last executing test programs: 2m46.580209463s ago: executing program 4 (id=1142): r0 = fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@jqfmt_vfsv1}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000000c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r1 = socket$l2tp(0x2, 0x2, 0x73) fstat(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r2, 0x0) lsetxattr$security_capability(&(0x7f0000000640)='./file1\x00', &(0x7f0000000680), &(0x7f00000006c0)=@v2={0x2000000, [{0xfffffff9, 0xf3fe}, {0x2, 0x401}]}, 0x14, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000700)={0x2, 0x1, @local}, 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x24000000) r4 = fsmount(r0, 0x1, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000199c0)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2m46.495259385s ago: executing program 4 (id=1143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c00000002060101000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3100000000200007800500030017d400000c0001800800014000000000080006400000000405000500020000000500010006"], 0x6c}}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000884) 2m46.459676776s ago: executing program 4 (id=1144): setns(0xc9, 0x0) r0 = socket(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000000)=@generic={0x1f, "ffff0300"}, 0x6) write(r0, &(0x7f0000000080)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r1 = socket(0x1f, 0x5, 0x8) listen(r1, 0x3) setsockopt(r1, 0x112, 0x11, 0x0, 0x0) 2m46.439846286s ago: executing program 4 (id=1146): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000060034503003000640000ac019078ffffffff0a0101020c"], 0x34) 2m46.203375352s ago: executing program 4 (id=1156): setns(0xc9, 0x0) r0 = socket(0x1f, 0x3, 0x1) bind(r0, &(0x7f0000000000)=@generic={0x1f, "ffff0300"}, 0x6) write(r0, &(0x7f0000000080)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) r1 = socket(0x1f, 0x5, 0x8) listen(r1, 0x3) setsockopt(r1, 0x112, 0x11, 0x0, 0x0) 2m46.183471623s ago: executing program 4 (id=1157): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000600)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@noquota}]}, 0xfd, 0x27a, &(0x7f0000000900)="$eJzs3T9oM2UcB/DfXS5q+gZ51UUQ/4CIvBZC3QQd6iQUpBQRQYWKiJO0Qm1xa5xcHHT2T0FwKeJmu4pLcVEEp2o71EXQ4mBx0CGSXqJnm9aapLmX3ucD4f4899zzXOn3uWvJ3QVQWdcjYjYiahExHRH1iEiKGzyQf673FjcaO4sRnc4zvybH2+XLuX69axHRjojHIrJ+2drWCwe/7z718Dur9Yc+2Xq+ManjKzo82H/66MP5tz+fe3Ttm+9+nk9iNpq9suJxjFMyYF2WRNx5GY3dJJKs7B5wEQtvfvZ9N/d3RcSDx/mvR9qL7Lsrt3xZj0c+OKvue798e88k+wqMX6dT754D2x2gctKIaEaStiIin0/TVpZfw/9Qm0pfW155Y/rV5dWlV8oeqYAxudH7E2372on8/1RL01ar7O4BF7O3PUytZsT+swube935o1pv5dTfxemYOgeUrfjf9nvzSTf/0y+t34hi/oFKkH+oLvmH6pJ/uAKGzK78Q3WNkv/bLqlPwLgM+ub5P5z/4Qqr92faA4vlH6pL/uGK+vj8a/+Qf6i0Yv4BgGrp3Fr2HchAWcoefwAAAAAAAAAAAAAAAAAAgNM2GjuL/c+k2vzq/YjDJyMiG9R+rfcS0vxp41O/JZEV6iZ5tXM98dH55S/eP1L3R/bp2O6+bgxV6/Yfx9X+cL6+73L2+9a/F8/84awvRbS7G89k2enfv2Tkl+De8R/l9ZdHbOB/OvlUwMefm2z7J/25WW77c7sRX3THn5lB408adx9PB48/zeIjlof0+h8j7gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICJ+SsAAP//nPdudQ==") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='inet 2', 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800b000100626174616476"], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) 2m36.147223925s ago: executing program 1 (id=1310): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0x3, 'lc\x00', 0xb, 0x4, 0x8}, 0x2c) socket$inet6(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000200)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42890}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f00000000c0)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f0000000140)={&(0x7f0000000180)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2m36.145624405s ago: executing program 1 (id=1311): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000540)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) write(r1, &(0x7f0000000680)='PASV\r\n', 0x6) r2 = accept4(r0, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000800)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000880)={0x2, 0x1388, @loopback}, 0x10) 2m35.290790846s ago: executing program 1 (id=1325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add', 0x3) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0)='add 3-', 0x6) write(r0, &(0x7f0000000400)='add 4-', 0x6) write(r0, &(0x7f0000000440)='add 5-', 0x6) write(r0, &(0x7f0000000480)='add 6-', 0x6) write(r0, &(0x7f00000004c0)='add 7-', 0x6) 2m35.267881857s ago: executing program 1 (id=1326): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='add 1', 0x5) write(r0, &(0x7f0000000180)='add 2', 0x5) write(r0, &(0x7f00000001c0)='add 3', 0x5) write(r0, &(0x7f0000000200)='add 4', 0x5) write(r0, &(0x7f0000000240)='add 5', 0x5) write(r0, &(0x7f0000000280)='add 6', 0x5) write(r0, &(0x7f00000002c0)='add 7', 0x5) write(r0, &(0x7f0000000300)='add 8', 0x5) write(r0, &(0x7f0000000340)='add 1-', 0x6) write(r0, &(0x7f0000000380)='add 2-', 0x6) write(r0, &(0x7f00000003c0), 0x0) write(r0, 0x0, 0x0) 2m35.245005048s ago: executing program 1 (id=1327): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000680)}) 2m35.176454489s ago: executing program 1 (id=1328): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x0) write(r1, &(0x7f0000000280)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='3', 0x1d) 2m30.967964655s ago: executing program 32 (id=1157): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000600)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@noquota}]}, 0xfd, 0x27a, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000380)='./nfsd\x00', &(0x7f00000003c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='inet 2', 0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502000000000000140012800b000100626174616476"], 0x3c}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) 2m20.087028739s ago: executing program 33 (id=1328): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='-2 -3\n', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x0) write(r1, &(0x7f0000000280)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='3', 0x1d) 11.037814732s ago: executing program 5 (id=3844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r5, {0xb, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xa, 0x1, 0xe, 0x8}, 0x27}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x20000080) close(r3) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000840), 0x56) sendmsg$kcm(r6, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0x0, r5, 0x10042}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f00000009c0)="88db0b9ef1cafdab", 0x8}, {&(0x7f0000000a00)="f8dbb89bfc5f187cca4335143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 10.834927818s ago: executing program 3 (id=3848): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='activ', 0x5) 10.797846069s ago: executing program 3 (id=3850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x6) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc0000000500000000060015000200000014001680100008800c000380050001"], 0x38}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfbaaf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x17b) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/quota_mem_pressure_us\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='100', 0x3) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/damon_reclaim/parameters/skip_anon\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/damon_reclaim/parameters/enabled\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='Y', 0x1) 10.141078795s ago: executing program 2 (id=3853): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="01000000ff"], 0x38}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.908391931s ago: executing program 3 (id=3854): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="40000000680001041f00000000000000000000000000000006000300010000000c000200010000000000000014000c8006"], 0x40}}, 0x0) 2.600352745s ago: executing program 5 (id=3857): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000100)='GPL\x00', 0xa}, 0x94) r0 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x40480923, &(0x7f00000004c0)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r2, 0x40140921, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000540)="0100000001000000010000000100000006") ioctl(r2, 0x40140921, &(0x7f0000000580)="0200000001000000020000000200000006") ioctl(r2, 0x400c0930, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00'], 0x30}], 0x1, 0x0) 2.548355136s ago: executing program 3 (id=3858): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) write(r0, &(0x7f0000000740), 0x0) 2.548028036s ago: executing program 0 (id=3859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d00)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bind$inet(r1, &(0x7f0000000e00)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000e40)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000e80)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03e57e518e4d"}}}}, 0x3e) 2.546442736s ago: executing program 2 (id=3860): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='activ', 0x5) 2.507380917s ago: executing program 5 (id=3862): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800800, &(0x7f0000000700)={[{@debug}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@prjquota}, {@jqfmt_vfsv0}, {@noload}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}, {@inlinecrypt}, {@abort}, {@data_err_abort}, {@test_dummy_encryption}, {@sb={'sb', 0x3d, 0x2}}]}, 0x2, 0x24f, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f0000000c00)='Y', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000c80)='10000\x00', 0x5) close(r1) write(0xffffffffffffffff, &(0x7f0000000cc0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./debug/failslab/probability\x00', 0x2, 0x0) write(r2, &(0x7f0000000d40)='5\x00', 0x1) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000000dc0)='1', 0x1) syz_mount_image$f2fs(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f00000010c0)="$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") syz_mount_image$ocfs2(&(0x7f0000006680), &(0x7f00000066c0)='./file1\x00', 0x10008c0, &(0x7f0000006700)=ANY=[@ANYBLOB='intz,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=0000\t\x0000001613114240,\x00'], 0x1, 0x4431, &(0x7f00000067c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000ac00)={0x1, 0x4, &(0x7f000000acc0)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x61}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f000000ad00)='GPL\x00', 0x5, 0xfd90, &(0x7f000000ad40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000000ae40), 0x0, 0x10, &(0x7f000000ae80), 0xffffffffffffffb2}, 0x48) openat(0xffffffffffffff9c, &(0x7f000000aec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8) syz_usb_connect$printer(0x0, 0x36, &(0x7f000000afc0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, 0x0}) 2.479103927s ago: executing program 3 (id=3863): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') syz_open_dev$sndmidi(&(0x7f0000000340), 0x2, 0x141102) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000440)='/dev/comedi4\x00', 0x109040, 0x0) pselect6(0x40, &(0x7f0000000500)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x20000007}, 0x0, &(0x7f0000000540)={0x3ff, 0x0, 0x200000000000000, 0x1, 0x5, 0x0, 0x1, 0x5}, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05"], 0x38}, 0x1, 0x0, 0x0, 0x2008010}, 0x2400c804) 2.457408578s ago: executing program 2 (id=3864): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$inet6(0xa, 0x80002, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) get_robust_list(r0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) 2.456102228s ago: executing program 6 (id=3865): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x0, 0xa, 0x148, 0x0, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'batadv_slave_1\x00', {0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'pimreg1\x00', 'veth0_virt_wifi\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x3}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 2.328771671s ago: executing program 3 (id=3866): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2ac65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r2, 0x806c4120, &(0x7f0000000140)) 2.325266691s ago: executing program 6 (id=3867): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800800, &(0x7f0000000700)={[{@debug}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@prjquota}, {@jqfmt_vfsv0}, {@noload}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}, {@inlinecrypt}, {@abort}, {@data_err_abort}, {@test_dummy_encryption}, {@sb={'sb', 0x3d, 0x2}}]}, 0x2, 0x24f, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./debug\x00', &(0x7f0000000b40)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000b80), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000c00)='Y', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000000c80)='100', 0x3) close(r2) write(0xffffffffffffffff, &(0x7f0000000cc0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000d40)='5\x00', 0x1) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f0000000dc0)='1', 0x1) syz_mount_image$f2fs(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000010c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000ac00)={0x1, 0x4, &(0x7f000000acc0)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x61}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f000000ad00)='GPL\x00', 0x5, 0xc3, &(0x7f000000ad40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000000ae40), 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000aec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8) syz_usb_connect$printer(0x0, 0x36, &(0x7f000000afc0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000600)) 2.023765169s ago: executing program 0 (id=3868): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x0, 0x401d030, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000005c0)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000600)={0x0, 0x9d4, 0x1, 0x2, 0x31e, 0x0, r2}, 0x0, 0x4, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004801, 0x0, 0x0) r3 = syz_open_dev$video4linux(0x0, 0xbdd, 0x8100) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) write$tun(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="0a0005000180c2000002ffffffffffff86dd694fd2cd00083a00fe80000000000000000000000000002dff0200000000359b7d94c8b9c37da6000000000000000000018f00907801000000ab69a2a519e92df15584e2e8597132"], 0x42) ioctl$VIDIOC_G_STD(r3, 0x80085617, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) syslog(0x4, 0x0, 0x1000000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b551d77f9565b777f41282e", 0xd8}], 0x1}, 0x10) sendmmsg$inet(r6, &(0x7f0000000400)=[{{&(0x7f0000000440)={0x2, 0x1, @rand_addr=0x3}, 0x10, &(0x7f0000000480)=[{&(0x7f00000006c0)="000014ea6d80a6eed726d9894484ffc128b9a16310e6b43777ad7a", 0x1b}], 0x1}}], 0x1, 0x48000) 1.943171541s ago: executing program 0 (id=3869): bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000580), 0x651, 0x0) recvmmsg(r0, &(0x7f00000005c0), 0x4000087, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000380)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 1.547487561s ago: executing program 2 (id=3870): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='t', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r1, &(0x7f00000005c0)='ipv', 0x3) 1.491115523s ago: executing program 2 (id=3871): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0xa4, 0x0, &(0x7f0000001580)}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) 1.056776094s ago: executing program 5 (id=3872): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000100)='GPL\x00', 0xa, 0xffad, &(0x7f0000000140)=""/133}, 0x94) r0 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x40480923, &(0x7f00000004c0)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r2, 0x40140921, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000540)="0100000001000000010000000100000006") ioctl(r2, 0x40140921, &(0x7f0000000580)="0200000001000000020000000200000006") ioctl(r2, 0x400c0930, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00'], 0x30}], 0x1, 0x0) 996.005204ms ago: executing program 6 (id=3873): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) write(r0, &(0x7f0000000740), 0x0) 931.805266ms ago: executing program 5 (id=3874): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000073797a3000"/155], 0x135) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000302000010"], 0x0) write$UHID_INPUT2(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='\f\x00\x00\x00g\x00!'], 0xc) 928.517197ms ago: executing program 6 (id=3875): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x2, 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2f, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x1b, 0x0, @wg=@data={0x4, 0xffffffff, 0x1, "d32829"}}}}, 0x3d) 765.292541ms ago: executing program 6 (id=3876): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000005400010026bd70010000000007000000", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="01000000ff"], 0x38}}, 0x4040) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 719.932542ms ago: executing program 6 (id=3877): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0xffffbfff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r4, {0xb, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xfb55}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xa, 0x1, 0xe, 0x8}, 0x27}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x814}, 0x20000080) close(r2) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000840), 0x56) sendmsg$kcm(r5, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0x0, r4, 0x10042}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f00000009c0)="88db0b9ef1cafdab", 0x8}, {&(0x7f0000000a00)="f8dbb89bfc5f187cca4335143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 624.699974ms ago: executing program 2 (id=3878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000d00)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000e00)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000e40)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000e80)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03e57e518e4d"}}}}, 0x3e) 386.27236ms ago: executing program 5 (id=3879): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x0, 0x401d030, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) syz_ublk_setup_queues(r1, 0x0, &(0x7f0000000600)={0x0, 0x9d4, 0x1, 0x2, 0x31e, 0x0, r1}, 0x0, 0x4, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004801, 0x0, 0x0) r2 = syz_open_dev$video4linux(0x0, 0xbdd, 0x8100) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) write$tun(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="0a0005000180c2000002ffffffffffff86dd694fd2cd00083a00fe80000000000000000000000000002dff0200000000359b7d94c8b9c37da6000000000000000000018f00907801000000ab69a2a519e92df15584e2e8597132"], 0x42) ioctl$VIDIOC_G_STD(r2, 0x80085617, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) syslog(0x4, 0x0, 0x1000000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b551d77f9565b777f41282e", 0xd8}], 0x1}, 0x10) sendmmsg$inet(r5, &(0x7f0000000400)=[{{&(0x7f0000000440)={0x2, 0x1, @rand_addr=0x3}, 0x10, &(0x7f0000000480)=[{&(0x7f00000006c0)="000014ea6d80a6eed726d9894484ffc128b9a16310e6b43777ad7a", 0x1b}], 0x1}}], 0x1, 0x48000) 57.027638ms ago: executing program 0 (id=3880): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='activ', 0x5) 32.638189ms ago: executing program 0 (id=3881): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='t', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r1, &(0x7f00000005c0)='ipv', 0x3) 0s ago: executing program 0 (id=3882): ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800800, &(0x7f0000000700)={[{@debug}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@prjquota}, {@jqfmt_vfsv0}, {@noload}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}, {@inlinecrypt}, {@abort}, {@data_err_abort}, {@test_dummy_encryption}, {@sb={'sb', 0x3d, 0x2}}]}, 0x2, 0x24f, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./debug\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r0, &(0x7f0000000c00)='Y', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000000c80)='10000\x00', 0x5) close(r1) write(0xffffffffffffffff, &(0x7f0000000cc0), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./debug/failslab/probability\x00', 0x2, 0x0) write(r2, &(0x7f0000000d40)='5\x00', 0x1) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000000dc0)='1', 0x1) syz_mount_image$f2fs(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000010c0)="$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") syz_mount_image$ocfs2(&(0x7f0000006680), &(0x7f00000066c0)='./file1\x00', 0x10008c0, &(0x7f0000006700)=ANY=[@ANYBLOB='intz,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=0000\t\x0000001613114240,\x00'], 0x1, 0x4431, &(0x7f00000067c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000ac00)={0x1, 0x4, &(0x7f000000acc0)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x61}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f000000ad00)='GPL\x00', 0x5, 0xfd90, &(0x7f000000ad40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000000ae40), 0x0, 0x10, &(0x7f000000ae80), 0xffffffffffffffb2}, 0x48) openat(0xffffffffffffff9c, &(0x7f000000aec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8) syz_usb_connect$printer(0x0, 0x36, &(0x7f000000afc0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x280}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, 0x0}) kernel console output (not intermixed with test programs): c [ 175.827517][T12022] el0t_64_sync_handler+0x84/0xf0 [ 175.828398][T12022] el0t_64_sync+0x18c/0x190 [ 175.832009][T12022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.833856][T12022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.836066][T12022] FAULT_INJECTION: forcing a failure. [ 175.836066][T12022] name failslab, interval 1, probability 5, space 0, times 9952 [ 175.838487][T12022] CPU: 0 PID: 12022 Comm: syz.5.3136 Not tainted syzkaller #0 [ 175.839814][T12022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 175.841773][T12022] Call trace: [ 175.842466][T12022] dump_backtrace+0x1c4/0x1f0 [ 175.843446][T12022] show_stack+0x2c/0x3c [ 175.844300][T12022] __dump_stack+0x30/0x40 [ 175.845186][T12022] dump_stack_lvl+0xf4/0x15c [ 175.846097][T12022] dump_stack+0x1c/0x5c [ 175.846935][T12022] should_fail_ex+0x3cc/0x524 [ 175.847826][T12022] __should_failslab+0xc0/0x11c [ 175.848731][T12022] should_failslab+0x10/0x28 [ 175.849610][T12022] __kmem_cache_alloc_node+0x7c/0x318 [ 175.850555][T12022] kmalloc_trace+0x48/0x94 [ 175.851292][T12022] __hw_addr_add_ex+0x1cc/0x5b0 [ 175.852167][T12022] dev_addr_init+0x11c/0x1e0 [ 175.853011][T12022] alloc_netdev_mqs+0x1f0/0xc44 [ 175.853856][T12022] rtnl_create_link+0x298/0x978 [ 175.854698][T12022] rtnl_newlink+0xfe8/0x1af0 [ 175.855526][T12022] rtnetlink_rcv_msg+0x694/0xcc4 [ 175.856411][T12022] netlink_rcv_skb+0x220/0x3ec [ 175.857269][T12022] rtnetlink_rcv+0x28/0x38 [ 175.858080][T12022] netlink_unicast+0x5fc/0x80c [ 175.858940][T12022] netlink_sendmsg+0x6f0/0x9d8 [ 175.859800][T12022] ____sys_sendmsg+0x588/0x90c [ 175.860641][T12022] __sys_sendmsg+0x288/0x374 [ 175.861396][T12022] __arm64_sys_sendmsg+0x80/0x94 [ 175.862256][T12022] invoke_syscall+0x98/0x290 [ 175.863054][T12022] el0_svc_common+0x13c/0x258 [ 175.863855][T12022] do_el0_svc+0x5c/0x134 [ 175.864595][T12022] el0_svc+0x58/0x12c [ 175.865289][T12022] el0t_64_sync_handler+0x84/0xf0 [ 175.866157][T12022] el0t_64_sync+0x18c/0x190 [ 176.173320][T12053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.175102][T12053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.272854][T12055] binder: 12054:12055 Acquire 1 refcount change on invalid ref 0 ret -22 [ 176.349783][T12061] binder: 12060:12061 ioctl c0306201 20000480 returned -14 [ 176.352884][T12061] binder: 12060:12061 tried to acquire reference to desc 0, got 1 instead [ 176.355179][ T4632] binder: undelivered TRANSACTION_COMPLETE [ 176.356205][ T4632] binder: undelivered TRANSACTION_COMPLETE [ 176.387497][ T4632] binder: undelivered transaction 307, process died. [ 176.388665][ T4632] binder: undelivered transaction 306, process died. [ 176.608749][T12085] binder: 12083:12085 ioctl c0306201 20000080 returned -14 [ 176.611689][T12085] binder: tried to use weak ref as strong ref [ 176.612716][T12085] binder: 12083:12085 Acquire 1 refcount change on invalid ref 0 ret -22 [ 176.614338][T12085] binder: 12083:12085 got transaction to invalid handle, 1 [ 176.615714][T12085] binder: 12085:12083 cannot find target node [ 176.616874][T12085] binder: 12083:12085 transaction call to 0:0 failed 310/29201/-22, size 72-24 line 3062 [ 176.673193][ T7167] binder: release 12086:12089 transaction 322 in, still active [ 176.674525][ T7167] binder: release 12086:12089 transaction 315 out, still active [ 176.726922][T12098] binder: 12097:12098 ioctl c0306201 20000080 returned -14 [ 176.740389][T12098] binder: 12097:12098 unknown command 1074553619 [ 176.741681][T12098] binder: 12097:12098 ioctl c0306201 20000000 returned -22 [ 176.768674][T12101] md: couldn't update array info. -22 [ 176.785283][T12101] md: could not open device unknown-block(1,1). [ 176.786378][T12101] md: md_import_device returned -16 [ 176.787793][T12101] md: could not open device unknown-block(1,2). [ 176.788857][T12101] md: md_import_device returned -16 [ 176.816137][T12109] binder: 12108:12109 ioctl c0306201 20000080 returned -14 [ 176.846670][T12113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.851031][T12113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.852971][T12114] netlink: 'syz.5.3177': attribute type 1 has an invalid length. [ 176.864615][T12114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.875384][T12117] binder: BC_ACQUIRE_RESULT not supported [ 176.879248][ C1] net_ratelimit: 49 callbacks suppressed [ 176.881648][T12117] binder: 12115:12117 ioctl c0306201 20004a40 returned -22 [ 176.883863][T12114] bond1: (slave geneve2): making interface the new active one [ 176.887077][T12114] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 176.888659][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 176.983888][T12123] binder: 12122:12123 ioctl c0306201 0 returned -14 [ 177.041912][T12124] binder: 12122:12124 ioctl c0306201 0 returned -14 [ 177.049392][ T4345] Bluetooth: hci0: command 0x1003 tx timeout [ 177.051254][ T4338] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 177.093958][T12127] binder: 12122:12127 ioctl 1 200007c0 returned -22 [ 177.273316][T12140] kAFS: unable to lookup cell '/,c¾ûL' [ 177.342523][T12142] md: couldn't update array info. -22 [ 177.436948][T12144] md: couldn't update array info. -22 [ 178.194849][T12179] FAULT_INJECTION: forcing a failure. [ 178.194849][T12179] name failslab, interval 1, probability 5, space 0, times 9951 [ 178.198379][T12179] CPU: 0 PID: 12179 Comm: syz.0.3204 Not tainted syzkaller #0 [ 178.199667][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 178.199689][T12179] Call trace: [ 178.199692][T12179] dump_backtrace+0x1c4/0x1f0 [ 178.199706][T12179] show_stack+0x2c/0x3c [ 178.199713][T12179] __dump_stack+0x30/0x40 [ 178.199728][T12179] dump_stack_lvl+0xf4/0x15c [ 178.199736][T12179] dump_stack+0x1c/0x5c [ 178.199744][T12179] should_fail_ex+0x3cc/0x524 [ 178.199754][T12179] __should_failslab+0xc0/0x11c [ 178.199763][T12179] should_failslab+0x10/0x28 [ 178.199771][T12179] kmem_cache_alloc+0x88/0x310 [ 178.201985][T12179] security_file_alloc+0x38/0x11c [ 178.203562][T12179] __alloc_file+0xac/0x234 [ 178.210866][T12179] alloc_empty_file+0xa0/0x184 [ 178.211708][T12179] alloc_file+0x64/0x564 [ 178.212493][T12179] alloc_file_pseudo+0x16c/0x1f4 [ 178.213420][T12179] __shmem_file_setup+0x1a0/0x26c [ 178.214353][T12179] shmem_file_setup+0x40/0x54 [ 178.215224][T12179] __arm64_sys_memfd_create+0x2d8/0x458 [ 178.216265][T12179] invoke_syscall+0x98/0x290 [ 178.217133][T12179] el0_svc_common+0x13c/0x258 [ 178.218002][T12179] do_el0_svc+0x5c/0x134 [ 178.218784][T12179] el0_svc+0x58/0x12c [ 178.219502][T12179] el0t_64_sync_handler+0x84/0xf0 [ 178.220393][T12179] el0t_64_sync+0x18c/0x190 [ 178.237227][T12179] FAULT_INJECTION: forcing a failure. [ 178.237227][T12179] name failslab, interval 1, probability 5, space 0, times 9950 [ 178.240803][T12179] CPU: 0 PID: 12179 Comm: syz.0.3204 Not tainted syzkaller #0 [ 178.242012][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 178.243697][T12179] Call trace: [ 178.244252][T12179] dump_backtrace+0x1c4/0x1f0 [ 178.245052][T12179] show_stack+0x2c/0x3c [ 178.245778][T12179] __dump_stack+0x30/0x40 [ 178.246610][T12179] dump_stack_lvl+0xf4/0x15c [ 178.247444][T12179] dump_stack+0x1c/0x5c [ 178.248221][T12179] should_fail_ex+0x3cc/0x524 [ 178.249093][T12179] __should_failslab+0xc0/0x11c [ 178.249959][T12179] should_failslab+0x10/0x28 [ 178.250810][T12179] kmem_cache_alloc+0x88/0x310 [ 178.251660][T12179] mas_alloc_nodes+0x284/0x758 [ 178.252504][T12179] mas_preallocate+0x13c/0x310 [ 178.253372][T12179] mmap_region+0xbf0/0x1860 [ 178.254193][T12179] do_mmap+0xa64/0x1210 [ 178.254935][T12179] vm_mmap_pgoff+0x194/0x298 [ 178.255731][T12179] ksys_mmap_pgoff+0xd0/0x5a0 [ 178.256571][T12179] __arm64_sys_mmap+0x108/0x120 [ 178.257434][T12179] invoke_syscall+0x98/0x290 [ 178.258228][T12179] el0_svc_common+0x13c/0x258 [ 178.259083][T12179] do_el0_svc+0x5c/0x134 [ 178.259847][T12179] el0_svc+0x58/0x12c [ 178.260578][T12179] el0t_64_sync_handler+0x84/0xf0 [ 178.261481][T12179] el0t_64_sync+0x18c/0x190 [ 178.298572][T12179] FAULT_INJECTION: forcing a failure. [ 178.298572][T12179] name failslab, interval 1, probability 5, space 0, times 9949 [ 178.307724][T12179] CPU: 0 PID: 12179 Comm: syz.0.3204 Not tainted syzkaller #0 [ 178.309088][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 178.310939][T12179] Call trace: [ 178.311564][T12179] dump_backtrace+0x1c4/0x1f0 [ 178.312438][T12179] show_stack+0x2c/0x3c [ 178.313219][T12179] __dump_stack+0x30/0x40 [ 178.314053][T12179] dump_stack_lvl+0xf4/0x15c [ 178.314885][T12179] dump_stack+0x1c/0x5c [ 178.315657][T12179] should_fail_ex+0x3cc/0x524 [ 178.316501][T12179] __should_failslab+0xc0/0x11c [ 178.317386][T12179] should_failslab+0x10/0x28 [ 178.318235][T12179] kmem_cache_alloc_node+0x8c/0x344 [ 178.319202][T12179] alloc_vmap_area+0x13c/0x169c [ 178.320065][T12179] __get_vm_area_node+0x178/0x31c [ 178.320971][T12179] __vmalloc_node_range+0x1d4/0xe70 [ 178.321946][T12179] __vmalloc+0xa4/0xe0 [ 178.322705][T12179] bpf_prog_alloc_no_stats+0x4c/0x3a0 [ 178.323682][T12179] bpf_prog_alloc+0x38/0x1dc [ 178.324515][T12179] bpf_prog_load+0x69c/0x12c0 [ 178.325356][T12179] __sys_bpf+0x494/0x660 [ 178.326098][T12179] __arm64_sys_bpf+0x80/0x98 [ 178.326919][T12179] invoke_syscall+0x98/0x290 [ 178.327749][T12179] el0_svc_common+0x13c/0x258 [ 178.328580][T12179] do_el0_svc+0x5c/0x134 [ 178.329345][T12179] el0_svc+0x58/0x12c [ 178.330074][T12179] el0t_64_sync_handler+0x84/0xf0 [ 178.330942][T12179] el0t_64_sync+0x18c/0x190 [ 178.346379][T12179] syz.0.3204: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 178.353210][T12179] CPU: 0 PID: 12179 Comm: syz.0.3204 Not tainted syzkaller #0 [ 178.354557][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 178.356367][T12179] Call trace: [ 178.356995][T12179] dump_backtrace+0x1c4/0x1f0 [ 178.357014][T12179] show_stack+0x2c/0x3c [ 178.357021][T12179] __dump_stack+0x30/0x40 [ 178.358601][T12179] dump_stack_lvl+0xf4/0x15c [ 178.360195][T12179] dump_stack+0x1c/0x5c [ 178.360919][T12179] warn_alloc+0x214/0x324 [ 178.361648][T12179] __vmalloc_node_range+0x24c/0xe70 [ 178.362614][T12179] __vmalloc+0xa4/0xe0 [ 178.363355][T12179] bpf_prog_alloc_no_stats+0x4c/0x3a0 [ 178.364304][T12179] bpf_prog_alloc+0x38/0x1dc [ 178.364323][T12179] bpf_prog_load+0x69c/0x12c0 [ 178.364330][T12179] __sys_bpf+0x494/0x660 [ 178.366596][T12179] __arm64_sys_bpf+0x80/0x98 [ 178.367398][T12179] invoke_syscall+0x98/0x290 [ 178.367416][T12179] el0_svc_common+0x13c/0x258 [ 178.367427][T12179] do_el0_svc+0x5c/0x134 [ 178.369801][T12179] el0_svc+0x58/0x12c [ 178.370513][T12179] el0t_64_sync_handler+0x84/0xf0 [ 178.370530][T12179] el0t_64_sync+0x18c/0x190 [ 178.378002][T12179] Mem-Info: [ 178.378566][T12179] active_anon:4136 inactive_anon:4759 isolated_anon:0 [ 178.378566][T12179] active_file:5229 inactive_file:2117 isolated_file:0 [ 178.378566][T12179] unevictable:768 dirty:194 writeback:0 [ 178.378566][T12179] slab_reclaimable:23965 slab_unreclaimable:106025 [ 178.378566][T12179] mapped:42535 shmem:3831 pagetables:867 [ 178.378566][T12179] sec_pagetables:0 bounce:0 [ 178.378566][T12179] kernel_misc_reclaimable:0 [ 178.378566][T12179] free:1394534 free_pcp:4033 free_cma:7360 [ 178.394104][T12179] Node 0 active_anon:16544kB inactive_anon:19036kB active_file:20916kB inactive_file:8468kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:170140kB dirty:776kB writeback:0kB shmem:15324kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:9620kB pagetables:3468kB sec_pagetables:0kB all_unreclaimable? no [ 178.406869][T12179] Node 0 DMA free:3076864kB boost:0kB min:20720kB low:25900kB high:31080kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 178.408567][T12199] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3212'. [ 178.422074][T12179] lowmem_reserve[]: 0 0 3532 3532 3532 [ 178.423036][T12179] Node 0 Normal free:2501272kB boost:0kB min:24332kB low:30412kB high:36492kB reserved_highatomic:0KB active_anon:16544kB inactive_anon:19036kB active_file:20916kB inactive_file:8468kB unevictable:3072kB writepending:776kB present:5242880kB managed:3620620kB mlocked:0kB bounce:0kB free_pcp:17352kB local_pcp:11660kB free_cma:0kB [ 178.428169][T12179] lowmem_reserve[]: 0 0 0 0 0 [ 178.429004][T12179] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 178.454800][T12199] device syzkaller1 entered promiscuous mode [ 178.461951][T12179] Node 0 Normal: 50*4kB (ME) 130*8kB (UME) 39*16kB (ME) 155*32kB (UE) 100*64kB (UME) 72*128kB (UM) 36*256kB (UM) 19*512kB (UME) 14*1024kB (UM) 10*2048kB (UME) 592*4096kB (UM) = 2501032kB [ 178.465149][T12179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 178.466933][T12179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 178.468788][T12179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 178.474499][T12179] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 178.476010][T12179] 11140 total pagecache pages [ 178.476936][T12179] 1 pages in swap cache [ 178.477907][T12179] Free swap = 124228kB [ 178.478557][T12179] Total swap = 124996kB [ 178.479963][T12179] 2097152 pages RAM [ 178.480636][T12179] 0 pages HighMem/MovableOnly [ 178.481480][T12179] 421949 pages reserved [ 178.482191][T12179] 8192 pages cma reserved [ 178.482952][T12179] 0 pages hwpoisoned [ 178.618543][T12205] kernel profiling enabled (shift: 17) [ 178.693193][T12209] binder: 12208:12209 ioctl c0306201 20000080 returned -22 [ 178.784478][T12211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.795708][T12211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.822764][T12211] input: syz0 as /devices/virtual/input/input5 [ 179.002565][ T27] audit: type=1326 audit(178.990:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.5.3208" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbd978c28 code=0x7fc00000 [ 179.117143][T12223] md: couldn't update array info. -22 [ 179.118533][T12223] md: could not open device unknown-block(1,1). [ 179.120498][T12223] md: md_import_device returned -16 [ 179.122085][T12223] md: could not open device unknown-block(1,2). [ 179.123257][T12223] md: md_import_device returned -16 [ 179.285700][T12237] batman_adv: batadv0: Adding interface: syz_tun [ 179.287056][T12237] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.292879][T12237] batman_adv: batadv0: Interface activated: syz_tun [ 179.352430][T12245] md: couldn't update array info. -22 [ 179.354020][T12245] md: could not open device unknown-block(1,1). [ 179.355082][T12245] md: md_import_device returned -16 [ 179.356257][T12245] md: could not open device unknown-block(1,2). [ 179.357517][T12245] md: md_import_device returned -16 [ 179.496471][T12264] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 179.609197][T12268] binder: 12265:12268 ioctl c0306201 20000480 returned -14 [ 179.627845][T12268] binder_alloc: 12265: pid 12265 spamming oneway? 