last executing test programs: 58.572412171s ago: executing program 0 (id=529): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$can_j1939(0x1d, 0x2, 0x7) io_uring_setup(0x66a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pread64(0xffffffffffffffff, 0x0, 0x0, 0x200) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(0x0, 0x1, 0x88) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e0000", 0x23) recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x40, 0x0) openat$dir(0xffffff9c, &(0x7f0000000080)='127.0.0.1:/test\x00', 0x100, 0x100) 56.99403574s ago: executing program 0 (id=540): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r0 = socket(0x2, 0x2, 0x1) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 56.894280063s ago: executing program 0 (id=541): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="0000000060000000580012800800", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c030800000000"}}}}, 0x3e) 56.687798828s ago: executing program 0 (id=546): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000011c0)=""/4090, 0xffa}, {&(0x7f0000003280)=""/4093, 0xffd}], 0x2, 0x0, 0x0, 0x407006}, 0x40000104) 55.82454933s ago: executing program 0 (id=561): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 55.233914395s ago: executing program 0 (id=568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c030800000000"}}}}, 0x3e) 55.161238267s ago: executing program 32 (id=568): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c030800000000"}}}}, 0x3e) 12.990162472s ago: executing program 2 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000140)={0x44, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1c00}, @device_b, @device_a, @initial, {0x6, 0x1}}, @val, @val, @void, @void, @val={0x72, 0x6}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x28008004) 2.902490787s ago: executing program 1 (id=734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x90) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x600000000000000) 2.902216737s ago: executing program 2 (id=735): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$FE_SET_PROPERTY(r0, 0x80106f53, &(0x7f00000001c0)={0x1e, 0x0}) 2.832436869s ago: executing program 2 (id=737): write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000002000), 0x0, 0x4) close(r0) 2.79867752s ago: executing program 2 (id=741): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x20, 0x80, 0x20, 0x2}, 0x48) 2.333647771s ago: executing program 5 (id=749): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0x6, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x10c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x8080) close_range(r4, 0xffffffffffffffff, 0x0) 2.034904988s ago: executing program 1 (id=750): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0x0, 0x9, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x3}, 0x94) 1.9820473s ago: executing program 1 (id=751): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1/zoned\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='1\n', 0x2) close(r1) write(0xffffffffffffffff, &(0x7f00000001c0)='4\n', 0x2) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1\n', 0x2) nanosleep(&(0x7f0000000500)={0x0, 0xbebc200}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r5, &(0x7f0000000d40), 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r6], 0x54}, 0x1, 0x0, 0x0, 0x2040}, 0x800) openat(0xffffffffffffffff, &(0x7f00000003c0)='./dev\x00', 0x2, 0x0) 1.265992638s ago: executing program 3 (id=755): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xee, 0x440, 0x0, 0xab}, 0x9c) 1.223679169s ago: executing program 3 (id=757): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 1.159492441s ago: executing program 5 (id=759): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000"], 0x84}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 1.048602763s ago: executing program 5 (id=760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4806}, 0x0) 1.047410093s ago: executing program 3 (id=761): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000041421"], 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x20040804) 1.012721155s ago: executing program 2 (id=762): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b03", 0x3b, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000011c0)=""/4090, 0xffa}, {&(0x7f0000003280)=""/4093, 0xffd}], 0x2, 0x0, 0x0, 0x407006}, 0x40000104) 1.011669505s ago: executing program 1 (id=763): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) readv(r0, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 949.896476ms ago: executing program 5 (id=764): write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000002000), 0x0, 0x4) close(r0) 949.669936ms ago: executing program 3 (id=765): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @empty}, 0x3d}, 0x1c) 949.299976ms ago: executing program 4 (id=766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 942.703336ms ago: executing program 5 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) 703.329582ms ago: executing program 4 (id=768): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e978000000000000", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) socket$netlink(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50aba, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20068080}, 0x24000800) 675.946223ms ago: executing program 5 (id=769): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x7, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa05, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000005c0)={0x6, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x1, [{{0x2, 0x4e24, @multicast2}}]}, 0x10c) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x8080) close_range(r4, 0xffffffffffffffff, 0x0) 662.933994ms ago: executing program 4 (id=770): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x8d0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 635.397574ms ago: executing program 4 (id=771): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000037000501f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) 554.029486ms ago: executing program 4 (id=772): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 500.025178ms ago: executing program 4 (id=773): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x9, @pix={0xb, 0x9, 0x32315258, 0x7, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x0, 0x3}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/drivers/ushc/new_id\x00', 0x2, 0x0) write$tcp_mem(r4, &(0x7f0000000040)={0x1, 0x20, 0x80, 0x20, 0x2}, 0x48) 141.649556ms ago: executing program 2 (id=774): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket(0x80000000000000a, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r0, &(0x7f0000000180)=""/233, 0xe9, 0x40000002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000640)=""/16, 0x10}, 0x3}], 0x1, 0x23, 0x0) sendto$inet6(r0, &(0x7f0000000140)="d0", 0x1, 0x0, 0x0, 0x0) 122.951047ms ago: executing program 1 (id=775): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4044080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 45.859819ms ago: executing program 1 (id=776): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) close(r4) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') write(0xffffffffffffffff, &(0x7f0000000800)='transport=loop,nqn=testsubs', 0x1b) 45.729349ms ago: executing program 3 (id=777): write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./dev\x00', &(0x7f0000000380)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/nullb1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000002000)="53464f5a05abbf5900"/438, 0x1b6, 0x4) close(r0) 0s ago: executing program 3 (id=778): unshare(0x24020400) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) kernel console output (not intermixed with test programs): 35.867261][ T4442] name failslab, interval 1, probability 0, space 0, times 1 [ 35.888244][ T4442] CPU: 0 PID: 4442 Comm: syz.2.13 Not tainted syzkaller #0 [ 35.889626][ T4442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 35.891533][ T4442] Call trace: [ 35.892164][ T4442] dump_backtrace+0x1c4/0x1f0 [ 35.893075][ T4442] show_stack+0x2c/0x3c [ 35.893868][ T4442] __dump_stack+0x30/0x40 [ 35.894666][ T4442] dump_stack_lvl+0xf4/0x15c [ 35.895465][ T4442] dump_stack+0x1c/0x5c [ 35.896228][ T4442] should_fail_ex+0x3cc/0x524 [ 35.897102][ T4442] __should_failslab+0xc0/0x11c [ 35.898002][ T4442] should_failslab+0x10/0x28 [ 35.898837][ T4442] slab_pre_alloc_hook+0x6c/0x31c [ 35.899767][ T4442] kmem_cache_alloc_lru+0x60/0x284 [ 35.900714][ T4442] sock_alloc_inode+0x2c/0xcc [ 35.901572][ T4442] new_inode_pseudo+0x68/0x1cc [ 35.902573][ T4442] __sock_create+0x138/0x8a8 [ 35.903525][ T4442] __sys_socket+0xc0/0x1b0 [ 35.904360][ T4442] __arm64_sys_socket+0x7c/0x94 [ 35.905268][ T4442] invoke_syscall+0x98/0x290 [ 35.906110][ T4442] el0_svc_common+0x13c/0x258 [ 35.906977][ T4442] do_el0_svc+0x5c/0x134 [ 35.907738][ T4442] el0_svc+0x58/0x128 [ 35.908485][ T4442] el0t_64_sync_handler+0x84/0xf0 [ 35.909359][ T4442] el0t_64_sync+0x18c/0x190 [ 35.936423][ T4442] socket: no more sockets [ 36.809798][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 36.811004][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 36.812169][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 36.813266][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 36.814435][ T4337] Bluetooth: hci1: command 0x040f tx timeout [ 38.888876][ T4340] Bluetooth: hci1: command 0x0419 tx timeout [ 38.890025][ T4340] Bluetooth: hci0: command 0x0419 tx timeout [ 38.891162][ T4340] Bluetooth: hci2: command 0x0419 tx timeout [ 38.892339][ T4340] Bluetooth: hci3: command 0x0419 tx timeout [ 38.893601][ T4340] Bluetooth: hci4: command 0x0419 tx timeout [ 46.448974][ T4459] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18'. [ 47.868673][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 47.881416][ T4485] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 47.882642][ T4485] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.884278][ T4485] vhci_hcd vhci_hcd.0: Device attached [ 47.906928][ T4491] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'. [ 47.915693][ T4485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 47.955677][ T4478] null_blk: disk nullb1 created [ 48.035999][ T4494] device syzkaller0 entered promiscuous mode [ 48.084284][ T4487] vhci_hcd: connection closed [ 48.085106][ T4465] vhci_hcd: stop threads [ 48.086818][ T4465] vhci_hcd: release socket [ 48.087803][ T4465] vhci_hcd: disconnect device [ 48.100061][ T4500] FAULT_INJECTION: forcing a failure. [ 48.100061][ T4500] name failslab, interval 1, probability 0, space 0, times 0 [ 48.102179][ T4500] CPU: 1 PID: 4500 Comm: syz.2.26 Not tainted syzkaller #0 [ 48.103320][ T4500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 48.104876][ T4500] Call trace: [ 48.105433][ T4500] dump_backtrace+0x1c4/0x1f0 [ 48.106208][ T4500] show_stack+0x2c/0x3c [ 48.106860][ T4500] __dump_stack+0x30/0x40 [ 48.107563][ T4500] dump_stack_lvl+0xf4/0x15c [ 48.108293][ T4500] dump_stack+0x1c/0x5c [ 48.108984][ T4500] should_fail_ex+0x3cc/0x524 [ 48.109809][ T4500] __should_failslab+0xc0/0x11c [ 48.110653][ T4500] should_failslab+0x10/0x28 [ 48.111464][ T4500] slab_pre_alloc_hook+0x6c/0x31c [ 48.112391][ T4500] kmem_cache_alloc_lru+0x60/0x284 [ 48.113363][ T4500] sock_alloc_inode+0x2c/0xcc [ 48.114238][ T4500] new_inode_pseudo+0x68/0x1cc [ 48.115143][ T4500] __sock_create+0x138/0x8a8 [ 48.116017][ T4500] __sys_socket+0xc0/0x1b0 [ 48.116848][ T4500] __arm64_sys_socket+0x7c/0x94 [ 48.117782][ T4500] invoke_syscall+0x98/0x290 [ 48.118609][ T4500] el0_svc_common+0x13c/0x258 [ 48.119482][ T4500] do_el0_svc+0x5c/0x134 [ 48.120290][ T4500] el0_svc+0x58/0x128 [ 48.121030][ T4500] el0t_64_sync_handler+0x84/0xf0 [ 48.121952][ T4500] el0t_64_sync+0x18c/0x190 [ 48.123147][ T4500] socket: no more sockets [ 48.151300][ T4379] usb 10-1: new low-speed USB device number 2 using vhci_hcd [ 48.152791][ T4379] usb 10-1: enqueue for inactive port 0 [ 48.156665][ T4502] device syzkaller0 entered promiscuous mode [ 48.165951][ T4502] tipc: Started in network mode [ 48.166901][ T4502] tipc: Node identity 8ac1bc95501, cluster identity 4711 [ 48.168335][ T4502] tipc: Enabled bearer , priority 0 [ 48.192390][ T4501] tipc: Resetting bearer [ 48.239635][ T4379] vhci_hcd: vhci_device speed not set [ 48.270004][ T4501] tipc: Disabling bearer [ 48.402464][ T4517] netlink: 64 bytes leftover after parsing attributes in process `syz.0.34'. [ 48.406692][ T4517] device syzkaller1 entered promiscuous mode [ 48.558390][ T4519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.35'. [ 49.173231][ T4529] FAULT_INJECTION: forcing a failure. [ 49.173231][ T4529] name failslab, interval 1, probability 0, space 0, times 0 [ 49.175560][ T4529] CPU: 0 PID: 4529 Comm: syz.2.39 Not tainted syzkaller #0 [ 49.176917][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 49.179024][ T4529] Call trace: [ 49.179738][ T4529] dump_backtrace+0x1c4/0x1f0 [ 49.180744][ T4529] show_stack+0x2c/0x3c [ 49.181624][ T4529] __dump_stack+0x30/0x40 [ 49.182468][ T4529] dump_stack_lvl+0xf4/0x15c [ 49.183307][ T4529] dump_stack+0x1c/0x5c [ 49.184094][ T4529] should_fail_ex+0x3cc/0x524 [ 49.184970][ T4529] __should_failslab+0xc0/0x11c [ 49.185896][ T4529] should_failslab+0x10/0x28 [ 49.186755][ T4529] slab_pre_alloc_hook+0x6c/0x31c [ 49.187700][ T4529] kmem_cache_alloc_lru+0x60/0x284 [ 49.188637][ T4529] sock_alloc_inode+0x2c/0xcc [ 49.189542][ T4529] new_inode_pseudo+0x68/0x1cc [ 49.190454][ T4529] __sock_create+0x138/0x8a8 [ 49.191330][ T4529] __sys_socket+0xc0/0x1b0 [ 49.192130][ T4529] __arm64_sys_socket+0x7c/0x94 [ 49.192980][ T4529] invoke_syscall+0x98/0x290 [ 49.193810][ T4529] el0_svc_common+0x13c/0x258 [ 49.194649][ T4529] do_el0_svc+0x5c/0x134 [ 49.195425][ T4529] el0_svc+0x58/0x128 [ 49.196146][ T4529] el0t_64_sync_handler+0x84/0xf0 [ 49.197051][ T4529] el0t_64_sync+0x18c/0x190 [ 49.274439][ T4532] device syzkaller0 entered promiscuous mode [ 49.342103][ T4529] socket: no more sockets [ 49.556716][ T4545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.46'. [ 49.567901][ T4543] netlink: 64 bytes leftover after parsing attributes in process `syz.1.45'. [ 49.619336][ T4550] device syzkaller0 entered promiscuous mode [ 51.307234][ T4564] FAULT_INJECTION: forcing a failure. [ 51.307234][ T4564] name failslab, interval 1, probability 0, space 0, times 0 [ 51.318401][ T4564] CPU: 1 PID: 4564 Comm: syz.3.52 Not tainted syzkaller #0 [ 51.319873][ T4564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 51.321774][ T4564] Call trace: [ 51.322363][ T4564] dump_backtrace+0x1c4/0x1f0 [ 51.323252][ T4564] show_stack+0x2c/0x3c [ 51.324029][ T4564] __dump_stack+0x30/0x40 [ 51.324887][ T4564] dump_stack_lvl+0xf4/0x15c [ 51.325755][ T4564] dump_stack+0x1c/0x5c [ 51.326532][ T4564] should_fail_ex+0x3cc/0x524 [ 51.327423][ T4564] __should_failslab+0xc0/0x11c [ 51.328348][ T4564] should_failslab+0x10/0x28 [ 51.329315][ T4564] slab_pre_alloc_hook+0x6c/0x31c [ 51.330295][ T4564] kmem_cache_alloc_lru+0x60/0x284 [ 51.331294][ T4564] sock_alloc_inode+0x2c/0xcc [ 51.332187][ T4564] new_inode_pseudo+0x68/0x1cc [ 51.333140][ T4564] __sock_create+0x138/0x8a8 [ 51.333964][ T4564] __sys_socket+0xc0/0x1b0 [ 51.334761][ T4564] __arm64_sys_socket+0x7c/0x94 [ 51.335637][ T4564] invoke_syscall+0x98/0x290 [ 51.336460][ T4564] el0_svc_common+0x13c/0x258 [ 51.337293][ T4564] do_el0_svc+0x5c/0x134 [ 51.338046][ T4564] el0_svc+0x58/0x128 [ 51.338727][ T4564] el0t_64_sync_handler+0x84/0xf0 [ 51.339790][ T4564] el0t_64_sync+0x18c/0x190 [ 51.345880][ T4566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 51.376547][ T4563] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 51.377743][ T4563] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.394829][ T4563] vhci_hcd vhci_hcd.0: Device attached [ 51.658837][ T22] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 52.000500][ T4565] vhci_hcd: connection reset by peer [ 52.076499][ T11] vhci_hcd: stop threads [ 52.077337][ T11] vhci_hcd: release socket [ 52.078120][ T11] vhci_hcd: disconnect device [ 52.414524][ T4564] socket: no more sockets [ 52.790512][ T4582] device syzkaller0 entered promiscuous mode [ 52.887159][ T4591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 52.899771][ T4589] netlink: 64 bytes leftover after parsing attributes in process `syz.4.60'. [ 53.003186][ T4601] device syzkaller0 entered promiscuous mode [ 53.133606][ T4606] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 53.134815][ T4606] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.136314][ T4606] vhci_hcd vhci_hcd.0: Device attached [ 53.163773][ T4606] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 53.185792][ T4610] FAULT_INJECTION: forcing a failure. [ 53.185792][ T4610] name failslab, interval 1, probability 0, space 0, times 0 [ 53.203132][ T4610] CPU: 1 PID: 4610 Comm: syz.4.67 Not tainted syzkaller #0 [ 53.204354][ T4610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 53.206254][ T4610] Call trace: [ 53.206871][ T4610] dump_backtrace+0x1c4/0x1f0 [ 53.207741][ T4610] show_stack+0x2c/0x3c [ 53.208550][ T4610] __dump_stack+0x30/0x40 [ 53.209404][ T4610] dump_stack_lvl+0xf4/0x15c [ 53.210314][ T4610] dump_stack+0x1c/0x5c [ 53.211114][ T4610] should_fail_ex+0x3cc/0x524 [ 53.212054][ T4610] __should_failslab+0xc0/0x11c [ 53.213008][ T4610] should_failslab+0x10/0x28 [ 53.213999][ T4610] slab_pre_alloc_hook+0x6c/0x31c [ 53.215100][ T4610] kmem_cache_alloc_lru+0x60/0x284 [ 53.216199][ T4610] sock_alloc_inode+0x2c/0xcc [ 53.217129][ T4610] new_inode_pseudo+0x68/0x1cc [ 53.218064][ T4610] __sock_create+0x138/0x8a8 [ 53.218885][ T4610] __sys_socket+0xc0/0x1b0 [ 53.219650][ T4610] __arm64_sys_socket+0x7c/0x94 [ 53.220504][ T4610] invoke_syscall+0x98/0x290 [ 53.221302][ T4610] el0_svc_common+0x13c/0x258 [ 53.222150][ T4610] do_el0_svc+0x5c/0x134 [ 53.222898][ T4610] el0_svc+0x58/0x128 [ 53.223620][ T4610] el0t_64_sync_handler+0x84/0xf0 [ 53.224539][ T4610] el0t_64_sync+0x18c/0x190 [ 53.438989][ T4342] usb 8-1: new low-speed USB device number 2 using vhci_hcd [ 53.880516][ T4607] vhci_hcd: connection reset by peer [ 54.139023][ T4465] vhci_hcd: stop threads [ 54.139861][ T4465] vhci_hcd: release socket [ 54.140671][ T4465] vhci_hcd: disconnect device [ 54.512152][ T4610] socket: no more sockets [ 54.815907][ T4630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 54.819906][ T4628] device syzkaller0 entered promiscuous mode [ 55.041788][ T4639] netlink: 64 bytes leftover after parsing attributes in process `syz.4.78'. [ 55.111617][ T4643] syz.0.79 uses obsolete (PF_INET,SOCK_PACKET) [ 55.257387][ T4648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.264575][ T4648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.303787][ T4648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 55.480802][ T4661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 55.614128][ T4665] device syzkaller0 entered promiscuous mode [ 55.880324][ T4671] netlink: 64 bytes leftover after parsing attributes in process `syz.1.91'. [ 56.453827][ T4685] FAULT_INJECTION: forcing a failure. [ 56.453827][ T4685] name failslab, interval 1, probability 0, space 0, times 0 [ 56.456065][ T4685] CPU: 1 PID: 4685 Comm: syz.2.96 Not tainted syzkaller #0 [ 56.457215][ T4685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 56.459143][ T4685] Call trace: [ 56.459760][ T4685] dump_backtrace+0x1c4/0x1f0 [ 56.460622][ T4685] show_stack+0x2c/0x3c [ 56.461378][ T4685] __dump_stack+0x30/0x40 [ 56.462175][ T4685] dump_stack_lvl+0xf4/0x15c [ 56.463040][ T4685] dump_stack+0x1c/0x5c [ 56.463802][ T4685] should_fail_ex+0x3cc/0x524 [ 56.464661][ T4685] __should_failslab+0xc0/0x11c [ 56.465565][ T4685] should_failslab+0x10/0x28 [ 56.466418][ T4685] kmem_cache_alloc+0x88/0x310 [ 56.467284][ T4685] __kernfs_new_node+0xec/0x5fc [ 56.468161][ T4685] kernfs_new_node+0x120/0x230 [ 56.469047][ T4685] kernfs_create_dir_ns+0x58/0x138 [ 56.469962][ T4685] sysfs_create_dir_ns+0x120/0x264 [ 56.470948][ T4685] kobject_add_internal+0x5a8/0xb18 [ 56.471946][ T4685] kobject_add+0x144/0x20c [ 56.472802][ T4685] device_add+0x3dc/0xe4c [ 56.473641][ T4685] wakeup_source_sysfs_add+0x1b4/0x2a8 [ 56.474589][ T4685] wakeup_source_register+0x148/0x21c [ 56.475554][ T4685] ep_create_wakeup_source+0xec/0x230 [ 56.476533][ T4685] ep_insert+0xcb4/0x13ec [ 56.477314][ T4685] do_epoll_ctl+0x6dc/0xc60 [ 56.478138][ T4685] __arm64_sys_epoll_ctl+0x204/0x294 [ 56.479093][ T4685] invoke_syscall+0x98/0x290 [ 56.479987][ T4685] el0_svc_common+0x13c/0x258 [ 56.480877][ T4685] do_el0_svc+0x5c/0x134 [ 56.481674][ T4685] el0_svc+0x58/0x128 [ 56.482425][ T4685] el0t_64_sync_handler+0x84/0xf0 [ 56.483377][ T4685] el0t_64_sync+0x18c/0x190 [ 56.808863][ T22] vhci_hcd: vhci_device speed not set [ 57.210774][ T4685] kobject_add_internal failed for wakeup8 (error: -12 parent: wakeup) [ 57.228772][ T4693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 57.254114][ T4694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 57.282995][ T4690] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 57.284242][ T4690] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 57.292184][ T4690] vhci_hcd vhci_hcd.0: Device attached [ 57.369563][ T4700] device syzkaller0 entered promiscuous mode [ 57.374690][ T4691] vhci_hcd: connection closed [ 57.376057][ T4613] vhci_hcd: stop threads [ 57.377657][ T4613] vhci_hcd: release socket [ 57.378530][ T4613] vhci_hcd: disconnect device [ 57.698905][ T4429] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.041299][ T4707] netlink: 64 bytes leftover after parsing attributes in process `syz.3.104'. [ 58.338725][ T4725] FAULT_INJECTION: forcing a failure. [ 58.338725][ T4725] name failslab, interval 1, probability 0, space 0, times 0 [ 58.341390][ T4725] CPU: 0 PID: 4725 Comm: syz.3.110 Not tainted syzkaller #0 [ 58.342698][ T4725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 58.344614][ T4725] Call trace: [ 58.345254][ T4725] dump_backtrace+0x1c4/0x1f0 [ 58.346155][ T4725] show_stack+0x2c/0x3c [ 58.346932][ T4725] __dump_stack+0x30/0x40 [ 58.347727][ T4725] dump_stack_lvl+0xf4/0x15c [ 58.348587][ T4725] dump_stack+0x1c/0x5c [ 58.349367][ T4725] should_fail_ex+0x3cc/0x524 [ 58.350247][ T4725] __should_failslab+0xc0/0x11c [ 58.351124][ T4725] should_failslab+0x10/0x28 [ 58.351965][ T4725] kmem_cache_alloc+0x88/0x310 [ 58.352867][ T4725] __kernfs_new_node+0xec/0x5fc [ 58.353770][ T4725] kernfs_new_node+0x120/0x230 [ 58.354774][ T4725] kernfs_create_link+0x98/0x1e4 [ 58.355742][ T4725] sysfs_do_create_link_sd+0x8c/0x120 [ 58.356777][ T4725] sysfs_create_link+0x74/0x94 [ 58.357726][ T4725] device_add+0x744/0xe4c [ 58.358567][ T4725] wakeup_source_sysfs_add+0x1b4/0x2a8 [ 58.359597][ T4725] wakeup_source_register+0x148/0x21c [ 58.360614][ T4725] ep_create_wakeup_source+0xec/0x230 [ 58.361669][ T4725] ep_insert+0xcb4/0x13ec [ 58.362508][ T4725] do_epoll_ctl+0x6dc/0xc60 [ 58.363370][ T4725] __arm64_sys_epoll_ctl+0x204/0x294 [ 58.364375][ T4725] invoke_syscall+0x98/0x290 [ 58.365270][ T4725] el0_svc_common+0x13c/0x258 [ 58.366196][ T4725] do_el0_svc+0x5c/0x134 [ 58.366988][ T4725] el0_svc+0x58/0x128 [ 58.367764][ T4725] el0t_64_sync_handler+0x84/0xf0 [ 58.368716][ T4725] el0t_64_sync+0x18c/0x190 [ 58.559173][ T4429] usb 1-1: unable to get BOS descriptor or descriptor too short [ 58.588887][ T4342] vhci_hcd: vhci_device speed not set [ 59.395954][ T4429] usb 1-1: config 1 has an invalid interface number: 163 but max is 0 [ 59.397428][ T4429] usb 1-1: config 1 has no interface number 0 [ 59.398448][ T4429] usb 1-1: config 1 interface 163 has no altsetting 0 [ 59.918349][ T4429] usb 1-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=3c.0e [ 59.927769][ T4429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.930055][ T4429] usb 1-1: Product: syz [ 59.930907][ T4429] usb 1-1: Manufacturer: syz [ 59.931772][ T4429] usb 1-1: SerialNumber: syz [ 59.986517][ T4738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.113'. [ 60.067278][ T4743] tipc: Enabled bearer , priority 0 [ 60.120786][ T4741] tipc: Disabling bearer [ 60.144483][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.102'. [ 60.152687][ T4429] keyspan 1-1:1.163: Keyspan - (without firmware) converter detected [ 60.155817][ T4429] usb 1-1: USB disconnect, device number 2 [ 60.161904][ T4429] keyspan 1-1:1.163: device disconnected [ 60.196914][ T4751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.115'. [ 60.208902][ T4748] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 60.210093][ T4748] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.228357][ T4748] vhci_hcd vhci_hcd.0: Device attached [ 60.488982][ T4378] usb 6-1: new low-speed USB device number 3 using vhci_hcd [ 61.519807][ T4757] netlink: 64 bytes leftover after parsing attributes in process `syz.4.121'. [ 61.531303][ T4749] vhci_hcd: connection reset by peer [ 61.538744][ T11] vhci_hcd: stop threads [ 61.540800][ T11] vhci_hcd: release socket [ 61.552684][ T11] vhci_hcd: disconnect device [ 61.706979][ T4768] FAULT_INJECTION: forcing a failure. [ 61.706979][ T4768] name failslab, interval 1, probability 0, space 0, times 0 [ 61.709546][ T4768] CPU: 0 PID: 4768 Comm: syz.4.124 Not tainted syzkaller #0 [ 61.710768][ T4768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.712444][ T4768] Call trace: [ 61.713005][ T4768] dump_backtrace+0x1c4/0x1f0 [ 61.713847][ T4768] show_stack+0x2c/0x3c [ 61.714583][ T4768] __dump_stack+0x30/0x40 [ 61.715334][ T4768] dump_stack_lvl+0xf4/0x15c [ 61.716574][ T4768] dump_stack+0x1c/0x5c [ 61.716589][ T4768] should_fail_ex+0x3cc/0x524 [ 61.716599][ T4768] __should_failslab+0xc0/0x11c [ 61.716609][ T4768] should_failslab+0x10/0x28 [ 61.716617][ T4768] kmem_cache_alloc+0x88/0x310 [ 61.716625][ T4768] __kernfs_new_node+0xec/0x5fc [ 61.716632][ T4768] kernfs_new_node+0x120/0x230 [ 61.716637][ T4768] __kernfs_create_file+0x60/0x2e0 [ 61.716643][ T4768] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 61.716650][ T4768] internal_create_group+0x3e8/0xb24 [ 61.716658][ T4768] sysfs_create_groups+0x60/0x134 [ 61.716665][ T4768] device_add_attrs+0x17c/0x6f8 [ 61.716674][ T4768] device_add+0x5ac/0xe4c [ 61.716681][ T4768] wakeup_source_sysfs_add+0x1b4/0x2a8 [ 61.716689][ T4768] wakeup_source_register+0x148/0x21c [ 61.716696][ T4768] ep_create_wakeup_source+0xec/0x230 [ 61.716703][ T4768] ep_insert+0xcb4/0x13ec [ 61.716709][ T4768] do_epoll_ctl+0x6dc/0xc60 [ 61.716715][ T4768] __arm64_sys_epoll_ctl+0x204/0x294 [ 61.716722][ T4768] invoke_syscall+0x98/0x290 [ 61.716731][ T4768] el0_svc_common+0x13c/0x258 [ 61.716740][ T4768] do_el0_svc+0x5c/0x134 [ 61.716748][ T4768] el0_svc+0x58/0x128 [ 61.716754][ T4768] el0t_64_sync_handler+0x84/0xf0 [ 61.716759][ T4768] el0t_64_sync+0x18c/0x190 [ 61.754265][ T4772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 61.877729][ T4783] tipc: Started in network mode [ 61.884081][ T4783] tipc: Node identity 52834e78c57d, cluster identity 4711 [ 61.885347][ T4783] tipc: Enabled bearer , priority 0 [ 61.950724][ T4782] tipc: Disabling bearer [ 61.958642][ T4787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.967496][ T4787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.978210][ T4789] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 62.024302][ T4789] device syzkaller0 entered promiscuous mode [ 62.724443][ T4793] netlink: 64 bytes leftover after parsing attributes in process `syz.2.135'. [ 62.856129][ T4805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.139'. [ 62.895958][ T4804] FAULT_INJECTION: forcing a failure. [ 62.895958][ T4804] name failslab, interval 1, probability 0, space 0, times 0 [ 62.898229][ T4804] CPU: 0 PID: 4804 Comm: syz.1.138 Not tainted syzkaller #0 [ 62.899497][ T4804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 62.901314][ T4804] Call trace: [ 62.901903][ T4804] dump_backtrace+0x1c4/0x1f0 [ 62.902798][ T4804] show_stack+0x2c/0x3c [ 62.903587][ T4804] __dump_stack+0x30/0x40 [ 62.904364][ T4804] dump_stack_lvl+0xf4/0x15c [ 62.905153][ T4804] dump_stack+0x1c/0x5c [ 62.905870][ T4804] should_fail_ex+0x3cc/0x524 [ 62.906687][ T4804] __should_failslab+0xc0/0x11c [ 62.907552][ T4804] should_failslab+0x10/0x28 [ 62.908358][ T4804] kmem_cache_alloc+0x88/0x310 [ 62.909178][ T4804] __sigqueue_alloc+0x3e0/0x4e4 [ 62.910209][ T4804] __send_signal_locked+0x1d8/0xc88 [ 62.911287][ T4804] do_notify_parent+0x9bc/0xbe4 [ 62.912299][ T4804] release_task+0x11d0/0x1510 [ 62.913238][ T4804] do_exit+0x10bc/0x19ac [ 62.914041][ T4804] do_group_exit+0x198/0x238 [ 62.914871][ T4804] get_signal+0x11f4/0x133c [ 62.915683][ T4804] do_notify_resume+0x364/0x2c84 [ 62.916596][ T4804] el0_svc+0x98/0x128 [ 62.917336][ T4804] el0t_64_sync_handler+0x84/0xf0 [ 62.918340][ T4804] el0t_64_sync+0x18c/0x190 [ 63.023932][ T4815] tipc: Started in network mode [ 63.024872][ T4815] tipc: Node identity a6686c77becf, cluster identity 4711 [ 63.026171][ T4815] tipc: Enabled bearer , priority 0 [ 63.080313][ T4814] tipc: Disabling bearer [ 63.133458][ T4820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.136992][ T4820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.223152][ T4825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 63.240458][ T4821] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 63.241791][ T4821] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 63.246181][ T4821] vhci_hcd vhci_hcd.0: Device attached [ 63.518902][ T4379] usb 10-1: new low-speed USB device number 3 using vhci_hcd [ 64.490579][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.491831][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.600949][ T4822] vhci_hcd: connection reset by peer [ 64.604889][ T1613] vhci_hcd: stop threads [ 64.605705][ T1613] vhci_hcd: release socket [ 64.614602][ T1613] vhci_hcd: disconnect device [ 64.643371][ T4836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'. [ 64.646877][ T4836] device macsec0 entered promiscuous mode [ 64.760695][ T4833] FAULT_INJECTION: forcing a failure. [ 64.760695][ T4833] name failslab, interval 1, probability 0, space 0, times 0 [ 64.763047][ T4833] CPU: 0 PID: 4833 Comm: syz.3.150 Not tainted syzkaller #0 [ 64.764348][ T4833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 64.766178][ T4833] Call trace: [ 64.766821][ T4833] dump_backtrace+0x1c4/0x1f0 [ 64.767617][ T4833] show_stack+0x2c/0x3c [ 64.768354][ T4833] __dump_stack+0x30/0x40 [ 64.769122][ T4833] dump_stack_lvl+0xf4/0x15c [ 64.769959][ T4833] dump_stack+0x1c/0x5c [ 64.770722][ T4833] should_fail_ex+0x3cc/0x524 [ 64.771595][ T4833] __should_failslab+0xc0/0x11c [ 64.772467][ T4833] should_failslab+0x10/0x28 [ 64.773330][ T4833] kmem_cache_alloc+0x88/0x310 [ 64.774255][ T4833] __sigqueue_alloc+0x3e0/0x4e4 [ 64.775131][ T4833] __send_signal_locked+0x1d8/0xc88 [ 64.776078][ T4833] do_notify_parent+0x9bc/0xbe4 [ 64.776934][ T4833] release_task+0x11d0/0x1510 [ 64.777788][ T4833] do_exit+0x10bc/0x19ac [ 64.778540][ T4833] do_group_exit+0x198/0x238 [ 64.779360][ T4833] get_signal+0x11f4/0x133c [ 64.780189][ T4833] do_notify_resume+0x364/0x2c84 [ 64.781098][ T4833] el0_svc+0x98/0x128 [ 64.781811][ T4833] el0t_64_sync_handler+0x84/0xf0 [ 64.782699][ T4833] el0t_64_sync+0x18c/0x190 [ 64.867636][ T4841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.152'. [ 64.918664][ T4843] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 