last executing test programs: 31.464081899s ago: executing program 2 (id=262): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 30.943674512s ago: executing program 2 (id=275): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="1154f101d7027a0af55b2225fcb52dd9185ff2ddc4941bf5a8a692aa84fbd7a21181bef524b86d2a38ff77b13680af279f8e267fcd0703c8ff0ece97ae2cecfa3f16bf", 0x43, 0x2005c844, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @local, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="8211", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x48, 0x3b00, 0x0, 0xfffffffffffffdfd) 30.919961283s ago: executing program 2 (id=276): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000040)) r1 = eventfd2(0x80, 0x800) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 30.814915605s ago: executing program 2 (id=277): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x103496, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 30.752083676s ago: executing program 2 (id=278): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40084}, 0x30004094) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) write(r0, &(0x7f0000000400)="6ba812a07205c5c4ac30f0808d1115889b195ebc6e434d48f9ba021ab78dada9c5e69b7c6e", 0x25) dup3(r0, 0xffffffffffffffff, 0x80000) 30.549654581s ago: executing program 2 (id=281): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x4010618a, &(0x7f0000000000)) 30.498991393s ago: executing program 32 (id=281): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x4010618a, &(0x7f0000000000)) 17.151146531s ago: executing program 0 (id=465): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3ff, 0x2, 0xb5}) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 17.150926621s ago: executing program 0 (id=466): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x7fff, @local, 0x3}, 0x1c) 17.150434701s ago: executing program 0 (id=467): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x5, 0x8000, 0x80, 0x8, 0x48}) 17.128872801s ago: executing program 0 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x70, r1, 0x5, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x100000000000000, @default, 0x1, @void, @void, @val={0x3, 0x1, 0x70}, @val={0x4, 0x6, {0x3, 0xfe, 0x9, 0x7f}}, @val={0x6, 0x2, 0x4}, @void, @val={0x25, 0x3, {0x8, 0xff, 0x70}}, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x70}}, 0x0) 17.107584512s ago: executing program 0 (id=469): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0xfffffed8, 0x20, 0x1, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0}) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, 0x0, 0x0, 0x4000003}) 17.044141243s ago: executing program 0 (id=470): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) 4.676889009s ago: executing program 5 (id=625): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) 4.598209671s ago: executing program 5 (id=627): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg(r0, &(0x7f0000001ec0)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[{0x10, 0x0, 0x1000}], 0x10}}], 0x1, 0x48810) 4.589964241s ago: executing program 5 (id=630): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='.', 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x5, 0xe) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'syz_tun\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f00000000c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in=@loopback, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@remote, @in=@broadcast, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 4.431386455s ago: executing program 5 (id=636): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001b80)={0x84, &(0x7f00000016c0)={0x20, 0xb, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x40, 0xe, 0x2, "ac48"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.878578418s ago: executing program 5 (id=640): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/exports\x00', 0x44801, 0x128) 3.816023459s ago: executing program 5 (id=641): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001880)={0x54, r1, 0x1, 0xfffffffd, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xfffffffc}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) 2.060232401s ago: executing program 33 (id=470): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='3', 0x1) 1.895730585s ago: executing program 1 (id=676): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$dsp(r0, &(0x7f0000000240)=""/76, 0x4c) close_range(r0, 0xffffffffffffffff, 0x0) 1.715896629s ago: executing