke_syscall+0x98/0x290 [ 56.663023][ T4897] el0_svc_common+0x13c/0x258 [ 56.663959][ T4897] do_el0_svc+0x5c/0x134 [ 56.664831][ T4897] el0_svc+0x58/0x12c [ 56.665636][ T4897] el0t_64_sync_handler+0x84/0xf0 [ 56.666665][ T4897] el0t_64_sync+0x18c/0x190 [ 56.669748][ T4897] tipc: Subscription rejected, no memory [ 56.750709][ T4915] loop2: detected capacity change from 0 to 256 [ 57.448120][ T4908] rxe_eth0 speed is unknown, defaulting to 1000 [ 60.651222][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 64.493616][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495012][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.682016][ T4930] infiniband syz2: set active [ 68.683235][ T4930] infiniband syz2: added bond_slave_0 [ 68.690716][ T4930] infiniband syz2: Couldn't open port 1 [ 68.720595][ T4930] RDS/IB: syz2: added [ 68.722092][ T4930] smc: adding ib device syz2 with port count 1 [ 68.723307][ T4930] smc: ib device syz2 port 1 has pnetid [ 68.738364][ T4943] netlink: 24 bytes leftover after parsing attributes in process `syz.4.195'. [ 68.740189][ T4943] device veth1_virt_wifi entered promiscuous mode [ 68.825313][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 68.853824][ T4949] FAULT_INJECTION: forcing a failure. [ 68.853824][ T4949] name failslab, interval 1, probability 0, space 0, times 0 [ 68.856832][ T4949] CPU: 0 PID: 4949 Comm: syz.4.197 Not tainted syzkaller #0 [ 68.858347][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 68.860472][ T4949] Call trace: [ 68.861213][ T4949] dump_backtrace+0x1c4/0x1f0 [ 68.862262][ T4949] show_stack+0x2c/0x3c [ 68.862977][ T4949] __dump_stack+0x30/0x40 [ 68.863866][ T4949] dump_stack_lvl+0xf4/0x15c [ 68.864723][ T4949] dump_stack+0x1c/0x5c [ 68.865491][ T4949] should_fail_ex+0x3cc/0x524 [ 68.866447][ T4949] __should_failslab+0xc0/0x11c [ 68.867535][ T4949] should_failslab+0x10/0x28 [ 68.868503][ T4949] __kmem_cache_alloc_node+0x7c/0x318 [ 68.869606][ T4949] __kmalloc+0xc4/0x180 [ 68.870469][ T4949] sk_prot_alloc+0xc4/0x1e8 [ 68.871455][ T4949] sk_alloc+0x44/0x3a0 [ 68.872377][ T4949] __netlink_create+0x80/0x2a8 [ 68.873449][ T4949] __netlink_kernel_create+0x130/0x6a4 [ 68.874636][ T4949] fib_net_init+0x198/0x308 [ 68.875496][ T4949] ops_init+0x2b0/0x53c [ 68.876285][ T4949] setup_net+0x494/0xb6c [ 68.877148][ T4949] copy_net_ns+0x2b8/0x578 [ 68.878040][ T4949] create_new_namespaces+0x30c/0x604 [ 68.879095][ T4949] unshare_nsproxy_namespaces+0x108/0x160 [ 68.880326][ T4949] ksys_unshare+0x3f0/0x70c [ 68.881369][ T4949] __arm64_sys_unshare+0x3c/0x50 [ 68.882518][ T4949] invoke_syscall+0x98/0x290 [ 68.883586][ T4949] el0_svc_common+0x13c/0x258 [ 68.884597][ T4949] do_el0_svc+0x5c/0x134 [ 68.885544][ T4949] el0_svc+0x58/0x12c [ 68.886315][ T4949] el0t_64_sync_handler+0x84/0xf0 [ 68.887332][ T4949] el0t_64_sync+0x18c/0x190 [ 68.981193][ T4957] loop1: detected capacity change from 0 to 256 [ 69.615199][ T22] cfg80211: failed to load regulatory.db [ 70.195407][ T4970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.208'. [ 70.312865][ T4987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.216'. [ 70.358488][ T4989] FAULT_INJECTION: forcing a failure. [ 70.358488][ T4989] name failslab, interval 1, probability 0, space 0, times 0 [ 70.361610][ T4989] CPU: 1 PID: 4989 Comm: syz.3.215 Not tainted syzkaller #0 [ 70.363122][ T4989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 70.365354][ T4989] Call trace: [ 70.366083][ T4989] dump_backtrace+0x1c4/0x1f0 [ 70.367129][ T4989] show_stack+0x2c/0x3c [ 70.368008][ T4989] __dump_stack+0x30/0x40 [ 70.368943][ T4989] dump_stack_lvl+0xf4/0x15c [ 70.369949][ T4989] dump_stack+0x1c/0x5c [ 70.370843][ T4989] should_fail_ex+0x3cc/0x524 [ 70.371693][ T4989] __should_failslab+0xc0/0x11c [ 70.372652][ T4989] should_failslab+0x10/0x28 [ 70.373581][ T4989] __kmem_cache_alloc_node+0x7c/0x318 [ 70.374660][ T4989] __kmalloc+0xc4/0x180 [ 70.375498][ T4989] fib_default_rule_add+0x68/0x334 [ 70.376522][ T4989] fib4_rules_init+0xa8/0x17c [ 70.377447][ T4989] fib_net_init+0x14c/0x308 [ 70.378326][ T4989] ops_init+0x2b0/0x53c [ 70.379132][ T4989] setup_net+0x494/0xb6c [ 70.379906][ T4989] copy_net_ns+0x2b8/0x578 [ 70.380906][ T4989] create_new_namespaces+0x30c/0x604 [ 70.382110][ T4989] unshare_nsproxy_namespaces+0x108/0x160 [ 70.383409][ T4989] ksys_unshare+0x3f0/0x70c [ 70.384298][ T4989] __arm64_sys_unshare+0x3c/0x50 [ 70.385205][ T4989] invoke_syscall+0x98/0x290 [ 70.386106][ T4989] el0_svc_common+0x13c/0x258 [ 70.387085][ T4989] do_el0_svc+0x5c/0x134 [ 70.388003][ T4989] el0_svc+0x58/0x12c [ 70.388854][ T4989] el0t_64_sync_handler+0x84/0xf0 [ 70.389869][ T4989] el0t_64_sync+0x18c/0x190 [ 70.454202][ T4992] loop2: detected capacity change from 0 to 128 [ 71.558011][ T5009] loop1: detected capacity change from 0 to 256 [ 82.389667][ T5017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 82.481532][ T5036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.229'. [ 82.538624][ T5044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.235'. [ 82.540401][ T5044] device ipvlan0 entered promiscuous mode [ 82.692058][ T5053] loop2: detected capacity change from 0 to 128 [ 83.556042][ T5050] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 83.686429][ T5073] loop1: detected capacity change from 0 to 164 [ 83.688097][ T5075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 84.077484][ T5102] loop1: detected capacity change from 0 to 128 [ 89.461456][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 95.075540][ T5086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.247'. [ 95.134950][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 95.143634][ T5112] loop1: detected capacity change from 0 to 164 [ 95.319243][ T5136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'. [ 95.330789][ T5138] loop1: detected capacity change from 0 to 1024 [ 95.336965][ T5138] EXT4-fs: Mount option(s) incompatible with ext3 [ 95.398579][ T5140] loop3: detected capacity change from 0 to 128 [ 97.281026][ T5138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.273'. [ 97.677721][ T5173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 97.702615][ T5169] netlink: 32 bytes leftover after parsing attributes in process `syz.0.286'. [ 97.716625][ T5176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 97.953676][ T5204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.301'. [ 97.960922][ T5205] loop4: detected capacity change from 0 to 1024 [ 97.962803][ T5205] EXT4-fs: Mount option(s) incompatible with ext3 [ 98.143951][ T5208] loop1: detected capacity change from 0 to 128 [ 98.157309][ T5107] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.213581][ T5205] netlink: 32 bytes leftover after parsing attributes in process `syz.4.302'. [ 98.277394][ T5208] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.312409][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 98.314956][ T5219] xt_cgroup: path and classid specified [ 98.382993][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 98.608379][ T5240] loop1: detected capacity change from 0 to 1024 [ 98.614238][ T5240] EXT4-fs: Mount option(s) incompatible with ext3 [ 98.772309][ T5255] loop4: detected capacity change from 0 to 8192 [ 98.860137][ T5107] I/O error, dev loop4, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.980164][ T5275] loop1: detected capacity change from 0 to 128 [ 98.988558][ T5277] loop2: detected capacity change from 0 to 1024 [ 98.993919][ T5277] EXT4-fs: Mount option(s) incompatible with ext3 [ 99.030180][ T5275] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 99.038000][ T5271] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.073488][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 99.182446][ T5271] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.282929][ T5271] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.308825][ T5309] loop1: detected capacity change from 0 to 1024 [ 99.311557][ T5309] EXT4-fs: Mount option(s) incompatible with ext3 [ 99.333820][ T5107] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.444111][ T5271] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.537478][ T5319] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.690319][ T5339] EXT4-fs: Mount option(s) incompatible with ext3 [ 100.189460][ T5397] set_capacity_and_notify: 1 callbacks suppressed [ 100.189469][ T5397] loop3: detected capacity change from 0 to 1024 [ 100.197476][ T5397] EXT4-fs: Mount option(s) incompatible with ext3 [ 100.264912][ T5405] loop2: detected capacity change from 0 to 256 [ 100.452562][ T5416] __nla_validate_parse: 8 callbacks suppressed [ 100.452576][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 100.683186][ T5439] loop1: detected capacity change from 0 to 512 [ 100.691491][ T5441] loop3: detected capacity change from 0 to 1024 [ 100.693580][ T5441] EXT4-fs: Mount option(s) incompatible with ext3 [ 100.718820][ T5439] EXT4-fs (loop1): orphan cleanup on readonly fs [ 100.722684][ T5439] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #13: comm syz.1.386: casefold flag without casefold feature [ 100.723076][ T5143] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.730528][ T5439] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.386: couldn't read orphan inode 13 (err -117) [ 100.739796][ T5439] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 100.752732][ T5439] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 100.824501][ T5439] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 100.884003][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 100.959505][ T5458] loop3: detected capacity change from 0 to 2048 [ 100.994201][ T5458] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.078815][ T4404] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 101.091166][ T4404] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 101.093436][ T4404] EXT4-fs (loop3): This should not happen!! Data will be lost [ 101.093436][ T4404] [ 101.095207][ T4404] EXT4-fs (loop3): Total free blocks count 0 [ 101.096296][ T4404] EXT4-fs (loop3): Free/Dirty block details [ 101.097530][ T4404] EXT4-fs (loop3): free_blocks=66060288 [ 101.098717][ T4404] EXT4-fs (loop3): dirty_blocks=32 [ 101.099695][ T4404] EXT4-fs (loop3): Block reservation details [ 101.100785][ T4404] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 101.146922][ T4404] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 101.457874][ T5474] loop3: detected capacity change from 0 to 164 [ 101.788404][ T5501] loop3: detected capacity change from 0 to 164 [ 101.839599][ T5506] loop4: detected capacity change from 0 to 1024 [ 101.842739][ T5506] EXT4-fs: Mount option(s) incompatible with ext3 [ 101.882171][ T5143] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.134038][ T5529] xt_hashlimit: size too large, truncated to 1048576 [ 102.138533][ T5528] loop4: detected capacity change from 0 to 164 [ 102.378424][ T5542] loop4: detected capacity change from 0 to 1024 [ 102.381823][ T5542] EXT4-fs: Mount option(s) incompatible with ext3 [ 102.832738][ T5107] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.152531][ T5571] netlink: 64 bytes leftover after parsing attributes in process `syz.3.444'. [ 104.162797][ T5571] device syzkaller1 entered promiscuous mode [ 105.334317][ T5600] FAULT_INJECTION: forcing a failure. [ 105.334317][ T5600] name fail_futex, interval 1, probability 0, space 0, times 1 [ 105.337047][ T5600] CPU: 1 PID: 5600 Comm: syz.3.455 Not tainted syzkaller #0 [ 105.338647][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 105.340792][ T5600] Call trace: [ 105.341528][ T5600] dump_backtrace+0x1c4/0x1f0 [ 105.342460][ T5600] show_stack+0x2c/0x3c [ 105.343332][ T5600] __dump_stack+0x30/0x40 [ 105.344290][ T5600] dump_stack_lvl+0xf4/0x15c [ 105.345171][ T5600] dump_stack+0x1c/0x5c [ 105.346050][ T5600] should_fail_ex+0x3cc/0x524 [ 105.347036][ T5600] should_fail+0x14/0x24 [ 105.347972][ T5600] get_futex_key+0x904/0xec0 [ 105.348924][ T5600] futex_wait_setup+0xbc/0x320 [ 105.349807][ T5600] futex_wait+0x178/0x488 [ 105.350571][ T5600] do_futex+0x2e8/0x340 [ 105.351324][ T5600] __arm64_sys_futex+0x390/0x414 [ 105.352167][ T5600] invoke_syscall+0x98/0x290 [ 105.353169][ T5600] el0_svc_common+0x13c/0x258 [ 105.354140][ T5600] do_el0_svc+0x5c/0x134 [ 105.355026][ T5600] el0_svc+0x58/0x12c [ 105.355861][ T5600] el0t_64_sync_handler+0x84/0xf0 [ 105.356947][ T5600] el0t_64_sync+0x18c/0x190 [ 105.416581][ T5605] set_capacity_and_notify: 1 callbacks suppressed [ 105.416590][ T5605] loop4: detected capacity change from 0 to 256 [ 105.535247][ T5107] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.715443][ T5615] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 106.057860][ T5624] bridge0: port 3(syz_tun) entered blocking state [ 106.058982][ T5624] bridge0: port 