last executing test programs: 1.886436643s ago: executing program 0 (id=274): socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000400)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@oldalloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f00000002c0)=""/17, &(0x7f00000000c0)=0x11) 1.433866988s ago: executing program 1 (id=282): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[], 0x14}}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590241c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada33cc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 1.326481809s ago: executing program 1 (id=288): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x44180e0, 0xb, 0xffff, 0xe7, 0x2, 0x0, 0x0, 0x8, 0x80000001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x7599, {0x0, 0x2f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) dup3(r0, r2, 0x6700000000000000) 1.273384242s ago: executing program 1 (id=290): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000c00)='1', 0x1) 1.22442564s ago: executing program 1 (id=293): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x26, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 965.365555ms ago: executing program 0 (id=304): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 939.344844ms ago: executing program 0 (id=307): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 894.752575ms ago: executing program 0 (id=309): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/vkms/mydev/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000640), 0x0) 825.108633ms ago: executing program 0 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls\x00', 0x1, 0x0) write(r0, &(0x7f0000000780)='1', 0x1) 796.041777ms ago: executing program 0 (id=314): socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000400)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@oldalloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f00000002c0)=""/17, &(0x7f00000000c0)=0x11) 504.559552ms ago: executing program 2 (id=322): gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) setuid(0xee01) 415.316409ms ago: executing program 4 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/bmControls\x00', 0x1, 0x0) write(r0, &(0x7f0000000780)='1', 0x1) 392.144768ms ago: executing program 3 (id=327): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaa00000180c200000388e545"], 0x0) 339.585062ms ago: executing program 2 (id=328): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 338.846141ms ago: executing program 3 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) write(r0, 0x0, 0x0) 304.79319ms ago: executing program 4 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0xba01, 0x0, 0x6000000}, 0x0) 304.333211ms ago: executing program 1 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000200)='0', 0x1) 233.333405ms ago: executing program 3 (id=332): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/vkms/mydev/enabled\x00', 0x1, 0x0) write(r0, &(0x7f0000000640), 0x0) 232.917948ms ago: executing program 1 (id=333): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x3f0a, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0x80000001, @empty, 0x5}}, 0x10001fc, 0x7, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 223.095805ms ago: executing program 2 (id=334): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 188.952165ms ago: executing program 4 (id=335): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 138.750588ms ago: executing program 3 (id=336): syz_emit_vhci(0x0, 0x0) 138.332848ms ago: executing program 4 (id=337): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e68403", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xffff}}}}}}}, 0x0) 137.759944ms ago: executing program 2 (id=338): bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0500000001000000a003000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 133.0846ms ago: executing program 4 (id=339): gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) setuid(0xee01) 91.659492ms ago: executing program 3 (id=340): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaa00000180c200000388e545"], 0x0) 91.080799ms ago: executing program 2 (id=341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2], 0x34}}, 0x0) 90.518753ms ago: executing program 3 (id=342): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x26, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 52.616768ms ago: executing program 2 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) write(r0, &(0x7f0000000c00), 0x0) 0s ago: executing program 4 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.81' (ED25519) to the list of known hosts. [ 28.235392][ T4698] cgroup: Unknown subsys name 'net' [ 28.376970][ T4698] cgroup: Unknown subsys name 'cpuset' [ 28.379173][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.586681][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.985355][ T4724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.985820][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.986102][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.986776][ T4726] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.986975][ T4726] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.987313][ T4726] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.987549][ T4726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.995231][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.995647][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.995818][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.996181][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.996400][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.997011][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.998281][ T4718] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.998641][ T4718] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.999090][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.000398][ T4718] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.000770][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.001233][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.001532][ T4718] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.003142][ T4718] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.004554][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.004701][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.004888][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.005344][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.405047][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.405534][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.405625][ T4710] bridge_slave_0: entered allmulticast mode [ 30.406160][ T4710] bridge_slave_0: entered promiscuous mode [ 30.421915][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.421985][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.422069][ T4710] bridge_slave_1: entered allmulticast mode [ 30.422554][ T4710] bridge_slave_1: entered promiscuous mode [ 30.436838][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.438269][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.439783][ T4715] bridge_slave_0: entered allmulticast mode [ 30.441454][ T4715] bridge_slave_0: entered promiscuous mode [ 30.446492][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.448359][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.449870][ T4715] bridge_slave_1: entered allmulticast mode [ 30.451492][ T4715] bridge_slave_1: entered promiscuous mode [ 30.471846][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.473061][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.482717][ T4710] team0: Port device team_slave_0 added [ 30.498640][ T4710] team0: Port device team_slave_1 added [ 30.512664][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.513068][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.513193][ T4717] bridge_slave_0: entered allmulticast mode [ 30.514176][ T4717] bridge_slave_0: entered promiscuous mode [ 30.516040][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.517283][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.530663][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.530768][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.530837][ T4717] bridge_slave_1: entered allmulticast mode [ 30.531340][ T4717] bridge_slave_1: entered promiscuous mode [ 30.538061][ T4715] team0: Port device team_slave_0 added [ 30.545189][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.546707][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.551552][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.566493][ T4715] team0: Port device team_slave_1 added [ 30.575296][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.575331][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.575346][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.589260][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.590765][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.600524][ T4710] hsr_slave_0: entered promiscuous mode [ 30.601015][ T4710] hsr_slave_1: entered promiscuous mode [ 30.624537][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.624576][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.624596][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.625286][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.625294][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.625309][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.654359][ T4715] hsr_slave_0: entered promiscuous mode [ 30.656175][ T4715] hsr_slave_1: entered promiscuous mode [ 30.657809][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.659138][ T4715] Cannot create hsr debugfs directory [ 30.666716][ T4717] team0: Port device team_slave_0 added [ 30.667762][ T4717] team0: Port device team_slave_1 added [ 30.676965][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.677077][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.677088][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.696229][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.696336][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.696447][ T4716] bridge_slave_0: entered allmulticast mode [ 30.696917][ T4716] bridge_slave_0: entered promiscuous mode [ 30.702254][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.702282][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.702298][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.715093][ T4717] hsr_slave_0: entered promiscuous mode [ 30.715449][ T4717] hsr_slave_1: entered promiscuous mode [ 30.715681][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 30.715692][ T4717] Cannot create hsr debugfs directory [ 30.720177][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.721742][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.723301][ T4716] bridge_slave_1: entered allmulticast mode [ 30.725256][ T4716] bridge_slave_1: entered promiscuous mode [ 30.737990][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.739542][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.741037][ T4711] bridge_slave_0: entered allmulticast mode [ 30.742867][ T4711] bridge_slave_0: entered promiscuous mode [ 30.755897][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.755999][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.756082][ T4711] bridge_slave_1: entered allmulticast mode [ 30.756565][ T4711] bridge_slave_1: entered promiscuous mode [ 30.764882][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.768342][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.778190][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.779357][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.792137][ T4711] team0: Port device team_slave_0 added [ 30.807081][ T4711] team0: Port device team_slave_1 added [ 30.826312][ T4716] team0: Port device team_slave_0 added [ 30.827438][ T4716] team0: Port device team_slave_1 added [ 30.849688][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.849727][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.849763][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.850905][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.850916][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.850934][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.871627][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.871667][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.871704][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.872471][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.872480][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.872496][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.912077][ T4716] hsr_slave_0: entered promiscuous mode [ 30.914102][ T4716] hsr_slave_1: entered promiscuous mode [ 30.914349][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.914361][ T4716] Cannot create hsr debugfs directory [ 30.918794][ T4711] hsr_slave_0: entered promiscuous mode [ 30.919581][ T4711] hsr_slave_1: entered promiscuous mode [ 30.919801][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.919813][ T4711] Cannot create hsr debugfs directory [ 30.942288][ T4710] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.946995][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.949057][ T4710] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.952181][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.954498][ T4710] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.957521][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.959892][ T4710] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.962494][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.021345][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.021422][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.021599][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.021648][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.038536][ T4717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.041302][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.043263][ T4717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.046891][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.054551][ T4717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.056046][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.057870][ T4717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.060428][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.089870][ T4715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.092528][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.093305][ T4715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.096605][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.105457][ T4715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.108003][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.109912][ T4715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.113057][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.124800][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.124857][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.124953][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.124991][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.134588][ T4711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.137589][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.144152][ T4711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.147143][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.147993][ T4711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.150005][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.151912][ T4711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.156006][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.167675][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.176176][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.176237][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.176329][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.176359][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.187548][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.189537][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.191075][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.192949][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.196382][ T1185] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.197964][ T1185] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.209920][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.219374][ T759] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.219443][ T759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.222479][ T4716] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.225254][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.235119][ T4716] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.238100][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.239467][ T759] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.239495][ T759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.253202][ T4716] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.256224][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.256712][ T4716] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.259253][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.296967][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.317002][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.321575][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.341481][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.346040][ T759] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.346270][ T759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.350070][ T3017] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.350128][ T3017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.366860][ T759] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.366918][ T759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.367532][ T759] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.367564][ T759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.376268][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.397218][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.400927][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.416975][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.430458][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.430515][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.440269][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.447739][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.447807][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.474206][ T759] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.474269][ T759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.474899][ T759] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.474919][ T759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.492609][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.496470][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.504958][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.591904][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.632956][ T4710] veth0_vlan: entered promiscuous mode [ 31.648437][ T4710] veth1_vlan: entered promiscuous mode [ 31.677323][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.688263][ T4710] veth0_macvtap: entered promiscuous mode [ 31.698517][ T4710] veth1_macvtap: entered promiscuous mode [ 31.720060][ T4717] veth0_vlan: entered promiscuous mode [ 31.726391][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.731633][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.737895][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.752826][ T1057] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.753239][ T1057] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.753260][ T1057] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.753277][ T1057] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.754921][ T4717] veth1_vlan: entered