program 4 (id=679): r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x100002) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x8, 0x3, &(0x7f0000000000)={0x20, "378c7b4525a272c3e5bf4c7705e757e840a4751603645db93b0bde121fa0ea137e"}}) 1.66062063s ago: executing program 4 (id=681): openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004898b610c2154100201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f0000000a40)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x8, &(0x7f0000000040)=ANY=[@ANYRES8]) 1.27326672s ago: executing program 1 (id=685): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd05005600080054deff0060ec97000198"], 0xfdef) 1.115359634s ago: executing program 4 (id=686): mkdirat(0xffffffffffffff9c, 0x0, 0x14e) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240000007058402"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) 966.873307ms ago: executing program 1 (id=687): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000002280)="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", 0x37c}, {&(0x7f0000000a00)="ab29d92826349952eb8f7a2a74f53504000000df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188902c6e2e3", 0xd0}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, 0x0, 0x40004) getsockopt$bt_hci(r1, 0x84, 0x7d, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 965.556358ms ago: executing program 1 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x1c890) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='6', 0x32) fsopen(&(0x7f0000000040)='msdos\x00', 0x0) 856.00085ms ago: executing program 1 (id=691): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8", 0x2}], 0x1}}], 0x1, 0x2090) write(r0, &(0x7f0000001e00)="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", 0x222) 729.051103ms ago: executing program 3 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/zswap/parameters/compressor\x00', 0x81, 0x40) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') readv(r0, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) 683.251164ms ago: executing program 3 (id=694): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom(r0, &(0x7f0000002580)=""/4046, 0xfce, 0x12, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007", 0x4}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 543.522688ms ago: executing program 4 (id=695): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x5) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000480)="002145000014000b0000400600000a0000010a000002ffffffff0000000100000400"/43, 0x2b}], 0x1, 0x0, 0xfffffffa) 543.310057ms ago: executing program 3 (id=696): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000008c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '^', 0x3a, './file0'}, 0x33) 536.239718ms ago: executing program 4 (id=697): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x48000}, 0x20000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x4) write(r0, &(0x7f0000000000)='3', 0x3e) connect$vsock_stream(r0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) accept(r1, 0x0, 0x0) 534.462938ms ago: executing program 3 (id=698): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) dup3(r1, r0, 0x80000) write$input_event(r0, 0x0, 0x0) 485.669519ms ago: executing program 4 (id=699): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f00000001c0)=[{0x4, 0x800, 0x0, 0x0}], 0x1}) 352.058492ms ago: executing program 3 (id=700): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) 351.939622ms ago: executing program 6 (id=670): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/lru_gen\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020) 351.591592ms ago: executing program 3 (id=701): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000a00)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00', 0x9}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0) syz_usb_ep_read(0xffffffffffffffff, 0x1, 0x0, 0x0) 340.698552ms ago: executing program 6 (id=702): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0xe0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) pwrite64(r0, &(0x7f0000000000)="ff", 0x58211, 0x2200) 311.428783ms ago: executing program 6 (id=703): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_usb_connect(0x2, 0x4e, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff0000000705810240000007050102"], &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/ttyUSB0\x00', 0x4002, 0x28) 0s ago: executing program 1 (id=704): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) kernel console