2 buffers allocated for a total size of 5120 [ 179.639143][T12276] md: couldn't update array info. -22 [ 179.640249][T12268] binder_alloc: 12265: pid 12265 spamming oneway? 3 buffers allocated for a total size of 5128 [ 179.645767][T12276] md: could not open device unknown-block(1,1). [ 179.653253][T12276] md: md_import_device returned -16 [ 179.654345][T12276] md: could not open device unknown-block(1,2). [ 179.662757][T12276] md: md_import_device returned -16 [ 179.775157][T12284] binder: 12279:12284 unknown command 1074291477 [ 179.776274][T12284] binder: 12279:12284 ioctl c0306201 20000000 returned -22 [ 179.787674][T12286] netlink: 'syz.3.3253': attribute type 1 has an invalid length. [ 179.830699][T12286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.871910][T12286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.873355][T12286] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 179.882602][T12286] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 179.966233][T12293] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 179.981514][T12291] device wlan1 entered promiscuous mode [ 179.984716][T12291] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 179.997002][T12295] binder: 12294:12295 ioctl 4018620d 0 returned -22 [ 180.004396][T12295] binder_user_error: 44 callbacks suppressed [ 180.004404][T12295] binder: 12294:12295 got transaction to invalid handle, 1 [ 180.192153][T12307] md: couldn't update array info. -22 [ 180.193620][T12307] md: could not open device unknown-block(1,1). [ 180.194810][T12307] md: md_import_device returned -16 [ 180.235503][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3272'. [ 180.292930][T12315] md: couldn't update array info. -22 [ 180.423170][ T409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.424451][ T409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.426030][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.471721][T12330] binder: 12322:12330 tried to acquire reference to desc 0, got 1 instead [ 180.473428][T12330] binder: 12322:12330 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 180.475440][T12330] binder: 12330 RLIMIT_NICE not set [ 180.564708][T12336] md: couldn't update array info. -22 [ 180.568475][T12336] md: could not open device unknown-block(1,1). [ 180.572227][T12336] md: md_import_device returned -16 [ 180.621950][T12339] binder: 12338:12339 tried to acquire reference to desc 0, got 1 instead [ 180.677995][T12342] binder: 12338:12342 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 180.686510][T12342] binder: 12342 RLIMIT_NICE not set [ 180.687428][T12342] binder: 12342 RLIMIT_NICE not set [ 180.688546][T12342] binder: 12342 RLIMIT_NICE not set [ 180.690904][T12342] binder_alloc: 12338: binder_alloc_buf, no vma [ 180.691949][T12342] binder_debug: 48 callbacks suppressed [ 180.691957][T12342] binder: cannot allocate buffer: vma cleared, target dead or dying [ 180.692922][T12342] binder: 12338:12342 transaction reply to 12338:12339 failed 410/29189/-3, size 0-0 line 3247 [ 180.696068][T12342] binder: send failed reply for transaction 409 to 12338:12339 [ 180.708957][ T24] binder: undelivered TRANSACTION_ERROR: 29190 [ 181.047638][T12355] binder: 12354:12355 ioctl c0306201 20000080 returned -14 [ 181.051619][T12355] binder: 12354:12355 tried to acquire reference to desc 0, got 1 instead [ 181.142531][T12358] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 181.178583][T12360] binder: 12359:12360 ioctl c0306201 200005c0 returned -14 [ 181.185438][T12360] binder: 12360:12359 failed to get security context [ 181.186880][T12360] binder: 12359:12360 transaction call to 12359:0 failed 428/29201/-22, size 0-0 line 3214 [ 181.190526][ T7165] binder: undelivered TRANSACTION_ERROR: 29201 [ 181.192780][T12362] md: couldn't update array info. -22 [ 181.195030][T12362] md: could not open device unknown-block(1,1). [ 181.196063][T12362] md: md_import_device returned -16 [ 181.217523][ T4632] binder: undelivered TRANSACTION_COMPLETE [ 181.295431][T12371] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 181.297574][T12371] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 181.303804][T12371] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 181.336178][ T7167] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0003/input/input6 [ 181.341349][T12375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.343089][T12375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.347452][ T7167] hid-generic 0005:FFFD057E:0305.0003: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 181.387908][ T4338] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 181.547172][T12382] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 181.740146][T12387] binder: 12385:12387 transaction reply to 0:0 failed 434/29201/-71, size 0-0 line 2963 [ 181.840321][ T4632] binder: release 12385:12386 transaction 433 out, still active [ 181.949473][T12392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.958010][T12392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.972239][T12392] input: syz0 as /devices/virtual/input/input7 [ 181.974702][T12395] md: couldn't update array info. -22 [ 181.976109][T12395] md: could not open device unknown-block(1,2). [ 181.977259][T12395] md: md_import_device returned -16 [ 182.023326][T12393] device syzkaller0 entered promiscuous mode [ 182.028537][T12393] net_ratelimit: 47 callbacks suppressed [ 182.028545][T12393] 0: reclassify loop, rule prio 0, protocol 800 [ 182.121159][T12405] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 182.203639][T12411] binder: 12410:12411 ioctl c0306201 20000080 returned -14 [ 182.215592][ T4632] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0004/input/input8 [ 182.217842][ T4632] hid-generic 0005:FFFD057E:0305.0004: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 182.220661][ T4338] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 182.224812][T12414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.226435][T12414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.480055][ T4338] Bluetooth: hci0: command 0x1003 tx timeout [ 182.481988][ T4334] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 182.552113][T12420] md: couldn't update array info. -22 [ 182.553564][T12420] md: could not open device unknown-block(1,2). [ 182.554685][T12420] md: md_import_device returned -16 [ 182.654098][T12432] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 182.685951][T12436] netlink: 'syz.5.3321': attribute type 1 has an invalid length. [ 182.728361][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3322'. [ 182.732543][T12438] device bridge_slave_1 left promiscuous mode [ 182.736216][T12438] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.767152][T12438] device bridge_slave_0 left promiscuous mode [ 182.768391][T12438] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.014052][T12451] md: couldn't update array info. -22 [ 183.015706][T12451] md: could not open device unknown-block(1,2). [ 183.017208][T12451] md: md_import_device returned -16 [ 183.187854][T12436] syz.5.3321 (12436): drop_caches: 2 [ 183.228674][T12464] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 183.239586][T12462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.241264][T12462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.266477][T12462] input: syz0 as /devices/virtual/input/input9 [ 183.326165][ T1969] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0005/input/input10 [ 183.342472][ T1969] hid-generic 0005:FFFD057E:0305.0005: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 183.358167][T12477] binder: 12476:12477 ioctl c0306201 20000080 returned -14 [ 183.434712][T12483] md: couldn't update array info. -22 [ 183.436099][T12483] md: could not open device unknown-block(1,1). [ 183.437399][T12483] md: md_import_device returned -16 [ 183.438753][T12483] md: could not open device unknown-block(1,2). [ 183.440635][T12483] md: md_import_device returned -16 [ 183.547826][T12491] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 183.625579][T12497] tipc: Started in network mode [ 183.626449][T12497] tipc: Node identity ac1414aa, cluster identity 4711 [ 183.628015][T12497] tipc: New replicast peer: 172.20.20.187 [ 183.631248][T12497] tipc: Enabled bearer , priority 10 [ 183.684463][T12501] binder: 12500:12501 unknown command 1074553620 [ 183.685697][T12501] binder: 12500:12501 ioctl c0306201 20000f80 returned -22 [ 183.750337][ T1969] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0006/input/input11 [ 183.754010][ T1969] hid-generic 0005:FFFD057E:0305.0006: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 183.815943][T12507] md: couldn't update array info. -22 [ 183.817643][T12507] md: could not open device unknown-block(1,1). [ 183.818797][T12507] md: md_import_device returned -16 [ 183.820366][T12507] md: could not open device unknown-block(1,2). [ 183.821581][T12507] md: md_import_device returned -16 [ 183.874412][T12511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.878550][T12511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.903534][T12515] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 183.905771][T12515] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 184.076699][ T4601] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0007/input/input12 [ 184.080794][ T4601] hid-generic 0005:FFFD057E:0305.0007: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 184.143710][T12529] md: couldn't update array info. -22 [ 184.144919][T12529] md: could not open device unknown-block(1,1). [ 184.146110][T12529] md: md_import_device returned -16 [ 184.147201][T12529] md: could not open device unknown-block(1,2). [ 184.148316][T12529] md: md_import_device returned -16 [ 184.187748][T12533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.190909][T12533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.218093][T12535] tipc: Started in network mode [ 184.218951][T12535] tipc: Node identity ac1414aa, cluster identity 4711 [ 184.220644][T12535] tipc: New replicast peer: 172.20.20.187 [ 184.221924][T12535] tipc: Enabled bearer , priority 10 [ 184.324609][T12541] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 184.328570][T12541] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 184.408826][T12545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3368'. [ 184.474782][T12550] binder: 12549:12550 ioctl c0306201 20000080 returned -14 [ 184.552171][T12555] md: couldn't update array info. -22 [ 184.624204][ T4601] tipc: Node number set to 2886997162 [ 184.707049][T12565] FAULT_INJECTION: forcing a failure. [ 184.707049][T12565] name failslab, interval 1, probability 5, space 0, times 9948 [ 184.715697][T12565] CPU: 0 PID: 12565 Comm: syz.5.3377 Not tainted syzkaller #0 [ 184.717022][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 184.718815][T12565] Call trace: [ 184.719409][T12565] dump_backtrace+0x1c4/0x1f0 [ 184.720350][T12565] show_stack+0x2c/0x3c [ 184.721235][T12565] __dump_stack+0x30/0x40 [ 184.722070][T12565] dump_stack_lvl+0xf4/0x15c [ 184.722959][T12565] dump_stack+0x1c/0x5c [ 184.723780][T12565] should_fail_ex+0x3cc/0x524 [ 184.724708][T12565] __should_failslab+0xc0/0x11c [ 184.725629][T12565] should_failslab+0x10/0x28 [ 184.726482][T12565] __kmem_cache_alloc_node+0x7c/0x318 [ 184.727490][T12565] kmalloc_trace+0x48/0x94 [ 184.728311][T12565] nfnetlink_rcv+0xaac/0x1c54 [ 184.729163][T12565] netlink_unicast+0x5fc/0x80c [ 184.730083][T12565] netlink_sendmsg+0x6f0/0x9d8 [ 184.730986][T12565] ____sys_sendmsg+0x588/0x90c [ 184.731875][T12565] __sys_sendmsg+0x288/0x374 [ 184.732714][T12565] __arm64_sys_sendmsg+0x80/0x94 [ 184.733626][T12565] invoke_syscall+0x98/0x290 [ 184.734431][T12565] el0_svc_common+0x13c/0x258 [ 184.735265][T12565] do_el0_svc+0x5c/0x134 [ 184.736018][T12565] el0_svc+0x58/0x12c [ 184.736729][T12565] el0t_64_sync_handler+0x84/0xf0 [ 184.737643][T12565] el0t_64_sync+0x18c/0x190 [ 184.959437][ T4334] Bluetooth: hci0: command 0x1003 tx timeout [ 184.961491][ T4345] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 185.052564][T12591] binder_user_error: 54 callbacks suppressed [ 185.052570][T12591] binder: 12590:12591 tried to acquire reference to desc 0, got 1 instead [ 185.055981][T12591] binder: 12590:12591 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 185.058710][T12591] binder: 12591 RLIMIT_NICE not set [ 185.061556][T12591] binder: 12591 RLIMIT_NICE not set [ 185.083915][T12593] binder: 12592:12593 unknown command 1074553619 [ 185.088515][T12593] binder: 12592:12593 ioctl c0306201 20000040 returned -22 [ 185.092773][T12593] binder: 12592:12593 unknown command 1074553620 [ 185.096157][T12593] binder: 12592:12593 ioctl c0306201 20000640 returned -22 [ 185.173288][T12601] binder: 12600:12601 tried to acquire reference to desc 0, got 1 instead [ 185.194946][T12603] device syzkaller0 entered promiscuous mode [ 185.199481][ T8489] IPVS: ip_vs_send_async error -101 [ 185.228587][T12607] binder: 12600:12607 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 185.232768][T12607] binder: 12607 RLIMIT_NICE not set [ 185.233731][T12607] binder: 12607 RLIMIT_NICE not set [ 185.238343][T12607] binder: 12607 RLIMIT_NICE not set [ 185.274739][T12605] md: md0: raid1 would not accept array [ 185.277135][T12609] md: could not open device unknown-block(1,0). [ 185.342860][ T1969] tipc: Node number set to 2886997162 [ 185.352221][T12611] FAULT_INJECTION: forcing a failure. [ 185.352221][T12611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.355269][T12611] CPU: 0 PID: 12611 Comm: syz.0.3395 Not tainted syzkaller #0 [ 185.356460][T12611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 185.358270][T12611] Call trace: [ 185.358863][T12611] dump_backtrace+0x1c4/0x1f0 [ 185.359738][T12611] show_stack+0x2c/0x3c [ 185.359753][T12611] __dump_stack+0x30/0x40 [ 185.359767][T12611] dump_stack_lvl+0xf4/0x15c [ 185.359775][T12611] dump_stack+0x1c/0x5c [ 185.363099][T12611] should_fail_ex+0x3cc/0x524 [ 185.363956][T12611] should_fail+0x14/0x24 [ 185.364688][T12611] should_fail_usercopy+0x20/0x30 [ 185.365604][T12611] strncpy_from_user+0x48/0x59c [ 185.366492][T12611] getname_flags+0xec/0x458 [ 185.367282][T12611] user_path_at_empty+0x40/0x84 [ 185.368114][T12611] __arm64_sys_mount+0x468/0x5a0 [ 185.368986][T12611] invoke_syscall+0x98/0x290 [ 185.369797][T12611] el0_svc_common+0x13c/0x258 [ 185.370632][T12611] do_el0_svc+0x5c/0x134 [ 185.371384][T12611] el0_svc+0x58/0x12c [ 185.372097][T12611] el0t_64_sync_handler+0x84/0xf0 [ 185.373003][T12611] el0t_64_sync+0x18c/0x190 [ 185.625832][T12638] device syzkaller0 entered promiscuous mode [ 185.676611][T12647] FAULT_INJECTION: forcing a failure. [ 185.676611][T12647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.679006][T12647] CPU: 0 PID: 12647 Comm: syz.2.3411 Not tainted syzkaller #0 [ 185.680458][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 185.682418][T12647] Call trace: [ 185.683069][T12647] dump_backtrace+0x1c4/0x1f0 [ 185.684033][T12647] show_stack+0x2c/0x3c [ 185.684834][T12647] __dump_stack+0x30/0x40 [ 185.685669][T12647] dump_stack_lvl+0xf4/0x15c [ 185.686568][T12647] dump_stack+0x1c/0x5c [ 185.687325][T12647] should_fail_ex+0x3cc/0x524 [ 185.688197][T12647] should_fail+0x14/0x24 [ 185.688995][T12647] should_fail_usercopy+0x20/0x30 [ 185.689937][T12647] strncpy_from_user+0x48/0x59c [ 185.690856][T12647] getname_flags+0xec/0x458 [ 185.691709][T12647] user_path_at_empty+0x40/0x84 [ 185.692625][T12647] __arm64_sys_mount+0x468/0x5a0 [ 185.693519][T12647] invoke_syscall+0x98/0x290 [ 185.694369][T12647] el0_svc_common+0x13c/0x258 [ 185.695202][T12647] do_el0_svc+0x5c/0x134 [ 185.695974][T12647] el0_svc+0x58/0x12c [ 185.696678][T12647] el0t_64_sync_handler+0x84/0xf0 [ 185.697611][T12647] el0t_64_sync+0x18c/0x190 [ 185.753676][T12653] binder: 12652:12653 tried to acquire reference to desc 0, got 1 instead [ 185.755821][T12653] binder_debug: 85 callbacks suppressed [ 185.755827][T12653] binder: 12652:12653 transaction call to 12652:0 failed 590/29201/-14, size 0-24 line 3350 [ 185.807460][T12653] syz.2.3413 (12653): drop_caches: 2 [ 185.846154][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.066928][T12666] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3419'. [ 186.176236][T12673] FAULT_INJECTION: forcing a failure. [ 186.176236][T12673] name failslab, interval 1, probability 5, space 0, times 9947 [ 186.178495][T12673] CPU: 0 PID: 12673 Comm: syz.2.3422 Not tainted syzkaller #0 [ 186.179732][T12673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 186.181525][T12673] Call trace: [ 186.182101][T12673] dump_backtrace+0x1c4/0x1f0 [ 186.182965][T12673] show_stack+0x2c/0x3c [ 186.183746][T12673] __dump_stack+0x30/0x40 [ 186.184555][T12673] dump_stack_lvl+0xf4/0x15c [ 186.185415][T12673] dump_stack+0x1c/0x5c [ 186.186170][T12673] should_fail_ex+0x3cc/0x524 [ 186.187043][T12673] __should_failslab+0xc0/0x11c [ 186.187896][T12673] should_failslab+0x10/0x28 [ 186.188725][T12673] kmem_cache_alloc+0x88/0x310 [ 186.188746][T12673] getname_flags+0xb8/0x458 [ 186.190456][T12673] user_path_at_empty+0x40/0x84 [ 186.191290][T12673] __arm64_sys_mount+0x468/0x5a0 [ 186.191311][T12673] invoke_syscall+0x98/0x290 [ 186.193026][T12673] el0_svc_common+0x13c/0x258 [ 186.193885][T12673] do_el0_svc+0x5c/0x134 [ 186.194643][T12673] el0_svc+0x58/0x12c [ 186.195350][T12673] el0t_64_sync_handler+0x84/0xf0 [ 186.195368][T12673] el0t_64_sync+0x18c/0x190 [ 186.325847][T12682] device syzkaller1 entered promiscuous mode [ 186.465057][T12688] binder: 12687:12688 ioctl 4018620d 0 returned -22 [ 186.504472][T12692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.510958][T12692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.516221][T12692] input: syz0 as /devices/virtual/input/input14 [ 186.563632][T12690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3430'. [ 186.598659][T12695] binder: 