3(syz_tun) entered disabled state [ 106.060621][ T5624] device syz_tun entered promiscuous mode [ 106.062115][ T5624] bridge0: port 3(syz_tun) entered blocking state [ 106.063505][ T5624] bridge0: port 3(syz_tun) entered forwarding state [ 106.302381][ T91] bridge0: port 3(syz_tun) entered disabled state [ 106.539255][ T5639] device syzkaller0 entered promiscuous mode [ 107.929139][ T5673] loop3: detected capacity change from 0 to 1024 [ 107.947265][ T5673] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 107.950123][ T5673] EXT4-fs (loop3): barriers disabled [ 107.956731][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.485'. [ 107.958431][ T5673] JBD2: no valid journal superblock found [ 107.959496][ T5673] EXT4-fs (loop3): error loading journal [ 107.962289][ T5675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.485'. [ 109.265395][ T5707] loop3: detected capacity change from 0 to 256 [ 109.431099][ T5718] device syzkaller0 entered promiscuous mode [ 109.454019][ T5720] loop4: detected capacity change from 0 to 4096 [ 109.517325][ T5107] udevd[5107]: incorrect ext4 checksum on /dev/loop4 [ 110.304157][ T5751] block device autoloading is deprecated and will be removed. [ 110.304203][ T5745] block device autoloading is deprecated and will be removed. [ 110.307564][ T5745] loop1: detected capacity change from 0 to 256 [ 120.714215][ T5780] bridge0: port 3(syz_tun) entered blocking state [ 120.715504][ T5780] bridge0: port 3(syz_tun) entered disabled state [ 120.717009][ T5780] device syz_tun entered promiscuous mode [ 120.718345][ T5780] bridge0: port 3(syz_tun) entered blocking state [ 120.719646][ T5780] bridge0: port 3(syz_tun) entered forwarding state [ 120.793681][ T5788] loop3: detected capacity change from 0 to 4096 [ 120.798089][ T5788] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 120.828412][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 121.066040][ T5809] Cannot find add_set index 0 as target [ 121.502100][ T5816] bridge0: port 3(syz_tun) entered blocking state [ 121.503398][ T5816] bridge0: port 3(syz_tun) entered disabled state [ 121.504896][ T5816] device syz_tun entered promiscuous mode [ 121.506128][ T5816] bridge0: port 3(syz_tun) entered blocking state [ 121.507233][ T5816] bridge0: port 3(syz_tun) entered forwarding state [ 121.826999][ T5055] bridge0: port 3(syz_tun) entered disabled state [ 121.829143][ T5055] bridge0: port 3(syz_tun) entered disabled state [ 121.898926][ T5828] device syzkaller0 entered promiscuous mode [ 122.171609][ T5835] loop2: detected capacity change from 0 to 256 [ 122.581306][ T5839] capability: warning: `syz.1.541' uses deprecated v2 capabilities in a way that may be insecure [ 123.576409][ T5875] loop3: detected capacity change from 0 to 256 [ 123.907014][ T5884] device syzkaller0 entered promiscuous mode [ 125.643719][ T5930] device syzkaller0 entered promiscuous mode [ 125.931400][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934339][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.945574][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.579'. [ 125.949550][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'. [ 126.122262][ T5950] loop4: detected capacity change from 0 to 8192 [ 126.208331][ T5961] device syzkaller0 entered promiscuous mode [ 126.364097][ T5964] loop3: detected capacity change from 0 to 256 [ 137.591535][ T6016] FAULT_INJECTION: forcing a failure. [ 137.591535][ T6016] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 137.594350][ T6016] CPU: 1 PID: 6016 Comm: syz.4.599 Not tainted syzkaller #0 [ 137.595811][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 137.597862][ T6016] Call trace: [ 137.598515][ T6016] dump_backtrace+0x1c4/0x1f0 [ 137.599460][ T6016] show_stack+0x2c/0x3c [ 137.600288][ T6016] __dump_stack+0x30/0x40 [ 137.601062][ T6016] dump_stack_lvl+0xf4/0x15c [ 137.602020][ T6016] dump_stack+0x1c/0x5c [ 137.602910][ T6016] should_fail_ex+0x3cc/0x524 [ 137.603941][ T6016] should_fail+0x14/0x24 [ 137.604819][ T6016] should_fail_usercopy+0x20/0x30 [ 137.605915][ T6016] _copy_from_iter+0x190/0xf98 [ 137.606948][ T6016] kcm_sendmsg+0x940/0x1e7c [ 137.607832][ T6016] sock_write_iter+0x268/0x368 [ 137.608790][ T6016] vfs_write+0x3c8/0x7c8 [ 137.609668][ T6016] ksys_write+0x12c/0x228 [ 137.610510][ T6016] __arm64_sys_write+0x7c/0x90 [ 137.611343][ T6016] invoke_syscall+0x98/0x290 [ 137.612188][ T6016] el0_svc_common+0x13c/0x258 [ 137.613056][ T6016] do_el0_svc+0x5c/0x134 [ 137.613847][ T6016] el0_svc+0x58/0x12c [ 137.614561][ T6016] el0t_64_sync_handler+0x84/0xf0 [ 137.615605][ T6016] el0t_64_sync+0x18c/0x190 [ 137.716820][ T6018] rxe_eth0 speed is unknown, defaulting to 1000 [ 138.844605][ T6025] FAULT_INJECTION: forcing a failure. [ 138.844605][ T6025] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.857037][ T6025] CPU: 0 PID: 6025 Comm: syz.2.604 Not tainted syzkaller #0 [ 138.858429][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 138.860268][ T6025] Call trace: [ 138.860894][ T6025] dump_backtrace+0x1c4/0x1f0 [ 138.861748][ T6025] show_stack+0x2c/0x3c [ 138.862579][ T6025] __dump_stack+0x30/0x40 [ 138.863346][ T6025] dump_stack_lvl+0xf4/0x15c [ 138.864206][ T6025] dump_stack+0x1c/0x5c [ 138.864961][ T6025] should_fail_ex+0x3cc/0x524 [ 138.865728][ T6025] should_fail_alloc_page+0x74/0xb8 [ 138.866559][ T6025] prepare_alloc_pages+0x1b8/0x4f0 [ 138.867525][ T6025] __alloc_pages+0x134/0x544 [ 138.868462][ T6025] alloc_pages+0x434/0x6fc [ 138.869378][ T6025] folio_alloc+0x28/0x6c [ 138.870194][ T6025] filemap_alloc_folio+0xc4/0x42c [ 138.871146][ T6025] __filemap_get_folio+0x64c/0xaa8 [ 138.872079][ T6025] filemap_fault+0x6b4/0xe98 [ 138.872914][ T6025] __do_fault+0x11c/0x3d8 [ 138.873729][ T6025] handle_mm_fault+0x18d8/0x3018 [ 138.874716][ T6025] __get_user_pages+0x340/0x770 [ 138.875697][ T6025] populate_vma_page_range+0x1f4/0x298 [ 138.876800][ T6025] __mm_populate+0x214/0x338 [ 138.877703][ T6025] do_mlock+0x420/0x514 [ 138.878467][ T6025] __arm64_sys_mlock+0x60/0x78 [ 138.879309][ T6025] invoke_syscall+0x98/0x290 [ 138.880165][ T6025] el0_svc_common+0x13c/0x258 [ 138.881033][ T6025] do_el0_svc+0x5c/0x134 [ 138.881896][ T6025] el0_svc+0x58/0x12c [ 138.882686][ T6025] el0t_64_sync_handler+0x84/0xf0 [ 138.883730][ T6025] el0t_64_sync+0x18c/0x190 [ 138.927628][ T6032] device syzkaller0 entered promiscuous mode [ 138.939493][ T6030] loop4: detected capacity change from 0 to 256 [ 138.971606][ T6001] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 140.065462][ T6078] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 140.178502][ T6084] loop1: detected capacity change from 0 to 1024 [ 140.185394][ T6084] EXT4-fs: Mount option(s) incompatible with ext3 [ 146.411754][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 149.926641][ T6095] device netdevsim0 entered promiscuous mode [ 149.929445][ T6095] device netdevsim0 left promiscuous mode [ 150.037502][ T6107] netlink: 64 bytes leftover after parsing attributes in process `syz.4.625'. [ 150.046376][ T6109] loop2: detected capacity change from 0 to 512 [ 150.052487][ T6107] device syzkaller1 entered promiscuous mode [ 150.064479][ T6105] loop3: detected capacity change from 0 to 256 [ 150.072434][ T6109] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 150.073541][ T6103] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 150.087291][ T6109] EXT4-fs (loop2): shut down requested (0) [ 150.156344][ T6119] loop4: detected capacity change from 0 to 1024 [ 150.159627][ T6119] EXT4-fs: Mount option(s) incompatible with ext3 [ 150.191490][ T6115] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.287435][ T6124] device syzkaller0 entered promiscuous mode [ 150.291661][ T4343] EXT4-fs (loop2): unmounting filesystem. [ 150.620151][ T6155] loop1: detected capacity change from 0 to 164 [ 150.679043][ T6115] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 150.896687][ T6165] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 153.611169][ T4332] Bluetooth: hci0: command 0x0406 tx timeout [ 153.611182][ T4339] Bluetooth: hci1: command 0x0406 tx timeout [ 153.611204][ T4339] Bluetooth: hci4: command 0x0406 tx timeout [ 153.612407][ T4332] Bluetooth: hci3: command 0x0406 tx timeout [ 153.613591][ T4339] Bluetooth: hci2: command 0x0406 tx timeout [ 161.108158][ T6137] tipc: Enabling of bearer rejected, failed to enable media [ 161.124328][ T6168] netlink: 64 bytes leftover after parsing attributes in process `syz.1.643'. [ 161.527914][ T6190] loop4: detected capacity change from 0 to 164 [ 161.555338][ T6190] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 161.566267][ T6193] loop1: detected capacity change from 0 to 128 [ 161.584222][ T6193] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 161.647914][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 161.729629][ T6209] tipc: Enabled bearer , priority 0 [ 161.792079][ T6206] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 161.822482][ T6209] tipc: Resetting bearer [ 161.911719][ T6207] tipc: Disabling bearer [ 161.916147][ T6212] netlink: 64 bytes leftover after parsing attributes in process `syz.0.657'. [ 161.922081][ T6211] device syzkaller1 entered promiscuous mode [ 161.987129][ T6214] device syzkaller0 entered promiscuous mode [ 162.516405][ T27] audit: type=1326 audit(162.500:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.663" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79728 code=0x7ffc0000 [ 162.529380][ T27] audit: type=1326 audit(162.510:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.663" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff8cf79728 code=0x7ffc0000 [ 162.538046][ T27] audit: type=1326 audit(162.520:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.663" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79728 code=0x7ffc0000 [ 162.553454][ T27] audit: type=1326 audit(162.520:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.663" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff8cf79728 code=0x7ffc0000 [ 162.558616][ T27] audit: type=1326 audit(162.520:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.663" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79728 code=0x7ffc0000 [ 162.566021][ T27] audit: type=1326 audit(162.520:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.663" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff8cf79728 code=0x7ffc0000 [ 162.572596][ T27] audit: type=1326 audit(162.520:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.663" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79728 code=0x7ffc0000 [ 162.578759][ T27] audit: type=1326 audit(162.520:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.663" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff8cf79728 code=0x7ffc0000 [ 162.594128][ T27] audit: type=1326 audit(162.520:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6264 comm="syz.4.663" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8cf79728 code=0x7ffc0000 [ 162.658386][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 162.665960][ T6276] loop4: detected capacity change from 0 to 164 [ 162.694126][ T6191] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.879709][ T6280] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 172.991716][ T6281] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 183.956892][ T6289] netlink: 64 bytes leftover after parsing attributes in process `syz.0.670'. [ 183.958672][ T6291] tipc: Enabling of bearer rejected, failed to enable media [ 183.962122][ T6290] bridge0: port 3(syz_tun) entered blocking state [ 183.963293][ T6290] bridge0: port 3(syz_tun) entered disabled state [ 183.964822][ T6290] device syz_tun entered promiscuous mode [ 183.966014][ T6290] bridge0: port 3(syz_tun) entered blocking state [ 183.967222][ T6290] bridge0: port 3(syz_tun) entered forwarding state [ 183.991641][ T4802] bridge0: port 3(syz_tun) entered disabled state [ 184.008959][ T6325] FAULT_INJECTION: forcing a failure. [ 184.008959][ T6325] name failslab, interval 1, probability 0, space 0, times 0 [ 184.018670][ T6325] CPU: 0 PID: 6325 Comm: syz.3.674 Not tainted syzkaller #0 [ 184.020054][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 184.021724][ T6325] Call trace: [ 184.022354][ T6325] dump_backtrace+0x1c4/0x1f0 [ 184.023272][ T6325] show_stack+0x2c/0x3c [ 184.023961][ T6325] __dump_stack+0x30/0x40 [ 184.024707][ T6325] dump_stack_lvl+0xf4/0x15c [ 184.025620][ T6325] dump_stack+0x1c/0x5c [ 184.026479][ T6325] should_fail_ex+0x3cc/0x524 [ 184.027436][ T6325] __should_failslab+0xc0/0x11c [ 184.028462][ T6325] should_failslab+0x10/0x28 [ 184.029449][ T6325] __kmem_cache_alloc_node+0x7c/0x318 [ 184.030515][ T6325] __kmalloc+0xc4/0x180 [ 184.031269][ T6325] __register_sysctl_table+0x844/0xc88 [ 184.032271][ T6325] setup_mq_sysctls+0x4b4/0x5b0 [ 