promiscuous mode [ 31.789240][ T4715] veth0_vlan: entered promiscuous mode [ 31.798899][ T4715] veth1_vlan: entered promiscuous mode [ 31.805670][ T4717] veth0_macvtap: entered promiscuous mode [ 31.811106][ T4717] veth1_macvtap: entered promiscuous mode [ 31.825655][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.837213][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.856188][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.866301][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.872865][ T4715] veth0_macvtap: entered promiscuous mode [ 31.874693][ T3332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.874707][ T3332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.885004][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.887828][ T4715] veth1_macvtap: entered promiscuous mode [ 31.890016][ T1057] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890247][ T1057] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.890342][ T1057] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.926902][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.926952][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.933202][ T4716] veth0_vlan: entered promiscuous mode [ 31.941740][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.946437][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.950472][ T3332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.950542][ T3332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.950572][ T3332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.950596][ T3332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.962281][ T4716] veth1_vlan: entered promiscuous mode [ 31.988199][ T4710] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.995058][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.995099][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.030077][ T4711] veth0_vlan: entered promiscuous mode [ 32.033954][ T4719] Bluetooth: hci0: command tx timeout [ 32.034065][ T4719] Bluetooth: hci4: command tx timeout [ 32.034134][ T4719] Bluetooth: hci1: command tx timeout [ 32.037397][ T4723] Bluetooth: hci2: command tx timeout [ 32.043047][ T4716] veth0_macvtap: entered promiscuous mode [ 32.054010][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.054051][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.055080][ T4716] veth1_macvtap: entered promiscuous mode [ 32.075819][ T4711] veth1_vlan: entered promiscuous mode [ 32.088694][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.098957][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.113919][ T4723] Bluetooth: hci3: command tx timeout [ 32.116140][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.116185][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.121897][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.121962][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.121984][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.122003][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.136449][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.136501][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.161102][ T4711] veth0_macvtap: entered promiscuous mode [ 32.166808][ T4711] veth1_macvtap: entered promiscuous mode [ 32.210309][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.211840][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.235221][ T1057] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.237944][ T1057] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.238222][ T1057] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.238339][ T1057] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.342048][ T3332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.342091][ T3332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.399465][ T3332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.399509][ T3332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.442793][ T3332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.442839][ T3332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.495175][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.497886][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.508825][ T4905] syz.1.8 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 32.508887][ T4905] CPU: 1 UID: 0 PID: 4905 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT [ 32.508898][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 32.508905][ T4905] Call trace: [ 32.508908][ T4905] show_stack+0x2c/0x3c (C) [ 32.508930][ T4905] __dump_stack+0x30/0x40 [ 32.508945][ T4905] dump_stack_lvl+0xd8/0x12c [ 32.508957][ T4905] dump_stack+0x1c/0x28 [ 32.508969][ T4905] dump_header+0xbc/0x3f0 [ 32.508977][ T4905] oom_kill_process+0x248/0x8a0 [ 32.508989][ T4905] out_of_memory+0xd24/0x1064 [ 32.508999][ T4905] mem_cgroup_out_of_memory+0xe8/0x170 [ 32.509010][ T4905] try_charge_memcg+0x8ec/0xc64 [ 32.509019][ T4905] obj_cgroup_charge_pages+0x30/0xb0 [ 32.509032][ T4905] __memcg_slab_post_alloc_hook+0x4a0/0x8cc [ 32.509046][ T4905] kmem_cache_alloc_noprof+0x328/0x5d8 [ 32.509056][ T4905] prepare_creds+0x34/0x7d0 [ 32.509070][ T4905] __sys_setuid+0x8c/0x35c [ 32.509081][ T4905] __arm64_sys_setuid+0x40/0x50 [ 32.509091][ T4905] invoke_syscall+0x98/0x244 [ 32.509104][ T4905] el0_svc_common+0xec/0x23c [ 32.509116][ T4905] do_el0_svc+0x4c/0x5c [ 32.509127][ T4905] el0_svc+0x64/0x260 [ 32.509141][ T4905] el0t_64_sync_handler+0x48/0x148 [ 32.509152][ T4905] el0t_64_sync+0x198/0x19c [ 32.509165][ T4905] memory: usage 0kB, limit 0kB, failcnt 19 [ 32.509171][ T4905] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 32.509177][ T4905] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 32.509183][ T4905] Memory cgroup stats for /syz1/test: [ 32.509262][ T4905] cache 0 [ 32.509266][ T4905] rss 0 [ 32.509270][ T4905] rss_huge 0 [ 32.509273][ T4905] shmem 0 [ 32.509276][ T4905] mapped_file 0 [ 32.509280][ T4905] dirty 0 [ 32.509283][ T4905] writeback 0 [ 32.509287][ T4905] workingset_refault_anon 0 [ 32.509291][ T4905] workingset_refault_file 0 [ 32.509294][ T4905] swap 0 [ 32.509298][ T4905] swapcached 0 [ 32.509301][ T4905] pgpgin 0 [ 32.509304][ T4905] pgpgout 0 [ 32.509308][ T4905] pgfault 0 [ 32.509311][ T4905] pgmajfault 0 [ 32.509314][ T4905] inactive_anon 0 [ 32.509318][ T4905] active_anon 0 [ 32.509322][ T4905] inactive_file 0 [ 32.509325][ T4905] active_file 0 [ 32.509328][ T4905] unevictable 0 [ 32.509332][ T4905] hierarchical_memory_limit 0 [ 32.509336][ T4905] hierarchical_memsw_limit 9223372036854771712 [ 32.509340][ T4905] total_cache 0 [ 32.509343][ T4905] total_rss 0 [ 32.509346][ T4905] total_rss_huge 0 [ 32.509350][ T4905] total_shmem 0 [ 32.509353][ T4905] total_mapped_file 0 [ 32.509357][ T4905] total_dirty 0 [ 32.509360][ T4905] total_writeback 0 [ 32.509363][ T4905] total_workingset_refault_anon 0 [ 32.509367][ T4905] total_workingset_refault_file 0 [ 32.509371][ T4905] total_swap 0 [ 32.509374][ T4905] total_swapcached 0 [ 32.509378][ T4905] total_pgpgin 0 [ 32.509382][ T4905] total_pgpgout 0 [ 32.509385][ T4905] total_pgfault 0 [ 32.509389][ T4905] total_pgmajfault 0 [ 32.509392][ T4905] total_inactive_anon 0 [ 32.509395][ T4905] total_active_anon 0 [ 32.509399][ T4905] total_inactive_file 0 [ 32.509403][ T4905] total_active_file 0 [ 32.509406][ T4905] total_unevictable 0 [ 32.509410][ T4905] anon_cost 0 [ 32.509413][ T4905] file_cost 0 [ 32.509417][ T4905] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.8,pid=4904,uid=0 [ 32.509876][ T4905] Memory cgroup out of memory: Killed process 4904 (syz.1.8) total-vm:102180kB, anon-rss:1380kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 32.576878][ T4907] nvmet: adding nsid 1 to subsystem subsys1 [ 32.605508][ T4911] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 32.608342][ T4911] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 32.698602][ T4918] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 32.902003][ T4935] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 32.908478][ T4935] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 32.917950][ T4933] syz.0.20 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 32.918005][ T4933] CPU: 0 UID: 0 PID: 4933 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT [ 32.918019][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 32.918026][ T4933] Call trace: [ 32.918030][ T4933] show_stack+0x2c/0x3c (C) [ 32.918052][ T4933] __dump_stack+0x30/0x40 [ 32.918065][ T4933] dump_stack_lvl+0xd8/0x12c [ 32.918077][ T4933] dump_stack+0x1c/0x28 [ 32.918088][ T4933] dump_header+0xbc/0x3f0 [ 32.918096][ T4933] oom_kill_process+0x248/0x8a0 [ 32.918108][ T4933] out_of_memory+0xd24/0x1064 [ 32.918117][ T4933] mem_cgroup_out_of_memory+0xe8/0x170 [ 32.918128][ T4933] try_charge_memcg+0x8ec/0xc64 [ 32.918136][ T4933] obj_cgroup_charge_pages+0x30/0xb0 [ 32.918148][ T4933] __memcg_slab_post_alloc_hook+0x4a0/0x8cc [ 32.918161][ T4933] kmem_cache_alloc_noprof+0x328/0x5d8 [ 32.918172][ T4933] prepare_creds+0x34/0x7d0 [ 32.918184][ T4933] __sys_setuid+0x8c/0x35c [ 32.918194][ T4933] __arm64_sys_setuid+0x40/0x50 [ 32.918205][ T4933] invoke_syscall+0x98/0x244 [ 32.918217][ T4933] el0_svc_common+0xec/0x23c [ 32.918229][ T4933] do_el0_svc+0x4c/0x5c [ 32.918241][ T4933] el0_svc+0x64/0x260 [ 32.918254][ T4933] el0t_64_sync_handler+0x48/0x148 [ 32.918266][ T4933] el0t_64_sync+0x198/0x19c [ 32.918283][ T4933] memory: usage 0kB, limit 0kB, failcnt 19 [ 32.918294][ T4933] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 32.918305][ T4933] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 32.918314][ T4933] Memory cgroup stats for /syz0/test: [ 32.918382][ T4933] cache 0 [ 32.918391][ T4933] rss 0 [ 32.918398][ T4933] rss_huge 0 [ 32.918405][ T4933] shmem 0 [ 32.918412][ T4933] mapped_file 0 [ 32.918419][ T4933] dirty 0 [ 32.918427][ T4933] writeback 0 [ 32.918433][ T4933] workingset_refault_anon 0 [ 32.918440][ T4933] workingset_refault_file 0 [ 32.918448][ T4933] swap 0 [ 32.918455][ T4933] swapcached 