last executing test programs: 1.126173424s ago: executing program 4 (id=672): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0x5, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x800) 1.044652001s ago: executing program 1 (id=677): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000340)={0xc, {0x3, "11ff00"}}, 0x9) 1.024542857s ago: executing program 4 (id=679): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='3', 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000540)={0x0, 0x9, 0xfefffffc, r0, 0x0, &(0x7f0000000380)={0x990a62, 0x22, '\x00', @ptr=0x2}}) 1.024389234s ago: executing program 1 (id=680): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010032000000000000320000000000000000000000000000000000006d7061746830") 1.020598086s ago: executing program 1 (id=682): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c0000004400010029bd700004000000010000000400488071000180c78c42412853ec1e921ede6c39658fb028fcee3547aa485e20bea0210f8ffbe4dcf77806dbf6e042b498445afea9e4a9de59e1ce0e3a23d11a7e1de8bc7b72377be5fb59ff6b03b640d7bd736308b725e7fa1effc71ca09de48d27f4529f315fa1aeab"], 0x8c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="96", 0x1}], 0x1}, 0x4048042) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'lo\x00', 0x3}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r1, 0x0, 0xffff, 0x2) 999.030339ms ago: executing program 4 (id=686): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x15, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @val={@void, {0x806, 0x0, 0x1}}, {@llc={0x4, {@llc={0xe, 0xf4, "99"}}}}}, 0x0) 969.827643ms ago: executing program 4 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='3', 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000180)={0x9a0000, 0x7, 0x4, r0, 0x0, &(0x7f0000000140)={0xa20929, 0x7, '\x00', @value=0x1}}) 931.014477ms ago: executing program 4 (id=690): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 909.502822ms ago: executing program 4 (id=700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048820) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) read(r1, &(0x7f0000000480)=""/97, 0xfdef) 817.191588ms ago: executing program 3 (id=692): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000340)={0xc, {0x3, "11ff00"}}, 0x9) 776.243456ms ago: executing program 3 (id=694): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='3', 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000540)={0x0, 0x9, 0xfefffffc, r0, 0x0, &(0x7f0000000380)={0x990a62, 0x22, '\x00', @ptr=0x2}}) 775.543241ms ago: executing program 3 (id=695): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x905, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xffffa888}, 0x0) 738.797743ms ago: executing program 3 (id=698): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 715.240488ms ago: executing program 3 (id=702): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='3', 0x1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000180)={0x9a0000, 0x7, 0x4, r0, 0x0, &(0x7f0000000140)={0xa20929, 0x7, '\x00', @value=0x1}}) 656.957528ms ago: executing program 3 (id=704): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="bf16000000000000b702000064000000bf6100000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000b704000001000000850000003c00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)='a', 0x1, 0x0, 0x0, 0x0) read(r2, &(0x7f0000000440)=""/202, 0xca) 374.660103ms ago: executing program 2 (id=718): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000080)='\x00', 0x1) 327.681879ms ago: executing program 2 (id=721): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000580)=[{0x3, '\x00', @buffer={"5c8310ef19d98ae6b20542f8a6cdd93f8f9fd237ff1bccb2835c73657287807e", 0x20}, 0xe6}, {0x25, '\x00', @st={0x4, [{0x2, @svalue=0x100}, {0x0, @uvalue=0x5}, {0x0, @uvalue=0x1}, {0x2, @svalue=0x80000001}]}, 0x4}, {0x9, '\x00', @buffer={"556074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x409}]}) 305.657234ms ago: executing program 2 (id=723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)={@void, @val={0x2, 0x0, 0xdd86, 0x400, 0x6, 0x4}, @mpls={[{0x1, 0x0, 0x1}, {0x42d5, 0x0, 0x1}, {0x8098}], @ipv4=@dccp={{0x5, 0x4, 0x2, 0x2e, 0x42, 0x64, 0x0, 0xff, 0x21, 0x0, @multicast2, @private=0xa010100}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0x6, 0x4, "be158f", 0x57, "1550d1"}, "1c1c8fc640b655f30de4fa61606e8a2fb5a5a67a1f05b1f2a4c8b1c96edc"}}}}, 0x58) 223.299364ms ago: executing program 0 (id=726): fsopen(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 192.583624ms ago: executing program 0 (id=727): syz_emit_ethernet(0x15, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @val={@void, {0x806, 0x0, 0x1}}, {@llc={0x4, {@llc={0xe, 0xf4, "99"}}}}}, 0x0) 191.54305ms ago: executing program 0 (id=728): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000)='270', 0x3) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48000000100005ff00000000ffdbdf250000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32=r4], 0x48}}, 0x0) 174.539853ms ago: executing program 2 (id=729): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.0/streaming/color_matching/my_color2/bTransferCharacteristics\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 120.011447ms ago: executing program 0 (id=730): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendfile(r0, r2, 0x0, 0x7ffff004) 119.023096ms ago: executing program 1 (id=731): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000340)={0xa20000, 0xff, 0x8, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa30901, 0x20000006, '\x00', @value=0x10001}}) 97.245326ms ago: executing program 2 (id=732): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000540)={0x0, 0x9, 0xfefffffc, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x990a62, 0x22, '\x00', @ptr=0x2}}) 77.293606ms ago: executing program 1 (id=733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4048820) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0x0, 0xc}, {0x8, 0xfff3}}}, 0x24}}, 0x40004) 75.171953ms ago: executing program 2 (id=734): bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x5) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r4, &(0x7f0000000000)='3', 0x3e) write(r0, &(0x7f0000000700)="ffffffffffffc011223344554305000f32ffff90000100112233445500112233445500ff0000", 0xfdef) 36.039664ms ago: executing program 0 (id=735): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e2, &(0x7f0000000000)) 1.546512ms ago: executing program 0 (id=736): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'gre0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 0s ago: executing program 1 (id=737): fsopen(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ode_noprof+0x160/0x7fc [ 32.597524][ T5003] sbitmap_init_node+0x360/0x564 [ 32.597537][ T5003] sbitmap_queue_init_node+0x54/0x380 [ 32.597549][ T5003] kyber_alloc_sched_data+0x1cc/0x3cc [ 32.597563][ T5003] blk_mq_alloc_sched_res+0xe4/0x1bc [ 32.597576][ T5003] elevator_change+0x124/0x35c [ 32.597587][ T5003] elv_iosched_store+0x2a8/0x3bc [ 32.597598][ T5003] queue_attr_store+0x1c0/0x24c [ 32.597607][ T5003] sysfs_kf_write+0xe0/0x108 [ 32.597620][ T5003] kernfs_fop_write_iter+0x260/0x3b8 [ 32.597632][ T5003] vfs_write+0x51c/0xa0c [ 32.597646][ T5003] ksys_write+0x12c/0x228 [ 32.597658][ T5003] __arm64_sys_write+0x84/0x98 [ 32.597671][ T5003] invoke_syscall+0x98/0x244 [ 32.597683][ T5003] el0_svc_common+0xec/0x23c [ 32.597695][ T5003] do_el0_svc+0x4c/0x5c [ 32.597707][ T5003] el0_svc+0x60/0x1d8 [ 32.597720][ T5003] el0t_64_sync_handler+0x44/0x104 [ 32.597732][ T5003] el0t_64_sync+0x198/0x19c [ 32.708653][ T5019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.709001][ T5019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.994124][ T5031] FAULT_INJECTION: forcing a failure. [ 32.994124][ T5031] name failslab, interval 1, probability 0, space 0, times 0 [ 32.994139][ T5031] CPU: 0 UID: 0 PID: 5031 Comm: syz.4.61 Not tainted syzkaller #0 PREEMPT [ 32.994150][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.994164][ T5031] Call trace: [ 32.994168][ T5031] show_stack+0x2c/0x3c (C) [ 32.994187][ T5031] __dump_stack+0x30/0x40 [ 32.994200][ T5031] dump_stack_lvl+0xd8/0x12c [ 32.994212][ T5031] dump_stack+0x1c/0x28 [ 32.994224][ T5031] should_fail_ex+0x418/0x58c [ 32.994237][ T5031] should_failslab+0xc4/0x120 [ 32.994250][ T5031] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 32.994260][ T5031] kvasprintf+0x110/0x1e4 [ 32.994273][ T5031] kvasprintf_const+0x154/0x2e4 [ 32.994284][ T5031] kobject_set_name_vargs+0xd8/0x1c0 [ 32.994298][ T5031] dev_set_name+0xe8/0x13c [ 32.994307][ T5031] wakeup_source_sysfs_add+0x184/0x2a4 [ 32.994320][ T5031] wakeup_source_register+0x158/0x2fc [ 32.994331][ T5031] ep_create_wakeup_source+0xf4/0x240 [ 32.994345][ T5031] ep_insert+0xab8/0x12d4 [ 32.994356][ T5031] do_epoll_ctl_file+0xa0c/0xbd4 [ 32.994367][ T5031] do_epoll_ctl+0xa0/0x140 [ 32.994379][ T5031] __arm64_sys_epoll_ctl+0x164/0x1b8 [ 32.994390][ T5031] invoke_syscall+0x98/0x244 [ 32.994403][ T5031] el0_svc_common+0xec/0x23c [ 32.994415][ T5031] do_el0_svc+0x4c/0x5c [ 32.994426][ T5031] el0_svc+0x60/0x1d8 [ 32.994437][ T5031] el0t_64_sync_handler+0x44/0x104 [ 32.994449][ T5031] el0t_64_sync+0x198/0x19c [ 33.051668][ T5037] FAULT_INJECTION: forcing a failure. [ 33.051668][ T5037] name failslab, interval 1, probability 0, space 0, times 0 [ 33.051684][ T5037] CPU: 1 UID: 0 PID: 5037 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT [ 33.051694][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.051708][ T5037] Call trace: [ 33.051711][ T5037] show_stack+0x2c/0x3c (C) [ 33.051728][ T5037] __dump_stack+0x30/0x40 [ 33.051744][ T5037] dump_stack_lvl+0xd8/0x12c [ 33.051756][ T5037] dump_stack+0x1c/0x28 [ 33.051768][ T5037] should_fail_ex+0x418/0x58c [ 33.051782][ T5037] should_failslab+0xc4/0x120 [ 33.051796][ T5037] __kmalloc_cache_noprof+0x94/0x5fc [ 33.051805][ T5037] alloc_fs_context+0x7c/0xba4 [ 33.051815][ T5037] fs_context_for_mount+0x34/0x44 [ 33.051824][ T5037] mq_init_ns+0xdc/0x638 [ 33.051837][ T5037] copy_ipcs+0x3c8/0x63c [ 33.051849][ T5037] create_new_namespaces+0x1a8/0x50c [ 33.051861][ T5037] unshare_nsproxy_namespaces+0x120/0x170 [ 33.051871][ T5037] ksys_unshare+0x438/0x6cc [ 33.051881][ T5037] __arm64_sys_unshare+0x40/0x54 [ 33.051890][ T5037] invoke_syscall+0x98/0x244 [ 33.051903][ T5037] el0_svc_common+0xec/0x23c [ 33.051915][ T5037] do_el0_svc+0x4c/0x5c [ 33.051927][ T5037] el0_svc+0x60/0x1d8 [ 33.051939][ T5037] el0t_64_sync_handler+0x44/0x104 [ 33.051951][ T5037] el0t_64_sync+0x198/0x19c [ 33.289383][ T1212] IPVS: starting estimator thread 0... [ 33.290592][ T5037] FAULT_INJECTION: forcing a failure. [ 33.290592][ T5037] name failslab, interval 1, probability 0, space 0, times 0 [ 33.290615][ T5037] CPU: 0 UID: 0 PID: 5037 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT [ 33.290627][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.290643][ T5037] Call trace: [ 33.290647][ T5037] show_stack+0x2c/0x3c (C) [ 33.290668][ T5037] __dump_stack+0x30/0x40 [ 33.290682][ T5037] dump_stack_lvl+0xd8/0x12c [ 33.290692][ T5037] dump_stack+0x1c/0x28 [ 33.290702][ T5037] should_fail_ex+0x418/0x58c [ 33.290714][ T5037] should_failslab+0xc4/0x120 [ 33.290725][ T5037] kmem_cache_alloc_noprof+0x94/0x5d4 [ 33.290734][ T5037] __kernfs_new_node+0xf0/0x7d8 [ 33.290744][ T5037] kernfs_new_node+0xe8/0x130 [ 33.290753][ T5037] __kernfs_create_file+0x60/0x2e0 [ 33.290763][ T5037] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 33.290773][ T5037] internal_create_group+0x550/0xb30 [ 33.290783][ T5037] internal_create_groups+0x64/0x138 [ 33.290794][ T5037] sysfs_create_groups+0x2c/0x3c [ 33.290805][ T5037] device_add_attrs+0xdc/0x4e4 [ 33.290814][ T5037] device_add+0x420/0x9e0 [ 33.290822][ T5037] netdev_register_kobject+0x184/0x328 [ 33.290834][ T5037] register_netdevice+0xd74/0x14c0 [ 33.290848][ T5037] register_netdev+0x4c/0x68 [ 33.290859][ T5037] ip6_tnl_init_net+0x224/0x36c [ 33.290870][ T5037] ops_init+0x2cc/0x528 [ 33.290880][ T5037] setup_net+0x118/0x2fc [ 33.290889][ T5037] copy_net_ns+0x454/0x698 [ 33.290898][ T5037] create_new_namespaces+0x304/0x50c [ 33.290908][ T5037] unshare_nsproxy_namespaces+0x120/0x170 [ 33.290918][ T5037] ksys_unshare+0x438/0x6cc [ 33.290926][ T5037] __arm64_sys_unshare+0x40/0x54 [ 33.290935][ T5037] invoke_syscall+0x98/0x244 [ 33.290945][ T5037] el0_svc_common+0xec/0x23c [ 33.290955][ T5037] do_el0_svc+0x4c/0x5c [ 33.290964][ T5037] el0_svc+0x60/0x1d8 [ 33.290976][ T5037] el0t_64_sync_handler+0x44/0x104 [ 33.290985][ T5037] el0t_64_sync+0x198/0x19c [ 33.293196][ T4716] Bluetooth: hci2: command tx timeout [ 33.293208][ T4722] Bluetooth: hci1: command tx timeout [ 33.293275][ T4724] Bluetooth: hci4: command tx timeout [ 33.373167][ T5054] IPVS: using max 61 ests per chain, 146400 per kthread [ 33.666895][ T5060] Bluetooth: MGMT ver 1.23 ** 290 printk messages dropped ** ** 12 printk messages dropped ** ** 4 printk messages dropped ** ** 8 printk messages dropped ** ** 13 printk messages dropped ** ** 72 printk messages dropped ** ** 1 printk messages dropped ** ** 4 printk messages dropped ** ** 416 printk messages dropped ** [ 34.224134][ T5056] syz.1.71 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 34.224151][ T5056] CPU: 0 UID: 0 PID: 5056 Comm: syz.1.71 Not tainted syzkaller #0 PREEMPT [ 34.224161][ T5056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.224173][ T5056] Call trace: [ 34.224176][ T5056] show_stack+0x2c/0x3c (C) ** 25 printk messages dropped ** [ 34.224448][ T5056] memory+swap: usage 204kB, limit 9007199254740988kB, failcnt 0 [ 34.224454][ T5056] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 ** 1 printk messages dropped ** [ 34.224535][ T5056] cache 57344 ** 27 printk messages dropped ** [ 34.224629][ T5056] total_writeback 0 [ 34.224632][ T5056] total_workingset_refault_anon 1 [ 34.224636][ T5056] total_workingset_refault_file 0 [ 34.224639][ T5056] total_swap 110592 [ 34.224642][ T5056] total_swapcached 118784 ** 1 printk messages dropped ** [ 34.224649][ T5056] total_pgpgout 28 ** 9 printk messages dropped ** [ 34.224683][ T5056] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.71,pid=5055,uid=0 ** 4 printk messages dropped ** [ 34.491931][ T4724] Bluetooth: hci3: command tx timeout [ 34.589445][ T4993] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 34.800722][ T5077] batman_adv: batadv0: Adding interface: syzkaller0 [ 34.800734][ T5077] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.800756][ T5077] batman_adv: batadv0: Interface activated: syzkaller0 [ 35.207766][ T5076] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 35.227036][ T5076] batman_adv: batadv0: Removing interface: syzkaller0 [ 35.336093][ T5098] warning: `syz.3.