184.033183][ T6325] copy_ipcs+0x298/0x4d4 [ 184.033935][ T6325] create_new_namespaces+0x1b0/0x604 [ 184.034916][ T6325] unshare_nsproxy_namespaces+0x108/0x160 [ 184.036050][ T6325] ksys_unshare+0x3f0/0x70c [ 184.036970][ T6325] __arm64_sys_unshare+0x3c/0x50 [ 184.038007][ T6325] invoke_syscall+0x98/0x290 [ 184.038853][ T6325] el0_svc_common+0x13c/0x258 [ 184.039779][ T6325] do_el0_svc+0x5c/0x134 [ 184.040653][ T6325] el0_svc+0x58/0x12c [ 184.041537][ T6325] el0t_64_sync_handler+0x84/0xf0 [ 184.042550][ T6325] el0t_64_sync+0x18c/0x190 [ 184.048331][ T6325] sysctl could not get directory: /fs -12 [ 184.060971][ T6325] CPU: 1 PID: 6325 Comm: syz.3.674 Not tainted syzkaller #0 [ 184.062482][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 184.064465][ T6325] Call trace: [ 184.065141][ T6325] dump_backtrace+0x1c4/0x1f0 [ 184.066022][ T6325] show_stack+0x2c/0x3c [ 184.066728][ T6325] __dump_stack+0x30/0x40 [ 184.067494][ T6325] dump_stack_lvl+0xf4/0x15c [ 184.068340][ T6325] dump_stack+0x1c/0x5c [ 184.069082][ T6325] __register_sysctl_table+0xc10/0xc88 [ 184.070048][ T6325] setup_mq_sysctls+0x4b4/0x5b0 [ 184.070973][ T6325] copy_ipcs+0x298/0x4d4 [ 184.071766][ T6325] create_new_namespaces+0x1b0/0x604 [ 184.072757][ T6325] unshare_nsproxy_namespaces+0x108/0x160 [ 184.073748][ T6325] ksys_unshare+0x3f0/0x70c [ 184.074589][ T6325] __arm64_sys_unshare+0x3c/0x50 [ 184.075464][ T6325] invoke_syscall+0x98/0x290 [ 184.076379][ T6325] el0_svc_common+0x13c/0x258 [ 184.077312][ T6325] do_el0_svc+0x5c/0x134 [ 184.078046][ T6325] el0_svc+0x58/0x12c [ 184.078742][ T6325] el0t_64_sync_handler+0x84/0xf0 [ 184.079665][ T6325] el0t_64_sync+0x18c/0x190 [ 184.170216][ T6339] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 184.179519][ T6338] process 'syz.3.679' launched './file2' with NULL argv: empty string added [ 184.189885][ T6338] siw: device registration error -23 [ 184.217788][ T6337] nvmet: adding nsid 1 to subsystem testsubsys [ 184.226936][ T6337] nvmet: failed to open block device /dev/nul: (-2) [ 184.479704][ T6356] netlink: 64 bytes leftover after parsing attributes in process `syz.2.686'. [ 184.490554][ T6356] device syzkaller1 entered promiscuous mode [ 184.498738][ T6358] tipc: Enabled bearer , priority 0 [ 184.500450][ T6358] device syzkaller0 entered promiscuous mode [ 184.568367][ T6363] tipc: Resetting bearer [ 184.573187][ T6357] tipc: Resetting bearer [ 184.621776][ T6357] tipc: Disabling bearer [ 184.772431][ T6365] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 186.191053][ T6398] netlink: 64 bytes leftover after parsing attributes in process `syz.1.703'. [ 186.207701][ T6400] tipc: Started in network mode [ 186.208698][ T6400] tipc: Node identity 2efd4752078, cluster identity 4711 [ 186.210067][ T6400] tipc: Enabled bearer , priority 0 [ 186.216255][ T6398] device syzkaller1 entered promiscuous mode [ 186.274634][ T6400] device syzkaller0 entered promiscuous mode [ 186.284020][ T6400] tipc: Resetting bearer [ 186.297929][ T6399] tipc: Resetting bearer [ 186.381593][ T6399] tipc: Disabling bearer [ 186.464213][ T6411] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 186.563877][ T4435] Bluetooth: hci5: Frame reassembly failed (-84) [ 186.586090][ T6417] bridge0: port 3(syz_tun) entered blocking state [ 186.587287][ T6417] bridge0: port 3(syz_tun) entered disabled state [ 186.588792][ T6417] device syz_tun entered promiscuous mode [ 186.590127][ T6417] bridge0: port 3(syz_tun) entered blocking state [ 186.591553][ T6417] bridge0: port 3(syz_tun) entered forwarding state [ 187.134520][ T1584] bridge0: port 3(syz_tun) entered disabled state [ 187.392064][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.395785][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.022446][ T6449] Bluetooth: MGMT ver 1.22 [ 188.078742][ T6451] netlink: 64 bytes leftover after parsing attributes in process `syz.0.725'. [ 188.084902][ T6451] device syzkaller1 entered promiscuous mode [ 188.397456][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.401812][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.571143][ T4345] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 188.571333][ T4332] Bluetooth: hci5: command 0x1003 tx timeout [ 188.644772][ T6416] can0: slcan on ptm0. [ 188.700228][ T6503] netlink: 64 bytes leftover after parsing attributes in process `syz.0.744'. [ 188.712667][ T6503] device syzkaller1 entered promiscuous mode [ 188.742251][ T6415] can0 (unregistered): slcan off ptm0. [ 188.943271][ T6516] tipc: Started in network mode [ 188.944231][ T6516] tipc: Node identity 76b6658c8b24, cluster identity 4711 [ 188.945482][ T6516] tipc: Enabled bearer , priority 0 [ 188.953152][ T6514] tipc: Disabling bearer [ 189.271675][ T6540] netlink: 108 bytes leftover after parsing attributes in process `syz.0.754'. [ 189.321187][ T6540] device syzkaller0 entered promiscuous mode [ 200.656914][ T6561] netlink: 64 bytes leftover after parsing attributes in process `syz.4.758'. [ 200.680987][ T6592] rxe_eth0 speed is unknown, defaulting to 1000 [ 200.906031][ T6619] FAULT_INJECTION: forcing a failure. [ 200.906031][ T6619] name failslab, interval 1, probability 0, space 0, times 0 [ 200.906059][ T6619] CPU: 1 PID: 6619 Comm: syz.1.771 Not tainted syzkaller #0 [ 200.906066][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 200.906071][ T6619] Call trace: [ 200.906073][ T6619] dump_backtrace+0x1c4/0x1f0 [ 200.906085][ T6619] show_stack+0x2c/0x3c [ 200.906090][ T6619] __dump_stack+0x30/0x40 [ 200.906100][ T6619] dump_stack_lvl+0xf4/0x15c [ 200.906108][ T6619] dump_stack+0x1c/0x5c [ 200.906115][ T6619] should_fail_ex+0x3cc/0x524 [ 200.906124][ T6619] __should_failslab+0xc0/0x11c [ 200.906134][ T6619] should_failslab+0x10/0x28 [ 200.906141][ T6619] __kmem_cache_alloc_node+0x7c/0x318 [ 200.906150][ T6619] kmalloc_trace+0x48/0x94 [ 200.906158][ T6619] device_create_groups_vargs+0xe0/0x298 [ 200.906166][ T6619] device_create+0xf4/0x148 [ 200.906173][ T6619] vcs_make_sysfs+0x44/0xa0 [ 200.906183][ T6619] vc_allocate+0x580/0x694 [ 200.906189][ T6619] con_install+0xa0/0x5cc [ 200.906196][ T6619] tty_init_dev+0xb4/0x3f4 [ 200.906202][ T6619] tty_open+0x6e0/0xc04 [ 200.906210][ T6619] chrdev_open+0x3d0/0x51c [ 200.906219][ T6619] do_dentry_open+0x738/0xf8c [ 200.906224][ T6619] vfs_open+0x7c/0x90 [ 200.906228][ T6619] path_openat+0x1fc0/0x27a0 [ 200.906236][ T6619] do_filp_open+0x198/0x38c [ 200.906242][ T6619] do_sys_openat2+0x134/0x3fc [ 200.906247][ T6619] __arm64_sys_openat+0x11c/0x150 [ 200.906253][ T6619] invoke_syscall+0x98/0x290 [ 200.906262][ T6619] el0_svc_common+0x13c/0x258 [ 200.906271][ T6619] do_el0_svc+0x5c/0x134 [ 200.906280][ T6619] el0_svc+0x58/0x12c [ 200.906287][ T6619] el0t_64_sync_handler+0x84/0xf0 [ 200.906296][ T6619] el0t_64_sync+0x18c/0x190 [ 201.245555][ T6627] block device autoloading is deprecated and will be removed. [ 202.718999][ T6651] rxe_eth0 speed is unknown, defaulting to 1000 [ 203.757916][ T6673] ip_tables: iptables: counters copy to user failed while replacing table [ 204.055167][ T6678] FAULT_INJECTION: forcing a failure. [ 204.055167][ T6678] name failslab, interval 1, probability 0, space 0, times 0 [ 204.060401][ T6678] CPU: 0 PID: 6678 Comm: syz.3.790 Not tainted syzkaller #0 [ 204.061770][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 204.063745][ T6678] Call trace: [ 204.064517][ T6678] dump_backtrace+0x1c4/0x1f0 [ 204.065537][ T6678] show_stack+0x2c/0x3c [ 204.066384][ T6678] __dump_stack+0x30/0x40 [ 204.067375][ T6678] dump_stack_lvl+0xf4/0x15c [ 204.068339][ T6678] dump_stack+0x1c/0x5c [ 204.069173][ T6678] should_fail_ex+0x3cc/0x524 [ 204.069584][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.794'. [ 204.070119][ T6678] __should_failslab+0xc0/0x11c [ 204.072832][ T6678] should_failslab+0x10/0x28 [ 204.073739][ T6678] __kmem_cache_alloc_node+0x7c/0x318 [ 204.074751][ T6678] kmalloc_trace+0x48/0x94 [ 204.075607][ T6678] blk_alloc_queue_stats+0x50/0xf8 [ 204.076510][ T6678] blk_alloc_queue+0x148/0x500 [ 204.077421][ T6678] __blk_mq_alloc_disk+0x84/0x1e0 [ 204.078306][ T6678] loop_add+0x2c4/0x810 [ 204.078989][ T6678] loop_control_ioctl+0x130/0x514 [ 204.079927][ T6678] __arm64_sys_ioctl+0x14c/0x1c8 [ 204.080874][ T6678] invoke_syscall+0x98/0x290 [ 204.081824][ T6678] el0_svc_common+0x13c/0x258 [ 204.082658][ T6678] do_el0_svc+0x5c/0x134 [ 204.083403][ T6678] el0_svc+0x58/0x12c [ 204.084088][ T6678] el0t_64_sync_handler+0x84/0xf0 [ 204.084983][ T6678] el0t_64_sync+0x18c/0x190 [ 204.087302][ T6682] tipc: Enabled bearer , priority 0 [ 204.088776][ T6682] device syzkaller0 entered promiscuous mode [ 204.096033][ T6682] tipc: Resetting bearer [ 204.098556][ T6681] tipc: Resetting bearer [ 204.141365][ T6681] tipc: Disabling bearer [ 204.164730][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.797'. [ 204.474930][ T6711] rxe_eth0 speed is unknown, defaulting to 1000 [ 205.465539][ T27] audit: type=1107 audit(205.450:11): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 205.544372][ T6721] netlink: 40 bytes leftover after parsing attributes in process `syz.4.806'. [ 205.552092][ T6735] bridge0: port 2(bridge_slave_1) entered listening state [ 205.556700][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 205.558314][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.760949][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 205.766610][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.840818][ T6768] rxe_eth0 speed is unknown, defaulting to 1000 [ 207.918060][ T6802] device-mapper: ioctl: device has been removed from the dev hash table. [ 208.198041][ T6825] rxe_eth0 speed is unknown, defaulting to 1000 [ 209.278844][ T6844] FAULT_INJECTION: forcing a failure. [ 209.278844][ T6844] name failslab, interval 1, probability 0, space 0, times 0 [ 209.283138][ T6844] CPU: 0 PID: 6844 Comm: syz.0.854 Not tainted syzkaller #0 [ 209.284392][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 209.286243][ T6844] Call trace: [ 209.286852][ T6844] dump_backtrace+0x1c4/0x1f0 [ 209.287750][ T6844] show_stack+0x2c/0x3c [ 209.288460][ T6844] __dump_stack+0x30/0x40 [ 209.289290][ T6844] dump_stack_lvl+0xf4/0x15c [ 209.290094][ T6844] dump_stack+0x1c/0x5c [ 209.290906][ T6844] should_fail_ex+0x3cc/0x524 [ 209.290923][ T6844] __should_failslab+0xc0/0x11c [ 209.290937][ T6844] should_failslab+0x10/0x28 [ 209.290947][ T6844] __kmem_cache_alloc_node+0x7c/0x318 [ 209.290955][ T6844] __kmalloc_node_track_caller+0xb8/0x174 [ 209.290963][ T6844] kstrdup+0x68/0xb0 [ 209.296710][ T6844] ceph_init_fs_context+0x13c/0x410 [ 209.297668][ T6844] alloc_fs_context+0x530/0x778 [ 209.298600][ T6844] fs_context_for_mount+0x34/0x44 [ 209.299534][ T6844] do_new_mount+0xfc/0x818 [ 209.300418][ T6844] path_mount+0x5ac/0xe6c [ 209.301239][ T6844] __arm64_sys_mount+0x4a0/0x5a0 [ 209.302212][ T6844] invoke_syscall+0x98/0x290 [ 209.303103][ T6844] el0_svc_common+0x13c/0x258 [ 209.304036][ T6844] do_el0_svc+0x5c/0x134 [ 209.304808][ T6844] el0_svc+0x58/0x12c [ 209.305514][ T6844] el0t_64_sync_handler+0x84/0xf0 [ 209.306415][ T6844] el0t_64_sync+0x18c/0x190 [ 210.493660][ T6874] rxe_eth0 speed is unknown, defaulting to 1000 [ 210.674607][ T6880] FAULT_INJECTION: forcing a failure. [ 210.674607][ T6880] name failslab, interval 1, probability 0, space 0, times 0 [ 210.780972][ T6880] CPU: 1 PID: 6880 Comm: syz.1.867 Not tainted syzkaller #0 [ 210.782466][ T6880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 210.784428][ T6880] Call trace: [ 210.785027][ T6880] dump_backtrace+0x1c4/0x1f0 [ 210.785861][ T6880] show_stack+0x2c/0x3c [ 210.786698][ T6880] __dump_stack+0x30/0x40 [ 210.787599][ T6880] dump_stack_lvl+0xf4/0x15c [ 210.788573][ T6880] dump_stack+0x1c/0x5c [ 210.789423][ T6880] should_fail_ex+0x3cc/0x524 [ 210.790292][ T6880] __should_failslab+0xc0/0x11c [ 210.791127][ T6880] should_failslab+0x10/0x28 [ 210.792033][ T6880] __kmem_cache_alloc_node+0x7c/0x318 [ 210.793057][ T6880] kmalloc_trace+0x48/0x94 [ 210.793924][ T6880] blk_stat_alloc_callback+0x70/0x1ec [ 210.795011][ T6880] blk_mq_init_allocated_queue+0x144/0x161c [ 210.796133][ T6880] __blk_mq_alloc_disk+0xb4/0x1e0 [ 210.797026][ T6880] loop_add+0x2c4/0x810 [ 210.797856][ T6880] loop_control_ioctl+0x130/0x514 [ 210.798775][ T6880] __arm64_sys_ioctl+0x14c/0x1c8 [ 210.799820][ T6880] invoke_syscall+0x98/0x290 [ 210.800748][ T6880] el0_svc_common+0x13c/0x258 [ 210.801610][ T6880] do_el0_svc+0x5c/0x134 [ 210.802320][ T6880] el0_svc+0x58/0x12c [ 210.803040][ T6880] el0t_64_sync_handler+0x84/0xf0 [ 210.804021][ T6880] el0t_64_sync+0x18c/0x190 [ 211.416729][ T6889] netlink: 224 bytes leftover after parsing attributes in process `syz.0.871'. [ 211.418507][ T6889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.871'. [ 211.434919][ T27] audit: type=1326 