12694:12695 transaction call to 12694:0 failed 596/29201/-14, size 0-24 line 3350 [ 186.602916][T12695] syz.0.3432 (12695): drop_caches: 2 [ 186.610150][ T7167] binder: undelivered TRANSACTION_ERROR: 29201 [ 186.644850][T12697] FAULT_INJECTION: forcing a failure. [ 186.644850][T12697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.647572][T12697] CPU: 0 PID: 12697 Comm: syz.0.3433 Not tainted syzkaller #0 [ 186.648951][T12697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 186.650976][T12697] Call trace: [ 186.651634][T12697] dump_backtrace+0x1c4/0x1f0 [ 186.652563][T12697] show_stack+0x2c/0x3c [ 186.653351][T12697] __dump_stack+0x30/0x40 [ 186.654202][T12697] dump_stack_lvl+0xf4/0x15c [ 186.655090][T12697] dump_stack+0x1c/0x5c [ 186.655890][T12697] should_fail_ex+0x3cc/0x524 [ 186.656795][T12697] should_fail+0x14/0x24 [ 186.657606][T12697] should_fail_usercopy+0x20/0x30 [ 186.658556][T12697] strncpy_from_user+0x48/0x59c [ 186.659452][T12697] getname_flags+0xec/0x458 [ 186.660396][T12697] user_path_at_empty+0x40/0x84 [ 186.661421][T12697] __arm64_sys_mount+0x468/0x5a0 [ 186.662412][T12697] invoke_syscall+0x98/0x290 [ 186.663304][T12697] el0_svc_common+0x13c/0x258 [ 186.664180][T12697] do_el0_svc+0x5c/0x134 [ 186.665048][T12697] el0_svc+0x58/0x12c [ 186.665851][T12697] el0t_64_sync_handler+0x84/0xf0 [ 186.666781][T12697] el0t_64_sync+0x18c/0x190 [ 186.766892][T12710] binder: 12709:12710 ioctl c0306201 20000080 returned -14 [ 186.771523][T12710] binder_alloc: 12709: binder_alloc_buf, no vma [ 186.772703][T12710] binder: cannot allocate buffer: vma cleared, target dead or dying [ 186.772736][T12710] binder: 12709:12710 transaction call to 12709:12710 failed 608/29189/-3, size 0-0 line 3247 [ 186.778143][T12708] device syzkaller1 entered promiscuous mode [ 186.962904][T12718] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3442'. [ 187.138361][T12723] md: md0: raid1 would not accept array [ 187.140651][T12723] md: could not open device unknown-block(1,0). [ 187.172395][T12727] md: md0: raid1 would not accept array [ 187.174372][T12727] md: could not open device unknown-block(1,0). [ 187.223342][T12734] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 187.227477][T12734] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 187.231621][T12731] FAULT_INJECTION: forcing a failure. [ 187.231621][T12731] name failslab, interval 1, probability 5, space 0, times 9946 [ 187.238681][T12731] CPU: 1 PID: 12731 Comm: syz.5.3446 Not tainted syzkaller #0 [ 187.240142][T12731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 187.242303][T12731] Call trace: [ 187.242993][T12731] dump_backtrace+0x1c4/0x1f0 [ 187.243916][T12731] show_stack+0x2c/0x3c [ 187.244702][T12731] __dump_stack+0x30/0x40 [ 187.245521][T12731] dump_stack_lvl+0xf4/0x15c [ 187.246396][T12731] dump_stack+0x1c/0x5c [ 187.247156][T12731] should_fail_ex+0x3cc/0x524 [ 187.248040][T12731] __should_failslab+0xc0/0x11c [ 187.248911][T12731] should_failslab+0x10/0x28 [ 187.249791][T12731] kmem_cache_alloc+0x88/0x310 [ 187.250674][T12731] security_inode_alloc+0x38/0x11c [ 187.251599][T12731] inode_init_always+0x6c8/0xb28 [ 187.252471][T12731] new_inode_pseudo+0x7c/0x1cc [ 187.253310][T12731] new_inode+0x38/0x174 [ 187.254028][T12731] shmem_get_inode+0x2cc/0xa8c [ 187.254868][T12731] shmem_mknod+0x64/0x1c4 [ 187.255640][T12731] shmem_mkdir+0x38/0x78 [ 187.256390][T12731] vfs_mkdir+0x314/0x4d8 [ 187.257158][T12731] do_mkdirat+0x1b8/0x3ec [ 187.257945][T12731] __arm64_sys_mkdirat+0x90/0xa8 [ 187.258820][T12731] invoke_syscall+0x98/0x290 [ 187.259646][T12731] el0_svc_common+0x13c/0x258 [ 187.260491][T12731] do_el0_svc+0x5c/0x134 [ 187.261259][T12731] el0_svc+0x58/0x12c [ 187.261967][T12731] el0t_64_sync_handler+0x84/0xf0 [ 187.262862][T12731] el0t_64_sync+0x18c/0x190 [ 187.289278][ C1] net_ratelimit: 52 callbacks suppressed [ 187.359715][ T2066] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.360876][ T2066] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.388493][T12750] device syzkaller1 entered promiscuous mode [ 187.449373][ T4345] Bluetooth: hci0: command 0x1003 tx timeout [ 187.451506][ T4338] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.592762][T12753] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3453'. [ 187.596943][ T24] binder: release 12709:12710 transaction 601 out, still active [ 187.598248][ T24] binder: undelivered TRANSACTION_COMPLETE [ 187.616180][ T24] binder: release 12709:12710 transaction 601 in, still active [ 187.617679][ T24] binder: send failed reply for transaction 601, target dead [ 187.619788][T12764] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 187.628734][T12764] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 187.677751][T12767] ERROR: Out of memory at tomoyo_memory_ok. [ 187.743007][T12782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.744813][T12782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.814795][T12789] binder: 12788:12789 ioctl c0306201 20000080 returned -14 [ 187.821698][T12789] binder_alloc: 12788: binder_alloc_buf, no vma [ 188.726034][T12804] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 188.735310][T12798] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3471'. [ 188.742188][T12804] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 188.785477][T12807] FAULT_INJECTION: forcing a failure. [ 188.785477][T12807] name failslab, interval 1, probability 5, space 0, times 9944 [ 188.804962][T12807] CPU: 0 PID: 12807 Comm: syz.0.3474 Not tainted syzkaller #0 [ 188.806434][T12807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 188.808373][T12807] Call trace: [ 188.808965][T12807] dump_backtrace+0x1c4/0x1f0 [ 188.809832][T12807] show_stack+0x2c/0x3c [ 188.810570][T12807] __dump_stack+0x30/0x40 [ 188.811368][T12807] dump_stack_lvl+0xf4/0x15c [ 188.812201][T12807] dump_stack+0x1c/0x5c [ 188.812982][T12807] should_fail_ex+0x3cc/0x524 [ 188.813818][T12807] __should_failslab+0xc0/0x11c [ 188.814707][T12807] should_failslab+0x10/0x28 [ 188.815531][T12807] __kmem_cache_alloc_node+0x7c/0x318 [ 188.816528][T12807] kmalloc_trace+0x48/0x94 [ 188.817348][T12807] tomoyo_init_log+0x158/0x1b0c [ 188.818236][T12807] tomoyo_supervisor+0x31c/0xf5c [ 188.819136][T12807] tomoyo_path_number_perm+0x3c0/0x540 [ 188.820128][T12807] tomoyo_path_mkdir+0xac/0xf8 [ 188.820979][T12807] security_path_mkdir+0xec/0x13c [ 188.821913][T12807] do_mkdirat+0x150/0x3ec [ 188.822706][T12807] __arm64_sys_mkdirat+0x90/0xa8 [ 188.823582][T12807] invoke_syscall+0x98/0x290 [ 188.824396][T12807] el0_svc_common+0x13c/0x258 [ 188.825214][T12807] do_el0_svc+0x5c/0x134 [ 188.825969][T12807] el0_svc+0x58/0x12c [ 188.826663][T12807] el0t_64_sync_handler+0x84/0xf0 [ 188.827555][T12807] el0t_64_sync+0x18c/0x190 [ 188.997876][T12820] 0x000000000000-0x000000010000 : "" [ 189.004388][T12820] ftl_cs: FTL header not found. [ 189.012164][T12820] FAULT_INJECTION: forcing a failure. [ 189.012164][T12820] name failslab, interval 1, probability 5, space 0, times 9943 [ 189.024440][T12820] CPU: 0 PID: 12820 Comm: syz.2.3480 Not tainted syzkaller #0 [ 189.025804][T12820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 189.027851][T12820] Call trace: [ 189.028513][T12820] dump_backtrace+0x1c4/0x1f0 [ 189.029449][T12820] show_stack+0x2c/0x3c [ 189.030270][T12820] __dump_stack+0x30/0x40 [ 189.031110][T12820] dump_stack_lvl+0xf4/0x15c [ 189.031983][T12820] dump_stack+0x1c/0x5c [ 189.032800][T12820] should_fail_ex+0x3cc/0x524 [ 189.033691][T12820] __should_failslab+0xc0/0x11c [ 189.034581][T12820] should_failslab+0x10/0x28 [ 189.035445][T12820] kmem_cache_alloc+0x88/0x310 [ 189.036355][T12820] __kernfs_new_node+0xec/0x5fc [ 189.037260][T12820] kernfs_new_node+0x120/0x230 [ 189.038146][T12820] __kernfs_create_file+0x60/0x2e0 [ 189.039110][T12820] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 189.040096][T12820] internal_create_group+0x3e8/0xb24 [ 189.041092][T12820] sysfs_create_groups+0x60/0x134 [ 189.042010][T12820] kobject_add_internal+0x5e4/0xb18 [ 189.042996][T12820] kobject_add+0x144/0x20c [ 189.043772][T12820] blk_register_queue+0x84/0x334 [ 189.044646][T12820] device_add_disk+0x53c/0xe04 [ 189.045521][T12820] add_mtd_blktrans_dev+0xc48/0x1090 [ 189.046479][T12820] mtdblock_add_mtd+0x158/0x218 [ 189.047343][T12820] blktrans_notify_add+0xa8/0xf8 [ 189.048254][T12820] add_mtd_device+0xdcc/0x130c [ 189.049119][T12820] mtd_add_partition+0x224/0x3bc [ 189.049961][T12820] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 189.050880][T12820] mtdchar_ioctl+0x1238/0x1aec [ 189.051726][T12820] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 189.052671][T12820] __arm64_sys_ioctl+0x14c/0x1c8 [ 189.053575][T12820] invoke_syscall+0x98/0x290 [ 189.054415][T12820] el0_svc_common+0x13c/0x258 [ 189.054541][T12827] binder: 12826:12827 ioctl c0306201 20000080 returned -14 [ 189.055226][T12820] do_el0_svc+0x5c/0x134 [ 189.057319][T12820] el0_svc+0x58/0x12c [ 189.058054][T12820] el0t_64_sync_handler+0x84/0xf0 [ 189.058961][T12820] el0t_64_sync+0x18c/0x190 [ 189.063327][T12827] binder_alloc: 12826: binder_alloc_buf, no vma [ 189.152885][T12820] kobject_add_internal failed for queue (error: -12 parent: mtdblock49) [ 189.157390][T12821] md: md0: raid1 would not accept array [ 189.159402][T12825] md: could not open device unknown-block(1,0). [ 189.350314][T12839] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 189.355370][T12839] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 189.754783][T12856] tipc: Enabling of bearer rejected, already enabled [ 189.847921][T12860] device syzkaller0 entered promiscuous mode [ 189.965376][T12866] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 189.979357][T12866] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 189.999380][ T4338] Bluetooth: hci0: command 0x1003 tx timeout [ 190.001588][ T4334] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.213613][T12877] binder_user_error: 24 callbacks suppressed [ 190.213620][T12877] binder: 12876:12877 tried to acquire reference to desc 0, got 1 instead [ 190.217488][T12877] binder: 12876:12877 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 190.222186][T12877] binder: 12877 RLIMIT_NICE not set [ 190.224371][T12877] binder: 12877 RLIMIT_NICE not set [ 190.225604][T12877] binder_alloc: 12876: binder_alloc_buf, no vma [ 190.252388][T12879] binder: 12878:12879 tried to acquire reference to desc 0, got 1 instead [ 190.257689][T12879] binder: 12878:12879 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 190.264943][T12879] binder: 12879 RLIMIT_NICE not set [ 190.265929][T12879] binder: 12879 RLIMIT_NICE not set [ 190.270500][T12879] binder_alloc: 12878: binder_alloc_buf, no vma [ 190.276482][T12879] binder: 12878:12879 unknown command 0 [ 190.279801][T12879] binder: 12878:12879 ioctl c0306201 20000480 returned -22 [ 190.296338][T12881] binder: 12880:12881 tried to acquire reference to desc 0, got 1 instead [ 190.316461][T12881] binder: 12880:12881 tried to acquire reference to desc 0, got 1 instead [ 190.501330][T12891] binder: 12890:12891 ioctl c0306201 20000080 returned -14 [ 190.576900][T12893] FAULT_INJECTION: forcing a failure. [ 190.576900][T12893] name failslab, interval 1, probability 5, space 0, times 9942 [ 190.586346][T12893] CPU: 1 PID: 12893 Comm: syz.3.3509 Not tainted syzkaller #0 [ 190.587632][T12893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 190.589380][T12893] Call trace: [ 190.589956][T12893] dump_backtrace+0x1c4/0x1f0 [ 190.590798][T12893] show_stack+0x2c/0x3c [ 190.591555][T12893] __dump_stack+0x30/0x40 [ 190.592359][T12893] dump_stack_lvl+0xf4/0x15c [ 190.593237][T12893] dump_stack+0x1c/0x5c [ 190.593988][T12893] should_fail_ex+0x3cc/0x524 [ 190.594843][T12893] __should_failslab+0xc0/0x11c [ 190.595737][T12893] should_failslab+0x10/0x28 [ 190.596581][T12893] __kmem_cache_alloc_node+0x7c/0x318 [ 190.597560][T12893] __kmalloc+0xc4/0x180 [ 190.598289][T12893] tomoyo_realpath_from_path+0xc4/0x508 [ 190.599246][T12893] tomoyo_path_number_perm+0x1c4/0x540 [ 190.600267][T12893] tomoyo_path_mkdir+0xac/0xf8 [ 190.601156][T12893] security_path_mkdir+0xec/0x13c [ 190.602037][T12893] do_mkdirat+0x150/0x3ec [ 190.602808][T12893] __arm64_sys_mkdirat+0x90/0xa8 [ 190.603699][T12893] invoke_syscall+0x98/0x290 [ 190.604551][T12893] el0_svc_common+0x13c/0x258 [ 190.605393][T12893] do_el0_svc+0x5c/0x134 [ 190.606171][T12893] el0_svc+0x58/0x12c [ 190.606891][T12893] el0t_64_sync_handler+0x84/0xf0 [ 190.607773][T12893] el0t_64_sync+0x18c/0x190 [ 190.662761][T12893] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.036687][ T7165] binder_debug: 46 callbacks suppressed [ 191.036694][ T7165] binder: release 12876:12877 transaction 655 out, still active [ 191.038973][ T7165] binder: undelivered TRANSACTION_COMPLETE [ 191.055664][ T7165] binder: release 12876:12877 transaction 655 in, still active [ 191.057322][ T7165] binder: send failed reply for transaction 655, target dead [ 191.058926][ T7165] binder: undelivered TRANSACTION_ERROR: 29189 [ 191.068954][T12909] binder: 12909:12907 cannot find target node [ 191.078789][T12909] binder: 12907:12909 transaction call to 0:0 failed 694/29201/-22, size 0-0 line 3062 [ 191.084207][T12909] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.697784][ T1969] binder: undelivered TRANSACTION_ERROR: 29201 [ 191.823082][T12928] FAULT_INJECTION: forcing a failure. [ 191.823082][T12928] name failslab, interval 1, probability 5, space 0, times 9941 [ 191.825713][T12928] CPU: 0 PID: 12928 Comm: syz.6.3520 Not tainted syzkaller #0 [ 191.827102][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 191.829112][T12928] Call trace: [ 191.829780][T12928] dump_backtrace+0x1c4/0x1f0 [ 191.830702][T12928] show_stack+0x2c/0x3c [ 191.831535][T12928] __dump_stack+0x30/0x40 [ 191.832416][T12928] dump_stack_lvl+0xf4/0x15c [ 191.833320][T12928] dump_stack+0x1c/0x5c [ 191.834156][T12928] should_fail_ex+0x3cc/0x524 [ 191.835040][T12928] __should_failslab+0xc0/0x11c [ 191.835985][T12928] should_failslab+0x10/0x28 [ 191.836886][T12928] __kmem_cache_alloc_node+0x7c/0x318 [ 191.837897][T12928] __kmalloc+0xc4/0x180 [ 191.838666][T12928] tomoyo_supervisor+0xa7c/0xf5c [ 191.839581][T12928] tomoyo_path_number_perm+0x3c0/0x540 [ 191.840573][T12928] tomoyo_path_mkdir+0xac/0xf8 [ 191.841432][T12928] security_path_mkdir+0xec/0x13c [ 191.842349][T12928] do_mkdirat+0x150/0x3ec [ 191.843155][T12928] __arm64_sys_mkdirat+0x90/0xa8 [ 191.844058][T12928] invoke_syscall+0x98/0x290 [ 191.844917][T12928] el0_svc_common+0x13c/0x258 [ 191.845783][T12928] do_el0_svc+0x5c/0x134 [ 191.846548][T12928] el0_svc+0x58/0x12c [ 191.847249][T12928] el0t_64_sync_handler+0x84/0xf0 [ 191.848172][T12928] el0t_64_sync+0x18c/0x190 [ 191.949912][T12934] md: md0: raid1 would not accept array [ 191.951243][T12940] md: could not open device unknown-block(1,0). [ 192.046614][T12948] md: couldn't update array info. -22 [ 192.094307][T12950] binder: 12949:12950 ioctl c0306201 20000080 returned -14 [ 192.166246][T12956] binder: 12956:12949 cannot find target node [ 192.239811][ T4334] Bluetooth: hci1: command 0x0409 tx timeout [ 192.532793][T12966] FAULT_INJECTION: forcing a failure. [ 192.532793][T12966] name failslab, interval 1, probability 5, space 0, times 9940 [ 192.535434][T12966] CPU: 0 PID: 12966 Comm: syz.5.3533 Not tainted syzkaller #0 [ 192.536626][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 192.538474][T12966] Call trace: [ 192.539077][T12966] dump_backtrace+0x1c4/0x1f0 [ 192.539928][T12966] show_stack+0x2c/0x3c [ 192.540677][T12966] __dump_stack+0x30/0x40 [ 192.541472][T12966] dump_stack_lvl+0xf4/0x15c [ 192.542314][T12966] dump_stack+0x1c/0x5c [ 192.543059][T12966] should_fail_ex+0x3cc/0x524 [ 192.543917][T12966] __should_failslab+0xc0/0x11c [ 192.544806][T12966] should_failslab+0x10/0x28 [ 192.545611][T12966] kmem_cache_alloc+0x88/0x310 [ 192.546442][T12966] getname_flags+0xb8/0x458 [ 192.547254][T12966] user_path_at_empty+0x40/0x84 [ 192.548154][T12966] __arm64_sys_mount+0x468/0x5a0 [ 192.549007][T12966] invoke_syscall+0x98/0x290 [ 192.549827][T12966] el0_svc_common+0x13c/0x258 [ 192.550666][T12966] do_el0_svc+0x5c/0x134 [ 192.551444][T12966] el0_svc+0x58/0x12c [ 192.552165][T12966] el0t_64_sync_handler+0x84/0xf0 [ 192.553086][T12966] el0t_64_sync+0x18c/0x190 [ 192.649260][ C1] net_ratelimit: 48 callbacks suppressed [ 192.891910][T12981] netlink: 172 bytes leftover after parsing attributes in process `syz.6.3538'. [ 192.893549][T12981] netlink: 'syz.6.3538': attribute type 1 has an invalid length. [ 192.895022][T12981] netlink: 'syz.6.3538': attribute type 1 has an invalid length. [ 192.918742][T12981] netlink: 'syz.6.3538': attribute type 2 has an invalid length. [ 192.927249][T12979] device syzkaller0 entered promiscuous mode [ 192.963766][T12983] md: couldn't update array info. -22 [ 192.970143][T12983] md: could not open device unknown-block(1,1). [ 192.971231][T12983] md: md_import_device returned -16 [ 192.979108][T12983] md: could not open device unknown-block(1,2). [ 192.983885][T12983] md: md_import_device returned -16 [ 193.138676][T13001] md: could not open device unknown-block(1,0). [ 193.223851][T13005] binder: 13004:13005 ioctl c0306201 20000080 returned -14 [ 193.536099][T13009] md: couldn't update array info. -22 [ 193.543248][T13009] md: could not open device unknown-block(1,1). [ 193.544463][T13009] md: md_import_device returned -16 [ 193.546314][T13009] md: could not open device unknown-block(1,2). [ 193.547345][T13009] md: md_import_device returned -16 [ 193.762822][T13030] binder_alloc: 13025: binder_alloc_buf, no vma [ 194.036938][T13033] md: could not open device unknown-block(1,0). [ 194.216858][T13039] md: couldn't update array info. -22 [ 194.225313][T13039] md: could not open device unknown-block(1,1). [ 194.230453][T13039] md: md_import_device returned -16 [ 194.235242][T13039] md: could not open device unknown-block(1,2). [ 194.245908][T13039] md: md_import_device returned -16 [ 194.337708][T13045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.348728][T13045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.378980][T13045] input: syz0 as /devices/virtual/input/input15 [ 194.467590][T13049] 0x000000000000-0x000000010000 : "" [ 194.472433][T13049] ftl_cs: FTL header not found. [ 194.476734][T13049] FAULT_INJECTION: forcing a failure. [ 194.476734][T13049] name failslab, interval 1, probability 5, space 0, times 9939 [ 194.491026][T13049] CPU: 0 PID: 13049 Comm: syz.2.3568 Not tainted syzkaller #0 [ 194.492298][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 194.494305][T13049] Call trace: [ 194.494996][T13049] dump_backtrace+0x1c4/0x1f0 [ 194.495920][T13049] show_stack+0x2c/0x3c [ 194.496739][T13049] __dump_stack+0x30/0x40 [ 194.497599][T13049] dump_stack_lvl+0xf4/0x15c [ 194.498458][T13049] dump_stack+0x1c/0x5c [ 194.499258][T13049] should_fail_ex+0x3cc/0x524 [ 194.500131][T13049] __should_failslab+0xc0/0x11c [ 194.500979][T13049] should_failslab+0x10/0x28 [ 194.501782][T13049] kmem_cache_alloc+0x88/0x310 [ 194.502633][T13049] __kernfs_new_node+0xec/0x5fc [ 194.503533][T13049] kernfs_new_node+0x120/0x230 [ 194.504424][T13049] __kernfs_create_file+0x60/0x2e0 [ 194.505314][T13049] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 194.506323][T13049] internal_create_group+0x3e8/0xb24 [ 194.507319][T13049] sysfs_create_groups+0x60/0x134 [ 194.508262][T13049] kobject_add_internal+0x5e4/0xb18 [ 194.509195][T13049] kobject_add+0x144/0x20c [ 194.509995][T13049] blk_register_queue+0x84/0x334 [ 194.510928][T13049] device_add_disk+0x53c/0xe04 [ 194.511791][T13049] add_mtd_blktrans_dev+0xc48/0x1090 [ 194.512762][T13049] mtdblock_add_mtd+0x158/0x218 [ 194.513656][T13049] blktrans_notify_add+0xa8/0xf8 [ 194.514555][T13049] add_mtd_device+0xdcc/0x130c [ 194.515441][T13049] mtd_add_partition+0x224/0x3bc [ 194.516330][T13049] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 194.517250][T13049] mtdchar_ioctl+0x1238/0x1aec [ 194.518105][T13049] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 194.519191][T13049] __arm64_sys_ioctl+0x14c/0x1c8 [ 194.520220][T13049] invoke_syscall+0x98/0x290 [ 194.521127][T13049] el0_svc_common+0x13c/0x258 [ 194.522018][T13049] do_el0_svc+0x5c/0x134 [ 194.522813][T13049] el0_svc+0x58/0x12c [ 194.523555][T13049] el0t_64_sync_handler+0x84/0xf0 [ 194.524486][T13049] el0t_64_sync+0x18c/0x190 [ 194.559817][T13049] kobject_add_internal failed for queue (error: -12 parent: mtdblock50) [ 194.637226][T13057] binder: 13056:13057 ioctl c0306201 20000080 returned -14 [ 194.657671][T13055] md: could not open device unknown-block(1,0). [ 194.702900][T13059] device syzkaller0 entered promiscuous mode [ 194.819750][T13070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3578'. [ 194.898802][T13076] device syzkaller0 entered promiscuous mode [ 195.737435][T13101] binder: 13100:13101 ioctl c0306201 20000700 returned -14 [ 195.797515][T13105] device syzkaller0 entered promiscuous mode [ 195.816778][T13111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.818494][T13111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.852813][T13111] input: syz0 as /devices/virtual/input/input16 [ 195.929809][T13117] device syzkaller0 entered promiscuous mode [ 195.951485][T13119] binder_user_error: 45 callbacks suppressed [ 195.951491][T13119] binder: 13118:13119 got transaction to invalid handle, 1 [ 195.954684][T13119] binder: 13118:13119 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 195.956861][T13119] binder: 13119 RLIMIT_NICE not set [ 196.005980][T13122] binder: 13118:13122 got transaction to invalid handle, 3 [ 196.012203][T13122] binder: 13118:13122 got transaction to invalid handle, 1 [ 196.148847][T13129] binder: 13128:13129 ioctl c0306201 200000c0 returned -14 [ 196.153904][T13129] binder: 13128:13129 unknown command 1074553619 [ 196.155039][T13129] binder: 13128:13129 ioctl c0306201 20000a80 returned -22 [ 196.181805][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3604'. [ 196.183453][T13131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3604'. [ 196.224401][T13133] binder: 13132:13133 tried to acquire reference to desc 0, got 1 instead [ 196.227992][T13133] binder_debug: 39 callbacks suppressed [ 196.227998][T13133] binder: release 13132:13133 transaction 739 out, still active [ 196.237162][T13133] binder: undelivered TRANSACTION_COMPLETE [ 196.240238][T13133] binder: 13132:13133 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 196.244823][T13133] binder: 13133 RLIMIT_NICE not set [ 196.245728][T13133] binder: 13133 RLIMIT_NICE not set [ 196.249175][T13133] binder: 13133 RLIMIT_NICE not set [ 196.252648][T13133] binder: 13133:13132 reply target not found [ 196.253665][T13133] binder: 13132:13133 transaction reply to 0:0 failed 740/29189/0, size 0-0 line 2992 [ 196.258821][T13133] binder: send failed reply for transaction 739, target dead [ 196.277823][ T7165] binder: undelivered TRANSACTION_ERROR: 29190 [ 196.295531][T13139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.297237][T13139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.329146][T13142] device syzkaller0 entered promiscuous mode [ 196.498862][T13145] device syzkaller0 entered promiscuous mode [ 196.574143][ T7165] binder: release 13152:13153 transaction 746 out, still active [ 196.575537][ T7165] binder: undelivered TRANSACTION_COMPLETE [ 196.576643][ T7165] binder: undelivered TRANSACTION_COMPLETE [ 196.588543][ T7165] binder: undelivered transaction 745, process died. [ 197.325761][T13173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.327763][T13173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.338521][T13173] input: syz0 as /devices/virtual/input/input17 [ 197.418562][T13179] device syzkaller0 entered promiscuous mode [ 197.618706][T13191] device syzkaller0 entered promiscuous mode [ 197.633058][T13181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.634982][T13181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.679247][ C0] net_ratelimit: 48 callbacks suppressed [ 198.614682][T13213] device syzkaller0 entered promiscuous mode [ 198.615925][T13218] binder: 13217:13218 ioctl c0306201 20000080 returned -14 [ 198.799434][T13232] device syzkaller0 entered promiscuous mode [ 199.322195][T13241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3647'. [ 199.442940][T13260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.445807][T13260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.526946][T13267] device syzkaller0 entered promiscuous mode [ 199.751057][T13277] device syzkaller0 entered promiscuous mode [ 199.787645][T13283] FAULT_INJECTION: forcing a failure. [ 199.787645][T13283] name failslab, interval 1, probability 5, space 0, times 9938 [ 199.793602][T13283] CPU: 1 PID: 13283 Comm: syz.2.3662 Not tainted syzkaller #0 [ 199.794792][T13283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 199.796415][T13283] Call trace: [ 199.796957][T13283] dump_backtrace+0x1c4/0x1f0 [ 199.797711][T13283] show_stack+0x2c/0x3c [ 199.798394][T13283] __dump_stack+0x30/0x40 [ 199.799126][T13283] dump_stack_lvl+0xf4/0x15c [ 199.799991][T13283] dump_stack+0x1c/0x5c [ 199.800881][T13283] should_fail_ex+0x3cc/0x524 [ 199.801857][T13283] __should_failslab+0xc0/0x11c [ 199.802818][T13283] should_failslab+0x10/0x28 [ 199.803758][T13283] kmem_cache_alloc+0x88/0x310 [ 199.804711][T13283] key_alloc+0x284/0xdec [ 199.805562][T13283] keyring_alloc+0x68/0xe0 [ 199.806418][T13283] lookup_user_key+0x354/0xf94 [ 199.807347][T13283] __arm64_sys_add_key+0x3d4/0x520 [ 199.808350][T13283] invoke_syscall+0x98/0x290 [ 199.809246][T13283] el0_svc_common+0x13c/0x258 [ 199.810097][T13283] do_el0_svc+0x5c/0x134 [ 199.810872][T13283] el0_svc+0x58/0x12c [ 199.811619][T13283] el0t_64_sync_handler+0x84/0xf0 [ 199.812536][T13283] el0t_64_sync+0x18c/0x190 [ 200.035606][T13309] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3671'. [ 200.554985][T13320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.557422][T13320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.066083][T13335] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 201.070796][T13335] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 201.093155][T13339] binder_user_error: 43 callbacks suppressed [ 201.093164][T13339] binder: 13338:13339 got transaction to invalid handle, 1 [ 201.140223][T13346] binder: 13344:13346 tried to acquire reference to desc 0, got 1 instead [ 201.142279][T13346] binder_alloc: 13344: binder_alloc_buf, no vma [ 201.144192][T13346] binder: 13344:13346 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 201.146902][T13346] binder: 13346 RLIMIT_NICE not set [ 201.194916][T13351] binder: 13344:13351 got transaction to invalid handle, 3 [ 201.196583][T13351] binder_alloc: 13344: binder_alloc_buf, no vma [ 201.211098][T13353] binder: 13352:13353 got transaction to invalid handle, 1 [ 201.218771][T13353] binder: 13352:13353 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 201.224256][T13353] binder: 13353 RLIMIT_NICE not set [ 201.262352][T13347] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3687'. [ 201.270859][T13357] binder: 13352:13357 got transaction to invalid handle, 3 [ 201.272809][T13357] binder_debug: 60 callbacks suppressed [ 201.272824][T13357] binder: 13357:13352 cannot find target node [ 201.273936][T13357] binder: 13352:13357 transaction call to 0:0 failed 792/29201/-22, size 0-0 line 3062 [ 201.286415][T13357] binder: 13352:13357 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 201.452062][T13370] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 201.456502][T13370] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 201.509163][T13372] batman_adv: batadv0: Adding interface: syzkaller0 [ 201.512063][T13372] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.526790][T13372] batman_adv: batadv0: Interface activated: syzkaller0 [ 201.666817][T13371] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 201.720318][T13371] batman_adv: batadv0: Removing interface: syzkaller0 [ 201.982779][ T7165] binder: undelivered TRANSACTION_ERROR: 29189 [ 201.984194][ T7165] binder: undelivered TRANSACTION_ERROR: 29189 [ 202.036928][T13389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.038663][T13389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.048121][ T7165] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.055071][ T7165] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.473133][T13402] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 202.475429][T13402] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 202.611344][T13406] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3710'. [ 202.719711][ C0] net_ratelimit: 46 callbacks suppressed [ 202.784767][T13414] binder_alloc: 13413: binder_alloc_buf, no vma [ 202.785940][T13414] binder: cannot allocate buffer: vma cleared, target dead or dying [ 202.785974][T13414] binder: 13413:13414 transaction call to 13413:0 failed 797/29189/-3, size 72-24 line 3247 [ 202.797240][ T4338] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 202.834503][ T4338] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 202.837347][ T4338] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 202.840385][ T4338] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 202.842843][ T4338] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 202.844440][ T4338] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 202.872967][T13418] binder: 13418:13413 cannot find target node [ 202.874081][T13418] binder: 13413:13418 transaction call to 0:0 failed 798/29201/-22, size 0-0 line 3062 [ 202.878684][T13418] binder_alloc: 13413: binder_alloc_buf, no vma [ 202.914088][T13415] rxe_eth0 speed is unknown, defaulting to 1000 [ 202.972483][T13421] tipc: Enabling of bearer rejected, failed to enable media [ 203.095834][T13429] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 203.585954][T13415] chnl_net:caif_netlink_parms(): no params data found [ 203.747566][T13441] device syzkaller0 entered promiscuous mode [ 203.926159][T13452] syz.6.3725: attempt to access beyond end of device [ 203.926159][T13452] nbd6: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 203.934743][T13452] gfs2: error 10 reading superblock [ 204.168835][T13415] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.182306][T13415] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.197010][T13415] device bridge_slave_0 entered promiscuous mode [ 204.225066][T13415] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.236539][T13415] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.249132][T13415] device bridge_slave_1 entered promiscuous mode [ 204.263055][ T1616] tipc: Left network mode [ 204.331690][T13462] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 204.534313][T13415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.545686][T13415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.661400][T13469] binder_alloc: 13468: binder_alloc_buf, no vma [ 204.680984][T13415] team0: Port device team_slave_0 added [ 204.702247][T13415] team0: Port device team_slave_1 added [ 204.715143][T13470] binder_alloc: 13468: binder_alloc_buf, no vma [ 204.719316][ T4334] Bluetooth: hci0: command 0x1003 tx timeout [ 204.721318][ T4345] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.809071][T13415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.817987][T13415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.824160][T13476] md: couldn't update array info. -22 [ 204.842065][T13476] md: could not open device unknown-block(1,1). [ 204.849404][T13476] md: md_import_device returned -16 [ 204.853435][T13415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.858058][T13476] md: could not open device unknown-block(1,2). [ 204.867346][T13476] md: md_import_device returned -16 [ 204.889318][ T4345] Bluetooth: hci8: command 0x0409 tx timeout [ 204.922732][T13415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.923923][T13415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.928531][T13415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.954609][T13478] device syzkaller0 entered promiscuous mode [ 205.122708][T13488] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 205.212896][T13495] device-mapper: table: 248:0: zero-length target [ 205.214434][T13495] device-mapper: ioctl: error adding target to table [ 205.262499][T13415] device hsr_slave_0 entered promiscuous mode [ 205.300902][T13415] device hsr_slave_1 entered promiscuous mode [ 205.396833][T13490] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3741'. [ 205.558551][T13506] binder_alloc: 13504: binder_alloc_buf, no vma [ 206.368956][ T1969] binder_debug: 39 callbacks suppressed [ 206.368961][ T1969] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.388968][ T1969] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.392575][ T1969] binder: undelivered TRANSACTION_ERROR: 29189 [ 206.501857][T13523] 0x000000000000-0x000000010000 : "" [ 206.506317][T13523] ftl_cs: FTL header not found. [ 206.570222][T13523] FAULT_INJECTION: forcing a failure. [ 206.570222][T13523] name failslab, interval 1, probability 5, space 0, times 9937 [ 206.572975][T13523] CPU: 0 PID: 13523 Comm: syz.3.3754 Not tainted syzkaller #0 [ 206.574361][T13523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 206.576313][T13523] Call trace: [ 206.576947][T13523] dump_backtrace+0x1c4/0x1f0 [ 206.577849][T13523] show_stack+0x2c/0x3c [ 206.578580][T13523] __dump_stack+0x30/0x40 [ 206.579392][T13523] dump_stack_lvl+0xf4/0x15c [ 206.580240][T13523] dump_stack+0x1c/0x5c [ 206.581022][T13523] should_fail_ex+0x3cc/0x524 [ 206.581914][T13523] __should_failslab+0xc0/0x11c [ 206.582817][T13523] should_failslab+0x10/0x28 [ 206.583666][T13523] kmem_cache_alloc+0x88/0x310 [ 206.584537][T13523] __kernfs_new_node+0xec/0x5fc [ 206.585421][T13523] kernfs_new_node+0x120/0x230 [ 206.586283][T13523] __kernfs_create_file+0x60/0x2e0 [ 206.587201][T13523] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 206.588189][T13523] internal_create_group+0x3e8/0xb24 [ 206.589170][T13523] sysfs_create_groups+0x60/0x134 [ 206.590094][T13523] kobject_add_internal+0x5e4/0xb18 [ 206.590118][T13523] kobject_add+0x144/0x20c [ 206.591852][T13523] blk_register_queue+0x84/0x334 [ 206.592721][T13523] device_add_disk+0x53c/0xe04 [ 206.593564][T13523] add_mtd_blktrans_dev+0xc48/0x1090 [ 206.594526][T13523] mtdblock_add_mtd+0x158/0x218 [ 206.595389][T13523] blktrans_notify_add+0xa8/0xf8 [ 206.596276][T13523] add_mtd_device+0xdcc/0x130c [ 206.597095][T13523] mtd_add_partition+0x224/0x3bc [ 206.597110][T13523] mtdchar_blkpg_ioctl+0x2dc/0x338 [ 206.598811][T13523] mtdchar_ioctl+0x1238/0x1aec [ 206.599619][T13523] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 206.599639][T13523] __arm64_sys_ioctl+0x14c/0x1c8 [ 206.599650][T13523] invoke_syscall+0x98/0x290 [ 206.602161][T13523] el0_svc_common+0x13c/0x258 [ 206.603008][T13523] do_el0_svc+0x5c/0x134 [ 206.603762][T13523] el0_svc+0x58/0x12c [ 206.604498][T13523] el0t_64_sync_handler+0x84/0xf0 [ 206.605400][T13523] el0t_64_sync+0x18c/0x190 [ 206.609208][T13523] kobject_add_internal failed for queue (error: -12 parent: mtdblock51) [ 206.615083][T13525] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3753'. [ 206.959459][ T4334] Bluetooth: hci8: command 0x041b tx timeout [ 207.125701][T13415] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.140965][T13536] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 207.171777][T13415] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.215473][ T1616] device hsr_slave_0 left promiscuous mode [ 207.221856][T13538] device-mapper: table: 248:0: zero-length target [ 207.223269][T13538] device-mapper: ioctl: error adding target to table [ 207.269447][ T1616] device hsr_slave_1 left promiscuous mode [ 207.279346][ T4334] Bluetooth: hci6: command 0x0409 tx timeout [ 207.403410][ T1616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.408140][ T1616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.409933][ T1616] device bridge_slave_1 left promiscuous mode [ 207.412081][ T1616] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.415262][T13544] binder_user_error: 39 callbacks suppressed [ 207.415268][T13544] binder: tried to use weak ref as strong ref [ 