0 [ 32.918462][ T4933] pgpgin 0 [ 32.918488][ T4933] pgpgout 0 [ 32.918496][ T4933] pgfault 0 [ 32.918503][ T4933] pgmajfault 0 [ 32.918510][ T4933] inactive_anon 0 [ 32.918517][ T4933] active_anon 0 [ 32.918524][ T4933] inactive_file 0 [ 32.918530][ T4933] active_file 0 [ 32.918537][ T4933] unevictable 0 [ 32.918545][ T4933] hierarchical_memory_limit 0 [ 32.918552][ T4933] hierarchical_memsw_limit 9223372036854771712 [ 32.918560][ T4933] total_cache 0 [ 32.918567][ T4933] total_rss 0 [ 32.918574][ T4933] total_rss_huge 0 [ 32.918581][ T4933] total_shmem 0 [ 32.918588][ T4933] total_mapped_file 0 [ 32.918595][ T4933] total_dirty 0 [ 32.918602][ T4933] total_writeback 0 [ 32.918610][ T4933] total_workingset_refault_anon 0 [ 32.918622][ T4933] total_workingset_refault_file 0 [ 32.918629][ T4933] total_swap 0 [ 32.918636][ T4933] total_swapcached 0 [ 32.918643][ T4933] total_pgpgin 0 [ 32.918650][ T4933] total_pgpgout 0 [ 32.918658][ T4933] total_pgfault 0 [ 32.918664][ T4933] total_pgmajfault 0 [ 32.918672][ T4933] total_inactive_anon 0 [ 32.918679][ T4933] total_active_anon 0 [ 32.918685][ T4933] total_inactive_file 0 [ 32.918692][ T4933] total_active_file 0 [ 32.918699][ T4933] total_unevictable 0 [ 32.918707][ T4933] anon_cost 0 [ 32.918713][ T4933] file_cost 0 [ 32.918721][ T4933] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.20,pid=4930,uid=0 [ 32.918825][ T4933] Memory cgroup out of memory: Killed process 4930 (syz.0.20) total-vm:102180kB, anon-rss:1380kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 32.928658][ T4934] loop4: detected capacity change from 0 to 2048 [ 32.978147][ T4934] loop4: p2 p3 < > p4 < p5 > [ 32.978165][ T4934] loop4: partition table partially beyond EOD, truncated [ 33.001836][ T4934] loop4: p3 start 4225 is beyond EOD, truncated [ 33.136679][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 33.181224][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 33.182642][ T4950] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 33.194635][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 33.337487][ T4958] syz.4.31 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 33.340061][ T4958] CPU: 0 UID: 0 PID: 4958 Comm: syz.4.31 Not tainted syzkaller #0 PREEMPT [ 33.340080][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 33.340086][ T4958] Call trace: [ 33.340090][ T4958] show_stack+0x2c/0x3c (C) [ 33.340113][ T4958] __dump_stack+0x30/0x40 [ 33.340127][ T4958] dump_stack_lvl+0xd8/0x12c [ 33.340139][ T4958] dump_stack+0x1c/0x28 [ 33.340151][ T4958] dump_header+0xbc/0x3f0 [ 33.340160][ T4958] oom_kill_process+0x248/0x8a0 [ 33.340171][ T4958] out_of_memory+0xd24/0x1064 [ 33.340180][ T4958] mem_cgroup_out_of_memory+0xe8/0x170 [ 33.340191][ T4958] try_charge_memcg+0x8ec/0xc64 [ 33.340200][ T4958] obj_cgroup_charge_pages+0x30/0xb0 [ 33.340213][ T4958] __memcg_slab_post_alloc_hook+0x4a0/0x8cc [ 33.340226][ T4958] kmem_cache_alloc_noprof+0x328/0x5d8 [ 33.340236][ T4958] prepare_creds+0x34/0x7d0 [ 33.340248][ T4958] __sys_setuid+0x8c/0x35c [ 33.340258][ T4958] __arm64_sys_setuid+0x40/0x50 [ 33.340269][ T4958] invoke_syscall+0x98/0x244 [ 33.340281][ T4958] el0_svc_common+0xec/0x23c [ 33.340293][ T4958] do_el0_svc+0x4c/0x5c [ 33.340305][ T4958] el0_svc+0x64/0x260 [ 33.340318][ T4958] el0t_64_sync_handler+0x48/0x148 [ 33.340330][ T4958] el0t_64_sync+0x198/0x19c [ 33.365355][ T4958] memory: usage 0kB, limit 0kB, failcnt 19 [ 33.366650][ T4958] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 33.368114][ T4958] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 33.369391][ T4958] Memory cgroup stats for /syz4/test: [ 33.369543][ T4958] cache 0 [ 33.371387][ T4958] rss 0 [ 33.371427][ T4958] rss_huge 0 [ 33.371706][ T4958] shmem 0 [ 33.371721][ T4958] mapped_file 0 [ 33.371735][ T4958] dirty 0 [ 33.371747][ T4958] writeback 0 [ 33.371758][ T4958] workingset_refault_anon 0 [ 33.371769][ T4958] workingset_refault_file 0 [ 33.371778][ T4958] swap 0 [ 33.371786][ T4958] swapcached 0 [ 33.371793][ T4958] pgpgin 0 [ 33.371801][ T4958] pgpgout 0 [ 33.371809][ T4958] pgfault 0 [ 33.371816][ T4958] pgmajfault 0 [ 33.371823][ T4958] inactive_anon 0 [ 33.371830][ T4958] active_anon 0 [ 33.371837][ T4958] inactive_file 0 [ 33.371844][ T4958] active_file 0 [ 33.371851][ T4958] unevictable 0 [ 33.371858][ T4958] hierarchical_memory_limit 0 [ 33.371866][ T4958] hierarchical_memsw_limit 9223372036854771712 [ 33.371873][ T4958] total_cache 0 [ 33.371880][ T4958] total_rss 0 [ 33.371887][ T4958] total_rss_huge 0 [ 33.371895][ T4958] total_shmem 0 [ 33.371902][ T4958] total_mapped_file 0 [ 33.371909][ T4958] total_dirty 0 [ 33.371916][ T4958] total_writeback 0 [ 33.371923][ T4958] total_workingset_refault_anon 0 [ 33.371931][ T4958] total_workingset_refault_file 0 [ 33.371994][ T4958] total_swap 0 [ 33.372003][ T4958] total_swapcached 0 [ 33.372012][ T4958] total_pgpgin 0 [ 33.372020][ T4958] total_pgpgout 0 [ 33.372028][ T4958] total_pgfault 0 [ 33.372037][ T4958] total_pgmajfault 0 [ 33.372045][ T4958] total_inactive_anon 0 [ 33.372053][ T4958] total_active_anon 0 [ 33.372060][ T4958] total_inactive_file 0 [ 33.372067][ T4958] total_active_file 0 [ 33.372074][ T4958] total_unevictable 0 [ 33.372081][ T4958] anon_cost 0 [ 33.372089][ T4958] file_cost 0 [ 33.372097][ T4958] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.31,pid=4957,uid=0 [ 33.372323][ T4958] Memory cgroup out of memory: Killed process 4957 (syz.4.31) total-vm:102180kB, anon-rss:1376kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 33.440102][ T4962] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 33.440162][ T4962] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 33.449242][ T4964] loop4: detected capacity change from 0 to 2048 [ 33.521908][ T4964] loop4: p2 p3 < > p4 < p5 > [ 33.521954][ T4964] loop4: partition table partially beyond EOD, truncated [ 33.522946][ T4964] loop4: p3 start 4225 is beyond EOD, truncated [ 33.576888][ T4344] loop4: p2 p3 < > p4 < p5 > [ 33.577020][ T4344] loop4: partition table partially beyond EOD, truncated [ 33.577703][ T4344] loop4: p3 start 4225 is beyond EOD, truncated [ 33.655452][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 33.686156][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 33.695984][ T4700] udevd[4700]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 33.714363][ T9] atkbd serio0: keyboard reset failed on [ 33.739371][ T4979] syzkaller0: entered promiscuous mode [ 33.739417][ T4979] syzkaller0: entered allmulticast mode [ 33.766589][ T4980] udevd[4980]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 33.769637][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 33.775250][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 33.842203][ T4912] Set syz1 is full, maxelem 65536 reached [ 34.114373][ T4712] Bluetooth: hci1: command tx timeout [ 34.116129][ T4712] Bluetooth: hci0: command tx timeout [ 34.117311][ T4723] Bluetooth: hci2: command tx timeout [ 34.195701][ T4723] Bluetooth: hci3: command tx timeout [ 34.288351][ T4997] loop0: detected capacity change from 0 to 2048 [ 34.378106][ T4997] loop0: p2 p3 < > p4 < p5 > [ 34.378142][ T4997] loop0: partition table partially beyond EOD, truncated [ 34.384755][ T4997] loop0: p3 start 4225 is beyond EOD, truncated [ 34.517809][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 34.520859][ T5019] misc userio: The device must be registered before sending interrupts [ 34.592365][ T5022] loop4: detected capacity change from 0 to 512 [ 34.614626][ T5022] EXT4-fs (loop4): 1 truncate cleaned up [ 34.626393][ T5022] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.716913][ T5029] syz.1.62 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 34.716981][ T5029] CPU: 1 UID: 0 PID: 5029 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT [ 34.716994][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 34.717000][ T5029] Call trace: [ 34.717003][ T5029] show_stack+0x2c/0x3c (C) [ 34.717025][ T5029] __dump_stack+0x30/0x40 [ 34.717037][ T5029] dump_stack_lvl+0xd8/0x12c [ 34.717049][ T5029] dump_stack+0x1c/0x28 [ 34.717061][ T5029] dump_header+0xbc/0x3f0 [ 34.717069][ T5029] oom_kill_process+0x248/0x8a0 [ 34.717081][ T5029] out_of_memory+0xd24/0x1064 [ 34.717091][ T5029] mem_cgroup_out_of_memory+0xe8/0x170 [ 34.717102][ T5029] try_charge_memcg+0x8ec/0xc64 [ 34.717110][ T5029] charge_memcg+0x17c/0x280 [ 34.717118][ T5029] __mem_cgroup_charge+0x38/0x98 [ 34.717126][ T5029] folio_prealloc+0x78/0x1b0 [ 34.717136][ T5029] do_pte_missing+0x1bcc/0x2a24 [ 34.717146][ T5029] handle_mm_fault+0x15a4/0x253c [ 34.717154][ T5029] __get_user_pages+0x8ec/0x2134 [ 34.717165][ T5029] faultin_page_range+0x1f0/0x6d8 [ 34.717175][ T5029] madvise_do_behavior+0x558/0x7c0 [ 34.717189][ T5029] do_madvise+0x28c/0x2f0 [ 34.717200][ T5029] __arm64_sys_madvise+0xac/0xc8 [ 34.717213][ T5029] invoke_syscall+0x98/0x244 [ 34.717226][ T5029] el0_svc_common+0xec/0x23c [ 34.717238][ T5029] do_el0_svc+0x4c/0x5c [ 34.717249][ T5029] el0_svc+0x64/0x260 [ 34.717263][ T5029] el0t_64_sync_handler+0x48/0x148 [ 34.717275][ T5029] el0t_64_sync+0x198/0x19c [ 34.735501][ T5029] memory: usage 0kB, limit 0kB, failcnt 55 [ 34.735522][ T5029] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 34.735530][ T5029] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 34.735536][ T5029] Memory cgroup stats for /syz1/test: [ 34.735627][ T5029] cache 0 [ 34.735639][ T5029] rss 0 [ 34.735643][ T5029] rss_huge 0 [ 34.735647][ T5029] shmem 0 [ 34.735652][ T5029] mapped_file 0 [ 34.735656][ T5029] dirty 0 [ 34.735660][ T5029] writeback 0 [ 34.735664][ T5029] workingset_refault_anon 0 [ 34.735668][ T5029] workingset_refault_file 0 [ 34.735673][ T5029] swap 0 [ 34.735676][ T5029] swapcached 0 [ 34.735680][ T5029] pgpgin 0 [ 34.735684][ T5029] pgpgout 0 [ 34.735688][ T5029] pgfault 1 [ 34.735691][ T5029] pgmajfault 0 [ 34.735694][ T5029] inactive_anon 0 [ 34.735698][ T5029] active_anon 0 [ 34.735702][ T5029] inactive_file 0 [ 34.735705][ T5029] active_file 0 [ 34.735708][ T5029] unevictable 0 [ 34.735712][ T5029] hierarchical_memory_limit 0 [ 34.735716][ T5029] hierarchical_memsw_limit 9223372036854771712 [ 34.735720][ T5029] total_cache 0 [ 34.735724][ T5029] total_rss 0 [ 34.735728][ T5029] total_rss_huge 0 [ 34.735732][ T5029] total_shmem 0 [ 34.735735][ T5029] total_mapped_file 0 [ 34.735739][ T5029] total_dirty 0 [ 34.735743][ T5029] total_writeback 0 [ 34.735746][ T5029] total_workingset_refault_anon 0 [ 34.735750][ T5029] total_workingset_refault_file 0 [ 34.735754][ T5029] total_swap 0 [ 34.735757][ T5029] total_swapcached 0 [ 34.735761][ T5029] total_pgpgin 0 [ 34.735765][ T5029] total_pgpgout 0 [ 34.735768][ T5029] total_pgfault 1 [ 34.735772][ T5029] total_pgmajfault 0 [ 34.735776][ T5029] total_inactive_anon 0 [ 34.735780][ T5029] total_active_anon 0 [ 34.735783][ T5029] total_inactive_file 0 [ 34.735787][ T5029] total_active_file 0 [ 34.735791][ T5029] total_unevictable 0 [ 34.735794][ T5029] anon_cost 0 [ 34.735798][ T5029] file_cost 0 [ 34.735802][ T5029] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.62,pid=5027,uid=0 [ 34.736505][ T5029] Memory cgroup out of memory: Killed process 5027 (syz.1.62) total-vm:102372kB, anon-rss:1388kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 34.869462][ T5037] loop3: detected capacity change from 0 to 2048 [ 34.911139][ T5041] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 34.911211][ T5041] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 34.931877][ T5037] loop3: p2 p3 < > p4 < p5 > [ 34.931916][ T5037] loop3: partition table partially beyond EOD, truncated [ 34.932893][ T5037] loop3: p3 start 4225 is beyond EOD, truncated [ 35.046532][ T5050] Zero length message leads to an empty skb [ 35.140799][ T5055] Bluetooth: ISO socket layer initialized [ 35.562833][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.741983][ T5062] syzkaller0: entered promiscuous mode [ 35.742024][ T5062] syzkaller0: entered allmulticast mode [ 35.818202][ T5078] syz.0.80 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 35.818259][ T5078] CPU: 1 UID: 0 PID: 5078 Comm: syz.0.80 Not tainted syzkaller #0 PREEMPT [ 35.818273][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.818280][ T5078] Call trace: [ 35.818284][ T5078] show_stack+0x2c/0x3c (C) [ 35.818306][ T5078] __dump_stack+0x30/0x40 [ 35.818320][ T5078] dump_stack_lvl+0xd8/0x12c [ 35.818332][ T5078] dump_stack+0x1c/0x28 [ 35.818344][ T5078] dump_header+0xbc/0x3f0 [ 35.818352][ T5078] oom_kill_process+0x248/0x8a0 [ 35.818363][ T5078] out_of_memory+0xd24/0x1064 [ 35.818373][ T5078] mem_cgroup_out_of_memory+0xe8/0x170 [ 35.818384][ T5078] try_charge_memcg+0x8ec/0xc64 [ 35.818392][ T5078] charge_memcg+0x17c/0x280 [ 35.818400][ T5078] __mem_cgroup_charge+0x38/0x98 [ 35.818408][ T5078] folio_prealloc+0x78/0x1b0 [ 35.818417][ T5078] do_pte_missing+0x1bcc/0x2a24 [ 35.818427][ T5078] handle_mm_fault+0x15a4/0x253c [ 35.818435][ T5078] __get_user_pages+0x8ec/0x2134 [ 35.818447][ T5078] faultin_page_range+0x1f0/0x6d8 [ 35.818457][ T5078] madvise_do_behavior+0x558/0x7c0 [ 35.818470][ T5078] do_madvise+0x28c/0x2f0 [ 35.818483][ T5078] __arm64_sys_madvise+0xac/0xc8 [ 35.818495][ T5078] invoke_syscall+0x98/0x244 [ 35.818508][ T5078] el0_svc_common+0xec/0x23c [ 35.818519][ T5078] do_el0_svc+0x4c/0x5c [ 35.818531][ T5078] el0_svc+0x64/0x260 [ 35.818544][ T5078] el0t_64_sync_handler+0x48/0x148 [ 35.818556][ T5078] el0t_64_sync+0x198/0x19c [ 35.827835][ T5080] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 35.827871][ T5080] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 35.836372][ T5078] memory: usage 0kB, limit 0kB, failcnt 55 [ 35.836391][ T5078] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 35.836400][ T5078] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 35.836406][ T5078] Memory cgroup stats for /syz0/test: [ 35.836469][ T5078] cache 0 [ 35.836474][ T5078] rss 0 [ 35.836478][ T5078] rss_huge 0 [ 35.836483][ T5078] shmem 0 [ 35.836487][ T5078] mapped_file 0 [ 35.836491][ T5078] dirty 0 [ 35.836494][ T5078] writeback 0 [ 35.836498][ T5078] workingset_refault_anon 0 [ 35.836502][ T5078] workingset_refault_file 0 [ 35.836505][ T5078] swap 0 [ 35.836509][ T5078] swapcached 0 [ 35.836512][ T5078] pgpgin 0 [ 35.836515][ T5078] pgpgout 0 [ 35.836519][ T5078] pgfault 1 [ 35.836522][ T5078] pgmajfault 0 [ 35.836526][ T5078] inactive_anon 0 [ 35.836529][ T5078] active_anon 0 [ 35.836533][ T5078] inactive_file 0 [ 35.836536][ T5078] active_file 0 [ 35.836540][ T5078] unevictable 0 [ 35.836543][ T5078] hierarchical_memory_limit 0 [ 35.836547][ T5078] hierarchical_memsw_limit 9223372036854771712 [ 35.836551][ T5078] total_cache 0 [ 35.836554][ T5078] total_rss 0 [ 35.836558][ T5078] total_rss_huge 0 [ 35.836561][ T5078] total_shmem 0 [ 35.836565][ T5078] total_mapped_file 0 [ 35.836568][ T5078] total_dirty 0 [ 35.836572][ T5078] total_writeback 0 [ 35.836575][ T5078] total_workingset_refault_anon 0 [ 35.836579][ T5078] total_workingset_refault_file 0 [ 35.836583][ T5078] total_swap 0 [ 35.836586][ T5078] total_swapcached 0 [ 35.836590][ T5078] total_pgpgin 0 [ 35.836593][ T5078] total_pgpgout 0 [ 35.836596][ T5078] total_pgfault 1 [ 35.836600][ T5078] total_pgmajfault 0 [ 35.836603][ T5078] total_inactive_anon 0 [ 35.836607][ T5078] total_active_anon 0 [ 35.836610][ T5078] total_inactive_file 0 [ 35.836614][ T5078] total_active_file 0 [ 35.836618][ T5078] total_unevictable 0 [ 35.836621][ T5078] anon_cost 0 [ 35.836624][ T5078] file_cost 0 [ 35.836635][ T5078] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.80,pid=5077,uid=0 [ 35.836712][ T5078] Memory cgroup out of memory: Killed process 5077 (syz.0.80) total-vm:102180kB, anon-rss:1380kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 35.865781][ T5083] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 35.865826][ T5083] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 36.048653][ T5097] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 36.048723][ T5097] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 36.168161][ T5110] syzkaller0: entered promiscuous mode [ 36.168206][ T5110] syzkaller0: entered allmulticast mode [ 36.194399][ T4723] Bluetooth: hci2: command tx timeout [ 36.194453][ T4723] Bluetooth: hci0: command tx timeout [ 36.194490][ T4723] Bluetooth: hci1: command tx timeout [ 36.217483][ T5116] misc userio: No port type given on /dev/userio [ 36.219065][ T5116] misc userio: The device must be registered before sending interrupts [ 36.274877][ T4719] Bluetooth: hci3: command tx timeout [ 36.274977][ T4723] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 36.275024][ T4723] Bluetooth: hci4: Injecting HCI hardware error event [ 36.275565][ T4723] Bluetooth: hci4: hardware error 0x00 [ 36.411903][ T5122] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 36.411976][ T5122] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 36.718056][ T5147] fuse: Bad value for 'group_id' [ 36.718099][ T5147] fuse: Bad value for 'group_id' [ 36.760396][ T5149] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 36.764130][ T5149] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 36.959333][ T5165] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 36.959399][ T5165] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 36.977395][ T5170] syzkaller0: entered promiscuous mode [ 36.977451][ T5170] syzkaller0: entered allmulticast mode [ 37.018717][ T5174] fuse: Bad value for 'group_id' [ 37.018760][ T5174] fuse: Bad value for 'group_id' [ 37.086874][ T5180] misc userio: No port type given on /dev/userio [ 37.087074][ T5180] misc userio: The device must be registered before sending interrupts [ 37.151312][ T5187] loop1: detected capacity change from 0 to 512 [ 37.168251][ T5187] EXT4-fs (loop1): 1 truncate cleaned up [ 37.168784][ T5187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.274200][ T5201] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 37.277099][ T5203] fuse: Bad value for 'group_id' [ 37.278250][ T5201] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 37.281410][ T5203] fuse: Bad value for 'group_id' [ 37.522983][ T5235] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 37.525915][ T5235] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 37.608151][ T5247] ip_tables: iptables: counters copy to user failed while replacing table [ 37.865493][ T5270] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 37.868575][ T5270] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 37.918977][ T5280] ip_tables: iptables: counters copy to user failed while replacing table [ 38.042561][ T5286] syzkaller0: entered promiscuous mode [ 38.042614][ T5286] syzkaller0: entered allmulticast mode [ 38.080178][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.109009][ T5290] syz.0.173 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 38.109059][ T5290] CPU: 1 UID: 0 PID: 5290 Comm: syz.0.173 Not tainted syzkaller #0 PREEMPT [ 38.109071][ T5290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 38.109077][ T5290] Call trace: [ 38.109081][ T5290] show_stack+0x2c/0x3c (C) [ 38.109101][ T5290] __dump_stack+0x30/0x40 [ 38.109113][ T5290] dump_stack_lvl+0xd8/0x12c [ 38.109125][ T5290] dump_stack+0x1c/0x28 [ 38.109137][ T5290] dump_header+0xbc/0x3f0 [ 38.109145][ T5290] oom_kill_process+0x248/0x8a0 [ 38.109156][ T5290] out_of_memory+0xd24/0x1064 [ 38.109166][ T5290] mem_cgroup_out_of_memory+0xe8/0x170 [ 38.109177][ T5290] try_charge_memcg+0x8ec/0xc64 [ 38.109185][ T5290] obj_cgroup_charge_pages+0x30/0xb0 [ 38.109198][ T5290] __memcg_slab_post_alloc_hook+0x4a0/0x8cc [ 38.109211][ T5290] kmem_cache_alloc_noprof+0x328/0x5d8 [ 38.109221][ T5290] prepare_creds+0x34/0x7d0 [ 38.109233][ T5290] __sys_setuid+0x8c/0x35c [ 38.109244][ T5290] __arm64_sys_setuid+0x40/0x50 [ 38.109254][ T5290] invoke_syscall+0x98/0x244 [ 38.109266][ T5290] el0_svc_common+0xec/0x23c [ 38.109278][ T5290] do_el0_svc+0x4c/0x5c [ 38.109290][ T5290] el0_svc+0x64/0x260 [ 38.109304][ T5290] el0t_64_sync_handler+0x48/0x148 [ 38.109316][ T5290] el0t_64_sync+0x198/0x19c [ 38.109328][ T5290] memory: usage 0kB, limit 0kB, failcnt 91 [ 38.109333][ T5290] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 38.109340][ T5290] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 38.109345][ T5290] Memory cgroup stats for /syz0/test: [ 38.109405][ T5290] cache 0 [ 38.109409][ T5290] rss 0 [ 38.109413][ T5290] rss_huge 0 [ 38.109416][ T5290] shmem 0 [ 38.109419][ T5290] mapped_file 0 [ 38.109423][ T5290] dirty 0 [ 38.109427][ T5290] writeback 0 [ 38.109430][ T5290] workingset_refault_anon 0 [ 38.109434][ T5290] workingset_refault_file 0 [ 38.109437][ T5290] swap 0 [ 38.109441][ T5290] swapcached 0 [ 38.109444][ T5290] pgpgin 0 [ 38.109448][ T5290] pgpgout 0 [ 38.109451][ T5290] pgfault 5 [ 38.109455][ T5290] pgmajfault 0 [ 38.109459][ T5290] inactive_anon 0 [ 38.109462][ T5290] active_anon 0 [ 38.109467][ T5290] inactive_file 0 [ 38.109470][ T5290] active_file 0 [ 38.109474][ T5290] unevictable 0 [ 38.109477][ T5290] hierarchical_memory_limit 0 [ 38.109481][ T5290] hierarchical_memsw_limit 9223372036854771712 [ 38.109486][ T5290] total_cache 0 [ 38.109489][ T5290] total_rss 0 [ 38.109493][ T5290] total_rss_huge 0 [ 38.109496][ T5290] total_shmem 0 [ 38.109500][ T5290] total_mapped_file 0 [ 38.109504][ T5290] total_dirty 0 [ 38.109507][ T5290] total_writeback 0 [ 38.109510][ T5290] total_workingset_refault_anon 0 [ 38.109514][ T5290] total_workingset_refault_file 0 [ 38.109518][ T5290] total_swap 0 [ 38.109522][ T5290] total_swapcached 0 [ 38.109526][ T5290] total_pgpgin 0 [ 38.109529][ T5290] total_pgpgout 0 [ 38.109533][ T5290] total_pgfault 5 [ 38.109536][ T5290] total_pgmajfault 0 [ 38.109540][ T5290] total_inactive_anon 0 [ 38.109543][ T5290] total_active_anon 0 [ 38.109547][ T5290] total_inactive_file 0 [ 38.109551][ T5290] total_active_file 0 [ 38.109554][ T5290] total_unevictable 0 [ 38.109558][ T5290] anon_cost 0 [ 38.109561][ T5290] file_cost 0 [ 38.109566][ T5290] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.173,pid=5289,uid=0 [ 38.109643][ T5290] Memory cgroup out of memory: Killed process 5289 (syz.0.173) total-vm:102180kB, anon-rss:1380kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 38.274070][ T4712] Bluetooth: hci1: command tx timeout [ 38.274123][ T4712] Bluetooth: hci0: command tx timeout [ 38.274155][ T4712] Bluetooth: hci2: command tx timeout [ 38.278156][ T5306] ip_tables: iptables: counters copy to user failed while replacing table [ 38.353718][ T4719] Bluetooth: hci3: command tx timeout [ 38.389843][ T5319] syzkaller0: entered promiscuous mode [ 38.389894][ T5319] syzkaller0: entered allmulticast mode [ 38.594201][ T4723] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 38.708101][ T5361] geneve2: entered promiscuous mode [ 38.708149][ T5361] geneve2: entered allmulticast mode [ 38.709735][ T5361] batman_adv: batadv0: Adding interface: geneve2 [ 38.709766][ T5361] batman_adv: batadv0: Interface activated: geneve2 [ 38.809379][ T5365] syzkaller0: entered promiscuous mode [ 38.809425][ T5365] syzkaller0: entered allmulticast mode [ 39.308837][ T4817] IPVS: starting estimator thread 0... [ 39.403545][ T5393] IPVS: using max 60 ests per chain, 144000 per kthread [ 39.566375][ T5412] vimc link validate: Sensor A:src:640x480 (0x42474752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 39.566455][ T5412] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 39.621280][ T4817] IPVS: starting estimator thread 0... [ 39.682460][ T5430] misc userio: Invalid payload size [ 39.684919][ T5430] misc userio: No port type given on /dev/userio [ 39.689734][ T5430] misc userio: The device must be registered before sending interrupts [ 39.703470][ T5422] IPVS: using max 60 ests per chain, 144000 per kthread [ 39.768098][ T5437] geneve2: entered promiscuous mode [ 39.768142][ T5437] geneve2: entered allmulticast mode [ 39.769006][ T5437] batman_adv: batadv0: Adding interface: geneve2 [ 39.769018][ T5437] batman_adv: batadv0: Interface activated: geneve2 [ 39.780067][ T5444] syzkaller0: entered promiscuous mode [ 39.780114][ T5444] syzkaller0: entered allmulticast mode [ 39.860678][ T5454] loop4: detected capacity change from 0 to 512 [ 39.879465][ T5454] EXT4-fs (loop4): 1 truncate cleaned up [ 39.880004][ T5454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.980469][ T5468] misc userio: Invalid payload size [ 39.981971][ T5468] misc userio: No port type given on /dev/userio [ 39.983289][ T5468] misc userio: The device must be registered before sending interrupts [ 40.065126][ T5478] batman_adv: batadv0: Adding interface: dummy0 [ 40.065164][ T5478] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.065182][ T5478] batman_adv: batadv0: Interface activated: dummy0 [ 40.099152][ T5478] batadv0: mtu less than device minimum [ 40.101123][ T5478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.102914][ T5478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.104638][ T5478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.106295][ T5478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.107949][ T5478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.109583][ T5478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.111224][ T5478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.112865][ T5478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.114554][ T5478] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 40.143470][ T5478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.146692][ T5478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.167339][ T5478] geneve2: entered promiscuous mode [ 40.172304][ T5478] geneve2: entered allmulticast mode [ 40.180099][ T5478] batman_adv: batadv0: Adding interface: geneve2 [ 40.180147][ T5478] batman_adv: batadv0: Interface activated: geneve2 [ 40.268786][ T5493] syzkaller0: entered promiscuous mode [ 40.268829][ T5493] syzkaller0: entered allmulticast mode [ 40.326708][ T5504] loop0: detected capacity change from 0 to 512 [ 40.329269][ T5504] EXT4-fs: Ignoring removed oldalloc option [ 40.334918][ T5504] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 40.348578][ T5504] EXT4-fs (loop0): 1 truncate cleaned up [ 40.349243][ T5504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.410502][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.411090][ T5505] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.498985][ T5505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.505091][ T5505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.567538][ T5531] fuse: Unknown parameter '0x0000000000000004' [ 40.737138][ T1057] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.737212][ T1057] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.737236][ T1057] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.737258][ T1057] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.758816][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.767503][ T5536] gadgetfs: bound to dummy_udc driver [ 40.905174][ T5555] fuse: Unknown parameter '0x0000000000000004' [ 41.125266][ T5580] gadgetfs: bound to dummy_udc driver [ 41.212838][ T4710] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.414943][ T5610] gadgetfs: bound to dummy_udc driver [ 41.433314][ T5614] loop0: detected capacity change from 0 to 512 [ 41.438129][ T5614] EXT4-fs: Ignoring removed oldalloc option [ 41.442344][ T5614] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 41.452929][ T5614] EXT4-fs (loop0): 1 truncate cleaned up [ 41.453693][ T5614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.777245][ T5632] syz.2.322 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 41.780100][ T5632] CPU: 1 UID: 0 PID: 5632 Comm: syz.2.322 Not tainted syzkaller #0 PREEMPT [ 41.780125][ T5632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 41.780131][ T5632] Call trace: [ 41.780135][ T5632] show_stack+0x2c/0x3c (C) [ 41.780161][ T5632] __dump_stack+0x30/0x40 [ 41.780175][ T5632] dump_stack_lvl+0xd8/0x12c [ 41.780187][ T5632] dump_stack+0x1c/0x28 [ 41.780199][ T5632] dump_header+0xbc/0x3f0 [ 41.780207][ T5632] oom_kill_process+0x248/0x8a0 [ 41.780219][ T5632] out_of_memory+0xd24/0x1064 [ 41.780229][ T5632] mem_cgroup_out_of_memory+0xe8/0x170 [ 41.780240][ T5632] try_charge_memcg+0x8ec/0xc64 [ 41.780248][ T5632] obj_cgroup_charge_pages+0x30/0xb0 [ 41.780261][ T5632] __memcg_slab_post_alloc_hook+0x4a0/0x8cc [ 41.780275][ T5632] kmem_cache_alloc_noprof+0x328/0x5d8 [ 41.780285][ T5632] prepare_creds+0x34/0x7d0 [ 41.780298][ T5632] __sys_setuid+0x8c/0x35c [ 41.780308][ T5632] __arm64_sys_setuid+0x40/0x50 [ 41.780318][ T5632] invoke_syscall+0x98/0x244 [ 41.780331][ T5632] el0_svc_common+0xec/0x23c [ 41.780343][ T5632] do_el0_svc+0x4c/0x5c [ 41.780355][ T5632] el0_svc+0x64/0x260 [ 41.780368][ T5632] el0t_64_sync_handler+0x48/0x148 [ 41.780380][ T5632] el0t_64_sync+0x198/0x19c [ 41.809454][ T5632] memory: usage 0kB, limit 0kB, failcnt 19 [ 41.809495][ T5632] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 41.809510][ T5632] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 41.809524][ T5632] Memory cgroup stats for /syz2/test: [ 41.809610][ T5632] cache 0 [ 41.809623][ T5632] rss 0 [ 41.809638][ T5632] rss_huge 0 [ 41.809648][ T5632] shmem 0 [ 41.809657][ T5632] mapped_file 0 [ 41.809666][ T5632] dirty 0 [ 41.809674][ T5632] writeback 0 [ 41.809681][ T5632] workingset_refault_anon 0 [ 41.809689][ T5632] workingset_refault_file 0 [ 41.809696][ T5632] swap 0 [ 41.809703][ T5632] swapcached 0 [ 41.809710][ T5632] pgpgin 0 [ 41.809717][ T5632] pgpgout 0 [ 41.809724][ T5632] pgfault 12 [ 41.809731][ T5632] pgmajfault 0 [ 41.809739][ T5632] inactive_anon 0 [ 41.809746][ T5632] active_anon 0 [ 41.809752][ T5632] inactive_file 0 [ 41.809759][ T5632] active_file 0 [ 41.809766][ T5632] unevictable 0 [ 41.809773][ T5632] hierarchical_memory_limit 0 [ 41.809780][ T5632] hierarchical_memsw_limit 9223372036854771712 [ 41.809788][ T5632] total_cache 0 [ 