audit(211.420:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.2.873" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa779728 code=0x7ffc0000 [ 211.443483][ T27] audit: type=1326 audit(211.430:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.2.873" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa779728 code=0x7ffc0000 [ 211.467673][ T27] audit: type=1326 audit(211.430:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.2.873" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffaa779728 code=0x7ffc0000 [ 211.493206][ T27] audit: type=1326 audit(211.430:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.2.873" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa779728 code=0x7ffc0000 [ 211.533190][ T27] audit: type=1326 audit(211.430:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.2.873" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa779728 code=0x7ffc0000 [ 211.562069][ T27] audit: type=1326 audit(211.430:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.2.873" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffaa779728 code=0x7ffc0000 [ 211.581364][ T27] audit: type=1326 audit(211.430:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.2.873" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa779728 code=0x7ffc0000 [ 211.586599][ T27] audit: type=1326 audit(211.430:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.2.873" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa779728 code=0x7ffc0000 [ 211.591175][ T27] audit: type=1326 audit(211.430:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.2.873" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffaa779728 code=0x7ffc0000 [ 211.595496][ T27] audit: type=1326 audit(211.430:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.2.873" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa779728 code=0x7ffc0000 [ 212.425142][ T6912] netlink: 83 bytes leftover after parsing attributes in process `syz.4.881'. [ 213.100483][ T6937] rxe_eth0 speed is unknown, defaulting to 1000 [ 214.019172][ T6941] tipc: Enabled bearer , priority 0 [ 214.021399][ T6941] device syzkaller0 entered promiscuous mode [ 214.107874][ T6941] tipc: Resetting bearer [ 214.113859][ T6940] tipc: Resetting bearer [ 214.207438][ T6940] tipc: Disabling bearer [ 215.412955][ T6983] rxe_eth0 speed is unknown, defaulting to 1000 [ 216.574360][ T7007] loop2: detected capacity change from 0 to 256 [ 216.662622][ T7010] FAULT_INJECTION: forcing a failure. [ 216.662622][ T7010] name failslab, interval 1, probability 0, space 0, times 0 [ 216.676129][ T7010] CPU: 0 PID: 7010 Comm: syz.3.914 Not tainted syzkaller #0 [ 216.677626][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 216.679503][ T7010] Call trace: [ 216.680136][ T7010] dump_backtrace+0x1c4/0x1f0 [ 216.681140][ T7010] show_stack+0x2c/0x3c [ 216.681997][ T7010] __dump_stack+0x30/0x40 [ 216.682948][ T7010] dump_stack_lvl+0xf4/0x15c [ 216.683933][ T7010] dump_stack+0x1c/0x5c [ 216.684729][ T7010] should_fail_ex+0x3cc/0x524 [ 216.685687][ T7010] __should_failslab+0xc0/0x11c [ 216.686781][ T7010] should_failslab+0x10/0x28 [ 216.687621][ T7010] kmem_cache_alloc+0x88/0x310 [ 216.688534][ T7010] sk_prot_alloc+0x60/0x1e8 [ 216.689456][ T7010] sk_alloc+0x44/0x3a0 [ 216.690209][ T7010] rds_create+0x98/0x414 [ 216.691053][ T7010] __sock_create+0x448/0x8a8 [ 216.691871][ T7010] __sys_socket+0xc0/0x1b0 [ 216.692610][ T7010] __arm64_sys_socket+0x7c/0x94 [ 216.693503][ T7010] invoke_syscall+0x98/0x290 [ 216.694345][ T7010] el0_svc_common+0x13c/0x258 [ 216.695162][ T7010] do_el0_svc+0x5c/0x134 [ 216.695869][ T7010] el0_svc+0x58/0x12c [ 216.696607][ T7010] el0t_64_sync_handler+0x84/0xf0 [ 216.697492][ T7010] el0t_64_sync+0x18c/0x190 [ 217.265586][ T7008] tipc: Enabled bearer , priority 0 [ 217.267113][ T7008] device syzkaller0 entered promiscuous mode [ 217.353351][ T7008] tipc: Resetting bearer [ 217.432555][ T7022] FAULT_INJECTION: forcing a failure. [ 217.432555][ T7022] name fail_futex, interval 1, probability 0, space 0, times 0 [ 217.435533][ T7022] CPU: 1 PID: 7022 Comm: syz.0.919 Not tainted syzkaller #0 [ 217.437032][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 217.439187][ T7022] Call trace: [ 217.439914][ T7022] dump_backtrace+0x1c4/0x1f0 [ 217.440876][ T7022] show_stack+0x2c/0x3c [ 217.441772][ T7022] __dump_stack+0x30/0x40 [ 217.442729][ T7022] dump_stack_lvl+0xf4/0x15c [ 217.443745][ T7022] dump_stack+0x1c/0x5c [ 217.444662][ T7022] should_fail_ex+0x3cc/0x524 [ 217.445632][ T7022] should_fail+0x14/0x24 [ 217.446451][ T7022] get_futex_key+0x904/0xec0 [ 217.447424][ T7022] futex_wake+0x10c/0x458 [ 217.448285][ T7022] do_futex+0x2c4/0x340 [ 217.449146][ T7022] __arm64_sys_futex+0x390/0x414 [ 217.450232][ T7022] invoke_syscall+0x98/0x290 [ 217.451221][ T7022] el0_svc_common+0x13c/0x258 [ 217.452249][ T7022] do_el0_svc+0x5c/0x134 [ 217.453136][ T7022] el0_svc+0x58/0x12c [ 217.453955][ T7022] el0t_64_sync_handler+0x84/0xf0 [ 217.454995][ T7022] el0t_64_sync+0x18c/0x190 [ 217.466987][ T7005] tipc: Resetting bearer [ 217.612724][ T7005] tipc: Disabling bearer [ 218.649144][ T7043] rxe_eth0 speed is unknown, defaulting to 1000 [ 219.890482][ T7061] netlink: 'syz.4.934': attribute type 39 has an invalid length. [ 220.324318][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.329394][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.340432][ T7065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.347867][ T7065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.821159][ T7095] rxe_eth0 speed is unknown, defaulting to 1000 [ 221.550190][ T7099] FAULT_INJECTION: forcing a failure. [ 221.550190][ T7099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.564563][ T7099] CPU: 1 PID: 7099 Comm: syz.0.943 Not tainted syzkaller #0 [ 221.565976][ T7099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 221.568116][ T7099] Call trace: [ 221.568785][ T7099] dump_backtrace+0x1c4/0x1f0 [ 221.569637][ T7099] show_stack+0x2c/0x3c [ 221.570461][ T7099] __dump_stack+0x30/0x40 [ 221.571298][ T7099] dump_stack_lvl+0xf4/0x15c [ 221.572170][ T7099] dump_stack+0x1c/0x5c [ 221.573004][ T7099] should_fail_ex+0x3cc/0x524 [ 221.573905][ T7099] should_fail+0x14/0x24 [ 221.574754][ T7099] should_fail_usercopy+0x20/0x30 [ 221.575726][ T7099] copy_from_bpfptr+0x84/0x1d8 [ 221.576618][ T7099] __sys_bpf+0x1f8/0x660 [ 221.577457][ T7099] __arm64_sys_bpf+0x80/0x98 [ 221.578346][ T7099] invoke_syscall+0x98/0x290 [ 221.579257][ T7099] el0_svc_common+0x13c/0x258 [ 221.580082][ T7099] do_el0_svc+0x5c/0x134 [ 221.580893][ T7099] el0_svc+0x58/0x12c [ 221.581758][ T7099] el0t_64_sync_handler+0x84/0xf0 [ 221.582783][ T7099] el0t_64_sync+0x18c/0x190 [ 222.683688][ T7125] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 222.747383][ T7124] nvmet: failed to open block device /dev/nul: (-2) [ 222.821933][ T7128] batman_adv: batadv0: Adding interface: syzkaller0 [ 222.823231][ T7128] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.909635][ T7128] batman_adv: batadv0: Interface activated: syzkaller0 [ 222.948506][ T7126] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 223.018621][ T7138] loop4: detected capacity change from 0 to 256 [ 223.213511][ T4413] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 223.216485][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 223.371062][ T4413] usb 1-1: device descriptor read/64, error -32 [ 223.640920][ T4413] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 223.642479][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 223.770238][ T7141] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 223.791123][ T4413] usb 1-1: device descriptor read/64, error -32 [ 223.887318][ T7126] batman_adv: batadv0: Removing interface: syzkaller0 [ 223.911991][ T4413] usb usb1-port1: attempt power cycle [ 224.488424][ T7158] rxe_eth0 speed is unknown, defaulting to 1000 [ 224.631064][ T4413] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 224.995258][ T4413] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 225.001179][ T4413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.007604][ T4413] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 225.009314][ T4413] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 225.059450][ T4413] usb 1-1: Manufacturer: syz [ 225.079767][ T4413] usb 1-1: config 0 descriptor?? [ 225.094359][ T7163] bonding: bond0 is being deleted... [ 225.109314][ T4413] Registered IR keymap rc-hauppauge [ 225.222878][ T4413] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 225.228986][ T4413] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 225.237708][ T4413] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input2 [ 225.253821][ T7163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.305869][ T4413] usb 1-1: USB disconnect, device number 4 [ 225.337986][ T7163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.340375][ T7173] nvmet: failed to open block device /dev/nul: (-2) [ 225.384565][ T7163] bond0 (unregistering): Released all slaves [ 225.418074][ T7177] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 225.595967][ T7187] bridge0: port 4(macvlan2) entered blocking state [ 225.597326][ T7187] bridge0: port 4(macvlan2) entered disabled state [ 225.599866][ T7187] device macvlan2 entered promiscuous mode [ 225.617319][ T7187] bridge0: port 4(macvlan2) entered blocking state [ 225.618502][ T7187] bridge0: port 4(macvlan2) entered forwarding state [ 225.640623][ T7190] netlink: 'syz.2.971': attribute type 1 has an invalid length. [ 225.873338][ T7200] loop1: detected capacity change from 0 to 256 [ 226.877368][ T7201] FAULT_INJECTION: forcing a failure. [ 226.877368][ T7201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.906105][ T7201] CPU: 1 PID: 7201 Comm: syz.4.973 Not tainted syzkaller #0 [ 226.907605][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 226.909563][ T7201] Call trace: [ 226.910248][ T7201] dump_backtrace+0x1c4/0x1f0 [ 226.911227][ T7201] show_stack+0x2c/0x3c [ 226.912364][ T7201] __dump_stack+0x30/0x40 [ 226.913170][ T7201] dump_stack_lvl+0xf4/0x15c [ 226.914006][ T7201] dump_stack+0x1c/0x5c [ 226.914765][ T7201] should_fail_ex+0x3cc/0x524 [ 226.915619][ T7201] should_fail+0x14/0x24 [ 226.916366][ T7201] should_fail_usercopy+0x20/0x30 [ 226.917334][ T7201] memdup_user_nul+0xa4/0x228 [ 226.918304][ T7201] proc_simple_write+0xc8/0x14c [ 226.919272][ T7201] proc_reg_write+0x184/0x2d4 [ 226.920133][ T7201] vfs_write+0x2a8/0x7c8 [ 226.920967][ T7201] ksys_write+0x12c/0x228 [ 226.921797][ T7201] __arm64_sys_write+0x7c/0x90 [ 226.922703][ T7201] invoke_syscall+0x98/0x290 [ 226.923589][ T7201] el0_svc_common+0x13c/0x258 [ 226.924460][ T7201] do_el0_svc+0x5c/0x134 [ 226.925227][ T7201] el0_svc+0x58/0x12c [ 226.925953][ T7201] el0t_64_sync_handler+0x84/0xf0 [ 226.926869][ T7201] el0t_64_sync+0x18c/0x190 [ 227.012407][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 227.197277][ T7215] nvmet: failed to open block device /dev/nul: (-2) [ 227.220452][ T24] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 227.222367][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.225561][ T24] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 227.227232][ T24] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 227.228731][ T24] usb 1-1: Manufacturer: syz [ 227.234753][ T24] usb 1-1: config 0 descriptor?? [ 227.241244][ T24] Registered IR keymap rc-hauppauge [ 228.272415][ T7226] rxe_eth0 speed is unknown, defaulting to 1000 [ 228.422759][ T24] rc_core: Loaded IR protocol module ir-rc5-decoder, but protocol rc-5 still not available [ 228.426290][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 228.438004][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input3 [ 228.467134][ T24] usb 1-1: USB disconnect, device number 5 [ 228.524201][ T7255] Bluetooth: MGMT ver 1.22 [ 228.583626][ T7259] FAULT_INJECTION: forcing a failure. [ 228.583626][ T7259] name fail_futex, interval 1, probability 0, space 0, times 0 [ 228.585926][ T7259] CPU: 0 PID: 7259 Comm: syz.3.991 Not tainted syzkaller #0 [ 228.587469][ T7259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 228.589481][ T7259] Call trace: [ 228.590070][ T7259] dump_backtrace+0x1c4/0x1f0 [ 228.590988][ T7259] show_stack+0x2c/0x3c [ 228.591801][ T7259] __dump_stack+0x30/0x40 [ 228.592712][ T7259] dump_stack_lvl+0xf4/0x15c [ 228.593676][ T7259] dump_stack+0x1c/0x5c [ 228.594521][ T7259] should_fail_ex+0x3cc/0x524 [ 228.595451][ T7259] should_fail+0x14/0x24 [ 228.596338][ T7259] get_futex_key+0x96c/0xec0 [ 228.597306][ T7259] futex_lock_pi+0x18c/0x7cc [ 228.598232][ T7259] do_futex+0x2a4/0x340 [ 228.599113][ T7259] __arm64_sys_futex+0x390/0x414 [ 228.600246][ T7259] invoke_syscall+0x98/0x290 [ 228.601274][ T7259] el0_svc_common+0x13c/0x258 [ 228.602316][ T7259] do_el0_svc+0x5c/0x134 [ 228.603180][ T7259] el0_svc+0x58/0x12c [ 