207.417406][T13544] binder: 13543:13544 Acquire 1 refcount change on invalid ref 0 ret -22 [ 207.424196][T13544] binder: 13543:13544 got transaction to invalid handle, 1 [ 207.425478][T13544] binder: 13544:13543 cannot find target node [ 207.426702][T13544] binder: 13543:13544 transaction call to 0:0 failed 843/29201/-22, size 72-24 line 3062 [ 207.429201][T13544] binder: 13543:13544 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 207.431957][T13544] binder: 13544 RLIMIT_NICE not set [ 207.433030][T13544] binder: 13543:13544 got transaction to invalid handle, 3 [ 207.434291][T13544] binder: 13544:13543 cannot find target node [ 207.435352][T13544] binder: 13543:13544 transaction call to 0:0 failed 844/29201/-22, size 0-0 line 3062 [ 207.437120][T13544] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.439671][ T4345] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 207.460493][ T1616] device bridge_slave_0 left promiscuous mode [ 207.461686][ T1616] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.478624][ T7165] binder: undelivered TRANSACTION_ERROR: 29201 [ 207.496615][T13547] binder: 13545:13547 tried to acquire reference to desc 0, got 1 instead [ 207.498378][T13547] binder_alloc: 13545: binder_alloc_buf, no vma [ 207.507208][T13547] binder: cannot allocate buffer: vma cleared, target dead or dying [ 207.507941][T13547] binder: 13545:13547 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 207.524469][T13547] binder: 13547 RLIMIT_NICE not set [ 207.558968][T13552] binder: 13545:13552 got transaction to invalid handle, 3 [ 207.839544][ C0] net_ratelimit: 51 callbacks suppressed [ 209.039339][ T48] Bluetooth: hci8: command 0x040f tx timeout [ 209.049596][ T4345] Bluetooth: hci1: command 0x1003 tx timeout [ 209.051565][ T4338] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 209.082595][ T1616] team0 (unregistering): Port device team_slave_1 removed [ 209.100139][T13564] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 209.223929][ T1616] team0 (unregistering): Port device team_slave_0 removed [ 209.349917][ T1616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.359371][ T4338] Bluetooth: hci6: command 0x0409 tx timeout [ 209.503257][ T1616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.660378][ T1616] bond0 (unregistering): Released all slaves [ 210.882953][T13415] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.911933][T13415] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.932697][T13538] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3757'. [ 210.957914][T13558] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3765'. [ 211.066633][T13415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.069749][T13579] binder: 13578:13579 ioctl c0306201 20000080 returned -14 [ 211.091938][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.093466][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.097194][T13415] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.104937][T13581] binder_alloc: 13580: binder_alloc_buf, no vma [ 211.112379][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.114198][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.116018][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.117314][ T5874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.119128][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.124751][T13169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.126647][T13169] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.129645][ T4345] Bluetooth: hci8: command 0x0419 tx timeout [ 211.135917][T13169] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.137081][T13169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.138694][T13585] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 211.162836][ T5874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.165299][T13583] device syzkaller0 entered promiscuous mode [ 211.198724][T13588] loop5: detected capacity change from 0 to 128 [ 211.202274][T13588] EXT4-fs: inline encryption not supported [ 211.203626][T13588] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 211.209742][ T4338] Bluetooth: hci0: command 0x1003 tx timeout [ 211.211806][ T48] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 211.223031][T13169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.226897][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.235329][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.252634][T13588] FAULT_INJECTION: forcing a failure. [ 211.252634][T13588] name failslab, interval 1, probability 5, space 0, times 9936 [ 211.254738][T13588] CPU: 0 PID: 13588 Comm: syz.5.3777 Not tainted syzkaller #0 [ 211.256062][T13588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 211.257998][T13588] Call trace: [ 211.258600][T13588] dump_backtrace+0x1c4/0x1f0 [ 211.259479][T13588] show_stack+0x2c/0x3c [ 211.260295][T13588] __dump_stack+0x30/0x40 [ 211.261130][T13588] dump_stack_lvl+0xf4/0x15c [ 211.262024][T13588] dump_stack+0x1c/0x5c [ 211.262849][T13588] should_fail_ex+0x3cc/0x524 [ 211.263765][T13588] __should_failslab+0xc0/0x11c [ 211.264729][T13588] should_failslab+0x10/0x28 [ 211.265615][T13588] __kmem_cache_alloc_node+0x7c/0x318 [ 211.266680][T13588] __kmalloc+0xc4/0x180 [ 211.267458][T13588] __arm64_sys_memfd_create+0x11c/0x458 [ 211.268494][T13588] invoke_syscall+0x98/0x290 [ 211.269339][T13588] el0_svc_common+0x13c/0x258 [ 211.270216][T13588] do_el0_svc+0x5c/0x134 [ 211.271003][T13588] el0_svc+0x58/0x12c [ 211.271746][T13588] el0t_64_sync_handler+0x84/0xf0 [ 211.272646][T13588] el0t_64_sync+0x18c/0x190 [ 211.281621][T13588] FAULT_INJECTION: forcing a failure. [ 211.281621][T13588] name failslab, interval 1, probability 5, space 0, times 9935 [ 211.288932][T13588] CPU: 0 PID: 13588 Comm: syz.5.3777 Not tainted syzkaller #0 [ 211.290291][T13588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 211.292294][T13588] Call trace: [ 211.292943][T13588] dump_backtrace+0x1c4/0x1f0 [ 211.293848][T13588] show_stack+0x2c/0x3c [ 211.294654][T13588] __dump_stack+0x30/0x40 [ 211.295498][T13588] dump_stack_lvl+0xf4/0x15c [ 211.296403][T13588] dump_stack+0x1c/0x5c [ 211.297213][T13588] should_fail_ex+0x3cc/0x524 [ 211.298118][T13588] __should_failslab+0xc0/0x11c [ 211.299016][T13588] should_failslab+0x10/0x28 [ 211.299897][T13588] slab_pre_alloc_hook+0x6c/0x31c [ 211.300782][T13588] kmem_cache_alloc_lru+0x60/0x284 [ 211.301705][T13588] shmem_alloc_inode+0x2c/0x48 [ 211.302558][T13588] new_inode_pseudo+0x68/0x1cc [ 211.303445][T13588] new_inode+0x38/0x174 [ 211.304220][T13588] shmem_get_inode+0x2cc/0xa8c [ 211.305099][T13588] __shmem_file_setup+0xf8/0x26c [ 211.305998][T13588] shmem_file_setup+0x40/0x54 [ 211.306840][T13588] __arm64_sys_memfd_create+0x2d8/0x458 [ 211.307860][T13588] invoke_syscall+0x98/0x290 [ 211.308697][T13588] el0_svc_common+0x13c/0x258 [ 211.309549][T13588] do_el0_svc+0x5c/0x134 [ 211.310317][T13588] el0_svc+0x58/0x12c [ 211.311015][T13588] el0t_64_sync_handler+0x84/0xf0 [ 211.311892][T13588] el0t_64_sync+0x18c/0x190 [ 211.337594][T13588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.339980][T13588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.341950][T13588] FAULT_INJECTION: forcing a failure. [ 211.341950][T13588] name failslab, interval 1, probability 5, space 0, times 9933 [ 211.344501][T13588] CPU: 0 PID: 13588 Comm: syz.5.3777 Not tainted syzkaller #0 [ 211.345756][T13588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 211.347421][T13588] Call trace: [ 211.348034][T13588] dump_backtrace+0x1c4/0x1f0 [ 211.349011][T13588] show_stack+0x2c/0x3c [ 211.349842][T13588] __dump_stack+0x30/0x40 [ 211.349863][T13588] dump_stack_lvl+0xf4/0x15c [ 211.351508][T13588] dump_stack+0x1c/0x5c [ 211.352287][T13588] should_fail_ex+0x3cc/0x524 [ 211.353212][T13588] __should_failslab+0xc0/0x11c [ 211.354128][T13588] should_failslab+0x10/0x28 [ 211.355118][T13588] kmem_cache_alloc_node+0x8c/0x344 [ 211.356215][T13588] __alloc_skb+0x128/0x728 [ 211.357144][T13588] netlink_sendmsg+0x558/0x9d8 [ 211.358143][T13588] ____sys_sendmsg+0x588/0x90c [ 211.359126][T13588] __sys_sendmsg+0x288/0x374 [ 211.360063][T13588] __arm64_sys_sendmsg+0x80/0x94 [ 211.361020][T13588] invoke_syscall+0x98/0x290 [ 211.361949][T13588] el0_svc_common+0x13c/0x258 [ 211.362888][T13588] do_el0_svc+0x5c/0x134 [ 211.363750][T13588] el0_svc+0x58/0x12c [ 211.364559][T13588] el0t_64_sync_handler+0x84/0xf0 [ 211.365572][T13588] el0t_64_sync+0x18c/0x190 [ 211.384509][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 211.386024][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.387608][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.392561][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.396372][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.398040][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.400003][T10893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.404088][T13415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 211.457550][T13599] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3781'. [ 211.480205][T13602] device-mapper: table: 248:0: zero-length target [ 211.481419][T13602] device-mapper: ioctl: error adding target to table [ 211.537657][T13607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.543947][T13607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.548054][T13596] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3780'. [ 211.558693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 211.560717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.569600][T13415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.571676][T13607] input: syz0 as /devices/virtual/input/input18 [ 211.590180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.592910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.620967][T13415] device veth0_vlan entered promiscuous mode [ 211.622364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.624089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.636394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.643578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.649607][T13415] device veth1_vlan entered promiscuous mode [ 211.659359][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.661017][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.662641][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.664456][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.671252][T13415] device veth0_macvtap entered promiscuous mode [ 211.678537][T13415] device veth1_macvtap entered promiscuous mode [ 211.712394][T13415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.714068][T13415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.716018][T13415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.718333][T13415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.724665][T13415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.726553][T13415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.730161][T13415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.732064][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.733663][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.735319][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.737030][T13614] binder_debug: 20 callbacks suppressed [ 211.737041][T13614] binder: 13614:13613 cannot find target node [ 211.738199][T13614] binder: 13613:13614 transaction call to 0:0 failed 869/29201/-22, size 72-24 line 3062 [ 211.745107][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.746730][T13614] binder: 13614:13613 cannot find target node [ 211.751763][T13415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.753534][T13415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.755359][T13415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.756390][T13614] binder: 13613:13614 transaction call to 0:0 failed 870/29201/-22, size 0-0 line 3062 [ 211.757146][T13415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.765143][T13415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.765574][T13614] binder: undelivered TRANSACTION_ERROR: 29201 [ 211.767082][T13415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.773388][T13415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.774746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.776403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.785059][T13415] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.786535][T13415] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.788046][T13415] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.790530][T13415] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.791786][ T113] binder: undelivered TRANSACTION_ERROR: 29201 [ 211.827100][T13616] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 211.852741][T13169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.854208][T13169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.855833][T13169] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 211.883541][T13169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.884837][T13169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.886318][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 211.907550][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 211.918429][ T24] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.937144][T13620] 0x000000000000-0x000000010000 : "" [ 211.958679][T13620] ftl_cs: FTL header not found. [ 212.005585][T13623] device syzkaller0 entered promiscuous mode [ 212.040140][T13629] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3791'. [ 212.111919][T13637] binder_alloc: 13636: binder_alloc_buf, no vma [ 212.113948][T13637] binder: cannot allocate buffer: vma cleared, target dead or dying [ 212.113988][T13637] binder: 13636:13637 transaction call to 13636:0 failed 875/29189/-3, size 72-24 line 3247 [ 212.152577][T13642] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 212.270350][T13649] binder: 13648:13649 unknown command 1074553619 [ 212.271596][T13649] binder: 13648:13649 ioctl c0306201 20000040 returned -22 [ 212.274369][T13649] binder: 13648:13649 ioctl c0189379 20000380 returned -22 [ 212.306769][T13651] loop2: detected capacity change from 0 to 128 [ 212.308556][T13651] EXT4-fs: inline encryption not supported [ 212.311760][T13651] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 212.345964][T13651] FAULT_INJECTION: forcing a failure. [ 212.345964][T13651] name failslab, interval 1, probability 5, space 0, times 9932 [ 212.348386][T13651] CPU: 0 PID: 13651 Comm: syz.2.3800 Not tainted syzkaller #0 [ 212.349743][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 212.351685][T13651] Call trace: [ 212.352305][T13651] dump_backtrace+0x1c4/0x1f0 [ 212.353182][T13651] show_stack+0x2c/0x3c [ 212.353961][T13651] __dump_stack+0x30/0x40 [ 212.354788][T13651] dump_stack_lvl+0xf4/0x15c [ 212.355661][T13651] dump_stack+0x1c/0x5c [ 212.356477][T13651] should_fail_ex+0x3cc/0x524 [ 212.357392][T13651] __should_failslab+0xc0/0x11c [ 212.358336][T13651] should_failslab+0x10/0x28 [ 212.359186][T13651] kmem_cache_alloc+0x88/0x310 [ 212.360047][T13651] __alloc_file+0x30/0x234 [ 212.360868][T13651] alloc_empty_file+0xa0/0x184 [ 212.361786][T13651] alloc_file+0x64/0x564 [ 212.362587][T13651] alloc_file_pseudo+0x16c/0x1f4 [ 212.363481][T13651] __shmem_file_setup+0x1a0/0x26c [ 212.364413][T13651] shmem_file_setup+0x40/0x54 [ 212.365302][T13651] __arm64_sys_memfd_create+0x2d8/0x458 [ 212.366299][T13651] invoke_syscall+0x98/0x290 [ 212.367141][T13651] el0_svc_common+0x13c/0x258 [ 212.368003][T13651] do_el0_svc+0x5c/0x134 [ 212.368775][T13651] el0_svc+0x58/0x12c [ 212.369489][T13651] el0t_64_sync_handler+0x84/0xf0 [ 212.370379][T13651] el0t_64_sync+0x18c/0x190 [ 212.373611][T13651] FAULT_INJECTION: forcing a failure. [ 212.373611][T13651] name failslab, interval 1, probability 5, space 0, times 9931 [ 212.375854][T13651] CPU: 0 PID: 13651 Comm: syz.2.3800 Not tainted syzkaller #0 [ 212.377115][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 212.379072][T13651] Call trace: [ 212.379692][T13651] dump_backtrace+0x1c4/0x1f0 [ 212.380595][T13651] show_stack+0x2c/0x3c [ 212.381401][T13651] __dump_stack+0x30/0x40 [ 212.382219][T13651] dump_stack_lvl+0xf4/0x15c [ 212.383109][T13651] dump_stack+0x1c/0x5c [ 212.383830][T13651] should_fail_ex+0x3cc/0x524 [ 212.384668][T13651] __should_failslab+0xc0/0x11c [ 212.385578][T13651] should_failslab+0x10/0x28 [ 212.386423][T13651] kmem_cache_alloc+0x88/0x310 [ 212.387306][T13651] vm_area_alloc+0x2c/0xe8 [ 212.388115][T13651] mmap_region+0xb38/0x1860 [ 212.388919][T13651] do_mmap+0xa64/0x1210 [ 212.389649][T13651] vm_mmap_pgoff+0x194/0x298 [ 212.390479][T13651] ksys_mmap_pgoff+0xd0/0x5a0 [ 212.391336][T13651] __arm64_sys_mmap+0x108/0x120 [ 212.392181][T13651] invoke_syscall+0x98/0x290 [ 212.392988][T13651] el0_svc_common+0x13c/0x258 [ 212.393795][T13651] do_el0_svc+0x5c/0x134 [ 212.394549][T13651] el0_svc+0x58/0x12c [ 212.395249][T13651] el0t_64_sync_handler+0x84/0xf0 [ 212.396154][T13651] el0t_64_sync+0x18c/0x190 [ 212.404686][T13651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.406452][T13651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.889263][ C1] net_ratelimit: 70 callbacks suppressed [ 212.965081][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3801'. [ 213.177759][T13667] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 213.205833][T13669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.208430][T13669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.216776][T13669] input: syz0 as /devices/virtual/input/input19 [ 213.785790][T13671] binder_user_error: 34 callbacks suppressed [ 213.785798][T13671] binder: tried to use weak ref as strong ref [ 213.787934][T13671] binder: 13670:13671 Acquire 1 refcount change on invalid ref 0 ret -22 [ 213.791766][T13671] binder: 13670:13671 got transaction to invalid handle, 1 [ 213.868774][T13675] binder: 13674:13675 tried to acquire reference to desc 0, got 1 instead [ 213.924903][T13676] binder: 13674:13676 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 213.927366][T13676] binder: 13676 RLIMIT_NICE not set [ 