last executing test programs: 1.904624201s ago: executing program 0 (id=803): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt(0xffffffffffffffff, 0x10, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) semget$private(0x0, 0x4, 0x0) r0 = semget(0x2, 0x2, 0x38) semop(r0, 0x0, 0xfffffffffffffcdc) 1.861100142s ago: executing program 2 (id=806): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000400)={0x28, 0x14, 0x940e2689cab82739, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x11, 0xfa, "4a42411e47060aefadf2617ab9"}]}, 0x28}}, 0xc8c0) 1.820129519s ago: executing program 0 (id=807): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4) close(r0) 1.819920073s ago: executing program 0 (id=808): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0) 1.819806572s ago: executing program 2 (id=809): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.734471576s ago: executing program 0 (id=811): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x80010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x1ff, 0xfe6c}]}}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x40, 0xb, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x800, 0x7f}, @eol, @md5sig={0x13, 0x12, "c8651cedc09be42aa500"}, @generic={0x1, 0xc, "7da26b4a0b65c0b8ca53"}, @mss={0x2, 0x4, 0x1ff}, @sack={0x5, 0x2}, @fastopen={0x22, 0x8, "39cdb44d6203"}, @timestamp={0x8, 0xa, 0x1, 0x7}]}}}}}}}, 0x0) 1.679884136s ago: executing program 0 (id=813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtclass={0x44, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x0, 0x3e8}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x38, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0xfff0, 0x8}, {0x0, 0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000500)={0x11, 0x0, r3}, 0x14) sendto(r5, &(0x7f0000000600)='\x00', 0x1, 0x0, 0x0, 0x0) 1.651531775s ago: executing program 2 (id=814): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="5c010000100001000000000000000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000000200010000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000012346c000000ac1414bb000000000000000000000000ffefffffffffffff0200000000000000ffffffffffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000004350000020001000000000000000000480003006465666c61746500000000"], 0x15c}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4342, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x802) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x4040010) syz_emit_ethernet(0x26, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "00001234"}}}}, 0x0) 1.568128178s ago: executing program 2 (id=816): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f00000002c0)="02", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000340)="8f", 0x1}], 0x1}}], 0x2, 0x20048011) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.567788373s ago: executing program 2 (id=818): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = syz_io_uring_setup(0xf03, 0x0, &(0x7f00000001c0)=0x0, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x4, 0x0, r3, 0x0, 0x0}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = openat$snapshot(0xffffff9c, &(0x7f0000000080), 0x101501, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r6, 0x3304) close_range(r0, 0xffffffffffffffff, 0x0) 1.567629243s ago: executing program 1 (id=819): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xfffffff7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x40808c0) 1.56280588s ago: executing program 0 (id=820): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x224, &(0x7f0000000dc0)=ANY=[]) dup(0xffffffffffffffff) read$char_usb(r1, &(0x7f0000000480)=""/74, 0x49) 1.549926201s ago: executing program 1 (id=821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000005580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01020000000000000000020000090900010073797a300000000080000000160a030000000000000000000200000a540003800800014000000000400003801400010073797ae1c46c6c6572310000000000001400010064766d72703100000000000000000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000"], 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 1.488110806s ago: executing program 1 (id=822): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.487869367s ago: executing program 1 (id=823): r0 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe2a, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x100, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x1400, 0x2103, 0x2bb, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x8, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x586e, 0x2000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 1.404059964s ago: executing program 1 (id=826): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) get_robust_list(r0, &(0x7f0000000340)=&(0x7f0000000300), &(0x7f0000000380)=0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x8000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) pipe2$watch_queue(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000480)={0x2, 0x0, [{0xfff, 0x18f7, 0x6, [0x1, 0xff, 0x6b, 0x9, 0xb, 0xe5e, 0x1, 0x7]}, {0x8, 0xffff, 0xa, [0x8001, 0x9, 0x0, 0xc8, 0x9f, 0x40, 0x800, 0x7fff]}]}) preadv2(r3, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) 1.403743659s ago: executing program 3 (id=828): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() socket$key(0xf, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000500)='vegas', 0x5) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) ioctl(r0, 0x3b93, &(0x7f00000000c0)='(') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff18}, 0x94) 1.382272621s ago: executing program 4 (id=829): prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 1.344994329s ago: executing program 4 (id=830): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) syz_open_dev$dvb_dvr(0x0, 0x0, 0x100) write$binfmt_aout(r1, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 712.204788ms ago: executing program 4 (id=831): unshare(0x64020600) syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000300000040"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e20, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xff, 0x8, 0x401}) 711.919128ms ago: executing program 2 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) sendmsg$inet(r3, &(0x7f00000018c0)={&(0x7f00000002c0)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, 0x0}, 0x20000010) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') r5 = io_uring_setup(0x6e71, &(0x7f0000000040)={0x0, 0x800000, 0x2, 0x4, 0x131}) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, 0x0, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f0000000300)={0x0}, 0x1) 359.321218ms ago: executing program 1 (id=833): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) ioctl$SIOCSIFHWADDR(r2, 0x8922, 0x0) fcntl$addseals(r1, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd5000000010902"], 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000580)=0x1) 297.90475ms ago: executing program 3 (id=834): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x3c}}, 0x20000000) 219.999243ms ago: executing program 3 (id=835): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x20a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x8}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xd, 0x5, 0x0, 0xd, 0x10, 0x2, 0x4, 0x2, 0xb, 0x6, 0x3, 0x7, 0x8, 0x2, 0x10, 0x4], 0x3, [0x1751, 0xb, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xc, 0x0, 0xa, 0x8, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x9, 0x8, 0x1, 0x9, 0x5, 0x2, 0xf, 0x40, 0xfffc, 0x3, 0x1, 0x2002]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080) socket(0x400000000010, 0x3, 0x0) sendto$packet(r0, &(0x7f00000002c0)="05031400d3fc1c0000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 158.700712ms ago: executing program 3 (id=836): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 136.033404ms ago: executing program 3 (id=837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000088a2020100000800faff0700d06d6558b77daaaaaaaaaaaa8100000008004522001c0077f30f0411"], 0x3c) 52.042158ms ago: executing program 3 (id=838): socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 51.720693ms ago: executing program 4 (id=839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 37.653777ms ago: executing program 4 (id=840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) syz_80211_join_ibss(&(0x7f0000000380)='wlan0\x00', &(0x7f00000003c0)=@default_ibss_ssid, 0x6, 0x1) 0s ago: executing program 4 (id=841): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x28, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001000010000000000000000007f0000010000edffffff0000000000007f00000100000000000000000000000000000000000000000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000be3412320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060"], 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002"], 0x94}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): 0315000 [ 32.953427][ T5297] Soft offlining pfn 0x13ad64 at process virtual address 0x20316000 [ 32.954270][ T5297] Soft offlining pfn 0x13ad65 at process virtual address 0x20317000 [ 32.955283][ T5297] Soft offlining pfn 0x133cc4 at process virtual address 0x20318000 [ 32.976433][ T5297] Soft offlining pfn 0x133cc5 at process virtual address 0x20319000 [ 32.977227][ T5297] Soft offlining pfn 0x13612a at process virtual address 0x2031a000 [ 32.977447][ T5297] Soft offlining pfn 0x13612b at process virtual address 0x2031b000 [ 32.977679][ T5297] Soft offlining pfn 0x133f20 at process virtual address 0x2031c000 [ 32.978236][ T5297] Soft offlining pfn 0x133f21 at process virtual address 0x2031d000 [ 32.979406][ T5297] Soft offlining pfn 0x137c26 at process virtual address 0x2031e000 [ 32.980881][ T5297] Soft offlining pfn 0x137c27 at process virtual address 0x2031f000 [ 32.982508][ T5297] Soft offlining pfn 0x137c90 at process virtual address 0x20320000 [ 32.984231][ T5297] Soft offlining pfn 0x137c91 at process virtual address 0x20321000 [ 32.985972][ T5297] Soft offlining pfn 0x137c78 at process virtual address 0x20322000 [ 33.004130][ T5297] Soft offlining pfn 0x137c79 at process virtual address 0x20323000 [ 33.007017][ T5297] Soft offlining pfn 0x133c10 at process virtual address 0x20324000 [ 33.009222][ T5297] Soft offlining pfn 0x133c11 at process virtual address 0x20325000 [ 33.011452][ T5297] Soft offlining pfn 0x135f80 at process virtual address 0x20326000 [ 33.014155][ T5297] Soft offlining pfn 0x135f81 at process virtual address 0x20327000 [ 33.017085][ T5297] Soft offlining pfn 0x135fc8 at process virtual address 0x20328000 [ 33.020328][ T5297] Soft offlining pfn 0x135fc9 at process virtual address 0x20329000 [ 33.023966][ T5297] Soft offlining pfn 0x136008 at process virtual address 0x2032a000 [ 33.027574][ T5297] Soft offlining pfn 0x136009 at process virtual address 0x2032b000 [ 33.030210][ T5297] Soft offlining pfn 0x136048 at process virtual address 0x2032c000 [ 33.032895][ T5297] Soft offlining pfn 0x136049 at process virtual address 0x2032d000 [ 33.037696][ T5297] Soft offlining pfn 0x136056 at process virtual address 0x2032e000 [ 33.041026][ T5297] Soft offlining pfn 0x136057 at process virtual address 0x2032f000 [ 33.043647][ T5297] Soft offlining pfn 0x1360d8 at process virtual address 0x20330000 [ 33.046355][ T5297] Soft offlining pfn 0x1360d9 at process virtual address 0x20331000 [ 33.048902][ T5297] Soft offlining pfn 0x134224 at process virtual address 0x20332000 [ 33.051507][ T5297] Soft offlining pfn 0x134225 at process virtual address 0x20333000 [ 33.054179][ T5297] Soft offlining pfn 0x13611a at process virtual address 0x20334000 [ 33.056767][ T5297] Soft offlining pfn 0x13611b at process virtual address 0x20335000 [ 33.059453][ T5297] Soft offlining pfn 0x1360f6 at process virtual address 0x20336000 [ 33.062089][ T5297] Soft offlining pfn 0x1360f7 at process virtual address 0x20337000 [ 33.064596][ T5297] Soft offlining pfn 0x136314 at process virtual address 0x20338000 [ 33.067189][ T5297] Soft offlining pfn 0x136315 at process virtual address 0x20339000 [ 33.069231][ T5297] Soft offlining pfn 0x135ea4 at process virtual address 0x2033a000 [ 33.071176][ T5297] Soft offlining pfn 0x135ea5 at process virtual address 0x2033b000 [ 33.076563][ T5297] Soft offlining pfn 0x121f32 at process virtual address 0x2033c000 [ 33.079044][ T5297] Soft offlining pfn 0x121f33 at process virtual address 0x2033d000 [ 33.081672][ T5297] Soft offlining pfn 0x12050e at process virtual address 0x2033e000 [ 33.084424][ T5297] Soft offlining pfn 0x12050f at process virtual address 0x2033f000 [ 33.092040][ T5297] Soft offlining pfn 0x136346 at process virtual address 0x20340000 [ 33.113822][ T5297] Soft offlining pfn 0x136347 at process virtual address 0x20341000 [ 33.115954][ T5297] Soft offlining pfn 0x136350 at process virtual address 0x20342000 [ 33.116092][ T5297] Soft offlining pfn 0x136351 at process virtual address 0x20343000 [ 33.120160][ T5297] Soft offlining pfn 0x11d770 at process virtual address 0x20344000 [ 33.122636][ T5297] Soft offlining pfn 0x11d771 at process virtual address 0x20345000 [ 33.127138][ T5297] Soft offlining pfn 0x11d6b2 at process virtual address 0x20346000 [ 33.130139][ T5297] Soft offlining pfn 0x11d6b3 at process virtual address 0x20347000 [ 33.132478][ T5297] Soft offlining pfn 0x11dc38 at process virtual address 0x20348000 [ 33.134798][ T5297] Soft offlining pfn 0x11dc39 at process virtual address 0x20349000 [ 33.137686][ T5297] Soft offlining pfn 0x135ce9 at process virtual address 0x2034a000 [ 33.138544][ T5297] Soft offlining pfn 0x133c0e at process virtual address 0x2034b000 [ 33.139403][ T5297] Soft offlining pfn 0x139031 at process virtual address 0x2034c000 [ 33.140259][ T5297] Soft offlining pfn 0x13a701 at process virtual address 0x2034d000 [ 33.141112][ T5297] Soft offlining pfn 0x13a641 at process virtual address 0x2034e000 [ 33.141961][ T5297] Soft offlining pfn 0x121324 at process virtual address 0x2034f000 [ 33.144096][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.88'. [ 33.161453][ T5297] Soft offlining pfn 0x1388cc at process virtual address 0x20350000 [ 33.163364][ T5297] Soft offlining pfn 0x120ddd at process virtual address 0x20351000 [ 33.165620][ T5297] Soft offlining pfn 0x120e1d at process virtual address 0x20352000 [ 33.169909][ T5297] Soft offlining pfn 0x137bba at process virtual address 0x20353000 [ 33.172449][ T5297] Soft offlining pfn 0x13ad62 at process virtual address 0x20354000 [ 33.174520][ T5297] Soft offlining pfn 0x11e53b at process virtual address 0x20355000 [ 33.179364][ T5297] Soft offlining pfn 0x137aa7 at process virtual address 0x20356000 [ 33.181451][ T5297] Soft offlining pfn 0x11e497 at process virtual address 0x20357000 [ 33.183999][ T5297] Soft offlining pfn 0x13abf1 at process virtual address 0x20358000 [ 33.186762][ T5297] Soft offlining pfn 0x120e5d at process virtual address 0x20359000 [ 33.189070][ T5297] Soft offlining pfn 0x11e5e6 at process virtual address 0x2035a000 [ 33.192101][ T5297] Soft offlining pfn 0x138079 at process virtual address 0x2035b000 [ 33.195022][ T5297] Soft offlining pfn 0x137bf8 at process virtual address 0x2035c000 [ 33.197444][ T5297] Soft offlining pfn 0x137a7d at process virtual address 