last executing test programs: 4.172358345s ago: executing program 0 (id=1426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0xca02}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000340)=0x6) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3.256608058s ago: executing program 1 (id=1429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}}, 0x0) 3.161135758s ago: executing program 0 (id=1432): mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./proc\x00', &(0x7f0000000e40)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000ec0)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000f40)='./dev\x00', 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./dev\x00', 0x0, 0x10}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./pipe\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) 3.107999413s ago: executing program 1 (id=1443): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./dir0\x00', 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}], 0x1, 0x40800) recvmsg(r1, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write(r2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setns(0xc9, 0x0) r3 = socket(0x8, 0x2, 0x0) setsockopt(r3, 0x108, 0x42020054, &(0x7f0000000bc0)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r3, &(0x7f0000000c40)=@generic={0x8, "ffff0000feff00"}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 3.081638836s ago: executing program 4 (id=1434): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000880)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000940)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000a40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x6) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000000a00)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 2.894409105s ago: executing program 0 (id=1436): mkdirat(0xffffffffffffff9c, &(0x7f0000009d80)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000009dc0)='./dev\x00', &(0x7f0000009e00)='devtmpfs\x00', 0x0, 0x0) unshare(0x26020480) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000280)='./gadget\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = syz_ublk_setup_io_uring(0x23, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x2, 0x2f4}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r7], 0x1c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r5) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000140)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000200)) syz_usb_connect(0x0, 0x39, &(0x7f0000009e40)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000009e80)='./dev/ttyUSB0\x00', 0x2, 0x0) write(r8, &(0x7f0000009ec0)="10151003", 0x4) 2.185535457s ago: executing program 1 (id=1438): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000002440)='2', 0x1) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_vhci(0x0, 0x161) syz_usb_connect$cdc_ecm(0x3, 0x83, &(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0) 1.852708871s ago: executing program 2 (id=1440): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 1.621383265s ago: executing program 2 (id=1442): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x10000}}, 0xa) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.493048008s ago: executing program 2 (id=1446): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x17, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x400c84, &(0x7f0000000140)={[{@nodelalloc}]}, 0x1, 0x792, &(0x7f0000000780)="$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") syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x6f4}, 0x1, 0x0, 0x0, 0x4000054}, 0x0) 1.301423637s ago: executing program 2 (id=1448): mknodat$md(0xffffffffffffff9c, &(0x7f0000000880)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000940)='./md0\x00', 0x2, 0x0) ioctl$STOP_ARRAY(r0, 0x932, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000480)=0x4) 1.18409919s ago: executing program 0 (id=1450): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000040)='./bus\x00', 0x4ca7e, 0x10) fallocate(r1, 0x0, 0x0, 0x1000f4) sendfile(r1, r1, 0x0, 0x40000000800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r2, 0x100000000000011, 0x2000, 0x2f93) 1.085478579s ago: executing program 2 (id=1451): mkdirat(0xffffffffffffff9c, &(0x7f0000001bc0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000001c00)='./mnt\x00', &(0x7f0000001c40)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001c80)='./mnt/trace_marker\x00', 0x1, 0x5a) r0 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r0, &(0x7f0000002200)=""/16384, 0x4000) 1.07920511s ago: executing program 3 (id=1452): socket$inet6_sctp(0xa, 0x801, 0x84) memfd_create(&(0x7f0000000600)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2T\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xb8\xb5\xbf5\xc2tDF\xe9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000001600), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001640), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001680)=0x6) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001900)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 848.885744ms ago: executing program 3 (id=1458): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) 837.709715ms ago: executing program 4 (id=1459): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x1f0, 0x138, 0x1, 0x0, 0x1c00, 0x0, 0x0, @by_dev={r1}, [@multipath={0x0, 0xc, 0x0, 0xb8, 'multipath\x00', {'2 queue_mode bio', 0x20, '1 emc', 0x20, 0x1, 0x20, 0x2, [{0x20, 'historical-service-time 0', 0x20, 0x2, 0x20, '0', [{0x20, @ram={'/dev/ram', 0x0}}, {0x20, @rnull={'/dev/syzrnull', 0x0}, ' 1'}]}]}}]}) 689.53758ms ago: executing program 3 (id=1460): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000048c0)=@delchain={0x59c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x570, 0x2, [@TCA_BPF_ACT={0x56c, 0x1, [@m_mirred={0x4ac, 0xd, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x73, 0x10, 0x20000000, 0x8, 0xa8a}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x0, 0x8, 0x2, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x81, 0x1, 0x3, 0x100, 0x100}, 0x1}}]}, {0x41d, 0x6, "54aa6579cf06a9e3ba2d57a0b3b58a5530eee176cab36463f36b167af47eaffcc5614168a068fcc4247c79c80796c574b4c2af8fdde088a7c88150f55d6194c6e715d3ba099779d80777b6c2ab8ffc343de4bf6ac9bf3141c933c502312f1d4289e195942ddc770951e9bcfdcea336c0bf0474b100872803fa14af615af6da6b063b01c50e9b21ca269b37702a2bce63fba39790cd2e6ae9de2e0206a3a406a8de8f9d43417fc1e6c6771acd645f2349e72126b899f4b2cdc57f230af5679ffd82fc07c607550881f253b3710c5898f406071830211caaa7b71a20bb9fe0385bf1c91e505e3f4a21227bc62630ee99db144595ad6fc3291ae966d1e2128f1e6b2f2726d3f3dfa41850be2b91ac77c5662e1e06ba8b0e121b1008a343e92b708444c195f8d7f46cc4cf73f6d164cabc61bc7ac9ddb5530feacc09aa773720b9e4a533ed55c556b0b76add10945963618aa76433793e7a39ef3f931eb6fc30d04e6737841828e1771c547a6acf68bcf85652f4aac8aa4e7abe5eaddd2ae75756d2f18c4ad6fef07be7489eda7c55a53bd694c68bb54e282e065ca5d9cea36dcd0e0c9dca08fbbaf0d62123f74ae45ef71e47b74e8070fd637cb968ae9804da49bb42f657abc1f73e5a77acde27e0f5320610c098f9f82b5ae6a0812efbd91f2dd0ab6035645aa8da106c7d6b7e81d74eb6b6a1d5840d7811d7759c1badfdf04e55178153ee55ce3f91f94a826e35b114aab35c4eeeb4041893f4d55fe8168bb3d40350fb1ad952b2f6249eb1d26801bcaa623bbb04f5e1cbbd0cbb9ac12a8ad4cd7cf08125b67c9c1a72efab3c73fe9270687b7f10f3a594a4b789e03dd7ffb3b6350dde0280e85df41d9634d26c8686013d49ae4fcb8c456b876af55f4d18b9bdb8935c4b30a7129e3bd776e4c1accc0a95a11b27b786984368989438deea6b22eb6881944dc700357d1367845d9fa20bf2cc0893c72c080bca4dfbb90ae725297a01a08000dd4c7b5ce707b46675657c3c3a9b08bfb7a85732e9fb386f270d381dbb6039421286a79419f58181d8f15927a782297342f00393c492b83f6f830e2388802c4653e41703ce5ed84e8f6a800d213a36763d39ede3079b04101c5577d6d5ae97a7bb225543bc860be7a7476c41ae7fbadc1b811c3783fa6a11445950b2a05cae74808c19433f02ee39d3e1cbafc366e813129df0e8e097858144d1bdcc926ac2978e4e72f097bee562e21b8db59c66e1d43cc7691193036efcc0da1dfedc0bcac2d2418643385114de7e3c592a0a7976388271129f4092dfa7e54fae057a91713e82f6e17d673e0221782ded9c3f7413871ee1bf0e87b73fc99cca64b52eed094277e430743f484f3475b68ee57258f375aba6f6cad6a6656243a04dd4920d8c94098ea748aed043d64aa363dd5891f4ffcdc8d4cfc21f52265ba695c6f4b58ec63e4aecbd849bb4db37b9686c1aa7c8e495d35514"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0xbc, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x8e, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd3834"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x59c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000540)={0x0, 0xe8}}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 403.089129ms ago: executing program 4 (id=1461): mkdirat(0xffffffffffffff9c, &(0x7f0000000dc0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000e00)='./proc\x00', &(0x7f0000000e40)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000ec0)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000f40)='./dev\x00', 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./dev\x00', 0x0, 0x10}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./pipe\x00', &(0x7f0000000140)='rpc_pipefs\x00', 0x0, 0x0) 401.551639ms ago: executing program 3 (id=1462): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000380)=@other={'trylock', ' ', 'io'}, 0xb) 301.58699ms ago: executing program 3 (id=1463): r0 = open(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000008c40)={0x78, 0x0, 0x0, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0x4000, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}, 0x78) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000008cc0)={{{@in6, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000008dc0)=0xe8) write$FUSE_DIRENTPLUS(r0, &(0x7f0000008e00)={0xa8, 0x0, 0x0, [{{0x0, 0x0, 0xffffffffffffffff, 0x7, 0x7, 0x5, {0x6, 0x6, 0x9, 0x4, 0x0, 0x8000, 0xe148, 0x6, 0xba67, 0x2000, 0x4, 0xee00, 0x0, 0x9, 0x4}}, {0x6, 0x6, 0x0, 0xffd}}]}, 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') 259.760364ms ago: executing program 4 (id=1464): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003080)=[{0x0}, {0x0}], 0x2, 0x0, 0x0, 0x1404c015}, 0x200080b1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 200.32563ms ago: executing program 2 (id=1465): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000002440)='2', 0x1) write(r0, &(0x7f0000000000)='3', 0x4e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) syz_emit_vhci(0x0, 0x161) syz_usb_connect$cdc_ecm(0x3, 0x83, &(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0) 194.020301ms ago: executing program 3 (id=1466): sched_setscheduler(0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000400)) 73.503043ms ago: executing program 4 (id=1467): r0 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r1, 0x4b72, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x123000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000240)=0x4) 0s ago: executing program 4 (id=1468): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003080)=[{0x0}], 0x1, 0x0, 0x0, 0x1404c015}, 0x200080b1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) kernel console output (not intermixed with test programs): capacity change from 0 to 512 [ 73.899469][ T5360] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 74.003641][ T5368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.319'. [ 74.037377][ T5345] tipc: Disabling bearer [ 74.081661][ T5360] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.383445][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 74.648111][ T5385] netlink: 44 bytes leftover after parsing attributes in process `syz.0.326'. [ 74.695737][ T5375] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.820995][ T5390] loop2: detected capacity change from 0 to 128 [ 74.834919][ T5390] ext4: Unknown parameter 'appraise' [ 75.195048][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.197860][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.286281][ T5407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.335'. [ 75.665167][ T5416] device syzkaller0 entered promiscuous mode [ 75.715033][ T5416] tipc: Enabled bearer , priority 0 [ 75.721602][ T5417] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.749448][ T5411] tipc: Resetting bearer [ 75.988825][ T5411] tipc: Disabling bearer [ 76.191654][ T5429] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.514672][ T5441] netlink: 44 bytes leftover after parsing attributes in process `syz.4.348'. [ 76.516965][ T5443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.349'. [ 76.571120][ T5441] atomic_op 000000006a3ac2b8 conn xmit_atomic 0000000000000000 [ 76.733268][ T5451] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.165540][ T5457] device syzkaller0 entered promiscuous mode [ 77.248981][ T5457] tipc: Enabled bearer , priority 0 [ 77.299860][ T5455] tipc: Resetting bearer [ 77.429467][ T5455] tipc: Disabling bearer [ 77.856339][ T5470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.361'. [ 78.142596][ T5483] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.271812][ T5493] device syzkaller0 entered promiscuous mode [ 78.334265][ T5493] tipc: Started in network mode [ 78.335505][ T5493] tipc: Node identity e2f0bddb8a63, cluster identity 4711 [ 78.337391][ T5493] tipc: Enabled bearer , priority 0 [ 78.364043][ T5480] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.381958][ T5492] tipc: Resetting bearer [ 80.594042][ T5501] loop4: detected capacity change from 0 to 128 [ 80.602737][ T5501] ext4: Unknown parameter 'appraise' [ 80.738716][ T5492] tipc: Disabling bearer [ 80.767621][ T4729] tipc: Node number set to 1754512859 [ 80.953278][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.955993][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.025521][ T5510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.373'. [ 81.318908][ T5530] netlink: 44 bytes leftover after parsing attributes in process `syz.0.378'. [ 81.479663][ T5535] atomic_op 00000000b3503ab7 conn xmit_atomic 0000000000000000 [ 81.725953][ T5539] loop3: detected capacity change from 0 to 512 [ 81.757607][ T5539] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 81.772207][ T5539] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.823363][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 81.872573][ T5543] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.132826][ T5546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'. [ 82.172250][ T5548] device syzkaller0 entered promiscuous mode [ 82.221948][ T5548] tipc: Enabled bearer , priority 0 [ 82.251966][ T5547] tipc: Resetting bearer [ 82.381315][ T5547] tipc: Disabling bearer [ 82.474378][ T5565] loop2: detected capacity change from 0 to 512 [ 82.501755][ T5565] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 82.540978][ T5565] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.747206][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 83.123034][ T5590] device syzkaller0 entered promiscuous mode [ 83.199681][ T5590] tipc: Enabled bearer , priority 0 [ 83.249378][ T5589] tipc: Resetting bearer [ 83.278340][ T5595] netlink: 44 bytes leftover after parsing attributes in process `syz.3.407'. [ 83.368672][ T5589] tipc: Disabling bearer [ 83.388795][ T5596] atomic_op 00000000c2f4f80a conn xmit_atomic 0000000000000000 [ 83.559574][ T5602] loop1: detected capacity change from 0 to 512 [ 83.586701][ T5602] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 83.688044][ T5604] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.722120][ T5602] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.854778][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 84.124089][ T5626] device syzkaller0 entered promiscuous mode [ 84.186757][ T5626] tipc: Enabled bearer , priority 0 [ 84.247693][ T5625] tipc: Resetting bearer [ 84.378699][ T5625] tipc: Disabling bearer [ 84.472761][ T5643] loop2: detected capacity change from 0 to 512 [ 84.492907][ T5643] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 