213.928318][T13676] binder: 13676 RLIMIT_NICE not set [ 213.933766][T13676] binder: 13676 RLIMIT_NICE not set [ 218.079602][ C0] net_ratelimit: 62 callbacks suppressed [ 219.862611][T13632] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3792'. [ 219.886324][T13651] FAULT_INJECTION: forcing a failure. [ 219.886324][T13651] name failslab, interval 1, probability 5, space 0, times 9930 [ 219.888504][T13651] CPU: 0 PID: 13651 Comm: syz.2.3800 Not tainted syzkaller #0 [ 219.889716][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 219.891533][T13651] Call trace: [ 219.892142][T13651] dump_backtrace+0x1c4/0x1f0 [ 219.892988][T13651] show_stack+0x2c/0x3c [ 219.893757][T13651] __dump_stack+0x30/0x40 [ 219.894590][T13651] dump_stack_lvl+0xf4/0x15c [ 219.895467][T13651] dump_stack+0x1c/0x5c [ 219.896244][T13651] should_fail_ex+0x3cc/0x524 [ 219.897126][T13651] __should_failslab+0xc0/0x11c [ 219.897958][T13651] should_failslab+0x10/0x28 [ 219.898755][T13651] __kmem_cache_alloc_node+0x7c/0x318 [ 219.899731][T13651] __kmalloc_node+0xc8/0x184 [ 219.900555][T13651] kvmalloc_node+0x88/0x1d4 [ 219.901375][T13651] alloc_netdev_mqs+0x778/0xc44 [ 219.902243][T13651] rtnl_create_link+0x298/0x978 [ 219.903131][T13651] rtnl_newlink+0xfe8/0x1af0 [ 219.903951][T13651] rtnetlink_rcv_msg+0x694/0xcc4 [ 219.904997][T13651] netlink_rcv_skb+0x220/0x3ec [ 219.905997][T13651] rtnetlink_rcv+0x28/0x38 [ 219.906875][T13651] netlink_unicast+0x5fc/0x80c [ 219.907829][T13651] netlink_sendmsg+0x6f0/0x9d8 [ 219.908793][T13651] ____sys_sendmsg+0x588/0x90c [ 219.909762][T13651] __sys_sendmsg+0x288/0x374 [ 219.910682][T13651] __arm64_sys_sendmsg+0x80/0x94 [ 219.911694][T13651] invoke_syscall+0x98/0x290 [ 219.912553][T13651] el0_svc_common+0x13c/0x258 [ 219.913434][T13651] do_el0_svc+0x5c/0x134 [ 219.914232][T13651] el0_svc+0x58/0x12c [ 219.914979][T13651] el0t_64_sync_handler+0x84/0xf0 [ 219.915888][T13651] el0t_64_sync+0x18c/0x190 [ 219.996065][T13692] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 220.003460][T13692] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 220.022563][T13698] binder: tried to use weak ref as strong ref [ 220.025073][T13698] binder: 13697:13698 Acquire 1 refcount change on invalid ref 0 ret -22 [ 220.026858][T13698] binder: 13697:13698 got transaction to invalid handle, 1 [ 220.028067][T13698] binder_debug: 11 callbacks suppressed [ 220.028082][T13698] binder: 13698:13697 cannot find target node [ 220.036619][T13698] binder: 13697:13698 transaction call to 0:0 failed 893/29201/-22, size 72-24 line 3062 [ 220.061398][T13696] 0x000000000000-0x000000010000 : "" [ 220.067451][T13696] ftl_cs: FTL header not found. [ 220.568020][T13722] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3827'. [ 221.292165][T13712] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.295560][T13712] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 221.307117][T13712] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 221.308651][T13712] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 221.315192][T13712] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 221.317126][T13712] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 221.322591][T13712] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 221.323903][T13712] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 221.326345][T13712] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 221.359052][T13733] loop2: detected capacity change from 0 to 128 [ 221.361624][T13733] EXT4-fs: inline encryption not supported [ 221.384060][T13733] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 221.417955][T13737] md: couldn't update array info. -22 [ 221.447079][T13737] md: could not open device unknown-block(1,1). [ 221.448206][T13737] md: md_import_device returned -16 [ 221.454257][T13733] FAULT_INJECTION: forcing a failure. [ 221.454257][T13733] name failslab, interval 1, probability 5, space 0, times 9929 [ 221.456582][T13733] CPU: 0 PID: 13733 Comm: syz.2.3830 Not tainted syzkaller #0 [ 221.458183][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 221.460303][T13733] Call trace: [ 221.460984][T13733] dump_backtrace+0x1c4/0x1f0 [ 221.461949][T13733] show_stack+0x2c/0x3c [ 221.462808][T13733] __dump_stack+0x30/0x40 [ 221.463705][T13733] dump_stack_lvl+0xf4/0x15c [ 221.464613][T13733] dump_stack+0x1c/0x5c [ 221.465415][T13733] should_fail_ex+0x3cc/0x524 [ 221.466310][T13733] __should_failslab+0xc0/0x11c [ 221.467183][T13733] should_failslab+0x10/0x28 [ 221.468000][T13733] slab_pre_alloc_hook+0x6c/0x31c [ 221.468905][T13733] kmem_cache_alloc_lru+0x60/0x284 [ 221.469843][T13733] shmem_alloc_inode+0x2c/0x48 [ 221.470749][T13733] new_inode_pseudo+0x68/0x1cc [ 221.471662][T13733] new_inode+0x38/0x174 [ 221.472552][T13733] shmem_get_inode+0x2cc/0xa8c [ 221.473483][T13733] __shmem_file_setup+0xf8/0x26c [ 221.474367][T13733] shmem_file_setup+0x40/0x54 [ 221.475220][T13733] __arm64_sys_memfd_create+0x2d8/0x458 [ 221.476230][T13733] invoke_syscall+0x98/0x290 [ 221.477037][T13733] el0_svc_common+0x13c/0x258 [ 221.477863][T13733] do_el0_svc+0x5c/0x134 [ 221.478629][T13733] el0_svc+0x58/0x12c [ 221.479337][T13733] el0t_64_sync_handler+0x84/0xf0 [ 221.480256][T13733] el0t_64_sync+0x18c/0x190 [ 221.530851][T13737] md: could not open device unknown-block(1,2). [ 221.532034][T13737] md: md_import_device returned -16 [ 221.535029][T13740] binder: BINDER_SET_CONTEXT_MGR already set [ 221.536098][T13740] binder: 13739:13740 ioctl 4018620d 20004a80 returned -16 [ 221.538092][T13733] FAULT_INJECTION: forcing a failure. [ 221.538092][T13733] name failslab, interval 1, probability 5, space 0, times 9928 [ 221.547694][T13733] CPU: 1 PID: 13733 Comm: syz.2.3830 Not tainted syzkaller #0 [ 221.549089][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 221.551159][T13733] Call trace: [ 221.551755][T13733] dump_backtrace+0x1c4/0x1f0 [ 221.552661][T13733] show_stack+0x2c/0x3c [ 221.553452][T13733] __dump_stack+0x30/0x40 [ 221.554266][T13733] dump_stack_lvl+0xf4/0x15c [ 221.555105][T13733] dump_stack+0x1c/0x5c [ 221.555898][T13733] should_fail_ex+0x3cc/0x524 [ 221.556770][T13733] __should_failslab+0xc0/0x11c [ 221.557670][T13733] should_failslab+0x10/0x28 [ 221.558516][T13733] kmem_cache_alloc+0x88/0x310 [ 221.559357][T13733] __anon_vma_prepare+0xac/0x370 [ 221.560255][T13733] handle_mm_fault+0x2a0c/0x3018 [ 221.561152][T13733] do_page_fault+0x310/0x99c [ 221.561965][T13733] do_translation_fault+0x94/0xc8 [ 221.562879][T13733] do_mem_abort+0x70/0x198 [ 221.563683][T13733] el0_da+0x74/0x14c [ 221.564395][T13733] el0t_64_sync_handler+0x90/0xf0 [ 221.565300][T13733] el0t_64_sync+0x18c/0x190 [ 221.567459][T13740] binder: 13739:13740 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 221.579119][T13740] binder: 13740 RLIMIT_NICE not set [ 221.618865][T13745] binder: 13739:13745 got transaction to invalid handle, 3 [ 221.621739][T13745] binder: 13745:13739 cannot find target node [ 221.622774][T13745] binder: 13739:13745 transaction call to 0:0 failed 896/29201/-22, size 0-0 line 3062 [ 221.624637][T13745] binder: 13739:13745 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 221.634129][T13745] binder: 13745 RLIMIT_NICE not set [ 221.647749][T13733] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 221.756589][T13733] FAULT_INJECTION: forcing a failure. [ 221.756589][T13733] name failslab, interval 1, probability 5, space 0, times 9927 [ 221.774580][T13733] CPU: 1 PID: 13733 Comm: syz.2.3830 Not tainted syzkaller #0 [ 221.776019][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 221.778034][T13733] Call trace: [ 221.778685][T13733] dump_backtrace+0x1c4/0x1f0 [ 221.779637][T13733] show_stack+0x2c/0x3c [ 221.780483][T13733] __dump_stack+0x30/0x40 [ 221.781376][T13733] dump_stack_lvl+0xf4/0x15c [ 221.782229][T13733] dump_stack+0x1c/0x5c [ 221.783099][T13733] should_fail_ex+0x3cc/0x524 [ 221.784093][T13733] __should_failslab+0xc0/0x11c [ 221.785041][T13733] should_failslab+0x10/0x28 [ 221.785952][T13733] kmem_cache_alloc+0x88/0x310 [ 221.786856][T13733] pte_alloc_one+0x78/0x254 [ 221.787770][T13733] __pte_alloc+0x30/0xac [ 221.788605][T13733] handle_mm_fault+0x25d8/0x3018 [ 221.789515][T13733] do_page_fault+0x310/0x99c [ 221.790356][T13733] do_translation_fault+0x94/0xc8 [ 221.791276][T13733] do_mem_abort+0x70/0x198 [ 221.792057][T13733] el0_da+0x74/0x14c [ 221.792755][T13733] el0t_64_sync_handler+0x90/0xf0 [ 221.793676][T13733] el0t_64_sync+0x18c/0x190 [ 221.895160][T13733] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 221.975631][T13754] 0x000000000000-0x000000010000 : "" [ 221.983742][T13754] ftl_cs: FTL header not found. [ 222.097431][T13733] FAULT_INJECTION: forcing a failure. [ 222.097431][T13733] name failslab, interval 1, probability 5, space 0, times 9923 [ 222.102130][T13733] CPU: 1 PID: 13733 Comm: syz.2.3830 Not tainted syzkaller #0 [ 222.103334][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 222.105211][T13733] Call trace: [ 222.105823][T13733] dump_backtrace+0x1c4/0x1f0 [ 222.106701][T13733] show_stack+0x2c/0x3c [ 222.107495][T13733] __dump_stack+0x30/0x40 [ 222.108286][T13733] dump_stack_lvl+0xf4/0x15c [ 222.109149][T13733] dump_stack+0x1c/0x5c [ 222.109937][T13733] should_fail_ex+0x3cc/0x524 [ 222.110807][T13733] __should_failslab+0xc0/0x11c [ 222.111737][T13733] should_failslab+0x10/0x28 [ 222.112603][T13733] kmem_cache_alloc+0x88/0x310 [ 222.113517][T13733] security_file_alloc+0x38/0x11c [ 222.114479][T13733] __alloc_file+0xac/0x234 [ 222.115329][T13733] alloc_empty_file+0xa0/0x184 [ 222.116217][T13733] path_openat+0xe0/0x27a0 [ 222.117018][T13733] do_filp_open+0x198/0x38c [ 222.117845][T13733] do_sys_openat2+0x134/0x3fc [ 222.118704][T13733] __arm64_sys_openat+0x11c/0x150 [ 222.119599][T13733] invoke_syscall+0x98/0x290 [ 222.120432][T13733] el0_svc_common+0x13c/0x258 [ 222.121265][T13733] do_el0_svc+0x5c/0x134 [ 222.122005][T13733] el0_svc+0x58/0x12c [ 222.122692][T13733] el0t_64_sync_handler+0x84/0xf0 [ 222.123591][T13733] el0t_64_sync+0x18c/0x190 [ 222.207820][T13733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.212388][T13733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.218480][T13733] FAULT_INJECTION: forcing a failure. [ 222.218480][T13733] name failslab, interval 1, probability 5, space 0, times 9921 [ 222.227251][T13733] CPU: 1 PID: 13733 Comm: syz.2.3830 Not tainted syzkaller #0 [ 222.228557][T13733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 222.230564][T13733] Call trace: [ 222.231201][T13733] dump_backtrace+0x1c4/0x1f0 [ 222.232110][T13733] show_stack+0x2c/0x3c [ 222.232919][T13733] __dump_stack+0x30/0x40 [ 222.233735][T13733] dump_stack_lvl+0xf4/0x15c [ 222.234612][T13733] dump_stack+0x1c/0x5c [ 222.235391][T13733] should_fail_ex+0x3cc/0x524 [ 222.236231][T13733] __should_failslab+0xc0/0x11c [ 222.237127][T13733] should_failslab+0x10/0x28 [ 222.237997][T13733] kmem_cache_alloc+0x88/0x310 [ 222.238875][T13733] __kernfs_new_node+0xec/0x5fc [ 222.239779][T13733] kernfs_new_node+0x120/0x230 [ 222.240673][T13733] __kernfs_create_file+0x60/0x2e0 [ 222.241576][T13733] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 222.242532][T13733] sysfs_create_file_ns+0x10c/0x19c [ 222.243450][T13733] device_add+0x4b0/0xe4c [ 222.244471][T13733] netdev_register_kobject+0x170/0x2f4 [ 222.245465][T13733] register_netdevice+0xf28/0x1650 [ 222.246384][T13733] br_dev_newlink+0x34/0x10c [ 222.247225][T13733] rtnl_newlink+0x10b4/0x1af0 [ 222.248086][T13733] rtnetlink_rcv_msg+0x694/0xcc4 [ 222.248987][T13733] netlink_rcv_skb+0x220/0x3ec [ 222.249860][T13733] rtnetlink_rcv+0x28/0x38 [ 222.250658][T13733] netlink_unicast+0x5fc/0x80c [ 222.251510][T13733] netlink_sendmsg+0x6f0/0x9d8 [ 222.252385][T13733] ____sys_sendmsg+0x588/0x90c [ 222.253269][T13733] __sys_sendmsg+0x288/0x374 [ 222.254121][T13733] __arm64_sys_sendmsg+0x80/0x94 [ 222.255035][T13733] invoke_syscall+0x98/0x290 [ 222.255891][T13733] el0_svc_common+0x13c/0x258 [ 222.256729][T13733] do_el0_svc+0x5c/0x134 [ 222.257512][T13733] el0_svc+0x58/0x12c [ 222.258248][T13733] el0t_64_sync_handler+0x84/0xf0 [ 222.259135][T13733] el0t_64_sync+0x18c/0x190 [ 222.280317][T13770] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3843'. [ 222.282430][T13761] device syzkaller1 entered promiscuous mode [ 222.282994][ T4632] binder: undelivered TRANSACTION_ERROR: 29201 [ 222.345485][T13775] md: couldn't update array info. -22 [ 222.349191][T13775] md: could not open device unknown-block(1,1). [ 222.353019][T13775] md: md_import_device returned -16 [ 222.354556][T13775] md: could not open device unknown-block(1,2). [ 222.355656][T13775] md: md_import_device returned -16 [ 222.378231][T13769] device syzkaller0 entered promiscuous mode [ 222.569425][ T4345] Bluetooth: hci2: command 0x0c1a tx timeout [ 223.204976][ C1] net_ratelimit: 169 callbacks suppressed [ 223.369352][ T4345] Bluetooth: hci8: command 0x0c1a tx timeout [ 223.372127][ T4345] Bluetooth: hci6: command 0x0c1a tx timeout [ 223.373233][ T4345] Bluetooth: hci3: command 0x0c1a tx timeout [ 224.649528][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 225.405483][T13804] binder: BINDER_SET_CONTEXT_MGR already set [ 225.406576][T13804] binder: 13803:13804 ioctl 4018620d 20004a80 returned -16 [ 225.408745][T13804] binder: 13803:13804 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 225.411477][T13804] binder: 13804 RLIMIT_NICE not set [ 225.449327][ T4345] Bluetooth: hci3: command 0x0406 tx timeout [ 225.450407][ T4345] Bluetooth: hci6: command 0x0406 tx timeout [ 225.451516][ T4345] Bluetooth: hci8: command 0x0406 tx timeout [ 225.460470][T13805] binder: 13803:13805 got transaction to invalid handle, 3 [ 225.461765][T13805] binder: 13805:13803 cannot find target node [ 225.462939][T13805] binder: 13803:13805 transaction call to 0:0 failed 899/29201/-22, size 0-0 line 3062 [ 225.464922][T13805] binder: 13803:13805 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 225.467145][T13805] binder: 13805 RLIMIT_NICE not set [ 226.253322][ T4632] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.529285][ T4345] Bluetooth: hci8: command 0x0406 tx timeout [ 228.719247][ C1] net_ratelimit: 88 callbacks suppressed [ 229.599457][ T48] Bluetooth: hci8: command 0x0409 tx timeout [ 230.634760][T13799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3853'. [ 230.636659][T13800] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3853'. [ 230.644755][T13807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3856'. [ 230.656511][T13810] md: couldn't update array info. -22 [ 230.661321][T13810] md: could not open device unknown-block(1,1). [ 230.675259][T13810] md: md_import_device returned -16 [ 230.676464][T13810] md: could not open device unknown-block(1,2). [ 230.677570][T13810] md: md_import_device returned -16 [ 230.750917][T13815] device syzkaller1 entered promiscuous mode [ 230.755803][T13821] loop5: detected capacity change from 0 to 128 [ 230.757473][T13821] EXT4-fs: inline encryption not supported [ 230.773327][T13821] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 231.238366][T13838] netlink: 'syz.0.3868': attribute type 4 has an invalid length. [ 231.255140][T13835] loop6: detected capacity change from 0 to 128 [ 231.256974][T13835] EXT4-fs: inline encryption not supported [ 231.266182][T13835] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 231.315996][T13835] FAULT_INJECTION: forcing a failure. [ 231.315996][T13835] name failslab, interval 1, probability 5, space 0, times 100 [ 231.318173][T13835] CPU: 0 PID: 13835 Comm: syz.6.3867 Not tainted syzkaller #0 [ 231.319519][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 231.321418][T13835] Call trace: [ 231.322039][T13835] dump_backtrace+0x1c4/0x1f0 [ 231.322842][T13835] show_stack+0x2c/0x3c [ 231.323595][T13835] __dump_stack+0x30/0x40 [ 231.324401][T13835] dump_stack_lvl+0xf4/0x15c [ 231.325279][T13835] dump_stack+0x1c/0x5c [ 231.326060][T13835] should_fail_ex+0x3cc/0x524 [ 231.326909][T13835] __should_failslab+0xc0/0x11c [ 231.327809][T13835] should_failslab+0x10/0x28 [ 231.328675][T13835] kmem_cache_alloc+0x88/0x310 [ 231.329543][T13835] __alloc_file+0x30/0x234 [ 231.330340][T13835] alloc_empty_file+0xa0/0x184 [ 231.331194][T13835] alloc_file+0x64/0x564 [ 231.331962][T13835] alloc_file_pseudo+0x16c/0x1f4 [ 231.332846][T13835] __shmem_file_setup+0x1a0/0x26c [ 231.333772][T13835] shmem_file_setup+0x40/0x54 [ 231.334619][T13835] __arm64_sys_memfd_create+0x2d8/0x458 [ 231.335599][T13835] invoke_syscall+0x98/0x290 [ 231.336434][T13835] el0_svc_common+0x13c/0x258 [ 231.337278][T13835] do_el0_svc+0x5c/0x134 [ 231.338022][T13835] el0_svc+0x58/0x12c [ 231.338742][T13835] el0t_64_sync_handler+0x84/0xf0 [ 231.339671][T13835] el0t_64_sync+0x18c/0x190 [ 231.357031][T13821] loop5: detected capacity change from 0 to 40427 [ 231.358401][T13821] FAULT_INJECTION: forcing a failure. [ 231.358401][T13821] name failslab, interval 1, probability 5, space 0, times 99 [ 231.370231][T13821] CPU: 0 PID: 13821 Comm: syz.5.3862 Not tainted syzkaller #0 [ 231.371593][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 231.373545][T13821] Call trace: [ 231.374152][T13821] dump_backtrace+0x1c4/0x1f0 [ 231.375019][T13821] show_stack+0x2c/0x3c [ 231.375806][T13821] __dump_stack+0x30/0x40 [ 231.376741][T13821] dump_stack_lvl+0xf4/0x15c [ 231.377596][T13821] dump_stack+0x1c/0x5c [ 231.378367][T13821] should_fail_ex+0x3cc/0x524 [ 231.379230][T13821] __should_failslab+0xc0/0x11c [ 231.380093][T13821] should_failslab+0x10/0x28 [ 231.380907][T13821] kmem_cache_alloc+0x88/0x310 [ 231.381771][T13821] getname_kernel+0x68/0x2bc [ 231.382621][T13821] kern_path+0x2c/0x6c [ 231.383384][T13821] tomoyo_mount_permission+0x5d0/0x798 [ 231.384382][T13821] tomoyo_sb_mount+0x48/0x60 [ 231.385235][T13821] security_sb_mount+0x94/0xd4 [ 231.386103][T13821] path_mount+0xb8/0xe6c [ 231.386899][T13821] __arm64_sys_mount+0x4a0/0x5a0 [ 231.387937][T13821] invoke_syscall+0x98/0x290 [ 231.388868][T13821] el0_svc_common+0x13c/0x258 [ 231.389780][T13821] do_el0_svc+0x5c/0x134 [ 231.390553][T13821] el0_svc+0x58/0x12c [ 231.391242][T13821] el0t_64_sync_handler+0x84/0xf0 [ 