0x2035d000 [ 33.199896][ T5297] Soft offlining pfn 0x13421b at process virtual address 0x2035e000 [ 33.202337][ T5297] Soft offlining pfn 0x133def at process virtual address 0x2035f000 [ 33.205863][ T5297] Soft offlining pfn 0x133cfb at process virtual address 0x20360000 [ 33.208836][ T5297] Soft offlining pfn 0x133cb0 at process virtual address 0x20361000 [ 33.211609][ T5297] Soft offlining pfn 0x137c03 at process virtual address 0x20362000 [ 33.215729][ T5297] Soft offlining pfn 0x1390bd at process virtual address 0x20363000 [ 33.219047][ T5297] Soft offlining pfn 0x13ac10 at process virtual address 0x20364000 [ 33.221847][ T5297] Soft offlining pfn 0x133f3a at process virtual address 0x20365000 [ 33.224736][ T5297] Soft offlining pfn 0x133c17 at process virtual address 0x20366000 [ 33.228021][ T5297] Soft offlining pfn 0x133c1b at process virtual address 0x20367000 [ 33.230892][ T5297] Soft offlining pfn 0x11e5b7 at process virtual address 0x20368000 [ 33.233867][ T5297] Soft offlining pfn 0x121ecc at process virtual address 0x20369000 [ 33.237189][ T5297] Soft offlining pfn 0x133d5c at process virtual address 0x2036a000 [ 33.239946][ T5297] Soft offlining pfn 0x13ad6e at process virtual address 0x2036b000 [ 33.242744][ T5297] Soft offlining pfn 0x137aba at process virtual address 0x2036c000 [ 33.245622][ T5297] Soft offlining pfn 0x137d4f at process virtual address 0x2036d000 [ 33.248705][ T5297] Soft offlining pfn 0x133cc9 at process virtual address 0x2036e000 [ 33.251421][ T5297] Soft offlining pfn 0x11e56c at process virtual address 0x2036f000 [ 33.254257][ T5297] Soft offlining pfn 0x11eb6d at process virtual address 0x20370000 [ 33.262194][ T5297] Soft offlining pfn 0x1390c5 at process virtual address 0x20371000 [ 33.265327][ T5297] Soft offlining pfn 0x13a601 at process virtual address 0x20372000 [ 33.267620][ T5297] Soft offlining pfn 0x137bf6 at process virtual address 0x20373000 [ 33.270888][ T5297] Soft offlining pfn 0x137ba0 at process virtual address 0x20374000 [ 33.273459][ T5297] Soft offlining pfn 0x137d62 at process virtual address 0x20375000 [ 33.276736][ T5297] Soft offlining pfn 0x137c25 at process virtual address 0x20376000 [ 33.279571][ T5297] Soft offlining pfn 0x137bfe at process virtual address 0x20377000 [ 33.283052][ T5297] Soft offlining pfn 0x11f813 at process virtual address 0x20378000 [ 33.286063][ T5297] Soft offlining pfn 0x1362bd at process virtual address 0x20379000 [ 33.291607][ T5297] Soft offlining pfn 0x137bec at process virtual address 0x2037a000 [ 33.294727][ T5297] Soft offlining pfn 0x137bea at process virtual address 0x2037b000 [ 33.298228][ T5297] Soft offlining pfn 0x137c7a at process virtual address 0x2037c000 [ 33.302511][ T5297] Soft offlining pfn 0x133ded at process virtual address 0x2037d000 [ 33.305730][ T5297] Soft offlining pfn 0x137bd4 at process virtual address 0x2037e000 [ 33.308915][ T5297] Soft offlining pfn 0x137b93 at process virtual address 0x2037f000 [ 33.312224][ T5297] Soft offlining pfn 0x137c8f at process virtual address 0x20380000 [ 33.312298][ T5297] Soft offlining pfn 0x133d4e at process virtual address 0x20381000 [ 33.317194][ T5297] Soft offlining pfn 0x133c18 at process virtual address 0x20382000 [ 33.319286][ T5297] Soft offlining pfn 0x1217ec at process virtual address 0x20383000 [ 33.321931][ T5297] Soft offlining pfn 0x137b98 at process virtual address 0x20384000 [ 33.325106][ T5297] Soft offlining pfn 0x13ad98 at process virtual address 0x20385000 [ 33.328343][ T5297] Soft offlining pfn 0x135ee0 at process virtual address 0x20386000 [ 33.331537][ T5297] Soft offlining pfn 0x135ecf at process virtual address 0x20387000 [ 33.335083][ T5297] Soft offlining pfn 0x135e91 at process virtual address 0x20388000 [ 33.346500][ T5297] Soft offlining pfn 0x135e70 at process virtual address 0x20389000 [ 33.346612][ T5297] Soft offlining pfn 0x135e38 at process virtual address 0x2038a000 [ 33.346727][ T5297] Soft offlining pfn 0x135e31 at process virtual address 0x2038b000 [ 33.346904][ T5297] Soft offlining pfn 0x135db9 at process virtual address 0x2038c000 [ 33.347220][ T5297] Soft offlining pfn 0x135da1 at process virtual address 0x2038d000 [ 33.347842][ T5297] Soft offlining pfn 0x135d80 at process virtual address 0x2038e000 [ 33.348700][ T5297] Soft offlining pfn 0x135d69 at process virtual address 0x2038f000 [ 33.349550][ T5297] Soft offlining pfn 0x135d28 at process virtual address 0x20390000 [ 33.350407][ T5297] Soft offlining pfn 0x134216 at process virtual address 0x20391000 [ 33.351287][ T5297] Soft offlining pfn 0x11d45c at process virtual address 0x20392000 [ 33.352143][ T5297] Soft offlining pfn 0x11d45b at process virtual address 0x20393000 [ 33.352995][ T5297] Soft offlining pfn 0x121718 at process virtual address 0x20394000 [ 33.353848][ T5297] Soft offlining pfn 0x13426f at process virtual address 0x20395000 [ 33.354699][ T5297] Soft offlining pfn 0x134270 at process virtual address 0x20396000 [ 33.364210][ T5297] Soft offlining pfn 0x1343c3 at process virtual address 0x20397000 [ 33.364283][ T5297] Soft offlining pfn 0x1343ca at process virtual address 0x20398000 [ 33.364384][ T5297] Soft offlining pfn 0x1343ef at process virtual address 0x20399000 [ 33.364543][ T5297] Soft offlining pfn 0x1343fb at process virtual address 0x2039a000 [ 33.364851][ T5297] Soft offlining pfn 0x134447 at process virtual address 0x2039b000 [ 33.365456][ T5297] Soft offlining pfn 0x13444e at process virtual address 0x2039c000 [ 33.366853][ T5297] Soft offlining pfn 0x13446f at process virtual address 0x2039d000 [ 33.367940][ T5297] Soft offlining pfn 0x134486 at process virtual address 0x2039e000 [ 33.368809][ T5297] Soft offlining pfn 0x1344b0 at process virtual address 0x2039f000 [ 33.369752][ T5297] Soft offlining pfn 0x1344e8 at process virtual address 0x203a0000 [ 33.370668][ T5297] Soft offlining pfn 0x134530 at process virtual address 0x203a1000 [ 33.371674][ T5297] Soft offlining pfn 0x134278 at process virtual address 0x203a2000 [ 33.372582][ T5297] Soft offlining pfn 0x12164a at process virtual address 0x203a3000 [ 33.373437][ T5297] Soft offlining pfn 0x12163e at process virtual address 0x203a4000 [ 33.374353][ T5297] Soft offlining pfn 0x13426c at process virtual address 0x203a5000 [ 33.375264][ T5297] Soft offlining pfn 0x134274 at process virtual address 0x203a6000 [ 33.376262][ T5297] Soft offlining pfn 0x121548 at process virtual address 0x203a7000 [ 33.377319][ T5297] Soft offlining pfn 0x121547 at process virtual address 0x203a8000 [ 33.378178][ T5297] Soft offlining pfn 0x12152b at process virtual address 0x203a9000 [ 33.379120][ T5297] Soft offlining pfn 0x1341bb at process virtual address 0x203aa000 [ 33.380054][ T5297] Soft offlining pfn 0x1341ae at process virtual address 0x203ab000 [ 33.380983][ T5297] Soft offlining pfn 0x1341ad at process virtual address 0x203ac000 [ 33.382002][ T5297] Soft offlining pfn 0x1341a7 at process virtual address 0x203ad000 [ 33.382863][ T5297] Soft offlining pfn 0x1341a2 at process virtual address 0x203ae000 [ 33.383805][ T5297] Soft offlining pfn 0x1216a3 at process virtual address 0x203af000 [ 33.384761][ T5297] Soft offlining pfn 0x134594 at process virtual address 0x203b0000 [ 33.385709][ T5297] Soft offlining pfn 0x1213e3 at process virtual address 0x203b1000 [ 33.386871][ T5297] Soft offlining pfn 0x1213df at process virtual address 0x203b2000 [ 33.387896][ T5297] Soft offlining pfn 0x11d4ea at process virtual address 0x203b3000 [ 33.388764][ T5297] Soft offlining pfn 0x1341bc at process virtual address 0x203b4000 [ 33.389734][ T5297] Soft offlining pfn 0x13455f at process virtual address 0x203b5000 [ 33.390671][ T5297] Soft offlining pfn 0x134559 at process virtual address 0x203b6000 [ 33.391672][ T5297] Soft offlining pfn 0x13454f at process virtual address 0x203b7000 [ 33.392610][ T5297] Soft offlining pfn 0x12164d at process virtual address 0x203b8000 [ 33.393460][ T5297] Soft offlining pfn 0x121683 at process virtual address 0x203b9000 [ 33.394378][ T5297] Soft offlining pfn 0x121e6c at process virtual address 0x203ba000 [ 33.395306][ T5297] Soft offlining pfn 0x12125f at process virtual address 0x203bb000 [ 33.401294][ T5297] Soft offlining pfn 0x13472b at process virtual address 0x203bc000 [ 33.402092][ T5297] Soft offlining pfn 0x120d5b at process virtual address 0x203bd000 [ 33.402162][ T5297] Soft offlining pfn 0x120d1b at process virtual address 0x203be000 [ 33.402259][ T5297] Soft offlining pfn 0x120cfb at process virtual address 0x203bf000 [ 33.402419][ T5297] Soft offlining pfn 0x120cd7 at process virtual address 0x203c0000 [ 33.402822][ T5297] Soft offlining pfn 0x120c95 at process virtual address 0x203c1000 [ 33.403437][ T5297] Soft offlining pfn 0x120c7d at process virtual address 0x203c2000 [ 33.404371][ T5297] Soft offlining pfn 0x120bcd at process virtual address 0x203c3000 [ 33.405296][ T5297] Soft offlining pfn 0x120bac at process virtual address 0x203c4000 [ 33.407937][ T5297] Soft offlining pfn 0x120b8d at process virtual address 0x203c5000 [ 33.412432][ T5297] Soft offlining pfn 0x120b6c at process virtual address 0x203c6000 [ 33.413313][ T5297] Soft offlining pfn 0x120b4c at process virtual address 0x203c7000 [ 33.414181][ T5297] Soft offlining pfn 0x120b2c at process virtual address 0x203c8000 [ 33.415042][ T5297] Soft offlining pfn 0x120b0d at process virtual address 0x203c9000 [ 33.415902][ T5297] Soft offlining pfn 0x120aec at process virtual address 0x203ca000 [ 33.420768][ T5297] Soft offlining pfn 0x120acd at process virtual address 0x203cb000 [ 33.423373][ T5297] Soft offlining pfn 0x120aac at process virtual address 0x203cc000 [ 33.427686][ T5297] Soft offlining pfn 0x120a8d at process virtual address 0x203cd000 [ 33.428395][ T5297] Soft offlining pfn 0x11ea7b at process virtual address 0x203ce000 [ 33.428498][ T5297] Soft offlining pfn 0x120a6c at process virtual address 0x203cf000 [ 33.428668][ T5297] Soft offlining pfn 0x120a4d at process virtual address 0x203d0000 [ 33.429044][ T5297] Soft offlining pfn 0x120a2c at process virtual address 0x203d1000 [ 33.429663][ T5297] Soft offlining pfn 0x120a0d at process virtual address 0x203d2000 [ 33.431391][ T5297] Soft offlining pfn 0x1209ec at process virtual address 0x203d3000 [ 33.431463][ T5297] Soft offlining pfn 0x1209cd at process virtual address 0x203d4000 [ 33.431564][ T5297] Soft offlining pfn 0x133cee at process virtual address 0x203d5000 [ 33.431767][ T5297] Soft offlining pfn 0x133cef at process virtual address 0x203d6000 [ 33.431934][ T5297] Soft offlining pfn 0x136320 at process virtual address 0x203d7000 [ 33.434375][ T5297] Soft offlining pfn 0x136321 at process virtual address 0x203d8000 [ 33.434482][ T5297] Soft offlining pfn 0x13ad94 at process virtual address 0x203d9000 [ 33.434545][ T5297] Soft offlining pfn 0x13ad95 at process virtual address 0x203da000 [ 33.434645][ T5297] Soft offlining pfn 0x137b90 at process virtual address 0x203db000 [ 33.434813][ T5297] Soft offlining pfn 0x137b91 at process virtual address 0x203dc000 [ 33.435116][ T5297] Soft offlining pfn 0x133df2 at process virtual address 0x203dd000 [ 33.437423][ T5297] Soft offlining pfn 0x133df3 at process virtual address 0x203de000 [ 33.440317][ T5297] Soft offlining pfn 0x120cb2 at process virtual address 0x203df000 [ 33.442391][ T5297] Soft offlining pfn 0x120cb3 at process virtual address 0x203e0000 [ 33.442526][ T5297] Soft offlining pfn 0x121538 at process virtual address 0x203e1000 [ 33.442644][ T5297] Soft offlining pfn 0x121539 at process virtual address 0x203e2000 [ 33.442813][ T5297] Soft offlining pfn 0x121320 at process virtual address 0x203e3000 [ 33.443119][ T5297] Soft offlining pfn 0x121321 at process virtual address 0x203e4000 [ 33.446240][ T5297] Soft offlining pfn 0x121330 at process virtual address 0x203e5000 [ 33.446838][ T5297] Soft offlining pfn 0x121331 at process virtual address 0x203e6000 [ 33.446935][ T5297] Soft offlining pfn 0x137b8c at process virtual address 0x203e7000 [ 33.447096][ T5297] Soft offlining pfn 0x137b8d at process virtual address 0x203e8000 [ 33.449775][ T5297] Soft offlining pfn 0x133d56 at process virtual address 0x203e9000 [ 33.450436][ T5297] Soft offlining pfn 0x133d57 at process virtual address 0x203ea000 [ 33.452189][ T5297] Soft offlining pfn 0x133cb8 at process virtual address 0x203eb000 [ 33.452257][ T5297] Soft offlining pfn 0x133cb9 at process virtual address 0x203ec000 [ 33.452814][ T5297] Soft offlining pfn 0x137c06 at process virtual address 0x203ed000 [ 33.452987][ T5297] Soft offlining pfn 0x137c07 at process virtual address 0x203ee000 [ 33.453296][ T5297] Soft offlining pfn 0x133dae at process virtual address 0x203ef000 [ 33.456256][ T5297] Soft offlining pfn 0x133daf at process virtual address 0x203f0000 [ 33.458116][ T5297] Soft offlining pfn 0x137bb6 at process virtual address 0x203f1000 [ 33.460214][ T5297] Soft offlining pfn 0x137bb7 at process virtual address 0x203f2000 [ 33.461100][ T5297] Soft offlining pfn 0x13ac22 at process virtual address 0x203f3000 [ 33.461969][ T5297] Soft offlining pfn 0x13ac23 at process virtual address 0x203f4000 [ 33.465360][ T5297] Soft offlining pfn 0x13abf2 at process virtual address 0x203f5000 [ 33.465430][ T5297] Soft offlining pfn 0x13abf3 at process virtual address 0x203f6000 [ 33.465527][ T5297] Soft offlining pfn 0x13abe0 at process virtual address 0x203f7000 [ 33.465699][ T5297] Soft offlining pfn 0x13abe1 at process virtual address 0x203f8000 [ 33.466007][ T5297] Soft offlining pfn 0x13abc2 at process virtual address 0x203f9000 [ 33.468330][ T5297] Soft offlining pfn 0x13abc3 at process virtual address 0x203fa000 [ 33.471188][ T5297] Soft offlining pfn 0x13aba0 at process virtual address 0x203fb000 [ 33.471256][ T5297] Soft offlining pfn 0x13aba1 at process virtual address 0x203fc000 [ 33.471351][ T5297] Soft offlining pfn 0x11e5e4 at process virtual address 0x203fd000 [ 33.471515][ T5297] Soft offlining pfn 0x11e5e5 at process virtual address 0x203fe000 [ 33.476499][ T5297] Soft offlining pfn 0x11e64e at process virtual address 0x203ff000 [ 33.476869][ T5297] Soft offlining pfn 0x135600 at process virtual address 0x20400000 [ 33.494165][ T5392] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.583646][ T5392] EXT4-fs error (device loop2): dx_make_map:1296: inode #2: block 34: comm syz.2.91: bad entry in directory: inode out of bounds - offset=988, inode=130816, rec_len=36, size=1024 fake=1 [ 33.588252][ T5392] EXT4-fs error (device loop2) in do_split:2029: Corrupt filesystem [ 33.601688][ T4716] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.065053][ T5434] netlink: 5 bytes leftover after parsing attributes in process `syz.4.98'. [ 34.068672][ T5421] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.071855][ T5434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 34.081800][ T5421] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.109892][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 34.128707][ T5440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 34.163993][ T5440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.165991][ T5440] ext3: Unknown parameter 'obj_user' [ 34.185314][ T5444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.187748][ T5444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.301585][ T30] audit: type=1326 audit(34.260:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5445 comm="syz.0.103" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d782e8 code=0x0 [ 34.679845][ T5456] null_blk: disk my_zoned_dev created [ 34.739139][ T5464] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 34.795690][ T5471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 34.803097][ T5466] set_capacity_and_notify: 16 callbacks suppressed [ 34.806386][ T5466] loop4: detected capacity change from 0 to 2048 [ 34.809845][ T5466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.902911][ T5466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.101582][ T5481] loop1: detected capacity change from 0 to 128 [ 35.193964][ T5481] FAT-fs (loop1): data area starts beyond volume (414 > 128) [ 35.194006][ T5481] FAT-fs (loop1): Can't find a valid FAT filesystem [ 35.337041][ T866] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 35.375025][ T5487] loop3: detected capacity change from 0 to 512 [ 35.381714][ T5487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.384410][ T5485] loop0: detected capacity change from 0 to 256 [ 35.401317][ T5487] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec01c, mo2=0102] [ 35.401401][ T5487] System zones: 0-2, 18-18, 34-35 [ 35.461471][ T5487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.496316][ T866] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 35.500458][ T5487] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 35.508666][ T26] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 35.527138][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.534564][ T5496] loop2: detected capacity change from 0 to 512 [ 35.537748][ T5496] ext4: Unknown parameter 'euid' [ 35.542041][ T5496] netlink: 'syz.2.113': attribute type 3 has an invalid length. [ 35.570622][ T5498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 35.570664][ T5498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.114'. [ 35.580279][ T5498] netlink: 5 bytes leftover after parsing attributes in process `syz.3.114'. [ 35.582613][ T5498] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 35.582796][ T5495] fido_id[5495]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.600032][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.644953][ T5513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 35.681285][ T5517] loop2: detected capacity change from 0 to 8192 [ 35.896372][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 36.018396][ T5539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.123'. [ 36.387355][ T5574] loop0: detected capacity change from 0 to 1024 [ 36.413163][ T5574] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.498574][ T5574] overlayfs: failed to resolve 'audit': -2 [ 36.513338][ T5574] overlayfs: conflicting lowerdir path [ 36.539892][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.594622][ T5603] loop3: detected capacity change from 0 to 512 [ 36.598140][ T5603] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 65535 [ 36.690761][ T5608] 9p: Bad value for 'wfdno' [ 36.703389][ T5617] loop0: detected capacity change from 0 to 2048 [ 36.761202][ T5615] loop2: detected capacity change from 0 to 256 [ 36.763595][ T5615] vfat: Unknown parameter '' [ 36.777695][ T5624] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 36.777735][ T5624] CPU: 1 UID: 0 PID: 5624 Comm: syz.2.135 Not tainted syzkaller #0 PREEMPT [ 36.777747][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.777752][ T5624] Call trace: [ 36.777755][ T5624] show_stack+0x2c/0x3c (C) [ 36.777774][ T5624] __dump_stack+0x30/0x40 [ 36.777788][ T5624] dump_stack_lvl+0xd8/0x12c [ 36.777798][ T5624] dump_stack+0x1c/0x28 [ 36.777807][ T5624] sysfs_warn_dup+0x9c/0xb8 [ 36.777821][ T5624] sysfs_create_dir_ns+0x190/0x1f4 [ 36.777831][ T5624] kobject_add_internal+0x290/0x6f0 [ 36.777842][ T5624] kobject_add_varg+0x9c/0xe8 [ 36.777852][ T5624] kobject_add+0x110/0x1c8 [ 36.777861][ T5624] device_add+0x394/0x9e0 [ 36.777869][ T5624] device_register+0x28/0x38 [ 36.777877][ T5624] tty_register_device_attr+0x31c/0x5e8 [ 36.777886][ T5624] tty_register_device+0x3c/0x50 [ 36.777894][ T5624] gsm_activate_mux+0xdc/0x284 [ 36.777903][ T5624] gsmld_ioctl+0xea8/0x1414 [ 36.777911][ T5624] tty_ioctl+0x8a8/0xcb0 [ 36.777918][ T5624] __arm64_sys_ioctl+0x154/0x1cc [ 36.777930][ T5624] invoke_syscall+0x98/0x244 [ 36.777940][ T5624] el0_svc_common+0xec/0x23c [ 36.777950][ T5624] do_el0_svc+0x4c/0x5c [ 36.777959][ T5624] el0_svc+0x64/0x260 [ 36.777968][ T5624] el0t_64_sync_handler+0x44/0x104 [ 36.777977][ T5624] el0t_64_sync+0x198/0x19c [ 36.777993][ T5624] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 36.917629][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 36.917743][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 36.978467][ T5653] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.978503][ T5653] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.981040][ T5653] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 36.981075][ T5653] System zones: 1-12 [ 36.981688][ T5653] EXT4-fs (loop0): 1 truncate cleaned up [ 36.982144][ T5653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.985804][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.145'. [ 36.996052][ T5658] ext4: Unknown parameter 'mask' [ 37.009850][ T5653] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 37.016032][ T5660] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 37.016054][ T5660] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 37.022157][ T5660] vhci_hcd vhci_hcd.0: Device attached [ 37.027434][ T5660] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 37.027457][ T5660] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 37.027798][ T5660] vhci_hcd vhci_hcd.0: Device attached [ 37.033238][ T5660] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 37.033255][ T5660] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 37.033290][ T5660] vhci_hcd vhci_hcd.0: Device attached [ 37.074348][ T5668] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.077575][ T5660] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 37.083896][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.088858][ T5660] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 37.088875][ T5660] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 37.088914][ T5660] vhci_hcd vhci_hcd.0: Device attached [ 37.097985][ T5660] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(14) [ 37.098004][ T5660] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 37.098043][ T5660] vhci_hcd vhci_hcd.0: Device attached [ 37.110627][ T5660] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(16) [ 37.110647][ T5660] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 37.115124][ T5660] vhci_hcd vhci_hcd.0: Device attached [ 37.117726][ T5660] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(18) [ 37.117749][ T5660] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 37.117816][ T5660] vhci_hcd vhci_hcd.0: Device attached [ 37.133933][ T5668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.161935][ T5660] netlink: 44 bytes leftover after parsing attributes in process `syz.1.146'. [ 37.168976][ T5660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.146'. [ 37.195699][ T5239] Bluetooth: hci5: Frame reassembly failed (-84) [ 37.196062][ T5680] Bluetooth: hci5: Frame reassembly failed (-84) [ 37.207018][ T5680] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 37.226950][ T5678] vhci_hcd: connection closed [ 37.226994][ T5676] vhci_hcd: connection closed [ 37.227257][ T5663] vhci_hcd: connection closed [ 37.227980][ T5665] vhci_hcd: connection closed [ 37.229857][ T5673] vhci_hcd: connection closed [ 37.230368][ T5661] vhci_hcd: connection closed [ 37.231046][ T3110] vhci_hcd vhci_hcd.1: stop threads [ 37.231061][ T3110] vhci_hcd vhci_hcd.1: release socket [ 37.231855][ T3110] vhci_hcd vhci_hcd.1: disconnect device [ 37.236590][ T5671] vhci_hcd: connection closed [ 37.239142][ T3110] vhci_hcd vhci_hcd.1: stop threads [ 37.239173][ T3110] vhci_hcd vhci_hcd.1: release socket [ 37.239201][ T3110] vhci_hcd vhci_hcd.1: disconnect device [ 37.243925][ T3110] vhci_hcd vhci_hcd.1: stop threads [ 37.243953][ T3110] vhci_hcd vhci_hcd.1: release socket [ 37.243980][ T3110] vhci_hcd vhci_hcd.1: disconnect device [ 37.244227][ T3110] vhci_hcd vhci_hcd.1: stop threads [ 37.244238][ T3110] vhci_hcd vhci_hcd.1: release socket [ 37.244262][ T3110] vhci_hcd vhci_hcd.1: disconnect device [ 37.245312][ T3110] vhci_hcd vhci_hcd.1: stop threads [ 37.245320][ T3110] vhci_hcd vhci_hcd.1: release socket [ 37.245398][ T3110] vhci_hcd vhci_hcd.1: disconnect device [ 37.252906][ T3110] vhci_hcd vhci_hcd.1: stop threads [ 37.252920][ T3110] vhci_hcd vhci_hcd.1: release socket [ 37.252936][ T3110] vhci_hcd vhci_hcd.1: disconnect device [ 37.253343][ T3110] vhci_hcd vhci_hcd.1: stop threads [ 37.253351][ T3110] vhci_hcd vhci_hcd.1: release socket [ 37.253373][ T3110] vhci_hcd vhci_hcd.1: disconnect device [ 37.268833][ T866] usb 4-1: new high-speed USB device number 2 using vhci_hcd [ 37.268892][ T866] usb 4-1: enqueue for inactive port 0 [ 37.336285][ T866] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 37.471132][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'. [ 37.614246][ T5712] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.150: bad orphan inode 13 [ 37.614288][ T5712] loop2: lost filesystem error report for type 5 error -117 [ 37.614482][ T5712] ext4_test_bit(bit=12, block=4) = 1 [ 37.614489][ T5712] is_bad_inode(inode)=0 [ 37.614493][ T5712] NEXT_ORPHAN(inode)=0 [ 37.614497][ T5712] max_ino=32 [ 37.614501][ T5712] i_nlink=1 [ 37.614968][ T5712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.651289][ T4716] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.697397][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.750433][ T5721] bond0: (slave bond_slave_0): Releasing backup interface [ 37.804643][ T5729] netlink: 116 bytes leftover after parsing attributes in process `syz.3.152'. [ 37.848596][ T5730] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 37.848631][ T5730] FAT-fs (loop3): Filesystem has been set read-only [ 37.858559][ T5739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'. [ 37.876600][ T24] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 38.101357][ T5773] netlink: 'syz.4.160': attribute type 11 has an invalid length. [ 38.536418][ T5784] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.539416][ T5784] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 54285 (only 1 groups) [ 38.558737][ T4715] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.897137][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897168][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897219][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897224][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897254][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897259][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897285][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897289][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897321][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897324][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897350][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897353][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897378][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897381][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897405][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897408][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897438][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897442][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897465][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897468][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897493][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897497][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897521][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897524][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897553][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897556][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897590][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897594][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897619][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897623][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897646][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897649][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897681][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897685][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897708][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897711][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897734][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897737][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897760][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897764][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897792][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897795][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897820][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897824][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897847][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897850][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897873][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897877][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.897907][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.897910][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899008][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899014][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899357][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899364][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899397][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899401][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899425][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899429][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899461][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899465][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899488][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899491][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899515][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899518][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899541][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899544][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899585][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899590][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899617][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899620][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899643][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899647][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899670][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899673][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899705][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899708][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899732][