output (not intermixed with test programs): onfigured BSSID 50:50:50:50:50:50 [ 34.012979][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.039371][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.041407][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.068850][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.071827][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.075917][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.077553][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.082958][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.085589][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.115970][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.117565][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.119021][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.168604][ T4329] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 34.187960][ T4444] bridge0: port 3(syz_tun) entered blocking state [ 34.193962][ T4444] bridge0: port 3(syz_tun) entered disabled state [ 34.196258][ T4444] device syz_tun entered promiscuous mode [ 34.197684][ T4444] bridge0: port 3(syz_tun) entered blocking state [ 34.198878][ T4444] bridge0: port 3(syz_tun) entered forwarding state [ 34.225095][ T4444] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 34.230560][ T4444] Zero length message leads to an empty skb [ 34.393345][ T4439] loop0: detected capacity change from 0 to 32768 [ 34.396440][ T4439] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4439) [ 34.402321][ T4451] loop4: detected capacity change from 0 to 32768 [ 34.403792][ T4439] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 34.407254][ T4439] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm [ 34.420591][ T4439] BTRFS info (device loop0): setting nodatasum [ 34.424259][ T4439] BTRFS info (device loop0): force zlib compression, level 3 [ 34.427151][ T4439] BTRFS info (device loop0): turning on flush-on-commit [ 34.431074][ T4439] BTRFS info (device loop0): enabling auto defrag [ 34.434765][ T4439] BTRFS info (device loop0): use no compression [ 34.437292][ T4439] BTRFS info (device loop0): using free space tree [ 34.466603][ T4321] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 34.489781][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 34.491223][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 34.492596][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 34.493897][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 34.519499][ T4457] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 34.544037][ T4451] loop4: detected capacity change from 0 to 128 [ 34.548387][ T4451] ======================================================= [ 34.548387][ T4451] WARNING: The mand mount option has been deprecated and [ 34.548387][ T4451] and is ignored by this kernel. Remove the mand [ 34.548387][ T4451] option from the mount to silence this warning. [ 34.548387][ T4451] ======================================================= [ 34.600756][ T4333] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 34.604790][ T4451] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 34.618314][ T4451] hpfs: filesystem error: improperly stopped [ 34.635492][ T4451] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 34.652397][ T4451] hpfs: You really don't want any checks? You are crazy... [ 34.657318][ T4451] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 34.666335][ T4474] loop1: detected capacity change from 0 to 32768 [ 34.668116][ T4451] hpfs: code page support is disabled [ 34.671858][ T4451] hpfs: hpfs_map_4sectors(): unaligned read [ 34.675594][ T4451] hpfs: hpfs_map_4sectors(): unaligned read [ 34.692235][ T4451] hpfs: filesystem error: unable to find root dir [ 34.718169][ T4474] XFS (loop1): Mounting V5 Filesystem [ 34.747340][ T4474] XFS (loop1): Ending clean mount [ 35.214720][ T4329] XFS (loop1): Unmounting Filesystem [ 35.364325][ T4526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.380087][ T4526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.495035][ T4528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.499059][ T4528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.903908][ T4536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.905665][ T4536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.081979][ T4546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.084885][ T4546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.127476][ T4552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.129466][ T4552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.410116][ T4341] Bluetooth: hci3: command 0x040f tx timeout [ 36.432055][ T4554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.434519][ T4554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.569882][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 36.570547][ T4341] Bluetooth: hci1: command 0x040f tx timeout [ 36.571005][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 36.767791][ T4556] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 36.769301][ T4556] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 36.773360][ T4556] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 36.775464][ T4556] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 36.776750][ T4556] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 36.778293][ T4556] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 36.780112][ T4556] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 36.781369][ T4556] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 36.783568][ T4556] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 36.785158][ T4556] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 36.786703][ T4556] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 36.788746][ T4556] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 36.790738][ T4556] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 36.792667][ T4556] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 36.794191][ T4556] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 36.796135][ T4561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.797803][ T4561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.848186][ T4565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.36'. [ 36.973956][ T4569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.975941][ T4569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.322055][ T27] audit: type=1400 audit(37.310:2): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=4576 comm="syz.1.40" name="unknown" offset=16 [ 37.497237][ T4582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.499281][ T4582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.543709][ T4584] syz.4.43 uses obsolete (PF_INET,SOCK_PACKET) [ 37.602979][ T4592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.605239][ T4592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.868819][ T4609] binder: BINDER_SET_CONTEXT_MGR already set [ 37.870422][ T4609] binder: 4608:4609 ioctl 4018620d 200002c0 returned -16 [ 37.891228][ T4611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.892894][ T4611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.201861][ T4618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.203796][ T4618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.414286][ T4620] netlink: 44 bytes leftover after parsing attributes in process `syz.4.58'. [ 38.523289][ T4626] ieee802154 phy0 wpan0: encryption failed: -22 [ 38.543584][ T4628] FAULT_INJECTION: forcing a failure. [ 38.543584][ T4628] name failslab, interval 1, probability 0, space 0, times 1 [ 38.546670][ T4628] CPU: 0 PID: 4628 Comm: syz.2.61 Not tainted syzkaller #0 [ 38.548106][ T4628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.550227][ T4628] Call trace: [ 38.550910][ T4628] dump_backtrace+0x1c4/0x1f0 [ 38.551939][ T4628] show_stack+0x2c/0x3c [ 38.552670][ T4628] __dump_stack+0x30/0x40 [ 38.553502][ T4628] dump_stack_lvl+0xf4/0x15c [ 38.554423][ T4628] dump_stack+0x1c/0x5c [ 38.555258][ T4628] should_fail_ex+0x3cc/0x524 [ 38.556137][ T4628] __should_failslab+0xc0/0x11c [ 38.557114][ T4628] should_failslab+0x10/0x28 [ 38.558008][ T4628] __kmem_cache_alloc_node+0x7c/0x318 [ 38.559059][ T4628] __kmalloc_node_track_caller+0xb8/0x174 [ 38.560096][ T4628] kstrdup_const+0x90/0xdc [ 38.560980][ T4628] __kernfs_new_node+0xb0/0x5fc [ 38.561962][ T4628] kernfs_new_node+0x120/0x230 [ 38.562963][ T4628] __kernfs_create_file+0x60/0x2e0 [ 38.563979][ T4628] cgroup_addrm_files+0x670/0xaac [ 38.565012][ T4628] css_populate_dir+0xfc/0x330 [ 38.565964][ T4628] cgroup_apply_control_enable+0x578/0x9e0 [ 38.567198][ T4628] cgroup_mkdir+0x964/0xcf8 [ 38.568177][ T4628] kernfs_iop_mkdir+0x118/0x164 [ 38.569228][ T4628] vfs_mkdir+0x314/0x4d8 [ 38.570034][ T4628] do_mkdirat+0x1b8/0x3ec [ 38.570934][ T4628] __arm64_sys_mkdirat+0x90/0xa8 [ 38.571920][ T4628] invoke_syscall+0x98/0x290 [ 38.572927][ T4628] el0_svc_common+0x13c/0x258 [ 38.573911][ T4628] do_el0_svc+0x5c/0x134 [ 38.574851][ T4628] el0_svc+0x58/0x12c [ 38.575659][ T4628] el0t_64_sync_handler+0x84/0xf0 [ 38.576685][ T4628] el0t_64_sync+0x18c/0x190 [ 38.577691][ C0] vkms_vblank_simulate: vblank timer overrun [ 38.581691][ T4628] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12 [ 38.739819][ T4334] Bluetooth: hci0: command 0x0c1a tx timeout [ 38.788619][ T4643] FAULT_INJECTION: forcing a failure. [ 38.788619][ T4643] name failslab, interval 1, probability 0, space 0, times 0 [ 38.791843][ T4643] CPU: 0 PID: 4643 Comm: syz.3.67 Not tainted syzkaller #0 [ 38.793287][ T4643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.795463][ T4643] Call trace: [ 38.796179][ T4643] dump_backtrace+0x1c4/0x1f0 [ 38.797246][ T4643] show_stack+0x2c/0x3c [ 38.798121][ T4643] __dump_stack+0x30/0x40 [ 38.799069][ T4643] dump_stack_lvl+0xf4/0x15c [ 38.800080][ T4643] dump_stack+0x1c/0x5c [ 38.800955][ T4643] should_fail_ex+0x3cc/0x524 [ 38.802013][ T4643] __should_failslab+0xc0/0x11c [ 38.803121][ T4643] should_failslab+0x10/0x28 [ 38.804084][ T4643] __kmem_cache_alloc_node+0x7c/0x318 [ 38.805216][ T4643] kmalloc_trace+0x48/0x94 [ 38.806162][ T4643] assoc_array_insert+0x90/0x257c [ 38.807276][ T4643] key_link+0x130/0x424 [ 38.808204][ T4643] call_sbin_request_key+0x3e0/0xa84 [ 38.809325][ T4643] request_key_and_link+0xf74/0x1194 [ 38.810419][ T4643] __arm64_sys_request_key+0x288/0x384 [ 38.811512][ T4643] invoke_syscall+0x98/0x290 [ 38.812420][ T4643] el0_svc_common+0x13c/0x258 [ 38.813338][ T4643] do_el0_svc+0x5c/0x134 [ 38.814185][ T4643] el0_svc+0x58/0x12c [ 38.814970][ T4643] el0t_64_sync_handler+0x84/0xf0 [ 38.815983][ T4643] el0t_64_sync+0x18c/0x190 [ 38.817047][ T4334] Bluetooth: hci4: command 0x0405 tx timeout [ 38.818016][ T4337] Bluetooth: hci3: command 0x0c1a tx timeout [ 38.818353][ T4334] Bluetooth: hci2: command 0x0c1a tx timeout [ 38.819616][ T4337] Bluetooth: hci1: command 0x0c1a tx timeout [ 38.844992][ T4645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.847108][ T4645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.312549][ T4649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.314343][ T4649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.369121][ T4651] netlink: 'syz.3.71': attribute type 16 has an invalid length. [ 39.371499][ T4651] netlink: 164 bytes leftover after parsing attributes in process `syz.3.71'. [ 39.840967][ T4655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.842608][ T4655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.963545][ T4658] ieee802154 phy0 wpan0: encryption failed: -22 [ 40.382373][ T4663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.384157][ T4663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.810620][ T4341] Bluetooth: hci0: command 0x0406 tx timeout [ 40.862540][ T4604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 40.892862][ T4334] Bluetooth: hci1: command 0x0406 tx timeout [ 40.894015][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 40.895206][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 40.896420][ T4334] Bluetooth: hci4: command 0x0c1a tx timeout [ 40.917125][ T4675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.918904][ T4675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.976484][ T4687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.978143][ T4687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.000946][ T4691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.001126][ T4689] IPVS: lc: TCP 127.0.0.1:21 - no destination available [ 41.003534][ T4691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.160073][ T4695] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 41.427531][ T4697] FAULT_INJECTION: forcing a failure. [ 41.427531][ T4697] name failslab, interval 1, probability 0, space 0, times 0 [ 41.430321][ T4697] CPU: 1 PID: 4697 Comm: syz.0.90 Not tainted syzkaller #0 [ 41.431700][ T4697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 41.433644][ T4697] Call trace: [ 41.434285][ T4697] dump_backtrace+0x1c4/0x1f0 [ 41.435208][ T4697] show_stack+0x2c/0x3c [ 41.436081][ T4697] __dump_stack+0x30/0x40 [ 41.436993][ T4697] dump_stack_lvl+0xf4/0x15c [ 41.437951][ T4697] dump_stack+0x1c/0x5c [ 41.438809][ T4697] should_fail_ex+0x3cc/0x524 [ 41.439736][ T4697] __should_failslab+0xc0/0x11c [ 41.440709][ T4697] should_failslab+0x10/0x28 [ 41.441606][ T4697] kmem_cache_alloc+0x88/0x310 [ 41.442477][ T4697] __kernfs_new_node+0xec/0x5fc [ 41.443470][ T4697] kernfs_new_node+0x120/0x230 [ 41.444443][ T4697] __kernfs_create_file+0x60/0x2e0 [ 