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 35.375225][ T4724] Bluetooth: hci4: command tx timeout [ 35.375234][ T4722] Bluetooth: hci2: command tx timeout [ 35.381876][ T4724] Bluetooth: hci1: command tx timeout [ 35.388549][ T5095] syz.0.89 uses obsolete (PF_INET,SOCK_PACKET) [ 35.437323][ T5103] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.510165][ T5110] syzkaller0: entered promiscuous mode [ 35.510175][ T5110] syzkaller0: entered allmulticast mode [ 35.531504][ T5112] FAULT_INJECTION: forcing a failure. [ 35.531504][ T5112] name failslab, interval 1, probability 0, space 0, times 0 [ 35.531527][ T5112] CPU: 0 UID: 0 PID: 5112 Comm: syz.0.96 Not tainted syzkaller #0 PREEMPT [ 35.531538][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.531552][ T5112] Call trace: [ 35.531555][ T5112] show_stack+0x2c/0x3c (C) [ 35.531574][ T5112] __dump_stack+0x30/0x40 [ 35.531586][ T5112] dump_stack_lvl+0xd8/0x12c [ 35.531598][ T5112] dump_stack+0x1c/0x28 [ 35.531609][ T5112] should_fail_ex+0x418/0x58c [ 35.531623][ T5112] should_failslab+0xc4/0x120 [ 35.531636][ T5112] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 35.531647][ T5112] kmemdup_nul+0x48/0xfc [ 35.531656][ T5112] process_preds+0x798/0x3c9c [ 35.531667][ T5112] create_filter+0xcc/0x178 [ 35.531677][ T5112] apply_event_filter+0x124/0x460 [ 35.531688][ T5112] event_filter_write+0x15c/0x218 [ 35.531697][ T5112] vfs_write+0x2a4/0xa0c [ 35.531710][ T5112] ksys_write+0x12c/0x228 [ 35.531722][ T5112] __arm64_sys_write+0x84/0x98 [ 35.531738][ T5112] invoke_syscall+0x98/0x244 [ 35.531751][ T5112] el0_svc_common+0xec/0x23c [ 35.531763][ T5112] do_el0_svc+0x4c/0x5c [ 35.531774][ T5112] el0_svc+0x60/0x1d8 [ 35.531787][ T5112] el0t_64_sync_handler+0x44/0x104 [ 35.531799][ T5112] el0t_64_sync+0x198/0x19c [ 35.650503][ T5123] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 35.671992][ T5129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.674805][ T5129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.789973][ T5145] FAULT_INJECTION: forcing a failure. [ 35.789973][ T5145] name failslab, interval 1, probability 0, space 0, times 0 [ 35.789989][ T5145] CPU: 1 UID: 0 PID: 5145 Comm: syz.2.112 Not tainted syzkaller #0 PREEMPT [ 35.790000][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.790013][ T5145] Call trace: [ 35.790016][ T5145] show_stack+0x2c/0x3c (C) [ 35.790036][ T5145] __dump_stack+0x30/0x40 [ 35.790051][ T5145] dump_stack_lvl+0xd8/0x12c [ 35.790063][ T5145] dump_stack+0x1c/0x28 [ 35.790075][ T5145] should_fail_ex+0x418/0x58c [ 35.790094][ T5145] should_failslab+0xc4/0x120 [ 35.790108][ T5145] __kmalloc_cache_noprof+0x94/0x5fc [ 35.790117][ T5145] alloc_fs_context+0x7c/0xba4 [ 35.790127][ T5145] fs_context_for_mount+0x34/0x44 [ 35.790136][ T5145] mq_init_ns+0xdc/0x638 [ 35.790149][ T5145] copy_ipcs+0x3c8/0x63c [ 35.790162][ T5145] create_new_namespaces+0x1a8/0x50c [ 35.790173][ T5145] unshare_nsproxy_namespaces+0x120/0x170 [ 35.790184][ T5145] ksys_unshare+0x438/0x6cc [ 35.790193][ T5145] __arm64_sys_unshare+0x40/0x54 [ 35.790202][ T5145] invoke_syscall+0x98/0x244 [ 35.790215][ T5145] el0_svc_common+0xec/0x23c [ 35.790227][ T5145] do_el0_svc+0x4c/0x5c [ 35.790238][ T5145] el0_svc+0x60/0x1d8 [ 35.790250][ T5145] el0t_64_sync_handler+0x44/0x104 [ 35.790262][ T5145] el0t_64_sync+0x198/0x19c [ 35.790545][ T5145] FAULT_INJECTION: forcing a failure. [ 35.790545][ T5145] name failslab, interval 1, probability 0, space 0, times 0 [ 35.790555][ T5145] CPU: 1 UID: 0 PID: 5145 Comm: syz.2.112 Not tainted syzkaller #0 PREEMPT [ 35.790564][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.790575][ T5145] Call trace: [ 35.790578][ T5145] show_stack+0x2c/0x3c (C) [ 35.790590][ T5145] __dump_stack+0x30/0x40 [ 35.790601][ T5145] dump_stack_lvl+0xd8/0x12c [ 35.790613][ T5145] dump_stack+0x1c/0x28 [ 35.790624][ T5145] should_fail_ex+0x418/0x58c [ 35.790636][ T5145] should_failslab+0xc4/0x120 [ 35.790649][ T5145] __kmalloc_cache_noprof+0x94/0x5fc [ 35.790658][ T5145] shrinker_alloc+0x68/0x9b0 [ 35.790669][ T5145] sget_fc+0xbd0/0x1520 [ 35.790679][ T5145] vfs_get_super+0x40/0x148 [ 35.790688][ T5145] get_tree_nodev+0x2c/0x3c [ 35.790698][ T5145] mqueue_get_tree+0xac/0xe8 [ 35.790711][ T5145] vfs_get_tree+0x90/0x28c [ 35.790721][ T5145] fc_mount+0x24/0xac [ 35.790731][ T5145] fc_mount_longterm+0x20/0x74 [ 35.790741][ T5145] mq_init_ns+0x3c8/0x638 [ 35.790753][ T5145] copy_ipcs+0x3c8/0x63c [ 35.790765][ T5145] create_new_namespaces+0x1a8/0x50c [ 35.790776][ T5145] unshare_nsproxy_namespaces+0x120/0x170 [ 35.790786][ T5145] ksys_unshare+0x438/0x6cc [ 35.790795][ T5145] __arm64_sys_unshare+0x40/0x54 [ 35.790805][ T5145] invoke_syscall+0x98/0x244 [ 35.790816][ T5145] el0_svc_common+0xec/0x23c [ 35.790828][ T5145] do_el0_svc+0x4c/0x5c [ 35.790839][ T5145] el0_svc+0x60/0x1d8 [ 35.790851][ T5145] el0t_64_sync_handler+0x44/0x104 [ 35.790863][ T5145] el0t_64_sync+0x198/0x19c [ 35.871930][ T5147] 0x000000000000-0x000000010000 : "" [ 35.880490][ T5147] ftl_cs: FTL header not found. [ 35.881315][ T5147] FAULT_INJECTION: forcing a failure. [ 35.881315][ T5147] name failslab, interval 1, probability 0, space 0, times 0 [ 35.881332][ T5147] CPU: 1 UID: 0 PID: 5147 Comm: syz.4.113 Not tainted syzkaller #0 PREEMPT [ 35.881346][ T5147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.881360][ T5147] Call trace: [ 35.881364][ T5147] show_stack+0x2c/0x3c (C) [ 35.881383][ T5147] __dump_stack+0x30/0x40 [ 35.881396][ T5147] dump_stack_lvl+0xd8/0x12c [ 35.881408][ T5147] dump_stack+0x1c/0x28 [ 35.881420][ T5147] should_fail_ex+0x418/0x58c [ 35.881434][ T5147] should_failslab+0xc4/0x120 [ 35.881448][ T5147] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 35.881458][ T5147] kstrdup+0x50/0x104 [ 35.881468][ T5147] kstrdup_const+0x54/0x6c [ 35.881476][ T5147] __kernfs_new_node+0xb0/0x7d8 [ 35.881488][ T5147] kernfs_new_node+0xe8/0x130 [ 35.881498][ T5147] kernfs_create_dir_ns+0x58/0x138 [ 35.881509][ T5147] sysfs_create_dir_ns+0x120/0x1f4 [ 35.881521][ T5147] kobject_add_internal+0x290/0x6f0 [ 35.881531][ T5147] kobject_add_varg+0x9c/0xe8 [ 35.881544][ T5147] kobject_add+0x110/0x1c8 [ 35.881557][ T5147] device_add+0x394/0x9e0 [ 35.881567][ T5147] __add_disk+0x450/0xbdc [ 35.881580][ T5147] add_disk_fwnode+0xd4/0x340 [ 35.881592][ T5147] device_add_disk+0x38/0x4c [ 35.881604][ T5147] add_mtd_blktrans_dev+0xb28/0x107c [ 35.881618][ T5147] mtdblock_add_mtd+0x158/0x218 [ 35.881630][ T5147] blktrans_notify_add+0xa8/0xf8 [ 35.881643][ T5147] add_mtd_device+0xedc/0x1504 [ 35.881653][ T5147] mtd_add_partition+0x318/0x438 [ 35.881665][ T5147] mtdchar_blkpg_ioctl+0x224/0x248 [ 35.881678][ T5147] mtdchar_ioctl+0x1218/0x1a7c [ 35.881690][ T5147] mtdchar_unlocked_ioctl+0xb0/0xd8 [ 35.881703][ T5147] __arm64_sys_ioctl+0x154/0x1cc [ 35.881717][ T5147] invoke_syscall+0x98/0x244 [ 35.881735][ T5147] el0_svc_common+0xec/0x23c [ 35.881748][ T5147] do_el0_svc+0x4c/0x5c [ 35.881759][ T5147] el0_svc+0x60/0x1d8 [ 35.881771][ T5147] el0t_64_sync_handler+0x44/0x104 [ 35.881783][ T5147] el0t_64_sync+0x198/0x19c [ 35.886276][ T5147] kobject: kobject_add_internal failed for mtdblock1 (error: -12 parent: mtd1) [ 35.906248][ T5145] FAULT_INJECTION: forcing a failure. [ 35.906248][ T5145] name failslab, interval 1, probability 0, space 0, times 0 [ 35.906259][ T5145] CPU: 1 UID: 0 PID: 5145 Comm: syz.2.112 Not tainted syzkaller #0 PREEMPT [ 35.906268][ T5145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.906279][ T5145] Call trace: [ 35.906282][ T5145] show_stack+0x2c/0x3c (C) [ 35.906297][ T5145] __dump_stack+0x30/0x40 [ 35.906309][ T5145] dump_stack_lvl+0xd8/0x12c [ 35.906319][ T5145] dump_stack+0x1c/0x28 [ 35.906328][ T5145] should_fail_ex+0x418/0x58c [ 35.906340][ T5145] should_failslab+0xc4/0x120 [ 35.906351][ T5145] kmem_cache_alloc_node_noprof+0x98/0x604 [ 35.906359][ T5145] __alloc_skb+0x1f0/0x610 [ 35.906368][ T5145] inet6_ifmcaddr_notify+0xe8/0x1d4 [ 35.906379][ T5145] __ipv6_dev_mc_inc+0x820/0xa84 [ 35.906390][ T5145] ipv6_dev_mc_inc+0x2c/0x3c [ 35.906400][ T5145] ipv6_add_dev+0xb04/0x100c [ 35.906410][ T5145] addrconf_notify+0x400/0xbbc [ 35.906417][ T5145] notifier_call_chain+0x1a4/0x4cc [ 35.906427][ T5145] raw_notifier_call_chain+0x3c/0x50 [ 35.906437][ T5145] call_netdevice_notifiers_info+0xb8/0x120 [ 35.906445][ T5145] register_netdevice+0x1018/0x14c0 [ 35.906455][ T5145] register_netdev+0x4c/0x68 [ 35.906465][ T5145] vti6_init_net+0x224/0x36c [ 35.906473][ T5145] ops_init+0x2cc/0x528 [ 35.906482][ T5145] setup_net+0x118/0x2fc [ 35.906491][ T5145] copy_net_ns+0x454/0x698 [ 35.906499][ T5145] create_new_namespaces+0x304/0x50c [ 35.906508][ T5145] unshare_nsproxy_namespaces+0x120/0x170 [ 35.906517][ T5145] ksys_unshare+0x438/0x6cc [ 35.906525][ T5145] __arm64_sys_unshare+0x40/0x54 [ 35.906533][ T5145] invoke_syscall+0x98/0x244 [ 35.906544][ T5145] el0_svc_common+0xec/0x23c [ 35.906553][ T5145] do_el0_svc+0x4c/0x5c [ 35.906563][ T5145] el0_svc+0x60/0x1d8 [ 35.906573][ T5145] el0t_64_sync_handler+0x44/0x104 [ 35.906583][ T5145] el0t_64_sync+0x198/0x19c [ 36.002631][ T867] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.152002][ T867] usb 1-1: Using ep0 maxpacket: 8 [ 36.154301][ T5164] loop4: detected capacity change from 0 to 8 [ 36.157115][ T867] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.157154][ T867] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 36.158351][ T867] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 36.158366][ T867] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 36.160053][ T867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.160061][ T867] usb 1-1: Product: syz [ 36.160067][ T867] usb 1-1: Manufacturer: syz [ 36.160073][ T867] usb 1-1: SerialNumber: syz [ 36.173589][ T867] usb 1-1: config 0 descriptor?? [ 36.182436][ T5164] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 36.182446][ T5164] unable to read xattr id index table [ 36.191656][ T5164] SQUASHFS error: zlib decompression failed, data probably corrupt [ 36.191672][ T5164] SQUASHFS error: Failed to read block 0x9b: -5 [ 36.191692][ T5164] SQUASHFS error: Unable to read metadata cache entry [99] [ 36.191699][ T5164] SQUASHFS error: Unable to read inode 0x127 [ 36.392475][ T4817] usb 1-1: USB disconnect, device number 2 [ 36.427809][ T5177] netlink: 64 bytes leftover after parsing attributes in process `syz.4.125'. [ 36.447561][ T5179] loop1: detected capacity change from 0 to 128 [ 36.476519][ T5179] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.515897][ T5179] syz.1.124 (pid 5179) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 36.518337][ T5179] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 36.545379][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.609404][ T5188] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 36.609676][ T5188] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 36.609947][ T5188] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 36.610224][ T5188] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 36.707263][ T5191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 36.731787][ C1] net_ratelimit: 890 callbacks suppressed [ 36.760565][ T5199] FAULT_INJECTION: forcing a failure. [ 36.760565][ T5199] name fail_futex, interval 1, probability 0, space 0, times 1 [ 36.760583][ T5199] CPU: 1 UID: 0 PID: 5199 Comm: syz.1.132 Not tainted syzkaller #0 PREEMPT [ 36.760593][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.760608][ T5199] Call trace: [ 36.760611][ T5199] show_stack+0x2c/0x3c (C) [ 36.760630][ T5199] __dump_stack+0x30/0x40 [ 36.760644][ T5199] dump_stack_lvl+0xd8/0x12c [ 36.760655][ T5199] dump_stack+0x1c/0x28 [ 36.760667][ T5199] should_fail_ex+0x418/0x58c [ 36.760681][ T5199] should_fail+0x14/0x24 [ 36.760692][ T5199] get_futex_key+0x1ec/0x12b0 [ 36.760704][ T5199] futex_wait_setup+0x58/0x674 [ 36.760715][ T5199] __futex_wait+0x108/0x25c [ 36.760726][ T5199] futex_wait+0x108/0x2c0 [ 36.760737][ T5199] do_futex+0x320/0x378 [ 36.760748][ T5199] __arm64_sys_futex+0x2e4/0x418 [ 36.760759][ T5199] invoke_syscall+0x98/0x244 [ 36.760771][ T5199] el0_svc_common+0xec/0x23c [ 36.760782][ T5199] do_el0_svc+0x4c/0x5c [ 36.760794][ T5199] el0_svc+0x60/0x1d8 [ 36.760806][ T5199] el0t_64_sync_handler+0x44/0x104 [ 36.760818][ T5199] el0t_64_sync+0x198/0x19c [ 36.815128][ T5199] FAULT_INJECTION: forcing a failure. [ 36.815128][ T5199] name failslab, interval 1, probability 0, space 0, times 0 [ 36.815142][ T5199] CPU: 0 UID: 0 PID: 5199 Comm: syz.1.132 Not tainted syzkaller #0 PREEMPT [ 36.815152][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.815164][ T5199] Call trace: [ 36.815167][ T5199] show_stack+0x2c/0x3c (C) [ 36.815182][ T5199] __dump_stack+0x30/0x40 [ 36.815193][ T5199] dump_stack_lvl+0xd8/0x12c [ 36.815203][ T5199] dump_stack+0x1c/0x28 [ 36.815213][ T5199] should_fail_ex+0x418/0x58c [ 36.815224][ T5199] should_failslab+0xc4/0x120 [ 36.815235][ T5199] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 36.815245][ T5199] kstrdup+0x50/0x104 [ 36.815253][ T5199] kstrdup_const+0x54/0x6c [ 36.815260][ T5199] __kernfs_new_node+0xb0/0x7d8 [ 36.815270][ T5199] kernfs_new_node+0xe8/0x130 [ 36.815278][ T5199] __kernfs_create_file+0x60/0x2e0 [ 36.815288][ T5199] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 36.815297][ T5199] internal_create_group+0x550/0xb30 [ 36.815308][ T5199] internal_create_groups+0x64/0x138 [ 36.815319][ T5199] sysfs_create_groups+0x2c/0x3c [ 36.815329][ T5199] ib_setup_port_attrs+0x564/0x1380 [ 36.815338][ T5199] add_one_compat_dev+0x36c/0x534 [ 36.815347][ T5199] rdma_dev_init_net+0x1d4/0x2bc [ 36.815356][ T5199] ops_init+0x2cc/0x528 [ 36.815366][ T5199] setup_net+0x118/0x2fc [ 36.815374][ T5199] copy_net_ns+0x454/0x698 [ 36.815383][ T5199] create_new_namespaces+0x304/0x50c [ 36.815392][ T5199] unshare_nsproxy_namespaces+0x120/0x170 [ 36.815402][ T5199] ksys_unshare+0x438/0x6cc [ 36.815410][ T5199] __arm64_sys_unshare+0x40/0x54 [ 36.815418][ T5199] invoke_syscall+0x98/0x244 [ 36.815429][ T5199] el0_svc_common+0xec/0x23c [ 36.815439][ T5199] do_el0_svc+0x4c/0x5c [ 36.815448][ T5199] el0_svc+0x60/0x1d8 [ 36.815459][ T5199] el0t_64_sync_handler+0x44/0x104 [ 36.815469][ T5199] el0t_64_sync+0x198/0x19c [ 36.851632][ T5201] block nbd4: not configured, cannot reconfigure [ 36.862984][ T4724] block nbd0: Receive control failed (result -32) [ 36.971650][ T5210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'. [ 36.988699][ T5210] FAULT_INJECTION: forcing a failure. [ 36.988699][ T5210] name failslab, interval 1, probability 0, space 0, times 0 [ 36.988725][ T5210] CPU: 0 UID: 0 PID: 5210 Comm: syz.0.135 Not tainted syzkaller #0 PREEMPT [ 36.988739][ T5210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.988756][ T5210] Call trace: [ 36.988760][ T5210] show_stack+0x2c/0x3c (C) [ 36.988779][ T5210] __dump_stack+0x30/0x40 [ 36.988794][ T5210] dump_stack_lvl+0xd8/0x12c [ 36.988806][ T5210] dump_stack+0x1c/0x28 [ 36.988818][ T5210] should_fail_ex+0x418/0x58c [ 36.988831][ T5210] should_failslab+0xc4/0x120 [ 36.988844][ T5210] __kmalloc_cache_noprof+0x94/0x5fc [ 36.988854][ T5210] inetdev_init+0x7c/0x49c [ 36.988863][ T5210] inetdev_event+0x248/0x1184 [ 36.988873][ T5210] notifier_call_chain+0x1a4/0x4cc [ 36.988885][ T5210] raw_notifier_call_chain+0x3c/0x50 [ 36.988896][ T5210] call_netdevice_notifiers_info+0xb8/0x120 [ 36.988906][ T5210] register_netdevice+0x1018/0x14c0 [ 36.988919][ T5210] batadv_meshif_newlink+0xb0/0xc4 [ 36.988928][ T5210] rtnl_newlink_create+0x294/0x6b8 [ 36.988939][ T5210] rtnl_newlink+0xfe4/0x138c [ 36.988948][ T5210] rtnetlink_rcv_msg+0x66c/0x9bc [ 36.988958][ T5210] netlink_rcv_skb+0x238/0x414 [ 36.988969][ T5210] rtnetlink_rcv+0x28/0x38 [ 36.988978][ T5210] netlink_unicast+0x600/0x7f8 [ 36.988988][ T5210] netlink_sendmsg+0x648/0x948 [ 36.989000][ T5210] __sock_sendmsg+0xc8/0x17c [ 36.989010][ T5210] ____sys_sendmsg+0x3d0/0x6c8 [ 36.989021][ T5210] ___sys_sendmsg+0x198/0x224 [ 36.989032][ T5210] __sys_sendmsg+0x158/0x204 [ 36.989043][ T5210] __arm64_sys_sendmsg+0x88/0x9c [ 36.989054][ T5210] invoke_syscall+0x98/0x244 [ 36.989066][ T5210] el0_svc_common+0xec/0x23c [ 36.989085][ T5210] do_el0_svc+0x4c/0x5c [ 36.989097][ T5210] el0_svc+0x60/0x1d8 [ 36.989109][ T5210] el0t_64_sync_handler+0x44/0x104 [ 36.989121][ T5210] el0t_64_sync+0x198/0x19c [ 37.260824][ T5223] FAULT_INJECTION: forcing a failure. [ 37.260824][ T5223] name failslab, interval 1, probability 0, space 0, times 0 [ 37.260840][ T5223] CPU: 1 UID: 0 PID: 5223 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT [ 37.260850][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.260864][ T5223] Call trace: [ 37.260867][ T5223] show_stack+0x2c/0x3c (C) [ 37.260884][ T5223] __dump_stack+0x30/0x40 [ 37.260897][ T5223] dump_stack_lvl+0xd8/0x12c [ 37.260909][ T5223] dump_stack+0x1c/0x28 [ 37.260920][ T5223] should_fail_ex+0x418/0x58c [ 37.260933][ T5223] should_failslab+0xc4/0x120 [ 37.260947][ T5223] __kmalloc_cache_noprof+0x94/0x5fc [ 37.260956][ T5223] alloc_fs_context+0x7c/0xba4 [ 37.260970][ T5223] fs_context_for_mount+0x34/0x44 [ 37.260979][ T5223] mq_init_ns+0xdc/0x638 [ 37.260992][ T5223] copy_ipcs+0x3c8/0x63c [ 37.261004][ T5223] create_new_namespaces+0x1a8/0x50c [ 37.261015][ T5223] unshare_nsproxy_namespaces+0x120/0x170 [ 37.261026][ T5223] ksys_unshare+0x438/0x6cc [ 37.261035][ T5223] __arm64_sys_unshare+0x40/0x54 [ 37.261045][ T5223] invoke_syscall+0x98/0x244 [ 37.261057][ T5223] el0_svc_common+0xec/0x23c [ 37.261069][ T5223] do_el0_svc+0x4c/0x5c [ 37.261080][ T5223] el0_svc+0x60/0x1d8 [ 37.261098][ T5223] el0t_64_sync_handler+0x44/0x104 [ 37.261109][ T5223] el0t_64_sync+0x198/0x19c [ 37.261455][ T5223] FAULT_INJECTION: forcing a failure. [ 37.261455][ T5223] name failslab, interval 1, probability 0, space 0, times 0 [ 37.261465][ T5223] CPU: 1 UID: 0 PID: 5223 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT [ 37.261474][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.261485][ T5223] Call trace: [ 37.261487][ T5223] show_stack+0x2c/0x3c (C) [ 37.261500][ T5223] __dump_stack+0x30/0x40 [ 37.261512][ T5223] dump_stack_lvl+0xd8/0x12c [ 37.261523][ T5223] dump_stack+0x1c/0x28 [ 37.261534][ T5223] should_fail_ex+0x418/0x58c [ 37.261546][ T5223] should_failslab+0xc4/0x120 [ 37.261559][ T5223] __kmalloc_cache_noprof+0x94/0x5fc [ 37.261568][ T5223] shrinker_alloc+0x68/0x9b0 [ 37.261579][ T5223] sget_fc+0xbd0/0x1520 [ 37.261588][ T5223] vfs_get_super+0x40/0x148 [ 37.261598][ T5223] get_tree_nodev+0x2c/0x3c [ 37.261607][ T5223] mqueue_get_tree+0xac/0xe8 [ 37.261620][ T5223] vfs_get_tree+0x90/0x28c [ 37.261629][ T5223] fc_mount+0x24/0xac [ 37.261640][ T5223] fc_mount_longterm+0x20/0x74 [ 37.261650][ T5223] mq_init_ns+0x3c8/0x638 [ 37.261661][ T5223] copy_ipcs+0x3c8/0x63c [ 37.261673][ T5223] create_new_namespaces+0x1a8/0x50c [ 37.261684][ T5223] unshare_nsproxy_namespaces+0x120/0x170 [ 37.261694][ T5223] ksys_unshare+0x438/0x6cc [ 37.261703][ T5223] __arm64_sys_unshare+0x40/0x54 [ 37.261713][ T5223] invoke_syscall+0x98/0x244 [ 37.261725][ T5223] el0_svc_common+0xec/0x23c [ 37.261740][ T5223] do_el0_svc+0x4c/0x5c [ 37.261752][ T5223] el0_svc+0x60/0x1d8 [ 37.261763][ T5223] el0t_64_sync_handler+0x44/0x104 [ 37.261774][ T5223] el0t_64_sync+0x198/0x19c [ 37.317208][ T5199] FAULT_INJECTION: forcing a failure. [ 37.317208][ T5199] name failslab, interval 1, probability 0, space 0, times 0 [ 37.317219][ T5199] CPU: 0 UID: 0 PID: 5199 Comm: syz.1.132 Not tainted syzkaller #0 PREEMPT [ 37.317228][ T5199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.317238][ T5199] Call trace: [ 37.317241][ T5199] show_stack+0x2c/0x3c (C) [ 37.317256][ T5199] __dump_stack+0x30/0x40 [ 37.317267][ T5199] dump_stack_lvl+0xd8/0x12c [ 37.317277][ T5199] dump_stack+0x1c/0x28 [ 37.317286][ T5199] should_fail_ex+0x418/0x58c [ 37.317298][ T5199] should_failslab+0xc4/0x120 [ 37.317309][ T5199] __kmalloc_noprof+0x108/0x6c8 [ 37.317317][ T5199] kobject_get_path+0xbc/0x2a4 [ 37.317328][ T5199] kobject_uevent_env+0x264/0x944 [ 37.317336][ T5199] kobject_uevent+0x2c/0x3c [ 37.317343][ T5199] __kobject_del+0xd4/0x1c8 [ 37.317350][ T5199] kobject_put+0x1f4/0x4b8 [ 37.317356][ T5199] net_rx_queue_update_kobjects+0x5ac/0x66c [ 37.317368][ T5199] netdev_unregister_kobject+0xe8/0x39c [ 37.317378][ T5199] unregister_netdevice_many_notify+0x123c/0x1760 [ 37.317389][ T5199] default_device_exit_batch+0x42c/0x4ac [ 37.317397][ T5199] ops_undo_list+0x434/0x81c [ 37.317407][ T5199] setup_net+0x2a0/0x2fc [ 37.317415][ T5199] copy_net_ns+0x454/0x698 [ 37.317424][ T5199] create_new_namespaces+0x304/0x50c [ 37.317433][ T5199] unshare_nsproxy_namespaces+0x120/0x170 [ 37.317442][ T5199] ksys_unshare+0x438/0x6cc [ 37.317451][ T5199] __arm64_sys_unshare+0x40/0x54 [ 37.317459][ T5199] invoke_syscall+0x98/0x244 [ 37.317469][ T5199] el0_svc_common+0xec/0x23c [ 37.317478][ T5199] do_el0_svc+0x4c/0x5c [ 37.317488][ T5199] el0_svc+0x60/0x1d8 [ 37.317497][ T5199] el0t_64_sync_handler+0x44/0x104 [ 37.317507][ T5199] el0t_64_sync+0x198/0x19c [ 37.386063][ T5227] tipc: Started in network mode [ 37.386090][ T5227] tipc: Node identity 4, cluster identity 4711 [ 37.386109][ T5227] tipc: Node number set to 4 [ 37.403242][ T5230] binder: 5229:5230 tried to acquire reference to desc 0, got 1 instead [ 37.407039][ T5227] tipc: Enabled bearer , priority 0 [ 37.431145][ T5223] FAULT_INJECTION: forcing a failure. [ 37.431145][ T5223] name failslab, interval 1, probability 0, space 0, times 0 [ 37.431157][ T5223] CPU: 0 UID: 0 PID: 5223 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT [ 37.431166][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.431177][ T5223] Call trace: [ 37.431180][ T5223] show_stack+0x2c/0x3c (C) [ 37.431194][ T5223] __dump_stack+0x30/0x40 [ 37.431205][ T5223] dump_stack_lvl+0xd8/0x12c [ 37.431214][ T5223] dump_stack+0x1c/0x28 [ 37.431224][ T5223] should_fail_ex+0x418/0x58c [ 37.431235][ T5223] should_failslab+0xc4/0x120 [ 37.431246][ T5223] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 37.431255][ T5223] kstrdup+0x50/0x104 [ 37.431263][ T5223] kstrdup_const+0x54/0x6c [ 37.431273][ T5223] __kernfs_new_node+0xb0/0x7d8 [ 37.431283][ T5223] kernfs_new_node+0xe8/0x130 [ 37.431292][ T5223] __kernfs_create_file+0x60/0x2e0 [ 37.431302][ T5223] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 37.431313][ T5223] internal_create_group+0x550/0xb30 [ 37.431324][ T5223] internal_create_groups+0x64/0x138 [ 37.431334][ T5223] sysfs_create_groups+0x2c/0x3c [ 37.431344][ T5223] ib_setup_port_attrs+0xa74/0x1380 [ 37.431353][ T5223] add_one_compat_dev+0x36c/0x534 [ 37.431362][ T5223] rdma_dev_init_net+0x1d4/0x2bc [ 37.431371][ T5223] ops_init+0x2cc/0x528 [ 37.431380][ T5223] setup_net+0x118/0x2fc [ 37.431389][ T5223] copy_net_ns+0x454/0x698 [ 37.431398][ T5223] create_new_namespaces+0x304/0x50c [ 37.431407][ T5223] unshare_nsproxy_namespaces+0x120/0x170 [ 37.431416][ T5223] ksys_unshare+0x438/0x6cc [ 37.431424][ T5223] __arm64_sys_unshare+0x40/0x54 [ 37.431432][ T5223] invoke_syscall+0x98/0x244 [ 37.431443][ T5223] el0_svc_common+0xec/0x23c [ 37.431452][ T5223] do_el0_svc+0x4c/0x5c [ 37.431462][ T5223] el0_svc+0x60/0x1d8 [ 37.431472][ T5223] el0t_64_sync_handler+0x44/0x104 [ 37.431482][ T5223] el0t_64_sync+0x198/0x19c [ 37.452836][ T4724] Bluetooth: hci1: command tx timeout [ 37.452860][ T4722] Bluetooth: hci4: command tx timeout [ 37.461826][ T4722] Bluetooth: hci2: command tx timeout [ 38.025306][ T5248] syzkaller0: entered promiscuous mode [ 38.025315][ T5248] syzkaller0: entered allmulticast mode [ 38.209836][ T4907] binder: release 5229:5230 transaction 5 out, still active [ 38.209853][ T4907] binder: undelivered TRANSACTION_COMPLETE [ 38.236894][ T4907] binder: send failed reply for transaction 5, target dead [ 38.382951][ T5262] FAULT_INJECTION: forcing a failure. [ 38.382951][ T5262] name failslab, interval 1, probability 0, space 0, times 0 [ 38.382967][ T5262] CPU: 0 UID: 0 PID: 5262 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT [ 38.382978][ T5262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.382991][ T5262] Call trace: [ 38.382994][ T5262] show_stack+0x2c/0x3c (C) [ 38.383013][ T5262] __dump_stack+0x30/0x40 [ 38.383026][ T5262] dump_stack_lvl+0xd8/0x12c [ 38.383037][ T5262] dump_stack+0x1c/0x28 [ 38.383049][ T5262] should_fail_ex+0x418/0x58c [ 38.383062][ T5262] should_failslab+0xc4/0x120 [ 38.383081][ T5262] __kmalloc_cache_noprof+0x94/0x5fc [ 38.383091][ T5262] alloc_fs_context+0x7c/0xba4 [ 38.383101][ T5262] fs_context_for_mount+0x34/0x44 [ 38.383110][ T5262] mq_init_ns+0xdc/0x638 [ 38.383123][ T5262] copy_ipcs+0x3c8/0x63c [ 38.383135][ T5262] create_new_namespaces+0x1a8/0x50c [ 38.383146][ T5262] unshare_nsproxy_namespaces+0x120/0x170 [ 38.383157][ T5262] ksys_unshare+0x438/0x6cc [ 38.383166][ T5262] __arm64_sys_unshare+0x40/0x54 [ 38.383176][ T5262] invoke_syscall+0x98/0x244 [ 38.383188][ T5262] el0_svc_common+0xec/0x23c [ 38.383200][ T5262] do_el0_svc+0x4c/0x5c [ 38.383211][ T5262] el0_svc+0x60/0x1d8 [ 38.383224][ T5262] el0t_64_sync_handler+0x44/0x104 [ 38.383236][ T5262] el0t_64_sync+0x198/0x19c [ 38.383529][ T5262] FAULT_INJECTION: forcing a failure. [ 38.383529][ T5262] name failslab, interval 1, probability 0, space 0, times 0 [ 38.383539][ T5262] CPU: 0 UID: 0 PID: 5262 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT [ 38.383548][ T5262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.383559][ T5262] Call trace: [ 38.383562][ T5262] show_stack+0x2c/0x3c (C) [ 38.383574][ T5262] __dump_stack+0x30/0x40 [ 38.383585][ T5262] dump_stack_lvl+0xd8/0x12c [ 38.383597][ T5262] dump_stack+0x1c/0x28 [ 38.383608][ T5262] should_fail_ex+0x418/0x58c [ 38.383623][ T5262] should_failslab+0xc4/0x120 [ 38.383635][ T5262] __kmalloc_noprof+0x108/0x6c8 [ 38.383644][ T5262] security_sb_alloc+0x54/0x304 [ 38.383652][ T5262] sget_fc+0x7f4/0x1520 [ 38.383662][ T5262] vfs_get_super+0x40/0x148 [ 38.383672][ T5262] get_tree_nodev+0x2c/0x3c [ 38.383681][ T5262] mqueue_get_tree+0xac/0xe8 [ 38.383693][ T5262] vfs_get_tree+0x90/0x28c [ 38.383703][ T5262] fc_mount+0x24/0xac [ 38.383713][ T5262] fc_mount_longterm+0x20/0x74 [ 38.383723][ T5262] mq_init_ns+0x3c8/0x638 [ 38.383735][ T5262] copy_ipcs+0x3c8/0x63c [ 38.383747][ T5262] create_new_namespaces+0x1a8/0x50c [ 38.383757][ T5262] unshare_nsproxy_namespaces+0x120/0x170 [ 38.383768][ T5262] ksys_unshare+0x438/0x6cc [ 38.383777][ T5262] __arm64_sys_unshare+0x40/0x54 [ 38.383787][ T5262] invoke_syscall+0x98/0x244 [ 38.383798][ T5262] el0_svc_common+0xec/0x23c [ 38.383810][ T5262] do_el0_svc+0x4c/0x5c [ 38.383821][ T5262] el0_svc+0x60/0x1d8 [ 38.383833][ T5262] el0t_64_sync_handler+0x44/0x104 [ 38.383844][ T5262] el0t_64_sync+0x198/0x19c [ 38.462411][ T5262] FAULT_INJECTION: forcing a failure. [ 38.462411][ T5262] name failslab, interval 1, probability 0, space 0, times 0 [ 38.462424][ T5262] CPU: 0 UID: 0 PID: 5262 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT [ 38.462433][ T5262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.462444][ T5262] Call trace: [ 38.462447][ T5262] show_stack+0x2c/0x3c (C) [ 38.462461][ T5262] __dump_stack+0x30/0x40 [ 38.462472][ T5262] dump_stack_lvl+0xd8/0x12c [ 38.462482][ T5262] dump_stack+0x1c/0x28 [ 38.462491][ T5262] should_fail_ex+0x418/0x58c [ 38.462504][ T5262] should_failslab+0xc4/0x120 [ 38.462515][ T5262] kmem_cache_alloc_node_noprof+0x98/0x604 [ 38.462524][ T5262] __alloc_skb+0x1f0/0x610 [ 38.462533][ T5262] inet6_ifmcaddr_notify+0xe8/0x1d4 [ 38.462545][ T5262] __ipv6_dev_mc_inc+0x820/0xa84 [ 38.462555][ T5262] ipv6_dev_mc_inc+0x2c/0x3c [ 38.462565][ T5262] ipv6_add_dev+0xb04/0x100c [ 38.462575][ T5262] addrconf_notify+0x400/0xbbc [ 38.462583][ T5262] notifier_call_chain+0x1a4/0x4cc [ 38.462593][ T5262] raw_notifier_call_chain+0x3c/0x50 [ 38.462603][ T5262] call_netdevice_notifiers_info+0xb8/0x120 [ 38.462611][ T5262] register_netdevice+0x1018/0x14c0 [ 38.462621][ T5262] register_netdev+0x4c/0x68 [ 38.462631][ T5262] loopback_net_init+0x64/0x150 [ 38.462640][ T5262] ops_init+0x2cc/0x528 [ 38.462649][ T5262] setup_net+0x118/0x2fc [ 38.462658][ T5262] copy_net_ns+0x454/0x698 [ 38.462666][ T5262] create_new_namespaces+0x304/0x50c [ 38.462675][ T5262] unshare_nsproxy_namespaces+0x120/0x170 [ 38.462684][ T5262] ksys_unshare+0x438/0x6cc [ 38.462692][ T5262] __arm64_sys_unshare+0x40/0x54 [ 38.462700][ T5262] invoke_syscall+0x98/0x244 [ 38.462710][ T5262] el0_svc_common+0xec/0x23c [ 38.462720][ T5262] do_el0_svc+0x4c/0x5c [ 38.462730][ T5262] el0_svc+0x60/0x1d8 [ 38.462740][ T5262] el0t_64_sync_handler+0x44/0x104 [ 38.462750][ T5262] el0t_64_sync+0x198/0x19c [ 38.475506][ T5262] FAULT_INJECTION: forcing a failure. [ 38.475506][ T5262] name failslab, interval 1, probability 0, space 0, times 0 [ 38.475522][ T5262] CPU: 0 UID: 0 PID: 5262 Comm: syz.2.155 Not tainted syzkaller #0 PREEMPT [ 38.475532][ T5262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.475544][ T5262] Call trace: [ 38.475547][ T5262] show_stack+0x2c/0x3c (C) [ 38.475564][ T5262] __dump_stack+0x30/0x40 [ 38.475574][ T5262] dump_stack_lvl+0xd8/0x12c [ 38.475584][ T5262] dump_stack+0x1c/0x28 [ 38.475594][ T5262] should_fail_ex+0x418/0x58c [ 38.475606][ T5262] should_failslab+0xc4/0x120 [ 38.475617][ T5262] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 38.475626][ T5262] kstrdup+0x50/0x104 [ 38.475633][ T5262] kstrdup_const+0x54/0x6c [ 38.475641][ T5262] __kernfs_new_node+0xb0/0x7d8 [ 38.475650][ T5262] kernfs_new_node+0xe8/0x130 [ 38.475658][ T5262] __kernfs_create_file+0x60/0x2e0 [ 38.475668][ T5262] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 38.475678][ T5262] internal_create_group+0x550/0xb30 [ 38.475692][ T5262] internal_create_groups+0x64/0x138 [ 38.475702][ T5262] sysfs_create_groups+0x2c/0x3c [ 38.475713][ T5262] ib_setup_port_attrs+0xa74/0x1380 [ 38.475722][ T5262] add_one_compat_dev+0x36c/0x534 [ 38.475731][ T5262] rdma_dev_init_net+0x1d4/0x2bc [ 38.475740][ T5262] ops_init+0x2cc/0x528 [ 38.475750][ T5262] setup_net+0x118/0x2fc [ 38.475759][ T5262] copy_net_ns+0x454/0x698 [ 38.475767][ T5262] create_new_namespaces+0x304/0x50c [ 38.475777][ T5262] unshare_nsproxy_namespaces+0x120/0x170 [ 38.475786][ T5262] ksys_unshare+0x438/0x6cc [ 38.475794][ T5262] __arm64_sys_unshare+0x40/0x54 [ 38.475802][ T5262] invoke_syscall+0x98/0x244 [ 38.475812][ T5262] el0_svc_common+0xec/0x23c [ 38.475822][ T5262] do_el0_svc+0x4c/0x5c [ 38.475831][ T5262] el0_svc+0x60/0x1d8 [ 38.475842][ T5262] el0t_64_sync_handler+0x44/0x104 [ 38.475852][ T5262] el0t_64_sync+0x198/0x19c [ 38.641257][ T5279] netlink: 'syz.0.161': attribute type 3 has an invalid length. [ 39.669363][ T5317] binder: 5316:5317 tried to acquire reference to desc 0, got 1 instead [ 39.669502][ T5317] binder: tried to use weak ref as strong ref [ 39.669509][ T5317] binder: 5316:5317 got transaction with invalid handle, 0 [ 39.669518][ T5317] binder: 5317:5316 translate handle failed [ 39.669605][ T5317] binder: 5316:5317 transaction call to 5316:0 failed 10/29201/-22, code 0 size 72-24 line 3572 [ 39.669846][ T4802] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.727792][ T5336] FAULT_INJECTION: forcing a failure. [ 40.727792][ T5336] name fail_futex, interval 1, probability 0, space 0, times 0 [ 40.727809][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.183 Not tainted syzkaller #0 PREEMPT [ 40.727821][ T5336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.727834][ T5336] Call trace: [ 40.727838][ T5336] show_stack+0x2c/0x3c (C) [ 40.727856][ T5336] __dump_stack+0x30/0x40 [ 40.727870][ T5336] dump_stack_lvl+0xd8/0x12c [ 40.727882][ T5336] dump_stack+0x1c/0x28 [ 40.727893][ T5336] should_fail_ex+0x418/0x58c [ 40.727908][ T5336] should_fail+0x14/0x24 [ 40.727919][ T5336] get_futex_key+0x1ec/0x12b0 [ 40.727931][ T5336] futex_wait_setup+0x58/0x674 [ 40.727942][ T5336] __futex_wait+0x108/0x25c [ 40.727954][ T5336] futex_wait+0x108/0x2c0 [ 40.727964][ T5336] do_futex+0x320/0x378 [ 40.727975][ T5336] __arm64_sys_futex+0x2e4/0x418 [ 40.727985][ T5336] invoke_syscall+0x98/0x244 [ 40.727998][ T5336] el0_svc_common+0xec/0x23c [ 40.728010][ T5336] do_el0_svc+0x4c/0x5c [ 40.728021][ T5336] el0_svc+0x60/0x1d8 [ 40.728033][ T5336] el0t_64_sync_handler+0x44/0x104 [ 40.728045][ T5336] el0t_64_sync+0x198/0x19c [ 40.782296][ T5336] FAULT_INJECTION: forcing a failure. [ 40.782296][ T5336] name failslab, interval 1, probability 0, space 0, times 0 [ 40.782307][ T5336] CPU: 0 UID: 0 PID: 5336 Comm: syz.0.183 Not tainted syzkaller #0 PREEMPT [ 40.782316][ T5336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 40.782327][ T5336] Call trace: [ 40.782330][ T5336] show_stack+0x2c/0x3c (C) [ 40.782343][ T5336] __dump_stack+0x30/0x40 [ 40.782353][ T5336] dump_stack_lvl+0xd8/0x12c [ 40.782363][ T5336] dump_stack+0x1c/0x28 [ 40.782373][ T5336] should_fail_ex+0x418/0x58c [ 40.782384][ T5336] should_failslab+0xc4/0x120 [ 40.782395][ T5336] kmem_cache_alloc_node_noprof+0x98/0x604 [ 40.782403][ T5336] __alloc_skb+0x1f0/0x610 [ 40.782413][ T5336] inet_netconf_notify_devconf+0x50/0x118 [ 40.782421][ T5336] __devinet_sysctl_register+0x1fc/0x274 [ 40.782429][ T5336] devinet_sysctl_register+0x164/0x1c0 [ 40.782437][ T5336] inetdev_init+0x250/0x49c [ 40.782444][ T5336] inetdev_event+0x248/0x1184 [ 40.782452][ T5336] notifier_call_chain+0x1a4/0x4cc [ 40.782462][ T5336] raw_notifier_call_chain+0x3c/0x50 [ 40.782472][ T5336] call_netdevice_notifiers_info+0xb8/0x120 [ 40.782480][ T5336] register_netdevice+0x1018/0x14c0 [ 40.782490][ T5336] __ip_tunnel_create+0x34c/0x4b0 [ 40.782498][ T5336] ip_tunnel_init_net+0x238/0x49c [ 40.782505][ T5336] ipgre_tap_init_net+0x38/0x48 [ 40.782512][ T5336] ops_init+0x2cc/0x528 [ 40.782521][ T5336] setup_net+0x118/0x2fc [ 40.782530][ T5336] copy_net_ns+0x454/0x698 [ 40.782539][ T5336] create_new_namespaces+0x304/0x50c [ 40.782548][ T5336] unshare_nsproxy_namespaces+0x120/0x170 [ 40.782557][ T5336] ksys_unshare+0x438/0x6cc [ 40.782565][ T5336] __arm64_sys_unshare+0x40/0x54 [ 40.782573][ T5336] invoke_syscall+0x98/0x244 [ 40.782584][ T5336] el0_svc_common+0xec/0x23c [ 40.782593][ T5336] do_el0_svc+0x4c/0x5c [ 40.782603][ T5336] el0_svc+0x60/0x1d8 [ 40.782613][ T5336] el0t_64_sync_handler+0x44/0x104 [ 40.782622][ T5336] el0t_64_sync+0x198/0x19c [ 40.952743][ T5243] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 41.111276][ T5355] netlink: 'syz.2.191': attribute type 1 has an invalid length. [ 41.264060][ T5370] netlink: 64 bytes leftover after parsing attributes in process `syz.2.198'. [ 41.271401][ T5368] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 41.425953][ T5387] netlink: 'syz.1.204': attribute type 1 has an invalid length. [ 41.433600][ T5386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.435760][ T5386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.495940][ T5381] tipc: Resetting bearer [ 41.496610][ T5391] bridge0: port 3(syz_tun) entered blocking state [ 41.496700][ T5391] bridge0: port 3(syz_tun) entered disabled state [ 41.496794][ T5391] syz_tun: entered allmulticast mode [ 41.497400][ T5391] syz_tun: entered promiscuous mode [ 41.497638][ T5391] bridge0: port 3(syz_tun) entered blocking state [ 41.497661][ T5391] bridge0: port 3(syz_tun) entered forwarding state [ 41.597411][ T5398] Bluetooth: ISO socket layer initialized [ 41.615208][ T5399] FAULT_INJECTION: forcing a failure. [ 41.615208][ T5399] name failslab, interval 1, probability 0, space 0, times 0 [ 41.615224][ T5399] CPU: 0 UID: 0 PID: 5399 Comm: syz.1.208 Not tainted syzkaller #0 PREEMPT [ 41.615236][ T5399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.615251][ T5399] Call trace: [ 41.615254][ T5399] show_stack+0x2c/0x3c (C) [ 41.615274][ T5399] __dump_stack+0x30/0x40 [ 41.615289][ T5399] dump_stack_lvl+0xd8/0x12c [ 41.615300][ T5399] dump_stack+0x1c/0x28 [ 41.615312][ T5399] should_fail_ex+0x418/0x58c [ 41.615325][ T5399] should_failslab+0xc4/0x120 [ 41.615338][ T5399] __kmalloc_cache_noprof+0x94/0x5fc [ 41.615348][ T5399] get_mountpoint+0x148/0x390 [ 41.615360][ T5399] do_lock_mount+0x304/0x690 [ 41.615371][ T5399] do_new_mount+0x360/0x538 [ 41.615382][ T5399] path_mount+0x5f0/0xa88 [ 41.615393][ T5399] do_mount+0xe8/0x148 [ 41.615403][ T5399] __arm64_sys_mount+0x33c/0x388 [ 41.615414][ T5399] invoke_syscall+0x98/0x244 [ 41.615427][ T5399] el0_svc_common+0xec/0x23c [ 41.615438][ T5399] do_el0_svc+0x4c/0x5c [ 41.615450][ T5399] el0_svc+0x60/0x1d8 [ 41.615462][ T5399] el0t_64_sync_handler+0x44/0x104 [ 41.615474][ T5399] el0t_64_sync+0x198/0x19c [ 41.678829][ T5401] binder: 5400:5401 tried to acquire reference to desc 0, got 1 instead [ 41.678852][ T5401] binder: 5400:5401 ioctl c0306201 200003c0 returned -14 [ 41.678997][ T5401] binder: 5400:5401 got transaction with unaligned buffers size, 31 [ 41.679024][ T5401] binder: 5400:5401 transaction call to 5400:0 failed 15/29201/-22, code 0 size 0-0 line 3465 [ 41.680133][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 41.681826][ T1092] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 41.821984][ T1092] usb 1-1: device descriptor read/64, error -71 [ 41.850875][ T5417] netlink: 'syz.2.218': attribute type 1 has an invalid length. [ 41.863089][ T5417] net_ratelimit: 411 callbacks suppressed [ 41.946134][ T5427] netlink: 64 bytes leftover after parsing attributes in process `syz.4.222'. [ 41.990465][ T5432] binder: 5431:5432 got reply transaction with no transaction stack [ 41.990486][ T5432] binder: 5431:5432 transaction reply to 0:0 failed 18/29201/-71, code 0 size 0-0 line 3156 [ 42.022000][ T5437] loop3: detected capacity change from 0 to 512 [ 42.047814][ T5437] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.064363][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.073883][ T1092] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 42.170373][ T5458] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 42.211838][ T1092] usb 1-1: device descriptor read/64, error -71 [ 42.322107][ T1092] usb usb1-port1: attempt power cycle [ 42.383246][ T5481] FAULT_INJECTION: forcing a failure. [ 42.383246][ T5481] name fail_futex, interval 1, probability 0, space 0, times 0 [ 42.383261][ T5481] CPU: 0 UID: 0 PID: 5481 Comm: syz.3.245 Not tainted syzkaller #0 PREEMPT [ 42.383272][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.383285][ T5481] Call trace: [ 42.383288][ T5481] show_stack+0x2c/0x3c (C) [ 42.383306][ T5481] __dump_stack+0x30/0x40 [ 42.383319][ T5481] dump_stack_lvl+0xd8/0x12c [ 42.383330][ T5481] dump_stack+0x1c/0x28 [ 42.383341][ T5481] should_fail_ex+0x418/0x58c [ 42.383355][ T5481] should_fail+0x14/0x24 [ 42.383366][ T5481] get_futex_key+0x1ec/0x12b0 [ 42.383377][ T5481] futex_wait_setup+0x58/0x674 [ 42.383389][ T5481] __futex_wait+0x108/0x25c [ 42.383400][ T5481] futex_wait+0x108/0x2c0 [ 42.383411][ T5481] do_futex+0x320/0x378 [ 42.383422][ T5481] __arm64_sys_futex+0x2e4/0x418 [ 42.383433][ T5481] invoke_syscall+0x98/0x244 [ 42.383445][ T5481] el0_svc_common+0xec/0x23c [ 42.383456][ T5481] do_el0_svc+0x4c/0x5c [ 42.383468][ T5481] el0_svc+0x60/0x1d8 [ 42.383480][ T5481] el0t_64_sync_handler+0x44/0x104 [ 42.383492][ T5481] el0t_64_sync+0x198/0x19c [ 42.390813][ T5483] FAULT_INJECTION: forcing a failure. [ 42.390813][ T5483] name fail_futex, interval 1, probability 0, space 0, times 0 [ 42.390837][ T5483] CPU: 1 UID: 0 PID: 5483 Comm: syz.1.246 Not tainted syzkaller #0 PREEMPT [ 42.390849][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.390863][ T5483] Call trace: [ 42.390867][ T5483] show_stack+0x2c/0x3c (C) [ 42.390884][ T5483] __dump_stack+0x30/0x40 [ 42.390897][ T5483] dump_stack_lvl+0xd8/0x12c [ 42.390909][ T5483] dump_stack+0x1c/0x28 [ 42.390921][ T5483] should_fail_ex+0x418/0x58c [ 42.390935][ T5483] should_fail+0x14/0x24 [ 42.390947][ T5483] get_futex_key+0x1ec/0x12b0 [ 42.390958][ T5483] futex_wait_setup+0x58/0x674 [ 42.390971][ T5483] __futex_wait+0x108/0x25c [ 42.390983][ T5483] futex_wait+0x108/0x2c0 [ 42.390995][ T5483] do_futex+0x320/0x378 [ 42.391005][ T5483] __arm64_sys_futex+0x2e4/0x418 [ 42.391017][ T5483] invoke_syscall+0x98/0x244 [ 42.391030][ T5483] el0_svc_common+0xec/0x23c [ 42.391043][ T5483] do_el0_svc+0x4c/0x5c [ 42.391055][ T5483] el0_svc+0x60/0x1d8 [ 42.391068][ T5483] el0t_64_sync_handler+0x44/0x104 [ 42.391080][ T5483] el0t_64_sync+0x198/0x19c [ 42.440941][ T5481] FAULT_INJECTION: forcing a failure. [ 42.440941][ T5481] name failslab, interval 1, probability 0, space 0, times 0 [ 42.440958][ T5481] CPU: 0 UID: 0 PID: 5481 Comm: syz.3.245 Not tainted syzkaller #0 PREEMPT [ 42.440969][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.440982][ T5481] Call trace: [ 42.440985][ T5481] show_stack+0x2c/0x3c (C) [ 42.441000][ T5481] __dump_stack+0x30/0x40 [ 42.441011][ T5481] dump_stack_lvl+0xd8/0x12c [ 42.441021][ T5481] dump_stack+0x1c/0x28 [ 42.441030][ T5481] should_fail_ex+0x418/0x58c [ 42.441042][ T5481] should_failslab+0xc4/0x120 [ 42.441053][ T5481] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 42.441062][ T5481] kstrdup+0x50/0x104 [ 42.441070][ T5481] kstrdup_const+0x54/0x6c [ 42.441083][ T5481] __kernfs_new_node+0xb0/0x7d8 [ 42.441093][ T5481] kernfs_new_node+0xe8/0x130 [ 42.441102][ T5481] __kernfs_create_file+0x60/0x2e0 [ 42.441112][ T5481] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 42.441122][ T5481] internal_create_group+0x550/0xb30 [ 42.441133][ T5481] internal_create_groups+0x64/0x138 [ 42.441143][ T5481] sysfs_create_groups+0x2c/0x3c [ 42.441154][ T5481] ib_setup_port_attrs+0x564/0x1380 [ 42.441163][ T5481] add_one_compat_dev+0x36c/0x534 [ 42.441172][ T5481] rdma_dev_init_net+0x1d4/0x2bc [ 42.441180][ T5481] ops_init+0x2cc/0x528 [ 42.441190][ T5481] setup_net+0x118/0x2fc [ 42.441199][ T5481] copy_net_ns+0x454/0x698 [ 42.441208][ T5481] create_new_namespaces+0x304/0x50c [ 42.441218][ T5481] unshare_nsproxy_namespaces+0x120/0x170 [ 42.441227][ T5481] ksys_unshare+0x438/0x6cc [ 42.441235][ T5481] __arm64_sys_unshare+0x40/0x54 [ 42.441243][ T5481] invoke_syscall+0x98/0x244 [ 42.441254][ T5481] el0_svc_common+0xec/0x23c [ 42.441264][ T5481] do_el0_svc+0x4c/0x5c [ 42.441273][ T5481] el0_svc+0x60/0x1d8 [ 42.441284][ T5481] el0t_64_sync_handler+0x44/0x104 [ 42.441294][ T5481] el0t_64_sync+0x198/0x19c [ 42.484404][ T5483] FAULT_INJECTION: forcing a failure. [ 42.484404][ T5483] name failslab, interval 1, probability 0, space 0, times 0 [ 42.484417][ T5483] CPU: 1 UID: 0 PID: 5483 Comm: syz.1.246 Not tainted syzkaller #0 PREEMPT [ 42.484428][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.484442][ T5483] Call trace: [ 42.484445][ T5483] show_stack+0x2c/0x3c (C) [ 42.484460][ T5483] __dump_stack+0x30/0x40 [ 42.484473][ T5483] dump_stack_lvl+0xd8/0x12c [ 42.484484][ T5483] dump_stack+0x1c/0x28 [ 42.484496][ T5483] should_fail_ex+0x418/0x58c [ 42.484509][ T5483] should_failslab+0xc4/0x120 [ 42.484523][ T5483] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 42.484534][ T5483] kmemdup_noprof+0x44/0x8c [ 42.484542][ T5483] devinet_init_net+0x9c/0x56c [ 42.484552][ T5483] ops_init+0x2cc/0x528 [ 42.484562][ T5483] setup_net+0x118/0x2fc [ 42.484572][ T5483] copy_net_ns+0x454/0x698 [ 42.484583][ T5483] create_new_namespaces+0x304/0x50c [ 42.484594][ T5483] unshare_nsproxy_namespaces+0x120/0x170 [ 42.484604][ T5483] ksys_unshare+0x438/0x6cc [ 42.484613][ T5483] __arm64_sys_unshare+0x40/0x54 [ 42.484623][ T5483] invoke_syscall+0x98/0x244 [ 42.484636][ T5483] el0_svc_common+0xec/0x23c [ 42.484647][ T5483] do_el0_svc+0x4c/0x5c [ 42.484659][ T5483] el0_svc+0x60/0x1d8 [ 42.484672][ T5483] el0t_64_sync_handler+0x44/0x104 [ 42.484685][ T5483] el0t_64_sync+0x198/0x19c [ 42.627348][ T5481] FAULT_INJECTION: forcing a failure. [ 42.627348][ T5481] name failslab, interval 1, probability 0, space 0, times 0 [ 42.627361][ T5481] CPU: 1 UID: 0 PID: 5481 Comm: syz.3.245 Not tainted syzkaller #0 PREEMPT [ 42.627372][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.627387][ T5481] Call trace: [ 42.627390][ T5481] show_stack+0x2c/0x3c (C) [ 42.627404][ T5481] __dump_stack+0x30/0x40 [ 42.627415][ T5481] dump_stack_lvl+0xd8/0x12c [ 42.627425][ T5481] dump_stack+0x1c/0x28 [ 42.627434][ T5481] should_fail_ex+0x418/0x58c [ 42.627445][ T5481] should_failslab+0xc4/0x120 [ 42.627456][ T5481] __kmalloc_cache_noprof+0x94/0x5fc [ 42.627465][ T5481] kobject_uevent_env+0x250/0x944 [ 42.627473][ T5481] kobject_uevent+0x2c/0x3c [ 42.627480][ T5481] device_del+0x5f8/0x71c [ 42.627490][ T5481] netdev_unregister_kobject+0x2a8/0x39c [ 42.627501][ T5481] unregister_netdevice_many_notify+0x123c/0x1760 [ 42.627512][ T5481] default_device_exit_batch+0x42c/0x4ac [ 42.627521][ T5481] ops_undo_list+0x434/0x81c [ 42.627530][ T5481] setup_net+0x2a0/0x2fc [ 42.627539][ T5481] copy_net_ns+0x454/0x698 [ 42.627548][ T5481] create_new_namespaces+0x304/0x50c [ 42.627557][ T5481] unshare_nsproxy_namespaces+0x120/0x170 [ 42.627566][ T5481] ksys_unshare+0x438/0x6cc [ 42.627574][ T5481] __arm64_sys_unshare+0x40/0x54 [ 42.627583][ T5481] invoke_syscall+0x98/0x244 [ 42.627593][ T5481] el0_svc_common+0xec/0x23c [ 42.627603][ T5481] do_el0_svc+0x4c/0x5c [ 42.627612][ T5481] el0_svc+0x60/0x1d8 [ 42.627622][ T5481] el0t_64_sync_handler+0x44/0x104 [ 42.627632][ T5481] el0t_64_sync+0x198/0x19c [ 42.702062][ T1092] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 42.722273][ T1092] usb 1-1: device descriptor read/8, error -71 [ 42.925830][ T5503] batman_adv: batadv0: Adding interface: syzkaller0 [ 42.925837][ T5503] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.925854][ T5503] batman_adv: batadv0: Interface activated: syzkaller0 [ 42.929883][ T5502] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 42.939549][ T5502] batman_adv: batadv0: Removing interface: syzkaller0 [ 42.962246][ T1092] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 42.982910][ T1092] usb 1-1: device descriptor read/8, error -71 [ 43.061559][ T5511] netlink: 'syz.2.257': attribute type 1 has an invalid length. [ 43.082740][ T5483] FAULT_INJECTION: forcing a failure. [ 43.082740][ T5483] name fail_futex, interval 1, probability 0, space 0, times 0 [ 43.082754][ T5483] CPU: 0 UID: 0 PID: 5483 Comm: syz.1.246 Not tainted syzkaller #0 PREEMPT [ 43.082764][ T5483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.082776][ T5483] Call trace: [ 43.082778][ T5483] show_stack+0x2c/0x3c (C) [ 43.082792][ T5483] __dump_stack+0x30/0x40 [ 43.082803][ T5483] dump_stack_lvl+0xd8/0x12c [ 43.082812][ T5483] dump_stack+0x1c/0x28 [ 43.082822][ T5483] should_fail_ex+0x418/0x58c [ 43.082832][ T5483] should_fail+0x14/0x24 [ 43.082842][ T5483] get_futex_key+0x718/0x12b0 [ 43.082851][ T5483] futex_wake+0x10c/0x594 [ 43.082860][ T5483] do_futex+0x2c4/0x378 [ 43.082868][ T5483] mm_exit_exec_release+0x190/0x27c [ 43.082876][ T5483] exit_mm+0x50/0x1f0 [ 43.082886][ T5483] do_exit+0x524/0x1a74 [ 43.082896][ T5483] do_group_exit+0x198/0x238 [ 43.082906][ T5483] get_signal+0xfb0/0x1094 [ 43.082913][ T5483] arch_do_signal_or_restart+0x288/0x444c [ 43.082923][ T5483] exit_to_user_mode_loop+0x70/0x17c [ 43.082932][ T5483] el0_svc+0x12c/0x1d8 [ 43.082943][ T5483] el0t_64_sync_handler+0x44/0x104 [ 43.082952][ T5483] el0t_64_sync+0x198/0x19c [ 43.094230][ T1092] usb usb1-port1: unable to enumerate USB device [ 43.161331][ T5517] capability: warning: `syz.4.260' uses 32-bit capabilities (legacy support in use) [ 43.283431][ T5526] tipc: Started in network mode [ 43.283441][ T5526] tipc: Node identity 4, cluster identity 4711 [ 43.283509][ T5526] tipc: Node number set to 4 [ 43.285577][ T5526] tipc: Enabled bearer , priority 0 [ 43.326588][ T5532] loop3: detected capacity change from 0 to 128 [ 43.332433][ T5532] EXT4-fs: Mount option(s) incompatible with ext2 [ 43.338620][ T5537] loop4: detected capacity change from 0 to 512 [ 43.340731][ T5537] EXT4-fs (loop4): Test dummy encryption mode enabled [ 43.340750][ T5537] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.340758][ T5537] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.353747][ T5537] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.268: bad orphan inode 131083 [ 43.353833][ T5537] loop4: lost filesystem error report for type 5 error -117 [ 43.357045][ T5537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.373941][ T5531] overlayfs: missing 'lowerdir' [ 43.388711][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.439846][ T5544] FAULT_INJECTION: forcing a failure. [ 43.439846][ T5544] name fail_futex, interval 1, probability 0, space 0, times 0 [ 43.439865][ T5544] CPU: 1 UID: 0 PID: 5544 Comm: syz.4.269 Not tainted syzkaller #0 PREEMPT [ 43.439875][ T5544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.439889][ T5544] Call trace: [ 43.439892][ T5544] show_stack+0x2c/0x3c (C) [ 43.439912][ T5544] __dump_stack+0x30/0x40 [ 43.439927][ T5544] dump_stack_lvl+0xd8/0x12c [ 43.439938][ T5544] dump_stack+0x1c/0x28 [ 43.439949][ T5544] should_fail_ex+0x418/0x58c [ 43.439962][ T5544] should_fail+0x14/0x24 [ 43.439974][ T5544] get_futex_key+0x1ec/0x12b0 [ 43.439988][ T5544] futex_wait_setup+0x58/0x674 [ 43.440000][ T5544] __futex_wait+0x108/0x25c [ 43.440011][ T5544] futex_wait+0x108/0x2c0 [ 43.440022][ T5544] do_futex+0x320/0x378 [ 43.440033][ T5544] __arm64_sys_futex+0x2e4/0x418 [ 43.440043][ T5544] invoke_syscall+0x98/0x244 [ 43.440056][ T5544] el0_svc_common+0xec/0x23c [ 43.440067][ T5544] do_el0_svc+0x4c/0x5c [ 43.440078][ T5544] el0_svc+0x60/0x1d8 [ 43.440096][ T5544] el0t_64_sync_handler+0x44/0x104 [ 43.440107][ T5544] el0t_64_sync+0x198/0x19c [ 43.565793][ T5544] FAULT_INJECTION: forcing a failure. [ 43.565793][ T5544] name failslab, interval 1, probability 0, space 0, times 0 [ 43.565805][ T5544] CPU: 1 UID: 0 PID: 5544 Comm: syz.4.269 Not tainted syzkaller #0 PREEMPT [ 43.565815][ T5544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 43.565827][ T5544] Call trace: [ 43.565830][ T5544] show_stack+0x2c/0x3c (C) [ 43.565845][ T5544] __dump_stack+0x30/0x40 [ 43.565857][ T5544] dump_stack_lvl+0xd8/0x12c [ 43.565868][ T5544] dump_stack+0x1c/0x28 [ 43.565880][ T5544] should_fail_ex+0x418/0x58c [ 43.565893][ T5544] should_failslab+0xc4/0x120 [ 43.565906][ T5544] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 43.565917][ T5544] kmemdup_noprof+0x44/0x8c [ 43.565926][ T5544] devinet_init_net+0x9c/0x56c [ 43.565936][ T5544] ops_init+0x2cc/0x528 [ 43.565947][ T5544] setup_net+0x118/0x2fc [ 43.565957][ T5544] copy_net_ns+0x454/0x698 [ 43.565967][ T5544] create_new_namespaces+0x304/0x50c [ 43.565978][ T5544] unshare_nsproxy_namespaces+0x120/0x170 [ 43.565989][ T5544] ksys_unshare+0x438/0x6cc [ 43.565999][ T5544] __arm64_sys_unshare+0x40/0x54 [ 43.566008][ T5544] invoke_syscall+0x98/0x244 [ 43.566020][ T5544] el0_svc_common+0xec/0x23c [ 43.566032][ T5544] do_el0_svc+0x4c/0x5c [ 43.566043][ T5544] el0_svc+0x60/0x1d8 [ 43.566056][ T5544] el0t_64_sync_handler+0x44/0x104 [ 43.566068][ T5544] el0t_64_sync+0x198/0x19c [ 43.750390][ T5561] loop3: detected capacity change from 0 to 1024 [ 43.753571][ T5561] ext4: Unknown parameter 'obj_user' [ 43.755290][ T4722] Bluetooth: Frame is too long (len 16, expected len 4) [ 44.142791][ T5581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.143084][ T5581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.222160][ T5544] FAULT_INJECTION: forcing a failure. [ 44.222160][ T5544] name fail_futex, interval 1, probability 0, space 0, times 0 [ 44.222177][ T5544] CPU: 1 UID: 0 PID: 5544 Comm: syz.4.269 Not tainted syzkaller #0 PREEMPT [ 44.222188][ T5544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.222200][ T5544] Call trace: [ 44.222203][ T5544] show_stack+0x2c/0x3c (C) [ 44.222221][ T5544] __dump_stack+0x30/0x40 [ 44.222231][ T5544] dump_stack_lvl+0xd8/0x12c [ 44.222241][ T5544] dump_stack+0x1c/0x28 [ 44.222250][ T5544] should_fail_ex+0x418/0x58c [ 44.222261][ T5544] should_fail+0x14/0x24 [ 44.222270][ T5544] get_futex_key+0x718/0x12b0 [ 44.222280][ T5544] futex_wake+0x10c/0x594 [ 44.222289][ T5544] do_futex+0x2c4/0x378 [ 44.222298][ T5544] mm_exit_exec_release+0x190/0x27c [ 44.222306][ T5544] exit_mm+0x50/0x1f0 [ 44.222316][ T5544] do_exit+0x524/0x1a74 [ 44.222326][ T5544] do_group_exit+0x198/0x238 [ 44.222335][ T5544] get_signal+0xfb0/0x1094 [ 44.222343][ T5544] arch_do_signal_or_restart+0x288/0x444c [ 44.222353][ T5544] exit_to_user_mode_loop+0x70/0x17c [ 44.222363][ T5544] el0_svc+0x12c/0x1d8 [ 44.222373][ T5544] el0t_64_sync_handler+0x44/0x104 [ 44.222383][ T5544] el0t_64_sync+0x198/0x19c [ 44.323975][ T5593] netlink: 'syz.3.292': attribute type 1 has an invalid length. [ 44.600044][ T5611] FAULT_INJECTION: forcing a failure. [ 44.600044][ T5611] name failslab, interval 1, probability 0, space 0, times 0 [ 44.600060][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz.0.301 Not tainted syzkaller #0 PREEMPT [ 44.600071][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.600091][ T5611] Call trace: [ 44.600095][ T5611] show_stack+0x2c/0x3c (C) [ 44.600115][ T5611] __dump_stack+0x30/0x40 [ 44.600130][ T5611] dump_stack_lvl+0xd8/0x12c [ 44.600142][ T5611] dump_stack+0x1c/0x28 [ 44.600154][ T5611] should_fail_ex+0x418/0x58c [ 44.600167][ T5611] should_failslab+0xc4/0x120 [ 44.600180][ T5611] __kmalloc_cache_node_noprof+0x98/0x618 [ 44.600190][ T5611] alloc_cpumask_var_node+0x90/0x138 [ 44.600204][ T5611] alloc_workqueue_attrs_noprof+0x84/0x154 [ 44.600215][ T5611] apply_wqattrs_prepare+0xf4/0xb24 [ 44.600225][ T5611] apply_workqueue_attrs_locked+0x70/0xd4 [ 44.600234][ T5611] __alloc_workqueue+0x9e4/0x11a0 [ 44.600243][ T5611] alloc_workqueue_va+0x5c/0x138 [ 44.600252][ T5611] alloc_workqueue_noprof+0xe0/0x130 [ 44.600261][ T5611] __rds_conn_create+0xe48/0x1920 [ 44.600274][ T5611] rds_conn_create_outgoing+0x60/0x7c [ 44.600286][ T5611] rds_sendmsg+0xd0c/0x1c64 [ 44.600295][ T5611] __sock_sendmsg+0xc8/0x17c [ 44.600306][ T5611] ____sys_sendmsg+0x3d0/0x6c8 [ 44.600317][ T5611] ___sys_sendmsg+0x198/0x224 [ 44.600328][ T5611] __sys_sendmsg+0x158/0x204 [ 44.600339][ T5611] __arm64_sys_sendmsg+0x88/0x9c [ 44.600350][ T5611] invoke_syscall+0x98/0x244 [ 44.600362][ T5611] el0_svc_common+0xec/0x23c [ 44.600374][ T5611] do_el0_svc+0x4c/0x5c [ 44.600386][ T5611] el0_svc+0x60/0x1d8 [ 44.600397][ T5611] el0t_64_sync_handler+0x44/0x104 [ 44.600409][ T5611] el0t_64_sync+0x198/0x19c [ 44.600432][ T5611] => alloc_cpumask_var: failed! [ 44.600437][ T5611] CPU: 0 UID: 0 PID: 5611 Comm: syz.0.301 Not tainted syzkaller #0 PREEMPT [ 44.600446][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.600457][ T5611] Call trace: [ 44.600459][ T5611] show_stack+0x2c/0x3c (C) [ 44.600471][ T5611] __dump_stack+0x30/0x40 [ 44.600483][ T5611] dump_stack_lvl+0xd8/0x12c [ 44.600495][ T5611] dump_stack+0x1c/0x28 [ 44.600506][ T5611] alloc_cpumask_var_node+0xfc/0x138 [ 44.600516][ T5611] alloc_workqueue_attrs_noprof+0x84/0x154 [ 44.600525][ T5611] apply_wqattrs_prepare+0xf4/0xb24 [ 44.600535][ T5611] apply_workqueue_attrs_locked+0x70/0xd4 [ 44.600544][ T5611] __alloc_workqueue+0x9e4/0x11a0 [ 44.600553][ T5611] alloc_workqueue_va+0x5c/0x138 [ 44.600562][ T5611] alloc_workqueue_noprof+0xe0/0x130 [ 44.600570][ T5611] __rds_conn_create+0xe48/0x1920 [ 44.600583][ T5611] rds_conn_create_outgoing+0x60/0x7c [ 44.600595][ T5611] rds_sendmsg+0xd0c/0x1c64 [ 44.600603][ T5611] __sock_sendmsg+0xc8/0x17c [ 44.600613][ T5611] ____sys_sendmsg+0x3d0/0x6c8 [ 44.600624][ T5611] ___sys_sendmsg+0x198/0x224 [ 44.600635][ T5611] __sys_sendmsg+0x158/0x204 [ 44.600645][ T5611] __arm64_sys_sendmsg+0x88/0x9c [ 44.600657][ T5611] invoke_syscall+0x98/0x244 [ 44.600668][ T5611] el0_svc_common+0xec/0x23c [ 44.600680][ T5611] do_el0_svc+0x4c/0x5c [ 44.600692][ T5611] el0_svc+0x60/0x1d8 [ 44.600703][ T5611] el0t_64_sync_handler+0x44/0x104 [ 44.600715][ T5611] el0t_64_sync+0x198/0x19c [ 44.685820][ T5616] FAULT_INJECTION: forcing a failure. [ 44.685820][ T5616] name fail_futex, interval 1, probability 0, space 0, times 0 [ 44.685836][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: syz.0.303 Not tainted syzkaller #0 PREEMPT [ 44.685847][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.685861][ T5616] Call trace: [ 44.685864][ T5616] show_stack+0x2c/0x3c (C) [ 44.685883][ T5616] __dump_stack+0x30/0x40 [ 44.685895][ T5616] dump_stack_lvl+0xd8/0x12c [ 44.685907][ T5616] dump_stack+0x1c/0x28 [ 44.685918][ T5616] should_fail_ex+0x418/0x58c [ 44.685931][ T5616] should_fail+0x14/0x24 [ 44.685943][ T5616] get_futex_key+0x1ec/0x12b0 [ 44.685954][ T5616] futex_wait_setup+0x58/0x674 [ 44.685965][ T5616] __futex_wait+0x108/0x25c [ 44.685977][ T5616] futex_wait+0x108/0x2c0 [ 44.685988][ T5616] do_futex+0x320/0x378 [ 44.685998][ T5616] __arm64_sys_futex+0x2e4/0x418 [ 44.686009][ T5616] invoke_syscall+0x98/0x244 [ 44.686022][ T5616] el0_svc_common+0xec/0x23c [ 44.686034][ T5616] do_el0_svc+0x4c/0x5c [ 44.686046][ T5616] el0_svc+0x60/0x1d8 [ 44.686058][ T5616] el0t_64_sync_handler+0x44/0x104 [ 44.686071][ T5616] el0t_64_sync+0x198/0x19c [ 44.773080][ T5616] FAULT_INJECTION: forcing a failure. [ 44.773080][ T5616] name failslab, interval 1, probability 0, space 0, times 0 [ 44.773100][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: syz.0.303 Not tainted syzkaller #0 PREEMPT [ 44.773111][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.773124][ T5616] Call trace: [ 44.773127][ T5616] show_stack+0x2c/0x3c (C) [ 44.773143][ T5616] __dump_stack+0x30/0x40 [ 44.773155][ T5616] dump_stack_lvl+0xd8/0x12c [ 44.773167][ T5616] dump_stack+0x1c/0x28 [ 44.773178][ T5616] should_fail_ex+0x418/0x58c [ 44.773191][ T5616] should_failslab+0xc4/0x120 [ 44.773204][ T5616] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 44.773215][ T5616] kmemdup_noprof+0x44/0x8c [ 44.773224][ T5616] devinet_init_net+0x9c/0x56c [ 44.773234][ T5616] ops_init+0x2cc/0x528 [ 44.773244][ T5616] setup_net+0x118/0x2fc [ 44.773255][ T5616] copy_net_ns+0x454/0x698 [ 44.773265][ T5616] create_new_namespaces+0x304/0x50c [ 44.773276][ T5616] unshare_nsproxy_namespaces+0x120/0x170 [ 44.773287][ T5616] ksys_unshare+0x438/0x6cc [ 44.773296][ T5616] __arm64_sys_unshare+0x40/0x54 [ 44.773305][ T5616] invoke_syscall+0x98/0x244 [ 44.773318][ T5616] el0_svc_common+0xec/0x23c [ 44.773330][ T5616] do_el0_svc+0x4c/0x5c [ 44.773341][ T5616] el0_svc+0x60/0x1d8 [ 44.773354][ T5616] el0t_64_sync_handler+0x44/0x104 [ 44.773366][ T5616] el0t_64_sync+0x198/0x19c [ 44.859292][ T5626] bridge_slave_0: left allmulticast mode [ 44.859306][ T5626] bridge_slave_0: left promiscuous mode [ 44.859398][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.869141][ T5626] bridge_slave_1: left allmulticast mode [ 44.869153][ T5626] bridge_slave_1: left promiscuous mode [ 44.869211][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.885336][ T5626] bond0: (slave bond_slave_0): Releasing backup interface [ 44.906066][ T5626] bond0: (slave bond_slave_1): Releasing backup interface [ 44.931281][ T5634] netlink: 'syz.2.306': attribute type 10 has an invalid length. [ 44.945169][ T5626] team0: Port device team_slave_0 removed [ 44.953893][ T5626] team0: Port device team_slave_1 removed [ 44.954288][ T5626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.954298][ T5626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.957045][ T5626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.957052][ T5626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.984095][ T5616] FAULT_INJECTION: forcing a failure. [ 44.984095][ T5616] name failslab, interval 1, probability 0, space 0, times 0 [ 44.984108][ T5616] CPU: 1 UID: 0 PID: 5616 Comm: syz.0.303 Not tainted syzkaller #0 PREEMPT [ 44.984120][ T5616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 44.984132][ T5616] Call trace: [ 44.984135][ T5616] show_stack+0x2c/0x3c (C) [ 44.984152][ T5616] __dump_stack+0x30/0x40 [ 44.984166][ T5616] dump_stack_lvl+0xd8/0x12c [ 44.984178][ T5616] dump_stack+0x1c/0x28 [ 44.984189][ T5616] should_fail_ex+0x418/0x58c [ 44.984203][ T5616] should_failslab+0xc4/0x120 [ 44.984216][ T5616] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 44.984226][ T5616] kmemdup_noprof+0x44/0x8c [ 44.984236][ T5616] __devinet_sysctl_register+0xc0/0x274 [ 44.984245][ T5616] devinet_init_net+0x2dc/0x56c [ 44.984255][ T5616] ops_init+0x2cc/0x528 [ 44.984265][ T5616] setup_net+0x118/0x2fc [ 44.984276][ T5616] copy_net_ns+0x454/0x698 [ 44.984286][ T5616] create_new_namespaces+0x304/0x50c [ 44.984297][ T5616] unshare_nsproxy_namespaces+0x120/0x170 [ 44.984307][ T5616] ksys_unshare+0x438/0x6cc [ 44.984317][ T5616] __arm64_sys_unshare+0x40/0x54 [ 44.984326][ T5616] invoke_syscall+0x98/0x244 [ 44.984338][ T5616] el0_svc_common+0xec/0x23c [ 44.984350][ T5616] do_el0_svc+0x4c/0x5c [ 44.984362][ T5616] el0_svc+0x60/0x1d8 [ 44.984374][ T5616] el0t_64_sync_handler+0x44/0x104 [ 44.984386][ T5616] el0t_64_sync+0x198/0x19c [ 45.001096][ T5633] batman_adv: batadv0: Adding interface: syzkaller0 [ 45.001103][ T5633] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.001120][ T5633] batman_adv: batadv0: Interface activated: syzkaller0 [ 45.005279][ T5628] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 45.012893][ T5628] batman_adv: batadv0: Removing interface: syzkaller0 [ 45.136840][ T5649] [U]  [ 45.136847][ T5649] [U] K{ [ 45.136854][ T5649] [U] t 1ŠFfˊ`GJgo/mC [ 45.136873][ T5649] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 45.136888][ T5649] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 45.136915][ T5649] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 45.136958][ T5649] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 45.136974][ T5649] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 45.136982][ T5649] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 45.137002][ T5649] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 45.137106][ T5649] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 45.137124][ T5649] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 45.137130][ T5649] [U] 22Ʃx?0;3u [ 45.137157][ T5649] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 45.137171][ T5649] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 45.137181][ T5649] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 45.137187][ T5649] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 45.137199][ T5649] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 45.137329][ T5649] [U] ec [ 45.137334][ T5649] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 45.140695][ T5648] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 45.598412][ T5674] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 45.772003][ T4722] Bluetooth: hci2: command tx timeout [ 45.984112][ T5702] netlink: 60 bytes leftover after parsing attributes in process `syz.0.340'. [ 46.202439][ T5714] 9p: Bad value for 'rfdno' [ 46.786757][ T5733] loop3: detected capacity change from 0 to 512 [ 46.813723][ T5733] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.350: corrupted in-inode xattr: invalid ea_ino [ 46.814228][ T5733] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.814386][ T5733] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.350: couldn't read orphan inode 15 (err -117) [ 46.814401][ T5733] loop3: lost filesystem error report for type 5 error -117 [ 46.818784][ T5733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.958679][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.051797][ C0] net_ratelimit: 550 callbacks suppressed [ 47.364853][ T5752] FAULT_INJECTION: forcing a failure. [ 47.364853][ T5752] name failslab, interval 1, probability 0, space 0, times 0 [ 47.364869][ T5752] CPU: 1 UID: 0 PID: 5752 Comm: syz.4.356 Not tainted syzkaller #0 PREEMPT [ 47.364878][ T5752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.364890][ T5752] Call trace: [ 47.364893][ T5752] show_stack+0x2c/0x3c (C) [ 47.364910][ T5752] __dump_stack+0x30/0x40 [ 47.364922][ T5752] dump_stack_lvl+0xd8/0x12c [ 47.364931][ T5752] dump_stack+0x1c/0x28 [ 47.364940][ T5752] should_fail_ex+0x418/0x58c [ 47.364952][ T5752] should_failslab+0xc4/0x120 [ 47.364963][ T5752] __kmalloc_noprof+0x108/0x6c8 [ 47.364971][ T5752] tomoyo_realpath_from_path+0xbc/0x4dc [ 47.364982][ T5752] tomoyo_path_number_perm+0x1f0/0x500 [ 47.364991][ T5752] tomoyo_file_ioctl+0x2c/0x3c [ 47.365000][ T5752] security_file_ioctl+0xdc/0x2b0 [ 47.365009][ T5752] __arm64_sys_ioctl+0xb0/0x1cc [ 47.365019][ T5752] invoke_syscall+0x98/0x244 [ 47.365029][ T5752] el0_svc_common+0xec/0x23c [ 47.365039][ T5752] do_el0_svc+0x4c/0x5c [ 47.365048][ T5752] el0_svc+0x60/0x1d8 [ 47.365058][ T5752] el0t_64_sync_handler+0x44/0x104 [ 47.365068][ T5752] el0t_64_sync+0x198/0x19c [ 47.365077][ T5752] ERROR: Out of memory at tomoyo_realpath_from_path. [ 47.423722][ T5761] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 47.423940][ T5758] process 'syz.4.360' launched '/dev/fd/8' with NULL argv: empty string added [ 47.598759][ T5766] 9p: Bad value for 'rfdno' [ 47.639189][ T5770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.364'. [ 47.748648][ T5778] FAULT_INJECTION: forcing a failure. [ 47.748648][ T5778] name failslab, interval 1, probability 0, space 0, times 0 [ 47.748665][ T5778] CPU: 1 UID: 0 PID: 5778 Comm: syz.0.366 Not tainted syzkaller #0 PREEMPT [ 47.748678][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 47.748691][ T5778] Call trace: [ 47.748695][ T5778] show_stack+0x2c/0x3c (C) [ 47.748713][ T5778] __dump_stack+0x30/0x40 [ 47.748726][ T5778] dump_stack_lvl+0xd8/0x12c [ 47.748736][ T5778] dump_stack+0x1c/0x28 [ 47.748746][ T5778] should_fail_ex+0x418/0x58c [ 47.748758][ T5778] should_failslab+0xc4/0x120 [ 47.748770][ T5778] __kmalloc_noprof+0x108/0x6c8 [ 47.748778][ T5778] tomoyo_realpath_from_path+0xbc/0x4dc [ 47.748788][ T5778] tomoyo_path_number_perm+0x1f0/0x500 [ 47.748797][ T5778] tomoyo_file_ioctl+0x2c/0x3c [ 47.748807][ T5778] security_file_ioctl+0xdc/0x2b0 [ 47.748816][ T5778] __arm64_sys_ioctl+0xb0/0x1cc [ 47.748827][ T5778] invoke_syscall+0x98/0x244 [ 47.748837][ T5778] el0_svc_common+0xec/0x23c [ 47.748846][ T5778] do_el0_svc+0x4c/0x5c [ 47.748856][ T5778] el0_svc+0x60/0x1d8 [ 47.748866][ T5778] el0t_64_sync_handler+0x44/0x104 [ 47.748876][ T5778] el0t_64_sync+0x198/0x19c [ 47.748885][ T5778] ERROR: Out of memory at tomoyo_realpath_from_path. [ 47.864563][ T5783] netlink: 'syz.2.368': attribute type 6 has an invalid length. [ 47.876519][ T5783] loop2: detected capacity change from 0 to 512 [ 47.880907][ T5783] EXT4-fs: Ignoring removed nobh option [ 47.885496][ T5783] EXT4-fs: journaled quota format not specified [ 47.920755][ T5785] loop2: detected capacity change from 0 to 8 [ 47.923235][ T5785] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 47.923241][ T5785] unable to read xattr id index table [ 47.924205][ T5785] unable to read inode lookup table [ 48.011895][ T4724] Bluetooth: hci4: command 0x0405 tx timeout [ 48.098592][ T5793] 9p: Bad value for 'rfdno' [ 48.275456][ T5802] tunl0: entered promiscuous mode [ 48.278648][ T5802] netlink: 'syz.1.376': attribute type 4 has an invalid length. [ 48.278658][ T5802] netlink: 9 bytes leftover after parsing attributes in process `syz.1.376'. [ 48.278759][ T5802] netlink: 'syz.1.376': attribute type 4 has an invalid length. [ 48.278765][ T5802] netlink: 9 bytes leftover after parsing attributes in process `syz.1.376'. [ 48.278820][ T5802] netlink: 'syz.1.376': attribute type 4 has an invalid length. [ 48.278826][ T5802] netlink: 9 bytes leftover after parsing attributes in process `syz.1.376'. [ 48.278878][ T5802] netlink: 'syz.1.376': attribute type 4 has an invalid length. [ 48.278884][ T5802] netlink: 9 bytes leftover after parsing attributes in process `syz.1.376'. [ 48.278931][ T5802] netlink: 'syz.1.376': attribute type 4 has an invalid length. [ 48.278937][ T5802] netlink: 9 bytes leftover after parsing attributes in process `syz.1.376'. [ 48.278984][ T5802] netlink: 9 bytes leftover after parsing attributes in process `syz.1.376'. [ 48.279035][ T5802] netlink: 9 bytes leftover after parsing attributes in process `syz.1.376'. [ 48.279088][ T5802] netlink: 9 bytes leftover after parsing attributes in process `syz.1.376'. [ 48.279146][ T5802] netlink: 9 bytes leftover after parsing attributes in process `syz.1.376'. [ 48.315446][ T5807] loop3: detected capacity change from 0 to 2048 [ 48.328168][ T5807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.534767][ T5816] WARNING! power/level is deprecated; use power/control instead [ 48.578527][ T5816] loop1: detected capacity change from 0 to 1024 [ 48.581624][ T5816] ======================================================= [ 48.581624][ T5816] WARNING: The mand mount option has been deprecated and [ 48.581624][ T5816] and is ignored by this kernel. Remove the mand [ 48.581624][ T5816] option from the mount to silence this warning. [ 48.581624][ T5816] ======================================================= [ 48.677609][ T5816] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 48.683372][ T5816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 49.141072][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.165450][ T5828] loop3: detected capacity change from 0 to 512 [ 49.169143][ T5828] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.381: corrupted in-inode xattr: invalid ea_ino [ 49.169160][ T5828] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.169276][ T5828] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.381: couldn't read orphan inode 15 (err -117) [ 49.169290][ T5828] loop3: lost filesystem error report for type 5 error -117 [ 49.169792][ T5828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.258676][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.291055][ T5833] 9p: Bad value for 'rfdno' [ 49.317350][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.317599][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.684193][ T5850] sctp: [Deprecated]: syz.0.390 (pid 5850) Use of struct sctp_assoc_value in delayed_ack socket option. [ 49.684193][ T5850] Use struct sctp_sack_info instead [ 49.726485][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.935789][ T5866] loop1: detected capacity change from 0 to 1024 [ 49.940743][ T5866] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 50.037380][ T5870] validate_nla: 61 callbacks suppressed [ 50.037394][ T5870] netlink: 'syz.3.398': attribute type 3 has an invalid length. [ 50.166920][ T5878] loop2: detected capacity change from 0 to 512 [ 50.419673][ T5878] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.401: iget: bad extended attribute block 134217728 [ 50.419696][ T5878] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.421785][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 50.421794][ C1] EXT4-fs (loop2): initial error at time 50: ext4_orphan_get:1403: inode 15 [ 50.421810][ C1] EXT4-fs (loop2): last error at time 50: ext4_orphan_get:1403: inode 15 [ 50.437124][ T5878] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.401: couldn't read orphan inode 15 (err -117) [ 50.437144][ T5878] loop2: lost filesystem error report for type 5 error -117 [ 50.437776][ T5878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.484888][ T5882] ubi3: attaching mtd0 [ 50.484968][ T5882] ubi3 error: ubi_attach_mtd_dev: bad VID header (536871232) or data offsets (536871296) [ 50.526275][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.641387][ T5888] loop1: detected capacity change from 0 to 128 [ 50.759069][ T5903] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 50.856958][ T5910] FAULT_INJECTION: forcing a failure. [ 50.856958][ T5910] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.856977][ T5910] CPU: 1 UID: 0 PID: 5910 Comm: syz.0.413 Not tainted syzkaller #0 PREEMPT [ 50.856987][ T5910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 50.856999][ T5910] Call trace: [ 50.857002][ T5910] show_stack+0x2c/0x3c (C) [ 50.857019][ T5910] __dump_stack+0x30/0x40 [ 50.857030][ T5910] dump_stack_lvl+0xd8/0x12c [ 50.857039][ T5910] dump_stack+0x1c/0x28 [ 50.857054][ T5910] should_fail_ex+0x418/0x58c [ 50.857066][ T5910] should_fail+0x14/0x24 [ 50.857076][ T5910] should_fail_usercopy+0x20/0x30 [ 50.857094][ T5910] _inline_copy_from_user+0x3c/0x188 [ 50.857107][ T5910] video_usercopy+0x2d0/0xe88 [ 50.857115][ T5910] video_ioctl2+0x3c/0x50 [ 50.857124][ T5910] v4l2_ioctl+0x148/0x18c [ 50.857130][ T5910] __arm64_sys_ioctl+0x154/0x1cc [ 50.857142][ T5910] invoke_syscall+0x98/0x244 [ 50.857152][ T5910] el0_svc_common+0xec/0x23c [ 50.857161][ T5910] do_el0_svc+0x4c/0x5c [ 50.857171][ T5910] el0_svc+0x60/0x1d8 [ 50.857181][ T5910] el0t_64_sync_handler+0x44/0x104 [ 50.857191][ T5910] el0t_64_sync+0x198/0x19c [ 50.971382][ T5917] capability: warning: `syz.3.415' uses deprecated v2 capabilities in a way that may be insecure [ 51.179339][ T5914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.187503][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.189240][ T5923] bond1: (slave bond0): making interface the new active one [ 51.190068][ T5923] bond1: (slave bond0): Enslaving as an active interface with an up link [ 51.201480][ T5924] bond1 (unregistering): (slave bond0): Releasing active interface [ 51.226089][ T5924] bond1 (unregistering): Released all slaves [ 51.291260][ T5932] overlay: Unknown parameter 'pcr' [ 51.346252][ T5949] FAULT_INJECTION: forcing a failure. [ 51.346252][ T5949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.346271][ T5949] CPU: 1 UID: 0 PID: 5949 Comm: syz.4.424 Tainted: G L syzkaller #0 PREEMPT [ 51.346285][ T5949] Tainted: [L]=SOFTLOCKUP [ 51.346288][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 51.346301][ T5949] Call trace: [ 51.346304][ T5949] show_stack+0x2c/0x3c (C) [ 51.346322][ T5949] __dump_stack+0x30/0x40 [ 51.346335][ T5949] dump_stack_lvl+0xd8/0x12c [ 51.346344][ T5949] dump_stack+0x1c/0x28 [ 51.346354][ T5949] should_fail_ex+0x418/0x58c [ 51.346366][ T5949] should_fail+0x14/0x24 [ 51.346375][ T5949] should_fail_usercopy+0x20/0x30 [ 51.346385][ T5949] _inline_copy_from_user+0x3c/0x188 [ 51.346396][ T5949] video_usercopy+0x8f8/0xe88 [ 51.346403][ T5949] video_ioctl2+0x3c/0x50 [ 51.346410][ T5949] v4l2_ioctl+0x148/0x18c [ 51.346417][ T5949] __arm64_sys_ioctl+0x154/0x1cc [ 51.346429][ T5949] invoke_syscall+0x98/0x244 [ 51.346439][ T5949] el0_svc_common+0xec/0x23c [ 51.346448][ T5949] do_el0_svc+0x4c/0x5c [ 51.346458][ T5949] el0_svc+0x60/0x1d8 [ 51.346469][ T5949] el0t_64_sync_handler+0x44/0x104 [ 51.346478][ T5949] el0t_64_sync+0x198/0x19c [ 51.368924][ T5945] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 51.790427][ T4722] Bluetooth: hci3: Malformed Event: 0x02 [ 51.806450][ T5987] loop1: detected capacity change from 0 to 512 [ 51.812467][ T5987] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.834578][ T5987] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 51.834622][ T5987] System zones: 0-2, 18-18, 34-34 [ 51.834971][ T5987] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.428: bad orphan inode 15 [ 51.834992][ T5987] loop1: lost filesystem error report for type 5 error -117 [ 51.835173][ T5987] ext4_test_bit(bit=14, block=18) = 1 [ 51.835182][ T5987] is_bad_inode(inode)=0 [ 51.835187][ T5987] NEXT_ORPHAN(inode)=2264924160 [ 51.835192][ T5987] max_ino=32 [ 51.835195][ T5987] i_nlink=0 [ 51.836807][ T5987] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2933: inode #15: comm syz.1.428: corrupted xattr block 19: e_value out of bounds [ 51.836835][ T5987] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.837945][ T5987] EXT4-fs warning (device loop1): ext4_evict_inode:288: xattr delete (err -117) [ 51.838489][ T5987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.863165][ T5987] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 3: comm syz.1.428: path /99/: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 51.871394][ T5987] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.428: bg 0: block 80: padding at end of block bitmap is not set [ 51.889550][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.307085][ T6055] loop1: detected capacity change from 0 to 512 [ 52.309907][ T6055] EXT4-fs (loop1): Test dummy encryption mode enabled [ 52.309931][ T6055] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.318428][ T6055] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.439: bad orphan inode 131083 [ 52.318448][ T6055] loop1: lost filesystem error report for type 5 error -117 [ 52.320585][ T6055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.332453][ T1266] net_ratelimit: 102 callbacks suppressed [ 52.337489][ T6059] netlink: 'syz.2.438': attribute type 1 has an invalid length. [ 52.721442][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.776076][ T4722] Bluetooth: Unknown LE signaling command 0x0a [ 52.776082][ T4722] Bluetooth: Wrong link type (-22) [ 52.780559][ T6079] __nla_validate_parse: 61 callbacks suppressed [ 52.780569][ T6079] netlink: 24 bytes leftover after parsing attributes in process `syz.1.445'. [ 52.780595][ T6079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.445'. [ 52.789016][ T6079] vfat: Unknown parameter 'cohortname' [ 53.441359][ T6097] bridge0: port 4(ip6gretap0) entered blocking state [ 53.442085][ T6097] bridge0: port 4(ip6gretap0) entered disabled state [ 53.442218][ T6097] ip6gretap0: entered allmulticast mode [ 53.442885][ T6097] ip6gretap0: entered promiscuous mode [ 53.446637][ T6097] bridge0: port 4(ip6gretap0) entered blocking state [ 53.446665][ T6097] bridge0: port 4(ip6gretap0) entered forwarding state [ 53.453666][ T6097] bridge0: port 5(team0) entered blocking state [ 53.453859][ T6097] bridge0: port 5(team0) entered disabled state [ 53.453973][ T6097] team0: entered allmulticast mode [ 53.453983][ T6097] team_slave_0: entered allmulticast mode [ 53.454015][ T6097] team_slave_1: entered allmulticast mode [ 53.458020][ T6097] team0: entered promiscuous mode [ 53.458028][ T6097] team_slave_0: entered promiscuous mode [ 53.458125][ T6097] team_slave_1: entered promiscuous mode [ 53.458406][ T6097] bridge0: port 5(team0) entered blocking state [ 53.458433][ T6097] bridge0: port 5(team0) entered forwarding state [ 53.482630][ T6098] Option '?o냟W(d̛p^ï8 XKt..