84.516001][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.564507][ T5645] loop4: detected capacity change from 0 to 128 [ 84.568744][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 84.604665][ T5645] ext4: Unknown parameter 'appraise' [ 84.887781][ T5653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.890619][ T5653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.230475][ T5668] netlink: 44 bytes leftover after parsing attributes in process `syz.3.434'. [ 85.260679][ T5666] rxe_eth0 speed is unknown, defaulting to 1000 [ 85.290430][ T5671] device syzkaller0 entered promiscuous mode [ 85.309389][ T5672] atomic_op 00000000e58292bc conn xmit_atomic 0000000000000000 [ 85.481503][ T5682] loop2: detected capacity change from 0 to 512 [ 85.485691][ T5682] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 86.530574][ T5680] tipc: Enabled bearer , priority 0 [ 86.543179][ T5682] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.547134][ T5670] tipc: Resetting bearer [ 86.699105][ T5670] tipc: Disabling bearer [ 87.837979][ T5711] loop1: detected capacity change from 0 to 256 [ 87.857354][ T5712] device syzkaller0 entered promiscuous mode [ 87.972961][ T5712] tipc: Enabled bearer , priority 0 [ 88.076922][ T5722] netlink: 44 bytes leftover after parsing attributes in process `syz.1.454'. [ 88.134323][ T5710] tipc: Resetting bearer [ 88.151311][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 88.157268][ T5723] atomic_op 000000002c66eb94 conn xmit_atomic 0000000000000000 [ 88.368548][ T5710] tipc: Disabling bearer [ 88.398018][ T5733] loop2: detected capacity change from 0 to 128 [ 88.399587][ T5733] ext4: Unknown parameter 'appraise' [ 88.508878][ T5738] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.621775][ T5740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.624430][ T5740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.219732][ T5752] loop1: detected capacity change from 0 to 256 [ 89.493279][ T5760] loop1: detected capacity change from 0 to 512 [ 89.552612][ T5760] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 89.603605][ T5760] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.649601][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 89.693959][ T5771] device syzkaller0 entered promiscuous mode [ 89.743461][ T5771] tipc: Enabled bearer , priority 0 [ 89.776259][ T5768] tipc: Resetting bearer [ 89.826752][ T5780] loop4: detected capacity change from 0 to 256 [ 89.957646][ T5784] netlink: 44 bytes leftover after parsing attributes in process `syz.1.476'. [ 89.961756][ T5768] tipc: Disabling bearer [ 89.979738][ T5786] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.032513][ T5788] atomic_op 00000000b114771a conn xmit_atomic 0000000000000000 [ 92.127417][ T5832] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.140840][ T5833] device syzkaller0 entered promiscuous mode [ 96.072181][ T5843] tipc: Enabled bearer , priority 0 [ 96.075099][ T5830] tipc: Resetting bearer [ 96.097937][ T5857] loop3: detected capacity change from 0 to 128 [ 96.100356][ T5857] ext4: Unknown parameter 'appraise' [ 96.145579][ T5858] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.350306][ T5863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.352941][ T5863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.481429][ T5830] tipc: Disabling bearer [ 97.009322][ T5884] loop4: detected capacity change from 0 to 512 [ 97.031197][ T5884] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.041757][ T5884] EXT4-fs error (device loop4): ext4_map_blocks:637: inode #2: block 18: comm syz.4.513: lblock 23 mapped to illegal pblock 18 (length 1) [ 97.070145][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 97.224582][ T27] audit: type=1326 audit(97.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.4.514" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 97.232184][ T27] audit: type=1326 audit(97.220:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.4.514" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 97.240466][ T27] audit: type=1326 audit(97.220:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.4.514" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 97.258752][ T27] audit: type=1326 audit(97.220:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.4.514" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=431 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 97.272121][ T27] audit: type=1326 audit(97.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.4.514" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 97.283958][ T27] audit: type=1326 audit(97.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.4.514" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 97.303294][ T27] audit: type=1326 audit(97.230:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5893 comm="syz.4.514" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 97.343006][ T5898] loop4: detected capacity change from 0 to 512 [ 97.344783][ T5898] EXT4-fs: Ignoring removed bh option [ 97.356613][ T5898] EXT4-fs: Ignoring removed nobh option [ 97.359996][ T5898] ext4: Unknown parameter 'fowner>00000000000000000000' [ 98.702670][ T5898] sched: RT throttling activated [ 99.809319][ T5905] ======================================================= [ 99.809319][ T5905] WARNING: The mand mount option has been deprecated and [ 99.809319][ T5905] and is ignored by this kernel. Remove the mand [ 99.809319][ T5905] option from the mount to silence this warning. [ 99.809319][ T5905] ======================================================= [ 100.274019][ T5906] nvme nvme1: failed to connect socket: -512 [ 100.404528][ T5915] loop3: detected capacity change from 0 to 512 [ 100.425837][ T5915] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.522: inode #1: comm syz.3.522: iget: illegal inode # [ 100.628524][ T5917] loop1: detected capacity change from 0 to 256 [ 100.639808][ T5917] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 100.641394][ T5917] FAT-fs (loop1): Filesystem has been set read-only [ 100.644468][ T5917] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 100.651929][ T5915] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.522: error while reading EA inode 1 err=-117 [ 100.658322][ T5915] EXT4-fs (loop3): 1 orphan inode deleted [ 100.661859][ T5915] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.731557][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 101.211379][ T5922] ubi1: attaching mtd0 [ 101.212330][ T5922] ubi1 error: ubi_attach_mtd_dev: bad VID header (536873728) or data offsets (536873792) [ 102.981131][ T5945] wlan1 speed is unknown, defaulting to 1000 [ 102.982970][ T5945] wlan1 speed is unknown, defaulting to 1000 [ 102.984489][ T5945] wlan1 speed is unknown, defaulting to 1000 [ 103.016165][ T5945] infiniband syz1: set active [ 103.017545][ T4412] wlan1 speed is unknown, defaulting to 1000 [ 103.018907][ T5945] infiniband syz1: added wlan1 [ 103.113728][ T5945] RDS/IB: syz1: added [ 103.114724][ T5945] smc: adding ib device syz1 with port count 1 [ 103.115989][ T5945] smc: ib device syz1 port 1 has pnetid [ 103.129953][ T4412] wlan1 speed is unknown, defaulting to 1000 [ 103.131887][ T5945] wlan1 speed is unknown, defaulting to 1000 [ 103.156863][ T5945] wlan1 speed is unknown, defaulting to 1000 [ 103.243389][ T5945] wlan1 speed is unknown, defaulting to 1000 [ 103.284602][ T5955] rxe_eth0 speed is unknown, defaulting to 1000 [ 103.302214][ T5945] wlan1 speed is unknown, defaulting to 1000 [ 103.367530][ T5957] device macsec1 entered promiscuous mode [ 103.378394][ T5955] wlan1 speed is unknown, defaulting to 1000 [ 103.494298][ T5945] wlan1 speed is unknown, defaulting to 1000 [ 103.763351][ T5962] loop2: detected capacity change from 0 to 256 [ 103.770263][ T5966] netlink: 44 bytes leftover after parsing attributes in process `syz.1.538'. [ 103.803589][ T5962] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 103.805380][ T5962] FAT-fs (loop2): Filesystem has been set read-only [ 103.811840][ T5962] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 103.913498][ T5945] wlan1 speed is unknown, defaulting to 1000 [ 103.926261][ T5967] atomic_op 00000000c2f4f80a conn xmit_atomic 0000000000000000 [ 104.013792][ T5972] netlink: 'syz.4.541': attribute type 1 has an invalid length. [ 104.034470][ T5972] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.042866][ T5945] wlan1 speed is unknown, defaulting to 1000 [ 104.251921][ T5972] bond1: (slave geneve2): making interface the new active one [ 104.254722][ T5972] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 104.266172][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 104.514014][ T5991] device macsec1 entered promiscuous mode [ 104.530674][ T5994] device syzkaller0 entered promiscuous mode [ 104.622431][ T5994] tipc: Enabled bearer , priority 0 [ 104.624151][ T5996] rxe_eth0 speed is unknown, defaulting to 1000 [ 104.689081][ T5993] tipc: Resetting bearer [ 104.809059][ T5993] tipc: Disabling bearer [ 104.823065][ T5996] wlan1 speed is unknown, defaulting to 1000 [ 105.016907][ T6010] loop2: detected capacity change from 0 to 8 [ 105.356431][ T6022] netlink: 'syz.2.561': attribute type 1 has an invalid length. [ 105.381780][ T6022] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.418737][ T6022] bond1: (slave geneve2): making interface the new active one [ 105.422210][ T6022] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 105.424199][ T5907] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 105.453982][ T6029] loop4: detected capacity change from 0 to 512 [ 105.471588][ T6029] EXT4-fs: Ignoring removed bh option [ 105.481863][ T6029] EXT4-fs: Ignoring removed nobh option [ 105.486765][ T6029] ext4: Unknown parameter 'fowner>00000000000000000000' [ 107.080306][ T6060] loop1: detected capacity change from 0 to 8 [ 107.113737][ T6064] rxe_eth0 speed is unknown, defaulting to 1000 [ 107.369944][ T6064] wlan1 speed is unknown, defaulting to 1000 [ 107.418630][ T6074] netlink: 44 bytes leftover after parsing attributes in process `syz.4.578'. [ 107.554055][ T6080] nvme nvme1: failed to connect socket: -111 [ 107.593682][ T6084] atomic_op 00000000159ad824 conn xmit_atomic 0000000000000000 [ 108.126017][ T6095] device syzkaller0 entered promiscuous mode [ 108.191068][ T6099] loop2: detected capacity change from 0 to 8 [ 108.196056][ T6095] tipc: Enabled bearer , priority 0 [ 108.251599][ T6094] tipc: Resetting bearer [ 108.410798][ T6094] tipc: Disabling bearer [ 108.431200][ T6101] device syzkaller0 entered promiscuous mode [ 108.733647][ T6118] rxe_eth0 speed is unknown, defaulting to 1000 [ 108.785035][ T6111] nvme nvme1: failed to connect socket: -111 [ 108.864126][ T6125] loop2: detected capacity change from 0 to 8 [ 108.940987][ T6125] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.942796][ T6125] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.944257][ T6125] SQUASHFS error: Failed to read block 0x4de: -5 [ 108.953828][ T6118] wlan1 speed is unknown, defaulting to 1000 [ 108.980460][ T6125] SQUASHFS error: Failed to read block 0x4de: -5 [ 109.699454][ T6142] device syzkaller0 entered promiscuous mode [ 109.782566][ T6142] tipc: Enabled bearer , priority 0 [ 109.808384][ T6141] tipc: Resetting bearer [ 109.982953][ T6141] tipc: Disabling bearer [ 110.021329][ T6151] device syzkaller0 entered promiscuous mode [ 110.227900][ T6163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.611'. [ 110.323248][ T6169] loop0: detected capacity change from 0 to 8 [ 110.385137][ T6169] SQUASHFS error: Failed to read block 0x4de: -5 [ 110.386937][ T6169] SQUASHFS error: Failed to read block 0x4de: -5 [ 110.387253][ T6175] atomic_op 00000000a963938c conn xmit_atomic 0000000000000000 [ 110.422164][ T6169] SQUASHFS error: Failed to read block 0x4de: -5 [ 110.426211][ T6177] rxe_eth0 speed is unknown, defaulting to 1000 [ 110.430289][ T6169] SQUASHFS error: Failed to read block 0x4de: -5 [ 110.593013][ T6177] wlan1 speed is unknown, defaulting to 1000 [ 111.126164][ T6202] loop4: detected capacity change from 0 to 512 [ 111.140448][ T6202] EXT4-fs: Ignoring removed bh option [ 111.140470][ T6202] EXT4-fs: Ignoring removed nobh option [ 111.140478][ T6202] ext4: Unknown parameter 'fowner>00000000000000000000' [ 112.449144][ T6220] loop1: detected capacity change from 0 to 8 [ 112.476499][ T6220] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.486497][ T6220] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.494865][ T6220] SQUASHFS error: Failed to read block 0x4de: -5 [ 112.496905][ T6220] SQUASHFS error: Failed to read block 0x4de: -5 [ 114.513731][ T6244] netlink: 44 bytes leftover after parsing attributes in process `syz.3.643'. [ 114.582835][ T6245] atomic_op 000000003637afba conn xmit_atomic 0000000000000000 [ 115.094530][ T6270] device syzkaller0 entered promiscuous mode [ 115.389843][ T6278] netlink: 44 bytes leftover after parsing attributes in process `syz.2.656'. [ 115.437318][ T6278] atomic_op 00000000c63cbbce conn xmit_atomic 0000000000000000 [ 115.613687][ T6287] device syzkaller0 entered promiscuous mode [ 115.736146][ T6287] tipc: Enabled bearer , priority 0 [ 115.830440][ T6286] tipc: Resetting bearer [ 116.048480][ T6286] tipc: Disabling bearer [ 116.125008][ T6309] device syzkaller0 entered promiscuous mode [ 116.199839][ T6313] netlink: 44 bytes leftover after parsing attributes in process `syz.1.670'. [ 116.253866][ T6313] atomic_op 00000000b99b35ac conn xmit_atomic 0000000000000000 [ 116.482139][ T6329] loop3: detected capacity change from 0 to 512 [ 116.500888][ T6329] EXT4-fs: Ignoring removed bh option [ 116.502129][ T6329] EXT4-fs: Ignoring removed nobh option [ 116.503230][ T6329] ext4: Unknown parameter 'fowner>00000000000000000000' [ 117.303192][ T6339] nvme nvme1: failed to connect socket: -512 [ 117.435490][ T6345] loop0: detected capacity change from 0 to 8 [ 117.480221][ T6345] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.497295][ T6345] SQUASHFS error: zlib decompression failed, data probably corrupt [ 117.505816][ T6345] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.507233][ T6345] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.516415][ T6345] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.522255][ T6345] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.523638][ T6345] SQUASHFS error: Failed to read block 0x4de: -5 [ 117.527259][ T6336] Injecting memory failure for pfn 0x124757 at process virtual address 0x20276000 [ 117.540021][ T6336] Memory failure: 0x124757: recovery action for dirty LRU page: Recovered [ 117.541782][ T6336] Injecting memory failure for pfn 0x124758 at process virtual address 0x20277000 [ 117.561666][ T6336] Memory failure: 0x124758: Unknown page state [ 117.579278][ T6336] Memory failure: 0x124758: recovery action for unknown page: Failed [ 118.458098][ T6357] device syzkaller0 entered promiscuous mode [ 118.584181][ T6362] loop4: detected capacity change from 0 to 512 [ 118.606357][ T6362] EXT4-fs: Ignoring removed bh option [ 118.610900][ T6362] EXT4-fs: Ignoring removed nobh option [ 118.611905][ T6362] ext4: Unknown parameter 'fowner>00000000000000000000' [ 120.074973][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 121.485314][ T6395] FAULT_INJECTION: forcing a failure. [ 121.485314][ T6395] name failslab, interval 1, probability 0, space 0, times 1 [ 121.502866][ T6395] CPU: 0 PID: 6395 Comm: syz.4.701 Not tainted syzkaller #0 [ 121.504257][ T6395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 121.506469][ T6395] Call trace: [ 121.507222][ T6395] dump_backtrace+0x1c4/0x1f0 [ 121.508270][ T6395] show_stack+0x2c/0x3c [ 121.509248][ T6395] __dump_stack+0x30/0x40 [ 121.510254][ T6395] dump_stack_lvl+0xf4/0x15c [ 121.511325][ T6395] dump_stack+0x1c/0x5c [ 121.512301][ T6395] should_fail_ex+0x3cc/0x524 [ 121.513363][ T6395] __should_failslab+0xc0/0x11c [ 121.514519][ T6395] should_failslab+0x10/0x28 [ 121.515611][ T6395] __kmem_cache_alloc_node+0x7c/0x318 [ 121.516856][ T6395] __kmalloc_node+0xc8/0x184 [ 121.517795][ T6395] kvmalloc_node+0x88/0x1d4 [ 121.518753][ T6395] xt_alloc_entry_offsets+0x50/0x60 [ 121.519854][ T6395] translate_table+0x158/0x18dc [ 121.520868][ T6395] ipt_register_table+0xf8/0x5f0 [ 121.521898][ T6395] iptable_filter_table_init+0x80/0xd4 [ 121.523068][ T6395] xt_find_table_lock+0x2c8/0x394 [ 121.524129][ T6395] do_ipt_get_ctl+0x9c8/0x13d0 [ 121.525170][ T6395] nf_getsockopt+0x254/0x274 [ 121.526138][ T6395] ip_getsockopt+0x23c/0x344 [ 121.527125][ T6395] udp_getsockopt+0x90/0xa8 [ 121.528054][ T6395] sock_common_getsockopt+0xa8/0xc4 [ 121.529167][ T6395] __sys_getsockopt+0x1e0/0x474 [ 121.530184][ T6395] __arm64_sys_getsockopt+0xc0/0xdc [ 121.531204][ T6395] invoke_syscall+0x98/0x290 [ 121.532154][ T6395] el0_svc_common+0x13c/0x258 [ 121.533194][ T6395] do_el0_svc+0x5c/0x134 [ 121.534105][ T6395] el0_svc+0x58/0x12c [ 121.534935][ T6395] el0t_64_sync_handler+0x84/0xf0 [ 121.535942][ T6395] el0t_64_sync+0x18c/0x190 [ 121.893497][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.707'. [ 122.008514][ T6396] loop1: detected capacity change from 0 to 256 [ 122.232380][ T6422] device syzkaller0 entered promiscuous mode [ 122.565464][ T6436] rxe_eth0 speed is unknown, defaulting to 1000 [ 122.593470][ T6436] wlan1 speed is unknown, defaulting to 1000 [ 123.976818][ T6451] loop1: detected capacity change from 0 to 8 [ 124.023626][ T6451] SQUASHFS error: Failed to read block 0x4de: -5 [ 124.042115][ T6451] SQUASHFS error: zlib decompression failed, data probably corrupt [ 124.043635][ T6451] SQUASHFS error: Failed to read block 0x4de: -5 [ 124.044867][ T6451] SQUASHFS error: Failed to read block 0x4de: -5 [ 124.053573][ T6451] SQUASHFS error: Failed to read block 0x4de: -5 [ 124.054889][ T6451] SQUASHFS error: Failed to read block 0x4de: -5 [ 124.056193][ T6451] SQUASHFS error: Failed to read block 0x4de: -5 [ 125.098551][ T6470] loop1: detected capacity change from 0 to 8 [ 125.147151][ T6474] loop0: detected capacity change from 0 to 512 [ 125.151282][ T6474] EXT4-fs: Ignoring removed bh option [ 125.152584][ T6474] EXT4-fs: Ignoring removed nobh option [ 125.153735][ T6474] ext4: Unknown parameter 'fowner>00000000000000000000' [ 125.245291][ T6476] loop4: detected capacity change from 0 to 256 [ 125.633707][ T6481] device syzkaller0 entered promiscuous mode [ 126.046215][ T6489] rxe_eth0 speed is unknown, defaulting to 1000 [ 126.251276][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 126.282856][ T6489] wlan1 speed is unknown, defaulting to 1000 [ 128.109449][ T6414] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.112595][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.113889][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 128.280541][ T6482] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 128.516135][ T6507] nvme nvme1: failed to connect socket: -512 [ 129.456221][ T6516] loop4: detected capacity change from 0 to 8 [ 135.883384][ T6527] rxe_eth0 speed is unknown, defaulting to 1000 [ 135.965970][ T6527] wlan1 speed is unknown, defaulting to 1000 [ 136.293331][ T6545] netlink: 168 bytes leftover after parsing attributes in process `syz.0.751'. [ 136.451969][ T6539] device bridge1 entered promiscuous mode [ 136.584058][ T6551] X25: unknown 0B in state 3 [ 136.670740][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 136.687395][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 136.712493][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 136.736291][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 136.777629][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 136.780909][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 136.782726][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 136.795765][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 138.748086][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 138.803111][ T6565] rxe_eth0 speed is unknown, defaulting to 1000 [ 138.819406][ T6565] wlan1 speed is unknown, defaulting to 1000 [ 138.860334][ T6573] loop3: detected capacity change from 0 to 512 [ 138.926800][ T6573] EXT4-fs: Ignoring removed bh option [ 138.936553][ T6573] EXT4-fs: Ignoring removed nobh option [ 138.940650][ T6573] ext4: Unknown parameter 'fowner>00000000000000000000' [ 139.412608][ T6523] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 139.823246][ T6617] nvme nvme1: failed to connect socket: -512 [ 140.106027][ T6627] netlink: 44 bytes leftover after parsing attributes in process `syz.1.765'. [ 140.163308][ T6628] atomic_op 00000000dfeed23a conn xmit_atomic 0000000000000000 [ 140.804855][ T6633] bridge0: port 3(syzkaller0) entered blocking state [ 140.821078][ T6633] bridge0: port 3(syzkaller0) entered disabled state [ 140.826703][ T6633] device syzkaller0 entered promiscuous mode [ 140.878613][ T6633] bridge0: port 3(syzkaller0) entered blocking state [ 140.880739][ T6633] bridge0: port 3(syzkaller0) entered forwarding state [ 141.173305][ T6631] bridge0: port 3(syzkaller0) entered disabled state [ 141.209763][ T6631] device syzkaller0 left promiscuous mode [ 141.214296][ T6631] bridge0: port 3(syzkaller0) entered disabled state [ 141.543072][ T6669] netlink: 44 bytes leftover after parsing attributes in process `syz.0.780'. [ 141.598554][ T6670] atomic_op 000000005c27cc58 conn xmit_atomic 0000000000000000 [ 141.751269][ T6673] loop1: detected capacity change from 0 to 512 [ 141.766522][ T6673] EXT4-fs: Ignoring removed bh option [ 141.771144][ T6673] EXT4-fs: Ignoring removed nobh option [ 141.776840][ T6673] ext4: Unknown parameter 'fowner>00000000000000000000' [ 142.582922][ T6680] nvme nvme1: failed to connect socket: -512 [ 142.724137][ T6686] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 142.800089][ T6690] loop2: detected capacity change from 0 to 512 [ 145.229615][ T6708] loop2: detected capacity change from 0 to 512 [ 145.256316][ T6708] EXT4-fs: Ignoring removed bh option [ 145.259501][ T6708] EXT4-fs: Ignoring removed nobh option [ 145.260641][ T6708] ext4: Unknown parameter 'fowner>00000000000000000000' [ 145.771026][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 145.773222][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 145.775307][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 145.777509][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 145.779428][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 145.781298][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 145.783125][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 145.784998][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 145.786962][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 128 too low, using default minimum of 512 [ 145.993536][ T6719] nvme nvme1: failed to connect socket: -111 [ 146.156348][ T6730] loop1: detected capacity change from 0 to 8 [ 146.184739][ T6730] SQUASHFS error: Failed to read block 0x4de: -5 [ 146.186160][ T6730] SQUASHFS error: Failed to read block 0x4de: -5 [ 146.195998][ T6730] SQUASHFS error: Failed to read block 0x4de: -5 [ 146.197219][ T6730] SQUASHFS error: Failed to read block 0x4de: -5 [ 152.867351][ T6732] FAULT_INJECTION: forcing a failure. [ 152.867351][ T6732] name failslab, interval 1, probability 0, space 0, times 0 [ 152.871568][ T6732] CPU: 0 PID: 6732 Comm: syz.2.798 Not tainted syzkaller #0 [ 152.872922][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 152.874889][ T6732] Call trace: [ 152.875557][ T6732] dump_backtrace+0x1c4/0x1f0 [ 152.876564][ T6732] show_stack+0x2c/0x3c [ 152.877462][ T6732] __dump_stack+0x30/0x40 [ 152.878402][ T6732] dump_stack_lvl+0xf4/0x15c [ 152.879328][ T6732] dump_stack+0x1c/0x5c [ 152.880331][ T6732] should_fail_ex+0x3cc/0x524 [ 152.881459][ T6732] __should_failslab+0xc0/0x11c [ 152.882634][ T6732] should_failslab+0x10/0x28 [ 152.883660][ T6732] __kmem_cache_alloc_node+0x7c/0x318 [ 152.884853][ T6732] __kmalloc_node_track_caller+0xb8/0x174 [ 152.886168][ T6732] kstrdup_const+0x90/0xdc [ 152.887165][ T6732] alloc_vfsmnt+0x98/0x4b4 [ 152.888206][ T6732] clone_mnt+0x7c/0xb18 [ 152.889109][ T6732] clone_private_mount+0x25c/0x2dc [ 152.890214][ T6732] ovl_fill_super+0x2104/0x3938 [ 152.891277][ T6732] mount_nodev+0x68/0x108 [ 152.892235][ T6732] ovl_mount+0x3c/0x50 [ 152.893090][ T6732] legacy_get_tree+0xd8/0x174 [ 152.894050][ T6732] vfs_get_tree+0x90/0x278 [ 152.894968][ T6732] do_new_mount+0x228/0x818 [ 152.895899][ T6732] path_mount+0x5ac/0xe6c [ 152.896814][ T6732] __arm64_sys_mount+0x4a0/0x5a0 [ 152.897818][ T6732] invoke_syscall+0x98/0x290 [ 152.898763][ T6732] el0_svc_common+0x13c/0x258 [ 152.899732][ T6732] do_el0_svc+0x5c/0x134 [ 152.900594][ T6732] el0_svc+0x58/0x12c [ 152.901441][ T6732] el0t_64_sync_handler+0x84/0xf0 [ 152.902493][ T6732] el0t_64_sync+0x18c/0x190 [ 152.927474][ T6732] overlayfs: failed to clone lowerpath [ 152.965368][ T6736] netlink: 44 bytes leftover after parsing attributes in process `syz.4.799'. [ 152.990389][ T6739] loop1: detected capacity change from 0 to 512 [ 153.002831][ T6739] EXT4-fs: Ignoring removed bh option [ 153.004010][ T6739] EXT4-fs: Ignoring removed nobh option [ 153.005149][ T6739] ext4: Unknown parameter 'fowner>00000000000000000000' [ 153.024016][ T6741] atomic_op 0000000098f8580b conn xmit_atomic 0000000000000000 [ 153.427497][ T6742] loop3: detected capacity change from 0 to 256 [ 153.608038][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 153.609424][ T4338] Bluetooth: hci1: command 0x0406 tx timeout [ 154.594441][ T6766] loop3: detected capacity change from 0 to 8 [ 154.607020][ T6766] SQUASHFS error: zlib decompression failed, data probably corrupt [ 154.608985][ T6766] SQUASHFS error: Failed to read block 0x9b: -5 [ 154.610371][ T6766] SQUASHFS error: Unable to read metadata cache entry [99] [ 154.611861][ T6766] SQUASHFS error: Unable to read inode 0x127 [ 154.887542][ T4338] Bluetooth: hci0: command 0x0406 tx timeout [ 154.889075][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 156.308784][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.810'. [ 156.660827][ T6781] loop4: detected capacity change from 0 to 512 [ 156.686586][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.813'. [ 156.714569][ T6781] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 156.717282][ T6781] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.765399][ T6781] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 156.776483][ T6781] System zones: 1-12 [ 156.965426][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 156.970890][ T4338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 156.973788][ T4338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 156.976454][ T4338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 156.981676][ T4338] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 156.983950][ T4338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 157.071033][ T6781] EXT4-fs (loop4): 1 truncate cleaned up [ 157.072710][ T6781] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.473085][ T6790] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6005: inode #12: comm syz.4.812: bad extra_isize 62 (inode size 256) [ 157.487441][ T6790] EXT4-fs (loop4): Remounting filesystem read-only [ 158.841192][ T6793] FAULT_INJECTION: forcing a failure. [ 158.841192][ T6793] name fail_futex, interval 1, probability 0, space 0, times 1 [ 158.843790][ T6793] CPU: 0 PID: 6793 Comm: syz.1.815 Not tainted syzkaller #0 [ 158.845324][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 158.847404][ T6793] Call trace: [ 158.848150][ T6793] dump_backtrace+0x1c4/0x1f0 [ 158.849205][ T6793] show_stack+0x2c/0x3c [ 158.850173][ T6793] __dump_stack+0x30/0x40 [ 158.851172][ T6793] dump_stack_lvl+0xf4/0x15c [ 158.852231][ T6793] dump_stack+0x1c/0x5c [ 158.853153][ T6793] should_fail_ex+0x3cc/0x524 [ 158.854170][ T6793] should_fail+0x14/0x24 [ 158.855053][ T6793] get_futex_key+0x904/0xec0 [ 158.855989][ T6793] futex_wait_setup+0xbc/0x320 [ 158.856918][ T6793] futex_wait+0x178/0x488 [ 158.857765][ T6793] do_futex+0x2e8/0x340 [ 158.858583][ T6793] __arm64_sys_futex+0x390/0x414 [ 158.859584][ T6793] invoke_syscall+0x98/0x290 [ 158.860424][ T6793] el0_svc_common+0x13c/0x258 [ 158.861372][ T6793] do_el0_svc+0x5c/0x134 [ 158.862197][ T6793] el0_svc+0x58/0x12c [ 158.863010][ T6793] el0t_64_sync_handler+0x84/0xf0 [ 158.864012][ T6793] el0t_64_sync+0x18c/0x190 [ 158.961057][ T6789] netlink: 48 bytes leftover after parsing attributes in process `syz.4.812'. [ 159.000376][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 159.027855][ T6787] rxe_eth0 speed is unknown, defaulting to 1000 [ 159.047609][ T4332] Bluetooth: hci2: command 0x0409 tx timeout [ 159.113591][ T6787] wlan1 speed is unknown, defaulting to 1000 [ 159.122659][ T6795] loop4: detected capacity change from 0 to 512 [ 159.154745][ T6795] EXT4-fs: Ignoring removed oldalloc option [ 159.156115][ T6795] ext4: Unknown parameter 'audit' [ 159.285241][ T6797] FAULT_INJECTION: forcing a failure. [ 159.285241][ T6797] name failslab, interval 1, probability 0, space 0, times 0 [ 159.298309][ T6797] CPU: 0 PID: 6797 Comm: syz.2.817 Not tainted syzkaller #0 [ 159.299866][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 159.302045][ T6797] Call trace: [ 159.302776][ T6797] dump_backtrace+0x1c4/0x1f0 [ 159.303857][ T6797] show_stack+0x2c/0x3c [ 159.304768][ T6797] __dump_stack+0x30/0x40 [ 159.305702][ T6797] dump_stack_lvl+0xf4/0x15c [ 159.306688][ T6797] dump_stack+0x1c/0x5c [ 159.307593][ T6797] should_fail_ex+0x3cc/0x524 [ 159.308604][ T6797] __should_failslab+0xc0/0x11c [ 159.309604][ T6797] should_failslab+0x10/0x28 [ 159.310555][ T6797] slab_pre_alloc_hook+0x6c/0x31c [ 159.311625][ T6797] kmem_cache_alloc_lru+0x60/0x284 [ 159.312635][ T6797] __d_alloc+0x40/0x68c [ 159.313451][ T6797] d_alloc_pseudo+0x28/0x8c [ 159.314307][ T6797] alloc_file_pseudo+0xd8/0x1f4 [ 159.315279][ T6797] sock_alloc_file+0xb4/0x234 [ 159.316270][ T6797] __sys_socket+0x138/0x1b0 [ 159.317192][ T6797] __arm64_sys_socket+0x7c/0x94 [ 159.318160][ T6797] invoke_syscall+0x98/0x290 [ 159.319142][ T6797] el0_svc_common+0x13c/0x258 [ 159.320111][ T6797] do_el0_svc+0x5c/0x134 [ 159.320941][ T6797] el0_svc+0x58/0x12c [ 159.321762][ T6797] el0t_64_sync_handler+0x84/0xf0 [ 159.322811][ T6797] el0t_64_sync+0x18c/0x190 [ 159.906417][ T6809] loop1: detected capacity change from 0 to 512 [ 159.909018][ T6809] EXT4-fs: Ignoring removed i_version option [ 159.910343][ T6809] EXT4-fs: Ignoring removed nobh option [ 159.911720][ T6809] ext4: Unknown parameter 'smackfsroot' [ 159.956562][ T6787] chnl_net:caif_netlink_parms(): no params data found [ 159.999079][ T6787] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.005116][ T6787] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.013784][ T6787] device bridge_slave_0 entered promiscuous mode [ 160.025085][ T6787] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.029948][ T6787] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.034003][ T6787] device bridge_slave_1 entered promiscuous mode [ 160.053821][ T6787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.061532][ T6787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.083407][ T6787] team0: Port device team_slave_0 added [ 160.090023][ T6787] team0: Port device team_slave_1 added [ 160.103123][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.104563][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.120189][ T6787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.126957][ T6787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.132766][ T6787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.142899][ T6787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.212816][ T6822] capability: warning: `syz.3.823' uses