41.809795][ T5632] total_rss 0 [ 41.809801][ T5632] total_rss_huge 0 [ 41.809808][ T5632] total_shmem 0 [ 41.809815][ T5632] total_mapped_file 0 [ 41.809822][ T5632] total_dirty 0 [ 41.809829][ T5632] total_writeback 0 [ 41.809836][ T5632] total_workingset_refault_anon 0 [ 41.809843][ T5632] total_workingset_refault_file 0 [ 41.809850][ T5632] total_swap 0 [ 41.809857][ T5632] total_swapcached 0 [ 41.809864][ T5632] total_pgpgin 0 [ 41.809871][ T5632] total_pgpgout 0 [ 41.809878][ T5632] total_pgfault 12 [ 41.809885][ T5632] total_pgmajfault 0 [ 41.809893][ T5632] total_inactive_anon 0 [ 41.809900][ T5632] total_active_anon 0 [ 41.809907][ T5632] total_inactive_file 0 [ 41.809915][ T5632] total_active_file 0 [ 41.809922][ T5632] total_unevictable 0 [ 41.809929][ T5632] anon_cost 0 [ 41.809936][ T5632] file_cost 0 [ 41.809943][ T5632] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.322,pid=5631,uid=0 [ 41.810051][ T5632] Memory cgroup out of memory: Killed process 5631 (syz.2.322) total-vm:102180kB, anon-rss:1376kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 41.932028][ T5647] syz.2.328 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 41.932080][ T5647] CPU: 0 UID: 0 PID: 5647 Comm: syz.2.328 Not tainted syzkaller #0 PREEMPT [ 41.932098][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 41.932105][ T5647] Call trace: [ 41.932108][ T5647] show_stack+0x2c/0x3c (C) [ 41.932131][ T5647] __dump_stack+0x30/0x40 [ 41.932147][ T5647] dump_stack_lvl+0xd8/0x12c [ 41.932159][ T5647] dump_stack+0x1c/0x28 [ 41.932171][ T5647] dump_header+0xbc/0x3f0 [ 41.932180][ T5647] oom_kill_process+0x248/0x8a0 [ 41.932193][ T5647] out_of_memory+0xd24/0x1064 [ 41.932203][ T5647] mem_cgroup_out_of_memory+0xe8/0x170 [ 41.932216][ T5647] try_charge_memcg+0x8ec/0xc64 [ 41.932224][ T5647] obj_cgroup_charge_pages+0x30/0xb0 [ 41.932238][ T5647] __memcg_slab_post_alloc_hook+0x4a0/0x8cc [ 41.932251][ T5647] kmem_cache_alloc_lru_noprof+0x32c/0x5dc [ 41.932263][ T5647] alloc_inode+0x84/0x198 [ 41.932274][ T5647] new_inode+0x20/0x50 [ 41.932285][ T5647] gadgetfs_make_inode+0x34/0x18c [ 41.932296][ T5647] gadgetfs_create_file+0x48/0xd8 [ 41.932305][ T5647] gadgetfs_bind+0x3f8/0x75c [ 41.932314][ T5647] gadget_bind_driver+0x274/0x834 [ 41.932323][ T5647] really_probe+0x29c/0x800 [ 41.932336][ T5647] __driver_probe_device+0x1e0/0x350 [ 41.932348][ T5647] driver_probe_device+0x6c/0x19c [ 41.932359][ T5647] __driver_attach+0x168/0x384 [ 41.932370][ T5647] bus_for_each_dev+0x128/0x1b4 [ 41.932380][ T5647] driver_attach+0x50/0x60 [ 41.932391][ T5647] bus_add_driver+0x208/0x500 [ 41.932401][ T5647] driver_register+0x220/0x310 [ 41.932413][ T5647] usb_gadget_register_driver_owner+0xf0/0x25c [ 41.932427][ T5647] dev_config+0x91c/0xcc0 [ 41.932436][ T5647] vfs_write+0x2a4/0xa0c [ 41.932444][ T5647] ksys_write+0x12c/0x228 [ 41.932452][ T5647] __arm64_sys_write+0x84/0x98 [ 41.932459][ T5647] invoke_syscall+0x98/0x244 [ 41.932473][ T5647] el0_svc_common+0xec/0x23c [ 41.932485][ T5647] do_el0_svc+0x4c/0x5c [ 41.932496][ T5647] el0_svc+0x64/0x260 [ 41.932510][ T5647] el0t_64_sync_handler+0x48/0x148 [ 41.932522][ T5647] el0t_64_sync+0x198/0x19c [ 41.932534][ T5647] memory: usage 0kB, limit 0kB, failcnt 55 [ 41.932540][ T5647] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 41.932547][ T5647] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 41.932553][ T5647] Memory cgroup stats for /syz2/test: [ 41.932629][ T5647] cache 0 [ 41.932635][ T5647] rss 0 [ 41.932639][ T5647] rss_huge 0 [ 41.932643][ T5647] shmem 0 [ 41.932647][ T5647] mapped_file 0 [ 41.932651][ T5647] dirty 0 [ 41.932655][ T5647] writeback 0 [ 41.932659][ T5647] workingset_refault_anon 0 [ 41.932663][ T5647] workingset_refault_file 0 [ 41.932667][ T5647] swap 0 [ 41.932671][ T5647] swapcached 0 [ 41.932674][ T5647] pgpgin 0 [ 41.932678][ T5647] pgpgout 0 [ 41.932681][ T5647] pgfault 12 [ 41.932685][ T5647] pgmajfault 0 [ 41.932689][ T5647] inactive_anon 0 [ 41.932693][ T5647] active_anon 0 [ 41.932697][ T5647] inactive_file 0 [ 41.932700][ T5647] active_file 0 [ 41.932704][ T5647] unevictable 0 [ 41.932707][ T5647] hierarchical_memory_limit 0 [ 41.932711][ T5647] hierarchical_memsw_limit 9223372036854771712 [ 41.932716][ T5647] total_cache 0 [ 41.932719][ T5647] total_rss 0 [ 41.932723][ T5647] total_rss_huge 0 [ 41.932727][ T5647] total_shmem 0 [ 41.932730][ T5647] total_mapped_file 0 [ 41.932734][ T5647] total_dirty 0 [ 41.932737][ T5647] total_writeback 0 [ 41.932741][ T5647] total_workingset_refault_anon 0 [ 41.932745][ T5647] total_workingset_refault_file 0 [ 41.932748][ T5647] total_swap 0 [ 41.932752][ T5647] total_swapcached 0 [ 41.932756][ T5647] total_pgpgin 0 [ 41.932759][ T5647] total_pgpgout 0 [ 41.932763][ T5647] total_pgfault 12 [ 41.932767][ T5647] total_pgmajfault 0 [ 41.932770][ T5647] total_inactive_anon 0 [ 41.932774][ T5647] total_active_anon 0 [ 41.932778][ T5647] total_inactive_file 0 [ 41.932781][ T5647] total_active_file 0 [ 41.932785][ T5647] total_unevictable 0 [ 41.932788][ T5647] anon_cost 0 [ 41.932792][ T5647] file_cost 0 [ 41.932796][ T5647] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2/test,task_memcg=/syz2/test,task=syz.2.328,pid=5646,uid=0 [ 41.933578][ T5647] Memory cgroup out of memory: Killed process 5646 (syz.2.328) total-vm:102180kB, anon-rss:1376kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 41.951282][ T5647] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 41.951304][ T5647] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 41.951581][ T5647] gadgetfs expected dummy_udc controller not usbip-vudc [ 41.951592][ T5647] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 41.953847][ T5647] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 42.122156][ T5673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.341'. [ 42.131455][ T5668] syz.4.339 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 42.134721][ T5668] CPU: 0 UID: 0 PID: 5668 Comm: syz.4.339 Not tainted syzkaller #0 PREEMPT [ 42.134749][ T5668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 42.134756][ T5668] Call trace: [ 42.134760][ T5668] show_stack+0x2c/0x3c (C) [ 42.134787][ T5668] __dump_stack+0x30/0x40 [ 42.134801][ T5668] dump_stack_lvl+0xd8/0x12c [ 42.134814][ T5668] dump_stack+0x1c/0x28 [ 42.134826][ T5668] dump_header+0xbc/0x3f0 [ 42.134836][ T5668] oom_kill_process+0x248/0x8a0 [ 42.134848][ T5668] out_of_memory+0xd24/0x1064 [ 42.134858][ T5668] mem_cgroup_out_of_memory+0xe8/0x170 [ 42.134869][ T5668] try_charge_memcg+0x8ec/0xc64 [ 42.134878][ T5668] obj_cgroup_charge_pages+0x30/0xb0 [ 42.134891][ T5668] __memcg_slab_post_alloc_hook+0x4a0/0x8cc [ 42.134904][ T5668] kmem_cache_alloc_noprof+0x328/0x5d8 [ 42.134915][ T5668] prepare_creds+0x34/0x7d0 [ 42.134927][ T5668] __sys_setuid+0x8c/0x35c [ 42.134938][ T5668] __arm64_sys_setuid+0x40/0x50 [ 42.134948][ T5668] invoke_syscall+0x98/0x244 [ 42.134961][ T5668] el0_svc_common+0xec/0x23c [ 42.134973][ T5668] do_el0_svc+0x4c/0x5c [ 42.134984][ T5668] el0_svc+0x64/0x260 [ 42.134997][ T5668] el0t_64_sync_handler+0x48/0x148 [ 42.135010][ T5668] el0t_64_sync+0x198/0x19c [ 42.135313][ T5668] memory: usage 0kB, limit 0kB, failcnt 74 [ 42.135329][ T5668] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 42.135337][ T5668] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 42.135343][ T5668] Memory cgroup stats for /syz4/test: [ 42.135407][ T5668] cache 0 [ 42.135412][ T5668] rss 0 [ 42.135416][ T5668] rss_huge 0 [ 42.135421][ T5668] shmem 0 [ 42.135425][ T5668] mapped_file 0 [ 42.135429][ T5668] dirty 0 [ 42.135432][ T5668] writeback 0 [ 42.135436][ T5668] workingset_refault_anon 0 [ 42.135439][ T5668] workingset_refault_file 0 [ 42.135443][ T5668] swap 0 [ 42.135447][ T5668] swapcached 0 [ 42.135450][ T5668] pgpgin 0 [ 42.135454][ T5668] pgpgout 0 [ 42.135457][ T5668] pgfault 1 [ 42.135461][ T5668] pgmajfault 0 [ 42.135464][ T5668] inactive_anon 0 [ 42.135468][ T5668] active_anon 0 [ 42.135471][ T5668] inactive_file 0 [ 42.135475][ T5668] active_file 0 [ 42.135478][ T5668] unevictable 0 [ 42.135482][ T5668] hierarchical_memory_limit 0 [ 42.135486][ T5668] hierarchical_memsw_limit 9223372036854771712 [ 42.135490][ T5668] total_cache 0 [ 42.135493][ T5668] total_rss 0 [ 42.135497][ T5668] total_rss_huge 0 [ 42.135500][ T5668] total_shmem 0 [ 42.135504][ T56 ** replaying previous printk message ** [ 42.135504][ T5668] total_mapped_file 0 [ 42.135507][ T5668] total_dirty 0 [ 42.135511][ T5668] total_writeback 0 [ 42.135515][ T5668] total_workingset_refault_anon 0 [ 42.135518][ T5668] total_workingset_refault_file 0 [ 42.135522][ T5668] total_swap 0 [ 42.135525][ T5668] total_swapcached 0 [ 42.135529][ T5668] total_pgpgin 0 [ 42.135532][ T5668] total_pgpgout 0 [ 42.135536][ T5668] total_pgfault 1 [ 42.135539][ T5668] total_pgmajfault 0 [ 42.135542][ T5668] total_inactive_anon 0 [ 42.135546][ T5668] total_active_anon 0 [ 42.135550][ T5668] total_inactive_file 0 [ 42.135554][ T5668] total_active_file 0 [ 42.135557][ T5668] total_unevictable 0 [ 42.135561][ T5668] anon_cost 0 [ 42.135564][ T5668] file_cost 0 [ 42.135568][ T5668] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.339,pid=5666,uid=0 [ 42.136267][ T5668] Memory cgroup out of memory: Killed process 5666 (syz.4.339) total-vm:102180kB, anon-rss:1376kB, file-rss:22544kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 42.184643][ T5677] ================================================================== [ 42.184656][ T5677] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irq+0x58/0x70 [ 42.184683][ T5677] Read of size 1 at addr ffff0000d928b018 by task syz.4.344/5677 [ 42.184691][ T5677] [ 42.184697][ T5677] CPU: 0 UID: 0 PID: 5677 Comm: syz.4.344 Not tainted syzkaller #0 PREEMPT [ 42.184707][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 42.184713][ T5677] Call trace: [ 42.184716][ T5677] show_stack+0x2c/0x3c (C) [ 42.184731][ T5677] __dump_stack+0x30/0x40 [ 42.184744][ T5677] dump_stack_lvl+0xd8/0x12c [ 42.184756][ T5677] print_address_description+0xb0/0x238 [ 42.184768][ T5677] print_report+0x68/0x84 [ 42.184776][ T5677] kasan_report+0x8c/0xc4 [ 42.184787][ T5677] __kasan_check_byte+0x3c/0x54 [ 42.184797][ T5677] lock_acquire+0xa4/0x364 [ 42.184807][ T5677] _raw_spin_lock_irq+0x58/0x70 [ 42.184819][ T5677] gadget_dev_open+0x50/0x1c4 [ 42.184829][ T5677] do_dentry_open+0x5c4/0xfc0 [ 42.184841][ T5677] vfs_open+0x44/0x2dc [ 42.184852][ T5677] path_openat+0x21fc/0x2a60 [ 42.184862][ T5677] do_file_open+0x1c8/0x2e8 [ 42.184871][ T5677] do_sys_openat2+0x114/0x1e8 [ 42.184882][ T5677] do_sys_open+0xb0/0xe0 [ 42.184893][ T5677] __arm64_sys_openat+0xa8/0xc4 [ 42.184905][ T5677] invoke_syscall+0x98/0x244 [ 42.184917][ T5677] el0_svc_common+0xec/0x23c [ 42.184929][ T5677] do_el0_svc+0x4c/0x5c [ 42.184941][ T5677] el0_svc+0x64/0x260 [ 42.184952][ T5677] el0t_64_sync_handler+0x48/0x148 [ 42.184964][ T5677] el0t_64_sync+0x198/0x19c [ 42.184973][ T5677] [ 42.184975][ T5677] Allocated by task 4710: [ 42.184980][ T5677] kasan_save_track+0x40/0x78 [ 42.184988][ T5677] kasan_save_alloc_info+0x44/0x54 [ 42.184998][ T5677] __kasan_kmalloc+0x9c/0xb4 [ 42.185007][ T5677] __kmalloc_cache_noprof+0x2e8/0x5ec [ 42.185015][ T5677] gadgetfs_fill_super+0x19c/0x370 [ 42.185022][ T5677] vfs_get_super+0xb8/0x148 [ 42.185031][ T5677] get_tree_single+0x30/0x40 [ 42.185038][ T5677] gadgetfs_get_tree+0x28/0x38 [ 42.185045][ T5677] vfs_get_tree+0x90/0x28c [ 42.185053][ T5677] fc_mount+0x24/0xac [ 42.185061][ T5677] do_new_mount+0x2a4/0x538 [ 42.185069][ T5677] path_mount+0x5f0/0xa88 [ 42.185078][ T5677] do_mount+0xe8/0x148 [ 42.185086][ T5677] __arm64_sys_mount+0x33c/0x388 [ 42.185095][ T5677] invoke_syscall+0x98/0x244 [ 42.185105][ T5677] el0_svc_common+0xec/0x23c [ 42.185115][ T5677] do_el0_svc+0x4c/0x5c [ 42.185124][ T5677] el0_svc+0x64/0x260 [ 42.185133][ T5677] el0t_64_sync_handler+0x48/0x148 [ 42.185143][ T5677] el0t_64_sync+0x198/0x19c [ 42.185149][ T5677] [ 42.185151][ T5677] Freed by task 5647: [ 42.185155][ T5677] kasan_save_track+0x40/0x78 [ 42.185163][ T5677] kasan_save_free_info+0x58/0x70 [ 42.185173][ T5677] __kasan_slab_free+0x74/0xa4 [ 42.185181][ T5677] kfree+0x188/0x690 [ 42.185188][ T5677] put_dev+0x8c/0xf8 [ 42.185194][ T5677] dev_release+0x100/0x15c [ 42.185201][ T5677] __fput+0x338/0x74c [ 42.185208][ T5677] ____fput+0x20/0x30 [ 42.185214][ T5677] task_work_run+0x1cc/0x25c [ 42.185225][ T5677] do_exit+0x58c/0x1a74 [ 42.185236][ T5677] do_group_exit+0x198/0x238 [ 42.185246][ T5677] get_signal+0xfb0/0x1094 [ 42.185253][ T5677] arch_do_signal_or_restart+0x288/0x444c [ 42.185263][ T5677] exit_to_user_mode_loop+0x70/0x17c [ 42.185272][ T5677] el0_svc+0x18c/0x260 [ 42.185282][ T5677] el0t_64_sync_handler+0x48/0x148 [ 42.185292][ T5677] el0t_64_sync+0x198/0x19c [ 42.185298][ T5677] [ 42.185299][ T5677] The buggy address belongs to the object at ffff0000d928b000 [ 42.185299][ T5677] which belongs to the cache kmalloc-1k of size 1024 [ 42.185307][ T5677] The buggy address is located 24 bytes inside of [ 42.185307][ T5677] freed 1024-byte region [ffff0000d928b000, ffff0000d928b400) [ 42.185315][ T5677] [ 42.185317][ T5677] The buggy address belongs to the physical page: [ 42.185322][ T5677] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000d928c800 pfn:0x119288 [ 42.185330][ T5677] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 42.185337][ T5677] flags: 0x5ffc00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff) [ 42.185345][ T5677] page_type: f5(slab) [ 42.185353][ T5677] raw: 05ffc00000000240 ffff0000c0001dc0 fffffdffc3c7fc10 fffffdffc317e810 [ 42.185361][ T5677] raw: ffff0000d928c800 000000080010000d 00000000f5000000 0000000000000000 [ 42.185368][ T5677] head: 05ffc00000000240 ffff0000c0001dc0 fffffdffc3c7fc10 fffffdffc317e810 [ 42.185375][ T5677] head: ffff0000d928c800 000000080010000d 00000000f5000000 0000000000000000 [ 42.185382][ T5677] head: 05ffc00000000003 fffffdffc364a201 00000000ffffffff 00000000ffffffff [ 42.185389][ T5677] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 42.185393][ T5677] page dumped because: kasan: bad access detected [ 42.185396][ T5677] [ 42.185398][ T5677] Memory state around the buggy address: [ 42.185403][ T5677] ffff0000d928af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.185408][ T5677] ffff0000d928af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.185413][ T5677] >ffff0000d928b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.185417][ T5677] ^ [ 42.185421][ T5677] ffff0000d928b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.185427][ T5677] ffff0000d928b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.185431][ T5677] ================================================================== [ 42.185434][ T5677] Disabling lock debugging due to kernel taint [ 42.185439][ T5677] ------------[ cut here ]------------ [ 42.185441][ T5677] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.h:68:9 [ 42.185448][ T5677] index 13585 is out of range for type 'unsigned long[8]' [ 42.185455][ T5677] CPU: 0 UID: 0 PID: 5677 Comm: syz.4.344 Tainted: G B syzkaller #0 PREEMPT [ 42.185465][ T5677] Tainted: [B]=BAD_PAGE [ 42.185468][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 42.185473][ T5677] Call trace: [ 42.185475][ T5677] show_stack+0x2c/0x3c (C) [ 42.185487][ T5677] __dump_stack+0x30/0x40 [ 42.185499][ T5677] dump_stack_lvl+0xd8/0x12c [ 42.185511][ T5677] dump_stack+0x1c/0x28 [ 42.185522][ T5677] ubsan_epilogue+0x14/0x48 [ 42.185533][ T5677] __ubsan_handle_out_of_bounds+0xd0/0xf8 [ 42.185545][ T5677] queued_spin_lock_slowpath+0x834/0xd04 [ 42.185558][ T5677] do_raw_spin_lock+0x21c/0x2d0 [ 42.185568][ T5677] _raw_spin_lock_irq+0x60/0x70 [ 42.185580][ T5677] gadget_dev_open+0x50/0x1c4 [ 42.185589][ T5677] do_dentry_open+0x5c4/0xfc0 [ 42.185600][ T5677] vfs_open+0x44/0x2dc [ 42.185610][ T5677] path_openat+0x21fc/0x2a60 [ 42.185627][ T5677] do_file_open+0x1c8/0x2e8 [ 42.185636][ T5677] do_sys_openat2+0x114/0x1e8 [ 42.185647][ T5677] do_sys_open+0xb0/0xe0 [ 42.185658][ T5677] __arm64_sys_openat+0xa8/0xc4 [ 42.185670][ T5677] invoke_syscall+0x98/0x244 [ 42.185682][ T5677] el0_svc_common+0xec/0x23c [ 42.185693][ T5677] do_el0_svc+0x4c/0x5c [ 42.185704][ T5677] el0_svc+0x64/0x260 [ 42.185715][ T5677] el0t_64_sync_handler+0x48/0x148 [ 42.185727][ T5677] el0t_64_sync+0x198/0x19c [ 42.185735][ T5677] ---[ end trace ]--- [ 42.185748][ T5677] Unable to handle kernel paging request at virtual address ffff50002add7662 [ 42.185753][ T5677] KASAN: maybe wild-memory-access in range [0xfffe800156ebb310-0xfffe800156ebb317] [ 42.185759][ T5677] Mem abort info: [ 42.185761][ T5677] ESR = 0x0000000096000004 [ 42.185765][ T5677] EC = 0x25: DABT (current EL), IL = 32 bits [ 42.185769][ T5677] SET = 0, FnV = 0 [ 42.185772][ T5677] EA = 0, S1PTW = 0 [ 42.185775][ T5677] FSC = 0x04: level 0 translation fault [ 42.185779][ T5677] Data abort info: [ 42.185781][ T5677] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 42.185785][ T5677] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 42.185789][ T5677] GCS = 0, Overlay = 0, DirtyBit = 0 [ 42.185794][ T5677] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021b01f000 [ 42.185800][ T5677] [ffff50002add7662] pgd=0000000000000000, p4d=0000000000000000 [ 42.185812][ T5677] Internal error: Oops: 0000000096000004 [#1] SMP [ 42.346680][ T5677] Modules linked in: [ 42.347416][ T5677] CPU: 0 UID: 0 PID: 5677 Comm: syz.4.344 Tainted: G B syzkaller #0 PREEMPT [ 42.349311][ T5677] Tainted: [B]=BAD_PAGE [ 42.350068][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 42.351826][ T5677] pstate: 834000c5 (Nzcv daIF +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 42.353396][ T5677] pc : queued_spin_lock_slowpath+0x52c/0xd04 [ 42.354536][ T5677] lr : queued_spin_lock_slowpath+0x834/0xd04 [ 42.355604][ T5677] sp : ffff800097807560 [ 42.356339][ T5677] x29: ffff800097807600 x28: fffe800156ebb310 x27: 1fffe0001aebe752 [ 42.357800][ T5677] x26: 1fffe0001b251600 x25: ffff0001ade40708 x24: dfff800000000000 [ 42.359278][ T5677] x23: ffff700012f00eb0 x22: ffff0001ade40700 x21: 1fffe00035bc80e0 [ 42.360808][ T5677] x20: ffff0000d75f3a90 x19: ffff0000d928b000 x18: 0000000000000000 [ 42.362421][ T5677] x17: 363a682e6b636f6c x16: 0000000000000001 x15: 0000000000000000 [ 42.363907][ T5677] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000004 [ 42.365455][ T5677] x11: ffff70001145ec6c x10: ffff800088ac7700 x9 : ffff800088ac7710 [ 42.366990][ T5677] x8 : 1fffd0002add7662 x7 : 0000000000000001 x6 : ffff80008048e080 [ 42.368645][ T5677] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f74b4 [ 42.370208][ T5677] x2 : 0000000000000002 x1 : ffff0000d75f3a80 x0 : 0000000000000001 [ 42.371787][ T5677] Call trace: [ 42.372448][ T5677] queued_spin_lock_slowpath+0x52c/0xd04 (P) [ 42.373553][ T5677] do_raw_spin_lock+0x21c/0x2d0 [ 42.374435][ T5677] _raw_spin_lock_irq+0x60/0x70 [ 42.375355][ T5677] gadget_dev_open+0x50/0x1c4 [ 42.376252][ T5677] do_dentry_open+0x5c4/0xfc0 [ 42.377133][ T5677] vfs_open+0x44/0x2dc [ 42.377898][ T5677] path_openat+0x21fc/0x2a60 [ 42.378769][ T5677] do_file_open+0x1c8/0x2e8 [ 42.379576][ T5677] do_sys_openat2+0x114/0x1e8 [ 42.380427][ T5677] do_sys_open+0xb0/0xe0 [ 42.381241][ T5677] __arm64_sys_openat+0xa8/0xc4 [ 42.382184][ T5677] invoke_syscall+0x98/0x244 [ 42.383004][ T5677] el0_svc_common+0xec/0x23c [ 42.383875][ T5677] do_el0_svc+0x4c/0x5c [ 42.384646][ T5677] el0_svc+0x64/0x260 [ 42.385269][ T5677] el0t_64_sync_handler+0x48/0x148 [ 42.386182][ T5677] el0t_64_sync+0x198/0x19c [ 42.387018][ T5677] Code: f94007e9 f9400388 8b09011c d343ff88 (38786908) [ 42.388249][ T5677] ---[ end trace 0000000000000000 ]--- [ 42.689156][ T5677] Kernel panic - not syncing: Oops: Fatal exception [ 42.690327][ T5677] SMP: stopping secondary CPUs [ 42.691171][ T5677] Kernel Offset: disabled [ 42.691930][ T5677] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 42.693103][ T5677] Memory Limit: none [ 42.983375][ T5677] Rebooting in 86400 seconds..