+jXpszgH{&}()eH/ k;RE<' to dns_resolver key: bad/missing value [ 53.511951][ T6105] FAULT_INJECTION: forcing a failure. [ 53.511951][ T6105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.511968][ T6105] CPU: 0 UID: 0 PID: 6105 Comm: syz.3.455 Tainted: G L syzkaller #0 PREEMPT [ 53.511980][ T6105] Tainted: [L]=SOFTLOCKUP [ 53.511983][ T6105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 53.511995][ T6105] Call trace: [ 53.511998][ T6105] show_stack+0x2c/0x3c (C) [ 53.512015][ T6105] __dump_stack+0x30/0x40 [ 53.512026][ T6105] dump_stack_lvl+0xd8/0x12c [ 53.512036][ T6105] dump_stack+0x1c/0x28 [ 53.512045][ T6105] should_fail_ex+0x418/0x58c [ 53.512057][ T6105] should_fail+0x14/0x24 [ 53.512066][ T6105] should_fail_usercopy+0x20/0x30 [ 53.512081][ T6105] simple_read_from_buffer+0xc4/0x238 [ 53.512094][ T6105] proc_fail_nth_read+0x1a8/0x248 [ 53.512104][ T6105] vfs_read+0x230/0x8c8 [ 53.512115][ T6105] ksys_read+0x12c/0x228 [ 53.512124][ T6105] __arm64_sys_read+0x84/0x98 [ 53.512135][ T6105] invoke_syscall+0x98/0x244 [ 53.512145][ T6105] el0_svc_common+0xec/0x23c [ 53.512154][ T6105] do_el0_svc+0x4c/0x5c [ 53.512164][ T6105] el0_svc+0x60/0x1d8 [ 53.512174][ T6105] el0t_64_sync_handler+0x44/0x104 [ 53.512183][ T6105] el0t_64_sync+0x198/0x19c [ 53.609653][ T152] nci: nci_ntf_packet: unknown ntf opcode 0x117 [ 53.611432][ T152] nci: nci_ntf_packet: unknown ntf opcode 0x117 [ 53.821146][ T6139] set_capacity_and_notify: 1 callbacks suppressed [ 53.821155][ T6139] loop4: detected capacity change from 0 to 512 [ 53.875624][ T6141] netlink: 'syz.1.465': attribute type 4 has an invalid length. [ 53.875639][ T6141] netlink: 152 bytes leftover after parsing attributes in process `syz.1.465'. [ 53.888248][ T6141] .`: renamed from bond0 (while UP) [ 54.013059][ T4722] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 54.013086][ T4722] Bluetooth: hci1: Injecting HCI hardware error event [ 54.013664][ T4722] Bluetooth: hci1: hardware error 0x00 [ 54.235073][ T6162] loop1: detected capacity change from 0 to 512 [ 54.240596][ T6162] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.472: iget: bad i_size value: 38620345925642 [ 54.240620][ T6162] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.241040][ T6162] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.472: couldn't read orphan inode 15 (err -117) [ 54.241063][ T6162] loop1: lost filesystem error report for type 5 error -117 [ 54.242808][ T6162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.255594][ T6162] can0: slcan on ptm0. [ 54.288765][ T6165] trusted_key: syz.2.473 sent an empty control message without MSG_MORE. [ 54.383031][ T6161] can0 (unregistered): slcan off ptm0. [ 54.393995][ T4709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.529437][ T6182] loop1: detected capacity change from 0 to 1024 [ 55.531470][ T6182] EXT4-fs: quotafile must be on filesystem root [ 55.688662][ T6184] loop1: detected capacity change from 0 to 128 [ 55.741338][ T6184] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 55.741935][ T6184] EXT4-fs (loop1): shut down requested (1) [ 56.172570][ T4722] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 56.390760][ T4709] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.520906][ T6107] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.521028][ T6118] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 56.616237][ T6194] can0: slcan on pts0. [ 56.660845][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.490'. [ 56.661454][ T6211] netlink: 36 bytes leftover after parsing attributes in process `syz.4.490'. [ 56.661463][ T6211] nbd: couldn't find device at index 134217728 [ 56.687955][ T6194] can0 (unregistered): slcan off pts0. [ 56.722742][ T6219] netlink: 'syz.0.492': attribute type 1 has an invalid length. [ 56.733117][ T6222] FAULT_INJECTION: forcing a failure. [ 56.733117][ T6222] name failslab, interval 1, probability 0, space 0, times 0 [ 56.733137][ T6222] CPU: 1 UID: 0 PID: 6222 Comm: syz.2.491 Tainted: G L syzkaller #0 PREEMPT [ 56.733150][ T6222] Tainted: [L]=SOFTLOCKUP [ 56.733154][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 56.733166][ T6222] Call trace: [ 56.733169][ T6222] show_stack+0x2c/0x3c (C) [ 56.733187][ T6222] __dump_stack+0x30/0x40 [ 56.733199][ T6222] dump_stack_lvl+0xd8/0x12c [ 56.733211][ T6222] dump_stack+0x1c/0x28 [ 56.733222][ T6222] should_fail_ex+0x418/0x58c [ 56.733235][ T6222] should_failslab+0xc4/0x120 [ 56.733248][ T6222] kmem_cache_alloc_noprof+0x94/0x5d4 [ 56.733257][ T6222] do_getname+0x48/0x234 [ 56.733266][ T6222] getname_flags+0x2c/0x3c [ 56.733274][ T6222] do_sys_openat2+0xd0/0x1e8 [ 56.733286][ T6222] do_sys_open+0xb0/0xe0 [ 56.733297][ T6222] __arm64_sys_openat+0xa8/0xc4 [ 56.733308][ T6222] invoke_syscall+0x98/0x244 [ 56.733320][ T6222] el0_svc_common+0xec/0x23c [ 56.733332][ T6222] do_el0_svc+0x4c/0x5c [ 56.733343][ T6222] el0_svc+0x60/0x1d8 [ 56.733355][ T6222] el0t_64_sync_handler+0x44/0x104 [ 56.733367][ T6222] el0t_64_sync+0x198/0x19c [ 57.372632][ T1212] net_ratelimit: 179 callbacks suppressed [ 57.386930][ T6276] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 57.513825][ T6288] loop1: detected capacity change from 0 to 512 [ 57.519186][ T6288] EXT4-fs: Mount option(s) incompatible with ext2 [ 58.061638][ T6305] fuse: Bad value for 'fd' [ 58.082493][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.513'. [ 58.147550][ T6314] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 58.848814][ T6342] loop4: detected capacity change from 0 to 256 [ 58.849250][ T6342] vfat: Bad value for 'shortname' [ 59.000872][ T6341] bridge1: entered promiscuous mode [ 59.000888][ T6341] bridge1: entered allmulticast mode [ 59.153683][ T6358] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 59.160209][ T6358] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 59.323561][ T6367] netlink: 'syz.3.537': attribute type 1 has an invalid length. [ 59.348566][ T6365] loop2: detected capacity change from 0 to 256 [ 59.431676][ T6372] netlink: 104 bytes leftover after parsing attributes in process `syz.2.539'. [ 59.510231][ T6376] loop2: detected capacity change from 0 to 8192 [ 59.971607][ T6407] fuse: Bad value for 'fd' [ 59.988511][ T6408] loop2: detected capacity change from 0 to 512 [ 59.990412][ T6408] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.000882][ T6408] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.549: bad orphan inode 131083 [ 60.000907][ T6408] loop2: lost filesystem error report for type 5 error -117 [ 60.002684][ T6408] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.004755][ T6413] loop4: detected capacity change from 0 to 512 [ 60.005182][ T6413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.005196][ T6413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.006275][ T6413] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 60.026775][ T6413] EXT4-fs (loop4): 1 truncate cleaned up [ 60.030749][ T6413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.045394][ T4719] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.051327][ T6413] netlink: 184 bytes leftover after parsing attributes in process `syz.4.550'. [ 60.087637][ T4708] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.134119][ T6430] overlayfs: failed to resolve './file0': -2 [ 60.144018][ T6430] Invalid ELF header magic: != ELF [ 60.307153][ T6448] batman_adv: batadv0: Adding interface: syzkaller0 [ 60.307160][ T6448] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.307175][ T6448] batman_adv: batadv0: Interface activated: syzkaller0 [ 60.326954][ T30] audit: type=1326 audit(60.300:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.0.566" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88978868 code=0x7ffc0000 [ 60.326976][ T30] audit: type=1326 audit(60.300:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.0.566" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88978868 code=0x7ffc0000 [ 60.327409][ T30] audit: type=1326 audit(60.300:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.0.566" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88978868 code=0x7ffc0000 [ 60.327567][ T30] audit: type=1326 audit(60.300:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.0.566" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88978868 code=0x7ffc0000 [ 60.327639][ T30] audit: type=1326 audit(60.300:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.0.566" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff88978868 code=0x7ffc0000 [ 60.327745][ T30] audit: type=1326 audit(60.300:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.0.566" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88978868 code=0x7ffc0000 [ 60.327892][ T30] audit: type=1326 audit(60.300:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.0.566" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88978868 code=0x7ffc0000 [ 60.327907][ T30] audit: type=1326 audit(60.300:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.0.566" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88978868 code=0x7ffc0000 [ 60.327982][ T30] audit: type=1326 audit(60.300:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.0.566" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8895b72c code=0x7ffc0000 [ 60.384162][ T30] audit: type=1326 audit(60.350:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6449 comm="syz.0.566" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff88978868 code=0x7ffc0000 [ 60.407524][ T6447] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 60.417027][ T6447] batman_adv: batadv0: Removing interface: syzkaller0 [ 60.459063][ T6459] bond0: (slave bond_slave_0): Releasing backup interface [ 60.494394][ T6463] netlink: 88 bytes leftover after parsing attributes in process `syz.4.570'. [ 60.495711][ T6459] bond0: (slave bond_slave_1): Releasing backup interface [ 60.526974][ T6473] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 60.528880][ T6459] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 61.415237][ T6500] Driver unsupported XDP return value 0 on prog (id 54) dev N/A, expect packet loss! [ 61.459747][ T6512] netlink: 'syz.1.586': attribute type 1 has an invalid length. [ 61.474563][ T6499] veth0_macvtap: left promiscuous mode [ 61.500167][ T6499] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 61.500183][ T6499] netlink: 'syz.2.582': attribute type 2 has an invalid length. [ 61.628973][ T6528] loop3: detected capacity change from 0 to 512 [ 61.650503][ T6528] EXT4-fs: Mount option(s) incompatible with ext2 [ 61.674986][ T6510] loop1: detected capacity change from 0 to 8192 [ 61.675373][ T6510] vfat: Unknown parameter 't@)4U"vscͩ+[Lq.A' [ 62.177568][ T6541] netlink: 184 bytes leftover after parsing attributes in process `syz.0.597'. [ 62.301301][ T6546] pimreg: tun_chr_ioctl cmd 2147767506 [ 62.341519][ T6549] loop2: detected capacity change from 0 to 256 [ 62.345156][ T6549] vfat: Unknown parameter '' [ 62.408557][ T6555] netlink: 76 bytes leftover after parsing attributes in process `syz.4.604'. [ 62.411786][ C1] net_ratelimit: 301 callbacks suppressed [ 62.695430][ T6555] overlayfs: failed lookup in lower (newroot/125, name='file0', err=-40): overlapping layers [ 62.695564][ T6558] overlayfs: failed lookup in lower (newroot/125, name='bus', err=-40): overlapping layers [ 62.696441][ T6559] overlayfs: failed lookup in lower (newroot/125, name='bus', err=-40): overlapping layers [ 62.697815][ T6561] netlink: 76 bytes leftover after parsing attributes in process `syz.4.604'. [ 62.700644][ T6562] overlayfs: failed lookup in lower (newroot/125, name='bus', err=-40): overlapping layers [ 63.084341][ T867] kernel read not supported for file /ieee80211/phy0/aql_enable (pid: 867 comm: kworker/0:2) [ 63.190482][ T6592] netlink: 'syz.2.618': attribute type 4 has an invalid length. [ 63.190494][ T6592] netlink: 17 bytes leftover after parsing attributes in process `syz.2.618'. [ 63.200343][ T6583] bridge1: entered promiscuous mode [ 63.200376][ T6583] bridge1: entered allmulticast mode [ 63.404396][ T6615] loop3: detected capacity change from 0 to 256 [ 63.407560][ T6615] vfat: Unknown parameter '' [ 63.601976][ T4907] kernel write not supported for file /uinput (pid: 4907 comm: kworker/0:5) [ 63.706787][ T6629] loop1: detected capacity change from 0 to 256 [ 63.708494][ T6629] vfat: Unknown parameter 'short ' [ 63.727231][ T6629] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 63.727249][ T6629] FAT-fs (loop1): Filesystem has been set read-only [ 63.762487][ T6637] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 63.763127][ T6637] netlink: 'syz.0.634': attribute type 2 has an invalid length. [ 63.807170][ T6643] netlink: 'syz.1.637': attribute type 4 has an invalid length. [ 63.809373][ T6643] netlink: 'syz.1.637': attribute type 4 has an invalid length. [ 64.009432][ T6663] set_capacity_and_notify: 1 callbacks suppressed [ 64.009439][ T6663] loop2: detected capacity change from 0 to 8 [ 64.010042][ T6663] Filesystem uses "lzo" compression. This is not supported [ 64.060752][ T6669] logitech-hidpp-device 0003:046D:C082.0002: received hid++ report of bad size (3) [ 64.061394][ T4817] logitech-hidpp-device 0003:046D:C082.0002: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 64.088866][ T6671] netlink: 'syz.0.660': attribute type 1 has an invalid length. [ 64.106580][ T6674] fido_id[6674]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.107808][ T6673] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 64.145604][ T6683] FAULT_INJECTION: forcing a failure. [ 64.145604][ T6683] name failslab, interval 1, probability 0, space 0, times 0 [ 64.145620][ T6683] CPU: 0 UID: 0 PID: 6683 Comm: syz.4.654 Tainted: G L syzkaller #0 PREEMPT [ 64.145632][ T6683] Tainted: [L]=SOFTLOCKUP [ 64.145636][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 