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899735][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899758][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899761][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899784][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899787][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899817][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899820][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899843][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899846][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899870][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899873][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899896][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899899][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899927][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899931][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899953][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899957][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.899980][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.899983][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900017][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900020][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900054][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900057][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900557][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900560][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900598][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900601][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900628][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900632][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900657][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900661][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900684][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900688][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900711][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900714][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900737][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900740][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900765][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900768][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900791][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900794][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900818][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900821][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900844][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900847][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900871][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900875][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900898][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900901][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 38.900926][ T5800] binder: BINDER_SET_CONTEXT_MGR already set [ 38.900929][ T5800] binder: 5797:5800 ioctl 4018620d 20000100 returned -16 [ 39.018589][ T5811] EXT4-fs (loop3): 1 truncate cleaned up [ 39.019018][ T5811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.146922][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.236374][ T50] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 39.313334][ T5825] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.340606][ T5825] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.170: Allocating blocks 41-42 which overlap fs metadata [ 39.340645][ T5825] loop0: lost filesystem error report for type 5 error -117 [ 39.342639][ T5825] EXT4-fs (loop0): Remounting filesystem read-only [ 39.342712][ T5825] Quota error (device loop0): write_blk: dquota write failed [ 39.342738][ T5825] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 39.342807][ T5825] Quota error (device loop0): write_blk: dquota write failed [ 39.342851][ T5825] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 39.342920][ T5825] EXT4-fs (loop0): 1 truncate cleaned up [ 39.343388][ T5825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.820447][ T5837] set_capacity_and_notify: 9 callbacks suppressed [ 39.820771][ T5837] loop2: detected capacity change from 0 to 512 [ 39.821661][ T5837] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.821678][ T5837] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 40.037957][ T5849] No source specified [ 40.058930][ T5852] 9p: Bad value for 'rfdno' [ 40.133273][ T5854] gre1: entered promiscuous mode [ 40.232599][ T5863] loop3: detected capacity change from 0 to 512 [ 40.234552][ T5863] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.236839][ T5863] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.238907][ T5863] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.267025][ T5863] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4223: comm syz.3.177: Allocating blocks 41-42 which overlap fs metadata [ 40.267069][ T5863] loop3: lost filesystem error report for type 5 error -117 [ 40.270796][ T5863] EXT4-fs (loop3): Remounting filesystem read-only [ 40.270911][ T5863] Quota error (device loop3): write_blk: dquota write failed [ 40.270922][ T5863] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 40.270997][ T5863] Quota error (device loop3): write_blk: dquota write failed [ 40.271031][ T5863] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 40.271087][ T5863] EXT4-fs (loop3): 1 truncate cleaned up [ 40.271541][ T5863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.322485][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.348538][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.514115][ T5870] netlink: 'syz.0.178': attribute type 1 has an invalid length. [ 40.800938][ T5890] loop3: detected capacity change from 0 to 256 [ 40.836330][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 40.907123][ T5894] loop3: detected capacity change from 0 to 4096 [ 40.917139][ T5894] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.917177][ T5894] EXT4-fs (loop3): Test dummy encryption mode enabled [ 40.932059][ T5894] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 40.932119][ T5894] System zones: 0-5 [ 40.934987][ T5894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.071213][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.137717][ T5902] loop3: detected capacity change from 0 to 512 [ 41.160383][ T5902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.235297][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.336356][ T5911] __nla_validate_parse: 9 callbacks suppressed [ 41.336409][ T5911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 41.531641][ T5910] netlink: 28 bytes leftover after parsing attributes in process `syz.3.189'. [ 41.549659][ T5910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 41.616044][ T5912] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 41.619283][ T5917] loop4: detected capacity change from 0 to 512 [ 41.621550][ T5917] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.630153][ T5917] EXT4-fs (loop4): 1 truncate cleaned up [ 41.630661][ T5917] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.667368][ T5917] input: syz1 as /devices/virtual/input/input4 [ 41.744488][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.751623][ T5932] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 41.772900][ T5932] bond1: entered promiscuous mode [ 41.774671][ T5932] bond1: entered allmulticast mode [ 41.774888][ T5932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.790971][ T5932] erspan1: entered allmulticast mode [ 41.799095][ T5932] bond1: (slave erspan1): making interface the new active one [ 41.799123][ T5932] erspan1: entered promiscuous mode [ 41.804268][ T5932] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 41.812843][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 41.823531][ T5932] bond1 (unregistering): (slave erspan1): Releasing active interface [ 41.823571][ T5932] erspan1: left promiscuous mode [ 41.848163][ T5932] bond1 (unregistering): Released all slaves [ 41.998760][ T5943] netlink: 'syz.4.197': attribute type 3 has an invalid length. [ 42.087912][ T5956] loop1: detected capacity change from 0 to 128 [ 42.091836][ T5956] /dev/loop1: Can't open blockdev [ 42.096552][ T5956] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20001 [ 42.356644][ T5969] process 'syz.4.204' launched './file0' with NULL argv: empty string added [ 42.417731][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 42.420811][ T5973] fuse: Unknown parameter '¤Ì¹ÜŠvgô³‡+XÁJï®d:' [ 42.449184][ T5976] loop1: detected capacity change from 0 to 2048 [ 42.472532][ T5976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.487476][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.610361][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 42.652740][ T5990] xt_IDLETIMER: timeout value is too big [ 42.734019][ T5993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 42.754340][ T5996] capability: warning: `syz.1.214' uses 32-bit capabilities (legacy support in use) [ 42.815843][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 43.082859][ T6003] loop1: detected capacity change from 0 to 8192 [ 43.113967][ T6006] overlayfs: missing 'lowerdir' [ 43.120058][ T6003] loop1: [ICS] [ 43.219793][ T6015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.220'. [ 43.261630][ T6019] FAULT_INJECTION: forcing a failure. [ 43.261630][ T6019] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 43.264867][ T6019] CPU: 1 UID: 0 PID: 6019 Comm: syz.2.222 Not tainted syzkaller #0 PREEMPT [ 43.264886][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.264892][ T6019] Call trace: [ 43.264896][ T6019] show_stack+0x2c/0x3c (C) [ 43.264919][ T6019] __dump_stack+0x30/0x40 [ 43.264933][ T6019] dump_stack_lvl+0xd8/0x12c [ 43.264945][ T6019] dump_stack+0x1c/0x28 [ 43.264956][ T6019] should_fail_ex+0x41c/0x590 [ 43.264969][ T6019] should_fail+0x14/0x24 [ 43.264980][ T6019] should_fail_usercopy+0x20/0x30 [ 43.264991][ T6019] bpf_verifier_vlog+0x81c/0xbc0 [ 43.265004][ T6019] btf_verifier_log+0x120/0x1a0 [ 43.265013][ T6019] btf_enum_check_meta+0x5b0/0x628 [ 43.265021][ T6019] btf_parse_type_sec+0x36c/0x17a8 [ 43.265031][ T6019] btf_new_fd+0x33c/0xa24 [ 43.265042][ T6019] bpf_btf_load+0x144/0x190 [ 43.265052][ T6019] __sys_bpf+0x7f0/0x82c [ 43.265061][ T6019] __arm64_sys_bpf+0xd0/0xec [ 43.265069][ T6019] invoke_syscall+0x98/0x244 [ 43.265081][ T6019] el0_svc_common+0xec/0x23c [ 43.265093][ T6019] do_el0_svc+0x4c/0x5c [ 43.265104][ T6019] el0_svc+0x64/0x260 [ 43.265114][ T6019] el0t_64_sync_handler+0x44/0x104 [ 43.265124][ T6019] el0t_64_sync+0x198/0x19c [ 43.349599][ T6028] loop2: detected capacity change from 0 to 512 [ 43.354322][ T6028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.357212][ T6027] tmpfs: Unknown parameter '|id' [ 43.370410][ T6028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.397981][ T6028] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 43.408040][ T6028] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.410771][ T6036] squashfs: Bad value for 'errors' [ 43.544604][ T6049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.544800][ T6049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.553497][ T6052] Can't find a SQUASHFS superblock on loop1 [ 43.555354][ T6049] netlink: 72 bytes leftover after parsing attributes in process `syz.3.234'. [ 43.575218][ T6054] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 43.587501][ T6054] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 43.649286][ T6064] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.654311][ T6064] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 43.661629][ T6066] binder: 6057 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 43.661660][ T6066] binder: 6057:6066 ioctl c018620c 200000c0 returned -22 [ 43.665290][ T6064] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.239: bg 0: block 248: padding at end of block bitmap is not set [ 43.665329][ T6064] loop0: lost filesystem error report for type 5 error -117 [ 43.669084][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 43.669097][ C1] EXT4-fs (loop0): last error at time 43: ext4_validate_block_bitmap:445 [ 43.676661][ T6064] Quota error (device loop0): write_blk: dquota write failed [ 43.679616][ T6064] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 43.682628][ T6064] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.239: Failed to acquire dquot type 1 [ 43.685605][ T6064] loop0: lost filesystem error report for type 5 error -28 [ 43.690024][ T6064] EXT4-fs (loop0): 1 truncate cleaned up [ 43.690586][ T6064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 43.705324][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 43.986695][ T4824] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 44.117846][ T4824] usb 1-1: device descriptor read/64, error -71 [ 44.386289][ T4824] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 44.482387][ T6113] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 44.497671][ T6113] EXT4-fs (loop4): 1 truncate cleaned up [ 44.498322][ T6113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.559772][ T4824] usb 1-1: device descriptor read/64, error -71 [ 44.562767][ T6115] loop3: p2 < > p4 [ 44.567157][ T6115] loop3: p4 size 8192 extends beyond EOD, truncated [ 44.596006][ T5696] udevd[5696]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 44.599070][ T5651] udevd[5651]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 44.900398][ T6119] set_capacity_and_notify: 5 callbacks suppressed [ 44.900441][ T6119] loop3: detected capacity change from 0 to 1024 [ 44.901478][ T4824] usb usb1-port1: attempt power cycle [ 44.909111][ T6119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.915353][ T6119] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.253: bg 0: block 112: padding at end of block bitmap is not set [ 44.918103][ T6119] EXT4-fs (loop3): Remounting filesystem read-only [ 44.931098][ T6119] gtp0: entered allmulticast mode [ 44.939247][ T6119] team0: Device gtp0 is of different type [ 45.069699][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.137629][ T6133] loop3: detected capacity change from 0 to 1024 [ 45.256253][ T4824] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 45.287403][ T4824] usb 1-1: device descriptor read/8, error -71 [ 45.294176][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.546350][ T4824] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 45.571236][ T4824] usb 1-1: device descriptor read/8, error -71 [ 45.635685][ T6168] loop4: detected capacity change from 0 to 4096 [ 45.672883][ T6168] Bluetooth: MGMT ver 1.23 [ 45.686378][ T4824] usb usb1-port1: unable to enumerate USB device [ 45.881924][ T6181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 45.888366][ T6181] lo speed is unknown, defaulting to 1000 [ 45.888960][ T6183] Driver unsupported XDP return value 0 on prog (id 58) dev N/A, expect packet loss! [ 45.892157][ T6181] lo speed is unknown, defaulting to 1000 [ 45.894444][ T6181] lo speed is unknown, defaulting to 1000 [ 45.898976][ T6181] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.902650][ T6181] infiniband s!0: RDMA CMA: cma_listen_on_dev, error -98 [ 45.915759][ T6181] lo speed is unknown, defaulting to 1000 [ 45.918661][ T6181] lo speed is unknown, defaulting to 1000 [ 45.920716][ T6181] lo speed is unknown, defaulting to 1000 [ 45.923593][ T6181] lo speed is unknown, defaulting to 1000 [ 45.925473][ T6181] lo speed is unknown, defaulting to 1000 [ 45.971508][ T6188] xfrm1: entered allmulticast mode [ 46.367283][ T6198] bridge0: entered promiscuous mode [ 46.373032][ T6198] bridge0: left promiscuous mode [ 46.438951][ T6209] loop1: detected capacity change from 0 to 256 [ 46.443733][ T6211] 9p: Bad value for 'wfdno' [ 46.479672][ T6213] __nla_validate_parse: 7 callbacks suppressed [ 46.479710][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.280'. [ 46.485636][ T6213] loop4: detected capacity change from 0 to 128 [ 46.500866][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.280'. [ 46.502023][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 47.072503][ T6223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.072705][ T6223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.242174][ T6245] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 47.318188][ T6249] loop1: detected capacity change from 0 to 512 [ 47.318565][ T6249] EXT4-fs: Ignoring removed bh option [ 47.341580][ T6249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.360731][ T6253] nft_compat: unsupported protocol 0 [ 47.413186][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.532005][ T30] audit: type=1326 audit(47.490:3): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6259 comm="syz.0.294" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 47.532047][ T30] audit: type=1326 audit(47.490:4): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6259 comm="syz.0.294" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 47.532080][ T30] audit: type=1326 audit(47.490:5): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6259 comm="syz.0.294" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=13 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 47.532101][ T30] audit: type=1326 audit(47.490:6): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6259 comm="syz.0.294" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 47.532122][ T30] audit: type=1326 audit(47.490:7): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6259 comm="syz.0.294" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 47.561085][ T30] audit: type=1326 audit(47.520:8): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6259 comm="syz.0.294" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff91d5b1ac code=0x7ffc0000 [ 47.566598][ T30] audit: type=1326 audit(47.530:9): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6259 comm="syz.0.294" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff91d7998c code=0x7ffc0000 [ 47.573027][ T30] audit: type=1326 audit(47.530:10): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6259 comm="syz.0.294" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 47.573058][ T30] audit: type=1326 audit(47.530:11): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6259 comm="syz.0.294" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=268 compat=0 ip=0xffff91d7998c code=0x7ffc0000 [ 47.573087][ T30] audit: type=1326 audit(47.530:12): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=_ pid=6259 comm="syz.0.294" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff91d5b1ac code=0x7ffc0000 [ 47.751882][ T3110] IPVS: starting estimator thread 0... [ 47.813916][ T6283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 48.000998][ T6287] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 48.017028][ T6280] IPVS: using max 45 ests per chain, 108000 per kthread [ 48.017910][ T4724] Bluetooth: to_multiplier 0 < 10 [ 48.022445][ T6286] loop3: detected capacity change from 0 to 512 [ 48.024505][ T6286] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.054388][ T6286] syz.3.300: attempt to access beyond end of device [ 48.054388][ T6286] loop3: rw=8912896, sector=17179852706, nr_sectors = 16 limit=512 [ 48.055052][ T6286] syz.3.300: attempt to access beyond end of device [ 48.055052][ T6286] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 48.055626][ T6286] syz.3.300: attempt to access beyond end of device [ 48.055626][ T6286] loop3: rw=8388608, sector=17179852706, nr_sectors = 8 limit=512 [ 48.087895][ T6292] loop3: detected capacity change from 0 to 512 [ 48.112999][ T6292] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.153011][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.381235][ T6316] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 48.396223][ T6316] bond1: entered promiscuous mode [ 48.396357][ T6316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.403360][ T6316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.403571][ T6316] bond1: (slave gre2): The slave device specified does not support setting the MAC address [ 48.403590][ T6316] bond1: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 48.404074][ T6316] bond1: (slave gre2): Opening slave failed [ 48.429035][ T6319] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 48.429076][ T6319] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 48.610045][ T6321] can: request_module (can-proto-0) failed. [ 48.630737][ T6326] loop0: detected capacity change from 0 to 256 [ 48.635798][ T6326] netlink: 12 bytes leftover after parsing attributes in process `syz.0.312'. [ 48.972902][ T6333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.315'. [ 48.976920][ T6337] loop4: detected capacity change from 0 to 4096 [ 48.977331][ T6337] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.980171][ T6337] EXT4-fs (loop4): Test dummy encryption mode enabled [ 48.983760][ T6337] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 48.983827][ T6337] System zones: 0-5 [ 48.987411][ T6337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.000415][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.156261][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 49.250626][ T6358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.309430][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 49.550354][ T6358] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.323: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 49.578960][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.618926][ T6372] EXT4-fs (loop0): invalid #clusters per group: 32774 [ 49.665107][ T6373] Soft offlining pfn 0x139842 at process virtual address 0x20000000 [ 49.674908][ T6373] Soft offlining pfn 0x2190ff at process virtual address 0x20001000 [ 49.676995][ T6373] Memory failure: 0x2190ff: unhandlable page. [ 49.807011][ T6380] ubi0: attaching mtd0 [ 49.814928][ T6380] ubi0: scanning is finished [ 49.814986][ T6380] ubi0: empty MTD device detected [ 50.023571][ T6383] overlayfs: failed to clone upperpath [ 50.036425][ T4724] Bluetooth: hci0: command tx timeout [ 50.110697][ T6380] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 50.110728][ T6380] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 50.110754][ T6380] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 50.110762][ T6380] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 50.110769][ T6380] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 50.110775][ T6380] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 50.110782][ T6380] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2812339807 [ 50.110790][ T6380] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 50.111185][ T6386] ubi0: background thread "ubi_bgt0d" started, PID 6386 [ 50.546581][ T6406] lo speed is unknown, defaulting to 1000 [ 50.672331][ T6416] syzkaller0: entered promiscuous mode [ 50.672366][ T6416] syzkaller0: entered allmulticast mode [ 50.819900][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 51.839324][ T6444] netlink: 36 bytes leftover after parsing attributes in process `syz.3.347'. [ 51.858909][ T6446] x_tables: ip_tables: osf match: only valid for protocol 6 [ 51.859713][ T6446] netlink: 'syz.3.348': attribute type 10 has an invalid length. [ 51.905111][ T6427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.159097][ T3110] IPVS: starting estimator thread 0... [ 52.246313][ T6455] IPVS: using max 46 ests per chain, 110400 per kthread [ 52.255915][ T6464] FAULT_INJECTION: forcing a failure. [ 52.255915][ T6464] name failslab, interval 1, probability 0, space 0, times 0 [ 52.255951][ T6464] CPU: 0 UID: 0 PID: 6464 Comm: syz.4.354 Not tainted syzkaller #0 PREEMPT [ 52.255965][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 52.255971][ T6464] Call trace: [ 52.255975][ T6464] show_stack+0x2c/0x3c (C) [ 52.255996][ T6464] __dump_stack+0x30/0x40 [ 52.256010][ T6464] dump_stack_lvl+0xd8/0x12c [ 52.256022][ T6464] dump_stack+0x1c/0x28 [ 52.256033][ T6464] should_fail_ex+0x41c/0x590 [ 52.256047][ T6464] should_failslab+0xc4/0x120 [ 52.256060][ T6464] kmem_cache_alloc_noprof+0x94/0x5d4 [ 52.256074][ T6464] alloc_vfsmnt+0x38/0x474 [ 52.256084][ T6464] clone_mnt+0x5c/0x664 [ 52.256094][ T6464] copy_tree+0xf0/0x9bc [ 52.256103][ T6464] __do_loopback+0x210/0x2b0 [ 52.256115][ T6464] open_detached_copy+0x17c/0x478 [ 52.256127][ T6464] vfs_open_tree+0x328/0x348 [ 52.256139][ T6464] __arm64_sys_open_tree+0xa4/0x120 [ 52.256150][ T6464] invoke_syscall+0x98/0x244 [ 52.256162][ T6464] el0_svc_common+0xec/0x23c [ 52.256176][ T6464] do_el0_svc+0x4c/0x5c [ 52.256188][ T6464] el0_svc+0x64/0x260 [ 52.256199][ T6464] el0t_64_sync_handler+0x44/0x104 [ 52.256209][ T6464] el0t_64_sync+0x198/0x19c [ 52.302758][ T6466] FAULT_INJECTION: forcing a failure. [ 52.302758][ T6466] name failslab, interval 1, probability 0, space 0, times 0 [ 52.302795][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.4.355 Not tainted syzkaller #0 PREEMPT [ 52.302806][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 52.302811][ T6466] Call trace: [ 52.302814][ T6466] show_stack+0x2c/0x3c (C) [ 52.302833][ T6466] __dump_stack+0x30/0x40 [ 52.302847][ T6466] dump_stack_lvl+0xd8/0x12c [ 52.302858][ T6466] dump_stack+0x1c/0x28 [ 52.302869][ T6466] should_fail_ex+0x41c/0x590 [ 52.302882][ T6466] should_failslab+0xc4/0x120 [ 52.302896][ T6466] kmem_cache_alloc_node_noprof+0x98/0x604 [ 52.302910][ T6466] __alloc_skb+0x1f0/0x610 [ 52.302920][ T6466] tipc_buf_acquire+0x34/0xe8 [ 52.302930][ T6466] tipc_msg_create+0x58/0x1e0 [ 52.302938][ T6466] tipc_group_create_event+0x178/0x4d0 [ 52.302949][ T6466] tipc_group_proto_rcv+0x70c/0xe3c [ 52.302958][ T6466] tipc_sk_proto_rcv+0x1fc/0xf40 [ 52.302966][ T6466] tipc_sk_filter_rcv+0x1e1c/0x21a8 [ 52.302974][ T6466] tipc_sk_backlog_rcv+0x11c/0x23c [ 52.302983][ T6466] __release_sock+0x174/0x2c0 [ 52.302995][ T6466] release_sock+0x174/0x228 [ 52.303006][ T6466] tipc_setsockopt+0x57c/0x7c0 [ 52.303014][ T6466] do_sock_setsockopt+0x1f0/0x330 [ 52.303024][ T6466] __sys_setsockopt+0x104/0x170 [ 52.303033][ T6466] __arm64_sys_setsockopt+0xc8/0xe4 [ 52.303043][ T6466] invoke_syscall+0x98/0x244 [ 52.303055][ T6466] el0_svc_common+0xec/0x23c [ 52.303067][ T6466] do_el0_svc+0x4c/0x5c [ 52.303078][ T6466] el0_svc+0x64/0x260 [ 52.303089][ T6466] el0t_64_sync_handler+0x44/0x104 [ 52.303098][ T6466] el0t_64_sync+0x198/0x19c [ 52.312350][ T6468] FAULT_INJECTION: forcing a failure. [ 52.312350][ T6468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.312365][ T6468] CPU: 0 UID: 0 PID: 6468 Comm: syz.3.356 Not tainted syzkaller #0 PREEMPT [ 52.312375][ T6468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 52.312380][ T6468] Call trace: [ 52.312383][ T6468] show_stack+0x2c/0x3c (C) [ 52.312398][ T6468] __dump_stack+0x30/0x40 [ 52.312410][ T6468] dump_stack_lvl+0xd8/0x12c [ 52.312421][ T6468] dump_stack+0x1c/0x28 [ 52.312433][ T6468] should_fail_ex+0x41c/0x590 [ 52.312445][ T6468] should_fail+0x14/0x24 [ 52.312456][ T6468] should_fail_usercopy+0x20/0x30 [ 52.312468][ T6468] strncpy_from_user+0x48/0x388 [ 52.312477][ T6468] __arm64_sys_add_key+0x150/0x43c [ 52.312486][ T6468] invoke_syscall+0x98/0x244 [ 52.312498][ T6468] el0_svc_common+0xec/0x23c [ 52.312510][ T6468] do_el0_svc+0x4c/0x5c [ 52.312521][ T6468] el0_svc+0x64/0x260 [ 52.312531][ T6468] el0t_64_sync_handler+0x44/0x104 [ 52.312541][ T6468] el0t_64_sync+0x198/0x19c [ 52.705148][ T6481] set_capacity_and_notify: 3 callbacks suppressed [ 52.705207][ T6481] loop4: detected capacity change from 0 to 1024 [ 52.718089][ T6479] loop4: detected capacity change from 0 to 512 [ 52.724561][ T6479] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.361: Unrecognised inode hash code 255 [ 52.724617][ T6479] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.361: Corrupt directory, running e2fsck is recommended [ 52.734341][ T6479] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 52.734391][ T6479] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.361: corrupted in-inode xattr: invalid ea_ino [ 52.734408][ T6479] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.737475][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 52.737490][ C1] EXT4-fs (loop4): initial error at time 52: ext4_iget_extra_inode:5210: inode 15 [ 52.737506][ C1] EXT4-fs (loop4): last error at time 52: ext4_iget_extra_inode:5210: inode 15 [ 52.737653][ T6479] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.361: couldn't read orphan inode 15 (err -117) [ 52.737671][ T6479] loop4: lost filesystem error report for type 5 error -117 [ 52.739854][ T6479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.745056][ T6479] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.361: Unrecognised inode hash code 255 [ 52.745077][ T6479] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.361: Corrupt directory, running e2fsck is recommended [ 52.757837][ T6479] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.361: Unrecognised inode hash code 255 [ 52.757862][ T6479] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.361: Corrupt directory, running e2fsck is recommended [ 52.757917][ T6479] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 4: comm syz.4.361: path /74/file0: bad entry in directory: inode out of bounds - offset=0, inode=131071, rec_len=1024, size=1024 fake=0 [ 52.892008][ T6493] loop0: detected capacity change from 0 to 512 [ 52.900844][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.910329][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.918915][ T6493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.017686][ T6502] tipc: Enabling of bearer rejected, failed to enable media [ 53.561941][ T6483] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 255: padding at end of block bitmap is not set [ 53.766152][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.812777][ T6521] FAULT_INJECTION: forcing a failure. [ 53.812777][ T6521] name failslab, interval 1, probability 0, space 0, times 0 [ 53.815901][ T6521] CPU: 1 UID: 0 PID: 6521 Comm: syz.0.374 Not tainted syzkaller #0 PREEMPT [ 53.815924][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 53.815930][ T6521] Call trace: [ 53.815934][ T6521] show_stack+0x2c/0x3c (C) [ 53.815958][ T6521] __dump_stack+0x30/0x40 [ 53.815972][ T6521] dump_stack_lvl+0xd8/0x12c [ 53.815985][ T6521] dump_stack+0x1c/0x28 [ 53.815996][ T6521] should_fail_ex+0x41c/0x590 [ 53.816009][ T6521] should_failslab+0xc4/0x120 [ 53.816022][ T6521] kmem_cache_alloc_noprof+0x94/0x5d4 [ 53.816035][ T6521] seq_open+0x60/0x13c [ 53.816048][ T6521] __seq_open_private+0x48/0xd4 [ 53.816060][ T6521] seq_open_net+0x138/0x1ec [ 53.816069][ T6521] proc_reg_open+0x224/0x46c [ 53.816082][ T6521] do_dentry_open+0x5c4/0xfc0 [ 53.816093][ T6521] vfs_open+0x44/0x2dc [ 53.816104][ T6521] path_openat+0x1084/0x18f4 [ 53.816114][ T6521] do_file_open+0x1c8/0x2e8 [ 53.816124][ T6521] do_sys_openat2+0x114/0x1e8 [ 53.816135][ T6521] do_sys_open+0xb0/0xe0 [ 53.816146][ T6521] __arm64_sys_openat+0xa8/0xc4 [ 53.816157][ T6521] invoke_syscall+0x98/0x244 [ 53.816172][ T6521] el0_svc_common+0xec/0x23c [ 53.816184][ T6521] do_el0_svc+0x4c/0x5c [ 53.816196][ T6521] el0_svc+0x64/0x260 [ 53.816206][ T6521] el0t_64_sync_handler+0x44/0x104 [ 53.816217][ T6521] el0t_64_sync+0x198/0x19c [ 53.862887][ T6524] syzkaller0: entered promiscuous mode [ 53.862922][ T6524] syzkaller0: entered allmulticast mode [ 53.866308][ T6524] tipc: Enabled bearer , priority 0 [ 53.870161][ T6523] tipc: Resetting bearer [ 54.132811][ T6523] tipc: Disabling bearer [ 54.336884][ T6544] netlink: 'syz.3.383': attribute type 6 has an invalid length. [ 54.377747][ T6548] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 54.485081][ T6556] gadgetfs: bound to dummy_udc driver [ 54.752147][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 55.246222][ T6590] tipc: Started in network mode [ 55.246254][ T6590] tipc: Node identity 4, cluster identity 4711 [ 55.246286][ T6590] tipc: Node number set to 4 [ 55.474620][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.532185][ T6600] zram0: detected capacity change from 0 to 65536 [ 56.703357][ T6660] FAULT_INJECTION: forcing a failure. [ 56.703357][ T6660] name failslab, interval 1, probability 0, space 0, times 0 [ 56.703390][ T6660] CPU: 0 UID: 0 PID: 6660 Comm: syz.1.425 Not tainted syzkaller #0 PREEMPT [ 56.703408][ T6660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 56.703416][ T6660] Call trace: [ 56.703419][ T6660] show_stack+0x2c/0x3c (C) [ 56.703440][ T6660] __dump_stack+0x30/0x40 [ 56.703452][ T6660] dump_stack_lvl+0xd8/0x12c [ 56.703462][ T6660] dump_stack+0x1c/0x28 [ 56.703471][ T6660] should_fail_ex+0x41c/0x590 [ 56.703483][ T6660] should_failslab+0xc4/0x120 [ 56.703494][ T6660] kmem_cache_alloc_noprof+0x94/0x5d4 [ 56.703505][ T6660] taskstats_exit+0x30c/0x89c [ 56.703516][ T6660] do_exit+0x50c/0x1a74 [ 56.703527][ T6660] do_group_exit+0x198/0x238 [ 56.703537][ T6660] get_signal+0xfb0/0x1094 [ 56.703545][ T6660] arch_do_signal_or_restart+0x288/0x444c [ 56.703561][ T6660] exit_to_user_mode_loop+0x70/0x17c [ 56.703574][ T6660] el0_svc+0x18c/0x260 [ 56.703585][ T6660] el0t_64_sync_handler+0x44/0x104 [ 56.703594][ T6660] el0t_64_sync+0x198/0x19c [ 56.942167][ T6669] netlink: 20 bytes leftover after parsing attributes in process `syz.4.426'. [ 57.095320][ T6675] loop3: detected capacity change from 0 to 256 [ 57.165465][ T6685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.431'. [ 57.178861][ T6675] syzkaller0: entered promiscuous mode [ 57.178901][ T6675] syzkaller0: entered allmulticast mode [ 57.274357][ T6688] netlink: 'syz.2.429': attribute type 2 has an invalid length. [ 57.602361][ T6690] FAULT_INJECTION: forcing a failure. [ 57.602361][ T6690] name failslab, interval 1, probability 0, space 0, times 0 [ 57.602406][ T6690] CPU: 0 UID: 0 PID: 6690 Comm: syz.1.435 Not tainted syzkaller #0 PREEMPT [ 57.602421][ T6690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 57.602428][ T6690] Call trace: [ 57.602432][ T6690] show_stack+0x2c/0x3c (C) [ 57.602451][ T6690] __dump_stack+0x30/0x40 [ 57.602463][ T6690] dump_stack_lvl+0xd8/0x12c [ 57.602474][ T6690] dump_stack+0x1c/0x28 [ 57.602485][ T6690] should_fail_ex+0x41c/0x590 [ 57.602498][ T6690] should_failslab+0xc4/0x120 [ 57.602510][ T6690] kmem_cache_alloc_noprof+0x94/0x5d4 [ 57.602523][ T6690] vm_area_dup+0x34/0x5c8 [ 57.602533][ T6690] __split_vma+0x1a8/0x83c [ 57.602545][ T6690] vms_gather_munmap_vmas+0x2ac/0x101c [ 57.602561][ T6690] do_vmi_align_munmap+0x218/0x364 [ 57.602577][ T6690] do_vmi_munmap+0x1d0/0x254 [ 57.602588][ T6690] __vm_munmap+0x20c/0x394 [ 57.602599][ T6690] __arm64_sys_munmap+0x6c/0x84 [ 57.602609][ T6690] invoke_syscall+0x98/0x244 [ 57.602620][ T6690] el0_svc_common+0xec/0x23c [ 57.602632][ T6690] do_el0_svc+0x4c/0x5c [ 57.602643][ T6690] el0_svc+0x64/0x260 [ 57.602654][ T6690] el0t_64_sync_handler+0x44/0x104 [ 57.602664][ T6690] el0t_64_sync+0x198/0x19c [ 57.713484][ T6706] FAULT_INJECTION: forcing a failure. [ 57.713484][ T6706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.717234][ T6706] CPU: 1 UID: 0 PID: 6706 Comm: syz.1.442 Not tainted syzkaller #0 PREEMPT [ 57.717255][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 57.717261][ T6706] Call trace: [ 57.717265][ T6706] show_stack+0x2c/0x3c (C) [ 57.717290][ T6706] __dump_stack+0x30/0x40 [ 57.717304][ T6706] dump_stack_lvl+0xd8/0x12c [ 57.717315][ T6706] dump_stack+0x1c/0x28 [ 57.717327][ T6706] should_fail_ex+0x41c/0x590 [ 57.717340][ T6706] should_fail+0x14/0x24 [ 57.717351][ T6706] should_fail_usercopy+0x20/0x30 [ 57.717363][ T6706] _copy_from_iter+0x188/0x1064 [ 57.717376][ T6706] write_pool_user+0x1bc/0x2b8 [ 57.717388][ T6706] random_ioctl+0x488/0x66c [ 57.717399][ T6706] __arm64_sys_ioctl+0x154/0x1cc [ 57.717411][ T6706] invoke_syscall+0x98/0x244 [ 57.717423][ T6706] el0_svc_common+0xec/0x23c [ 57.717435][ T6706] do_el0_svc+0x4c/0x5c [ 57.717446][ T6706] el0_svc+0x64/0x260 [ 57.717457][ T6706] el0t_64_sync_handler+0x44/0x104 [ 57.717467][ T6706] el0t_64_sync+0x198/0x19c [ 57.797897][ T6708] tipc: Started in network mode [ 57.798010][ T6708] tipc: Node identity 1000001, cluster identity 4369 [ 57.798054][ T6708] tipc: Node number set to 16777217 [ 57.967384][ T6709] loop3: detected capacity change from 0 to 512 [ 58.004827][ T6709] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 58.004871][ T6709] loop3: lost filesystem error report for type 5 error -117 [ 58.012634][ T6709] EXT4-fs (loop3): 2 truncates cleaned up [ 58.024828][ T6709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.036002][ T6709] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.443: bg 0: block 5: invalid block bitmap [ 58.044337][ T6712] overlayfs: failed to clone upperpath [ 58.056437][ T6715] loop0: detected capacity change from 0 to 4096 [ 58.058738][ T6715] EXT4-fs: Ignoring removed orlov option [ 58.069544][ T6715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.072997][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.108410][ T6720] lo speed is unknown, defaulting to 1000 [ 58.177519][ T4706] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.203076][ T6727] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.235669][ T6730] netlink: 25 bytes leftover after parsing attributes in process `syz.0.450'. [ 58.621517][ T6746] FAULT_INJECTION: forcing a failure. [ 58.621517][ T6746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.621560][ T6746] CPU: 0 UID: 0 PID: 6746 Comm: syz.4.458 Not tainted syzkaller #0 PREEMPT [ 58.621574][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 58.621581][ T6746] Call trace: [ 58.621585][ T6746] show_stack+0x2c/0x3c (C) [ 58.621605][ T6746] __dump_stack+0x30/0x40 [ 58.621618][ T6746] dump_stack_lvl+0xd8/0x12c [ 58.621629][ T6746] dump_stack+0x1c/0x28 [ 58.621641][ T6746] should_fail_ex+0x41c/0x590 [ 58.621653][ T6746] should_fail+0x14/0x24 [ 58.621665][ T6746] should_fail_usercopy+0x20/0x30 [ 58.621677][ T6746] _copy_to_iter+0x18c/0x10f8 [ 58.621690][ T6746] get_random_bytes_user+0x184/0x31c [ 58.621703][ T6746] __arm64_sys_getrandom+0x150/0x250 [ 58.621714][ T6746] invoke_syscall+0x98/0x244 [ 58.621726][ T6746] el0_svc_common+0xec/0x23c [ 58.621738][ T6746] do_el0_svc+0x4c/0x5c [ 58.621749][ T6746] el0_svc+0x64/0x260 [ 58.621762][ T6746] el0t_64_sync_handler+0x44/0x104 [ 58.621773][ T6746] el0t_64_sync+0x198/0x19c [ 59.011448][ T6763] tipc: Enabling of bearer rejected, failed to enable media [ 59.652414][ T6797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.659129][ T6797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.886829][ T6813] ip_tables: iptables: counters copy to user failed while replacing table [ 59.950828][ T6828] loop4: detected capacity change from 0 to 512 [ 60.005806][ T6828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.022827][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.174223][ T6857] FAULT_INJECTION: forcing a failure. [ 60.174223][ T6857] name failslab, interval 1, probability 0, space 0, times 0 [ 60.174262][ T6857] CPU: 0 UID: 0 PID: 6857 Comm: syz.4.480 Not tainted syzkaller #0 PREEMPT [ 60.174274][ T6857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 60.174280][ T6857] Call trace: [ 60.174283][ T6857] show_stack+0x2c/0x3c (C) [ 60.174302][ T6857] __dump_stack+0x30/0x40 [ 60.174315][ T6857] dump_stack_lvl+0xd8/0x12c [ 60.174326][ T6857] dump_stack+0x1c/0x28 [ 60.174337][ T6857] should_fail_ex+0x41c/0x590 [ 60.174350][ T6857] should_failslab+0xc4/0x120 [ 60.174363][ T6857] kmem_cache_alloc_noprof+0x94/0x5d4 [ 60.174377][ T6857] do_getname+0x48/0x234 [ 60.174385][ T6857] getname_flags+0x2c/0x3c [ 60.174393][ T6857] do_mq_open+0x144/0x62c [ 60.174405][ T6857] __arm64_sys_mq_open+0x170/0x1c8 [ 60.174416][ T6857] invoke_syscall+0x98/0x244 [ 60.174428][ T6857] el0_svc_common+0xec/0x23c [ 60.174440][ T6857] do_el0_svc+0x4c/0x5c [ 60.174451][ T6857] el0_svc+0x64/0x260 [ 60.174461][ T6857] el0t_64_sync_handler+0x44/0x104 [ 60.174471][ T6857] el0t_64_sync+0x198/0x19c [ 60.488542][ T6785] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.488589][ T6785] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 60.497742][ T4724] Bluetooth: to_multiplier 1 < 10 [ 60.531931][ T6874] FAULT_INJECTION: forcing a failure. [ 60.531931][ T6874] name failslab, interval 1, probability 0, space 0, times 0 [ 60.535059][ T6874] CPU: 1 UID: 0 PID: 6874 Comm: syz.0.483 Not tainted syzkaller #0 PREEMPT [ 60.535081][ T6874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 60.535089][ T6874] Call trace: [ 60.535093][ T6874] show_stack+0x2c/0x3c (C) [ 60.535117][ T6874] __dump_stack+0x30/0x40 [ 60.535133][ T6874] dump_stack_lvl+0xd8/0x12c [ 60.535145][ T6874] dump_stack+0x1c/0x28 [ 60.535156][ T6874] should_fail_ex+0x41c/0x590 [ 60.535169][ T6874] should_failslab+0xc4/0x120 [ 60.535182][ T6874] kmem_cache_alloc_noprof+0x94/0x5d4 [ 60.535196][ T6874] alloc_empty_file+0x6c/0x1cc [ 60.535205][ T6874] path_openat+0x78/0x18f4 [ 60.535215][ T6874] do_file_open+0x1c8/0x2e8 [ 60.535224][ T6874] do_sys_openat2+0x114/0x1e8 [ 60.535236][ T6874] do_sys_open+0xb0/0xe0 [ 60.535247][ T6874] __arm64_sys_openat+0xa8/0xc4 [ 60.535258][ T6874] invoke_syscall+0x98/0x244 [ 60.535270][ T6874] el0_svc_common+0xec/0x23c [ 60.535282][ T6874] do_el0_svc+0x4c/0x5c [ 60.535293][ T6874] el0_svc+0x64/0x260 [ 60.535304][ T6874] el0t_64_sync_handler+0x44/0x104 [ 60.535314][ T6874] el0t_64_sync+0x198/0x19c [ 61.090355][ T6785] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.090392][ T6785] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 61.119774][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 61.119821][ T30] audit: type=1326 audit(61.080:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.0.487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 61.119848][ T30] audit: type=1326 audit(61.080:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.0.487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 61.119870][ T30] audit: type=1326 audit(61.080:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.0.487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 61.119887][ T30] audit: type=1326 audit(61.080:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.0.487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 61.119902][ T30] audit: type=1326 audit(61.080:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.0.487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 61.119917][ T30] audit: type=1326 audit(61.080:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.0.487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=27 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 61.119931][ T30] audit: type=1326 audit(61.080:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.0.487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 61.119947][ T30] audit: type=1326 audit(61.080:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.0.487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 61.119961][ T30] audit: type=1326 audit(61.080:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.0.487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=47 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 61.119975][ T30] audit: type=1326 audit(61.080:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6895 comm="syz.0.487" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff91d782e8 code=0x7ffc0000 [ 61.288242][ T6785] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.288277][ T6785] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 61.558531][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.560728][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.619684][ T6785] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.619715][ T6785] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 61.757972][ T6785] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 61.758006][ T6785] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 62.402265][ T6935] xfrm0: entered allmulticast mode [ 62.484990][ T6954] FAULT_INJECTION: forcing a failure. [ 62.484990][ T6954] name failslab, interval 1, probability 0, space 0, times 0 [ 62.488543][ T6954] CPU: 1 UID: 0 PID: 6954 Comm: syz.3.503 Not tainted syzkaller #0 PREEMPT [ 62.488559][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 62.488565][ T6954] Call trace: [ 62.488573][ T6954] show_stack+0x2c/0x3c (C) [ 62.488598][ T6954] __dump_stack+0x30/0x40 [ 62.488612][ T6954] dump_stack_lvl+0xd8/0x12c [ 62.488623][ T6954] dump_stack+0x1c/0x28 [ 62.488635][ T6954] should_fail_ex+0x41c/0x590 [ 62.488648][ T6954] should_failslab+0xc4/0x120 [ 62.488660][ T6954] kmem_cache_alloc_noprof+0x94/0x5d4 [ 62.488673][ T6954] alloc_empty_file+0x6c/0x1cc [ 62.488682][ T6954] alloc_file+0x58/0x98 [ 62.488690][ T6954] alloc_file_pseudo+0xe0/0x198 [ 62.488698][ T6954] sock_alloc_file+0xb4/0x1ac [ 62.488708][ T6954] __sys_socketpair+0x348/0x528 [ 62.488717][ T6954] __arm64_sys_socketpair+0xa8/0xc4 [ 62.488726][ T6954] invoke_syscall+0x98/0x244 [ 62.488738][ T6954] el0_svc_common+0xec/0x23c [ 62.488749][ T6954] do_el0_svc+0x4c/0x5c [ 62.488760][ T6954] el0_svc+0x64/0x260 [ 62.488770][ T6954] el0t_64_sync_handler+0x44/0x104 [ 62.488780][ T6954] el0t_64_sync+0x198/0x19c [ 62.613875][ T6972] loop3: detected capacity change from 0 to 128 [ 62.639425][ T6972] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 62.921542][ T6980] tipc: Started in network mode [ 62.921581][ T6980] tipc: Node identity 4, cluster identity 4711 [ 62.921603][ T6980] tipc: Node number set to 4 [ 62.971114][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.973314][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.448621][ T6994] xt_hashlimit: size too large, truncated to 1048576 [ 63.481200][ T4708] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.551464][ T7001] loop0: detected capacity change from 0 to 8 [ 63.579278][ T7005] netlink: 40 bytes leftover after parsing attributes in process `syz.1.521'. [ 63.580611][ T7001] SQUASHFS error: Unable to read inode 0xa7 [ 63.670179][ T7012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 63.680195][ T7016] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 63.683053][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 63.683184][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 63.683255][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 63.685105][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 63.685172][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 63.685326][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 63.687146][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 63.687182][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 63.697147][ T7012] bond2: (slave bridge1): making interface the new active one [ 63.698015][ T7012] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 64.007518][ T7044] loop3: detected capacity change from 0 to 512 [ 64.136275][ T7044] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 64.192895][ T7044] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.199347][ T7044] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:521: comm syz.3.533: Block bitmap for bg 0 marked uninitialized [ 64.199819][ T7044] loop3: lost filesystem error report for type 5 error -117 [ 64.206230][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 64.206279][ C1] EXT4-fs (loop3): initial error at time 64: ext4_read_block_bitmap_nowait:521 [ 64.206305][ C1] EXT4-fs (loop3): last error at time 64: ext4_read_block_bitmap_nowait:521 [ 64.214839][ T7044] EXT4-fs (loop3): Remounting filesystem read-only [ 64.217682][ T7044] EXT4-fs (loop3): 1 orphan inode deleted [ 64.226273][ T7044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 64.429252][ T7049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.538'. [ 64.467645][ T7049] nbd: failed to add new device [ 64.519337][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.519390][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.524446][ T9] cfg80211: failed to load regulatory.db [ 64.707199][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.156366][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 65.228551][ T7076] tipc: Cannot configure node identity twice [ 65.384265][ T7083] binder: 7081:7083 tried to acquire reference to desc 0, got 1 instead [ 65.387282][ T10] binder: release 7081:7083 transaction 6 out, still active [ 65.592092][ T7088] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 65.810069][ T10] binder: undelivered TRANSACTION_COMPLETE [ 65.810211][ T10] binder: send failed reply for transaction 6, target dead [ 65.876760][ T7090] FAULT_INJECTION: forcing a failure. [ 65.876760][ T7090] name fail_futex, interval 1, probability 0, space 0, times 1 [ 65.880831][ T7090] CPU: 1 UID: 0 PID: 7090 Comm: syz.3.553 Not tainted syzkaller #0 PREEMPT [ 65.880849][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.880855][ T7090] Call trace: [ 65.880859][ T7090] show_stack+0x2c/0x3c (C) [ 65.880886][ T7090] __dump_stack+0x30/0x40 [ 65.880898][ T7090] dump_stack_lvl+0xd8/0x12c [ 65.880908][ T7090] dump_stack+0x1c/0x28 [ 65.880918][ T7090] should_fail_ex+0x41c/0x590 [ 65.880929][ T7090] should_fail+0x14/0x24 [ 65.880938][ T7090] get_futex_key+0x1ec/0x12b0 [ 65.880948][ T7090] futex_wake+0x10c/0x594 [ 65.880957][ T7090] do_futex+0x2c4/0x378 [ 65.880966][ T7090] mm_exit_exec_release+0x190/0x27c [ 65.880974][ T7090] exit_mm+0x54/0x264 [ 65.880984][ T7090] do_exit+0x524/0x1a74 [ 65.880994][ T7090] do_group_exit+0x198/0x238 [ 65.881004][ T7090] get_signal+0xfb0/0x1094 [ 65.881012][ T7090] arch_do_signal_or_restart+0x288/0x444c [ 65.881022][ T7090] exit_to_user_mode_loop+0x70/0x17c [ 65.881031][ T7090] el0_svc+0x18c/0x260 [ 65.881041][ T7090] el0t_64_sync_handler+0x44/0x104 [ 65.881050][ T7090] el0t_64_sync+0x198/0x19c [ 66.454926][ T40] rpcbind: server 127.0.0.1 not responding, timed out [ 66.476693][ T7113] 9p: Bad value for 'rfdno' [ 66.484613][ T7113] pim6reg9: entered allmulticast mode [ 66.500812][ T7115] Soft offlining pfn 0x139d08 at process virtual address 0x20000000 [ 66.503458][ T7115] Soft offlining pfn 0x2190ff at process virtual address 0x20001000 [ 66.503689][ T7115] Memory failure: 0x2190ff: unhandlable page. [ 66.745317][ T7116] lo speed is unknown, defaulting to 1000 [ 66.999141][ T7134] tipc: Started in network mode [ 66.999252][ T7134] tipc: Node identity 4, cluster identity 4711 [ 66.999296][ T7134] tipc: Node number set to 4 [ 68.279335][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.307199][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.456199][ T7168] FAULT_INJECTION: forcing a failure. [ 68.456199][ T7168] name fail_futex, interval 1, probability 0, space 0, times 0 [ 68.456238][ T7168] CPU: 0 UID: 0 PID: 7168 Comm: syz.3.576 Not tainted syzkaller #0 PREEMPT [ 68.456254][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.456261][ T7168] Call trace: [ 68.456265][ T7168] show_stack+0x2c/0x3c (C) [ 68.456287][ T7168] __dump_stack+0x30/0x40 [ 68.456300][ T7168] dump_stack_lvl+0xd8/0x12c [ 68.456311][ T7168] dump_stack+0x1c/0x28 [ 68.456323][ T7168] should_fail_ex+0x41c/0x590 [ 68.456335][ T7168] should_fail+0x14/0x24 [ 68.456346][ T7168] get_futex_key+0x1ec/0x12b0 [ 68.456357][ T7168] futex_wait_setup+0x58/0x674 [ 68.456368][ T7168] __futex_wait+0x108/0x25c [ 68.456379][ T7168] futex_wait+0x108/0x2c0 [ 68.456390][ T7168] do_futex+0x320/0x378 [ 68.456400][ T7168] __arm64_sys_futex+0x2e4/0x418 [ 68.456411][ T7168] invoke_syscall+0x98/0x244 [ 68.456423][ T7168] el0_svc_common+0xec/0x23c [ 68.456434][ T7168] do_el0_svc+0x4c/0x5c [ 68.456445][ T7168] el0_svc+0x64/0x260 [ 68.456456][ T7168] el0t_64_sync_handler+0x44/0x104 [ 68.456466][ T7168] el0t_64_sync+0x198/0x19c [ 69.021596][ T7182] loop4: detected capacity change from 0 to 1024 [ 69.049657][ T7182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.075780][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 69.078928][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.080933][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.088656][ T7189] FAULT_INJECTION: forcing a failure. [ 69.088656][ T7189] name failslab, interval 1, probability 0, space 0, times 0 [ 69.091488][ T7189] CPU: 0 UID: 0 PID: 7189 Comm: syz.3.583 Not tainted syzkaller #0 PREEMPT [ 69.091505][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.091511][ T7189] Call trace: [ 69.091515][ T7189] show_stack+0x2c/0x3c (C) [ 69.091538][ T7189] __dump_stack+0x30/0x40 [ 69.091553][ T7189] dump_stack_lvl+0xd8/0x12c [ 69.091569][ T7189] dump_stack+0x1c/0x28 [ 69.091581][ T7189] should_fail_ex+0x41c/0x590 [ 69.091594][ T7189] should_failslab+0xc4/0x120 [ 69.091608][ T7189] __kmalloc_cache_noprof+0x94/0x5fc [ 69.091616][ T7189] dev_ethtool+0x114/0x1a78 [ 69.091625][ T7189] dev_ioctl+0x284/0xc88 [ 69.091637][ T7189] sock_do_ioctl+0x198/0x254 [ 69.091650][ T7189] sock_ioctl+0x55c/0x7ec [ 69.091663][ T7189] __arm64_sys_ioctl+0x154/0x1cc [ 69.091676][ T7189] invoke_syscall+0x98/0x244 [ 69.091688][ T7189] el0_svc_common+0xec/0x23c [ 69.091700][ T7189] do_el0_svc+0x4c/0x5c [ 69.091711][ T7189] el0_svc+0x64/0x260 [ 69.091722][ T7189] el0t_64_sync_handler+0x44/0x104 [ 69.091732][ T7189] el0t_64_sync+0x198/0x19c [ 69.142109][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.212634][ T7203] netlink: 20 bytes leftover after parsing attributes in process `syz.4.588'. [ 69.238593][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.241163][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.244570][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.246617][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.357702][ T7225] netlink: 'syz.3.596': attribute type 1 has an invalid length. [ 69.729528][ T1509] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 69.758794][ T7264] netlink: 'syz.1.614': attribute type 2 has an invalid length. [ 69.880627][ T1509] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 69.882706][ T1509] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.882731][ T1509] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.909265][ T1509] as10x_usb: device has been detected [ 69.911596][ T1509] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 69.921754][ T1509] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 69.937476][ T1509] as10x_usb: error during firmware upload part1 [ 69.937780][ T1509] Registered device Abilis Systems DVB-Titan [ 70.094176][ T7286] team0: No ports can be present during mode change [ 70.146088][ T7290] netlink: 124 bytes leftover after parsing attributes in process `syz.4.622'. [ 70.870969][ T30] audit: type=1326 audit(70.835:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.635" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff977782e8 code=0x7ffc0000 [ 70.871005][ T30] audit: type=1326 audit(70.835:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.635" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff977782e8 code=0x7ffc0000 [ 70.871033][ T30] audit: type=1326 audit(70.835:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.635" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff977782e8 code=0x7ffc0000 [ 70.871053][ T30] audit: type=1326 audit(70.835:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.635" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff977782e8 code=0x7ffc0000 [ 70.871072][ T30] audit: type=1326 audit(70.835:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.635" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff977782e8 code=0x7ffc0000 [ 70.871093][ T30] audit: type=1326 audit(70.835:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.635" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff977782e8 code=0x7ffc0000 [ 70.871112][ T30] audit: type=1326 audit(70.835:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.635" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff977782e8 code=0x7ffc0000 [ 70.871130][ T30] audit: type=1326 audit(70.835:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.635" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff977782e8 code=0x7ffc0000 [ 70.871150][ T30] audit: type=1326 audit(70.835:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.635" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff977782e8 code=0x7ffc0000 [ 70.871168][ T30] audit: type=1326 audit(70.835:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7365 comm="syz.3.635" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffff977782e8 code=0x7ffc0000 [ 71.988717][ T866] usb 1-1: USB disconnect, device number 6 [ 72.008553][ T866] Unregistered device Abilis Systems DVB-Titan [ 72.009257][ T866] as10x_usb: device has been disconnected [ 72.196937][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.201381][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.608195][ T7435] xt_nfacct: accounting object `syz0' does not exist [ 72.647001][ T7441] batman_adv: batadv0: Adding interface: dummy0 [ 72.648902][ T7441] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.648941][ T7441] batman_adv: batadv0: Interface activated: dummy0 [ 72.664188][ T7441] batadv0: mtu less than device minimum [ 72.666147][ T7441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.667947][ T7441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.669638][ T7441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.671323][ T7441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.673055][ T7441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.674765][ T7441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.676452][ T7441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.678135][ T7441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 72.679826][ T7441] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 73.131739][ T7453] FAULT_INJECTION: forcing a failure. [ 73.131739][ T7453] name failslab, interval 1, probability 0, space 0, times 0 [ 73.131774][ T7453] CPU: 1 UID: 0 PID: 7453 Comm: syz.3.663 Not tainted syzkaller #0 PREEMPT [ 73.131789][ T7453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.131795][ T7453] Call trace: [ 73.131798][ T7453] show_stack+0x2c/0x3c (C) [ 73.131818][ T7453] __dump_stack+0x30/0x40 [ 73.131831][ T7453] dump_stack_lvl+0xd8/0x12c [ 73.131842][ T7453] dump_stack+0x1c/0x28 [ 73.131853][ T7453] should_fail_ex+0x41c/0x590 [ 73.131866][ T7453] should_failslab+0xc4/0x120 [ 73.131879][ T7453] __kmalloc_noprof+0x108/0x6c8 [ 73.131888][ T7453] landlock_init_hierarchy_log+0x158/0x534 [ 73.131898][ T7453] landlock_merge_ruleset+0x4f0/0x7b8 [ 73.131908][ T7453] __arm64_sys_landlock_restrict_self+0x280/0xf20 [ 73.131921][ T7453] invoke_syscall+0x98/0x244 [ 73.131934][ T7453] el0_svc_common+0xec/0x23c [ 73.131947][ T7453] do_el0_svc+0x4c/0x5c [ 73.131959][ T7453] el0_svc+0x64/0x260 [ 73.131973][ T7453] el0t_64_sync_handler+0x44/0x104 [ 73.131983][ T7453] el0t_64_sync+0x198/0x19c [ 73.230498][ T7459] loop3: detected capacity change from 0 to 512 [ 73.232688][ T7459] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.243719][ T7459] EXT4-fs (loop3): 1 truncate cleaned up [ 73.244214][ T7459] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.253068][ T7459] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.666: corrupted xattr entries [ 73.265943][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.724122][ T7468] syzkaller0: entered promiscuous mode [ 73.724158][ T7468] syzkaller0: entered allmulticast mode [ 73.894238][ T7483] bond1: option lacp_rate: invalid value (255) [ 73.897435][ T7483] bond1 (unregistering): Released all slaves [ 74.201243][ T7489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.678'. [ 75.539516][ T7526] loop4: detected capacity change from 0 to 1024 [ 75.582513][ T7526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.655563][ T7526] bridge_slave_0: left allmulticast mode [ 75.655620][ T7526] bridge_slave_0: left promiscuous mode [ 75.656736][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.727927][ T7548] FAULT_INJECTION: forcing a failure. [ 75.727927][ T7548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.727967][ T7548] CPU: 0 UID: 0 PID: 7548 Comm: syz.0.700 Not tainted syzkaller #0 PREEMPT [ 75.727980][ T7548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.727987][ T7548] Call trace: [ 75.727991][ T7548] show_stack+0x2c/0x3c (C) [ 75.728010][ T7548] __dump_stack+0x30/0x40 [ 75.728023][ T7548] dump_stack_lvl+0xd8/0x12c [ 75.728035][ T7548] dump_stack+0x1c/0x28 [ 75.728046][ T7548] should_fail_ex+0x41c/0x590 [ 75.728061][ T7548] should_fail+0x14/0x24 [ 75.728073][ T7548] should_fail_usercopy+0x20/0x30 [ 75.728085][ T7548] _inline_copy_from_user+0x3c/0x174 [ 75.728095][ T7548] sctp_getsockopt_active_key+0xd8/0x38c [ 75.728104][ T7548] sctp_getsockopt+0x35c/0x888 [ 75.728117][ T7548] sock_common_getsockopt+0xa8/0xc4 [ 75.728127][ T7548] do_sock_getsockopt+0x338/0x720 [ 75.728136][ T7548] __sys_getsockopt+0xfc/0x168 [ 75.728145][ T7548] __arm64_sys_getsockopt+0xc8/0xe4 [ 75.728155][ T7548] invoke_syscall+0x98/0x244 [ 75.728167][ T7548] el0_svc_common+0xec/0x23c [ 75.728178][ T7548] do_el0_svc+0x4c/0x5c [ 75.728189][ T7548] el0_svc+0x64/0x260 [ 75.728200][ T7548] el0t_64_sync_handler+0x44/0x104 [ 75.728209][ T7548] el0t_64_sync+0x198/0x19c [ 76.449699][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 76.520154][ T7583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.525378][ T7583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.541537][ T7585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.718'. [ 76.567576][ T7585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.718'. [ 76.692047][ T7593] loop3: detected capacity change from 0 to 512 [ 76.699119][ T7593] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.722: corrupted in-inode xattr: invalid ea_ino [ 76.699158][ T7593] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.699788][ T7593] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.722: couldn't read orphan inode 15 (err -117) [ 76.699811][ T7593] loop3: lost filesystem error report for type 5 error -117 [ 76.700337][ T7593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.877985][ T7602] syz.0.725: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 76.878090][ T7602] CPU: 0 UID: 0 PID: 7602 Comm: syz.0.725 Not tainted syzkaller #0 PREEMPT [ 76.878102][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.878107][ T7602] Call trace: [ 76.878110][ T7602] show_stack+0x2c/0x3c (C) [ 76.878130][ T7602] __dump_stack+0x30/0x40 [ 76.878142][ T7602] dump_stack_lvl+0xd8/0x12c [ 76.878154][ T7602] dump_stack+0x1c/0x28 [ 76.878165][ T7602] warn_alloc+0x1c4/0x1d8 [ 76.878178][ T7602] __vmalloc_node_range_noprof+0x110/0xe9c [ 76.878189][ T7602] xskq_create+0x178/0x278 [ 76.878202][ T7602] xsk_init_queue+0x9c/0xf8 [ 76.878214][ T7602] xsk_setsockopt+0x45c/0x6c4 [ 76.878225][ T7602] do_sock_setsockopt+0x1f0/0x330 [ 76.878236][ T7602] __sys_setsockopt+0x104/0x170 [ 76.878246][ T7602] __arm64_sys_setsockopt+0xc8/0xe4 [ 76.878255][ T7602] invoke_syscall+0x98/0x244 [ 76.878267][ T7602] el0_svc_common+0xec/0x23c [ 76.878279][ T7602] do_el0_svc+0x4c/0x5c [ 76.878290][ T7602] el0_svc+0x64/0x260 [ 76.878300][ T7602] el0t_64_sync_handler+0x44/0x104 [ 76.878309][ T7602] el0t_64_sync+0x198/0x19c [ 76.878323][ T7602] Mem-Info: [ 76.878332][ T7602] active_anon:84 inactive_anon:13080 isolated_anon:0 [ 76.878332][ T7602] active_file:3240 inactive_file:17340 isolated_file:0 [ 76.878332][ T7602] unevictable:768 dirty:86 writeback:11 [ 76.878332][ T7602] slab_reclaimable:9354 slab_unreclaimable:91463 [ 76.878332][ T7602] mapped:36464 shmem:6824 pagetables:1328 [ 76.878332][ T7602] sec_pagetables:0 bounce:0 [ 76.878332][ T7602] kernel_misc_reclaimable:0 [ 76.878332][ T7602] free:1451906 free_pcp:7125 free_cma:7616 [ 76.878358][ T7602] Node 0 active_anon:336kB inactive_anon:52320kB active_file:12960kB inactive_file:69360kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:145856kB dirty:344kB writeback:44kB shmem:27296kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9992kB pagetables:5312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 76.878383][ T7602] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 76.878415][ T7602] lowmem_reserve[]: 0 0 3650 3650 3650 [ 76.878459][ T7602] Node 0 Normal free:2729736kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:336kB inactive_anon:52320kB active_file:12960kB inactive_file:69360kB unevictable:3072kB writepending:388kB zspages:20kB present:5242880kB managed:3738144kB mlocked:0kB bounce:0kB free_pcp:28500kB local_pcp:16784kB free_cma:0kB [ 76.878491][ T7602] lowmem_reserve[]: 0 0 0 0 0 [ 76.878534][ T7602] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 76.878665][ T7602] Node 0 Normal: 125*4kB (ME) 986*8kB (M) 601*16kB (UME) 389*32kB (UME) 303*64kB (UM) 144*128kB (UME) 24*256kB (UME) 20*512kB (UM) 13*1024kB (UME) 3*2048kB (M) 641*4096kB (UME) = 2729652kB [ 76.879845][ T7602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.879863][ T7602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 76.879889][ T7602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 76.879907][ T7602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 76.879921][ T7602] 27401 total pagecache pages [ 76.879930][ T7602] 2 pages in swap cache [ 76.880967][ T7602] Free swap = 124980kB [ 76.880989][ T7602] Total swap = 124996kB [ 76.881004][ T7602] 2097152 pages RAM [ 76.881019][ T7602] 0 pages HighMem/MovableOnly [ 76.881033][ T7602] 392568 pages reserved [ 76.881045][ T7602] 8192 pages cma reserved [ 76.881057][ T7602] 519 pages hwpoisoned [ 77.123473][ T7618] 9p: Bad value for 'wfdno' [ 77.123864][ T7618] FAULT_INJECTION: forcing a failure. [ 77.123864][ T7618] name failslab, interval 1, probability 0, space 0, times 0 [ 77.123880][ T7618] CPU: 1 UID: 0 PID: 7618 Comm: syz.1.732 Not tainted syzkaller #0 PREEMPT [ 77.123891][ T7618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.123897][ T7618] Call trace: [ 77.123900][ T7618] show_stack+0x2c/0x3c (C) [ 77.123920][ T7618] __dump_stack+0x30/0x40 [ 77.123933][ T7618] dump_stack_lvl+0xd8/0x12c [ 77.123945][ T7618] dump_stack+0x1c/0x28 [ 77.123956][ T7618] should_fail_ex+0x41c/0x590 [ 77.123969][ T7618] should_failslab+0xc4/0x120 [ 77.123982][ T7618] kmem_cache_alloc_noprof+0x94/0x5d4 [ 77.123995][ T7618] security_file_alloc+0x3c/0x300 [ 77.124006][ T7618] init_file+0x90/0x28c [ 77.124014][ T7618] alloc_empty_file+0x80/0x1cc [ 77.124023][ T7618] alloc_file+0x58/0x98 [ 77.124030][ T7618] alloc_file_pseudo+0xe0/0x198 [ 77.124039][ T7618] __arm64_sys_memfd_secret+0x160/0x370 [ 77.124049][ T7618] invoke_syscall+0x98/0x244 [ 77.124061][ T7618] el0_svc_common+0xec/0x23c [ 77.124072][ T7618] do_el0_svc+0x4c/0x5c [ 77.124084][ T7618] el0_svc+0x64/0x260 [ 77.124094][ T7618] el0t_64_sync_handler+0x44/0x104 [ 77.124104][ T7618] el0t_64_sync+0x198/0x19c [ 77.175221][ T7622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.177880][ T7622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.241076][ T866] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 77.593993][ T7634] netlink: 64 bytes leftover after parsing attributes in process `syz.4.739'. [ 77.596334][ T866] usb 1-1: Using ep0 maxpacket: 16 [ 77.598862][ T866] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 77.599670][ T7634] syzkaller1: entered promiscuous mode [ 77.599687][ T7634] syzkaller1: entered allmulticast mode [ 77.605801][ T866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.608896][ T866] usb 1-1: Product: syz [ 77.610086][ T866] usb 1-1: Manufacturer: syz [ 77.611255][ T866] usb 1-1: SerialNumber: syz [ 77.616780][ T866] usb 1-1: config 0 descriptor?? [ 77.644399][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.673256][ T7637] loop3: detected capacity change from 0 to 512 [ 77.674819][ T7637] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 77.692637][ T7637] EXT4-fs (loop3): 1 truncate cleaned up [ 77.695644][ T7637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.729918][ T4708] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.223749][ T7665] input: syz0 as /devices/virtual/input/input6 [ 78.283118][ T7672] warning: `syz.1.755' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.359775][ T866] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 78.366876][ T866] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.369352][ T866] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 78.372396][ T866] usb 1-1: media controller created [ 78.376211][ T866] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.449656][ T7674] net_ratelimit: 10 callbacks suppressed [ 78.449692][ T7674] Set syz1 is full, maxelem 6117 reached [ 78.487700][ T7686] loop1: detected capacity change from 0 to 2048 [ 78.559307][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.559497][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.577379][ T7686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.591150][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.058344][ T866] zl10353_read_register: readreg error (reg=127, ret==0) [ 79.058400][ T866] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 79.058424][ T866] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 79.069082][ T7605] dtv5100: wlen = 0, aborting. [ 79.087021][ T1509] usb 1-1: USB disconnect, device number 7 [ 79.115447][ T1509] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 80.025278][ T7748] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 80.084281][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.084483][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.198386][ T7765] FAULT_INJECTION: forcing a failure. [ 80.198386][ T7765] name failslab, interval 1, probability 0, space 0, times 0 [ 80.198430][ T7765] CPU: 1 UID: 0 PID: 7765 Comm: syz.4.789 Not tainted syzkaller #0 PREEMPT [ 80.198446][ T7765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 80.198453][ T7765] Call trace: [ 80.198457][ T7765] show_stack+0x2c/0x3c (C) [ 80.198478][ T7765] __dump_stack+0x30/0x40 [ 80.198494][ T7765] dump_stack_lvl+0xd8/0x12c [ 80.198506][ T7765] dump_stack+0x1c/0x28 [ 80.198518][ T7765] should_fail_ex+0x41c/0x590 [ 80.198531][ T7765] should_failslab+0xc4/0x120 [ 80.198545][ T7765] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 80.198559][ T7765] __d_alloc+0x50/0x690 [ 80.198574][ T7765] d_alloc_pseudo+0x2c/0xd8 [ 80.198583][ T7765] alloc_path_pseudo+0xe8/0x1d4 [ 80.198593][ T7765] alloc_file_pseudo+0xb0/0x198 [ 80.198602][ T7765] sock_alloc_file+0xb4/0x1ac [ 80.198611][ T7765] __sys_socket+0x90/0xec [ 80.198620][ T7765] __arm64_sys_socket+0x84/0x9c [ 80.198629][ T7765] invoke_syscall+0x98/0x244 [ 80.198642][ T7765] el0_svc_common+0xec/0x23c [ 80.198653][ T7765] do_el0_svc+0x4c/0x5c [ 80.198665][ T7765] el0_svc+0x64/0x260 [ 80.198676][ T7765] el0t_64_sync_handler+0x44/0x104 [ 80.198686][ T7765] el0t_64_sync+0x198/0x19c [ 80.357158][ T7782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.797'. [ 80.416953][ T7788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.417159][ T7788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.488080][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.490644][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.549565][ T30] kauditd_printk_skb: 207 callbacks suppressed [ 80.549610][ T30] audit: type=1326 audit(79.926:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.2.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef782e8 code=0x7ffc0000 [ 80.550404][ T30] audit: type=1326 audit(79.926:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.2.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffffaef782e8 code=0x7ffc0000 [ 80.550714][ T30] audit: type=1326 audit(79.926:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.2.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef782e8 code=0x7ffc0000 [ 80.550906][ T30] audit: type=1326 audit(79.926:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.2.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffaef782e8 code=0x7ffc0000 [ 80.551022][ T30] audit: type=1326 audit(79.926:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.2.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef782e8 code=0x7ffc0000 [ 80.551095][ T30] audit: type=1326 audit(79.926:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.2.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef782e8 code=0x7ffc0000 [ 80.551213][ T30] audit: type=1326 audit(79.936:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.2.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffaef782e8 code=0x7ffc0000 [ 80.551297][ T30] audit: type=1326 audit(79.936:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.2.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef782e8 code=0x7ffc0000 [ 80.551368][ T30] audit: type=1326 audit(79.936:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.2.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaef782e8 code=0x7ffc0000 [ 80.551477][ T30] audit: type=1326 audit(79.936:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7796 comm="syz.2.804" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffaef782e8 code=0x7ffc0000 [ 80.765950][ T7817] loop1: detected capacity change from 0 to 2048 [ 80.806620][ T7817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.825640][ T7824] netlink: 36 bytes leftover after parsing attributes in process `syz.2.814'. [ 80.832944][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.884132][ T7830] netlink: 124 bytes leftover after parsing attributes in process `syz.1.817'. [ 81.547776][ T866] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 81.730865][ T7864] lo speed is unknown, defaulting to 1000 [ 81.753862][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.756759][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.871687][ T866] usb 1-1: Using ep0 maxpacket: 8 [ 82.078924][ T866] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 82.082973][ T866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.086912][ T866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.093414][ T866] usb 1-1: config 0 descriptor?? [ 82.182372][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.187219][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.331740][ T866] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 82.441068][ T7886] netlink: 'syz.4.840': attribute type 11 has an invalid length. [ 82.455081][ T7886] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 82.476257][ T7889] [ 82.476772][ T7889] ============================= [ 82.477817][ T7889] WARNING: suspicious RCU usage [ 82.478676][ T7889] syzkaller #0 Not tainted [ 82.479509][ T7889] ----------------------------- [ 82.480425][ T7889] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 82.481900][ T7889] [ 82.481900][ T7889] other info that might help us debug this: [ 82.481900][ T7889] [ 82.483767][ T7889] [ 82.483767][ T7889] rcu_scheduler_active = 2, debug_locks = 1 [ 82.485322][ T7889] locks held by syz.4.841/7889: 1, last CPU#1: [ 82.486888][ T7889] #0: ffff0000d4e94410 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x70/0x9c [ 82.488982][ T7889] [ 82.488982][ T7889] stack backtrace: [ 82.490091][ T7889] CPU: 1 UID: 0 PID: 7889 Comm: syz.4.841 Not tainted syzkaller #0 PREEMPT [ 82.491768][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 82.493775][ T7889] Call trace: [ 82.494441][ T7889] show_stack+0x2c/0x3c (C) [ 82.495370][ T7889] __dump_stack+0x30/0x40 [ 82.496271][ T7889] dump_stack_lvl+0xd8/0x12c [ 82.497190][ T7889] dump_stack+0x1c/0x28 [ 82.498027][ T7889] lockdep_rcu_suspicious+0x168/0x26c [ 82.499098][ T7889] xfrm_send_migrate_state+0x6b0/0x958 [ 82.500198][ T7889] xfrm_do_migrate_state+0x1114/0x1728 [ 82.501260][ T7889] xfrm_user_rcv_msg+0x4e0/0x950 [ 82.502245][ T7889] netlink_rcv_skb+0x238/0x414 [ 82.503215][ T7889] xfrm_netlink_rcv+0x80/0x9c [ 82.504163][ T7889] netlink_unicast+0x600/0x7f8 [ 82.505127][ T7889] netlink_sendmsg+0x648/0x948 [ 82.506124][ T7889] __sock_sendmsg+0xc8/0x17c [ 82.507078][ T7889] ____sys_sendmsg+0x3d0/0x6c8 [ 82.508007][ T7889] ___sys_sendmsg+0x198/0x224 [ 82.508901][ T7889] __sys_sendmsg+0x158/0x204 [ 82.509796][ T7889] __arm64_sys_sendmsg+0x88/0x9c [ 82.510760][ T7889] invoke_syscall+0x98/0x244 [ 82.511681][ T7889] el0_svc_common+0xec/0x23c [ 82.512621][ T7889] do_el0_svc+0x4c/0x5c [ 82.513475][ T7889] el0_svc+0x64/0x260 [ 82.514264][ T7889] el0t_64_sync_handler+0x44/0x104 [ 82.515271][ T7889] el0t_64_sync+0x198/0x19c [ 82.779089][ T26] usb 1-1: USB disconnect, device number 8