deprecated v2 capabilities in a way that may be insecure [ 160.414930][ T27] audit: type=1326 audit(160.400:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.2.821" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3179728 code=0x0 [ 161.127599][ T4338] Bluetooth: hci2: command 0x041b tx timeout [ 161.599684][ T6747] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 161.611601][ T6787] device hsr_slave_0 entered promiscuous mode [ 161.650317][ T6787] device hsr_slave_1 entered promiscuous mode [ 161.698528][ T6787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.699998][ T6787] Cannot create hsr debugfs directory [ 161.957945][ T6853] loop2: detected capacity change from 0 to 512 [ 161.995219][ T6853] EXT4-fs: Ignoring removed bh option [ 161.996356][ T6853] EXT4-fs: Ignoring removed nobh option [ 162.033806][ T6853] ext4: Unknown parameter 'fowner>00000000000000000000' [ 162.372739][ T6857] FAULT_INJECTION: forcing a failure. [ 162.372739][ T6857] name failslab, interval 1, probability 0, space 0, times 0 [ 162.375520][ T6857] CPU: 0 PID: 6857 Comm: syz.4.831 Not tainted syzkaller #0 [ 162.376797][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 162.378782][ T6857] Call trace: [ 162.379433][ T6857] dump_backtrace+0x1c4/0x1f0 [ 162.380427][ T6857] show_stack+0x2c/0x3c [ 162.381307][ T6857] __dump_stack+0x30/0x40 [ 162.382192][ T6857] dump_stack_lvl+0xf4/0x15c [ 162.383144][ T6857] dump_stack+0x1c/0x5c [ 162.384043][ T6857] should_fail_ex+0x3cc/0x524 [ 162.385023][ T6857] __should_failslab+0xc0/0x11c [ 162.386007][ T6857] should_failslab+0x10/0x28 [ 162.386984][ T6857] __kmem_cache_alloc_node+0x7c/0x318 [ 162.388134][ T6857] __kmalloc+0xc4/0x180 [ 162.389031][ T6857] sk_prot_alloc+0xc4/0x1e8 [ 162.389988][ T6857] sk_alloc+0x44/0x3a0 [ 162.390849][ T6857] bt_sock_alloc+0x4c/0x34c [ 162.391759][ T6857] hci_sock_create+0xa8/0x188 [ 162.392739][ T6857] bt_sock_create+0x14c/0x24c [ 162.393643][ T6857] __sock_create+0x448/0x8a8 [ 162.394541][ T6857] __sys_socket+0xc0/0x1b0 [ 162.395426][ T6857] __arm64_sys_socket+0x7c/0x94 [ 162.396424][ T6857] invoke_syscall+0x98/0x290 [ 162.397390][ T6857] el0_svc_common+0x13c/0x258 [ 162.398370][ T6857] do_el0_svc+0x5c/0x134 [ 162.399329][ T6857] el0_svc+0x58/0x12c [ 162.400206][ T6857] el0t_64_sync_handler+0x84/0xf0 [ 162.401331][ T6857] el0t_64_sync+0x18c/0x190 [ 162.402393][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.737843][ T6862] loop3: detected capacity change from 0 to 2048 [ 162.794897][ T6865] nvme nvme1: failed to connect socket: -512 [ 162.824642][ T6862] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 162.875743][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 163.209575][ T4332] Bluetooth: hci2: command 0x040f tx timeout [ 165.287703][ T4338] Bluetooth: hci2: command 0x0419 tx timeout [ 167.367660][ T4332] Bluetooth: hci2: command 0x0405 tx timeout [ 169.720160][ T6787] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.809032][ T6902] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.016328][ T6923] overlayfs: failed to resolve './file0': -2 [ 170.029208][ T6787] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.034174][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 170.212107][ T6787] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.240917][ T6935] nvmet: adding nsid 1 to subsystem testsubsys [ 170.242495][ T6926] null_blk: disk nullb1 created [ 170.252066][ T6934] loop1: detected capacity change from 0 to 512 [ 170.310318][ T6934] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 170.341876][ T6934] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 170.343655][ T6934] System zones: 1-12 [ 170.353483][ T6787] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.356467][ T6934] EXT4-fs (loop1): 1 truncate cleaned up [ 170.359074][ T6926] nvmet: failed to open block device (null): (-22) [ 170.381447][ T6934] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 170.450469][ T6944] device syzkaller0 entered promiscuous mode [ 170.475360][ T6934] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6005: inode #12: comm syz.1.849: bad extra_isize 62 (inode size 256) [ 170.521130][ T6934] EXT4-fs (loop1): Remounting filesystem read-only [ 170.598277][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 171.093720][ T6787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.192046][ T6977] overlayfs: failed to resolve './file0': -2 [ 171.199361][ T6787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.241655][ T6787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.373158][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'. [ 171.375072][ T6787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.614520][ T6787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.660310][ T6787] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.662280][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 171.664255][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 171.677109][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.681960][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.683781][ T4424] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.685280][ T4424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.718310][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 171.728977][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.730975][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.732894][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.734375][ T4744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.736118][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.755745][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.768335][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.784098][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.790474][ T6999] loop3: detected capacity change from 0 to 512 [ 171.811071][ T6787] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.829636][ T6787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.831708][ T6999] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.835554][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.841125][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.845092][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.868238][ T6999] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 171.869878][ T6999] System zones: 1-12 [ 171.871992][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 171.881161][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 171.882936][ T6999] EXT4-fs (loop3): 1 truncate cleaned up [ 171.884725][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 171.888002][ T6999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 171.893189][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.076104][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 172.137187][ T7013] FAULT_INJECTION: forcing a failure. [ 172.137187][ T7013] name failslab, interval 1, probability 0, space 0, times 0 [ 172.146071][ T7013] CPU: 0 PID: 7013 Comm: syz.4.867 Not tainted syzkaller #0 [ 172.147598][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 172.149635][ T7013] Call trace: [ 172.150333][ T7013] dump_backtrace+0x1c4/0x1f0 [ 172.151340][ T7013] show_stack+0x2c/0x3c [ 172.152176][ T7013] __dump_stack+0x30/0x40 [ 172.153042][ T7013] dump_stack_lvl+0xf4/0x15c [ 172.153986][ T7013] dump_stack+0x1c/0x5c [ 172.154875][ T7013] should_fail_ex+0x3cc/0x524 [ 172.155888][ T7013] __should_failslab+0xc0/0x11c [ 172.156917][ T7013] should_failslab+0x10/0x28 [ 172.157871][ T7013] slab_pre_alloc_hook+0x6c/0x31c [ 172.158921][ T7013] kmem_cache_alloc_lru+0x60/0x284 [ 172.159962][ T7013] __d_alloc+0x40/0x68c [ 172.160813][ T7013] d_alloc+0x54/0x208 [ 172.161672][ T7013] rpc_mkpipe_dentry+0x15c/0x3d8 [ 172.162675][ T7013] rpc_fill_super+0x434/0x6d8 [ 172.163683][ T7013] get_tree_keyed+0xd8/0x190 [ 172.164676][ T7013] rpc_fs_get_tree+0xa0/0xf4 [ 172.165590][ T7013] vfs_get_tree+0x90/0x278 [ 172.166542][ T7013] do_new_mount+0x228/0x818 [ 172.167595][ T7013] path_mount+0x5ac/0xe6c [ 172.168532][ T7013] __arm64_sys_mount+0x4a0/0x5a0 [ 172.169617][ T7013] invoke_syscall+0x98/0x290 [ 172.170552][ T7013] el0_svc_common+0x13c/0x258 [ 172.171544][ T7013] do_el0_svc+0x5c/0x134 [ 172.172460][ T7013] el0_svc+0x58/0x12c [ 172.173277][ T7013] el0t_64_sync_handler+0x84/0xf0 [ 172.174393][ T7013] el0t_64_sync+0x18c/0x190 [ 172.236834][ T4744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.579223][ T4598] tipc: Left network mode [ 172.621219][ T7030] loop4: detected capacity change from 0 to 512 [ 172.654316][ T7030] EXT4-fs: Ignoring removed bh option [ 172.655460][ T7030] EXT4-fs: Ignoring removed nobh option [ 172.656617][ T7030] ext4: Unknown parameter 'fowner>00000000000000000000' [ 172.803569][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.805337][ T225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.813523][ T6787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.917435][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.874'. [ 172.920095][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.923343][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.047524][ T4332] Bluetooth: hci4: command 0x2016 tx timeout [ 173.458468][ T7041] nvme nvme1: failed to connect socket: -512 [ 180.417783][ T6787] device veth0_vlan entered promiscuous mode [ 180.421030][ T6787] device veth1_vlan entered promiscuous mode [ 180.478888][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.480756][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.482685][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.484427][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.969127][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.971005][ T4424] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.981083][ T6787] device veth0_macvtap entered promiscuous mode [ 180.983666][ T6787] device veth1_macvtap entered promiscuous mode [ 181.064687][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.066717][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.069038][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.071785][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.074001][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.075858][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.091914][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.093896][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.096025][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.110154][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.125667][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.128666][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.131655][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.136275][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.138920][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 181.140901][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.142772][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.201717][ T7103] FAULT_INJECTION: forcing a failure. [ 181.201717][ T7103] name failslab, interval 1, probability 0, space 0, times 0 [ 181.204664][ T7103] CPU: 0 PID: 7103 Comm: syz.2.890 Not tainted syzkaller #0 [ 181.206176][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 181.208427][ T7103] Call trace: [ 181.209137][ T7103] dump_backtrace+0x1c4/0x1f0 [ 181.210195][ T7103] show_stack+0x2c/0x3c [ 181.211098][ T7103] __dump_stack+0x30/0x40 [ 181.212111][ T7103] dump_stack_lvl+0xf4/0x15c [ 181.213181][ T7103] dump_stack+0x1c/0x5c [ 181.214116][ T7103] should_fail_ex+0x3cc/0x524 [ 181.215186][ T7103] __should_failslab+0xc0/0x11c [ 181.216285][ T7103] should_failslab+0x10/0x28 [ 181.217265][ T7103] kmem_cache_alloc+0x88/0x310 [ 181.218249][ T7103] __alloc_file+0x30/0x234 [ 181.219127][ T7103] alloc_empty_file+0xa0/0x184 [ 181.220089][ T7103] alloc_file+0x64/0x564 [ 181.220917][ T7103] alloc_file_pseudo+0x16c/0x1f4 [ 181.221917][ T7103] sock_alloc_file+0xb4/0x234 [ 181.222843][ T7103] __sys_socket+0x138/0x1b0 [ 181.223734][ T7103] __arm64_sys_socket+0x7c/0x94 [ 181.224723][ T7103] invoke_syscall+0x98/0x290 [ 181.225671][ T7103] el0_svc_common+0x13c/0x258 [ 181.226651][ T7103] do_el0_svc+0x5c/0x134 [ 181.227419][ T7103] el0_svc+0x58/0x12c [ 181.228189][ T7103] el0t_64_sync_handler+0x84/0xf0 [ 181.229178][ T7103] el0t_64_sync+0x18c/0x190 [ 181.234264][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.236281][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.242671][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.244748][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.246645][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.260902][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.263344][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.265943][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.271304][ T6787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.273525][ T6787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.277002][ T6787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.281762][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.283682][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.314675][ T6787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.316318][ T6787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.319615][ T6787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.321449][ T6787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.356830][ T7110] loop2: detected capacity change from 0 to 512 [ 181.382989][ T7110] EXT4-fs: Ignoring removed bh option [ 181.384157][ T7110] EXT4-fs: Ignoring removed nobh option [ 181.385326][ T7110] ext4: Unknown parameter 'fowner>00000000000000000000' [ 181.909161][ T7118] nvme nvme1: failed to connect socket: -111 [ 188.802737][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 189.214686][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.222294][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.504200][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.506603][ T7144] atomic_op 0000000026e71a24 conn xmit_atomic 0000000000000000 [ 189.511299][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.512626][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.514280][ T4738] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 189.541815][ T7149] loop3: detected capacity change from 0 to 512 [ 189.570520][ T7149] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.583214][ T7149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 189.585039][ T7149] System zones: 1-12 [ 189.605699][ T7149] EXT4-fs (loop3): 1 truncate cleaned up [ 189.608929][ T7149] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 189.837509][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 191.027043][ T7174] FAULT_INJECTION: forcing a failure. [ 191.027043][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 191.029894][ T7174] CPU: 0 PID: 7174 Comm: syz.0.907 Not tainted syzkaller #0 [ 191.031409][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 191.033731][ T7174] Call trace: [ 191.034469][ T7174] dump_backtrace+0x1c4/0x1f0 [ 191.035591][ T7174] show_stack+0x2c/0x3c [ 191.036543][ T7174] __dump_stack+0x30/0x40 [ 191.037573][ T7174] dump_stack_lvl+0xf4/0x15c [ 191.038673][ T7174] dump_stack+0x1c/0x5c [ 191.039603][ T7174] should_fail_ex+0x3cc/0x524 [ 191.040557][ T7174] __should_failslab+0xc0/0x11c [ 191.041494][ T7174] should_failslab+0x10/0x28 [ 191.042372][ T7174] __kmem_cache_alloc_node+0x7c/0x318 [ 191.043501][ T7174] kmalloc_trace+0x48/0x94 [ 191.044399][ T7174] ref_tracker_alloc+0x138/0x3f0 [ 191.045424][ T7174] sk_alloc+0x164/0x3a0 [ 191.046313][ T7174] bt_sock_alloc+0x4c/0x34c [ 191.047252][ T7174] hci_sock_create+0xa8/0x188 [ 191.048171][ T7174] bt_sock_create+0x14c/0x24c [ 191.049081][ T7174] __sock_create+0x448/0x8a8 [ 191.050092][ T7174] __sys_socket+0xc0/0x1b0 [ 191.051024][ T7174] __arm64_sys_socket+0x7c/0x94 [ 191.051970][ T7174] invoke_syscall+0x98/0x290 [ 191.052886][ T7174] el0_svc_common+0x13c/0x258 [ 191.053860][ T7174] do_el0_svc+0x5c/0x134 [ 191.054717][ T7174] el0_svc+0x58/0x12c [ 191.055525][ T7174] el0t_64_sync_handler+0x84/0xf0 [ 191.056570][ T7174] el0t_64_sync+0x18c/0x190 [ 191.057771][ T7174] memory allocation failure, unreliable refcount tracker. [ 191.211570][ T7178] loop0: detected capacity change from 0 to 512 [ 191.232317][ T7178] EXT4-fs: Ignoring removed bh option [ 191.233366][ T7178] EXT4-fs: Ignoring removed nobh option [ 191.234400][ T7178] ext4: Unknown parameter 'fowner>00000000000000000000' [ 199.279607][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.281053][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.621200][ T7193] rxe_eth0 speed is unknown, defaulting to 1000 [ 199.751614][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.921'. [ 199.810246][ T7193] wlan1 speed is unknown, defaulting to 1000 [ 200.116528][ T7250] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 200.121262][ T7250] device-mapper: raid: Choosing default region size of 4MiB [ 200.301692][ T7250] md: pers->run() failed ... [ 200.433864][ T7250] device-mapper: table: 248:4: raid: Failed to run raid array (-EINVAL) [ 200.435776][ T7250] device-mapper: ioctl: error adding target to table [ 200.508923][ T7261] loop2: detected capacity change from 0 to 512 [ 200.514689][ T7261] EXT4-fs: Ignoring removed bh option [ 200.521350][ T7261] EXT4-fs: Ignoring removed nobh option [ 200.525556][ T7261] ext4: Unknown parameter 'fowner>00000000000000000000' [ 208.255588][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 208.260928][ T4598] device hsr_slave_0 left promiscuous mode [ 208.287859][ T4598] device hsr_slave_1 left promiscuous mode [ 208.358550][ T4598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.360219][ T4598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.370306][ T4598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.371976][ T4598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.374034][ T4598] device bridge_slave_1 left promiscuous mode [ 208.376933][ T7300] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 208.380527][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.383196][ T7300] device-mapper: raid: Choosing default region size of 4MiB [ 208.419128][ T4598] device bridge_slave_0 left promiscuous mode [ 208.420640][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.497410][ T7300] md: pers->run() failed ... [ 208.551515][ T4598] device veth1_macvtap left promiscuous mode [ 208.552835][ T4598] device veth0_macvtap left promiscuous mode [ 208.554548][ T4598] device veth1_vlan left promiscuous mode [ 208.556650][ T4598] device veth0_vlan left promiscuous mode [ 208.579699][ T7300] device-mapper: table: 248:5: raid: Failed to run raid array (-EINVAL) [ 208.582324][ T7300] device-mapper: ioctl: error adding target to table [ 208.681001][ T7312] loop3: detected capacity change from 0 to 128 [ 208.705617][ T7312] ext4: Unknown parameter 'appraise' [ 208.912508][ T7316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.914402][ T7316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.520043][ T4598] team0 (unregistering): Port device team_slave_1 removed [ 211.678345][ T4598] team0 (unregistering): Port device team_slave_0 removed [ 211.878567][ T4598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.098192][ T4598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.669089][ T4598] bond0 (unregistering): Released all slaves [ 213.921333][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 214.100872][ T7299] rxe_eth0 speed is unknown, defaulting to 1000 [ 214.121260][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 214.277251][ T7299] wlan1 speed is unknown, defaulting to 1000 [ 214.433691][ T7362] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 214.436060][ T7362] device-mapper: raid: Choosing default region size of 4MiB [ 214.506595][ T7372] device syzkaller0 entered promiscuous mode [ 214.544837][ T7362] md: pers->run() failed ... [ 214.607744][ T7362] device-mapper: table: 248:6: raid: Failed to run raid array (-EINVAL) [ 214.609588][ T7362] device-mapper: ioctl: error adding target to table [ 214.871485][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.966'. [ 215.315195][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 215.319101][ T7406] device syzkaller0 entered promiscuous mode [ 215.485752][ T7428] rxe_eth0 speed is unknown, defaulting to 1000 [ 215.575967][ T7441] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 215.577416][ T7441] device-mapper: raid: Choosing default region size of 4MiB [ 215.591484][ T7428] wlan1 speed is unknown, defaulting to 1000 [ 215.689532][ T7441] md: pers->run() failed ... [ 215.948556][ T7451] netlink: 32 bytes leftover after parsing attributes in process `syz.0.978'. [ 215.999752][ T7452] atomic_op 00000000713a4561 conn xmit_atomic 0000000000000000 [ 216.088156][ T7441] device-mapper: table: 248:7: raid: Failed to run raid array (-EINVAL) [ 216.090190][ T7441] device-mapper: ioctl: error adding target to table [ 216.116596][ T7457] device syzkaller0 entered promiscuous mode [ 218.742072][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.985'. [ 218.776833][ T7484] nvmet: failed to open block device (null): (-22) [ 218.849229][ T7494] loop0: detected capacity change from 0 to 128 [ 218.853799][ T7494] ext4: Unknown parameter 'appraise' [ 218.965498][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'. [ 219.038236][ T7490] device syzkaller0 entered promiscuous mode [ 219.106552][ T7508] FAULT_INJECTION: forcing a failure. [ 219.106552][ T7508] name failslab, interval 1, probability 0, space 0, times 0 [ 219.112461][ T7508] CPU: 0 PID: 7508 Comm: syz.4.994 Not tainted syzkaller #0 [ 219.113829][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 219.116110][ T7508] Call trace: [ 219.116790][ T7508] dump_backtrace+0x1c4/0x1f0 [ 219.117730][ T7508] show_stack+0x2c/0x3c [ 219.118575][ T7508] __dump_stack+0x30/0x40 [ 219.119544][ T7508] dump_stack_lvl+0xf4/0x15c [ 219.120596][ T7508] dump_stack+0x1c/0x5c [ 219.121481][ T7508] should_fail_ex+0x3cc/0x524 [ 219.122460][ T7508] __should_failslab+0xc0/0x11c [ 219.123496][ T7508] should_failslab+0x10/0x28 [ 219.124517][ T7508] __kmem_cache_alloc_node+0x7c/0x318 [ 219.125711][ T7508] __kmalloc+0xc4/0x180 [ 219.126563][ T7508] ovl_fill_super+0x11e0/0x3938 [ 219.127562][ T7508] mount_nodev+0x68/0x108 [ 219.128445][ T7508] ovl_mount+0x3c/0x50 [ 219.129307][ T7508] legacy_get_tree+0xd8/0x174 [ 219.130275][ T7508] vfs_get_tree+0x90/0x278 [ 219.131172][ T7508] do_new_mount+0x228/0x818 [ 219.132071][ T7508] path_mount+0x5ac/0xe6c [ 219.132994][ T7508] __arm64_sys_mount+0x4a0/0x5a0 [ 219.134176][ T7508] invoke_syscall+0x98/0x290 [ 219.135250][ T7508] el0_svc_common+0x13c/0x258 [ 219.136369][ T7508] do_el0_svc+0x5c/0x134 [ 219.137390][ T7508] el0_svc+0x58/0x12c [ 219.138187][ T7508] el0t_64_sync_handler+0x84/0xf0 [ 219.139304][ T7508] el0t_64_sync+0x18c/0x190 [ 219.325692][ T7516] loop1: detected capacity change from 0 to 512 [ 219.348791][ T7516] EXT4-fs: Ignoring removed bh option [ 219.349830][ T7516] EXT4-fs: Ignoring removed nobh option [ 219.355201][ T7516] ext4: Unknown parameter 'fowner>00000000000000000000' [ 219.507514][ T4935] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 219.634924][ T7519] nvme nvme1: failed to connect socket: -111 [ 219.688372][ T4935] usb 1-1: Using ep0 maxpacket: 8 [ 219.692266][ T4935] usb 1-1: unable to get BOS descriptor or descriptor too short [ 219.700058][ T4935] usb 1-1: string descriptor 0 read error: -22 [ 219.701755][ T4935] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 219.704749][ T4935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.742083][ T4935] usb 1-1: 1:1 : format type 0 is detected, processed as PCM [ 219.750850][ T4935] usb 1-1: 1:1 : sample bitwidth 245 in over sample bytes 3 [ 219.755782][ T4935] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 221.672043][ T7528] device syzkaller0 entered promiscuous mode [ 222.510678][ T7571] device syzkaller0 entered promiscuous mode [ 222.604411][ T4935] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 222.749788][ T4935] usb 1-1: USB disconnect, device number 3 [ 224.011626][ T7588] loop4: detected capacity change from 0 to 512 [ 224.019251][ T7588] EXT4-fs: Ignoring removed bh option [ 224.020411][ T7588] EXT4-fs: Ignoring removed nobh option [ 224.021571][ T7588] ext4: Unknown parameter 'fowner>00000000000000000000' [ 224.886543][ T7600] nvmet: failed to open block device (null): (-22) [ 224.999977][ T7599] nvme nvme1: failed to connect socket: -111 [ 225.250794][ T7626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 225.616687][ T7635] rxe_eth0 speed is unknown, defaulting to 1000 [ 225.756803][ T7647] device syzkaller0 entered promiscuous mode [ 225.792597][ T7635] wlan1 speed is unknown, defaulting to 1000 [ 225.951812][ T7652] loop2: detected capacity change from 0 to 512 [ 225.961260][ T7652] EXT4-fs: Ignoring removed bh option [ 225.971205][ T7652] EXT4-fs: Ignoring removed nobh option [ 225.976780][ T7652] ext4: Unknown parameter 'fowner>00000000000000000000' [ 226.766962][ T7662] nvme nvme1: failed to connect socket: -512 [ 226.847273][ T7681] FAULT_INJECTION: forcing a failure. [ 226.847273][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 226.851789][ T7681] CPU: 0 PID: 7681 Comm: syz.1.1044 Not tainted syzkaller #0 [ 226.853314][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 226.855576][ T7681] Call trace: [ 226.856316][ T7681] dump_backtrace+0x1c4/0x1f0 [ 226.857411][ T7681] show_stack+0x2c/0x3c [ 226.858378][ T7681] __dump_stack+0x30/0x40 [ 226.859428][ T7681] dump_stack_lvl+0xf4/0x15c [ 226.860433][ T7681] dump_stack+0x1c/0x5c [ 226.861353][ T7681] should_fail_ex+0x3cc/0x524 [ 226.862384][ T7681] __should_failslab+0xc0/0x11c [ 226.863406][ T7681] should_failslab+0x10/0x28 [ 226.864400][ T7681] kmem_cache_alloc+0x88/0x310 [ 226.865438][ T7681] security_inode_alloc+0x38/0x11c [ 226.866555][ T7681] inode_init_always+0x6c8/0xb28 [ 226.867543][ T7681] new_inode_pseudo+0x7c/0x1cc [ 226.868500][ T7681] new_inode+0x38/0x174 [ 226.869323][ T7681] shmem_get_inode+0x2cc/0xa8c [ 226.870299][ T7681] shmem_mknod+0x64/0x1c4 [ 226.871185][ T7681] shmem_mkdir+0x38/0x78 [ 226.872049][ T7681] vfs_mkdir+0x314/0x4d8 [ 226.872949][ T7681] do_mkdirat+0x1b8/0x3ec [ 226.873869][ T7681] __arm64_sys_mkdirat+0x90/0xa8 [ 226.874927][ T7681] invoke_syscall+0x98/0x290 [ 226.875921][ T7681] el0_svc_common+0x13c/0x258 [ 226.876906][ T7681] do_el0_svc+0x5c/0x134 [ 226.877783][ T7681] el0_svc+0x58/0x12c [ 226.878626][ T7681] el0t_64_sync_handler+0x84/0xf0 [ 226.879698][ T7681] el0t_64_sync+0x18c/0x190 [ 226.880714][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.888447][ T7681] overlayfs: failed to resolve './file0': -2 [ 229.825148][ T7697] rxe_eth0 speed is unknown, defaulting to 1000 [ 229.954413][ T7704] loop3: detected capacity change from 0 to 128 [ 229.970173][ T7707] loop1: detected capacity change from 0 to 512 [ 229.978985][ T7704] ext4: Unknown parameter 'appraise' [ 230.001879][ T7707] EXT4-fs: Ignoring removed bh option [ 230.003084][ T7707] EXT4-fs: Ignoring removed nobh option [ 230.004172][ T7707] ext4: Unknown parameter 'fowner>00000000000000000000' [ 230.020518][ T7697] wlan1 speed is unknown, defaulting to 1000 [ 230.566738][ T27] audit: type=1326 audit(230.550:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.4.1052" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x0 [ 230.766302][ T7726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.784647][ T7726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.846388][ T7731] loop0: detected capacity change from 0 to 512 [ 230.848059][ T7731] EXT4-fs: Ignoring removed i_version option [ 230.849310][ T7731] EXT4-fs: Ignoring removed nobh option [ 230.850533][ T7731] ext4: Unknown parameter 'smackfsroot' [ 232.466479][ T7727] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1054'. [ 232.518000][ T7743] atomic_op 0000000096e4f145 conn xmit_atomic 0000000000000000 [ 232.522825][ T7705] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.059400][ T7798] loop2: detected capacity change from 0 to 512 [ 235.197889][ T7798] EXT4-fs: Ignoring removed bh option [ 235.199045][ T7798] EXT4-fs: Ignoring removed nobh option [ 235.200277][ T7798] ext4: Unknown parameter 'fowner>00000000000000000000' [ 235.379481][ T7807] rxe_eth0 speed is unknown, defaulting to 1000 [ 235.400098][ T7807] wlan1 speed is unknown, defaulting to 1000 [ 235.891918][ T7809] nvme nvme1: failed to connect socket: -512 [ 236.883166][ T7857] rxe_eth0 speed is unknown, defaulting to 1000 [ 236.945848][ T7862] loop2: detected capacity change from 0 to 512 [ 237.003601][ T7862] EXT4-fs: Ignoring removed bh option [ 237.004873][ T7862] EXT4-fs: Ignoring removed nobh option [ 237.005965][ T7862] ext4: Unknown parameter 'fowner>00000000000000000000' [ 237.216583][ T7857] wlan1 speed is unknown, defaulting to 1000 [ 237.345429][ T7869] nvme nvme1: failed to connect socket: -111 [ 238.299704][ T7917] device syzkaller0 entered promiscuous mode [ 238.376692][ T7935] loop3: detected capacity change from 0 to 128 [ 238.380511][ T7935] ext4: Unknown parameter 'appraise' [ 238.532670][ T7940] overlayfs: missing 'lowerdir' [ 238.859628][ T7951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.884972][ T7951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.175701][ T7968] device syzkaller0 entered promiscuous mode [ 239.886799][ T7982] overlayfs: missing 'lowerdir' [ 240.356428][ T7995] rxe_eth0 speed is unknown, defaulting to 1000 [ 240.560221][ T7995] wlan1 speed is unknown, defaulting to 1000 [ 240.658888][ T8002] device syzkaller0 entered promiscuous mode [ 240.878308][ T8010] overlayfs: missing 'lowerdir' [ 241.295993][ T8029] loop2: detected capacity change from 0 to 512 [ 241.330829][ T8029] EXT4-fs: Ignoring removed bh option [ 241.332010][ T8029] EXT4-fs: Ignoring removed nobh option [ 241.333173][ T8029] ext4: Unknown parameter 'fowner>00000000000000000000' [ 241.414464][ T7705] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.402992][ T8042] nvme nvme1: failed to connect socket: -512 [ 242.455192][ T8038] device syzkaller0 entered promiscuous mode [ 242.573448][ T8051] overlayfs: missing 'lowerdir' [ 243.974118][ T8086] overlayfs: missing 'lowerdir' [ 244.502565][ T8118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.123004][ T8137] loop4: detected capacity change from 0 to 128 [ 251.124740][ T8137] ext4: Unknown parameter 'appraise' [ 251.172877][ T8132] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 251.533405][ T8144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.535231][ T8144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.562573][ T8157] loop1: detected capacity change from 0 to 512 [ 251.564207][ T8157] EXT4-fs: Ignoring removed bh option [ 251.565382][ T8157] EXT4-fs: Ignoring removed nobh option [ 251.580168][ T8156] FAULT_INJECTION: forcing a failure. [ 251.580168][ T8156] name failslab, interval 1, probability 0, space 0, times 0 [ 251.582732][ T8156] CPU: 0 PID: 8156 Comm: syz.0.1166 Not tainted syzkaller #0 [ 251.584122][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 251.586051][ T8156] Call trace: [ 251.586701][ T8156] dump_backtrace+0x1c4/0x1f0 [ 251.587706][ T8156] show_stack+0x2c/0x3c [ 251.588636][ T8156] __dump_stack+0x30/0x40 [ 251.589556][ T8156] dump_stack_lvl+0xf4/0x15c [ 251.590514][ T8156] dump_stack+0x1c/0x5c [ 251.591371][ T8156] should_fail_ex+0x3cc/0x524 [ 251.592350][ T8156] __should_failslab+0xc0/0x11c [ 251.593382][ T8156] should_failslab+0x10/0x28 [ 251.594338][ T8156] __kmem_cache_alloc_node+0x7c/0x318 [ 251.595437][ T8156] __kmalloc+0xc4/0x180 [ 251.596290][ T8156] security_sk_alloc+0x54/0x140 [ 