228.604120][ T7259] el0t_64_sync_handler+0x84/0xf0 [ 228.605063][ T7259] el0t_64_sync+0x18c/0x190 [ 228.622950][ T7262] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 228.627818][ T7261] nvmet: failed to open block device /dev/nul: (-2) [ 228.827142][ T7277] rxe_eth0 speed is unknown, defaulting to 1000 [ 229.761796][ T7295] FAULT_INJECTION: forcing a failure. [ 229.761796][ T7295] name failslab, interval 1, probability 0, space 0, times 0 [ 229.764123][ T7295] CPU: 1 PID: 7295 Comm: syz.2.1005 Not tainted syzkaller #0 [ 229.765498][ T7295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 229.767446][ T7295] Call trace: [ 229.768088][ T7295] dump_backtrace+0x1c4/0x1f0 [ 229.769036][ T7295] show_stack+0x2c/0x3c [ 229.769889][ T7295] __dump_stack+0x30/0x40 [ 229.770878][ T7295] dump_stack_lvl+0xf4/0x15c [ 229.771846][ T7295] dump_stack+0x1c/0x5c [ 229.772624][ T7295] should_fail_ex+0x3cc/0x524 [ 229.773587][ T7295] __should_failslab+0xc0/0x11c [ 229.774484][ T7295] should_failslab+0x10/0x28 [ 229.775423][ T7295] kmem_cache_alloc+0x88/0x310 [ 229.776268][ T7295] __proc_create+0x30c/0x718 [ 229.777119][ T7295] proc_create_reg+0x88/0x110 [ 229.777973][ T7295] proc_create_net_data+0xa8/0x1ac [ 229.778878][ T7295] nf_log_net_init+0x70/0x54c [ 229.779829][ T7295] ops_init+0x2b0/0x53c [ 229.780572][ T7295] setup_net+0x494/0xb6c [ 229.781356][ T7295] copy_net_ns+0x2b8/0x578 [ 229.782225][ T7295] create_new_namespaces+0x30c/0x604 [ 229.783152][ T7295] unshare_nsproxy_namespaces+0x108/0x160 [ 229.784253][ T7295] ksys_unshare+0x3f0/0x70c [ 229.785114][ T7295] __arm64_sys_unshare+0x3c/0x50 [ 229.786096][ T7295] invoke_syscall+0x98/0x290 [ 229.787035][ T7295] el0_svc_common+0x13c/0x258 [ 229.788006][ T7295] do_el0_svc+0x5c/0x134 [ 229.788977][ T7295] el0_svc+0x58/0x12c [ 229.789722][ T7295] el0t_64_sync_handler+0x84/0xf0 [ 229.790700][ T7295] el0t_64_sync+0x18c/0x190 [ 229.900899][ T7302] nvmet: failed to open block device /dev/nul: (-2) [ 230.104666][ T7327] nvmet: failed to open block device /dev/nul: (-2) [ 230.202933][ T7332] rxe_eth0 speed is unknown, defaulting to 1000 [ 230.931167][ T7336] FAULT_INJECTION: forcing a failure. [ 230.931167][ T7336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.947695][ T7336] CPU: 1 PID: 7336 Comm: syz.0.1019 Not tainted syzkaller #0 [ 230.949200][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 230.951219][ T7336] Call trace: [ 230.951865][ T7336] dump_backtrace+0x1c4/0x1f0 [ 230.952798][ T7336] show_stack+0x2c/0x3c [ 230.953590][ T7336] __dump_stack+0x30/0x40 [ 230.954378][ T7336] dump_stack_lvl+0xf4/0x15c [ 230.955202][ T7336] dump_stack+0x1c/0x5c [ 230.956009][ T7336] should_fail_ex+0x3cc/0x524 [ 230.956948][ T7336] should_fail+0x14/0x24 [ 230.957736][ T7336] should_fail_usercopy+0x20/0x30 [ 230.958664][ T7336] copy_from_bpfptr+0x84/0x1d8 [ 230.959630][ T7336] __sys_bpf+0x1f8/0x660 [ 230.960373][ T7336] __arm64_sys_bpf+0x80/0x98 [ 230.961237][ T7336] invoke_syscall+0x98/0x290 [ 230.962147][ T7336] el0_svc_common+0x13c/0x258 [ 230.963065][ T7336] do_el0_svc+0x5c/0x134 [ 230.963928][ T7336] el0_svc+0x58/0x12c [ 230.964702][ T7336] el0t_64_sync_handler+0x84/0xf0 [ 230.965662][ T7336] el0t_64_sync+0x18c/0x190 [ 231.278619][ T7360] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1029'. [ 231.294385][ T7360] device syzkaller0 entered promiscuous mode [ 242.630019][ T7397] rxe_eth0 speed is unknown, defaulting to 1000 [ 243.141017][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1053'. [ 243.192324][ T7438] FAULT_INJECTION: forcing a failure. [ 243.192324][ T7438] name failslab, interval 1, probability 0, space 0, times 0 [ 243.196292][ T7438] CPU: 0 PID: 7438 Comm: syz.4.1054 Not tainted syzkaller #0 [ 243.197653][ T7438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 243.199505][ T7438] Call trace: [ 243.200168][ T7438] dump_backtrace+0x1c4/0x1f0 [ 243.201156][ T7438] show_stack+0x2c/0x3c [ 243.202016][ T7438] __dump_stack+0x30/0x40 [ 243.202847][ T7438] dump_stack_lvl+0xf4/0x15c [ 243.203877][ T7438] dump_stack+0x1c/0x5c [ 243.204816][ T7438] should_fail_ex+0x3cc/0x524 [ 243.205862][ T7438] __should_failslab+0xc0/0x11c [ 243.206908][ T7438] should_failslab+0x10/0x28 [ 243.207877][ T7438] kmem_cache_alloc+0x88/0x310 [ 243.208797][ T7438] security_inode_alloc+0x38/0x11c [ 243.209780][ T7438] inode_init_always+0x6c8/0xb28 [ 243.210768][ T7438] new_inode_pseudo+0x7c/0x1cc [ 243.211767][ T7438] new_inode+0x38/0x174 [ 243.212589][ T7438] __rpc_create_common+0x6c/0x2c4 [ 243.213605][ T7438] __rpc_mkdir+0x44/0x194 [ 243.214468][ T7438] rpc_populate+0x1a8/0x458 [ 243.215413][ T7438] rpc_fill_super+0x2c8/0x6d8 [ 243.216322][ T7438] get_tree_keyed+0xd8/0x190 [ 243.217136][ T7438] rpc_fs_get_tree+0xa0/0xf4 [ 243.218031][ T7438] vfs_get_tree+0x90/0x278 [ 243.218919][ T7438] do_new_mount+0x228/0x818 [ 243.219807][ T7438] path_mount+0x5ac/0xe6c [ 243.220661][ T7438] __arm64_sys_mount+0x4a0/0x5a0 [ 243.221669][ T7438] invoke_syscall+0x98/0x290 [ 243.222598][ T7438] el0_svc_common+0x13c/0x258 [ 243.223583][ T7438] do_el0_svc+0x5c/0x134 [ 243.224457][ T7438] el0_svc+0x58/0x12c [ 243.225292][ T7438] el0t_64_sync_handler+0x84/0xf0 [ 243.226306][ T7438] el0t_64_sync+0x18c/0x190 [ 243.236329][ T7438] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry gssd [ 243.245995][ T7438] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 243.324548][ T7450] FAULT_INJECTION: forcing a failure. [ 243.324548][ T7450] name failslab, interval 1, probability 0, space 0, times 0 [ 243.327057][ T7450] CPU: 0 PID: 7450 Comm: syz.3.1058 Not tainted syzkaller #0 [ 243.328543][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 243.330567][ T7450] Call trace: [ 243.331178][ T7450] dump_backtrace+0x1c4/0x1f0 [ 243.332080][ T7450] show_stack+0x2c/0x3c [ 243.332874][ T7450] __dump_stack+0x30/0x40 [ 243.333702][ T7450] dump_stack_lvl+0xf4/0x15c [ 243.334617][ T7450] dump_stack+0x1c/0x5c [ 243.335419][ T7450] should_fail_ex+0x3cc/0x524 [ 243.336339][ T7450] __should_failslab+0xc0/0x11c [ 243.337257][ T7450] should_failslab+0x10/0x28 [ 243.338145][ T7450] __kmem_cache_alloc_node+0x7c/0x318 [ 243.339257][ T7450] __kmalloc+0xc4/0x180 [ 243.340008][ T7450] tomoyo_encode+0x260/0x484 [ 243.340854][ T7450] tomoyo_realpath_from_path+0x4b4/0x508 [ 243.341910][ T7450] tomoyo_check_open_permission+0x19c/0x35c [ 243.343003][ T7450] tomoyo_file_open+0x128/0x198 [ 243.343876][ T7450] security_file_open+0x6c/0xac [ 243.344784][ T7450] do_dentry_open+0x294/0xf8c [ 243.345613][ T7450] vfs_open+0x7c/0x90 [ 243.346408][ T7450] path_openat+0x1fc0/0x27a0 [ 243.347313][ T7450] do_filp_open+0x198/0x38c [ 243.348182][ T7450] do_sys_openat2+0x134/0x3fc [ 243.349107][ T7450] __arm64_sys_openat+0x11c/0x150 [ 243.350145][ T7450] invoke_syscall+0x98/0x290 [ 243.351040][ T7450] el0_svc_common+0x13c/0x258 [ 243.351895][ T7450] do_el0_svc+0x5c/0x134 [ 243.352676][ T7450] el0_svc+0x58/0x12c [ 243.353439][ T7450] el0t_64_sync_handler+0x84/0xf0 [ 243.354372][ T7450] el0t_64_sync+0x18c/0x190 [ 243.711038][ T7450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.803945][ T7448] FAULT_INJECTION: forcing a failure. [ 243.803945][ T7448] name failslab, interval 1, probability 0, space 0, times 0 [ 243.818662][ T7448] CPU: 1 PID: 7448 Comm: syz.0.1056 Not tainted syzkaller #0 [ 243.820308][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 243.822490][ T7448] Call trace: [ 243.823193][ T7448] dump_backtrace+0x1c4/0x1f0 [ 243.824315][ T7448] show_stack+0x2c/0x3c [ 243.825259][ T7448] __dump_stack+0x30/0x40 [ 243.826263][ T7448] dump_stack_lvl+0xf4/0x15c [ 243.827337][ T7448] dump_stack+0x1c/0x5c [ 243.828316][ T7448] should_fail_ex+0x3cc/0x524 [ 243.829353][ T7448] __should_failslab+0xc0/0x11c [ 243.830513][ T7448] should_failslab+0x10/0x28 [ 243.831615][ T7448] kmem_cache_alloc+0x88/0x310 [ 243.832681][ T7448] __kernfs_new_node+0xec/0x5fc [ 243.833724][ T7448] kernfs_new_node+0x120/0x230 [ 243.834777][ T7448] __kernfs_create_file+0x60/0x2e0 [ 243.835858][ T7448] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 243.836916][ T7448] internal_create_group+0x3e8/0xb24 [ 243.838040][ T7448] sysfs_create_groups+0x60/0x134 [ 243.839012][ T7448] kobject_add_internal+0x5e4/0xb18 [ 243.840117][ T7448] kobject_add+0x144/0x20c [ 243.840935][ T7448] blk_register_queue+0x84/0x334 [ 243.841861][ T7448] device_add_disk+0x53c/0xe04 [ 243.842673][ T7448] md_alloc+0x6a4/0xb3c [ 243.843519][ T7448] md_probe+0x68/0xdc [ 243.844319][ T7448] blk_request_module+0x274/0x29c [ 243.845337][ T7448] blkdev_get_no_open+0x48/0xdc [ 243.846274][ T7448] blkdev_get_by_dev+0x84/0x8b8 [ 243.847225][ T7448] blkdev_open+0x108/0x2a0 [ 243.848106][ T7448] do_dentry_open+0x738/0xf8c [ 243.848941][ T7448] vfs_open+0x7c/0x90 [ 243.849657][ T7448] path_openat+0x1fc0/0x27a0 [ 243.850498][ T7448] do_filp_open+0x198/0x38c [ 243.851387][ T7448] do_sys_openat2+0x134/0x3fc [ 243.852334][ T7448] __arm64_sys_openat+0x11c/0x150 [ 243.853338][ T7448] invoke_syscall+0x98/0x290 [ 243.854274][ T7448] el0_svc_common+0x13c/0x258 [ 243.855191][ T7448] do_el0_svc+0x5c/0x134 [ 243.856173][ T7448] el0_svc+0x58/0x12c [ 243.857093][ T7448] el0t_64_sync_handler+0x84/0xf0 [ 243.858112][ T7448] el0t_64_sync+0x18c/0x190 [ 243.875960][ T7456] FAULT_INJECTION: forcing a failure. [ 243.875960][ T7456] name failslab, interval 1, probability 0, space 0, times 0 [ 243.887571][ T7456] CPU: 1 PID: 7456 Comm: syz.3.1059 Not tainted syzkaller #0 [ 243.888892][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 243.890803][ T7456] Call trace: [ 243.891432][ T7456] dump_backtrace+0x1c4/0x1f0 [ 243.892361][ T7456] show_stack+0x2c/0x3c [ 243.893171][ T7456] __dump_stack+0x30/0x40 [ 243.894035][ T7456] dump_stack_lvl+0xf4/0x15c [ 243.894925][ T7456] dump_stack+0x1c/0x5c [ 243.895755][ T7456] should_fail_ex+0x3cc/0x524 [ 243.896667][ T7456] __should_failslab+0xc0/0x11c [ 243.897661][ T7456] should_failslab+0x10/0x28 [ 243.898551][ T7456] kmem_cache_alloc_node+0x8c/0x344 [ 243.899544][ T7456] alloc_vmap_area+0x140/0x16c4 [ 243.900489][ T7456] __get_vm_area_node+0x178/0x31c [ 243.901512][ T7456] __vmalloc_node_range+0x1d4/0xe70 [ 243.902570][ T7456] vzalloc+0x9c/0xd4 [ 243.903353][ T7456] bpf_patch_insn_data+0x98/0xb80 [ 243.904219][ T7456] bpf_check+0x50f4/0xe03c [ 243.904966][ T7456] bpf_prog_load+0xe2c/0x12c0 [ 243.905867][ T7456] __sys_bpf+0x494/0x660 [ 243.906673][ T7456] __arm64_sys_bpf+0x80/0x98 [ 243.907606][ T7456] invoke_syscall+0x98/0x290 [ 243.908506][ T7456] el0_svc_common+0x13c/0x258 [ 243.909405][ T7456] do_el0_svc+0x5c/0x134 [ 243.910216][ T7456] el0_svc+0x58/0x12c [ 243.910995][ T7456] el0t_64_sync_handler+0x84/0xf0 [ 243.911972][ T7456] el0t_64_sync+0x18c/0x190 [ 243.927301][ T7456] syz.3.1059: vmalloc error: size 896, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 243.941814][ T7456] CPU: 1 PID: 7456 Comm: syz.3.1059 Not tainted syzkaller #0 [ 243.943382][ T7456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 243.945502][ T7456] Call trace: [ 243.946116][ T7456] dump_backtrace+0x1c4/0x1f0 [ 243.947023][ T7456] show_stack+0x2c/0x3c [ 243.947842][ T7456] __dump_stack+0x30/0x40 [ 243.948622][ T7456] dump_stack_lvl+0xf4/0x15c [ 243.949489][ T7456] dump_stack+0x1c/0x5c [ 243.950230][ T7456] warn_alloc+0x214/0x324 [ 243.951068][ T7456] __vmalloc_node_range+0x24c/0xe70 [ 243.952096][ T7456] vzalloc+0x9c/0xd4 [ 243.952777][ T7456] bpf_patch_insn_data+0x98/0xb80 [ 243.953705][ T7456] bpf_check+0x50f4/0xe03c [ 243.954547][ T7456] bpf_prog_load+0xe2c/0x12c0 [ 243.955498][ T7456] __sys_bpf+0x494/0x660 [ 243.956370][ T7456] __arm64_sys_bpf+0x80/0x98 [ 243.957301][ T7456] invoke_syscall+0x98/0x290 [ 243.958230][ T7456] el0_svc_common+0x13c/0x258 [ 243.959119][ T7456] do_el0_svc+0x5c/0x134 [ 243.959988][ T7456] el0_svc+0x58/0x12c [ 243.960865][ T7456] el0t_64_sync_handler+0x84/0xf0 [ 243.962000][ T7456] el0t_64_sync+0x18c/0x190 [ 245.215017][ T7448] kobject_add_internal failed for queue (error: -12 parent: md0) [ 245.230423][ T7456] Mem-Info: [ 245.231238][ T7456] active_anon:8232 inactive_anon:340 isolated_anon:0 [ 245.231238][ T7456] active_file:5237 inactive_file:11557 isolated_file:0 [ 245.231238][ T7456] unevictable:768 dirty:83 writeback:0 [ 245.231238][ T7456] slab_reclaimable:19232 slab_unreclaimable:103149 [ 245.231238][ T7456] mapped:29200 shmem:4847 pagetables:612 [ 245.231238][ T7456] sec_pagetables:0 bounce:0 [ 245.231238][ T7456] kernel_misc_reclaimable:0 [ 245.231238][ T7456] free:933421 free_pcp:4009 free_cma:7360 [ 245.290954][ T7456] Node 0 active_anon:32928kB inactive_anon:1560kB active_file:20948kB inactive_file:46228kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:118500kB dirty:332kB writeback:0kB shmem:19388kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8792kB pagetables:2548kB sec_pagetables:0kB all_unreclaimable? no [ 