64.145649][ T6683] Call trace: [ 64.145652][ T6683] show_stack+0x2c/0x3c (C) [ 64.145671][ T6683] __dump_stack+0x30/0x40 [ 64.145686][ T6683] dump_stack_lvl+0xd8/0x12c [ 64.145698][ T6683] dump_stack+0x1c/0x28 [ 64.145709][ T6683] should_fail_ex+0x418/0x58c [ 64.145722][ T6683] should_failslab+0xc4/0x120 [ 64.145735][ T6683] kmem_cache_alloc_noprof+0x94/0x5d4 [ 64.145744][ T6683] create_new_namespaces+0x48/0x50c [ 64.145756][ T6683] unshare_nsproxy_namespaces+0x120/0x170 [ 64.145767][ T6683] ksys_unshare+0x438/0x6cc [ 64.145776][ T6683] __arm64_sys_unshare+0x40/0x54 [ 64.145785][ T6683] invoke_syscall+0x98/0x244 [ 64.145798][ T6683] el0_svc_common+0xec/0x23c [ 64.145809][ T6683] do_el0_svc+0x4c/0x5c [ 64.145821][ T6683] el0_svc+0x60/0x1d8 [ 64.145833][ T6683] el0t_64_sync_handler+0x44/0x104 [ 64.145845][ T6683] el0t_64_sync+0x198/0x19c [ 64.146621][ T6683] FAULT_INJECTION: forcing a failure. [ 64.146621][ T6683] name failslab, interval 1, probability 0, space 0, times 0 [ 64.146632][ T6683] CPU: 0 UID: 0 PID: 6683 Comm: syz.4.654 Tainted: G L syzkaller #0 PREEMPT [ 64.146643][ T6683] Tainted: [L]=SOFTLOCKUP [ 64.146646][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 64.146657][ T6683] Call trace: [ 64.146659][ T6683] show_stack+0x2c/0x3c (C) [ 64.146672][ T6683] __dump_stack+0x30/0x40 [ 64.146683][ T6683] dump_stack_lvl+0xd8/0x12c [ 64.146695][ T6683] dump_stack+0x1c/0x28 [ 64.146706][ T6683] should_fail_ex+0x418/0x58c [ 64.146719][ T6683] should_failslab+0xc4/0x120 [ 64.146731][ T6683] __kmalloc_cache_noprof+0x94/0x5fc [ 64.146740][ T6683] shrinker_alloc+0x68/0x9b0 [ 64.146751][ T6683] sget_fc+0xbd0/0x1520 [ 64.146761][ T6683] vfs_get_super+0x40/0x148 [ 64.146770][ T6683] get_tree_nodev+0x2c/0x3c [ 64.146780][ T6683] mqueue_get_tree+0xac/0xe8 [ 64.146793][ T6683] vfs_get_tree+0x90/0x28c [ 64.146803][ T6683] fc_mount+0x24/0xac [ 64.146813][ T6683] fc_mount_longterm+0x20/0x74 [ 64.146823][ T6683] mq_init_ns+0x3c8/0x638 [ 64.146835][ T6683] copy_ipcs+0x3c8/0x63c [ 64.146848][ T6683] create_new_namespaces+0x1a8/0x50c [ 64.146858][ T6683] unshare_nsproxy_namespaces+0x120/0x170 [ 64.146869][ T6683] ksys_unshare+0x438/0x6cc [ 64.146878][ T6683] __arm64_sys_unshare+0x40/0x54 [ 64.146887][ T6683] invoke_syscall+0x98/0x244 [ 64.146899][ T6683] el0_svc_common+0xec/0x23c [ 64.146911][ T6683] do_el0_svc+0x4c/0x5c [ 64.146922][ T6683] el0_svc+0x60/0x1d8 [ 64.146934][ T6683] el0t_64_sync_handler+0x44/0x104 [ 64.146945][ T6683] el0t_64_sync+0x198/0x19c [ 64.151928][ T6673] md: array md0 already has disks! [ 64.172550][ T6673] md: could not open device unknown-block(1,0). [ 64.172575][ T6673] md: error, md_import_device() returned -16 [ 64.193260][ T6673] md/raid:md0: not clean -- starting background reconstruction [ 64.193282][ T6673] md/raid:md0: invalid chunk size 0 [ 64.193289][ T6673] md: pers->run() failed ... [ 64.215064][ T6683] FAULT_INJECTION: forcing a failure. [ 64.215064][ T6683] name failslab, interval 1, probability 0, space 0, times 0 [ 64.215077][ T6683] CPU: 1 UID: 0 PID: 6683 Comm: syz.4.654 Tainted: G L syzkaller #0 PREEMPT [ 64.215092][ T6683] Tainted: [L]=SOFTLOCKUP [ 64.215095][ T6683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 64.215107][ T6683] Call trace: [ 64.215110][ T6683] show_stack+0x2c/0x3c (C) [ 64.215123][ T6683] __dump_stack+0x30/0x40 [ 64.215134][ T6683] dump_stack_lvl+0xd8/0x12c [ 64.215144][ T6683] dump_stack+0x1c/0x28 [ 64.215154][ T6683] should_fail_ex+0x418/0x58c [ 64.215166][ T6683] should_failslab+0xc4/0x120 [ 64.215177][ T6683] __kmalloc_noprof+0x108/0x6c8 [ 64.215185][ T6683] __register_sysctl_table+0x70/0xb4c [ 64.215197][ T6683] register_net_sysctl_sz+0x29c/0x38c [ 64.215210][ T6683] nf_ct_net_init+0x204/0x2b0 [ 64.215221][ T6683] ops_init+0x2cc/0x528 [ 64.215231][ T6683] setup_net+0x118/0x2fc [ 64.215239][ T6683] copy_net_ns+0x454/0x698 [ 64.215248][ T6683] create_new_namespaces+0x304/0x50c [ 64.215258][ T6683] unshare_nsproxy_namespaces+0x120/0x170 [ 64.215267][ T6683] ksys_unshare+0x438/0x6cc [ 64.215275][ T6683] __arm64_sys_unshare+0x40/0x54 [ 64.215284][ T6683] invoke_syscall+0x98/0x244 [ 64.215294][ T6683] el0_svc_common+0xec/0x23c [ 64.215304][ T6683] do_el0_svc+0x4c/0x5c [ 64.215313][ T6683] el0_svc+0x60/0x1d8 [ 64.215324][ T6683] el0t_64_sync_handler+0x44/0x104 [ 64.215334][ T6683] el0t_64_sync+0x198/0x19c [ 64.242490][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.242752][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.444762][ T6697] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 64.493933][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493960][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.500584][ T26] cfg80211: failed to load regulatory.db [ 64.839214][ T6708] loop1: detected capacity change from 0 to 8 [ 64.841403][ T6708] Filesystem uses "lzo" compression. This is not supported [ 64.980911][ T6724] bridge0: port 3(syz_tun) entered blocking state [ 64.980970][ T6724] bridge0: port 3(syz_tun) entered disabled state [ 64.981093][ T6724] syz_tun: entered allmulticast mode [ 64.987335][ T6724] syz_tun: entered promiscuous mode [ 64.987629][ T6724] bridge0: port 3(syz_tun) entered blocking state [ 64.987653][ T6724] bridge0: port 3(syz_tun) entered forwarding state [ 65.073863][ T6731] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 65.133901][ T6747] netlink: 'syz.1.682': attribute type 1 has an invalid length. [ 65.161708][ T4722] Bluetooth: hci3: connection err: -111 [ 65.260989][ T6768] netlink: 'syz.2.703': attribute type 1 has an invalid length. [ 65.311976][ T6770] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 65.528245][ T6797] netlink: 'syz.2.706': attribute type 1 has an invalid length. [ 65.729680][ T6816] netlink: 'syz.0.715': attribute type 4 has an invalid length. [ 65.971609][ T6843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.728'. [ 65.971621][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.728'. [ 65.973258][ T6843] FAULT_INJECTION: forcing a failure. [ 65.973258][ T6843] name failslab, interval 1, probability 0, space 0, times 0 [ 65.973273][ T6843] CPU: 0 UID: 0 PID: 6843 Comm: syz.0.728 Tainted: G L syzkaller #0 PREEMPT [ 65.973285][ T6843] Tainted: [L]=SOFTLOCKUP [ 65.973289][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 65.973301][ T6843] Call trace: [ 65.973304][ T6843] show_stack+0x2c/0x3c (C) [ 65.973322][ T6843] __dump_stack+0x30/0x40 [ 65.973336][ T6843] dump_stack_lvl+0xd8/0x12c [ 65.973348][ T6843] dump_stack+0x1c/0x28 [ 65.973359][ T6843] should_fail_ex+0x418/0x58c [ 65.973372][ T6843] should_failslab+0xc4/0x120 [ 65.973386][ T6843] __kmalloc_cache_noprof+0x94/0x5fc [ 65.973395][ T6843] netdevice_event+0x314/0x7a8 [ 65.973409][ T6843] notifier_call_chain+0x1a4/0x4cc [ 65.973421][ T6843] raw_notifier_call_chain+0x3c/0x50 [ 65.973432][ T6843] call_netdevice_notifiers_info+0xb8/0x120 [ 65.973442][ T6843] register_netdevice+0x1018/0x14c0 [ 65.973455][ T6843] batadv_meshif_newlink+0xb0/0xc4 [ 65.973465][ T6843] rtnl_newlink_create+0x294/0x6b8 [ 65.973476][ T6843] rtnl_newlink+0xfe4/0x138c [ 65.973485][ T6843] rtnetlink_rcv_msg+0x66c/0x9bc [ 65.973495][ T6843] netlink_rcv_skb+0x238/0x414 [ 65.973506][ T6843] rtnetlink_rcv+0x28/0x38 [ 65.973515][ T6843] netlink_unicast+0x600/0x7f8 [ 65.973525][ T6843] netlink_sendmsg+0x648/0x948 [ 65.973537][ T6843] __sock_sendmsg+0xc8/0x17c [ 65.973547][ T6843] ____sys_sendmsg+0x3d0/0x6c8 [ 65.973558][ T6843] ___sys_sendmsg+0x198/0x224 [ 65.973569][ T6843] __sys_sendmsg+0x158/0x204 [ 65.973580][ T6843] __arm64_sys_sendmsg+0x88/0x9c [ 65.973591][ T6843] invoke_syscall+0x98/0x244 [ 65.973603][ T6843] el0_svc_common+0xec/0x23c [ 65.973615][ T6843] do_el0_svc+0x4c/0x5c [ 65.973626][ T6843] el0_svc+0x60/0x1d8 [ 65.973638][ T6843] el0t_64_sync_handler+0x44/0x104 [ 65.973650][ T6843] el0t_64_sync+0x198/0x19c [ 66.034641][ T6849] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 66.034920][ T6849] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 66.035201][ T6849] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 66.035500][ T6849] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 66.136983][ T6855] batman_adv: batadv0: Adding interface: syzkaller0 [ 66.136991][ T6855] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.137350][ T6855] batman_adv: batadv0: Interface activated: syzkaller0 [ 66.151580][ T6855] FAULT_INJECTION: forcing a failure. [ 66.151580][ T6855] name failslab, interval 1, probability 0, space 0, times 0 [ 66.151601][ T6855] CPU: 1 UID: 0 PID: 6855 Comm: syz.2.734 Tainted: G L syzkaller #0 PREEMPT [ 66.151614][ T6855] Tainted: [L]=SOFTLOCKUP [ 66.151618][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.151632][ T6855] Call trace: [ 66.151635][ T6855] show_stack+0x2c/0x3c (C) [ 66.151655][ T6855] __dump_stack+0x30/0x40 [ 66.151668][ T6855] dump_stack_lvl+0xd8/0x12c [ 66.151680][ T6855] dump_stack+0x1c/0x28 [ 66.151691][ T6855] should_fail_ex+0x418/0x58c [ 66.151704][ T6855] should_failslab+0xc4/0x120 [ 66.151718][ T6855] __kmalloc_cache_noprof+0x94/0x5fc [ 66.151728][ T6855] batadv_orig_ifinfo_new+0xa4/0x310 [ 66.151744][ T6855] batadv_iv_ogm_process_per_outif+0x1d4/0x20ac [ 66.151755][ T6855] batadv_iv_ogm_receive+0xf88/0x14bc [ 66.151765][ T6855] batadv_batman_skb_recv+0x3e4/0x798 [ 66.151779][ T6855] __netif_receive_skb_one_core+0xc8/0x110 [ 66.151791][ T6855] __netif_receive_skb+0x34/0x128 [ 66.151800][ T6855] netif_receive_skb+0x1e0/0x888 [ 66.151810][ T6855] tun_rx_batched+0x180/0x620 [ 66.151821][ T6855] tun_get_user+0x2330/0x36d0 [ 66.151831][ T6855] tun_chr_write_iter+0xfc/0x168 [ 66.151840][ T6855] vfs_write+0x51c/0xa0c [ 66.151853][ T6855] ksys_write+0x12c/0x228 [ 66.151865][ T6855] __arm64_sys_write+0x84/0x98 [ 66.151878][ T6855] invoke_syscall+0x98/0x244 [ 66.151891][ T6855] el0_svc_common+0xec/0x23c [ 66.151903][ T6855] do_el0_svc+0x4c/0x5c [ 66.151914][ T6855] el0_svc+0x60/0x1d8 [ 66.151926][ T6855] el0t_64_sync_handler+0x44/0x104 [ 66.151938][ T6855] el0t_64_sync+0x198/0x19c [ 66.152254][ T6855] ------------[ cut here ]------------ [ 66.152258][ T6855] WARNING: net/batman-adv/bat_iv_ogm.c:1413 at batadv_iv_ogm_process_per_outif+0x1a00/0x20ac, CPU#1: syz.2.734/6855 [ 66.185233][ T6855] Modules linked in: [ 66.185938][ T6855] CPU: 1 UID: 0 PID: 6855 Comm: syz.2.734 Tainted: G L syzkaller #0 PREEMPT [ 66.187867][ T6855] Tainted: [L]=SOFTLOCKUP [ 66.188746][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.190798][ T6855] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 66.192235][ T6855] pc : batadv_iv_ogm_process_per_outif+0x1a00/0x20ac [ 66.193518][ T6855] lr : batadv_iv_ogm_process_per_outif+0x19fc/0x20ac [ 66.194769][ T6855] sp : ffff80009a217000 [ 66.195512][ T6855] x29: ffff80009a217140 x28: ffff0000c7f53800 x27: ffff700013442e1c [ 66.196993][ T6855] x26: ffff0000c7f53870 x25: ffff0000cda7a000 x24: 000000000000ffff [ 66.198497][ T6855] x23: 0000000000000040 x22: ffff0000f934006e x21: dfff800000000000 [ 66.200016][ T6855] x20: 0000000000000000 x19: ffff0000f9340000 x18: ffff800125498000 [ 66.201585][ T6855] x17: 70202c31206c6176 x16: 0000000000000001 x15: 0000000000000000 [ 66.203124][ T6855] x14: 000000000004ec0e x13: 0000000000000001 x12: 0000000000000003 [ 66.204632][ T6855] x11: 0000000000000000 x10: 0000000000080000 x9 : 000000000000f728 [ 66.206047][ T6855] x8 : ffff80009da0c000 x7 : 0000000000000000 x6 : 0000000000000000 [ 66.207575][ T6855] x5 : 00000000ffffffff x4 : 0000000000000008 x3 : ffff8000801557b0 [ 66.209087][ T6855] x2 : 0000000000000000 x1 : ffff0000cb1f1d80 x0 : ffff0000cda7a000 [ 66.210619][ T6855] Call trace: [ 66.211223][ T6855] batadv_iv_ogm_process_per_outif+0x1a00/0x20ac (P) [ 66.212477][ T6855] batadv_iv_ogm_receive+0xf88/0x14bc [ 66.213434][ T6855] batadv_batman_skb_recv+0x3e4/0x798 [ 66.214356][ T6855] __netif_receive_skb_one_core+0xc8/0x110 [ 66.215361][ T6855] __netif_receive_skb+0x34/0x128 [ 66.216226][ T6855] netif_receive_skb+0x1e0/0x888 [ 66.217104][ T6855] tun_rx_batched+0x180/0x620 [ 66.217949][ T6855] tun_get_user+0x2330/0x36d0 [ 66.218781][ T6855] tun_chr_write_iter+0xfc/0x168 [ 66.219671][ T6855] vfs_write+0x51c/0xa0c [ 66.220419][ T6855] ksys_write+0x12c/0x228 [ 66.221182][ T6855] __arm64_sys_write+0x84/0x98 [ 66.222060][ T6855] invoke_syscall+0x98/0x244 [ 66.222953][ T6855] el0_svc_common+0xec/0x23c [ 66.223806][ T6855] do_el0_svc+0x4c/0x5c [ 66.224575][ T6855] el0_svc+0x60/0x1d8 [ 66.225285][ T6855] el0t_64_sync_handler+0x44/0x104 [ 66.226229][ T6855] el0t_64_sync+0x198/0x19c [ 66.227099][ T6855] irq event stamp: 2785 [ 66.227878][ T6855] hardirqs last enabled at (2784): [] __local_bh_enable_ip+0x14c/0x234 [ 66.229745][ T6855] hardirqs last disabled at (2785): [] el1_brk64+0x20/0x54 [ 66.231354][ T6855] softirqs last enabled at (2672): [] tun_get_user+0x1f54/0x36d0 [ 66.233046][ T6855] softirqs last disabled at (2674): [] tun_rx_batched+0x144/0x620 [ 66.234717][ T6855] ---[ end trace 0000000000000000 ]--- [ 66.419224][ T6852] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 66.425767][ T6882] FAULT_INJECTION: forcing a failure. [ 66.425767][ T6882] name fail_futex, interval 1, probability 0, space 0, times 0 [ 66.425783][ T6882] CPU: 0 UID: 0 PID: 6882 Comm: syz.1.745 Tainted: G W L syzkaller #0 PREEMPT [ 66.425796][ T6882] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 66.425799][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 66.425812][ T6882] Call trace: [ 66.425815][ T6882] show_stack+0x2c/0x3c (C) [ 66.425834][ T6882] __dump_stack+0x30/0x40 [ 66.425848][ T6882] dump_stack_lvl+0xd8/0x12c [ 66.425860][ T6882] dump_stack+0x1c/0x28 [ 66.425871][ T6882] should_fail_ex+0x418/0x58c [ 66.425884][ T6882] should_fail+0x14/0x24 [ 66.425895][ T6882] get_futex_key+0x1ec/0x12b0 [ 66.425906][ T6882] futex_wait_setup+0x58/0x674 [ 66.425918][ T6882] __futex_wait+0x108/0x25c [ 66.425929][ T6882] futex_wait+0x108/0x2c0 [ 66.425940][ T6882] do_futex+0x320/0x378 [ 66.425950][ T6882] __arm64_sys_futex+0x2e4/0x418 [ 66.425961][ T6882] invoke_syscall+0x98/0x244 [ 66.425973][ T6882] el0_svc_common+0xec/0x23c [ 66.425985][ T6882] do_el0_svc+0x4c/0x5c [ 66.425996][ T6882] el0_svc+0x60/0x1d8 [ 66.426008][ T6882] el0t_64_sync_handler+0x44/0x104 [ 66.426020][ T6882] el0t_64_sync+0x198/0x19c [ 66.429768][ T6852] batman_adv: batadv0: Removing interface: syzkaller0 [ 66.631815][ T867] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 66.783818][ T867] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 66.784617][ T867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 66.784628][ T867] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 66.787158][ T867] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.787168][ T867] usb 1-1: Product: syz [ 66.787175][ T867] usb 1-1: Manufacturer: syz [ 66.787182][ T867] usb 1-1: SerialNumber: syz [ 66.789014][ T867] usb 1-1: config 0 descriptor?? [ 66.791218][ T867] hub 1-1:0.0: bad descriptor, ignoring hub [ 66.791231][ T867] hub 1-1:0.0: probe with driver hub failed with error -5 [ 66.793891][ T867] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input3 [ 67.232307][ T4907] usb 1-1: USB disconnect, device number 7 [ 67.451780][ C1] net_ratelimit: 345 callbacks suppressed [ 72.651756][ C1] net_ratelimit: 86 callbacks suppressed