251.597296][ T8156] sk_prot_alloc+0xe0/0x1e8 [ 251.598241][ T8156] sk_alloc+0x44/0x3a0 [ 251.599092][ T8156] bt_sock_alloc+0x4c/0x34c [ 251.600019][ T8156] hci_sock_create+0xa8/0x188 [ 251.600972][ T8156] bt_sock_create+0x14c/0x24c [ 251.601960][ T8156] __sock_create+0x448/0x8a8 [ 251.602962][ T8156] __sys_socket+0xc0/0x1b0 [ 251.603932][ T8156] __arm64_sys_socket+0x7c/0x94 [ 251.604961][ T8156] invoke_syscall+0x98/0x290 [ 251.605906][ T8156] el0_svc_common+0x13c/0x258 [ 251.606913][ T8156] do_el0_svc+0x5c/0x134 [ 251.607796][ T8156] el0_svc+0x58/0x12c [ 251.608675][ T8156] el0t_64_sync_handler+0x84/0xf0 [ 251.609771][ T8156] el0t_64_sync+0x18c/0x190 [ 251.613246][ T8148] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 251.615013][ T8148] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 251.628381][ T8157] ext4: Unknown parameter 'fowner>00000000000000000000' [ 251.674097][ T8163] FAULT_INJECTION: forcing a failure. [ 251.674097][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 251.676762][ T8163] CPU: 0 PID: 8163 Comm: syz.2.1169 Not tainted syzkaller #0 [ 251.678292][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 251.680632][ T8163] Call trace: [ 251.681341][ T8163] dump_backtrace+0x1c4/0x1f0 [ 251.682344][ T8163] show_stack+0x2c/0x3c [ 251.683274][ T8163] __dump_stack+0x30/0x40 [ 251.684213][ T8163] dump_stack_lvl+0xf4/0x15c [ 251.685233][ T8163] dump_stack+0x1c/0x5c [ 251.686142][ T8163] should_fail_ex+0x3cc/0x524 [ 251.687153][ T8163] __should_failslab+0xc0/0x11c [ 251.688134][ T8163] should_failslab+0x10/0x28 [ 251.689057][ T8163] __kmem_cache_alloc_node+0x7c/0x318 [ 251.690127][ T8163] kmalloc_trace+0x48/0x94 [ 251.691029][ T8163] proc_init_fs_context+0x60/0x350 [ 251.692140][ T8163] alloc_fs_context+0x530/0x778 [ 251.693131][ T8163] fs_context_for_reconfigure+0x7c/0x94 [ 251.694143][ T8163] path_mount+0xb60/0xe6c [ 251.694968][ T8163] __arm64_sys_mount+0x4a0/0x5a0 [ 251.695972][ T8163] invoke_syscall+0x98/0x290 [ 251.696877][ T8163] el0_svc_common+0x13c/0x258 [ 251.697789][ T8163] do_el0_svc+0x5c/0x134 [ 251.698630][ T8163] el0_svc+0x58/0x12c [ 251.699424][ T8163] el0t_64_sync_handler+0x84/0xf0 [ 251.700461][ T8163] el0t_64_sync+0x18c/0x190 [ 251.711912][ T8135] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 252.041147][ T8181] loop2: detected capacity change from 0 to 128 [ 252.074903][ T8175] nvme nvme1: failed to connect socket: -111 [ 252.141458][ T8181] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 254.707583][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 254.728611][ T8198] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1173'. [ 254.780168][ T8247] atomic_op 000000003e2d7b69 conn xmit_atomic 0000000000000000 [ 255.047576][ T8170] block2mtd: error: cannot open device 0 [ 255.193802][ T8271] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 255.212777][ T8271] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 255.318149][ T8275] FAULT_INJECTION: forcing a failure. [ 255.318149][ T8275] name failslab, interval 1, probability 0, space 0, times 0 [ 255.320931][ T8275] CPU: 0 PID: 8275 Comm: syz.0.1182 Not tainted syzkaller #0 [ 255.322291][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 255.324073][ T8275] Call trace: [ 255.324699][ T8275] dump_backtrace+0x1c4/0x1f0 [ 255.325648][ T8275] show_stack+0x2c/0x3c [ 255.326524][ T8275] __dump_stack+0x30/0x40 [ 255.327426][ T8275] dump_stack_lvl+0xf4/0x15c [ 255.328499][ T8275] dump_stack+0x1c/0x5c [ 255.329408][ T8275] should_fail_ex+0x3cc/0x524 [ 255.330434][ T8275] __should_failslab+0xc0/0x11c [ 255.331501][ T8275] should_failslab+0x10/0x28 [ 255.332492][ T8275] __kmem_cache_alloc_node+0x7c/0x318 [ 255.333643][ T8275] __kmalloc+0xc4/0x180 [ 255.334487][ T8275] security_sk_alloc+0x54/0x140 [ 255.335483][ T8275] sk_prot_alloc+0xe0/0x1e8 [ 255.336384][ T8275] sk_alloc+0x44/0x3a0 [ 255.337265][ T8275] bt_sock_alloc+0x4c/0x34c [ 255.338220][ T8275] hci_sock_create+0xa8/0x188 [ 255.339235][ T8275] bt_sock_create+0x14c/0x24c [ 255.340178][ T8275] __sock_create+0x448/0x8a8 [ 255.341078][ T8275] __sys_socket+0xc0/0x1b0 [ 255.341952][ T8275] __arm64_sys_socket+0x7c/0x94 [ 255.342960][ T8275] invoke_syscall+0x98/0x290 [ 255.343874][ T8275] el0_svc_common+0x13c/0x258 [ 255.344819][ T8275] do_el0_svc+0x5c/0x134 [ 255.345706][ T8275] el0_svc+0x58/0x12c [ 255.346555][ T8275] el0t_64_sync_handler+0x84/0xf0 [ 255.347556][ T8275] el0t_64_sync+0x18c/0x190 [ 255.599338][ T8287] loop1: detected capacity change from 0 to 512 [ 255.611519][ T8287] EXT4-fs: Ignoring removed bh option [ 255.612691][ T8287] EXT4-fs: Ignoring removed nobh option [ 255.613733][ T8287] ext4: Unknown parameter 'fowner>00000000000000000000' [ 255.620267][ T8288] loop2: detected capacity change from 0 to 128 [ 255.622087][ T8288] ext4: Unknown parameter 'appraise' [ 255.730859][ T8132] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 256.053772][ T8292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.056548][ T8292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.096182][ T8293] overlayfs: unrecognized mount option "/" or missing value [ 256.154102][ T8299] loop3: detected capacity change from 0 to 512 [ 256.165538][ T8299] EXT4-fs: Ignoring removed bh option [ 256.166840][ T8299] EXT4-fs: Ignoring removed nobh option [ 256.195353][ T8299] ext4: Unknown parameter 'fowner>00000000000000000000' [ 256.261030][ T8293] can0: slcan on ptm0. [ 256.377392][ T8297] nvme nvme1: failed to connect socket: -111 [ 256.947627][ T8314] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1189'. [ 256.947957][ T8276] can0 (unregistered): slcan off ptm0. [ 256.997682][ T8315] atomic_op 000000007ebec529 conn xmit_atomic 0000000000000000 [ 258.009969][ T8325] device batadv_slave_1 entered promiscuous mode [ 258.023467][ T27] audit: type=1326 audit(258.010:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.4.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 258.033883][ T27] audit: type=1326 audit(258.020:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.4.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 258.054449][ T27] audit: type=1326 audit(258.030:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.4.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 258.081766][ T27] audit: type=1326 audit(258.030:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.4.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 258.106714][ T8324] device batadv_slave_1 left promiscuous mode [ 258.108271][ T27] audit: type=1326 audit(258.030:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.4.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 258.134454][ T27] audit: type=1326 audit(258.030:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.4.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 258.162909][ T27] audit: type=1326 audit(258.030:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.4.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 258.195103][ T27] audit: type=1326 audit(258.030:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.4.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 258.229812][ T27] audit: type=1326 audit(258.030:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.4.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 258.269950][ T27] audit: type=1326 audit(258.030:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8324 comm="syz.4.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 260.936231][ T8348] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 260.938278][ T8348] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 261.755826][ T8373] loop4: detected capacity change from 0 to 512 [ 261.855294][ T8366] bridge1: port 1(bond2) entered blocking state [ 261.856710][ T8366] bridge1: port 1(bond2) entered disabled state [ 261.865034][ T8366] device bond2 entered promiscuous mode [ 261.868047][ T8373] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 261.869606][ T8373] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 261.871060][ T8373] System zones: 0-1, 15-15, 18-18, 34-34 [ 261.887685][ T8373] EXT4-fs (loop4): orphan cleanup on readonly fs [ 261.889108][ T8373] EXT4-fs warning (device loop4): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 261.892001][ T8373] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 262.008716][ T8373] EXT4-fs (loop4): 1 truncate cleaned up [ 262.010982][ T8373] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 262.036907][ T8374] bridge1: port 2(gretap1) entered blocking state [ 262.052355][ T8374] bridge1: port 2(gretap1) entered disabled state [ 262.054118][ T8374] device gretap1 entered promiscuous mode [ 262.097599][ T8383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1204'. [ 262.191528][ T8373] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 262.233907][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 263.016357][ T8398] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1209'. [ 263.139721][ T8401] atomic_op 000000003586e307 conn xmit_atomic 0000000000000000 [ 263.591451][ T8419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1215'. [ 263.706628][ T8423] loop3: detected capacity change from 0 to 128 [ 263.723194][ T8423] ext4: Unknown parameter 'appraise' [ 264.175319][ T8433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.177698][ T8433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.481781][ T8437] FAULT_INJECTION: forcing a failure. [ 264.481781][ T8437] name failslab, interval 1, probability 0, space 0, times 0 [ 264.496483][ T8437] CPU: 0 PID: 8437 Comm: syz.2.1220 Not tainted syzkaller #0 [ 264.498017][ T8437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 264.500195][ T8437] Call trace: [ 264.500927][ T8437] dump_backtrace+0x1c4/0x1f0 [ 264.502071][ T8437] show_stack+0x2c/0x3c [ 264.502969][ T8437] __dump_stack+0x30/0x40 [ 264.503899][ T8437] dump_stack_lvl+0xf4/0x15c [ 264.504904][ T8437] dump_stack+0x1c/0x5c [ 264.505747][ T8437] should_fail_ex+0x3cc/0x524 [ 264.506713][ T8437] __should_failslab+0xc0/0x11c [ 264.507702][ T8437] should_failslab+0x10/0x28 [ 264.508634][ T8437] kmem_cache_alloc+0x88/0x310 [ 264.509634][ T8437] security_inode_alloc+0x38/0x11c [ 264.510674][ T8437] inode_init_always+0x6c8/0xb28 [ 264.511660][ T8437] new_inode_pseudo+0x7c/0x1cc [ 264.512611][ T8437] new_inode+0x38/0x174 [ 264.513456][ T8437] shmem_get_inode+0x2cc/0xa8c [ 264.514423][ T8437] shmem_mknod+0x64/0x1c4 [ 264.515319][ T8437] shmem_create+0x38/0x4c [ 264.516204][ T8437] vfs_create+0x2b4/0x430 [ 264.517045][ T8437] ovl_do_create+0x90/0xe0 [ 264.517916][ T8437] ovl_create_real+0x178/0x3bc [ 264.518892][ T8437] ovl_create_temp+0x68/0x7c [ 264.519826][ T8437] ovl_get_workdir+0x5d0/0x1084 [ 264.520821][ T8437] ovl_fill_super+0x17d0/0x3938 [ 264.521816][ T8437] mount_nodev+0x68/0x108 [ 264.522744][ T8437] ovl_mount+0x3c/0x50 [ 264.523610][ T8437] legacy_get_tree+0xd8/0x174 [ 264.524545][ T8437] vfs_get_tree+0x90/0x278 [ 264.525416][ T8437] do_new_mount+0x228/0x818 [ 264.526327][ T8437] path_mount+0x5ac/0xe6c [ 264.527275][ T8437] __arm64_sys_mount+0x4a0/0x5a0 [ 264.528303][ T8437] invoke_syscall+0x98/0x290 [ 264.529309][ T8437] el0_svc_common+0x13c/0x258 [ 264.530296][ T8437] do_el0_svc+0x5c/0x134 [ 264.531196][ T8437] el0_svc+0x58/0x12c [ 264.532033][ T8437] el0t_64_sync_handler+0x84/0xf0 [ 264.533075][ T8437] el0t_64_sync+0x18c/0x190 [ 265.895398][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.896911][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.091449][ T8465] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.044773][ T8485] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1229'. [ 267.061337][ T8484] overlayfs: unrecognized mount option "/" or missing value [ 267.142335][ T8484] can0: slcan on ptm0. [ 267.143889][ T8485] atomic_op 00000000010ad3a7 conn xmit_atomic 0000000000000000 [ 267.256670][ T8465] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.426170][ T8481] can0 (unregistered): slcan off ptm0. [ 269.554055][ T8465] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.558911][ T8635] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1235'. [ 269.594916][ T8649] loop2: detected capacity change from 0 to 4096 [ 269.610473][ T8649] EXT4-fs: Ignoring removed orlov option [ 269.668022][ T8649] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 269.710185][ T8653] loop3: detected capacity change from 0 to 512 [ 269.720453][ T8653] EXT4-fs: Ignoring removed bh option [ 269.721595][ T8653] EXT4-fs: Ignoring removed nobh option [ 269.815769][ T8653] ext4: Unknown parameter 'fowner>00000000000000000000' [ 269.824422][ T8657] loop1: detected capacity change from 0 to 512 [ 269.830233][ T8657] EXT4-fs: Ignoring removed bh option [ 269.835846][ T8657] EXT4-fs: Ignoring removed nobh option [ 269.842432][ T8657] ext4: Unknown parameter 'fowner>00000000000000000000' [ 269.861898][ T8658] loop0: detected capacity change from 0 to 512 [ 269.930237][ T8658] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 269.948890][ T8658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 269.950493][ T8658] System zones: 1-12 [ 269.951668][ T8658] EXT4-fs (loop0): 1 truncate cleaned up [ 269.953199][ T8658] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 272.216992][ T8671] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1244'. [ 272.666713][ T8667] nvme nvme1: failed to connect socket: -512 [ 272.717912][ T8671] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6005: inode #12: comm syz.0.1244: bad extra_isize 62 (inode size 256) [ 272.722497][ T8671] EXT4-fs (loop0): Remounting filesystem read-only [ 272.854893][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 272.899187][ T8678] device syzkaller0 entered promiscuous mode [ 272.899983][ T6787] EXT4-fs (loop0): unmounting filesystem. [ 272.975327][ T8680] loop0: detected capacity change from 0 to 512 [ 273.013603][ T8680] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 273.133399][ T8371] udevd[8371]: incorrect ext4 checksum on /dev/loop0 [ 273.404263][ T8683] loop0: detected capacity change from 0 to 512 [ 273.405891][ T8683] ext4: Unknown parameter 'noacl' [ 273.465236][ T8662] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 273.675445][ T8697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1253'. [ 274.032712][ T8703] loop2: detected capacity change from 0 to 512 [ 274.048444][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.151267][ T8705] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 274.162650][ T8705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 274.182231][ T8705] bond1: (slave geneve2): making interface the new active one [ 274.298840][ T8705] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 274.311185][ T5210] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 274.812457][ T8716] FAULT_INJECTION: forcing a failure. [ 274.812457][ T8716] name failslab, interval 1, probability 0, space 0, times 0 [ 274.813475][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 274.835533][ T8716] CPU: 0 PID: 8716 Comm: syz.4.1259 Not tainted syzkaller #0 [ 274.837178][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 274.839523][ T8716] Call trace: [ 274.840258][ T8716] dump_backtrace+0x1c4/0x1f0 [ 274.841346][ T8716] show_stack+0x2c/0x3c [ 274.842290][ T8716] __dump_stack+0x30/0x40 [ 274.843256][ T8716] dump_stack_lvl+0xf4/0x15c [ 274.844266][ T8716] dump_stack+0x1c/0x5c [ 274.845184][ T8716] should_fail_ex+0x3cc/0x524 [ 274.846146][ T8716] __should_failslab+0xc0/0x11c [ 274.847136][ T8716] should_failslab+0x10/0x28 [ 274.848118][ T8716] __kmem_cache_alloc_node+0x7c/0x318 [ 274.849229][ T8716] __kmalloc+0xc4/0x180 [ 274.850084][ T8716] memcg_list_lru_alloc+0x280/0x8bc [ 274.851166][ T8716] slab_pre_alloc_hook+0x2cc/0x31c [ 274.852256][ T8716] kmem_cache_alloc_lru+0x60/0x284 [ 274.853269][ T8716] __d_alloc+0x40/0x68c [ 274.854101][ T8716] d_alloc_pseudo+0x28/0x8c [ 274.855027][ T8716] alloc_file_pseudo+0xd8/0x1f4 [ 274.856038][ T8716] dma_buf_export+0x5d0/0x858 [ 274.856984][ T8716] system_heap_allocate+0x8dc/0xc88 [ 274.857997][ T8716] dma_heap_ioctl+0x440/0x6f4 [ 274.858991][ T8716] __arm64_sys_ioctl+0x14c/0x1c8 [ 274.860022][ T8716] invoke_syscall+0x98/0x290 [ 274.860930][ T8716] el0_svc_common+0x13c/0x258 [ 274.861843][ T8716] do_el0_svc+0x5c/0x134 [ 274.862667][ T8716] el0_svc+0x58/0x12c [ 274.863426][ T8716] el0t_64_sync_handler+0x84/0xf0 [ 274.864395][ T8716] el0t_64_sync+0x18c/0x190 [ 275.170308][ T8723] device syzkaller0 entered promiscuous mode [ 275.221682][ T8726] FAULT_INJECTION: forcing a failure. [ 275.221682][ T8726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.234931][ T8726] CPU: 0 PID: 8726 Comm: syz.1.1265 Not tainted syzkaller #0 [ 275.236524][ T8726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 275.238727][ T8726] Call trace: [ 275.239455][ T8726] dump_backtrace+0x1c4/0x1f0 [ 275.240588][ T8726] show_stack+0x2c/0x3c [ 275.241593][ T8726] __dump_stack+0x30/0x40 [ 275.242607][ T8726] dump_stack_lvl+0xf4/0x15c [ 275.243626][ T8726] dump_stack+0x1c/0x5c [ 275.244490][ T8726] should_fail_ex+0x3cc/0x524 [ 275.245477][ T8726] should_fail+0x14/0x24 [ 275.246461][ T8726] should_fail_usercopy+0x20/0x30 [ 275.247650][ T8726] btf_get_info_by_fd+0x100/0x840 [ 275.248792][ T8726] bpf_obj_get_info_by_fd+0x71c/0x31cc [ 275.250012][ T8726] __sys_bpf+0x3ec/0x660 [ 275.250963][ T8726] __arm64_sys_bpf+0x80/0x98 [ 275.251975][ T8726] invoke_syscall+0x98/0x290 [ 275.252948][ T8726] el0_svc_common+0x13c/0x258 [ 275.253936][ T8726] do_el0_svc+0x5c/0x134 [ 275.254841][ T8726] el0_svc+0x58/0x12c [ 275.255708][ T8726] el0t_64_sync_handler+0x84/0xf0 [ 275.256789][ T8726] el0t_64_sync+0x18c/0x190 [ 275.310354][ T8728] FAULT_INJECTION: forcing a failure. [ 275.310354][ T8728] name failslab, interval 1, probability 0, space 0, times 0 [ 275.345360][ T8728] CPU: 0 PID: 8728 Comm: syz.0.1266 Not tainted syzkaller #0 [ 275.346850][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 275.349018][ T8728] Call trace: [ 275.349639][ T8728] dump_backtrace+0x1c4/0x1f0 [ 275.350582][ T8728] show_stack+0x2c/0x3c [ 275.351458][ T8728] __dump_stack+0x30/0x40 [ 275.352380][ T8728] dump_stack_lvl+0xf4/0x15c [ 275.353325][ T8728] dump_stack+0x1c/0x5c [ 275.354182][ T8728] should_fail_ex+0x3cc/0x524 [ 275.355194][ T8728] __should_failslab+0xc0/0x11c [ 275.356215][ T8728] should_failslab+0x10/0x28 [ 275.357224][ T8728] __kmem_cache_alloc_node+0x7c/0x318 [ 275.358457][ T8728] __kmalloc+0xc4/0x180 [ 275.359394][ T8728] alloc_port_data+0xd4/0x310 [ 275.360445][ T8728] ib_device_set_netdev+0xe0/0x560 [ 275.361476][ T8728] rxe_register_device+0x1c0/0x34c [ 275.362445][ T8728] rxe_add+0x938/0xe48 [ 275.363254][ T8728] rxe_net_add+0x7c/0xf0 [ 275.364107][ T8728] rxe_newlink+0x70/0xfc [ 275.364971][ T8728] nldev_newlink+0x430/0x50c [ 275.365982][ T8728] rdma_nl_rcv+0x4fc/0x828 [ 275.366920][ T8728] netlink_unicast+0x5fc/0x80c [ 275.367978][ T8728] netlink_sendmsg+0x6f0/0x9d8 [ 275.368907][ T8728] ____sys_sendmsg+0x588/0x90c [ 275.369880][ T8728] __sys_sendmsg+0x288/0x374 [ 275.370832][ T8728] __arm64_sys_sendmsg+0x80/0x94 [ 275.371855][ T8728] invoke_syscall+0x98/0x290 [ 275.372813][ T8728] el0_svc_common+0x13c/0x258 [ 275.373762][ T8728] do_el0_svc+0x5c/0x134 [ 275.374636][ T8728] el0_svc+0x58/0x12c [ 275.375451][ T8728] el0t_64_sync_handler+0x84/0xf0 [ 275.376504][ T8728] el0t_64_sync+0x18c/0x190 [ 275.450582][ T8731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1267'. [ 275.466130][ T8728] rdma_rxe: failed to add wg1 [ 275.614035][ T8740] FAULT_INJECTION: forcing a failure. [ 275.614035][ T8740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.616453][ T8740] CPU: 0 PID: 8740 Comm: syz.1.1271 Not tainted syzkaller #0 [ 275.618006][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 275.620229][ T8740] Call trace: [ 275.620948][ T8740] dump_backtrace+0x1c4/0x1f0 [ 275.622037][ T8740] show_stack+0x2c/0x3c [ 275.622917][ T8740] __dump_stack+0x30/0x40 [ 275.623839][ T8740] dump_stack_lvl+0xf4/0x15c [ 275.624828][ T8740] dump_stack+0x1c/0x5c [ 275.625713][ T8740] should_fail_ex+0x3cc/0x524 [ 275.626784][ T8740] should_fail+0x14/0x24 [ 275.627723][ T8740] should_fail_usercopy+0x20/0x30 [ 275.628824][ T8740] strncpy_from_user+0x48/0x59c [ 275.629824][ T8740] bpf_prog_load+0x17c/0x12c0 [ 275.630864][ T8740] __sys_bpf+0x494/0x660 [ 275.631766][ T8740] __arm64_sys_bpf+0x80/0x98 [ 275.632788][ T8740] invoke_syscall+0x98/0x290 [ 275.633717][ T8740] el0_svc_common+0x13c/0x258 [ 275.634687][ T8740] do_el0_svc+0x5c/0x134 [ 275.634872][ T8738] loop2: detected capacity change from 0 to 512 [ 275.635535][ T8740] el0_svc+0x58/0x12c [ 275.635561][ T8740] el0t_64_sync_handler+0x84/0xf0 [ 275.635576][ T8740] el0t_64_sync+0x18c/0x190 [ 275.744768][ T8738] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.1270: inode has both inline data and extents flags [ 275.748134][ T8738] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1270: couldn't read orphan inode 15 (err -117) [ 275.753151][ T8738] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 275.858390][ T4339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.861253][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 275.921048][ T8754] device batadv_slave_1 entered promiscuous mode [ 275.924014][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 275.924020][ T27] audit: type=1326 audit(275.910:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.4.1276" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 275.935296][ T27] audit: type=1326 audit(275.920:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.4.1276" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 275.966740][ T8753] device batadv_slave_1 left promiscuous mode [ 275.975784][ T27] audit: type=1326 audit(275.920:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.4.1276" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 276.002461][ T27] audit: type=1326 audit(275.920:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.4.1276" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 276.036418][ T27] audit: type=1326 audit(275.920:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.4.1276" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 276.051734][ T8759] device syzkaller0 entered promiscuous mode [ 276.077630][ T27] audit: type=1326 audit(275.920:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.4.1276" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 276.104402][ T27] audit: type=1326 audit(275.920:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.4.1276" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 276.127126][ T27] audit: type=1326 audit(275.920:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.4.1276" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=40 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 276.156417][ T27] audit: type=1326 audit(275.950:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.4.1276" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 276.199215][ T27] audit: type=1326 audit(275.950:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.4.1276" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8d379728 code=0x7ffc0000 [ 276.312599][ T8770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1281'. [ 276.515125][ T8783] capability: warning: `syz.0.1284' uses 32-bit capabilities (legacy support in use) [ 276.754936][ T8796] loop1: detected capacity change from 0 to 4096 [ 276.776156][ T8796] EXT4-fs: Ignoring removed orlov option [ 276.920285][ T4339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.924030][ T39] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.936379][ T8796] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 278.929154][ T8840] device batadv_slave_1 entered promiscuous mode [ 278.956046][ T8839] device batadv_slave_1 left promiscuous mode [ 279.013076][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.074873][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 279.257009][ T8855] netlink: 'syz.2.1303': attribute type 1 has an invalid length. [ 279.294824][ T8855] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.321573][ T8860] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1304'. [ 279.395580][ T8855] bond3: (slave geneve3): making interface the new active one [ 279.405301][ T8855] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 279.407112][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 279.458800][ T8863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.475680][ T8863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.907043][ T8875] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1309'. [ 279.962296][ T8876] FAULT_INJECTION: forcing a failure. [ 279.962296][ T8876] name failslab, interval 1, probability 0, space 0, times 0 [ 279.964898][ T8876] CPU: 0 PID: 8876 Comm: syz.1.1310 Not tainted syzkaller #0 [ 279.966490][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 279.966502][ T8876] Call trace: [ 279.966507][ T8876] dump_backtrace+0x1c4/0x1f0 [ 279.966524][ T8876] show_stack+0x2c/0x3c [ 279.966531][ T8876] __dump_stack+0x30/0x40 [ 279.966541][ T8876] dump_stack_lvl+0xf4/0x15c [ 279.966549][ T8876] dump_stack+0x1c/0x5c [ 279.966557][ T8876] should_fail_ex+0x3cc/0x524 [ 279.966565][ T8876] __should_failslab+0xc0/0x11c [ 279.966574][ T8876] should_failslab+0x10/0x28 [ 279.966582][ T8876] kmem_cache_alloc+0x88/0x310 [ 279.966590][ T8876] __kernfs_new_node+0xec/0x5fc [ 279.966597][ T8876] kernfs_new_node+0x120/0x230 [ 279.966602][ T8876] __kernfs_create_file+0x60/0x2e0 [ 279.966609][ T8876] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 279.966617][ T8876] internal_create_group+0x3e8/0xb24 [ 279.966625][ T8876] sysfs_create_groups+0x60/0x134 [ 279.966633][ T8876] device_add_attrs+0x17c/0x6f8 [ 279.984921][ T8876] device_add+0x5ac/0xe4c [ 279.985815][ T8876] netdev_register_kobject+0x170/0x2f4 [ 279.986921][ T8876] register_netdevice+0xf28/0x1650 [ 279.987945][ T8876] wg_newlink+0x3f4/0x684 [ 279.988811][ T8876] rtnl_newlink+0x10b4/0x1af0 [ 279.989680][ T8876] rtnetlink_rcv_msg+0x694/0xcc4 [ 279.990741][ T8876] netlink_rcv_skb+0x220/0x3ec [ 279.991828][ T8876] rtnetlink_rcv+0x28/0x38 [ 279.992755][ T8876] netlink_unicast+0x5fc/0x80c [ 279.993706][ T8876] netlink_sendmsg+0x6f0/0x9d8 [ 279.994677][ T8876] ____sys_sendmsg+0x588/0x90c [ 279.995643][ T8876] __sys_sendmsg+0x288/0x374 [ 279.996598][ T8876] __arm64_sys_sendmsg+0x80/0x94 [ 279.997612][ T8876] invoke_syscall+0x98/0x290 [ 279.998581][ T8876] el0_svc_common+0x13c/0x258 [ 279.999599][ T8876] do_el0_svc+0x5c/0x134 [ 280.000358][ T8876] el0_svc+0x58/0x12c [ 280.001119][ T8876] el0t_64_sync_handler+0x84/0xf0 [ 280.002128][ T8876] el0t_64_sync+0x18c/0x190 [ 280.090093][ T4339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.099037][ T8882] device batadv_slave_1 entered promiscuous mode [ 280.116403][ T8881] device batadv_slave_1 left promiscuous mode [ 280.255091][ T8891] device syzkaller0 entered promiscuous mode [ 281.607677][ T4332] Bluetooth: hci2: command 0x0406 tx timeout [ 282.091726][ T4744] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.700386][ T8898] loop2: detected capacity change from 0 to 512 [ 282.706700][ T8898] EXT4-fs: Ignoring removed bh option [ 282.713108][ T8898] EXT4-fs: Ignoring removed nobh option [ 282.714197][ T8898] ext4: Unknown parameter 'fowner>00000000000000000000' [ 282.770314][ T114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.259649][ T8910] FAULT_INJECTION: forcing a failure. [ 284.259649][ T8910] name fail_futex, interval 1, probability 0, space 0, times 0 [ 284.262247][ T8910] CPU: 0 PID: 8910 Comm: syz.3.1322 Not tainted syzkaller #0 [ 284.263847][ T8910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 284.266051][ T8910] Call trace: [ 284.266720][ T8910] dump_backtrace+0x1c4/0x1f0 [ 284.267813][ T8910] show_stack+0x2c/0x3c [ 284.268786][ T8910] __dump_stack+0x30/0x40 [ 284.269801][ T8910] dump_stack_lvl+0xf4/0x15c [ 284.270786][ T8910] dump_stack+0x1c/0x5c [ 284.271668][ T8910] should_fail_ex+0x3cc/0x524 [ 284.272674][ T8910] should_fail+0x14/0x24 [ 284.273637][ T8910] get_futex_key+0x18c/0xec0 [ 284.274717][ T8910] futex_wake+0x10c/0x458 [ 284.275707][ T8910] do_futex+0x2c4/0x340 [ 284.276580][ T8910] mm_release+0x190/0x274 [ 284.277492][ T8910] exit_mm_release+0x30/0x40 [ 284.278471][ T8910] exit_mm+0x50/0x290 [ 284.279368][ T8910] do_exit+0x4d0/0x19ac [ 284.280314][ T8910] do_group_exit+0x198/0x238 [ 284.281258][ T8910] get_signal+0x11f4/0x133c [ 284.282223][ T8910] do_notify_resume+0x364/0x2c84 [ 284.283244][ T8910] el0_svc+0x9c/0x12c [ 284.284042][ T8910] el0t_64_sync_handler+0x84/0xf0 [ 284.285117][ T8910] el0t_64_sync+0x18c/0x190 [ 284.353663][ T8916] loop3: detected capacity change from 0 to 2048 [ 284.363084][ T8916] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.379668][ T8916] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 284.383728][ T8916] EXT4-fs (loop3): shut down requested (2) [ 284.396072][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 287.848083][ T1583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.768486][ T114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.379022][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.382696][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.386850][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.353726][ T8952] FAULT_INJECTION: forcing a failure. [ 291.353726][ T8952] name failslab, interval 1, probability 0, space 0, times 0 [ 291.584929][ T8952] CPU: 0 PID: 8952 Comm: syz.0.1338 Not tainted syzkaller #0 [ 291.586616][ T8952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 291.588905][ T8952] Call trace: [ 291.589632][ T8952] dump_backtrace+0x1c4/0x1f0 [ 291.590542][ T8952] show_stack+0x2c/0x3c [ 291.591455][ T8952] __dump_stack+0x30/0x40 [ 291.592393][ T8952] dump_stack_lvl+0xf4/0x15c [ 291.593335][ T8952] dump_stack+0x1c/0x5c [ 291.594184][ T8952] should_fail_ex+0x3cc/0x524 [ 291.595179][ T8952] __should_failslab+0xc0/0x11c [ 291.596222][ T8952] should_failslab+0x10/0x28 [ 291.597198][ T8952] __kmem_cache_alloc_node+0x7c/0x318 [ 291.598280][ T8952] kmalloc_trace+0x48/0x94 [ 291.599168][ T8952] raw_ioctl+0x1594/0x326c [ 291.600027][ T8952] __arm64_sys_ioctl+0x14c/0x1c8 [ 291.601035][ T8952] invoke_syscall+0x98/0x290 [ 291.601972][ T8952] el0_svc_common+0x13c/0x258 [ 291.602920][ T8952] do_el0_svc+0x5c/0x134 [ 291.603763][ T8952] el0_svc+0x58/0x12c [ 291.604573][ T8952] el0t_64_sync_handler+0x84/0xf0 [ 291.605639][ T8952] el0t_64_sync+0x18c/0x190 [ 291.734765][ T8957] device syzkaller0 entered promiscuous mode [ 291.744924][ T8957] tipc: Enabled bearer , priority 0 [ 291.756461][ T8958] device syzkaller0 entered promiscuous mode [ 291.762891][ T8957] tipc: Resetting bearer [ 292.052097][ T8949] process 'syz.1.1337' launched '/dev/fd/5/' with NULL argv: empty string added [ 292.058427][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.775868][ T4410] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.779381][ T8957] tipc: Disabling bearer [ 292.790999][ T4599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.840314][ T8963] loop1: detected capacity change from 0 to 512 [ 292.881736][ T8963] EXT4-fs error (device loop1): ext4_orphan_get:1409: inode #15: comm syz.1.1342: inode has both inline data and extents flags [ 292.884598][ T8963] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.1342: couldn't read orphan inode 15 (err -117) [ 292.900097][ T8963] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 292.963717][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 293.079153][ T8978] bond0: (slave bond_slave_1): Releasing backup interface [ 293.129164][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.132795][ T8946] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.352038][ T8983] netlink: 