245.310923][ T7456] Node 0 DMA free:3076864kB boost:0kB min:20720kB low:25900kB high:31080kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 245.316803][ T7456] lowmem_reserve[]: 0 0 3532 3532 3532 [ 245.317794][ T7456] Node 0 Normal free:654264kB boost:0kB min:24332kB low:30412kB high:36492kB reserved_highatomic:0KB active_anon:32928kB inactive_anon:1460kB active_file:20948kB inactive_file:46228kB unevictable:3072kB writepending:332kB present:5242880kB managed:3620908kB mlocked:0kB bounce:0kB free_pcp:15796kB local_pcp:14616kB free_cma:0kB [ 245.325373][ T7456] lowmem_reserve[]: 0 0 0 0 0 [ 245.326183][ T7456] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 245.328865][ T7456] Node 0 Normal: 940*4kB (UME) 639*8kB (UME) 373*16kB (UME) 724*32kB (UME) 147*64kB (UME) 75*128kB (UME) 23*256kB (UME) 7*512kB (UM) 4*1024kB (ME) 3*2048kB (ME) 141*4096kB (UM) = 654264kB [ 245.332918][ T7456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.334547][ T7456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 245.336259][ T7456] Node 0 hugepages_total=951 hugepages_free=951 hugepages_surp=0 hugepages_size=2048kB [ 245.338385][ T7456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 245.340211][ T7456] 21643 total pagecache pages [ 245.342983][ T7456] 0 pages in swap cache [ 245.343755][ T7456] Free swap = 124740kB [ 245.344454][ T7456] Total swap = 124996kB [ 245.345251][ T7456] 2097152 pages RAM [ 245.345972][ T7456] 0 pages HighMem/MovableOnly [ 245.347091][ T7456] 421877 pages reserved [ 245.347912][ T7456] 8192 pages cma reserved [ 245.348758][ T7456] 0 pages hwpoisoned [ 245.450620][ T7469] rxe_eth0 speed is unknown, defaulting to 1000 [ 247.366522][ T7513] netlink: 'syz.1.1077': attribute type 4 has an invalid length. [ 247.368147][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 247.575001][ T7523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.576786][ T7523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.673944][ T7534] FAULT_INJECTION: forcing a failure. [ 247.673944][ T7534] name failslab, interval 1, probability 0, space 0, times 0 [ 247.681593][ T7534] CPU: 0 PID: 7534 Comm: syz.4.1085 Not tainted syzkaller #0 [ 247.683185][ T7534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 247.684989][ T7534] Call trace: [ 247.685547][ T7534] dump_backtrace+0x1c4/0x1f0 [ 247.686413][ T7534] show_stack+0x2c/0x3c [ 247.687202][ T7534] __dump_stack+0x30/0x40 [ 247.688034][ T7534] dump_stack_lvl+0xf4/0x15c [ 247.689024][ T7534] dump_stack+0x1c/0x5c [ 247.689918][ T7534] should_fail_ex+0x3cc/0x524 [ 247.690775][ T7534] __should_failslab+0xc0/0x11c [ 247.691774][ T7534] should_failslab+0x10/0x28 [ 247.692774][ T7534] kmem_cache_alloc_node+0x8c/0x344 [ 247.693758][ T7534] alloc_vmap_area+0x140/0x16c4 [ 247.694677][ T7534] __get_vm_area_node+0x178/0x31c [ 247.695659][ T7534] __vmalloc_node_range+0x1d4/0xe70 [ 247.696739][ T7534] vzalloc+0x9c/0xd4 [ 247.697619][ T7534] bpf_patch_insn_data+0x98/0xb80 [ 247.698731][ T7534] bpf_check+0x50f4/0xe03c [ 247.699589][ T7534] bpf_prog_load+0xe2c/0x12c0 [ 247.700554][ T7534] __sys_bpf+0x494/0x660 [ 247.701449][ T7534] __arm64_sys_bpf+0x80/0x98 [ 247.702424][ T7534] invoke_syscall+0x98/0x290 [ 247.703247][ T7534] el0_svc_common+0x13c/0x258 [ 247.704121][ T7534] do_el0_svc+0x5c/0x134 [ 247.704908][ T7534] el0_svc+0x58/0x12c [ 247.705680][ T7534] el0t_64_sync_handler+0x84/0xf0 [ 247.706673][ T7534] el0t_64_sync+0x18c/0x190 [ 247.724551][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 247.815059][ T7543] netlink: 'syz.4.1089': attribute type 4 has an invalid length. [ 247.816765][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1089'. [ 248.382145][ T7570] netlink: 'syz.3.1102': attribute type 4 has an invalid length. [ 248.389330][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 248.530117][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 248.530126][ T27] audit: type=1326 audit(504.508:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7563 comm="syz.1.1099" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa979728 code=0x0 [ 248.633064][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 248.633956][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.636489][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.691547][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 248.817259][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.819911][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.763666][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1128'. [ 249.858216][ T7638] loop3: detected capacity change from 0 to 164 [ 250.380368][ T7667] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 250.384273][ T7666] nvmet: failed to open block device /dev/nul: (-2) [ 251.263215][ T7686] device-mapper: ioctl: The device has no table. [ 251.290490][ T7690] 9pnet_virtio: no channels available for device syz [ 251.304130][ T7690] capability: warning: `syz.2.1150' uses 32-bit capabilities (legacy support in use) [ 251.331144][ T7682] device-mapper: thin: Data device (ram7) discard unsupported: Disabling discard passdown. [ 251.376055][ C0] MPTCP: addr_signal error, add_addr=2, echo=1 [ 251.400803][ T7703] loop3: detected capacity change from 0 to 164 [ 251.777438][ T7728] FAULT_INJECTION: forcing a failure. [ 251.777438][ T7728] name failslab, interval 1, probability 0, space 0, times 0 [ 251.777456][ T7728] CPU: 0 PID: 7728 Comm: syz.0.1165 Not tainted syzkaller #0 [ 251.777465][ T7728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 251.777471][ T7728] Call trace: [ 251.777473][ T7728] dump_backtrace+0x1c4/0x1f0 [ 251.777485][ T7728] show_stack+0x2c/0x3c [ 251.777490][ T7728] __dump_stack+0x30/0x40 [ 251.777500][ T7728] dump_stack_lvl+0xf4/0x15c [ 251.777507][ T7728] dump_stack+0x1c/0x5c [ 251.777515][ T7728] should_fail_ex+0x3cc/0x524 [ 251.777523][ T7728] __should_failslab+0xc0/0x11c [ 251.777532][ T7728] should_failslab+0x10/0x28 [ 251.777540][ T7728] __kmem_cache_alloc_node+0x7c/0x318 [ 251.777549][ T7728] kmalloc_trace+0x48/0x94 [ 251.777555][ T7728] vc_allocate+0x1a0/0x694 [ 251.777562][ T7728] con_install+0xa0/0x5cc [ 251.777569][ T7728] tty_init_dev+0xb4/0x3f4 [ 251.777576][ T7728] tty_open+0x6e0/0xc04 [ 251.777583][ T7728] chrdev_open+0x3d0/0x51c [ 251.777591][ T7728] do_dentry_open+0x738/0xf8c [ 251.777596][ T7728] vfs_open+0x7c/0x90 [ 251.777601][ T7728] path_openat+0x1fc0/0x27a0 [ 251.777608][ T7728] do_filp_open+0x198/0x38c [ 251.777615][ T7728] do_sys_openat2+0x134/0x3fc [ 251.777620][ T7728] __arm64_sys_openat+0x11c/0x150 [ 251.777625][ T7728] invoke_syscall+0x98/0x290 [ 251.777634][ T7728] el0_svc_common+0x13c/0x258 [ 251.777643][ T7728] do_el0_svc+0x5c/0x134 [ 251.777652][ T7728] el0_svc+0x58/0x12c [ 251.777660][ T7728] el0t_64_sync_handler+0x84/0xf0 [ 251.777668][ T7728] el0t_64_sync+0x18c/0x190 [ 251.900079][ T7730] device vlan0 entered promiscuous mode [ 251.912284][ T7730] team0: Port device vlan0 added [ 251.955015][ T7734] MPTCP: kernel_bind error, err=-98 [ 252.355796][ T7755] FAULT_INJECTION: forcing a failure. [ 252.355796][ T7755] name fail_futex, interval 1, probability 0, space 0, times 0 [ 252.359333][ T7755] CPU: 0 PID: 7755 Comm: syz.2.1176 Not tainted syzkaller #0 [ 252.360889][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 252.362723][ T7755] Call trace: [ 252.363368][ T7755] dump_backtrace+0x1c4/0x1f0 [ 252.364223][ T7755] show_stack+0x2c/0x3c [ 252.364978][ T7755] __dump_stack+0x30/0x40 [ 252.365822][ T7755] dump_stack_lvl+0xf4/0x15c [ 252.366714][ T7755] dump_stack+0x1c/0x5c [ 252.367514][ T7755] should_fail_ex+0x3cc/0x524 [ 252.368491][ T7755] should_fail+0x14/0x24 [ 252.369465][ T7755] get_futex_key+0x904/0xec0 [ 252.370557][ T7755] futex_wait_setup+0xbc/0x320 [ 252.371577][ T7755] futex_wait+0x178/0x488 [ 252.372508][ T7755] do_futex+0x2e8/0x340 [ 252.373454][ T7755] __arm64_sys_futex+0x390/0x414 [ 252.374573][ T7755] invoke_syscall+0x98/0x290 [ 252.375648][ T7755] el0_svc_common+0x13c/0x258 [ 252.376743][ T7755] do_el0_svc+0x5c/0x134 [ 252.377619][ T7755] el0_svc+0x58/0x12c [ 252.378357][ T7755] el0t_64_sync_handler+0x84/0xf0 [ 252.379264][ T7755] el0t_64_sync+0x18c/0x190 [ 253.610023][ T7780] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 253.611951][ T7780] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 254.590701][ T7804] FAULT_INJECTION: forcing a failure. [ 254.590701][ T7804] name fail_futex, interval 1, probability 0, space 0, times 0 [ 254.604973][ T7804] CPU: 1 PID: 7804 Comm: syz.4.1193 Not tainted syzkaller #0 [ 254.606403][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 254.608371][ T7804] Call trace: [ 254.608930][ T7804] dump_backtrace+0x1c4/0x1f0 [ 254.609862][ T7804] show_stack+0x2c/0x3c [ 254.610650][ T7804] __dump_stack+0x30/0x40 [ 254.611450][ T7804] dump_stack_lvl+0xf4/0x15c [ 254.612521][ T7804] dump_stack+0x1c/0x5c [ 254.613490][ T7804] should_fail_ex+0x3cc/0x524 [ 254.614586][ T7804] should_fail+0x14/0x24 [ 254.615563][ T7804] get_futex_key+0x904/0xec0 [ 254.616521][ T7804] futex_wait_setup+0xbc/0x320 [ 254.617503][ T7804] futex_wait+0x178/0x488 [ 254.618484][ T7804] do_futex+0x2e8/0x340 [ 254.619419][ T7804] __arm64_sys_futex+0x390/0x414 [ 254.620533][ T7804] invoke_syscall+0x98/0x290 [ 254.621461][ T7804] el0_svc_common+0x13c/0x258 [ 254.622416][ T7804] do_el0_svc+0x5c/0x134 [ 254.623276][ T7804] el0_svc+0x58/0x12c [ 254.624108][ T7804] el0t_64_sync_handler+0x84/0xf0 [ 254.625075][ T7804] el0t_64_sync+0x18c/0x190 [ 255.716487][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1201'. [ 256.381094][ T7863] MPTCP: kernel_bind error, err=-98 [ 256.937567][ T7872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.987820][ T7872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.043766][ T7872] bond0 (unregistering): Released all slaves [ 257.742147][ T7901] syz.2.1229 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 257.747915][ T7901] CPU: 1 PID: 7901 Comm: syz.2.1229 Not tainted syzkaller #0 [ 257.749238][ T7901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 257.751050][ T7901] Call trace: [ 257.751681][ T7901] dump_backtrace+0x1c4/0x1f0 [ 257.752499][ T7901] show_stack+0x2c/0x3c [ 257.753286][ T7901] __dump_stack+0x30/0x40 [ 257.754085][ T7901] dump_stack_lvl+0xf4/0x15c [ 257.754944][ T7901] dump_stack+0x1c/0x5c [ 257.755734][ T7901] dump_header+0xc0/0x724 [ 257.756614][ T7901] oom_kill_process+0x35c/0x660 [ 257.757528][ T7901] out_of_memory+0xbf0/0xf70 [ 257.758303][ T7901] mem_cgroup_out_of_memory+0x228/0x2d0 [ 257.759363][ T7901] try_charge_memcg+0xa4c/0x1390 [ 257.760324][ T7901] obj_cgroup_charge+0x178/0x2e4 [ 257.761199][ T7901] kmem_cache_alloc_node+0xc8/0x344 [ 257.762204][ T7901] dup_task_struct+0x74/0x7a8 [ 257.762955][ T7901] copy_process+0x4ec/0x38b4 [ 257.763701][ T7901] kernel_clone+0x1ec/0x938 [ 257.764551][ T7901] __arm64_sys_clone3+0x354/0x388 [ 257.765588][ T7901] invoke_syscall+0x98/0x290 [ 257.766447][ T7901] el0_svc_common+0x13c/0x258 [ 257.767294][ T7901] do_el0_svc+0x5c/0x134 [ 257.768104][ T7901] el0_svc+0x58/0x12c [ 257.768855][ T7901] el0t_64_sync_handler+0x84/0xf0 [ 257.769815][ T7901] el0t_64_sync+0x18c/0x190 [ 257.789556][ T7901] memory: usage 4kB, limit 8kB, failcnt 22 [ 257.793044][ T7901] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 257.793057][ T7892] block device autoloading is deprecated and will be removed. [ 257.794628][ T7901] kmem: usage 4kB, limit 9007199254740988kB, failcnt 0 [ 257.797485][ T7901] Memory cgroup stats for /syz2/test: [ 257.797609][ T7901] anon 0 [ 257.797609][ T7901] file 0 [ 257.797609][ T7901] kernel 4096 [ 257.797609][ T7901] kernel_stack 0 [ 257.797609][ T7901] pagetables 0 [ 257.797609][ T7901] sec_pagetables 0 [ 257.797609][ T7901] percpu 0 [ 257.797609][ T7901] sock 0 [ 257.797609][ T7901] vmalloc 0 [ 257.797609][ T7901] shmem 0 [ 257.797609][ T7901] zswap 0 [ 257.797609][ T7901] zswapped 0 [ 257.797609][ T7901] file_mapped 0 [ 257.797609][ T7901] file_dirty 0 [ 257.797609][ T7901] file_writeback 0 [ 257.797609][ T7901] swapcached 4096 [ 257.797609][ T7901] anon_thp 0 [ 257.797609][ T7901] file_thp 0 [ 257.797609][ T7901] shmem_thp 0 [ 257.797609][ T7901] inactive_anon 0 [ 257.797609][ T7901] active_anon 0 [ 257.797609][ T7901] inactive_file 0 [ 257.797609][ T7901] active_file 0 [ 257.797609][ T7901] unevictable 0 [ 257.797609][ T7901] slab_reclaimable 0 [ 257.797609][ T7901] slab_unreclaimable 848 [ 257.797609][ T7901] slab 848 [ 257.797609][ T7901] workingset_refault_anon 0 [ 257.818874][ T7901] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.1229,pid=7901,uid=0 [ 257.828858][ T7901] Memory cgroup out of memory: Killed process 7901 (syz.2.1229) total-vm:102392kB, anon-rss:1384kB, file-rss:21640kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 257.902811][ T7915] device-mapper: raid: Choosing