231.392143][T13821] el0t_64_sync+0x18c/0x190 [ 231.398766][T13835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.404326][T13835] FAULT_INJECTION: forcing a failure. [ 231.404326][T13835] name failslab, interval 1, probability 5, space 0, times 98 [ 231.406635][T13835] CPU: 0 PID: 13835 Comm: syz.6.3867 Not tainted syzkaller #0 [ 231.407922][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 231.409720][T13835] Call trace: [ 231.410362][T13835] dump_backtrace+0x1c4/0x1f0 [ 231.411271][T13835] show_stack+0x2c/0x3c [ 231.412081][T13835] __dump_stack+0x30/0x40 [ 231.412945][T13835] dump_stack_lvl+0xf4/0x15c [ 231.413831][T13835] dump_stack+0x1c/0x5c [ 231.414647][T13835] should_fail_ex+0x3cc/0x524 [ 231.415520][T13835] __should_failslab+0xc0/0x11c [ 231.416423][T13835] should_failslab+0x10/0x28 [ 231.417275][T13835] __kmem_cache_alloc_node+0x7c/0x318 [ 231.418253][T13835] kmalloc_trace+0x48/0x94 [ 231.419061][T13835] kobject_uevent_env+0x258/0x88c [ 231.419978][T13835] kobject_uevent+0x2c/0x3c [ 231.420822][T13835] __kobject_del+0xdc/0x2d4 [ 231.421680][T13835] kobject_put+0x2c0/0x41c [ 231.422513][T13835] bus_remove_driver+0x140/0x240 [ 231.423459][T13835] driver_unregister+0x78/0xac [ 231.424298][T13835] usb_gadget_register_driver_owner+0x220/0x25c [ 231.425439][T13835] raw_ioctl+0x1014/0x326c [ 231.426256][T13835] __arm64_sys_ioctl+0x14c/0x1c8 [ 231.427201][T13835] invoke_syscall+0x98/0x290 [ 231.428035][T13835] el0_svc_common+0x13c/0x258 [ 231.428881][T13835] do_el0_svc+0x5c/0x134 [ 231.429697][T13835] el0_svc+0x58/0x12c [ 231.430443][T13835] el0t_64_sync_handler+0x84/0xf0 [ 231.431358][T13835] el0t_64_sync+0x18c/0x190 [ 231.436529][T13821] FAULT_INJECTION: forcing a failure. [ 231.436529][T13821] name failslab, interval 1, probability 5, space 0, times 97 [ 231.438650][T13821] CPU: 0 PID: 13821 Comm: syz.5.3862 Not tainted syzkaller #0 [ 231.440195][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 231.442200][T13821] Call trace: [ 231.442878][T13821] dump_backtrace+0x1c4/0x1f0 [ 231.443756][T13821] show_stack+0x2c/0x3c [ 231.444648][T13821] __dump_stack+0x30/0x40 [ 231.445483][T13821] dump_stack_lvl+0xf4/0x15c [ 231.446337][T13821] dump_stack+0x1c/0x5c [ 231.447116][T13821] should_fail_ex+0x3cc/0x524 [ 231.447952][T13821] __should_failslab+0xc0/0x11c [ 231.448822][T13821] should_failslab+0x10/0x28 [ 231.449776][T13821] kmem_cache_alloc+0x88/0x310 [ 231.450779][T13821] __alloc_file+0x30/0x234 [ 231.451688][T13821] alloc_empty_file+0xa0/0x184 [ 231.452598][T13821] path_openat+0xe0/0x27a0 [ 231.453445][T13821] do_filp_open+0x198/0x38c [ 231.454338][T13821] do_sys_openat2+0x134/0x3fc [ 231.455188][T13821] __arm64_sys_openat+0x11c/0x150 [ 231.456152][T13821] invoke_syscall+0x98/0x290 [ 231.456982][T13821] el0_svc_common+0x13c/0x258 [ 231.457938][T13821] do_el0_svc+0x5c/0x134 [ 231.458778][T13821] el0_svc+0x58/0x12c [ 231.459549][T13821] el0t_64_sync_handler+0x84/0xf0 [ 231.460493][T13821] el0t_64_sync+0x18c/0x190 [ 231.466386][T13821] FAULT_INJECTION: forcing a failure. [ 231.466386][T13821] name failslab, interval 1, probability 5, space 0, times 96 [ 231.468382][T13821] CPU: 0 PID: 13821 Comm: syz.5.3862 Not tainted syzkaller #0 [ 231.469616][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 231.471367][T13821] Call trace: [ 231.472020][T13821] dump_backtrace+0x1c4/0x1f0 [ 231.472899][T13821] show_stack+0x2c/0x3c [ 231.473687][T13821] __dump_stack+0x30/0x40 [ 231.474521][T13821] dump_stack_lvl+0xf4/0x15c [ 231.475381][T13821] dump_stack+0x1c/0x5c [ 231.476198][T13821] should_fail_ex+0x3cc/0x524 [ 231.477065][T13821] __should_failslab+0xc0/0x11c [ 231.477990][T13821] should_failslab+0x10/0x28 [ 231.478850][T13821] kmem_cache_alloc_bulk+0x74/0x4e8 [ 231.479832][T13821] mas_alloc_nodes+0x3b4/0x758 [ 231.480697][T13821] mas_preallocate+0x13c/0x310 [ 231.481551][T13821] mmap_region+0xbf0/0x1860 [ 231.482352][T13821] do_mmap+0xa64/0x1210 [ 231.483105][T13821] vm_mmap_pgoff+0x194/0x298 [ 231.483945][T13821] ksys_mmap_pgoff+0xd0/0x5a0 [ 231.484792][T13821] __arm64_sys_mmap+0x108/0x120 [ 231.485684][T13821] invoke_syscall+0x98/0x290 [ 231.486514][T13821] el0_svc_common+0x13c/0x258 [ 231.487350][T13821] do_el0_svc+0x5c/0x134 [ 231.487372][T13821] el0_svc+0x58/0x12c [ 231.488772][T13821] el0t_64_sync_handler+0x84/0xf0 [ 231.488791][T13821] el0t_64_sync+0x18c/0x190 [ 231.495091][T13835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.500156][T13835] FAULT_INJECTION: forcing a failure. [ 231.500156][T13835] name failslab, interval 1, probability 5, space 0, times 95 [ 231.502696][T13835] CPU: 0 PID: 13835 Comm: syz.6.3867 Not tainted syzkaller #0 [ 231.503950][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 231.505570][T13835] Call trace: [ 231.506119][T13835] dump_backtrace+0x1c4/0x1f0 [ 231.506884][T13835] show_stack+0x2c/0x3c [ 231.507542][T13835] __dump_stack+0x30/0x40 [ 231.508255][T13835] dump_stack_lvl+0xf4/0x15c [ 231.508980][T13835] dump_stack+0x1c/0x5c [ 231.509689][T13835] should_fail_ex+0x3cc/0x524 [ 231.510515][T13835] __should_failslab+0xc0/0x11c [ 231.511383][T13835] should_failslab+0x10/0x28 [ 231.512219][T13835] kmem_cache_alloc+0x88/0x310 [ 231.513103][T13835] __kernfs_new_node+0xec/0x5fc [ 231.513984][T13835] kernfs_new_node+0x120/0x230 [ 231.514865][T13835] kernfs_create_link+0x98/0x1e4 [ 231.515765][T13835] sysfs_do_create_link_sd+0x8c/0x120 [ 231.516748][T13835] sysfs_create_link+0x74/0x94 [ 231.517617][T13835] device_add+0x57c/0xe4c [ 231.518448][T13835] netdev_register_kobject+0x170/0x2f4 [ 231.519436][T13835] register_netdevice+0xf28/0x1650 [ 231.520377][T13835] br_dev_newlink+0x34/0x10c [ 231.521232][T13835] rtnl_newlink+0x10b4/0x1af0 [ 231.522084][T13835] rtnetlink_rcv_msg+0x694/0xcc4 [ 231.522976][T13835] netlink_rcv_skb+0x220/0x3ec [ 231.523864][T13835] rtnetlink_rcv+0x28/0x38 [ 231.524691][T13835] netlink_unicast+0x5fc/0x80c [ 231.525559][T13835] netlink_sendmsg+0x6f0/0x9d8 [ 231.526438][T13835] ____sys_sendmsg+0x588/0x90c [ 231.527294][T13835] __sys_sendmsg+0x288/0x374 [ 231.528111][T13835] __arm64_sys_sendmsg+0x80/0x94 [ 231.528973][T13835] invoke_syscall+0x98/0x290 [ 231.529772][T13835] el0_svc_common+0x13c/0x258 [ 231.530590][T13835] do_el0_svc+0x5c/0x134 [ 231.531347][T13835] el0_svc+0x58/0x12c [ 231.532075][T13835] el0t_64_sync_handler+0x84/0xf0 [ 231.532935][T13835] el0t_64_sync+0x18c/0x190 [ 231.543406][T13821] FAULT_INJECTION: forcing a failure. [ 231.543406][T13821] name failslab, interval 1, probability 5, space 0, times 94 [ 231.545747][T13821] CPU: 0 PID: 13821 Comm: syz.5.3862 Not tainted syzkaller #0 [ 231.547089][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 231.548907][T13821] Call trace: [ 231.549517][T13821] dump_backtrace+0x1c4/0x1f0 [ 231.550389][T13821] show_stack+0x2c/0x3c [ 231.551172][T13821] __dump_stack+0x30/0x40 [ 231.552098][T13821] dump_stack_lvl+0xf4/0x15c [ 231.552998][T13821] dump_stack+0x1c/0x5c [ 231.553834][T13821] should_fail_ex+0x3cc/0x524 [ 231.554831][T13821] __should_failslab+0xc0/0x11c [ 231.555774][T13821] should_failslab+0x10/0x28 [ 231.556734][T13821] kmem_cache_alloc+0x88/0x310 [ 231.557687][T13821] __alloc_file+0x30/0x234 [ 231.558501][T13821] alloc_empty_file+0xa0/0x184 [ 231.559377][T13821] path_openat+0xe0/0x27a0 [ 231.560206][T13821] do_filp_open+0x198/0x38c [ 231.561031][T13821] do_sys_openat2+0x134/0x3fc [ 231.561890][T13821] __arm64_sys_openat+0x11c/0x150 [ 231.562790][T13821] invoke_syscall+0x98/0x290 [ 231.563639][T13821] el0_svc_common+0x13c/0x258 [ 231.564489][T13821] do_el0_svc+0x5c/0x134 [ 231.565249][T13821] el0_svc+0x58/0x12c [ 231.565978][T13821] el0t_64_sync_handler+0x84/0xf0 [ 231.566891][T13821] el0t_64_sync+0x18c/0x190 [ 231.573921][T13821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.575463][T13821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.577193][T13821] FAULT_INJECTION: forcing a failure. [ 231.577193][T13821] name failslab, interval 1, probability 5, space 0, times 92 [ 231.580538][T13821] CPU: 0 PID: 13821 Comm: syz.5.3862 Not tainted syzkaller #0 [ 231.581821][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 231.583842][T13821] Call trace: [ 231.584496][T13821] dump_backtrace+0x1c4/0x1f0 [ 231.585426][T13821] show_stack+0x2c/0x3c [ 231.586220][T13821] __dump_stack+0x30/0x40 [ 231.587062][T13821] dump_stack_lvl+0xf4/0x15c [ 231.587959][T13821] dump_stack+0x1c/0x5c [ 231.588776][T13821] should_fail_ex+0x3cc/0x524 [ 231.589695][T13821] __should_failslab+0xc0/0x11c [ 231.590635][T13821] should_failslab+0x10/0x28 [ 231.591551][T13821] __kmem_cache_alloc_node+0x7c/0x318 [ 231.592613][T13821] __kmalloc+0xc4/0x180 [ 231.593417][T13821] security_sk_alloc+0x54/0x140 [ 231.594342][T13821] sk_prot_alloc+0xe0/0x1e8 [ 231.595189][T13821] sk_alloc+0x44/0x3a0 [ 231.595961][T13821] __netlink_create+0x80/0x2a8 [ 231.596862][T13821] netlink_create+0x3b8/0x65c [ 231.597746][T13821] __sock_create+0x448/0x8a8 [ 231.598606][T13821] __sys_socket+0xc0/0x1b0 [ 231.599420][T13821] __arm64_sys_socket+0x7c/0x94 [ 231.600324][T13821] invoke_syscall+0x98/0x290 [ 231.601167][T13821] el0_svc_common+0x13c/0x258 [ 231.602038][T13821] do_el0_svc+0x5c/0x134 [ 231.602846][T13821] el0_svc+0x58/0x12c [ 231.603604][T13821] el0t_64_sync_handler+0x84/0xf0 [ 231.604514][T13821] el0t_64_sync+0x18c/0x190 [ 231.656647][ T27] audit: type=1326 audit(231.620:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.6.3867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc778c28 code=0x7fc00000 [ 231.678167][T13845] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 231.678234][ T27] audit: type=1326 audit(231.620:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.6.3867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc778c28 code=0x7fc00000 [ 231.686588][T13845] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 231.687016][ T27] audit: type=1326 audit(231.620:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.6.3867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc778c28 code=0x7fc00000 [ 231.693535][ T27] audit: type=1326 audit(231.620:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.6.3867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc778c28 code=0x7fc00000 [ 231.697794][ T27] audit: type=1326 audit(231.620:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.6.3867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc778c28 code=0x7fc00000 [ 231.702738][ T27] audit: type=1326 audit(231.620:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.6.3867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc778c28 code=0x7fc00000 [ 231.706835][ T27] audit: type=1326 audit(231.620:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.6.3867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc778c28 code=0x7fc00000 [ 231.715984][ T27] audit: type=1326 audit(231.620:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.6.3867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc778c28 code=0x7fc00000 [ 231.720333][ T27] audit: type=1326 audit(231.620:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.6.3867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc778c28 code=0x7fc00000 [ 231.724560][ T27] audit: type=1326 audit(231.620:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.6.3867" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc778c28 code=0x7fc00000 [ 231.754541][T13847] binder: 13846:13847 got transaction to invalid handle, 1 [ 231.755930][T13847] binder: 13847:13846 cannot find target node [ 231.756981][T13847] binder: 13846:13847 transaction call to 0:0 failed 903/29201/-22, size 72-24 line 3062 [ 231.766170][T13847] binder: 13846:13847 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 231.768231][T13847] binder: 13847 RLIMIT_NICE not set [ 231.816851][T13848] binder: 13846:13848 got transaction to invalid handle, 3 [ 231.818335][T13848] binder: 13848:13846 cannot find target node [ 231.819744][T13848] binder: 13846:13848 transaction call to 0:0 failed 904/29201/-22, size 0-0 line 3062 [ 231.821573][T13848] binder: 13846:13848 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 231.825722][T13848] binder: 13848 RLIMIT_NICE not set [ 232.260593][T13850] md: couldn't update array info. -22 [ 232.265247][T13850] md: could not open device unknown-block(1,1). [ 232.267599][T13850] md: md_import_device returned -16 [ 232.270115][T13850] md: could not open device unknown-block(1,2). [ 232.272298][T13850] md: md_import_device returned -16 [ 232.314085][T13855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.318294][T13855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.474256][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3876'. [ 232.478353][T13858] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3876'. [ 232.557118][T13860] device syzkaller0 entered promiscuous mode [ 232.594673][ T4601] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.595843][ T4601] binder: undelivered TRANSACTION_ERROR: 29201 [ 233.210105][T13874] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 233.212496][T13874] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 233.454697][ T28] INFO: task syz.1.1328:7698 blocked for more than 143 seconds. [ 233.456137][ T28] Not tainted syzkaller #0 [ 233.457046][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.458709][ T28] task:syz.1.1328 state:D stack:0 pid:7698 ppid:4328 flags:0x00000001 [ 233.461003][ C1] tcp_conntracks: [ 233.461013][ C1] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 233.463945][ T28] dump_backtrace(regs = 0000000000000000 tsk = 0000000033fc6d6e) [ 233.466502][ T28] Call trace: [ 233.467128][ T28] __switch_to+0x2f4/0x550 [ 233.469121][ T28] __schedule+0xdb4/0x1a6c [ 233.475851][ T28] schedule+0xc4/0x170 [ 233.476549][ T28] schedule_preempt_disabled+0x18/0x2c [ 233.478712][ T28] __mutex_lock_common+0xb20/0x1f3c [ 233.481087][ T28] mutex_lock_nested+0x38/0x44 [ 233.483928][ T28] write_versions+0xa4/0xa34 [ 233.484792][ T28] nfsctl_transaction_write+0x114/0x164 [ 233.488232][ T28] vfs_write+0x2a8/0x7c8 [ 233.489005][ T28] ksys_write+0x12c/0x228 [ 233.496260][ T28] __arm64_sys_write+0x7c/0x90 [ 233.497159][ T28] invoke_syscall+0x98/0x290 [ 233.499477][ T28] el0_svc_common+0x13c/0x258 [ 233.500258][ T28] do_el0_svc+0x5c/0x134 [ 233.502973][ T28] el0_svc+0x58/0x12c [ 233.504922][ T28] el0t_64_sync_handler+0x84/0xf0 [ 233.505725][ T28] el0t_64_sync+0x18c/0x190 [ 233.507729][ T28] [ 233.507729][ T28] Showing all locks held in the system: [ 233.509316][ C1] nf_conntrack: normal packet for 00000000c7bead59 [ 233.510535][ C1] tcp_conntracks: [ 233.510546][ C1] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 233.518683][ T28] 1 lock held by rcu_tasks_kthre/12: [ 233.519834][ T28] #0: ffff8000165f7e70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 233.521744][ T28] 1 lock held by rcu_tasks_trace/13: [ 233.522607][ T28] #0: ffff8000165f8690 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 233.524713][ T28] 1 lock held by khungtaskd/28: [ 233.525560][ T28] #0: ffff8000165f7500 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 233.527435][ T28] 2 locks held by udevd/3939: [ 233.528251][ T28] 2 locks held by getty/4085: [ 233.533499][ T28] #0: ffff0000d6b12098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 233.535372][ T28] #1: ffff80001fac62f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 [ 233.537406][ T28] 3 locks held by syz.4.1157/7267: [ 233.538591][ T28] #0: ffff0000e018a368 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 233.540881][ T28] #1: ffff0000d5010460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 233.542632][ T28] #2: ffff8000168840a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 233.544419][ T28] 3 locks held by syz.1.1328/7698: [ 233.545335][ T28] #0: ffff0000dd5eeae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 233.547170][ T28] #1: ffff0000dc35c460 (sb_writers#18){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 233.548912][ T28] #2: ffff8000168840a8 (nfsd_mutex){+.+.}-{3:3}, at: write_versions+0xa4/0xa34 [ 233.554577][ T28] 3 locks held by kworker/u4:9/13169: [ 233.555536][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 233.557832][ T28] #1: ffff8000252f7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 233.560151][ T28] #2: ffff800018aa06c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 233.561933][ T28] 1 lock held by syz.6.3877/13859: [ 233.562874][ T28] #0: ffff800018aa06c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 233.564701][ T28] 1 lock held by syz.2.3878/13862: [ 233.565533][ T28] #0: ffff800018aa06c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 233.567214][ T28] 1 lock held by syz.2.3878/13863: [ 233.568102][ T28] #0: ffff800018aa06c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 233.574906][ T28] 1 lock held by syz.5.3879/13868: [ 233.575998][ T28] #0: ffff800018aa06c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 233.577679][ T28] 1 lock held by syz.5.3879/13869: [ 233.578602][ T28] #0: ffff800018aa06c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x64c/0xcc4 [ 233.580771][ T28] 4 locks held by syz.0.3882/13876: [ 233.581918][ T28] [ 233.582350][ T28] ============================================= [ 233.582350][ T28] [ 233.584630][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 233.585885][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 233.587314][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 233.589251][ T28] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 233.590655][ T28] Call trace: [ 233.591256][ T28] dump_backtrace+0x1c4/0x1f0 [ 233.592121][ T28] show_stack+0x2c/0x3c [ 233.592890][ T28] __dump_stack+0x30/0x40 [ 233.593703][ T28] dump_stack_lvl+0xf4/0x15c [ 233.594555][ T28] dump_stack+0x1c/0x5c [ 233.595336][ T28] panic+0x2f8/0x7ac [ 233.596073][ T28] hung_task_panic+0x0/0x2c [ 233.596922][ T28] kthread+0x254/0x2e0 [ 233.597683][ T28] ret_from_fork+0x10/0x20 [ 233.598507][ T28] SMP: stopping secondary CPUs [ 233.599431][ T28] Kernel Offset: disabled [ 233.600195][ T28] CPU features: 0x0a0000,000f0097,a65bfea7 [ 233.601215][ T28] Memory Limit: none [ 233.980502][ T28] Rebooting in 86400 seconds..