64.970811][ T4843] device syzkaller0 entered promiscuous mode [ 64.975134][ T4847] netlink: 64 bytes leftover after parsing attributes in process `syz.3.156'. [ 65.442581][ T4864] FAULT_INJECTION: forcing a failure. [ 65.442581][ T4864] name failslab, interval 1, probability 0, space 0, times 0 [ 65.445101][ T4864] CPU: 0 PID: 4864 Comm: syz.4.162 Not tainted syzkaller #0 [ 65.446453][ T4864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 65.448316][ T4864] Call trace: [ 65.448926][ T4864] dump_backtrace+0x1c4/0x1f0 [ 65.449817][ T4864] show_stack+0x2c/0x3c [ 65.450558][ T4864] __dump_stack+0x30/0x40 [ 65.451324][ T4864] dump_stack_lvl+0xf4/0x15c [ 65.452153][ T4864] dump_stack+0x1c/0x5c [ 65.452920][ T4864] should_fail_ex+0x3cc/0x524 [ 65.453704][ T4864] __should_failslab+0xc0/0x11c [ 65.454544][ T4864] should_failslab+0x10/0x28 [ 65.455379][ T4864] kmem_cache_alloc+0x88/0x310 [ 65.456237][ T4864] __sigqueue_alloc+0x3e0/0x4e4 [ 65.457110][ T4864] __send_signal_locked+0x1d8/0xc88 [ 65.458066][ T4864] do_notify_parent+0x9bc/0xbe4 [ 65.458928][ T4864] release_task+0x11d0/0x1510 [ 65.459769][ T4864] do_exit+0x10bc/0x19ac [ 65.460520][ T4864] do_group_exit+0x198/0x238 [ 65.461350][ T4864] get_signal+0x11f4/0x133c [ 65.462132][ T4864] do_notify_resume+0x364/0x2c84 [ 65.463034][ T4864] el0_svc+0x98/0x128 [ 65.463746][ T4864] el0t_64_sync_handler+0x84/0xf0 [ 65.464642][ T4864] el0t_64_sync+0x18c/0x190 [ 65.497214][ T4866] serio: Serial port ptm0 [ 65.547196][ T4871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.166'. [ 65.628399][ T4876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.164'. [ 65.629021][ T4378] vhci_hcd: vhci_device speed not set [ 65.633480][ T4876] device macsec0 entered promiscuous mode [ 65.696857][ T4429] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 65.762782][ T4881] netlink: 64 bytes leftover after parsing attributes in process `syz.3.169'. [ 66.340662][ T4429] usb 1-1: unable to get BOS descriptor or descriptor too short [ 66.344587][ T4429] usb 1-1: config 1 has an invalid interface number: 163 but max is 0 [ 66.345940][ T4429] usb 1-1: config 1 has no interface number 0 [ 66.346890][ T4429] usb 1-1: config 1 interface 163 has no altsetting 0 [ 66.349867][ T4429] usb 1-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=3c.0e [ 66.351441][ T4429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.352836][ T4429] usb 1-1: Product: syz [ 66.353606][ T4429] usb 1-1: Manufacturer: syz [ 66.354380][ T4429] usb 1-1: SerialNumber: syz [ 66.441654][ T4885] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 66.442946][ T4885] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.446164][ T4885] vhci_hcd vhci_hcd.0: Device attached [ 66.498383][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 66.565332][ T4429] keyspan 1-1:1.163: Keyspan - (without firmware) converter detected [ 66.567613][ T4429] usb 1-1: USB disconnect, device number 3 [ 66.572907][ T4429] keyspan 1-1:1.163: device disconnected [ 66.586841][ T4891] FAULT_INJECTION: forcing a failure. [ 66.586841][ T4891] name failslab, interval 1, probability 0, space 0, times 0 [ 66.603425][ T4891] CPU: 0 PID: 4891 Comm: syz.2.171 Not tainted syzkaller #0 [ 66.604903][ T4891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 66.606776][ T4891] Call trace: [ 66.607371][ T4891] dump_backtrace+0x1c4/0x1f0 [ 66.608243][ T4891] show_stack+0x2c/0x3c [ 66.609041][ T4891] __dump_stack+0x30/0x40 [ 66.609869][ T4891] dump_stack_lvl+0xf4/0x15c [ 66.610698][ T4891] dump_stack+0x1c/0x5c [ 66.611468][ T4891] should_fail_ex+0x3cc/0x524 [ 66.612323][ T4891] __should_failslab+0xc0/0x11c [ 66.613218][ T4891] should_failslab+0x10/0x28 [ 66.614045][ T4891] slab_pre_alloc_hook+0x6c/0x31c [ 66.614943][ T4891] kmem_cache_alloc_lru+0x60/0x284 [ 66.615876][ T4891] sock_alloc_inode+0x2c/0xcc [ 66.616718][ T4891] new_inode_pseudo+0x68/0x1cc [ 66.617578][ T4891] __sock_create+0x138/0x8a8 [ 66.618409][ T4891] __sys_socket+0xc0/0x1b0 [ 66.619212][ T4891] __arm64_sys_socket+0x7c/0x94 [ 66.620105][ T4891] invoke_syscall+0x98/0x290 [ 66.620983][ T4891] el0_svc_common+0x13c/0x258 [ 66.621851][ T4891] do_el0_svc+0x5c/0x134 [ 66.622614][ T4891] el0_svc+0x58/0x128 [ 66.623332][ T4891] el0t_64_sync_handler+0x84/0xf0 [ 66.624231][ T4891] el0t_64_sync+0x18c/0x190 [ 66.625078][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.629317][ T4886] vhci_hcd: connection closed [ 66.632130][ T4376] vhci_hcd: stop threads [ 66.633776][ T4376] vhci_hcd: release socket [ 66.634672][ T4376] vhci_hcd: disconnect device [ 67.249699][ T4891] socket: no more sockets [ 67.261220][ T4899] FAULT_INJECTION: forcing a failure. [ 67.261220][ T4899] name failslab, interval 1, probability 0, space 0, times 0 [ 67.263459][ T4899] CPU: 1 PID: 4899 Comm: syz.3.175 Not tainted syzkaller #0 [ 67.264738][ T4899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 67.266525][ T4899] Call trace: [ 67.267140][ T4899] dump_backtrace+0x1c4/0x1f0 [ 67.267986][ T4899] show_stack+0x2c/0x3c [ 67.268724][ T4899] __dump_stack+0x30/0x40 [ 67.269496][ T4899] dump_stack_lvl+0xf4/0x15c [ 67.270340][ T4899] dump_stack+0x1c/0x5c [ 67.271082][ T4899] should_fail_ex+0x3cc/0x524 [ 67.271913][ T4899] __should_failslab+0xc0/0x11c [ 67.272773][ T4899] should_failslab+0x10/0x28 [ 67.273617][ T4899] kmem_cache_alloc+0x88/0x310 [ 67.274490][ T4899] __kernfs_new_node+0xec/0x5fc [ 67.275360][ T4899] kernfs_new_node+0x120/0x230 [ 67.276212][ T4899] __kernfs_create_file+0x60/0x2e0 [ 67.277095][ T4899] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 67.278051][ T4899] sysfs_create_file_ns+0x10c/0x19c [ 67.279017][ T4899] device_add+0x4b0/0xe4c [ 67.279804][ T4899] wakeup_source_sysfs_add+0x1b4/0x2a8 [ 67.280768][ T4899] wakeup_source_register+0x148/0x21c [ 67.281869][ T4899] ep_create_wakeup_source+0xec/0x230 [ 67.282876][ T4899] ep_insert+0xcb4/0x13ec [ 67.283646][ T4899] do_epoll_ctl+0x6dc/0xc60 [ 67.284477][ T4899] __arm64_sys_epoll_ctl+0x204/0x294 [ 67.285428][ T4899] invoke_syscall+0x98/0x290 [ 67.286297][ T4899] el0_svc_common+0x13c/0x258 [ 67.287133][ T4899] do_el0_svc+0x5c/0x134 [ 67.287894][ T4899] el0_svc+0x58/0x128 [ 67.288620][ T4899] el0t_64_sync_handler+0x84/0xf0 [ 67.289557][ T4899] el0t_64_sync+0x18c/0x190 [ 67.416634][ T4904] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 67.426972][ T4907] FAULT_INJECTION: forcing a failure. [ 67.426972][ T4907] name failslab, interval 1, probability 0, space 0, times 0 [ 67.437694][ T4907] CPU: 1 PID: 4907 Comm: syz.0.178 Not tainted syzkaller #0 [ 67.438943][ T4907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 67.440696][ T4907] Call trace: [ 67.441282][ T4907] dump_backtrace+0x1c4/0x1f0 [ 67.442102][ T4907] show_stack+0x2c/0x3c [ 67.442848][ T4907] __dump_stack+0x30/0x40 [ 67.443644][ T4907] dump_stack_lvl+0xf4/0x15c [ 67.444476][ T4907] dump_stack+0x1c/0x5c [ 67.445240][ T4907] should_fail_ex+0x3cc/0x524 [ 67.446101][ T4907] __should_failslab+0xc0/0x11c [ 67.446969][ T4907] should_failslab+0x10/0x28 [ 67.447766][ T4907] kmem_cache_alloc+0x88/0x310 [ 67.448628][ T4907] getname_flags+0xb8/0x458 [ 67.449451][ T4907] getname+0x28/0x38 [ 67.450163][ T4907] do_sys_openat2+0xdc/0x3fc [ 67.451022][ T4907] __arm64_sys_openat+0x11c/0x150 [ 67.451889][ T4907] invoke_syscall+0x98/0x290 [ 67.452716][ T4907] el0_svc_common+0x13c/0x258 [ 67.453578][ T4907] do_el0_svc+0x5c/0x134 [ 67.454362][ T4907] el0_svc+0x58/0x128 [ 67.455102][ T4907] el0t_64_sync_handler+0x84/0xf0 [ 67.456036][ T4907] el0t_64_sync+0x18c/0x190 [ 67.465260][ T4904] device syzkaller0 entered promiscuous mode [ 67.616751][ T79] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 67.619111][ T79] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 67.704691][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 67.707723][ T4918] device macsec0 entered promiscuous mode [ 67.731779][ T4921] netlink: 64 bytes leftover after parsing attributes in process `syz.1.183'. [ 68.547879][ T4935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 68.556197][ T4932] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 68.557472][ T4932] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 68.575268][ T4932] vhci_hcd vhci_hcd.0: Device attached [ 68.604114][ T4939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.616782][ T4939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.620256][ T4941] FAULT_INJECTION: forcing a failure. [ 68.620256][ T4941] name failslab, interval 1, probability 0, space 0, times 0 [ 68.632454][ T4941] CPU: 1 PID: 4941 Comm: syz.1.190 Not tainted syzkaller #0 [ 68.633801][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 68.635560][ T4941] Call trace: [ 68.636159][ T4941] dump_backtrace+0x1c4/0x1f0 [ 68.637080][ T4941] show_stack+0x2c/0x3c [ 68.637850][ T4941] __dump_stack+0x30/0x40 [ 68.638665][ T4941] dump_stack_lvl+0xf4/0x15c [ 68.639524][ T4941] dump_stack+0x1c/0x5c [ 68.640297][ T4941] should_fail_ex+0x3cc/0x524 [ 68.641180][ T4941] __should_failslab+0xc0/0x11c [ 68.642105][ T4941] should_failslab+0x10/0x28 [ 68.642994][ T4941] kmem_cache_alloc+0x88/0x310 [ 68.643896][ T4941] getname_flags+0xb8/0x458 [ 68.644721][ T4941] getname+0x28/0x38 [ 68.645443][ T4941] do_sys_openat2+0xdc/0x3fc [ 68.646295][ T4941] __arm64_sys_openat+0x11c/0x150 [ 68.647201][ T4941] invoke_syscall+0x98/0x290 [ 68.648016][ T4941] el0_svc_common+0x13c/0x258 [ 68.648846][ T4941] do_el0_svc+0x5c/0x134 [ 68.649622][ T4941] el0_svc+0x58/0x128 [ 68.650330][ T4941] el0t_64_sync_handler+0x84/0xf0 [ 68.651296][ T4941] el0t_64_sync+0x18c/0x190 [ 68.654889][ T4933] vhci_hcd: connection closed [ 68.657592][ T39] vhci_hcd: stop threads [ 68.659197][ T39] vhci_hcd: release socket [ 68.659777][ T4379] vhci_hcd: vhci_device speed not set [ 68.660061][ T39] vhci_hcd: disconnect device [ 68.705978][ T4944] FAULT_INJECTION: forcing a failure. [ 68.705978][ T4944] name failslab, interval 1, probability 0, space 0, times 0 [ 68.708255][ T4944] CPU: 1 PID: 4944 Comm: syz.0.191 Not tainted syzkaller #0 [ 68.709627][ T4944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 68.711513][ T4944] Call trace: [ 68.712143][ T4944] dump_backtrace+0x1c4/0x1f0 [ 68.713129][ T4944] show_stack+0x2c/0x3c [ 68.713976][ T4944] __dump_stack+0x30/0x40 [ 68.714746][ T4944] dump_stack_lvl+0xf4/0x15c [ 68.715599][ T4944] dump_stack+0x1c/0x5c [ 68.716361][ T4944] should_fail_ex+0x3cc/0x524 [ 68.717277][ T4944] __should_failslab+0xc0/0x11c [ 68.718137][ T4944] should_failslab+0x10/0x28 [ 68.718937][ T4944] kmem_cache_alloc+0x88/0x310 [ 68.719797][ T4944] __kernfs_new_node+0xec/0x5fc [ 68.720706][ T4944] kernfs_new_node+0x120/0x230 [ 68.721555][ T4944] __kernfs_create_file+0x60/0x2e0 [ 68.722468][ T4944] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 68.723433][ T4944] internal_create_group+0x3e8/0xb24 [ 68.724378][ T4944] sysfs_create_groups+0x60/0x134 [ 68.725263][ T4944] device_add_attrs+0x17c/0x6f8 [ 68.726111][ T4944] device_add+0x5ac/0xe4c [ 68.726903][ T4944] wakeup_source_sysfs_add+0x1b4/0x2a8 [ 68.727882][ T4944] wakeup_source_register+0x148/0x21c [ 68.728867][ T4944] ep_create_wakeup_source+0xec/0x230 [ 68.729835][ T4944] ep_insert+0xcb4/0x13ec [ 68.730590][ T4944] do_epoll_ctl+0x6dc/0xc60 [ 68.731411][ T4944] __arm64_sys_epoll_ctl+0x204/0x294 [ 68.732381][ T4944] invoke_syscall+0x98/0x290 [ 68.733243][ T4944] el0_svc_common+0x13c/0x258 [ 68.734094][ T4944] do_el0_svc+0x5c/0x134 [ 68.734875][ T4944] el0_svc+0x58/0x128 [ 68.735573][ T4944] el0t_64_sync_handler+0x84/0xf0 [ 68.736456][ T4944] el0t_64_sync+0x18c/0x190 [ 69.609866][ T7] cfg80211: failed to load regulatory.db [ 69.634739][ T52] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 69.636459][ T52] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 69.751294][ T4969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 69.782802][ T4971] netlink: 64 bytes leftover after parsing attributes in process `syz.1.201'. [ 69.806404][ T4973] FAULT_INJECTION: forcing a failure. [ 69.806404][ T4973] name failslab, interval 1, probability 0, space 0, times 0 [ 69.824735][ T4973] CPU: 1 PID: 4973 Comm: syz.0.202 Not tainted syzkaller #0 [ 69.826089][ T4973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 69.827935][ T4973] Call trace: [ 69.828535][ T4973] dump_backtrace+0x1c4/0x1f0 [ 69.829396][ T4973] show_stack+0x2c/0x3c [ 69.830148][ T4973] __dump_stack+0x30/0x40 [ 69.830938][ T4973] dump_stack_lvl+0xf4/0x15c [ 69.831775][ T4973] dump_stack+0x1c/0x5c [ 69.832563][ T4973] should_fail_ex+0x3cc/0x524 [ 69.833441][ T4973] __should_failslab+0xc0/0x11c [ 69.834376][ T4973] should_failslab+0x10/0x28 [ 69.835270][ T4973] kmem_cache_alloc+0x88/0x310 [ 69.836182][ T4973] getname_flags+0xb8/0x458 [ 69.837006][ T4973] getname+0x28/0x38 [ 69.837714][ T4973] do_sys_openat2+0xdc/0x3fc [ 69.838666][ T4973] __arm64_sys_openat+0x11c/0x150 [ 69.839656][ T4973] invoke_syscall+0x98/0x290 [ 69.840544][ T4973] el0_svc_common+0x13c/0x258 [ 69.841452][ T4973] do_el0_svc+0x5c/0x134 [ 69.842293][ T4973] el0_svc+0x58/0x128 [ 69.843084][ T4973] el0t_64_sync_handler+0x84/0xf0 [ 69.844063][ T4973] el0t_64_sync+0x18c/0x190 [ 70.077379][ T4982] FAULT_INJECTION: forcing a failure. [ 70.077379][ T4982] name failslab, interval 1, probability 0, space 0, times 0 [ 70.097527][ T4982] CPU: 1 PID: 4982 Comm: syz.3.204 Not tainted syzkaller #0 [ 70.098917][ T4982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 70.100740][ T4982] Call trace: [ 70.101352][ T4982] dump_backtrace+0x1c4/0x1f0 [ 70.102232][ T4982] show_stack+0x2c/0x3c [ 70.102985][ T4982] __dump_stack+0x30/0x40 [ 70.103757][ T4982] dump_stack_lvl+0xf4/0x15c [ 70.104620][ T4982] dump_stack+0x1c/0x5c [ 70.105376][ T4982] should_fail_ex+0x3cc/0x524 [ 70.106226][ T4982] __should_failslab+0xc0/0x11c [ 70.107095][ T4982] should_failslab+0x10/0x28 [ 70.107920][ T4982] kmem_cache_alloc+0x88/0x310 [ 70.108778][ T4982] __kernfs_new_node+0xec/0x5fc [ 70.109673][ T4982] kernfs_new_node+0x120/0x230 [ 70.110562][ T4982] kernfs_create_link+0x98/0x1e4 [ 70.111469][ T4982] sysfs_do_create_link_sd+0x8c/0x120 [ 70.112460][ T4982] sysfs_create_link+0x74/0x94 [ 70.113336][ T4982] device_add+0x57c/0xe4c [ 70.114156][ T4982] wakeup_source_sysfs_add+0x1b4/0x2a8 [ 70.115170][ T4982] wakeup_source_register+0x148/0x21c [ 70.116164][ T4982] ep_create_wakeup_source+0xec/0x230 [ 70.117163][ T4982] ep_insert+0xcb4/0x13ec [ 70.117982][ T4982] do_epoll_ctl+0x6dc/0xc60 [ 70.118794][ T4982] __arm64_sys_epoll_ctl+0x204/0x294 [ 70.119737][ T4982] invoke_syscall+0x98/0x290 [ 70.120584][ T4982] el0_svc_common+0x13c/0x258 [ 70.121431][ T4982] do_el0_svc+0x5c/0x134 [ 70.122181][ T4982] el0_svc+0x58/0x128 [ 70.122890][ T4982] el0t_64_sync_handler+0x84/0xf0 [ 70.123802][ T4982] el0t_64_sync+0x18c/0x190 [ 70.281117][ T4991] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 70.282396][ T4991] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 70.284423][ T4991] vhci_hcd vhci_hcd.0: Device attached [ 70.288395][ T4991] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 70.368878][ T4381] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 70.548847][ T4379] usb 6-1: new low-speed USB device number 4 using vhci_hcd [ 70.976747][ T4992] vhci_hcd: connection reset by peer [ 71.050717][ T4381] usb 1-1: unable to get BOS descriptor or descriptor too short [ 71.304302][ T4465] vhci_hcd: stop threads [ 71.305070][ T4465] vhci_hcd: release socket [ 71.305809][ T4465] vhci_hcd: disconnect device [ 71.590708][ T4381] usb 1-1: config 1 has an invalid interface number: 163 but max is 0 [ 71.592144][ T4381] usb 1-1: config 1 has no interface number 0 [ 71.593209][ T4381] usb 1-1: config 1 interface 163 has no altsetting 0 [ 71.674801][ T4381] usb 1-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=3c.0e [ 71.676620][ T4381] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.678055][ T4381] usb 1-1: Product: syz [ 71.678767][ T4381] usb 1-1: Manufacturer: syz [ 71.696877][ T4381] usb 1-1: SerialNumber: syz [ 71.795184][ T52] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 71.797080][ T52] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 71.911867][ T5009] FAULT_INJECTION: forcing a failure. [ 71.911867][ T5009] name failslab, interval 1, probability 0, space 0, times 0 [ 71.916245][ T5009] CPU: 0 PID: 5009 Comm: syz.4.215 Not tainted syzkaller #0 [ 71.917516][ T5009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 71.919226][ T5009] Call trace: [ 71.919801][ T5009] dump_backtrace+0x1c4/0x1f0 [ 71.920624][ T5009] show_stack+0x2c/0x3c [ 71.921377][ T5009] __dump_stack+0x30/0x40 [ 71.922129][ T5009] dump_stack_lvl+0xf4/0x15c [ 71.922934][ T5009] dump_stack+0x1c/0x5c [ 71.923707][ T5009] should_fail_ex+0x3cc/0x524 [ 71.924567][ T5009] __should_failslab+0xc0/0x11c [ 71.925540][ T5009] should_failslab+0x10/0x28 [ 71.926372][ T5009] kmem_cache_alloc+0x88/0x310 [ 71.927230][ T5009] getname_flags+0xb8/0x458 [ 71.928018][ T5009] getname+0x28/0x38 [ 71.928726][ T5009] do_sys_openat2+0xdc/0x3fc [ 71.929576][ T5009] __arm64_sys_openat+0x11c/0x150 [ 71.930477][ T5009] invoke_syscall+0x98/0x290 [ 71.931309][ T5009] el0_svc_common+0x13c/0x258 [ 71.932174][ T5009] do_el0_svc+0x5c/0x134 [ 71.932968][ T5009] el0_svc+0x58/0x128 [ 71.933701][ T5009] el0t_64_sync_handler+0x84/0xf0 [ 71.934579][ T5009] el0t_64_sync+0x18c/0x190 [ 71.984870][ T4381] keyspan 1-1:1.163: Keyspan - (without firmware) converter detected [ 72.006121][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 72.028611][ T5015] netlink: 64 bytes leftover after parsing attributes in process `syz.3.216'. [ 72.221595][ T5026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.220'. [ 72.703470][ T52] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 72.705194][ T52] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 72.709327][ T4381] usb 1-1: USB disconnect, device number 4 [ 72.710581][ T4381] keyspan 1-1:1.163: device disconnected [ 72.747168][ T5044] FAULT_INJECTION: forcing a failure. [ 72.747168][ T5044] name failslab, interval 1, probability 0, space 0, times 0 [ 72.756343][ T5044] CPU: 0 PID: 5044 Comm: syz.0.227 Not tainted syzkaller #0 [ 72.757643][ T5044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 72.759722][ T5044] Call trace: [ 72.760394][ T5044] dump_backtrace+0x1c4/0x1f0 [ 72.761291][ T5044] show_stack+0x2c/0x3c [ 72.762157][ T5044] __dump_stack+0x30/0x40 [ 72.762948][ T5044] dump_stack_lvl+0xf4/0x15c [ 72.763782][ T5044] dump_stack+0x1c/0x5c [ 72.764548][ T5044] should_fail_ex+0x3cc/0x524 [ 72.765398][ T5044] __should_failslab+0xc0/0x11c [ 72.766242][ T5044] should_failslab+0x10/0x28 [ 72.767096][ T5044] kmem_cache_alloc+0x88/0x310 [ 72.767944][ T5044] getname_flags+0xb8/0x458 [ 72.768756][ T5044] getname+0x28/0x38 [ 72.769473][ T5044] do_sys_openat2+0xdc/0x3fc [ 72.770330][ T5044] __arm64_sys_openat+0x11c/0x150 [ 72.771228][ T5044] invoke_syscall+0x98/0x290 [ 72.772002][ T5044] el0_svc_common+0x13c/0x258 [ 72.772833][ T5044] do_el0_svc+0x5c/0x134 [ 72.773604][ T5044] el0_svc+0x58/0x128 [ 72.774341][ T5044] el0t_64_sync_handler+0x84/0xf0 [ 72.775256][ T5044] el0t_64_sync+0x18c/0x190 [ 72.856890][ T5050] device syzkaller1 entered promiscuous mode [ 72.934197][ T5053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.231'. [ 74.260888][ T5060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.262523][ T5060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.326892][ T5063] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 74.328109][ T5063] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 74.330371][ T5063] vhci_hcd vhci_hcd.0: Device attached [ 74.386762][ T52] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 74.388600][ T52] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 74.437235][ T5064] vhci_hcd: connection closed [ 74.437472][ T456] vhci_hcd: stop threads [ 74.439639][ T456] vhci_hcd: release socket [ 74.440890][ T456] vhci_hcd: disconnect device [ 74.626755][ T5076] FAULT_INJECTION: forcing a failure. [ 74.626755][ T5076] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.630148][ T5076] CPU: 0 PID: 5076 Comm: syz.4.240 Not tainted syzkaller #0 [ 74.631352][ T5076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 74.633305][ T5076] Call trace: [ 74.633937][ T5076] dump_backtrace+0x1c4/0x1f0 [ 74.634792][ T5076] show_stack+0x2c/0x3c [ 74.635558][ T5076] __dump_stack+0x30/0x40 [ 74.636373][ T5076] dump_stack_lvl+0xf4/0x15c [ 74.637245][ T5076] dump_stack+0x1c/0x5c [ 74.638012][ T5076] should_fail_ex+0x3cc/0x524 [ 74.638856][ T5076] should_fail+0x14/0x24 [ 74.639646][ T5076] should_fail_usercopy+0x20/0x30 [ 74.640545][ T5076] strncpy_from_user+0x48/0x59c [ 74.641402][ T5076] getname_flags+0xec/0x458 [ 74.642210][ T5076] getname+0x28/0x38 [ 74.642919][ T5076] do_sys_openat2+0xdc/0x3fc [ 74.643737][ T5076] __arm64_sys_openat+0x11c/0x150 [ 74.644662][ T5076] invoke_syscall+0x98/0x290 [ 74.645493][ T5076] el0_svc_common+0x13c/0x258 [ 74.646375][ T5076] do_el0_svc+0x5c/0x134 [ 74.647166][ T5076] el0_svc+0x58/0x128 [ 74.647912][ T5076] el0t_64_sync_handler+0x84/0xf0 [ 74.648852][ T5076] el0t_64_sync+0x18c/0x190 [ 74.725239][ T5080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 74.967610][ T5084] device syzkaller1 entered promiscuous mode [ 74.977681][ T5086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.244'. [ 75.076046][ T5093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.081861][ T5093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.476479][ T5106] FAULT_INJECTION: forcing a failure. [ 75.476479][ T5106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.483134][ T5106] CPU: 1 PID: 5106 Comm: syz.1.251 Not tainted syzkaller #0 [ 75.484515][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 75.486472][ T5106] Call trace: [ 75.487128][ T5106] dump_backtrace+0x1c4/0x1f0 [ 75.488041][ T5106] show_stack+0x2c/0x3c [ 75.488849][ T5106] __dump_stack+0x30/0x40 [ 75.489661][ T5106] dump_stack_lvl+0xf4/0x15c [ 75.490565][ T5106] dump_stack+0x1c/0x5c [ 75.491390][ T5106] should_fail_ex+0x3cc/0x524 [ 75.492327][ T5106] should_fail+0x14/0x24 [ 75.493132][ T5106] should_fail_usercopy+0x20/0x30 [ 75.494076][ T5106] strncpy_from_user+0x48/0x59c [ 75.494986][ T5106] getname_flags+0xec/0x458 [ 75.495954][ T5106] getname+0x28/0x38 [ 75.496744][ T5106] do_sys_openat2+0xdc/0x3fc [ 75.497668][ T5106] __arm64_sys_openat+0x11c/0x150 [ 75.498704][ T5106] invoke_syscall+0x98/0x290 [ 75.499652][ T5106] el0_svc_common+0x13c/0x258 [ 75.500606][ T5106] do_el0_svc+0x5c/0x134 [ 75.501401][ T5106] el0_svc+0x58/0x128 [ 75.502133][ T5106] el0t_64_sync_handler+0x84/0xf0 [ 75.503043][ T5106] el0t_64_sync+0x18c/0x190 [ 75.552428][ T5108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.555397][ T5108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.688884][ T4379] vhci_hcd: vhci_device speed not set [ 76.009578][ T79] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 76.011486][ T79] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 76.026241][ T5118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.257'. [ 76.121716][ T5119] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 76.122778][ T5119] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.124525][ T5119] vhci_hcd vhci_hcd.0: Device attached [ 76.152691][ T5122] device syzkaller1 entered promiscuous mode [ 76.399644][ T4378] usb 8-1: new low-speed USB device number 3 using vhci_hcd [ 76.804141][ T5120] vhci_hcd: connection reset by peer [ 77.327290][ T456] vhci_hcd: stop threads [ 77.328129][ T456] vhci_hcd: release socket [ 77.477228][ T5126] syz.2.259: attempt to access beyond end of device [ 77.477228][ T5126] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 77.482328][ T456] vhci_hcd: disconnect device [ 77.536094][ T5134] FAULT_INJECTION: forcing a failure. [ 77.536094][ T5134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.538399][ T5134] CPU: 1 PID: 5134 Comm: syz.0.262 Not tainted syzkaller #0 [ 77.539823][ T5134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 77.541772][ T5134] Call trace: [ 77.542405][ T5134] dump_backtrace+0x1c4/0x1f0 [ 77.543353][ T5134] show_stack+0x2c/0x3c [ 77.544160][ T5134] __dump_stack+0x30/0x40 [ 77.545020][ T5134] dump_stack_lvl+0xf4/0x15c [ 77.545885][ T5134] dump_stack+0x1c/0x5c [ 77.546613][ T5134] should_fail_ex+0x3cc/0x524 [ 77.547566][ T5134] should_fail+0x14/0x24 [ 77.548392][ T5134] should_fail_usercopy+0x20/0x30 [ 77.549359][ T5134] strncpy_from_user+0x48/0x59c [ 77.550289][ T5134] getname_flags+0xec/0x458 [ 77.551123][ T5134] getname+0x28/0x38 [ 77.551840][ T5134] do_sys_openat2+0xdc/0x3fc [ 77.552711][ T5134] __arm64_sys_openat+0x11c/0x150 [ 77.553675][ T5134] invoke_syscall+0x98/0x290 [ 77.554497][ T5134] el0_svc_common+0x13c/0x258 [ 77.555366][ T5134] do_el0_svc+0x5c/0x134 [ 77.556169][ T5134] el0_svc+0x58/0x128 [ 77.556906][ T5134] el0t_64_sync_handler+0x84/0xf0 [ 77.557813][ T5134] el0t_64_sync+0x18c/0x190 [ 77.610516][ T5135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 77.886811][ T4379] hid-generic 0005:4C4A:0058.0001: item fetching failed at offset 0/1 [ 77.888727][ T4379] hid-generic: probe of 0005:4C4A:0058.0001 failed with error -22 [ 77.903885][ T5156] netlink: 24 bytes leftover after parsing attributes in process `syz.4.270'. [ 77.996853][ T79] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 77.998557][ T79] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 78.071863][ T5163] FAULT_INJECTION: forcing a failure. [ 78.071863][ T5163] name failslab, interval 1, probability 0, space 0, times 0 [ 78.098931][ T5163] CPU: 0 PID: 5163 Comm: syz.4.273 Not tainted syzkaller #0 [ 78.100395][ T5163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 78.102331][ T5163] Call trace: [ 78.102964][ T5163] dump_backtrace+0x1c4/0x1f0 [ 78.103837][ T5163] show_stack+0x2c/0x3c [ 78.104603][ T5163] __dump_stack+0x30/0x40 [ 78.105421][ T5163] dump_stack_lvl+0xf4/0x15c [ 78.106248][ T5163] dump_stack+0x1c/0x5c [ 78.107133][ T5163] should_fail_ex+0x3cc/0x524 [ 78.108134][ T5163] __should_failslab+0xc0/0x11c [ 78.109102][ T5163] should_failslab+0x10/0x28 [ 78.110013][ T5163] kmem_cache_alloc+0x88/0x310 [ 78.110977][ T5163] getname_flags+0xb8/0x458 [ 78.111877][ T5163] getname+0x28/0x38 [ 78.112682][ T5163] do_sys_openat2+0xdc/0x3fc [ 78.113588][ T5163] __arm64_sys_openat+0x11c/0x150 [ 78.114562][ T5163] invoke_syscall+0x98/0x290 [ 78.115475][ T5163] el0_svc_common+0x13c/0x258 [ 78.116394][ T5163] do_el0_svc+0x5c/0x134 [ 78.117189][ T5163] el0_svc+0x58/0x128 [ 78.117916][ T5163] el0t_64_sync_handler+0x84/0xf0 [ 78.118836][ T5163] el0t_64_sync+0x18c/0x190 [ 78.136219][ T5165] device syzkaller1 entered promiscuous mode [ 78.696244][ T5178] capability: warning: `syz.3.279' uses deprecated v2 capabilities in a way that may be insecure [ 78.746111][ T5182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 78.751381][ T5182] device macsec0 entered promiscuous mode [ 78.767188][ T5181] FAULT_INJECTION: forcing a failure. [ 78.767188][ T5181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.782095][ T5181] CPU: 1 PID: 5181 Comm: syz.1.280 Not tainted syzkaller #0 [ 78.783513][ T5181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 78.785388][ T5181] Call trace: [ 78.785963][ T5181] dump_backtrace+0x1c4/0x1f0 [ 78.786794][ T5181] show_stack+0x2c/0x3c [ 78.787539][ T5181] __dump_stack+0x30/0x40 [ 78.788326][ T5181] dump_stack_lvl+0xf4/0x15c [ 78.789178][ T5181] dump_stack+0x1c/0x5c [ 78.789978][ T5181] should_fail_ex+0x3cc/0x524 [ 78.790881][ T5181] should_fail+0x14/0x24 [ 78.791695][ T5181] should_fail_usercopy+0x20/0x30 [ 78.792662][ T5181] _copy_to_user+0x3c/0x158 [ 78.793512][ T5181] io_uring_create+0x670/0xb34 [ 78.794404][ T5181] __arm64_sys_io_uring_setup+0x2a4/0x2e8 [ 78.795479][ T5181] invoke_syscall+0x98/0x290 [ 78.796354][ T5181] el0_svc_common+0x13c/0x258 [ 78.797250][ T5181] do_el0_svc+0x5c/0x134 [ 78.798002][ T5181] el0_svc+0x58/0x128 [ 78.798704][ T5181] el0t_64_sync_handler+0x84/0xf0 [ 78.799628][ T5181] el0t_64_sync+0x18c/0x190 [ 78.974923][ T5190] netlink: 24 bytes leftover after parsing attributes in process `syz.1.283'. [ 79.288413][ T5196] FAULT_INJECTION: forcing a failure. [ 79.288413][ T5196] name failslab, interval 1, probability 0, space 0, times 0 [ 79.321126][ T5196] CPU: 0 PID: 5196 Comm: syz.1.286 Not tainted syzkaller #0 [ 79.322474][ T5196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 79.324264][ T5196] Call trace: [ 79.324883][ T5196] dump_backtrace+0x1c4/0x1f0 [ 79.325769][ T5196] show_stack+0x2c/0x3c [ 79.326550][ T5196] __dump_stack+0x30/0x40 [ 79.327355][ T5196] dump_stack_lvl+0xf4/0x15c [ 79.328201][ T5196] dump_stack+0x1c/0x5c [ 79.328956][ T5196] should_fail_ex+0x3cc/0x524 [ 79.329748][ T5196] __should_failslab+0xc0/0x11c [ 79.330610][ T5196] should_failslab+0x10/0x28 [ 79.331464][ T5196] kmem_cache_alloc+0x88/0x310 [ 79.332364][ T5196] getname_flags+0xb8/0x458 [ 79.333200][ T5196] getname+0x28/0x38 [ 79.333897][ T5196] do_sys_openat2+0xdc/0x3fc [ 79.334729][ T5196] __arm64_sys_openat+0x11c/0x150 [ 79.335672][ T5196] invoke_syscall+0x98/0x290 [ 79.336541][ T5196] el0_svc_common+0x13c/0x258 [ 79.337409][ T5196] do_el0_svc+0x5c/0x134 [ 79.338195][ T5196] el0_svc+0x58/0x128 [ 79.338893][ T5196] el0t_64_sync_handler+0x84/0xf0 [ 79.339797][ T5196] el0t_64_sync+0x18c/0x190 [ 79.355923][ T5197] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 79.357064][ T5197] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 79.358575][ T5197] vhci_hcd vhci_hcd.0: Device attached [ 79.362467][ T79] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 79.364160][ T79] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 79.412948][ T5205] device syzkaller1 entered promiscuous mode [ 79.974252][ T5198] vhci_hcd: connection closed [ 80.230936][ T4379] usb 6-1: new low-speed USB device number 5 using vhci_hcd [ 80.233538][ T5199] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 80.498977][ T4613] vhci_hcd: stop threads [ 80.499770][ T4613] vhci_hcd: release socket [ 80.500595][ T4613] vhci_hcd: disconnect device [ 80.846343][ T5221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.296'. [ 80.858092][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.294'. [ 80.876361][ T5226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.878296][ T5226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.055364][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 81.164438][ T5239] FAULT_INJECTION: forcing a failure. [ 81.164438][ T5239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.173297][ T5239] CPU: 0 PID: 5239 Comm: syz.2.301 Not tainted syzkaller #0 [ 81.174802][ T5239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.176869][ T5239] Call trace: [ 81.177548][ T5239] dump_backtrace+0x1c4/0x1f0 [ 81.178529][ T5239] show_stack+0x2c/0x3c [ 81.179411][ T5239] __dump_stack+0x30/0x40 [ 81.180244][ T5239] dump_stack_lvl+0xf4/0x15c [ 81.181112][ T5239] dump_stack+0x1c/0x5c [ 81.181876][ T5239] should_fail_ex+0x3cc/0x524 [ 81.182755][ T5239] should_fail+0x14/0x24 [ 81.183519][ T5239] should_fail_usercopy+0x20/0x30 [ 81.184435][ T5239] strncpy_from_user+0x48/0x59c [ 81.185350][ T5239] getname_flags+0xec/0x458 [ 81.186164][ T5239] getname+0x28/0x38 [ 81.186882][ T5239] do_sys_openat2+0xdc/0x3fc [ 81.187854][ T5239] __arm64_sys_openat+0x11c/0x150 [ 81.188923][ T5239] invoke_syscall+0x98/0x290 [ 81.189878][ T5239] el0_svc_common+0x13c/0x258 [ 81.190822][ T5239] do_el0_svc+0x5c/0x134 [ 81.191572][ T5239] el0_svc+0x58/0x128 [ 81.192309][ T5239] el0t_64_sync_handler+0x84/0xf0 [ 81.193224][ T5239] el0t_64_sync+0x18c/0x190 [ 81.538961][ T4378] vhci_hcd: vhci_device speed not set [ 81.874282][ T5251] device syzkaller1 entered promiscuous mode [ 81.942850][ T5253] FAULT_INJECTION: forcing a failure. [ 81.942850][ T5253] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 81.947216][ T5253] CPU: 1 PID: 5253 Comm: syz.1.307 Not tainted syzkaller #0 [ 81.948562][ T5253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.950494][ T5253] Call trace: [ 81.951095][ T5253] dump_backtrace+0x1c4/0x1f0 [ 81.951977][ T5253] show_stack+0x2c/0x3c [ 81.952747][ T5253] __dump_stack+0x30/0x40 [ 81.953535][ T5253] dump_stack_lvl+0xf4/0x15c [ 81.954400][ T5253] dump_stack+0x1c/0x5c [ 81.955171][ T5253] should_fail_ex+0x3cc/0x524 [ 81.956020][ T5253] should_fail_alloc_page+0x74/0xb8 [ 81.956970][ T5253] prepare_alloc_pages+0x1b8/0x4f0 [ 81.957926][ T5253] __alloc_pages+0x134/0x544 [ 81.958752][ T5253] __kmalloc_large_node+0x9c/0x1dc [ 81.959674][ T5253] __kmalloc+0x12c/0x180 [ 81.960426][ T5253] vhost_dev_set_owner+0x354/0x954 [ 81.961335][ T5253] vhost_net_ioctl+0x6c8/0x12e4 [ 81.962254][ T5253] __arm64_sys_ioctl+0x14c/0x1c8 [ 81.963197][ T5253] invoke_syscall+0x98/0x290 [ 81.964040][ T5253] el0_svc_common+0x13c/0x258 [ 81.964925][ T5253] do_el0_svc+0x5c/0x134 [ 81.965713][ T5253] el0_svc+0x58/0x128 [ 81.966421][ T5253] el0t_64_sync_handler+0x84/0xf0 [ 81.967307][ T5253] el0t_64_sync+0x18c/0x190 [ 82.077432][ T5260] netlink: 24 bytes leftover after parsing attributes in process `syz.0.310'. [ 82.182270][ T5263] FAULT_INJECTION: forcing a failure. [ 82.182270][ T5263] name failslab, interval 1, probability 0, space 0, times 0 [ 82.194577][ T5263] CPU: 1 PID: 5263 Comm: syz.1.312 Not tainted syzkaller #0 [ 82.195906][ T5263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 82.197975][ T5263] Call trace: [ 82.198601][ T5263] dump_backtrace+0x1c4/0x1f0 [ 82.199498][ T5263] show_stack+0x2c/0x3c [ 82.200298][ T5263] __dump_stack+0x30/0x40 [ 82.201095][ T5263] dump_stack_lvl+0xf4/0x15c [ 82.201964][ T5263] dump_stack+0x1c/0x5c [ 82.202849][ T5263] should_fail_ex+0x3cc/0x524 [ 82.203848][ T5263] __should_failslab+0xc0/0x11c [ 82.204847][ T5263] should_failslab+0x10/0x28 [ 82.205795][ T5263] kmem_cache_alloc+0x88/0x310 [ 82.206697][ T5263] getname_flags+0xb8/0x458 [ 82.207541][ T5263] getname+0x28/0x38 [ 82.208257][ T5263] do_sys_openat2+0xdc/0x3fc [ 82.209046][ T5263] __arm64_sys_openat+0x11c/0x150 [ 82.209913][ T5263] invoke_syscall+0x98/0x290 [ 82.210714][ T5263] el0_svc_common+0x13c/0x258 [ 82.211501][ T5263] do_el0_svc+0x5c/0x134 [ 82.212259][ T5263] el0_svc+0x58/0x128 [ 82.212967][ T5263] el0t_64_sync_handler+0x84/0xf0 [ 82.213861][ T5263] el0t_64_sync+0x18c/0x190 [ 82.222642][ T79] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 82.224376][ T79] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 82.358372][ T5272] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 82.359617][ T5272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 82.364991][ T5272] vhci_hcd vhci_hcd.0: Device attached [ 82.497920][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 82.513730][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 82.538910][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 82.544339][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 82.563746][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 82.575070][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 82.588039][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 82.600959][ T5282] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 82.616069][ T5281] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 82.631326][ T4377] usb 10-1: new low-speed USB device number 4 using vhci_hcd [ 82.703289][ T5285] device syzkaller1 entered promiscuous mode [ 82.721606][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.726115][ T7] usb 1-1: config 1 has an invalid interface number: 163 but max is 0 [ 82.727804][ T7] usb 1-1: config 1 has no interface number 0 [ 82.731697][ T7] usb 1-1: config 1 interface 163 has no altsetting 0 [ 82.734830][ T7] usb 1-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=3c.0e [ 82.737329][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.741850][ T7] usb 1-1: Product: syz [ 82.742965][ T7] usb 1-1: Manufacturer: syz [ 82.744391][ T7] usb 1-1: SerialNumber: syz [ 82.902457][ T5287] device syzkaller0 entered promiscuous mode [ 82.966327][ T7] keyspan 1-1:1.163: Keyspan - (without firmware) converter detected [ 82.973716][ T7] usb 1-1: USB disconnect, device number 5 [ 82.976306][ T7] keyspan 1-1:1.163: device disconnected [ 83.010248][ T5273] vhci_hcd: connection reset by peer [ 83.015002][ T39] vhci_hcd: stop threads [ 83.015862][ T39] vhci_hcd: release socket [ 83.016904][ T39] vhci_hcd: disconnect device [ 83.081465][ T5289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.085747][ T5289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.777543][ T5308] device syzkaller1 entered promiscuous mode [ 84.245391][ T27] audit: type=1326 audit(84.230:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.2.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff923792a8 code=0x7ffc0000 [ 84.251847][ T27] audit: type=1326 audit(84.230:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.2.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff923792a8 code=0x7ffc0000 [ 84.267429][ T27] audit: type=1326 audit(84.230:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.2.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff923792a8 code=0x7ffc0000 [ 84.303265][ T27] audit: type=1326 audit(84.230:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.2.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff923792a8 code=0x7ffc0000 [ 84.343521][ T27] audit: type=1326 audit(84.230:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.2.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff923792a8 code=0x7ffc0000 [ 84.347885][ T27] audit: type=1326 audit(84.230:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.2.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff923792a8 code=0x7ffc0000 [ 84.380139][ T5336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.429907][ T5336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.431872][ T27] audit: type=1326 audit(84.230:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.2.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff923792a8 code=0x7ffc0000 [ 84.440964][ T27] audit: type=1326 audit(84.230:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.2.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff923792a8 code=0x7ffc0000 [ 84.448509][ T27] audit: type=1326 audit(84.230:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.2.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff923792a8 code=0x7ffc0000 [ 84.453793][ T27] audit: type=1326 audit(84.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5329 comm="syz.2.337" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff923792a8 code=0x7ffc0000 [ 84.907315][ T5353] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 84.908643][ T5353] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 84.913823][ T5353] vhci_hcd vhci_hcd.0: Device attached [ 85.130170][ T5362] device syzkaller1 entered promiscuous mode [ 85.174540][ T5364] FAULT_INJECTION: forcing a failure. [ 85.174540][ T5364] name fail_futex, interval 1, probability 0, space 0, times 1 [ 85.176883][ T5364] CPU: 0 PID: 5364 Comm: syz.4.344 Not tainted syzkaller #0 [ 85.178152][ T5364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 85.179975][ T5364] Call trace: [ 85.180559][ T5364] dump_backtrace+0x1c4/0x1f0 [ 85.181400][ T5364] show_stack+0x2c/0x3c [ 85.182165][ T5364] __dump_stack+0x30/0x40 [ 85.183051][ T5364] dump_stack_lvl+0xf4/0x15c [ 85.183941][ T5364] dump_stack+0x1c/0x5c [ 85.184724][ T5364] should_fail_ex+0x3cc/0x524 [ 85.185579][ T5364] should_fail+0x14/0x24 [ 85.186375][ T5364] get_futex_key+0x904/0xfb0 [ 85.187268][ T5364] futex_wake+0x10c/0x458 [ 85.188080][ T5364] do_futex+0x2c4/0x340 [ 85.188868][ T5364] __arm64_sys_futex+0x390/0x414 [ 85.189782][ T5364] invoke_syscall+0x98/0x290 [ 85.190632][ T5364] el0_svc_common+0x13c/0x258 [ 85.191494][ T5364] do_el0_svc+0x5c/0x134 [ 85.192288][ T5364] el0_svc+0x58/0x128 [ 85.193017][ T5364] el0t_64_sync_handler+0x84/0xf0 [ 85.194083][ T5364] el0t_64_sync+0x18c/0x190 [ 85.201552][ T4378] usb 2-1: new low-speed USB device number 2 using vhci_hcd [ 85.234792][ T5366] binder: 5365:5366 ioctl c0306201 0 returned -14 [ 85.237878][ T5366] binder: 5365:5366 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 85.243753][ T5366] binder: 5366 RLIMIT_NICE not set [ 85.292621][ T5367] binder: 5365:5367 ioctl c0306201 0 returned -14 [ 85.296459][ T5367] binder: 5365:5367 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 85.311825][ T5367] binder: 5367 RLIMIT_NICE not set [ 85.335637][ T5373] netlink: 16 bytes leftover after parsing attributes in process `syz.4.346'. [ 85.342055][ T5369] device syzkaller0 entered promiscuous mode [ 85.368951][ T4379] vhci_hcd: vhci_device speed not set [ 85.690395][ T5354] vhci_hcd: connection reset by peer [ 85.707203][ T5349] vhci_hcd: stop threads [ 85.708027][ T5349] vhci_hcd: release socket [ 86.018174][ T5349] vhci_hcd: disconnect device [ 86.389200][ T5374] binder: 5365:5374 ioctl 40189206 0 returned -22 [ 86.640619][ T5388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.642280][ T5388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.722841][ T5396] device syzkaller1 entered promiscuous mode [ 86.752532][ T5399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.754245][ T5399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.770971][ T5401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.773288][ T5401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.877268][ T5405] device netdevsim0 entered promiscuous mode [ 87.369370][ T5428] Illegal XDP return value 4294967294 on prog (id 3) dev N/A, expect packet loss! [ 87.389941][ T5430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.373'. [ 87.483151][ T5436] device syzkaller1 entered promiscuous mode [ 87.549116][ T5439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.554580][ T5439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.698515][ T5444] FAULT_INJECTION: forcing a failure. [ 87.698515][ T5444] name failslab, interval 1, probability 0, space 0, times 0 [ 87.705677][ T5444] CPU: 0 PID: 5444 Comm: syz.4.379 Not tainted syzkaller #0 [ 87.707079][ T5444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 87.709097][ T5444] Call trace: [ 87.709755][ T5444] dump_backtrace+0x1c4/0x1f0 [ 87.710655][ T5444] show_stack+0x2c/0x3c [ 87.711424][ T5444] __dump_stack+0x30/0x40 [ 87.712245][ T5444] dump_stack_lvl+0xf4/0x15c [ 87.713145][ T5444] dump_stack+0x1c/0x5c [ 87.713939][ T5444] should_fail_ex+0x3cc/0x524 [ 87.714833][ T5444] __should_failslab+0xc0/0x11c [ 87.715787][ T5444] should_failslab+0x10/0x28 [ 87.716680][ T5444] kmem_cache_alloc+0x88/0x310 [ 87.717601][ T5444] getname_flags+0xb8/0x458 [ 87.718454][ T5444] getname+0x28/0x38 [ 87.719213][ T5444] do_sys_openat2+0xdc/0x3fc [ 87.720110][ T5444] __arm64_sys_openat+0x11c/0x150 [ 87.721041][ T5444] invoke_syscall+0x98/0x290 [ 87.721894][ T5444] el0_svc_common+0x13c/0x258 [ 87.722803][ T5444] do_el0_svc+0x5c/0x134 [ 87.723624][ T5444] el0_svc+0x58/0x128 [ 87.724386][ T5444] el0t_64_sync_handler+0x84/0xf0 [ 87.725328][ T5444] el0t_64_sync+0x18c/0x190 [ 87.768944][ T4377] vhci_hcd: vhci_device speed not set [ 88.353031][ T5450] device syzkaller0 entered promiscuous mode [ 88.376421][ T5456] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 88.377630][ T5456] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.382591][ T5456] vhci_hcd vhci_hcd.0: Device attached [ 88.648950][ T4381] usb 8-1: new low-speed USB device number 4 using vhci_hcd [ 88.656821][ T5457] vhci_hcd: connection reset by peer [ 88.657901][ T456] vhci_hcd: stop threads [ 88.658731][ T456] vhci_hcd: release socket [ 88.659735][ T456] vhci_hcd: disconnect device [ 88.750337][ T5470] netlink: 16 bytes leftover after parsing attributes in process `syz.0.386'. [ 88.888054][ T5476] device syzkaller1 entered promiscuous mode [ 88.951668][ T5482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.957307][ T5482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.958738][ T5481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.965270][ T5481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.235315][ T5486] device syzkaller0 entered promiscuous mode [ 89.393924][ T5491] syz.4.396: attempt to access beyond end of device [ 89.393924][ T5491] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 89.487348][ T5496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 89.601730][ T5499] FAULT_INJECTION: forcing a failure. [ 89.601730][ T5499] name failslab, interval 1, probability 0, space 0, times 0 [ 89.624193][ T5499] CPU: 0 PID: 5499 Comm: syz.1.400 Not tainted syzkaller #0 [ 89.625612][ T5499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 89.627488][ T5499] Call trace: [ 89.628044][ T5499] dump_backtrace+0x1c4/0x1f0 [ 89.628855][ T5499] show_stack+0x2c/0x3c [ 89.629593][ T5499] __dump_stack+0x30/0x40 [ 89.630383][ T5499] dump_stack_lvl+0xf4/0x15c [ 89.631219][ T5499] dump_stack+0x1c/0x5c [ 89.631962][ T5499] should_fail_ex+0x3cc/0x524 [ 89.632815][ T5499] __should_failslab+0xc0/0x11c [ 89.633707][ T5499] should_failslab+0x10/0x28 [ 89.634510][ T5499] kmem_cache_alloc+0x88/0x310 [ 89.635359][ T5499] getname_flags+0xb8/0x458 [ 89.636187][ T5499] getname+0x28/0x38 [ 89.636885][ T5499] do_sys_openat2+0xdc/0x3fc [ 89.637716][ T5499] __arm64_sys_openat+0x11c/0x150 [ 89.638621][ T5499] invoke_syscall+0x98/0x290 [ 89.639488][ T5499] el0_svc_common+0x13c/0x258 [ 89.640350][ T5499] do_el0_svc+0x5c/0x134 [ 89.641126][ T5499] el0_svc+0x58/0x128 [ 89.641845][ T5499] el0t_64_sync_handler+0x84/0xf0 [ 89.642793][ T5499] el0t_64_sync+0x18c/0x190 [ 89.746916][ T5506] netlink: 64 bytes leftover after parsing attributes in process `syz.2.403'. [ 89.752760][ T5506] device syzkaller1 entered promiscuous mode [ 90.092263][ T5516] tipc: Started in network mode [ 90.093223][ T5516] tipc: Node identity de5abdedd578, cluster identity 4711 [ 90.094570][ T5516] tipc: Enabled bearer , priority 0 [ 90.095890][ T5517] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 90.097178][ T5517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.098764][ T5517] vhci_hcd vhci_hcd.0: Device attached [ 90.125493][ T5516] tipc: Resetting bearer [ 90.181968][ T5515] tipc: Disabling bearer [ 90.328979][ T4378] vhci_hcd: vhci_device speed not set [ 90.350045][ T5527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.358164][ T5527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.381181][ T4429] usb 6-1: new low-speed USB device number 6 using vhci_hcd [ 90.458793][ T5532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 90.465780][ T5531] syz.1.411: attempt to access beyond end of device [ 90.465780][ T5531] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 90.596994][ T5537] FAULT_INJECTION: forcing a failure. [ 90.596994][ T5537] name failslab, interval 1, probability 0, space 0, times 0 [ 90.615398][ T5537] CPU: 0 PID: 5537 Comm: syz.1.414 Not tainted syzkaller #0 [ 90.616676][ T5537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 90.618467][ T5537] Call trace: [ 90.619052][ T5537] dump_backtrace+0x1c4/0x1f0 [ 90.619911][ T5537] show_stack+0x2c/0x3c [ 90.620686][ T5537] __dump_stack+0x30/0x40 [ 90.621494][ T5537] dump_stack_lvl+0xf4/0x15c [ 90.622333][ T5537] dump_stack+0x1c/0x5c [ 90.623077][ T5537] should_fail_ex+0x3cc/0x524 [ 90.623934][ T5537] __should_failslab+0xc0/0x11c [ 90.624840][ T5537] should_failslab+0x10/0x28 [ 90.625701][ T5537] kmem_cache_alloc+0x88/0x310 [ 90.626606][ T5537] getname_flags+0xb8/0x458 [ 90.627461][ T5537] getname+0x28/0x38 [ 90.628210][ T5537] do_sys_openat2+0xdc/0x3fc [ 90.629066][ T5537] __arm64_sys_openat+0x11c/0x150 [ 90.629973][ T5537] invoke_syscall+0x98/0x290 [ 90.630779][ T5537] el0_svc_common+0x13c/0x258 [ 90.631598][ T5537] do_el0_svc+0x5c/0x134 [ 90.632382][ T5537] el0_svc+0x58/0x128 [ 90.633113][ T5537] el0t_64_sync_handler+0x84/0xf0 [ 90.634066][ T5537] el0t_64_sync+0x18c/0x190 [ 90.646739][ T5539] netlink: 64 bytes leftover after parsing attributes in process `syz.0.415'. [ 90.816307][ T5518] vhci_hcd: connection reset by peer [ 91.511721][ T4376] vhci_hcd: stop threads [ 91.512524][ T4376] vhci_hcd: release socket [ 91.513411][ T4376] vhci_hcd: disconnect device [ 91.705579][ T5553] tipc: Enabled bearer , priority 0 [ 91.712301][ T5553] tipc: Resetting bearer [ 91.745374][ T5551] tipc: Disabling bearer [ 91.757886][ T5558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 91.842259][ T5562] syz.0.424: attempt to access beyond end of device [ 91.842259][ T5562] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 91.904391][ T5570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.917074][ T5570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.926942][ T5573] FAULT_INJECTION: forcing a failure. [ 91.926942][ T5573] name failslab, interval 1, probability 0, space 0, times 0 [ 91.929929][ T5573] CPU: 0 PID: 5573 Comm: syz.4.428 Not tainted syzkaller #0 [ 91.931235][ T5573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 91.933041][ T5573] Call trace: [ 91.933641][ T5573] dump_backtrace+0x1c4/0x1f0 [ 91.934464][ T5573] show_stack+0x2c/0x3c [ 91.935168][ T5573] __dump_stack+0x30/0x40 [ 91.935947][ T5573] dump_stack_lvl+0xf4/0x15c [ 91.936809][ T5573] dump_stack+0x1c/0x5c [ 91.937575][ T5573] should_fail_ex+0x3cc/0x524 [ 91.938420][ T5573] __should_failslab+0xc0/0x11c [ 91.939312][ T5573] should_failslab+0x10/0x28 [ 91.940184][ T5573] kmem_cache_alloc+0x88/0x310 [ 91.941096][ T5573] getname_flags+0xb8/0x458 [ 91.942050][ T5573] getname+0x28/0x38 [ 91.942834][ T5573] do_sys_openat2+0xdc/0x3fc [ 91.943664][ T5573] __arm64_sys_openat+0x11c/0x150 [ 91.944558][ T5573] invoke_syscall+0x98/0x290 [ 91.945547][ T5573] el0_svc_common+0x13c/0x258 [ 91.946554][ T5573] do_el0_svc+0x5c/0x134 [ 91.947427][ T5573] el0_svc+0x58/0x128 [ 91.948174][ T5573] el0t_64_sync_handler+0x84/0xf0 [ 91.949149][ T5573] el0t_64_sync+0x18c/0x190 [ 91.980387][ T5575] netlink: 64 bytes leftover after parsing attributes in process `syz.1.431'. [ 91.986416][ T5575] device syzkaller1 entered promiscuous mode [ 92.144556][ T5586] tipc: Started in network mode [ 92.147840][ T5586] tipc: Node identity 1ed1f100cef4, cluster identity 4711 [ 92.150561][ T5586] tipc: Enabled bearer , priority 0 [ 92.156857][ T5586] tipc: Resetting bearer [ 92.201971][ T5585] tipc: Disabling bearer [ 92.366583][ T5595] syz.1.439: attempt to access beyond end of device [ 92.366583][ T5595] loop1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 93.558296][ T5604] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 93.559593][ T5604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.563537][ T5604] vhci_hcd vhci_hcd.0: Device attached [ 93.606250][ T5612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.617022][ T5612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.659358][ T5605] vhci_hcd: connection closed [ 93.662066][ T9] vhci_hcd: stop threads [ 93.663773][ T9] vhci_hcd: release socket [ 93.664611][ T9] vhci_hcd: disconnect device [ 93.738316][ T5617] netlink: 88 bytes leftover after parsing attributes in process `syz.0.447'. [ 93.748188][ T5617] device syzkaller1 entered promiscuous mode [ 93.768851][ T4381] vhci_hcd: vhci_device speed not set [ 93.835933][ T5619] tipc: Enabled bearer , priority 0 [ 93.846378][ T5619] tipc: Resetting bearer [ 93.889920][ T5618] tipc: Disabling bearer [ 94.067955][ T5629] FAULT_INJECTION: forcing a failure. [ 94.067955][ T5629] name failslab, interval 1, probability 0, space 0, times 0 [ 94.076741][ T5630] syz.0.452: attempt to access beyond end of device [ 94.076741][ T5630] loop0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 94.079015][ T5629] CPU: 0 PID: 5629 Comm: syz.3.453 Not tainted syzkaller #0 [ 94.080310][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.082226][ T5629] Call trace: [ 94.082865][ T5629] dump_backtrace+0x1c4/0x1f0 [ 94.083795][ T5629] show_stack+0x2c/0x3c [ 94.084597][ T5629] __dump_stack+0x30/0x40 [ 94.085479][ T5629] dump_stack_lvl+0xf4/0x15c [ 94.086344][ T5629] dump_stack+0x1c/0x5c [ 94.087130][ T5629] should_fail_ex+0x3cc/0x524 [ 94.088028][ T5629] __should_failslab+0xc0/0x11c [ 94.088925][ T5629] should_failslab+0x10/0x28 [ 94.089754][ T5629] kmem_cache_alloc+0x88/0x310 [ 94.090633][ T5629] getname_flags+0xb8/0x458 [ 94.091488][ T5629] getname+0x28/0x38 [ 94.092262][ T5629] do_sys_openat2+0xdc/0x3fc [ 94.093129][ T5629] __arm64_sys_openat+0x11c/0x150 [ 94.094031][ T5629] invoke_syscall+0x98/0x290 [ 94.094892][ T5629] el0_svc_common+0x13c/0x258 [ 94.095765][ T5629] do_el0_svc+0x5c/0x134 [ 94.096588][ T5629] el0_svc+0x58/0x128 [ 94.097321][ T5629] el0t_64_sync_handler+0x84/0xf0 [ 94.098251][ T5629] el0t_64_sync+0x18c/0x190 [ 94.184349][ T52] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 94.186080][ T52] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 94.382660][ T5647] netlink: 88 bytes leftover after parsing attributes in process `syz.1.460'. [ 94.389970][ T5647] device syzkaller1 entered promiscuous mode [ 94.618394][ T5650] process 'syz.2.463' launched '/dev/fd/4' with NULL argv: empty string added [ 94.628605][ T5650] FAULT_INJECTION: forcing a failure. [ 94.628605][ T5650] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 94.644248][ T5650] CPU: 1 PID: 5650 Comm: syz.2.463 Not tainted syzkaller #0 [ 94.645712][ T5650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.647614][ T5650] Call trace: [ 94.648252][ T5650] dump_backtrace+0x1c4/0x1f0 [ 94.649141][ T5650] show_stack+0x2c/0x3c [ 94.649926][ T5650] __dump_stack+0x30/0x40 [ 94.650761][ T5650] dump_stack_lvl+0xf4/0x15c [ 94.651631][ T5650] dump_stack+0x1c/0x5c [ 94.652430][ T5650] should_fail_ex+0x3cc/0x524 [ 94.653302][ T5650] should_fail_alloc_page+0x74/0xb8 [ 94.654277][ T5650] prepare_alloc_pages+0x1b8/0x4f0 [ 94.655223][ T5650] __alloc_pages+0x134/0x544 [ 94.656065][ T5650] __folio_alloc+0x1c/0x44 [ 94.656856][ T5650] vma_alloc_folio+0x37c/0x8ac [ 94.657708][ T5650] alloc_zeroed_user_highpage_movable+0x78/0x8c [ 94.658843][ T5650] handle_mm_fault+0x1788/0x3018 [ 94.659723][ T5650] __get_user_pages+0x340/0x770 [ 94.660556][ T5650] __get_user_pages_remote+0x188/0x684 [ 94.661521][ T5650] get_user_pages_remote+0x80/0xbc [ 94.662478][ T5650] get_arg_page+0x18c/0x3b4 [ 94.663277][ T5650] copy_string_kernel+0x15c/0x254 [ 94.664260][ T5650] do_execveat_common+0x508/0x7fc [ 94.665262][ T5650] __arm64_sys_execveat+0xd8/0xf4 [ 94.666169][ T5650] invoke_syscall+0x98/0x290 [ 94.667010][ T5650] el0_svc_common+0x13c/0x258 [ 94.667875][ T5650] do_el0_svc+0x5c/0x134 [ 94.668673][ T5650] el0_svc+0x58/0x128 [ 94.669522][ T5650] el0t_64_sync_handler+0x84/0xf0 [ 94.670564][ T5650] el0t_64_sync+0x18c/0x190 [ 94.728149][ T5655] tipc: Enabling of bearer rejected, failed to enable media [ 94.896319][ T5664] FAULT_INJECTION: forcing a failure. [ 94.896319][ T5664] name failslab, interval 1, probability 0, space 0, times 0 [ 94.899498][ T5663] syz.2.465: attempt to access beyond end of device [ 94.899498][ T5663] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 94.903182][ T5664] CPU: 1 PID: 5664 Comm: syz.1.466 Not tainted syzkaller #0 [ 94.904633][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.906553][ T5664] Call trace: [ 94.907182][ T5664] dump_backtrace+0x1c4/0x1f0 [ 94.908093][ T5664] show_stack+0x2c/0x3c [ 94.908920][ T5664] __dump_stack+0x30/0x40 [ 94.909722][ T5664] dump_stack_lvl+0xf4/0x15c [ 94.910692][ T5664] dump_stack+0x1c/0x5c [ 94.911583][ T5664] should_fail_ex+0x3cc/0x524 [ 94.912438][ T5664] __should_failslab+0xc0/0x11c [ 94.913382][ T5664] should_failslab+0x10/0x28 [ 94.914356][ T5664] kmem_cache_alloc+0x88/0x310 [ 94.915373][ T5664] getname_flags+0xb8/0x458 [ 94.916348][ T5664] getname+0x28/0x38 [ 94.917133][ T5664] do_sys_openat2+0xdc/0x3fc [ 94.918059][ T5664] __arm64_sys_openat+0x11c/0x150 [ 94.919073][ T5664] invoke_syscall+0x98/0x290 [ 94.919969][ T5664] el0_svc_common+0x13c/0x258 [ 94.920885][ T5664] do_el0_svc+0x5c/0x134 [ 94.921697][ T5664] el0_svc+0x58/0x128 [ 94.922478][ T5664] el0t_64_sync_handler+0x84/0xf0 [ 94.923438][ T5664] el0t_64_sync+0x18c/0x190 [ 95.021839][ T52] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 95.023608][ T52] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 95.132275][ T5675] netlink: 88 bytes leftover after parsing attributes in process `syz.0.472'. [ 95.134546][ T5675] device syzkaller1 entered promiscuous mode [ 95.188908][ T5678] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 95.190175][ T5678] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 95.191654][ T5678] vhci_hcd vhci_hcd.0: Device attached [ 95.424528][ T5692] syz.2.477: attempt to access beyond end of device [ 95.424528][ T5692] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 95.458940][ T4380] usb 8-1: new low-speed USB device number 5 using vhci_hcd [ 95.820961][ T4429] vhci_hcd: vhci_device speed not set [ 96.310992][ T5679] vhci_hcd: connection reset by peer [ 96.314174][ T4942] vhci_hcd: stop threads [ 96.314953][ T4942] vhci_hcd: release socket [ 96.315779][ T4942] vhci_hcd: disconnect device [ 96.558482][ T5694] tipc: Enabled bearer , priority 0 [ 96.568366][ T5694] tipc: Resetting bearer [ 96.610918][ T5691] tipc: Disabling bearer [ 96.725174][ T52] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 96.726855][ T52] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 96.783883][ T5708] FAULT_INJECTION: forcing a failure. [ 96.783883][ T5708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.786240][ T5708] CPU: 1 PID: 5708 Comm: syz.0.483 Not tainted syzkaller #0 [ 96.787742][ T5708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 96.789721][ T5708] Call trace: [ 96.790379][ T5708] dump_backtrace+0x1c4/0x1f0 [ 96.791265][ T5708] show_stack+0x2c/0x3c [ 96.792043][ T5708] __dump_stack+0x30/0x40 [ 96.792813][ T5708] dump_stack_lvl+0xf4/0x15c [ 96.793646][ T5708] dump_stack+0x1c/0x5c [ 96.794390][ T5708] should_fail_ex+0x3cc/0x524 [ 96.795261][ T5708] should_fail+0x14/0x24 [ 96.796013][ T5708] should_fail_usercopy+0x20/0x30 [ 96.796894][ T5708] strncpy_from_user+0x48/0x59c [ 96.797741][ T5708] getname_flags+0xec/0x458 [ 96.798519][ T5708] getname+0x28/0x38 [ 96.799199][ T5708] do_sys_openat2+0xdc/0x3fc [ 96.799987][ T5708] __arm64_sys_openat+0x11c/0x150 [ 96.800863][ T5708] invoke_syscall+0x98/0x290 [ 96.801678][ T5708] el0_svc_common+0x13c/0x258 [ 96.802509][ T5708] do_el0_svc+0x5c/0x134 [ 96.803240][ T5708] el0_svc+0x58/0x128 [ 96.803950][ T5708] el0t_64_sync_handler+0x84/0xf0 [ 96.804855][ T5708] el0t_64_sync+0x18c/0x190 [ 96.889999][ T5720] netlink: 88 bytes leftover after parsing attributes in process `syz.2.490'. [ 96.894456][ T5720] device syzkaller1 entered promiscuous mode [ 96.937329][ T5724] tipc: Enabled bearer , priority 0 [ 96.942902][ T5724] tipc: Resetting bearer [ 96.988158][ T5726] syz.2.492: attempt to access beyond end of device [ 96.988158][ T5726] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 96.989693][ T5723] tipc: Disabling bearer [ 97.031671][ T52] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 97.033404][ T52] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 97.128994][ T4429] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 97.334847][ T5739] FAULT_INJECTION: forcing a failure. [ 97.334847][ T5739] name failslab, interval 1, probability 0, space 0, times 0 [ 97.343026][ T5739] CPU: 1 PID: 5739 Comm: syz.3.497 Not tainted syzkaller #0 [ 97.344306][ T5739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 97.346339][ T5739] Call trace: [ 97.346960][ T5739] dump_backtrace+0x1c4/0x1f0 [ 97.347850][ T5739] show_stack+0x2c/0x3c [ 97.348635][ T5739] __dump_stack+0x30/0x40 [ 97.349554][ T5739] dump_stack_lvl+0xf4/0x15c [ 97.350389][ T5739] dump_stack+0x1c/0x5c [ 97.351117][ T5739] should_fail_ex+0x3cc/0x524 [ 97.351954][ T5739] __should_failslab+0xc0/0x11c [ 97.352858][ T5739] should_failslab+0x10/0x28 [ 97.353694][ T5739] kmem_cache_alloc+0x88/0x310 [ 97.354581][ T5739] getname_flags+0xb8/0x458 [ 97.355403][ T5739] getname+0x28/0x38 [ 97.356117][ T5739] do_sys_openat2+0xdc/0x3fc [ 97.356907][ T5739] __arm64_sys_openat+0x11c/0x150 [ 97.357801][ T5739] invoke_syscall+0x98/0x290 [ 97.358634][ T5739] el0_svc_common+0x13c/0x258 [ 97.359473][ T5739] do_el0_svc+0x5c/0x134 [ 97.360189][ T5739] el0_svc+0x58/0x128 [ 97.360881][ T5739] el0t_64_sync_handler+0x84/0xf0 [ 97.361733][ T5739] el0t_64_sync+0x18c/0x190 [ 97.781014][ T4429] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.798614][ T5750] netlink: 88 bytes leftover after parsing attributes in process `syz.3.502'. [ 97.812875][ T5750] device syzkaller1 entered promiscuous mode [ 97.966790][ T4429] usb 1-1: config 1 has an invalid interface number: 163 but max is 0 [ 97.968344][ T4429] usb 1-1: config 1 has no interface number 0 [ 97.969807][ T4429] usb 1-1: config 1 interface 163 has no altsetting 0 [ 97.972553][ T4429] usb 1-1: New USB device found, idVendor=06cd, idProduct=0103, bcdDevice=3c.0e [ 97.974118][ T4429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.975544][ T4429] usb 1-1: Product: syz [ 97.976297][ T4429] usb 1-1: Manufacturer: syz [ 97.977132][ T4429] usb 1-1: SerialNumber: syz [ 98.035244][ T5754] syz.4.503: attempt to access beyond end of device [ 98.035244][ T5754] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 98.184373][ T4429] keyspan 1-1:1.163: Keyspan - (without firmware) converter detected [ 98.186574][ T4429] usb 1-1: USB disconnect, device number 6 [ 98.187672][ T4429] keyspan 1-1:1.163: device disconnected [ 98.247466][ T5757] tipc: Enabled bearer , priority 0 [ 98.255991][ T5759] FAULT_INJECTION: forcing a failure. [ 98.255991][ T5759] name fail_futex, interval 1, probability 0, space 0, times 0 [ 98.261984][ T5757] tipc: Resetting bearer [ 98.267157][ T5759] CPU: 0 PID: 5759 Comm: syz.4.505 Not tainted syzkaller #0 [ 98.268554][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 98.270413][ T5759] Call trace: [ 98.271042][ T5759] dump_backtrace+0x1c4/0x1f0 [ 98.271931][ T5759] show_stack+0x2c/0x3c [ 98.272710][ T5759] __dump_stack+0x30/0x40 [ 98.273531][ T5759] dump_stack_lvl+0xf4/0x15c [ 98.274411][ T5759] dump_stack+0x1c/0x5c [ 98.275208][ T5759] should_fail_ex+0x3cc/0x524 [ 98.276091][ T5759] should_fail+0x14/0x24 [ 98.277000][ T5759] get_futex_key+0x904/0xfb0 [ 98.277997][ T5759] futex_wake+0x10c/0x458 [ 98.278870][ T5759] do_futex+0x2c4/0x340 [ 98.279707][ T5759] __arm64_sys_futex+0x390/0x414 [ 98.280745][ T5759] invoke_syscall+0x98/0x290 [ 98.281663][ T5759] el0_svc_common+0x13c/0x258 [ 98.282566][ T5759] do_el0_svc+0x5c/0x134 [ 98.283468][ T5759] el0_svc+0x58/0x128 [ 98.284297][ T5759] el0t_64_sync_handler+0x84/0xf0 [ 98.285334][ T5759] el0t_64_sync+0x18c/0x190 [ 98.317821][ T5759] binder: 5758:5759 tried to acquire reference to desc 0, got 1 instead [ 98.324137][ T5759] binder: 5758:5759 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 98.332480][ T5756] tipc: Disabling bearer [ 98.669889][ T5759] binder: 5759 RLIMIT_NICE not set [ 98.671057][ T5759] binder: undelivered transaction 5, fd fixups failed [ 98.672315][ T5759] binder: 5758:5759 async transaction 5 fd fixups failed 29201/-12, line 4684 [ 98.673818][ T5759] binder: undelivered transaction 6, fd fixups failed [ 98.674946][ T5759] binder: 5758:5759 async transaction 6 fd fixups failed 29201/-12, line 4684 [ 98.730422][ T24] binder: undelivered TRANSACTION_COMPLETE [ 98.731599][ T24] binder: undelivered TRANSACTION_COMPLETE [ 98.745736][ T5764] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 98.746889][ T5764] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.748336][ T5764] vhci_hcd vhci_hcd.0: Device attached [ 98.806470][ T5771] FAULT_INJECTION: forcing a failure. [ 98.806470][ T5771] name failslab, interval 1, probability 0, space 0, times 0 [ 98.817909][ T5771] CPU: 1 PID: 5771 Comm: syz.4.509 Not tainted syzkaller #0 [ 98.819234][ T5771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 98.821004][ T5771] Call trace: [ 98.821618][ T5771] dump_backtrace+0x1c4/0x1f0 [ 98.822519][ T5771] show_stack+0x2c/0x3c [ 98.823349][ T5771] __dump_stack+0x30/0x40 [ 98.824134][ T5771] dump_stack_lvl+0xf4/0x15c [ 98.824961][ T5771] dump_stack+0x1c/0x5c [ 98.825696][ T5771] should_fail_ex+0x3cc/0x524 [ 98.826503][ T5771] __should_failslab+0xc0/0x11c [ 98.827381][ T5771] should_failslab+0x10/0x28 [ 98.828196][ T5771] kmem_cache_alloc+0x88/0x310 [ 98.829040][ T5771] getname_flags+0xb8/0x458 [ 98.829878][ T5771] getname+0x28/0x38 [ 98.830599][ T5771] do_sys_openat2+0xdc/0x3fc [ 98.831438][ T5771] __arm64_sys_openat+0x11c/0x150 [ 98.832346][ T5771] invoke_syscall+0x98/0x290 [ 98.833140][ T5771] el0_svc_common+0x13c/0x258 [ 98.833965][ T5771] do_el0_svc+0x5c/0x134 [ 98.834762][ T5771] el0_svc+0x58/0x128 [ 98.835510][ T5771] el0t_64_sync_handler+0x84/0xf0 [ 98.836447][ T5771] el0t_64_sync+0x18c/0x190 [ 99.174223][ T5765] vhci_hcd: connection closed [ 99.447924][ T24] usb 6-1: new low-speed USB device number 7 using vhci_hcd [ 99.450164][ T5769] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 99.524519][ T4465] vhci_hcd: stop threads [ 99.525334][ T4465] vhci_hcd: release socket [ 99.526197][ T4465] vhci_hcd: disconnect device [ 99.834271][ T5783] netlink: 88 bytes leftover after parsing attributes in process `syz.0.514'. [ 99.836582][ T5783] device syzkaller1 entered promiscuous mode [ 99.839716][ T79] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 99.841305][ T79] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 99.936024][ T5787] syz.3.515: attempt to access beyond end of device [ 99.936024][ T5787] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 99.973940][ T5790] tipc: Enabled bearer , priority 0 [ 99.976552][ T5790] tipc: Resetting bearer [ 100.029832][ T5789] tipc: Disabling bearer [ 100.243720][ T5807] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 100.578971][ T4380] vhci_hcd: vhci_device speed not set [ 100.701871][ T79] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 100.703826][ T79] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 100.752897][ T5816] FAULT_INJECTION: forcing a failure. [ 100.752897][ T5816] name failslab, interval 1, probability 0, space 0, times 0 [ 100.755063][ T5816] CPU: 1 PID: 5816 Comm: syz.0.527 Not tainted syzkaller #0 [ 100.756390][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 100.758159][ T5816] Call trace: [ 100.758791][ T5816] dump_backtrace+0x1c4/0x1f0 [ 100.759623][ T5816] show_stack+0x2c/0x3c [ 100.760342][ T5816] __dump_stack+0x30/0x40 [ 100.761115][ T5816] dump_stack_lvl+0xf4/0x15c [ 100.761941][ T5816] dump_stack+0x1c/0x5c [ 100.762703][ T5816] should_fail_ex+0x3cc/0x524 [ 100.763535][ T5816] __should_failslab+0xc0/0x11c [ 100.764397][ T5816] should_failslab+0x10/0x28 [ 100.765220][ T5816] kmem_cache_alloc+0x88/0x310 [ 100.766030][ T5816] getname_flags+0xb8/0x458 [ 100.766811][ T5816] getname+0x28/0x38 [ 100.767496][ T5816] do_sys_openat2+0xdc/0x3fc [ 100.768334][ T5816] __arm64_sys_openat+0x11c/0x150 [ 100.769274][ T5816] invoke_syscall+0x98/0x290 [ 100.770128][ T5816] el0_svc_common+0x13c/0x258 [ 100.770950][ T5816] do_el0_svc+0x5c/0x134 [ 100.771737][ T5816] el0_svc+0x58/0x128 [ 100.772498][ T5816] el0t_64_sync_handler+0x84/0xf0 [ 100.773445][ T5816] el0t_64_sync+0x18c/0x190 [ 100.823761][ T5818] netlink: 76 bytes leftover after parsing attributes in process `syz.4.528'. [ 100.833153][ T5818] device syzkaller1 entered promiscuous mode [ 100.926295][ T5822] tipc: Enabled bearer , priority 0 [ 100.946071][ T5822] tipc: Resetting bearer [ 101.002216][ T5821] tipc: Disabling bearer [ 101.024713][ T5825] syz.4.531: attempt to access beyond end of device [ 101.024713][ T5825] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 102.366649][ T79] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 102.368406][ T79] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 102.471637][ T5838] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 102.472893][ T5838] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.474612][ T5838] vhci_hcd vhci_hcd.0: Device attached [ 102.576879][ T5851] netlink: 76 bytes leftover after parsing attributes in process `syz.0.541'. [ 102.582255][ T5840] vhci_hcd: connection closed [ 102.584197][ T1613] vhci_hcd: stop threads [ 102.585867][ T1613] vhci_hcd: release socket [ 102.586866][ T1613] vhci_hcd: disconnect device [ 102.597626][ T5851] device syzkaller1 entered promiscuous mode [ 102.645845][ T5853] netlink: 56 bytes leftover after parsing attributes in process `syz.1.543'. [ 102.718234][ T5858] tipc: Enabled bearer , priority 0 [ 102.730650][ T5858] tipc: Resetting bearer [ 102.779711][ T5857] tipc: Disabling bearer [ 102.858759][ T5864] device syzkaller0 entered promiscuous mode [ 103.105049][ T79] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 103.106992][ T79] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 103.361283][ T5883] netlink: 76 bytes leftover after parsing attributes in process `syz.1.556'. [ 103.367042][ T5883] device syzkaller1 entered promiscuous mode [ 103.438062][ T5885] tipc: Enabled bearer , priority 0 [ 103.442272][ T5885] tipc: Resetting bearer [ 103.495562][ T5884] tipc: Disabling bearer [ 103.624466][ T5890] Zero length message leads to an empty skb [ 103.821627][ T5902] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 103.822922][ T5902] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 103.825134][ T5902] vhci_hcd vhci_hcd.0: Device attached [ 104.090606][ T4342] usb 4-1: new low-speed USB device number 2 using vhci_hcd [ 104.377748][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.390107][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.454813][ T4340] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.457813][ T4340] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.460566][ T4340] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.462429][ T4340] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.464516][ T4340] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 104.466126][ T4340] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.569070][ T24] vhci_hcd: vhci_device speed not set [ 104.583334][ T5903] vhci_hcd: connection reset by peer [ 104.585971][ T1613] vhci_hcd: stop threads [ 104.586749][ T1613] vhci_hcd: release socket [ 104.587613][ T1613] vhci_hcd: disconnect device [ 104.627455][ T5918] chnl_net:caif_netlink_parms(): no params data found [ 104.651452][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.653002][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.654818][ T5918] device bridge_slave_0 entered promiscuous mode [ 104.658289][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.662470][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.664251][ T5918] device bridge_slave_1 entered promiscuous mode [ 104.674842][ T5918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.678228][ T5918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.688387][ T5918] team0: Port device team_slave_0 added [ 104.692799][ T5918] team0: Port device team_slave_1 added [ 104.701312][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.702754][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.707752][ T5918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.714377][ T5918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.715644][ T5918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.722283][ T5918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.771911][ T5918] device hsr_slave_0 entered promiscuous mode [ 104.816036][ T5918] device hsr_slave_1 entered promiscuous mode [ 104.858923][ T5918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.860315][ T5918] Cannot create hsr debugfs directory [ 104.917376][ T5918] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 104.961486][ T5918] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.000099][ T5918] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.058264][ T5918] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.117123][ T5932] device syzkaller0 entered promiscuous mode [ 105.125416][ T5932] tipc: Enabled bearer , priority 0 [ 105.141139][ T5932] tipc: Resetting bearer [ 105.171776][ T5918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.177558][ T5931] tipc: Resetting bearer [ 105.260776][ T5931] tipc: Disabling bearer [ 105.266744][ T5918] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.275808][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.277629][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.287221][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.292413][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.323099][ T4465] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.324506][ T4465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.350559][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.357587][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.366805][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.374931][ T4465] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.376313][ T4465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.385739][ T5951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.387336][ T5951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.391562][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.397403][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.404799][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.407541][ T5952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.410940][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.413983][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.416011][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.430745][ T5918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.432642][ T5918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.438755][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.443673][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.447205][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.452549][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.456433][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.462638][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.465668][ T5954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.488884][ T4337] Bluetooth: hci4: command 0x0409 tx timeout [ 107.049116][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 107.072168][ T5918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.107272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.108726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.151689][ T5976] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 107.152956][ T5976] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.154424][ T5976] vhci_hcd vhci_hcd.0: Device attached [ 107.418133][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 107.420605][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 107.423521][ T4498] usb 6-1: new low-speed USB device number 8 using vhci_hcd [ 107.475737][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 107.477507][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 107.480020][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 107.481847][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 107.493068][ T5918] device veth0_vlan entered promiscuous mode [ 107.508370][ T5918] device veth1_vlan entered promiscuous mode [ 107.545444][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 107.547448][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.551374][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.555844][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.564044][ T5918] device veth0_macvtap entered promiscuous mode [ 107.571442][ T5918] device veth1_macvtap entered promiscuous mode [ 107.578714][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.583024][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.585004][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.587144][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.591599][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.594040][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.595960][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.597925][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.603134][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.605779][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.608623][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.625735][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.627914][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.630258][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.632797][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.640061][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.645219][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.651683][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.655858][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.661780][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.667173][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.672573][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.676859][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.682649][ T5918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.686841][ T5918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.718136][ T5918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.724611][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.726429][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.756141][ T5918] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.761646][ T5977] vhci_hcd: connection reset by peer [ 107.764462][ T39] vhci_hcd: stop threads [ 107.765446][ T39] vhci_hcd: release socket [ 107.766314][ T39] vhci_hcd: disconnect device [ 107.768432][ T5918] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.775512][ T5918] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.780145][ T5918] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.800643][ T5996] device syzkaller0 entered promiscuous mode [ 107.815269][ T5996] tipc: Enabled bearer , priority 0 [ 107.824332][ T5996] tipc: Resetting bearer [ 107.846365][ T5995] tipc: Resetting bearer [ 107.880700][ T5995] tipc: Disabling bearer [ 107.894363][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.895857][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.897392][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 107.913467][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.915084][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.916712][ T4942] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.116027][ T6002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.128377][ T6002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.279949][ T6007] tipc: Enabled bearer , priority 0 [ 108.360464][ T6007] tipc: Disabling bearer [ 108.568898][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 108.582886][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.596'. [ 109.043989][ T6032] device syzkaller0 entered promiscuous mode [ 109.055763][ T6032] tipc: Started in network mode [ 109.058102][ T6032] tipc: Node identity 566006f5edbe, cluster identity 4711 [ 109.060726][ T6032] tipc: Enabled bearer , priority 0 [ 109.073270][ T6032] tipc: Resetting bearer [ 109.077357][ T6031] tipc: Resetting bearer [ 109.129605][ T6031] tipc: Disabling bearer [ 109.209306][ T4342] vhci_hcd: vhci_device speed not set [ 109.331466][ T6039] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 109.332764][ T6039] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.334580][ T6039] vhci_hcd vhci_hcd.0: Device attached [ 109.573595][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.576613][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.898858][ T4342] usb 4-1: device descriptor read/64, error -110 [ 110.090609][ T6040] vhci_hcd: connection closed [ 110.338904][ T4342] usb 4-1: new low-speed USB device number 3 using vhci_hcd [ 110.341197][ T6041] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 110.402298][ T9] vhci_hcd: stop threads [ 110.403079][ T9] vhci_hcd: release socket [ 110.488620][ T9] vhci_hcd: disconnect device [ 110.649284][ T4340] Bluetooth: hci4: command 0x040f tx timeout [ 110.795949][ T6067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.615'. [ 111.340974][ T6084] syz.3.624: vmalloc error: size 18446744073699066186, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 111.343814][ T6084] CPU: 0 PID: 6084 Comm: syz.3.624 Not tainted syzkaller #0 [ 111.345075][ T6084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 111.346798][ T6084] Call trace: [ 111.347362][ T6084] dump_backtrace+0x1c4/0x1f0 [ 111.348138][ T6084] show_stack+0x2c/0x3c [ 111.348837][ T6084] __dump_stack+0x30/0x40 [ 111.349635][ T6084] dump_stack_lvl+0xf4/0x15c [ 111.350482][ T6084] dump_stack+0x1c/0x5c [ 111.351239][ T6084] warn_alloc+0x214/0x324 [ 111.352014][ T6084] __vmalloc_node_range+0x118/0xe70 [ 111.352976][ T6084] vmalloc+0x9c/0xd4 [ 111.353659][ T6084] dvb_dmxdev_set_buffer_size+0xc8/0x1b0 [ 111.354621][ T6084] dvb_demux_do_ioctl+0x3fc/0x4d8 [ 111.355491][ T6084] dvb_usercopy+0x248/0x45c [ 111.356325][ T6084] dvb_demux_ioctl+0x3c/0x54 [ 111.357173][ T6084] __arm64_sys_ioctl+0x14c/0x1c8 [ 111.358069][ T6084] invoke_syscall+0x98/0x290 [ 111.358875][ T6084] el0_svc_common+0x13c/0x258 [ 111.359689][ T6084] do_el0_svc+0x5c/0x134 [ 111.360432][ T6084] el0_svc+0x58/0x128 [ 111.361129][ T6084] el0t_64_sync_handler+0x84/0xf0 [ 111.362016][ T6084] el0t_64_sync+0x18c/0x190 [ 111.372054][ T6084] Mem-Info: [ 111.372666][ T6084] active_anon:7776 inactive_anon:0 isolated_anon:0 [ 111.372666][ T6084] active_file:5079 inactive_file:2105 isolated_file:0 [ 111.372666][ T6084] unevictable:768 dirty:77 writeback:0 [ 111.372666][ T6084] slab_reclaimable:18972 slab_unreclaimable:93622 [ 111.372666][ T6084] mapped:32223 shmem:3778 pagetables:644 [ 111.372666][ T6084] sec_pagetables:0 bounce:0 [ 111.372666][ T6084] kernel_misc_reclaimable:0 [ 111.372666][ T6084] free:1443039 free_pcp:2323 free_cma:7360 [ 111.383599][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.385152][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.413215][ T6084] Node 0 active_anon:31204kB inactive_anon:0kB active_file:20316kB inactive_file:8420kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:128992kB dirty:308kB writeback:0kB shmem:15112kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8500kB pagetables:2576kB sec_pagetables:0kB all_unreclaimable? no [ 111.426451][ T6084] Node 0 DMA free:3076864kB boost:0kB min:20660kB low:25824kB high:30988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 111.433839][ T6084] lowmem_reserve[]: 0 0 3550 3550 3550 [ 111.434869][ T6084] Node 0 Normal free:2698884kB boost:0kB min:24392kB low:30488kB high:36584kB reserved_highatomic:0KB active_anon:31204kB inactive_anon:0kB active_file:20316kB inactive_file:8420kB unevictable:3072kB writepending:308kB present:5242880kB managed:3639740kB mlocked:0kB bounce:0kB free_pcp:11448kB local_pcp:4028kB free_cma:0kB [ 111.441536][ T6084] lowmem_reserve[]: 0 0 0 0 0 [ 111.442601][ T6084] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 111.445309][ T6084] Node 0 Normal: 41*4kB (ME) 28*8kB (UE) 56*16kB (UME) 134*32kB (UME) 31*64kB (UME) 48*128kB (UM) 27*256kB (UM) 13*512kB (UM) 5*1024kB (UME) 4*2048kB (UM) 649*4096kB (UM) = 2698884kB [ 111.448778][ T6084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.451059][ T6084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 111.453014][ T6084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 111.454782][ T6084] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 111.456534][ T6084] 10962 total pagecache pages [ 111.457374][ T6084] 0 pages in swap cache [ 111.458277][ T6084] Free swap = 124740kB [ 111.459472][ T6084] Total swap = 124996kB [ 111.460195][ T6084] 2097152 pages RAM [ 111.461004][ T6084] 0 pages HighMem/MovableOnly [ 111.461829][ T6084] 417169 pages reserved [ 111.462698][ T6084] 8192 pages cma reserved [ 111.463585][ T6084] 0 pages hwpoisoned [ 111.606716][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.631'. [ 111.665570][ T6102] device syzkaller0 entered promiscuous mode [ 111.673036][ T6102] tipc: Enabled bearer , priority 0 [ 111.680948][ T6102] tipc: Resetting bearer [ 111.683709][ T6101] tipc: Resetting bearer [ 111.739985][ T6101] tipc: Disabling bearer [ 112.468367][ T6116] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 112.469572][ T6116] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.472051][ T6116] vhci_hcd vhci_hcd.0: Device attached [ 112.485431][ T6121] netlink: 128 bytes leftover after parsing attributes in process `syz.2.639'. [ 112.490819][ T6123] block nbd4: shutting down sockets [ 112.505414][ T6121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 112.578867][ T4498] vhci_hcd: vhci_device speed not set [ 112.654467][ T6129] device syzkaller0 entered promiscuous mode [ 112.664868][ T6129] tipc: Enabled bearer , priority 0 [ 112.679855][ T6129] tipc: Resetting bearer [ 112.692252][ T6127] tipc: Resetting bearer [ 112.738952][ T4337] Bluetooth: hci4: command 0x0419 tx timeout [ 112.747641][ T6135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.759696][ T6127] tipc: Disabling bearer [ 112.764984][ T6135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.903307][ T6117] vhci_hcd: connection closed [ 112.903586][ T11] vhci_hcd: stop threads [ 112.905340][ T11] vhci_hcd: release socket [ 112.906333][ T11] vhci_hcd: disconnect device [ 113.590599][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 113.593615][ T6148] device macsec0 entered promiscuous mode [ 115.449010][ T4342] vhci_hcd: vhci_device speed not set [ 124.609740][ T6179] tipc: Enabling of bearer rejected, failed to enable media [ 124.655043][ T6190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.656655][ T6190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.929295][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.930480][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.209954][ T6204] FAULT_INJECTION: forcing a failure. [ 126.209954][ T6204] name failslab, interval 1, probability 0, space 0, times 0 [ 126.212201][ T6204] CPU: 0 PID: 6204 Comm: syz.5.665 Not tainted syzkaller #0 [ 126.213492][ T6204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 126.215336][ T6204] Call trace: [ 126.215901][ T6204] dump_backtrace+0x1c4/0x1f0 [ 126.216819][ T6204] show_stack+0x2c/0x3c [ 126.217607][ T6204] __dump_stack+0x30/0x40 [ 126.218447][ T6204] dump_stack_lvl+0xf4/0x15c [ 126.219321][ T6204] dump_stack+0x1c/0x5c [ 126.220075][ T6204] should_fail_ex+0x3cc/0x524 [ 126.220937][ T6204] __should_failslab+0xc0/0x11c [ 126.221837][ T6204] should_failslab+0x10/0x28 [ 126.222725][ T6204] slab_pre_alloc_hook+0x6c/0x31c [ 126.223674][ T6204] kmem_cache_alloc_lru+0x60/0x284 [ 126.224617][ T6204] sock_alloc_inode+0x2c/0xcc [ 126.225472][ T6204] new_inode_pseudo+0x68/0x1cc [ 126.226367][ T6204] __sock_create+0x138/0x8a8 [ 126.227235][ T6204] __sys_socket+0xc0/0x1b0 [ 126.228031][ T6204] __arm64_sys_socket+0x7c/0x94 [ 126.228905][ T6204] invoke_syscall+0x98/0x290 [ 126.229728][ T6204] el0_svc_common+0x13c/0x258 [ 126.230613][ T6204] do_el0_svc+0x5c/0x134 [ 126.231404][ T6204] el0_svc+0x58/0x128 [ 126.232116][ T6204] el0t_64_sync_handler+0x84/0xf0 [ 126.233020][ T6204] el0t_64_sync+0x18c/0x190 [ 126.251059][ T6195] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 126.252227][ T6195] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.253573][ T6200] vhci_hcd: connection closed [ 126.254440][ T6195] vhci_hcd vhci_hcd.0: Device attached [ 126.256790][ T5349] vhci_hcd: stop threads [ 126.257605][ T5349] vhci_hcd: release socket [ 126.258460][ T5349] vhci_hcd: disconnect device [ 126.265008][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 126.279198][ T6204] socket: no more sockets [ 127.105192][ T6243] Bluetooth: MGMT ver 1.22 [ 127.177464][ T6248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.183157][ T6248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.717383][ T6258] 9pnet_virtio: no channels available for device syz [ 137.426420][ T6229] tipc: Enabling of bearer rejected, failed to enable media [ 139.141742][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.681'. [ 139.144923][ T6279] device macsec0 entered promiscuous mode [ 139.254950][ T6302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.267187][ T6302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.281403][ T6304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.296832][ T6304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.364004][ T6302] mmap: syz.2.686 (6302) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.017901][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.697'. [ 142.178075][ T6380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.191869][ T6380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.679844][ T6450] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 144.716217][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.714'. [ 153.618880][ T4340] Bluetooth: hci2: command 0x0406 tx timeout [ 153.620060][ T4340] Bluetooth: hci1: command 0x0406 tx timeout [ 156.499420][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.731'. [ 156.557994][ T27] kauditd_printk_skb: 1461 callbacks suppressed [ 156.558005][ T27] audit: type=1326 audit(156.540:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6513 comm="syz.1.734" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8c1792a8 code=0x0 [ 158.126120][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 158.309188][ T6576] netlink: 40 bytes leftover after parsing attributes in process `syz.5.759'. [ 158.418349][ T6582] netlink: 48 bytes leftover after parsing attributes in process `syz.3.761'. [ 158.688907][ T6590] FAULT_INJECTION: forcing a failure. [ 158.688907][ T6590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.692299][ T6590] CPU: 0 PID: 6590 Comm: syz.5.767 Not tainted syzkaller #0 [ 158.693746][ T6590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 158.695715][ T6590] Call trace: [ 158.696350][ T6590] dump_backtrace+0x1c4/0x1f0 [ 158.697251][ T6590] show_stack+0x2c/0x3c [ 158.698048][ T6590] __dump_stack+0x30/0x40 [ 158.698884][ T6590] dump_stack_lvl+0xf4/0x15c [ 158.699768][ T6590] dump_stack+0x1c/0x5c [ 158.700571][ T6590] should_fail_ex+0x3cc/0x524 [ 158.701470][ T6590] should_fail+0x14/0x24 [ 158.702283][ T6590] should_fail_usercopy+0x20/0x30 [ 158.703260][ T6590] __arm64_sys_rt_sigreturn+0x1a40/0x1f1c [ 158.704372][ T6590] invoke_syscall+0x98/0x290 [ 158.705260][ T6590] el0_svc_common+0x13c/0x258 [ 158.706162][ T6590] do_el0_svc+0x5c/0x134 [ 158.706911][ T6590] el0_svc+0x58/0x128 [ 158.707618][ T6590] el0t_64_sync_handler+0x84/0xf0 [ 158.708527][ T6590] el0t_64_sync+0x18c/0x190 [ 158.732686][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 158.808650][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.771'. [ 159.390560][ T52] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 159.393175][ T52] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 159.408429][ T6622] nvmet: adding nsid 1 to subsystem testsubsys [ 159.418124][ T6622] Unable to handle kernel paging request at virtual address dfff800000000000 [ 159.438862][ T6622] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 159.440556][ T6622] Mem abort info: [ 159.441287][ T6622] ESR = 0x0000000096000006 [ 159.442195][ T6622] EC = 0x25: DABT (current EL), IL = 32 bits [ 159.443224][ T6622] SET = 0, FnV = 0 [ 159.443942][ T6622] EA = 0, S1PTW = 0 [ 159.445871][ T6622] FSC = 0x06: level 2 translation fault [ 159.450450][ T6622] Data abort info: [ 159.451107][ T6622] ISV = 0, ISS = 0x00000006 [ 159.454666][ T6622] CM = 0, WnR = 0 [ 159.455395][ T6622] [dfff800000000000] address between user and kernel address ranges [ 159.457054][ T6622] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 159.458375][ T6622] Modules linked in: [ 159.459173][ T6622] CPU: 0 PID: 6622 Comm: syz.1.776 Not tainted syzkaller #0 [ 159.460632][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 159.462638][ T6622] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 159.464180][ T6622] pc : strlen+0x28/0x84 [ 159.465012][ T6622] lr : getname_kernel+0x34/0x2bc [ 159.465978][ T6622] sp : ffff8000218577e0 [ 159.466790][ T6622] x29: ffff800021857800 x28: 1fffe0001cc79a1e x27: 1fffe0001eb9440b [ 159.468396][ T6622] x26: dfff800000000000 x25: 1fffe0001b048c02 x24: dfff800000000000 [ 159.469902][ T6622] x23: dfff800000000000 x22: ffff70000430af10 x21: 0000000000020002 [ 159.471358][ T6622] x20: 0000000000000000 x19: 0000000000000000 x18: 0000000000000000 [ 159.472831][ T6622] x17: 0000000000000000 x16: ffff800011ba0e90 x15: 000000000004ffff [ 159.474317][ T6622] x14: 0000000000000001 x13: 1ffff0000430aee8 x12: 0000000000000000 [ 159.475848][ T6622] x11: 0000000000000000 x10: dfff800000000000 x9 : 0000000000000000 [ 159.477342][ T6622] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 159.478816][ T6622] x5 : ffff800018741e20 x4 : 0000000000000008 x3 : ffff8000082d44c8 [ 159.480380][ T6622] x2 : 0000000000000000 x1 : 0000000000020002 x0 : 0000000000000000 [ 159.481927][ T6622] Call trace: [ 159.482573][ T6622] strlen+0x28/0x84 [ 159.483268][ T6622] getname_kernel+0x34/0x2bc [ 159.484088][ T6622] filp_open+0x8c/0x1cc [ 159.484823][ T6622] nvmet_file_ns_enable+0x88/0x2f8 [ 159.485749][ T6622] nvmet_ns_enable+0xe4/0x724 [ 159.486577][ T6622] nvmet_ns_enable_store+0xd4/0x170 [ 159.487532][ T6622] configfs_write_iter+0x260/0x338 [ 159.488431][ T6622] vfs_write+0x3c8/0x7c8 [ 159.489198][ T6622] ksys_write+0x12c/0x228 [ 159.489953][ T6622] __arm64_sys_write+0x7c/0x90 [ 159.490790][ T6622] invoke_syscall+0x98/0x290 [ 159.491614][ T6622] el0_svc_common+0x13c/0x258 [ 159.492458][ T6622] do_el0_svc+0x5c/0x134 [ 159.493218][ T6622] el0_svc+0x58/0x128 [ 159.493917][ T6622] el0t_64_sync_handler+0x84/0xf0 [ 159.494833][ T6622] el0t_64_sync+0x18c/0x190 [ 159.495656][ T6622] Code: aa0003e8 f2fbffea d343fd0b 1200090c (38ea696b) [ 159.496948][ T6622] ---[ end trace 0000000000000000 ]--- [ 159.791762][ T6622] Kernel panic - not syncing: Oops: Fatal exception [ 159.792923][ T6622] SMP: stopping secondary CPUs [ 159.793790][ T6622] Kernel Offset: disabled [ 159.794570][ T6622] CPU features: 0x0a0000,000f0097,a65bfea7 [ 159.795580][ T6622] Memory Limit: none [ 160.072148][ T6622] Rebooting in 86400 seconds..