default region size of 4MiB [ 257.927539][ T7915] mdX: WARNING: ram1 appears to be on the same physical disk as ram1. [ 257.929724][ T7915] True protection against single-disk failure might be compromised. [ 257.935172][ T7915] md/raid:mdX: device ram0 operational as raid disk 0 [ 257.936873][ T7915] md/raid:mdX: device ram1 operational as raid disk 1 [ 257.938235][ T7915] md/raid:mdX: device ram1 operational as raid disk 2 [ 257.946850][ T7915] md/raid:mdX: raid level 5 active with 3 out of 3 devices, algorithm 4 [ 259.038712][ T7972] device macsec1 entered promiscuous mode [ 259.473897][ T7980] FAULT_INJECTION: forcing a failure. [ 259.473897][ T7980] name failslab, interval 1, probability 0, space 0, times 0 [ 259.478008][ T7980] CPU: 0 PID: 7980 Comm: syz.2.1255 Not tainted syzkaller #0 [ 259.479497][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 259.481508][ T7980] Call trace: [ 259.482218][ T7980] dump_backtrace+0x1c4/0x1f0 [ 259.483160][ T7980] show_stack+0x2c/0x3c [ 259.483922][ T7980] __dump_stack+0x30/0x40 [ 259.484781][ T7980] dump_stack_lvl+0xf4/0x15c [ 259.485696][ T7980] dump_stack+0x1c/0x5c [ 259.486479][ T7980] should_fail_ex+0x3cc/0x524 [ 259.487348][ T7980] __should_failslab+0xc0/0x11c [ 259.488258][ T7980] should_failslab+0x10/0x28 [ 259.489056][ T7980] kmem_cache_alloc+0x88/0x310 [ 259.489889][ T7980] __alloc_file+0x30/0x234 [ 259.490766][ T7980] alloc_empty_file+0xa0/0x184 [ 259.491724][ T7980] alloc_file+0x64/0x564 [ 259.492566][ T7980] alloc_file_pseudo+0x16c/0x1f4 [ 259.493524][ T7980] anon_inode_getfile+0xc4/0x16c [ 259.494446][ T7980] sync_file_create+0x80/0x1e0 [ 259.495305][ T7980] sw_sync_ioctl+0x884/0xc44 [ 259.496114][ T7980] __arm64_sys_ioctl+0x14c/0x1c8 [ 259.497062][ T7980] invoke_syscall+0x98/0x290 [ 259.497951][ T7980] el0_svc_common+0x13c/0x258 [ 259.498779][ T7980] do_el0_svc+0x5c/0x134 [ 259.499616][ T7980] el0_svc+0x58/0x12c [ 259.500306][ T7980] el0t_64_sync_handler+0x84/0xf0 [ 259.501196][ T7980] el0t_64_sync+0x18c/0x190 [ 261.945357][ T7962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.832616][ T8063] loop3: detected capacity change from 0 to 256 [ 264.592494][ T8114] loop4: detected capacity change from 0 to 256 [ 265.360815][ T8119] kAFS: No cell specified [ 265.870419][ T8139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.880177][ T8139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.027206][ T8153] rxe_eth0 speed is unknown, defaulting to 1000 [ 267.114929][ T8175] loop1: detected capacity change from 0 to 256 [ 267.677441][ T8171] block device autoloading is deprecated and will be removed. [ 267.785228][ T8180] MPTCP: kernel_bind error, err=-98 [ 267.811962][ T8180] MPTCP: addr_signal error, add_addr=2, echo=1 [ 268.044122][ T8191] FAULT_INJECTION: forcing a failure. [ 268.044122][ T8191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 268.047617][ T8191] CPU: 1 PID: 8191 Comm: syz.0.1329 Not tainted syzkaller #0 [ 268.049048][ T8191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 268.051173][ T8191] Call trace: [ 268.051778][ T8191] dump_backtrace+0x1c4/0x1f0 [ 268.052736][ T8191] show_stack+0x2c/0x3c [ 268.053558][ T8191] __dump_stack+0x30/0x40 [ 268.054425][ T8191] dump_stack_lvl+0xf4/0x15c [ 268.055437][ T8191] dump_stack+0x1c/0x5c [ 268.056371][ T8191] should_fail_ex+0x3cc/0x524 [ 268.057410][ T8191] should_fail+0x14/0x24 [ 268.058286][ T8191] should_fail_usercopy+0x20/0x30 [ 268.059331][ T8191] memdup_user_nul+0xa4/0x228 [ 268.060244][ T8191] proc_simple_write+0xc8/0x14c [ 268.061207][ T8191] proc_reg_write+0x184/0x2d4 [ 268.062139][ T8191] vfs_write+0x2a8/0x7c8 [ 268.063021][ T8191] ksys_write+0x12c/0x228 [ 268.063917][ T8191] __arm64_sys_write+0x7c/0x90 [ 268.064935][ T8191] invoke_syscall+0x98/0x290 [ 268.065957][ T8191] el0_svc_common+0x13c/0x258 [ 268.066910][ T8191] do_el0_svc+0x5c/0x134 [ 268.067801][ T8191] el0_svc+0x58/0x12c [ 268.068734][ T8191] el0t_64_sync_handler+0x84/0xf0 [ 268.069938][ T8191] el0t_64_sync+0x18c/0x190 [ 268.266045][ T8211] rxe_eth0 speed is unknown, defaulting to 1000 [ 269.527809][ T8220] loop4: detected capacity change from 0 to 164 [ 269.554803][ T8218] MPTCP: kernel_bind error, err=-98 [ 269.794235][ T8233] loop4: detected capacity change from 0 to 256 [ 271.143249][ T8244] FAULT_INJECTION: forcing a failure. [ 271.143249][ T8244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.145814][ T8244] CPU: 0 PID: 8244 Comm: syz.1.1346 Not tainted syzkaller #0 [ 271.147098][ T8244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 271.148888][ T8244] Call trace: [ 271.149526][ T8244] dump_backtrace+0x1c4/0x1f0 [ 271.150459][ T8244] show_stack+0x2c/0x3c [ 271.151298][ T8244] __dump_stack+0x30/0x40 [ 271.152195][ T8244] dump_stack_lvl+0xf4/0x15c [ 271.153153][ T8244] dump_stack+0x1c/0x5c [ 271.153935][ T8244] should_fail_ex+0x3cc/0x524 [ 271.154808][ T8244] should_fail+0x14/0x24 [ 271.155638][ T8244] should_fail_usercopy+0x20/0x30 [ 271.156624][ T8244] memdup_user_nul+0xa4/0x228 [ 271.157576][ T8244] proc_simple_write+0xc8/0x14c [ 271.158568][ T8244] proc_reg_write+0x184/0x2d4 [ 271.159527][ T8244] vfs_write+0x2a8/0x7c8 [ 271.160379][ T8244] ksys_write+0x12c/0x228 [ 271.161111][ T8244] __arm64_sys_write+0x7c/0x90 [ 271.161990][ T8244] invoke_syscall+0x98/0x290 [ 271.162849][ T8244] el0_svc_common+0x13c/0x258 [ 271.163744][ T8244] do_el0_svc+0x5c/0x134 [ 271.164574][ T8244] el0_svc+0x58/0x12c [ 271.165290][ T8244] el0t_64_sync_handler+0x84/0xf0 [ 271.166242][ T8244] el0t_64_sync+0x18c/0x190 [ 271.249149][ T8251] kAFS: No cell specified [ 272.547174][ T8279] rxe_eth0 speed is unknown, defaulting to 1000 [ 273.132270][ T8283] loop1: detected capacity change from 0 to 256 [ 273.564017][ T8285] FAULT_INJECTION: forcing a failure. [ 273.564017][ T8285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.566455][ T8285] CPU: 1 PID: 8285 Comm: syz.3.1362 Not tainted syzkaller #0 [ 273.567831][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 273.569636][ T8285] Call trace: [ 273.570285][ T8285] dump_backtrace+0x1c4/0x1f0 [ 273.571198][ T8285] show_stack+0x2c/0x3c [ 273.571971][ T8285] __dump_stack+0x30/0x40 [ 273.572776][ T8285] dump_stack_lvl+0xf4/0x15c [ 273.573716][ T8285] dump_stack+0x1c/0x5c [ 273.574554][ T8285] should_fail_ex+0x3cc/0x524 [ 273.575621][ T8285] should_fail+0x14/0x24 [ 273.576540][ T8285] should_fail_usercopy+0x20/0x30 [ 273.577664][ T8285] memdup_user_nul+0xa4/0x228 [ 273.578629][ T8285] proc_simple_write+0xc8/0x14c [ 273.579714][ T8285] proc_reg_write+0x184/0x2d4 [ 273.580661][ T8285] vfs_write+0x2a8/0x7c8 [ 273.581546][ T8285] ksys_write+0x12c/0x228 [ 273.582480][ T8285] __arm64_sys_write+0x7c/0x90 [ 273.583378][ T8285] invoke_syscall+0x98/0x290 [ 273.584248][ T8285] el0_svc_common+0x13c/0x258 [ 273.585230][ T8285] do_el0_svc+0x5c/0x134 [ 273.586034][ T8285] el0_svc+0x58/0x12c [ 273.586786][ T8285] el0t_64_sync_handler+0x84/0xf0 [ 273.587764][ T8285] el0t_64_sync+0x18c/0x190 [ 273.619765][ T8286] nvmet: failed to open block device /dev/nul: (-2) [ 274.179419][ T8296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.190218][ T8296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.864438][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 275.219960][ T8327] rxe_eth0 speed is unknown, defaulting to 1000 [ 275.938856][ T24] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 275.940324][ T24] usb 1-1: config 0 has no interface number 0 [ 275.941543][ T24] usb 1-1: config 0 interface 16 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.943616][ T24] usb 1-1: config 0 interface 16 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.945450][ T24] usb 1-1: config 0 interface 16 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.947821][ T24] usb 1-1: config 0 interface 16 has no altsetting 0 [ 275.976214][ T24] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.4b [ 275.978089][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.002471][ T24] usb 1-1: config 0 descriptor?? [ 276.089688][ T8335] FAULT_INJECTION: forcing a failure. [ 276.089688][ T8335] name failslab, interval 1, probability 0, space 0, times 0 [ 276.101049][ T8335] CPU: 1 PID: 8335 Comm: syz.1.1376 Not tainted syzkaller #0 [ 276.102427][ T8335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 276.104192][ T8335] Call trace: [ 276.104833][ T8335] dump_backtrace+0x1c4/0x1f0 [ 276.105804][ T8335] show_stack+0x2c/0x3c [ 276.106616][ T8335] __dump_stack+0x30/0x40 [ 276.107426][ T8335] dump_stack_lvl+0xf4/0x15c [ 276.108257][ T8335] dump_stack+0x1c/0x5c [ 276.109068][ T8335] should_fail_ex+0x3cc/0x524 [ 276.109926][ T8335] __should_failslab+0xc0/0x11c [ 276.110894][ T8335] should_failslab+0x10/0x28 [ 276.111765][ T8335] __kmem_cache_alloc_node+0x7c/0x318 [ 276.112719][ T8335] kmalloc_trace+0x48/0x94 [ 276.113487][ T8335] afs_lookup_cell+0x4a8/0x1174 [ 276.114368][ T8335] afs_cell_init+0x78/0x2ec [ 276.115190][ T8335] afs_proc_rootcell_write+0x100/0x148 [ 276.116205][ T8335] proc_simple_write+0x10c/0x14c [ 276.117086][ T8335] proc_reg_write+0x184/0x2d4 [ 276.117975][ T8335] vfs_write+0x2a8/0x7c8 [ 276.118792][ T8335] ksys_write+0x12c/0x228 [ 276.119559][ T8335] __arm64_sys_write+0x7c/0x90 [ 276.120460][ T8335] invoke_syscall+0x98/0x290 [ 276.121363][ T8335] el0_svc_common+0x13c/0x258 [ 276.122313][ T8335] do_el0_svc+0x5c/0x134 [ 276.123177][ T8335] el0_svc+0x58/0x12c [ 276.123999][ T8335] el0t_64_sync_handler+0x84/0xf0 [ 276.124961][ T8335] el0t_64_sync+0x18c/0x190 [ 276.287395][ T8338] loop3: detected capacity change from 0 to 256 [ 277.056605][ T8353] syz.1.1380 uses obsolete (PF_INET,SOCK_PACKET) [ 277.100380][ T24] usbhid 1-1:0.16: can't add hid device: -71 [ 277.101763][ T24] usbhid: probe of 1-1:0.16 failed with error -71 [ 277.108830][ T24] usb 1-1: USB disconnect, device number 6 [ 277.139131][ T8358] FAULT_INJECTION: forcing a failure. [ 277.139131][ T8358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.143627][ T8358] CPU: 1 PID: 8358 Comm: syz.4.1383 Not tainted syzkaller #0 [ 277.144945][ T8358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 277.146829][ T8358] Call trace: [ 277.147388][ T8358] dump_backtrace+0x1c4/0x1f0 [ 277.148213][ T8358] show_stack+0x2c/0x3c [ 277.148948][ T8358] __dump_stack+0x30/0x40 [ 277.149804][ T8358] dump_stack_lvl+0xf4/0x15c [ 277.150637][ T8358] dump_stack+0x1c/0x5c [ 277.151454][ T8358] should_fail_ex+0x3cc/0x524 [ 277.152319][ T8358] should_fail+0x14/0x24 [ 277.153046][ T8358] should_fail_usercopy+0x20/0x30 [ 277.153996][ T8358] strncpy_from_user+0x48/0x59c [ 277.154887][ T8358] bpf_prog_load+0x17c/0x12c0 [ 277.155716][ T8358] __sys_bpf+0x494/0x660 [ 277.156491][ T8358] __arm64_sys_bpf+0x80/0x98 [ 277.157310][ T8358] invoke_syscall+0x98/0x290 [ 277.158108][ T8358] el0_svc_common+0x13c/0x258 [ 277.159030][ T8358] do_el0_svc+0x5c/0x134 [ 277.159793][ T8358] el0_svc+0x58/0x12c [ 277.160594][ T8358] el0t_64_sync_handler+0x84/0xf0 [ 277.161503][ T8358] el0t_64_sync+0x18c/0x190 [ 277.358870][ T8376] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1390'. [ 277.450509][ T8377] rxe_eth0 speed is unknown, defaulting to 1000 [ 278.409968][ T8382] FAULT_INJECTION: forcing a failure. [ 278.409968][ T8382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.413113][ T8382] CPU: 1 PID: 8382 Comm: syz.3.1391 Not tainted syzkaller #0 [ 278.414664][ T8382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 278.416736][ T8382] Call trace: [ 278.417412][ T8382] dump_backtrace+0x1c4/0x1f0 [ 278.418370][ T8382] show_stack+0x2c/0x3c [ 278.419229][ T8382] __dump_stack+0x30/0x40 [ 278.420105][ T8382] dump_stack_lvl+0xf4/0x15c [ 278.421007][ T8382] dump_stack+0x1c/0x5c [ 278.421777][ T8382] should_fail_ex+0x3cc/0x524 [ 278.422703][ T8382] should_fail+0x14/0x24 [ 278.423455][ T8382] should_fail_usercopy+0x20/0x30 [ 278.424375][ T8382] memdup_user_nul+0xa4/0x228 [ 278.425438][ T8382] proc_simple_write+0xc8/0x14c [ 278.426401][ T8382] proc_reg_write+0x184/0x2d4 [ 278.427331][ T8382] vfs_write+0x2a8/0x7c8 [ 278.428216][ T8382] ksys_write+0x12c/0x228 [ 278.429129][ T8382] __arm64_sys_write+0x7c/0x90 [ 278.430110][ T8382] invoke_syscall+0x98/0x290 [ 278.431014][ T8382] el0_svc_common+0x13c/0x258 [ 278.431970][ T8382] do_el0_svc+0x5c/0x134 [ 278.432830][ T8382] el0_svc+0x58/0x12c [ 278.433559][ T8382] el0t_64_sync_handler+0x84/0xf0 [ 278.434584][ T8382] el0t_64_sync+0x18c/0x190 [ 279.871994][ T8422] FAULT_INJECTION: forcing a failure. [ 279.871994][ T8422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.874292][ T8422] CPU: 0 PID: 8422 Comm: syz.1.1405 Not tainted syzkaller #0 [ 279.875774][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 279.877882][ T8422] Call trace: [ 279.878458][ T8422] dump_backtrace+0x1c4/0x1f0 [ 279.879369][ T8422] show_stack+0x2c/0x3c [ 279.880160][ T8422] __dump_stack+0x30/0x40 [ 279.880913][ T8422] dump_stack_lvl+0xf4/0x15c [ 279.881836][ T8422] dump_stack+0x1c/0x5c [ 279.882659][ T8422] should_fail_ex+0x3cc/0x524 [ 279.883600][ T8422] should_fail+0x14/0x24 [ 279.884485][ T8422] should_fail_usercopy+0x20/0x30 [ 279.885505][ T8422] copy_from_bpfptr+0x84/0x1d8 [ 279.886421][ T8422] __sys_bpf+0x1f8/0x660 [ 279.887205][ T8422] __arm64_sys_bpf+0x80/0x98 [ 279.888027][ T8422] invoke_syscall+0x98/0x290 [ 279.888897][ T8422] el0_svc_common+0x13c/0x258 [ 279.889737][ T8422] do_el0_svc+0x5c/0x134 [ 279.890570][ T8422] el0_svc+0x58/0x12c [ 279.891402][ T8422] el0t_64_sync_handler+0x84/0xf0 [ 279.892401][ T8422] el0t_64_sync+0x18c/0x190 [ 279.922295][ T8427] FAULT_INJECTION: forcing a failure. [ 279.922295][ T8427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.925948][ T8427] CPU: 1 PID: 8427 Comm: syz.4.1409 Not tainted syzkaller #0 [ 279.927410][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 279.929138][ T8427] Call trace: [ 279.929700][ T8427] dump_backtrace+0x1c4/0x1f0 [ 279.930514][ T8427] show_stack+0x2c/0x3c [ 279.931318][ T8427] __dump_stack+0x30/0x40 [ 279.932182][ T8427] dump_stack_lvl+0xf4/0x15c [ 279.933063][ T8427] dump_stack+0x1c/0x5c [ 279.933797][ T8427] should_fail_ex+0x3cc/0x524 [ 279.934643][ T8427] should_fail+0x14/0x24 [ 279.935495][ T8427] should_fail_usercopy+0x20/0x30 [ 279.936468][ T8427] memdup_user_nul+0xa4/0x228 [ 279.937437][ T8427] proc_simple_write+0xc8/0x14c [ 279.938444][ T8427] proc_reg_write+0x184/0x2d4 [ 279.939399][ T8427] vfs_write+0x2a8/0x7c8 [ 279.940260][ T8427] ksys_write+0x12c/0x228 [ 279.941002][ T8427] __arm64_sys_write+0x7c/0x90 [ 279.941862][ T8427] invoke_syscall+0x98/0x290 [ 279.942779][ T8427] el0_svc_common+0x13c/0x258 [ 279.943739][ T8427] do_el0_svc+0x5c/0x134 [ 279.944602][ T8427] el0_svc+0x58/0x12c [ 279.945339][ T8427] el0t_64_sync_handler+0x84/0xf0 [ 279.946351][ T8427] el0t_64_sync+0x18c/0x190 [ 279.955791][ T8437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1408'. [ 280.018838][ T8439] rxe_eth0 speed is unknown, defaulting to 1000 [ 281.910023][ T8465] loop4: detected capacity change from 0 to 256 [ 282.089145][ T8453] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.522783][ T8483] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1427'. [ 282.585802][ T8484] rxe_eth0 speed is unknown, defaulting to 1000 [ 283.512022][ T8494] FAULT_INJECTION: forcing a failure. [ 283.512022][ T8494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.532695][ T8494] CPU: 1 PID: 8494 Comm: syz.1.1425 Not tainted syzkaller #0 [ 283.534133][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 283.536001][ T8494] Call trace: [ 283.536677][ T8494] dump_backtrace+0x1c4/0x1f0 [ 283.537619][ T8494] show_stack+0x2c/0x3c [ 283.538420][ T8494] __dump_stack+0x30/0x40 [ 283.539206][ T8494] dump_stack_lvl+0xf4/0x15c [ 283.540132][ T8494] dump_stack+0x1c/0x5c [ 283.540996][ T8494] should_fail_ex+0x3cc/0x524 [ 283.541875][ T8494] should_fail+0x14/0x24 [ 283.542700][ T8494] should_fail_usercopy+0x20/0x30 [ 283.543585][ T8494] memdup_user_nul+0xa4/0x228 [ 283.544527][ T8494] proc_simple_write+0xc8/0x14c [ 283.545484][ T8494] proc_reg_write+0x184/0x2d4 [ 283.546450][ T8494] vfs_write+0x2a8/0x7c8 [ 283.547257][ T8494] ksys_write+0x12c/0x228 [ 283.548040][ T8494] __arm64_sys_write+0x7c/0x90 [ 283.548904][ T8494] invoke_syscall+0x98/0x290 [ 283.549774][ T8494] el0_svc_common+0x13c/0x258 [ 283.550694][ T8494] do_el0_svc+0x5c/0x134 [ 283.551563][ T8494] el0_svc+0x58/0x12c [ 283.552349][ T8494] el0t_64_sync_handler+0x84/0xf0 [ 283.553344][ T8494] el0t_64_sync+0x18c/0x190 [ 283.837893][ T8519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.839712][ T8519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.115818][ T8534] loop3: detected capacity change from 0 to 256 [ 284.951675][ T8538] FAULT_INJECTION: forcing a failure. [ 284.951675][ T8538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.954518][ T8538] CPU: 1 PID: 8538 Comm: syz.1.1444 Not tainted syzkaller #0 [ 284.955956][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 284.958128][ T8538] Call trace: [ 284.958810][ T8538] dump_backtrace+0x1c4/0x1f0 [ 284.959776][ T8538] show_stack+0x2c/0x3c [ 284.960645][ T8538] __dump_stack+0x30/0x40 [ 284.961481][ T8538] dump_stack_lvl+0xf4/0x15c [ 284.962298][ T8538] dump_stack+0x1c/0x5c [ 284.963109][ T8538] should_fail_ex+0x3cc/0x524 [ 284.964037][ T8538] should_fail+0x14/0x24 [ 284.964873][ T8538] should_fail_usercopy+0x20/0x30 [ 284.965906][ T8538] memdup_user_nul+0xa4/0x228 [ 284.966800][ T8538] proc_simple_write+0xc8/0x14c [ 284.967810][ T8538] proc_reg_write+0x184/0x2d4 [ 284.968697][ T8538] vfs_write+0x2a8/0x7c8 [ 284.969531][ T8538] ksys_write+0x12c/0x228 [ 284.970408][ T8538] __arm64_sys_write+0x7c/0x90 [ 284.971369][ T8538] invoke_syscall+0x98/0x290 [ 284.972252][ T8538] el0_svc_common+0x13c/0x258 [ 284.973161][ T8538] do_el0_svc+0x5c/0x134 [ 284.974044][ T8538] el0_svc+0x58/0x12c [ 284.974883][ T8538] el0t_64_sync_handler+0x84/0xf0 [ 284.975941][ T8538] el0t_64_sync+0x18c/0x190 [ 285.042225][ T8548] MPTCP: kernel_bind error, err=-98 [ 285.118706][ T8558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1445'. [ 285.183994][ T8559] rxe_eth0 speed is unknown, defaulting to 1000 [ 285.959350][ T8567] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.068618][ T8602] loop1: detected capacity change from 0 to 256 [ 288.350646][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1469'. [ 288.488903][ T8611] MPTCP: kernel_bind error, err=-98 [ 288.755144][ T8633] FAULT_INJECTION: forcing a failure. [ 288.755144][ T8633] name failslab, interval 1, probability 0, space 0, times 0 [ 288.758590][ T8633] CPU: 1 PID: 8633 Comm: syz.3.1476 Not tainted syzkaller #0 [ 288.760051][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 288.761926][ T8633] Call trace: [ 288.762566][ T8633] dump_backtrace+0x1c4/0x1f0 [ 288.763557][ T8633] show_stack+0x2c/0x3c [ 288.764421][ T8633] __dump_stack+0x30/0x40 [ 288.765358][ T8633] dump_stack_lvl+0xf4/0x15c [ 288.766352][ T8633] dump_stack+0x1c/0x5c [ 288.767176][ T8633] should_fail_ex+0x3cc/0x524 [ 288.768142][ T8633] __should_failslab+0xc0/0x11c [ 288.769147][ T8633] should_failslab+0x10/0x28 [ 288.770111][ T8633] __kmem_cache_alloc_node+0x7c/0x318 [ 288.771213][ T8633] __kmalloc+0xc4/0x180 [ 288.772012][ T8633] afs_lookup_cell+0x4bc/0x1174 [ 288.772983][ T8633] afs_cell_init+0x78/0x2ec [ 288.773874][ T8633] afs_proc_rootcell_write+0x100/0x148 [ 288.774970][ T8633] proc_simple_write+0x10c/0x14c [ 288.775868][ T8633] proc_reg_write+0x184/0x2d4 [ 288.776731][ T8633] vfs_write+0x2a8/0x7c8 [ 288.777564][ T8633] ksys_write+0x12c/0x228 [ 288.778459][ T8633] __arm64_sys_write+0x7c/0x90 [ 288.779351][ T8633] invoke_syscall+0x98/0x290 [ 288.780192][ T8633] el0_svc_common+0x13c/0x258 [ 288.781116][ T8633] do_el0_svc+0x5c/0x134 [ 288.781958][ T8633] el0_svc+0x58/0x12c [ 288.782766][ T8633] el0t_64_sync_handler+0x84/0xf0 [ 288.783714][ T8633] el0t_64_sync+0x18c/0x190 [ 289.250530][ T8648] loop4: detected capacity change from 0 to 256 [ 290.483236][ T8651] FAULT_INJECTION: forcing a failure. [ 290.483236][ T8651] name failslab, interval 1, probability 0, space 0, times 0 [ 290.483255][ T8651] CPU: 1 PID: 8651 Comm: syz.0.1483 Not tainted syzkaller #0 [ 290.483263][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 290.483268][ T8651] Call trace: [ 290.483271][ T8651] dump_backtrace+0x1c4/0x1f0 [ 290.483283][ T8651] show_stack+0x2c/0x3c [ 290.483288][ T8651] __dump_stack+0x30/0x40 [ 290.483297][ T8651] dump_stack_lvl+0xf4/0x15c [ 290.483305][ T8651] dump_stack+0x1c/0x5c [ 290.483312][ T8651] should_fail_ex+0x3cc/0x524 [ 290.483320][ T8651] __should_failslab+0xc0/0x11c [ 290.483330][ T8651] should_failslab+0x10/0x28 [ 290.483338][ T8651] __kmem_cache_alloc_node+0x7c/0x318 [ 290.483352][ T8651] kmalloc_trace+0x48/0x94 [ 290.483360][ T8651] vc_allocate+0x1a0/0x694 [ 290.483368][ T8651] con_install+0xa0/0x5cc [ 290.483375][ T8651] tty_init_dev+0xb4/0x3f4 [ 290.483382][ T8651] tty_open+0x6e0/0xc04 [ 290.483390][ T8651] chrdev_open+0x3d0/0x51c [ 290.483399][ T8651] do_dentry_open+0x738/0xf8c [ 290.483403][ T8651] vfs_open+0x7c/0x90 [ 290.483408][ T8651] path_openat+0x1fc0/0x27a0 [ 290.483415][ T8651] do_filp_open+0x198/0x38c [ 290.483422][ T8651] do_sys_openat2+0x134/0x3fc [ 290.483427][ T8651] __arm64_sys_openat+0x11c/0x150 [ 290.483432][ T8651] invoke_syscall+0x98/0x290 [ 290.483441][ T8651] el0_svc_common+0x13c/0x258 [ 290.483450][ T8651] do_el0_svc+0x5c/0x134 [ 290.483459][ T8651] el0_svc+0x58/0x12c [ 290.483466][ T8651] el0t_64_sync_handler+0x84/0xf0 [ 290.483474][ T8651] el0t_64_sync+0x18c/0x190 [ 291.594365][ T8689] ------------[ cut here ]------------ [ 291.595562][ T8689] kernel BUG at include/linux/scatterlist.h:163! [ 291.596982][ T8689] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 291.598559][ T8689] Modules linked in: [ 291.599387][ T8689] CPU: 1 PID: 8689 Comm: syz.4.1497 Not tainted syzkaller #0 [ 291.600898][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 291.602818][ T8689] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 291.604311][ T8689] pc : sg_init_one+0x1b4/0x1c8 [ 291.605272][ T8689] lr : sg_init_one+0x1b4/0x1c8 [ 291.606118][ T8689] sp : ffff800022b87750 [ 291.606826][ T8689] x29: ffff800022b87750 x28: ffff0000c3056a00 x27: dfff800000000000 [ 291.608234][ T8689] x26: ffff0000c4ed620e x25: ffff700004570f00 x24: 1ffff00004570f14 [ 291.609748][ T8689] x23: dfff800000000000 x22: 0001000000000010 x21: 0000000000000010 [ 291.611323][ T8689] x20: ffff800022b878a0 x19: 0000000000000000 x18: 0000000000000000 [ 291.613102][ T8689] x17: 0000000000000000 x16: ffff800011ba16d0 x15: 0000000000000000 [ 291.614898][ T8689] x14: 0000000000000003 x13: 1ffff00004570f15 x12: 0000000000080000 [ 291.616669][ T8689] x11: 0000000000001d54 x10: ffff80002b6c2000 x9 : ffff80000a8cce04 [ 291.618391][ T8689] x8 : 0000000000001d55 x7 : 0000000000000000 x6 : 000000000000003f [ 291.619943][ T8689] x5 : 00000000ffffffff x4 : 0000000000000008 x3 : 0000000000000010 [ 291.621554][ T8689] x2 : 0000000000000000 x1 : 0001000000000010 x0 : 0000600000000000 [ 291.623159][ T8689] Call trace: [ 291.623804][ T8689] sg_init_one+0x1b4/0x1c8 [ 291.624677][ T8689] software_key_eds_op+0x410/0x938 [ 291.625863][ T8689] asymmetric_key_eds_op+0x108/0x128 [ 291.627087][ T8689] keyctl_pkey_e_d_s+0x1c8/0x3a0 [ 291.628194][ T8689] __arm64_sys_keyctl+0x66c/0x8e0 [ 291.629196][ T8689] invoke_syscall+0x98/0x290 [ 291.630192][ T8689] el0_svc_common+0x13c/0x258 [ 291.631123][ T8689] do_el0_svc+0x5c/0x134 [ 291.632068][ T8689] el0_svc+0x58/0x12c [ 291.632979][ T8689] el0t_64_sync_handler+0x84/0xf0 [ 291.634086][ T8689] el0t_64_sync+0x18c/0x190 [ 291.635035][ T8689] Code: aa1503e0 9780bd5d 17ffffec 976fa5ad (d4210000) [ 291.636442][ T8689] ---[ end trace 0000000000000000 ]--- [ 291.745063][ T8700] FAULT_INJECTION: forcing a failure. [ 291.745063][ T8700] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 291.745080][ T8700] CPU: 0 PID: 8700 Comm: syz.0.1502 Tainted: G D syzkaller #0 [ 291.745089][ T8700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 291.745094][ T8700] Call trace: [ 291.745096][ T8700] dump_backtrace+0x1c4/0x1f0 [ 291.745107][ T8700] show_stack+0x2c/0x3c [ 291.745112][ T8700] __dump_stack+0x30/0x40 [ 291.745121][ T8700] dump_stack_lvl+0xf4/0x15c [ 291.745128][ T8700] dump_stack+0x1c/0x5c [ 291.745135][ T8700] should_fail_ex+0x3cc/0x524 [ 291.745142][ T8700] should_fail_alloc_page+0x74/0xb8 [ 291.745149][ T8700] prepare_alloc_pages+0x1b8/0x4f0 [ 291.745154][ T8700] __alloc_pages+0x134/0x544 [ 291.745159][ T8700] __kmalloc_large_node+0x9c/0x1dc [ 291.745166][ T8700] __kmalloc+0x12c/0x180 [ 291.745173][ T8700] vc_allocate+0x3c4/0x694 [ 291.745180][ T8700] con_install+0xa0/0x5cc [ 291.745186][ T8700] tty_init_dev+0xb4/0x3f4 [ 291.745193][ T8700] tty_open+0x6e0/0xc04 [ 291.745200][ T8700] chrdev_open+0x3d0/0x51c [ 291.745209][ T8700] do_dentry_open+0x738/0xf8c [ 291.745214][ T8700] vfs_open+0x7c/0x90 [ 291.745218][ T8700] path_openat+0x1fc0/0x27a0 [ 291.745225][ T8700] do_filp_open+0x198/0x38c [ 291.745232][ T8700] do_sys_openat2+0x134/0x3fc [ 291.745236][ T8700] __arm64_sys_openat+0x11c/0x150 [ 291.745241][ T8700] invoke_syscall+0x98/0x290 [ 291.745250][ T8700] el0_svc_common+0x13c/0x258 [ 291.745259][ T8700] do_el0_svc+0x5c/0x134 [ 291.745267][ T8700] el0_svc+0x58/0x12c [ 291.745275][ T8700] el0t_64_sync_handler+0x84/0xf0 [ 291.745283][ T8700] el0t_64_sync+0x18c/0x190 [ 291.888852][ T8689] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 291.890129][ T8689] SMP: stopping secondary CPUs [ 291.890995][ T8689] Kernel Offset: disabled [ 291.891796][ T8689] CPU features: 0x050000,000f0097,a65bfea7 [ 291.893039][ T8689] Memory Limit: none [ 292.148511][ T8689] Rebooting in 86400 seconds..