'syz.2.1360': attribute type 1 has an invalid length. [ 293.394596][ T8983] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.986474][ T8994] FAULT_INJECTION: forcing a failure. [ 293.986474][ T8994] name failslab, interval 1, probability 0, space 0, times 0 [ 293.995049][ T8994] CPU: 1 PID: 8994 Comm: syz.3.1353 Not tainted syzkaller #0 [ 293.996791][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 293.999202][ T8994] Call trace: [ 293.999977][ T8994] dump_backtrace+0x1c4/0x1f0 [ 294.001084][ T8994] show_stack+0x2c/0x3c [ 294.002079][ T8994] __dump_stack+0x30/0x40 [ 294.003062][ T8994] dump_stack_lvl+0xf4/0x15c [ 294.004102][ T8994] dump_stack+0x1c/0x5c [ 294.004992][ T8994] should_fail_ex+0x3cc/0x524 [ 294.006012][ T8994] __should_failslab+0xc0/0x11c [ 294.007064][ T8994] should_failslab+0x10/0x28 [ 294.008051][ T8994] __kmem_cache_alloc_node+0x7c/0x318 [ 294.009169][ T8994] __kmalloc_node_track_caller+0xb8/0x174 [ 294.010342][ T8994] kstrdup_const+0x90/0xdc [ 294.011230][ T8994] kvasprintf_const+0x120/0x2e4 [ 294.012247][ T8994] kobject_set_name_vargs+0xd8/0x1c8 [ 294.013341][ T8994] kobject_init_and_add+0xec/0x194 [ 294.014312][ T8994] bus_add_driver+0x1a8/0x518 [ 294.015262][ T8994] driver_register+0x200/0x37c [ 294.016229][ T8994] usb_gadget_register_driver_owner+0xf0/0x25c [ 294.017479][ T8994] raw_ioctl+0x1014/0x326c [ 294.018375][ T8994] __arm64_sys_ioctl+0x14c/0x1c8 [ 294.019376][ T8994] invoke_syscall+0x98/0x290 [ 294.020355][ T8994] el0_svc_common+0x13c/0x258 [ 294.021340][ T8994] do_el0_svc+0x5c/0x134 [ 294.022205][ T8994] el0_svc+0x58/0x12c [ 294.023021][ T8994] el0t_64_sync_handler+0x84/0xf0 [ 294.024110][ T8994] el0t_64_sync+0x18c/0x190 [ 294.040154][ T8994] kobject: can not set name properly! [ 294.041205][ T8994] UDC core: USB Raw Gadget: driver registration failed: -12 [ 294.042704][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 295.339393][ T9021] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 295.363883][ T9021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 295.840179][ T9026] bond0: (slave bond_slave_1): Releasing backup interface [ 296.167617][ T4332] Bluetooth: hci5: command 0x1003 tx timeout [ 296.169764][ T4338] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 298.167827][ T7168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.458876][ T4411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.467405][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.489553][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.837488][ T114] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 302.135212][ T9002] slcan: can't register candev [ 302.147607][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 302.149988][ T114] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.151908][ T114] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 302.251227][ T114] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.262784][ T114] usb 1-1: config 0 descriptor?? [ 302.662807][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.902163][ T9059] FAULT_INJECTION: forcing a failure. [ 302.902163][ T9059] name failslab, interval 1, probability 0, space 0, times 0 [ 302.905601][ T9059] CPU: 0 PID: 9059 Comm: syz.1.1376 Not tainted syzkaller #0 [ 302.907160][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 302.909289][ T9059] Call trace: [ 302.909983][ T9059] dump_backtrace+0x1c4/0x1f0 [ 302.910980][ T9059] show_stack+0x2c/0x3c [ 302.911873][ T9059] __dump_stack+0x30/0x40 [ 302.912792][ T9059] dump_stack_lvl+0xf4/0x15c [ 302.913781][ T9059] dump_stack+0x1c/0x5c [ 302.914632][ T9059] should_fail_ex+0x3cc/0x524 [ 302.915575][ T9059] __should_failslab+0xc0/0x11c [ 302.916573][ T9059] should_failslab+0x10/0x28 [ 302.917499][ T9059] kmem_cache_alloc_node+0x8c/0x344 [ 302.918561][ T9059] blk_alloc_queue+0x70/0x500 [ 302.919576][ T9059] __blk_alloc_disk+0x2c/0xb8 [ 302.920565][ T9059] md_alloc+0x4c4/0xb3c [ 302.921566][ T9059] add_named_array+0x210/0x3f0 [ 302.922552][ T9059] param_attr_store+0x1cc/0x2ac [ 302.923561][ T9059] module_attr_store+0x6c/0x94 [ 302.924582][ T9059] sysfs_kf_write+0x1f8/0x274 [ 302.925568][ T9059] kernfs_fop_write_iter+0x390/0x4b4 [ 302.926661][ T9059] vfs_write+0x3c8/0x7c8 [ 302.927551][ T9059] ksys_write+0x12c/0x228 [ 302.928424][ T9059] __arm64_sys_write+0x7c/0x90 [ 302.929391][ T9059] invoke_syscall+0x98/0x290 [ 302.930323][ T9059] el0_svc_common+0x13c/0x258 [ 302.931303][ T9059] do_el0_svc+0x5c/0x134 [ 302.932192][ T9059] el0_svc+0x58/0x12c [ 302.933014][ T9059] el0t_64_sync_handler+0x84/0xf0 [ 302.934068][ T9059] el0t_64_sync+0x18c/0x190 [ 304.364005][ T114] usbhid 1-1:0.0: can't add hid device: -71 [ 304.365980][ T114] usbhid: probe of 1-1:0.0 failed with error -71 [ 304.376057][ T114] usb 1-1: USB disconnect, device number 4 [ 304.388129][ T7168] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.445045][ T9073] loop4: detected capacity change from 0 to 2048 [ 304.486613][ T9073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 304.519706][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 304.788019][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'. [ 305.298615][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.596535][ T9106] loop8: detected capacity change from 0 to 7 [ 305.600728][ T9035] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 305.602614][ T9035] loop8: partition table partially beyond EOD, truncated [ 305.604607][ T9035] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 305.610967][ T9035] loop8: p2 start 121280928 is beyond EOD, truncated [ 305.615482][ T9106] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 305.617204][ T9106] loop8: partition table partially beyond EOD, truncated [ 305.619363][ T9106] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 305.624122][ T4411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.661160][ T9106] loop8: p2 start 121280928 is beyond EOD, truncated [ 305.761738][ T9035] udevd[9035]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 305.867340][ T9035] udevd[9035]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 306.097841][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1397'. [ 306.291612][ T9124] loop1: detected capacity change from 0 to 4096 [ 306.307195][ T9124] EXT4-fs: Ignoring removed orlov option [ 306.333270][ T9124] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 307.047906][ T4604] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.447693][ T4599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.888021][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.807813][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.917325][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.926369][ T4411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.996411][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 314.594281][ T9165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1409'. [ 314.910622][ T4599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.054847][ T9182] loop8: detected capacity change from 0 to 7 [ 315.063101][ T9143] Dev loop8: unable to read RDB block 7 [ 315.064824][ T9143] loop8: unable to read partition table [ 315.066468][ T9143] loop8: partition table beyond EOD, truncated [ 315.283072][ T9174] loop1: detected capacity change from 0 to 8192 [ 316.366745][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1421'. [ 316.389121][ T9194] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.391699][ T9194] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.567524][ T48] Bluetooth: hci2: command 0x0405 tx timeout [ 316.648364][ T4706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.357798][ T4411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.374836][ T9182] Dev loop8: unable to read RDB block 7 [ 317.375998][ T9182] loop8: unable to read partition table [ 317.377116][ T9182] loop8: partition table beyond EOD, truncated [ 317.384203][ T9182] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 317.411734][ T9213] tipc: Started in network mode [ 317.412851][ T9213] tipc: Node identity b2e189b838a8, cluster identity 4711 [ 317.414424][ T9213] tipc: Enabled bearer , priority 0 [ 317.440716][ T9207] tipc: Disabling bearer [ 317.553464][ T9231] tipc: Enabling of bearer rejected, failed to enable media [ 317.563438][ T9228] loop3: detected capacity change from 0 to 2048 [ 317.687730][ T9228] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 317.718393][ T4330] EXT4-fs (loop3): unmounting filesystem. [ 317.948446][ T9245] loop2: detected capacity change from 0 to 8192 [ 318.568162][ T1583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.571267][ T114] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 318.586788][ T4411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.702551][ T9281] FAULT_INJECTION: forcing a failure. [ 318.702551][ T9281] name failslab, interval 1, probability 0, space 0, times 0 [ 318.714707][ T9281] CPU: 0 PID: 9281 Comm: syz.1.1438 Not tainted syzkaller #0 [ 318.716086][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 318.718174][ T9281] Call trace: [ 318.718922][ T9281] dump_backtrace+0x1c4/0x1f0 [ 318.719866][ T9281] show_stack+0x2c/0x3c [ 318.720692][ T9281] __dump_stack+0x30/0x40 [ 318.721610][ T9281] dump_stack_lvl+0xf4/0x15c [ 318.722604][ T9281] dump_stack+0x1c/0x5c [ 318.723433][ T9281] should_fail_ex+0x3cc/0x524 [ 318.724372][ T9281] __should_failslab+0xc0/0x11c [ 318.725317][ T9281] should_failslab+0x10/0x28 [ 318.726218][ T9281] __kmem_cache_alloc_node+0x7c/0x318 [ 318.727367][ T9281] __kmalloc+0xc4/0x180 [ 318.728228][ T9281] tomoyo_realpath_from_path+0xc4/0x508 [ 318.729424][ T9281] tomoyo_path_number_perm+0x1c4/0x540 [ 318.730605][ T9281] tomoyo_file_ioctl+0x2c/0x3c [ 318.731561][ T9281] security_file_ioctl+0x80/0xbc [ 318.732589][ T9281] __arm64_sys_ioctl+0xa8/0x1c8 [ 318.733613][ T9281] invoke_syscall+0x98/0x290 [ 318.734605][ T9281] el0_svc_common+0x13c/0x258 [ 318.735536][ T9281] do_el0_svc+0x5c/0x134 [ 318.736414][ T9281] el0_svc+0x58/0x12c [ 318.737248][ T9281] el0t_64_sync_handler+0x84/0xf0 [ 318.738251][ T9281] el0t_64_sync+0x18c/0x190 [ 318.768877][ T114] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.771190][ T114] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 318.773093][ T114] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.782174][ T114] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 318.783990][ T114] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 318.785604][ T114] usb 1-1: Product: syz [ 318.806813][ T114] usb 1-1: Manufacturer: syz [ 318.812950][ T9268] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 318.822152][ T114] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 318.845303][ T114] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 318.887564][ T9281] ERROR: Out of memory at tomoyo_realpath_from_path. [ 318.890593][ T9281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.893322][ T9281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.022874][ T4410] usb 1-1: USB disconnect, device number 5 [ 319.026850][ T4410] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 319.030070][ T4410] garmin_gps 1-1:1.0: device disconnected [ 319.332268][ T9306] loop2: detected capacity change from 0 to 2048 [ 319.381244][ T9306] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 319.424995][ T4337] EXT4-fs (loop2): unmounting filesystem. [ 319.563227][ T9317] block device autoloading is deprecated and will be removed. [ 319.608680][ T4411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.007961][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.499537][ T14] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.594050][ T9376] FAULT_INJECTION: forcing a failure. [ 320.594050][ T9376] name failslab, interval 1, probability 0, space 0, times 0 [ 320.596638][ T9376] CPU: 0 PID: 9376 Comm: syz.2.1465 Not tainted syzkaller #0 [ 320.598254][ T9376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 320.600551][ T9376] Call trace: [ 320.601300][ T9376] dump_backtrace+0x1c4/0x1f0 [ 320.602356][ T9376] show_stack+0x2c/0x3c [ 320.603253][ T9376] __dump_stack+0x30/0x40 [ 320.604223][ T9376] dump_stack_lvl+0xf4/0x15c [ 320.605262][ T9376] dump_stack+0x1c/0x5c [ 320.606186][ T9376] should_fail_ex+0x3cc/0x524 [ 320.607179][ T9376] __should_failslab+0xc0/0x11c [ 320.608157][ T9376] should_failslab+0x10/0x28 [ 320.609031][ T9376] __kmem_cache_alloc_node+0x7c/0x318 [ 320.610124][ T9376] __kmalloc+0xc4/0x180 [ 320.611003][ T9376] tomoyo_realpath_from_path+0xc4/0x508 [ 320.612055][ T9376] tomoyo_path_number_perm+0x1c4/0x540 [ 320.613160][ T9376] tomoyo_file_ioctl+0x2c/0x3c [ 320.614105][ T9376] security_file_ioctl+0x80/0xbc [ 320.615072][ T9376] __arm64_sys_ioctl+0xa8/0x1c8 [ 320.616040][ T9376] invoke_syscall+0x98/0x290 [ 320.617013][ T9376] el0_svc_common+0x13c/0x258 [ 320.617945][ T9376] do_el0_svc+0x5c/0x134 [ 320.618803][ T9376] el0_svc+0x58/0x12c [ 320.619658][ T9376] el0t_64_sync_handler+0x84/0xf0 [ 320.620652][ T9376] el0t_64_sync+0x18c/0x190 [ 320.677534][ T9376] ERROR: Out of memory at tomoyo_realpath_from_path. [ 320.691239][ T9376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.746334][ T9376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.810925][ T9384] [ 320.811507][ T9384] ==================================== [ 320.815439][ T9384] WARNING: syz.4.1468/9384 still has locks held! [ 320.835997][ T9384] syzkaller #0 Not tainted [ 320.840206][ T9384] ------------------------------------ [ 320.844975][ T9384] 1 lock held by syz.4.1468/9384: [ 320.846815][ T9384] #0: ffff0000d1770d80 (&wdev->mtx){+.+.}-{3:3}, at: cfg80211_wext_siwgenie+0xc8/0x370 [ 320.849959][ T9384] [ 320.849959][ T9384] stack backtrace: [ 320.851414][ T9384] CPU: 1 PID: 9384 Comm: syz.4.1468 Not tainted syzkaller #0 [ 320.852886][ T9384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 320.855026][ T9384] Call trace: [ 320.855722][ T9384] dump_backtrace+0x1c4/0x1f0 [ 320.856660][ T9384] show_stack+0x2c/0x3c [ 320.857496][ T9384] __dump_stack+0x30/0x40 [ 320.858404][ T9384] dump_stack_lvl+0xf4/0x15c [ 320.859296][ T9384] dump_stack+0x1c/0x5c [ 320.860180][ T9384] print_held_locks_bug+0xb8/0x100 [ 320.861236][ T9384] debug_check_no_locks_held+0x5c/0x74 [ 320.862340][ T9384] do_exit+0x1114/0x19ac [ 320.863210][ T9384] do_group_exit+0x198/0x238 [ 320.864153][ T9384] get_signal+0x11f4/0x133c [ 320.865106][ T9384] do_notify_resume+0x364/0x2c84 [ 320.866161][ T9384] el0_svc+0x9c/0x12c [ 320.866978][ T9384] el0t_64_sync_handler+0x84/0xf0 [ 320.867985][ T9384] el0t_64_sync+0x18c/0x190 [ 321.048161][ T4411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.127898][ T4339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.767922][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.088226][ T4411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.129842][ T4339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.607664][ T4604] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.167985][ T4411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.208157][ T4339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.210979][ T4604] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.257902][ T4339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.889826][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.288209][ T4411] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.172840][ T4339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.328784][ T4339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.807806][ T1583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.368191][ T4339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.407871][ T4339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.410826][ T1583] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.730411][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.731789][ T2065] ieee802154 phy1 wpan1: encryption failed: -22