41.445419][ T4697] cgroup_addrm_files+0x670/0xaac [ 41.446391][ T4697] css_populate_dir+0x168/0x330 [ 41.447367][ T4697] cgroup_mkdir+0x940/0xcf8 [ 41.448405][ T4697] kernfs_iop_mkdir+0x118/0x164 [ 41.449559][ T4697] vfs_mkdir+0x314/0x4d8 [ 41.450548][ T4697] do_mkdirat+0x1b8/0x3ec [ 41.451519][ T4697] __arm64_sys_mkdirat+0x90/0xa8 [ 41.452544][ T4697] invoke_syscall+0x98/0x290 [ 41.453500][ T4697] el0_svc_common+0x13c/0x258 [ 41.454478][ T4697] do_el0_svc+0x5c/0x134 [ 41.455363][ T4697] el0_svc+0x58/0x12c [ 41.456179][ T4697] el0t_64_sync_handler+0x84/0xf0 [ 41.457212][ T4697] el0t_64_sync+0x18c/0x190 [ 41.460348][ T4697] cgroup: cgroup_addrm_files: failed to add cgroup.procs, err=-12 [ 41.492075][ T4341] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 41.547658][ T4712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.550620][ T4712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.581577][ T4717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.583590][ T4717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.742868][ T4724] FAULT_INJECTION: forcing a failure. [ 41.742868][ T4724] name failslab, interval 1, probability 0, space 0, times 0 [ 41.745491][ T4724] CPU: 1 PID: 4724 Comm: syz.2.100 Not tainted syzkaller #0 [ 41.746809][ T4724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 41.748774][ T4724] Call trace: [ 41.749393][ T4724] dump_backtrace+0x1c4/0x1f0 [ 41.750309][ T4724] show_stack+0x2c/0x3c [ 41.751111][ T4724] __dump_stack+0x30/0x40 [ 41.751979][ T4724] dump_stack_lvl+0xf4/0x15c [ 41.752906][ T4724] dump_stack+0x1c/0x5c [ 41.753718][ T4724] should_fail_ex+0x3cc/0x524 [ 41.754552][ T4724] __should_failslab+0xc0/0x11c [ 41.755473][ T4724] should_failslab+0x10/0x28 [ 41.756328][ T4724] slab_pre_alloc_hook+0x6c/0x31c [ 41.757348][ T4724] kmem_cache_alloc_lru+0x60/0x284 [ 41.758348][ T4724] __d_alloc+0x40/0x68c [ 41.759147][ T4724] d_alloc_pseudo+0x28/0x8c [ 41.759989][ T4724] alloc_file_pseudo+0xd8/0x1f4 [ 41.760964][ T4724] sock_alloc_file+0xb4/0x234 [ 41.761896][ T4724] __sys_socket+0x138/0x1b0 [ 41.762782][ T4724] __arm64_sys_socket+0x7c/0x94 [ 41.763700][ T4724] invoke_syscall+0x98/0x290 [ 41.764599][ T4724] el0_svc_common+0x13c/0x258 [ 41.765531][ T4724] do_el0_svc+0x5c/0x134 [ 41.766402][ T4724] el0_svc+0x58/0x12c [ 41.767190][ T4724] el0t_64_sync_handler+0x84/0xf0 [ 41.768108][ T4724] el0t_64_sync+0x18c/0x190 [ 42.131396][ T4749] FAULT_INJECTION: forcing a failure. [ 42.131396][ T4749] name failslab, interval 1, probability 0, space 0, times 0 [ 42.134083][ T4749] CPU: 1 PID: 4749 Comm: syz.1.111 Not tainted syzkaller #0 [ 42.135063][ T4751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.135668][ T4749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.138142][ T4751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.139317][ T4749] Call trace: [ 42.141604][ T4749] dump_backtrace+0x1c4/0x1f0 [ 42.142662][ T4749] show_stack+0x2c/0x3c [ 42.143555][ T4749] __dump_stack+0x30/0x40 [ 42.144500][ T4749] dump_stack_lvl+0xf4/0x15c [ 42.145478][ T4749] dump_stack+0x1c/0x5c [ 42.146347][ T4749] should_fail_ex+0x3cc/0x524 [ 42.147368][ T4749] __should_failslab+0xc0/0x11c [ 42.148364][ T4749] should_failslab+0x10/0x28 [ 42.149315][ T4749] __kmem_cache_alloc_node+0x7c/0x318 [ 42.150478][ T4749] __kmalloc+0xc4/0x180 [ 42.151287][ T4749] tomoyo_encode+0x260/0x484 [ 42.152243][ T4749] tomoyo_realpath_from_path+0x4b4/0x508 [ 42.153374][ T4749] tomoyo_path_number_perm+0x1c4/0x540 [ 42.154504][ T4749] tomoyo_file_ioctl+0x2c/0x3c [ 42.155478][ T4749] security_file_ioctl+0x80/0xbc [ 42.156476][ T4749] __arm64_sys_ioctl+0xa8/0x1c8 [ 42.157466][ T4749] invoke_syscall+0x98/0x290 [ 42.158410][ T4749] el0_svc_common+0x13c/0x258 [ 42.159372][ T4749] do_el0_svc+0x5c/0x134 [ 42.160205][ T4749] el0_svc+0x58/0x12c [ 42.160994][ T4749] el0t_64_sync_handler+0x84/0xf0 [ 42.161980][ T4749] el0t_64_sync+0x18c/0x190 [ 42.165388][ T4749] ERROR: Out of memory at tomoyo_realpath_from_path. [ 42.167265][ T4749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.169188][ T4749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.187415][ T4753] overlayfs: overlapping lowerdir path [ 42.643302][ T4757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.649272][ T4757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.653961][ T4757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.656208][ T4757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.714932][ T4763] netlink: 36 bytes leftover after parsing attributes in process `syz.1.118'. [ 42.721729][ T4764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.723507][ T4764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.879401][ T4341] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 42.889897][ T4341] Bluetooth: hci0: command 0x0406 tx timeout [ 42.974996][ T4334] Bluetooth: hci4: command 0x0406 tx timeout [ 42.976186][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 42.977269][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 42.978415][ T4334] Bluetooth: hci1: command 0x0406 tx timeout [ 42.996039][ T4782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.998280][ T4782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.213754][ T4786] FAULT_INJECTION: forcing a failure. [ 43.213754][ T4786] name failslab, interval 1, probability 0, space 0, times 0 [ 43.216196][ T4786] CPU: 0 PID: 4786 Comm: syz.2.128 Not tainted syzkaller #0 [ 43.217587][ T4786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.219469][ T4786] Call trace: [ 43.220178][ T4786] dump_backtrace+0x1c4/0x1f0 [ 43.221190][ T4786] show_stack+0x2c/0x3c [ 43.222051][ T4786] __dump_stack+0x30/0x40 [ 43.222936][ T4786] dump_stack_lvl+0xf4/0x15c [ 43.223782][ T4786] dump_stack+0x1c/0x5c [ 43.224544][ T4786] should_fail_ex+0x3cc/0x524 [ 43.225459][ T4786] __should_failslab+0xc0/0x11c [ 43.226386][ T4786] should_failslab+0x10/0x28 [ 43.227263][ T4786] __kmem_cache_alloc_node+0x7c/0x318 [ 43.228203][ T4786] kmalloc_trace+0x48/0x94 [ 43.229029][ T4786] snd_pcm_hw_param_near+0x94/0x3e4 [ 43.230047][ T4786] snd_pcm_oss_change_params_locked+0x1904/0x31c8 [ 43.231220][ T4786] snd_pcm_oss_get_active_substream+0x1a4/0x25c [ 43.232352][ T4786] snd_pcm_oss_ioctl+0xd14/0x1d48 [ 43.233225][ T4786] __arm64_sys_ioctl+0x14c/0x1c8 [ 43.234189][ T4786] invoke_syscall+0x98/0x290 [ 43.235020][ T4786] el0_svc_common+0x13c/0x258 [ 43.235852][ T4786] do_el0_svc+0x5c/0x134 [ 43.236720][ T4786] el0_svc+0x58/0x12c [ 43.237613][ T4786] el0t_64_sync_handler+0x84/0xf0 [ 43.238762][ T4786] el0t_64_sync+0x18c/0x190 [ 43.284780][ T4790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.286524][ T4790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.389927][ T4341] Bluetooth: hci4: unexpected event for opcode 0x2042 [ 43.401965][ T4794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.403972][ T4794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.945201][ T4819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.947960][ T4819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.972758][ T4825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.975425][ T4825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.047353][ T9] Bluetooth: hci5: Frame reassembly failed (-84) [ 44.152570][ T4819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.154317][ T4819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.758050][ T4843] binder: 4842:4843 tried to acquire reference to desc 0, got 1 instead [ 44.761282][ T4843] binder: 4843:4842 failed to get security context [ 44.762539][ T4843] binder: 4842:4843 transaction call to 4842:0 failed 6/29201/-22, size 0-0 line 3214 [ 44.764632][ T4373] binder: undelivered TRANSACTION_ERROR: 29201 [ 44.823873][ T4849] ieee802154 phy0 wpan0: encryption failed: -22 [ 44.879915][ T4334] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 45.050968][ T4334] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 45.073656][ T4859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.164'. [ 45.104277][ T4862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.106675][ T4862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.379765][ T4373] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.813770][ T4373] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 45.815942][ T4373] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 45.817564][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.827147][ T4373] usb 1-1: config 0 descriptor?? [ 45.833813][ T4373] pwc: Askey VC010 type 2 USB webcam detected. [ 46.090326][ T4334] Bluetooth: hci5: command 0x1003 tx timeout [ 46.090552][ T4341] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 46.227982][ T4881] FAULT_INJECTION: forcing a failure. [ 46.227982][ T4881] name failslab, interval 1, probability 0, space 0, times 0 [ 46.230710][ T4881] CPU: 1 PID: 4881 Comm: syz.3.172 Not tainted syzkaller #0 [ 46.232127][ T4881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.234092][ T4881] Call trace: [ 46.234742][ T4881] dump_backtrace+0x1c4/0x1f0 [ 46.235668][ T4881] show_stack+0x2c/0x3c [ 46.236459][ T4881] __dump_stack+0x30/0x40 [ 46.237273][ T4881] dump_stack_lvl+0xf4/0x15c [ 46.238152][ T4881] dump_stack+0x1c/0x5c [ 46.238978][ T4881] should_fail_ex+0x3cc/0x524 [ 46.239889][ T4881] __should_failslab+0xc0/0x11c [ 46.240870][ T4881] should_failslab+0x10/0x28 [ 46.241727][ T4881] __kmem_cache_alloc_node+0x7c/0x318 [ 46.242914][ T4881] kmalloc_trace+0x48/0x94 [ 46.243792][ T4881] binderfs_init_fs_context+0x58/0x12c [ 46.244783][ T4881] alloc_fs_context+0x530/0x778 [ 46.245721][ T4881] fs_context_for_mount+0x34/0x44 [ 46.246638][ T4881] __arm64_sys_fsopen+0xf0/0x2d4 [ 46.247564][ T4881] invoke_syscall+0x98/0x290 [ 46.248438][ T4881] el0_svc_common+0x13c/0x258 [ 46.249335][ T4881] do_el0_svc+0x5c/0x134 [ 46.250126][ T4881] el0_svc+0x58/0x12c [ 46.250925][ T4881] el0t_64_sync_handler+0x84/0xf0 [ 46.251953][ T4881] el0t_64_sync+0x18c/0x190 [ 46.271082][ T4881] FAULT_INJECTION: forcing a failure. [ 46.271082][ T4881] name failslab, interval 1, probability 0, space 0, times 0 [ 46.273673][ T4881] CPU: 1 PID: 4881 Comm: syz.3.172 Not tainted syzkaller #0 [ 46.275047][ T4881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.276932][ T4881] Call trace: [ 46.277567][ T4881] dump_backtrace+0x1c4/0x1f0 [ 46.278479][ T4881] show_stack+0x2c/0x3c [ 46.279261][ T4881] __dump_stack+0x30/0x40 [ 46.280101][ T4881] dump_stack_lvl+0xf4/0x15c [ 46.280995][ T4881] dump_stack+0x1c/0x5c [ 46.281811][ T4881] should_fail_ex+0x3cc/0x524 [ 46.282450][ T4373] pwc: recv_control_msg error -32 req 02 val 2b00 [ 46.282704][ T4881] __should_failslab+0xc0/0x11c [ 46.284924][ T4881] should_failslab+0x10/0x28 [ 46.285783][ T4881] __kmem_cache_alloc_node+0x7c/0x318 [ 46.286086][ T4373] pwc: recv_control_msg error -32 req 02 val 2700 [ 46.286756][ T4881] __kmalloc+0xc4/0x180 [ 46.288431][ T4373] pwc: recv_control_msg error -32 req 02 val 2c00 [ 46.288751][ T4881] security_sk_alloc+0x54/0x140 [ 46.290946][ T4881] sk_prot_alloc+0xe0/0x1e8 [ 46.291271][ T4373] pwc: recv_control_msg error -32 req 04 val 1000 [ 46.291810][ T4881] sk_alloc+0x44/0x3a0 [ 46.293446][ T4373] pwc: recv_control_msg error -32 req 04 val 1300 [ 46.293768][ T4881] pppol2tp_create+0x40/0x1e4 [ 46.295796][ T4881] pppox_create+0x120/0x18c [ 46.296535][ T4373] pwc: recv_control_msg error -32 req 04 val 1400 [ 46.296665][ T4881] __sock_create+0x448/0x8a8 [ 46.298403][ T4373] pwc: recv_control_msg error -32 req 02 val 2000 [ 46.298760][ T4881] __sys_socket+0xc0/0x1b0 [ 46.300719][ T4881] __arm64_sys_socket+0x7c/0x94 [ 46.300856][ T4373] pwc: recv_control_msg error -32 req 02 val 2100 [ 46.301624][ T4881] invoke_syscall+0x98/0x290 [ 46.303642][ T4881] el0_svc_common+0x13c/0x258 [ 46.304550][ T4881] do_el0_svc+0x5c/0x134 [ 46.305328][ T4881] el0_svc+0x58/0x12c [ 46.306087][ T4881] el0t_64_sync_handler+0x84/0xf0 [ 46.306977][ T4881] el0t_64_sync+0x18c/0x190 [ 46.388284][ T4896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.390155][ T4896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.394539][ T4896] FAULT_INJECTION: forcing a failure. [ 46.394539][ T4896] name failslab, interval 1, probability 0, space 0, times 0 [ 46.398816][ T4896] CPU: 1 PID: 4896 Comm: syz.3.178 Not tainted syzkaller #0 [ 46.400333][ T4896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 46.402373][ T4896] Call trace: [ 46.403054][ T4896] dump_backtrace+0x1c4/0x1f0 [ 46.404006][ T4896] show_stack+0x2c/0x3c [ 46.404841][ T4896] __dump_stack+0x30/0x40 [ 46.405759][ T4896] dump_stack_lvl+0xf4/0x15c [ 46.406688][ T4896] dump_stack+0x1c/0x5c [ 46.407551][ T4896] should_fail_ex+0x3cc/0x524 [ 46.408529][ T4896] __should_failslab+0xc0/0x11c [ 46.409507][ T4896] should_failslab+0x10/0x28 [ 46.410408][ T4896] kmem_cache_alloc+0x88/0x310 [ 46.411322][ T4896] __kernfs_new_node+0xec/0x5fc [ 46.412236][ T4896] kernfs_new_node+0x120/0x230 [ 46.413184][ T4896] __kernfs_create_file+0x60/0x2e0 [ 46.414209][ T4896] cgroup_addrm_files+0x670/0xaac [ 46.415164][ T4896] css_populate_dir+0xfc/0x330 [ 46.416104][ T4896] cgroup_apply_control_enable+0x578/0x9e0 [ 46.417253][ T4896] cgroup_mkdir+0x964/0xcf8 [ 46.418069][ T4896] kernfs_iop_mkdir+0x118/0x164 [ 46.418970][ T4896] vfs_mkdir+0x314/0x4d8 [ 46.419777][ T4896] do_mkdirat+0x1b8/0x3ec [ 46.420660][ T4896] __arm64_sys_mkdirat+0x90/0xa8 [ 46.421654][ T4896] invoke_syscall+0x98/0x290 [ 46.422559][ T4896] el0_svc_common+0x13c/0x258 [ 46.423502][ T4896] do_el0_svc+0x5c/0x134 [ 46.424368][ T4896] el0_svc+0x58/0x12c [ 46.425162][ T4896] el0t_64_sync_handler+0x84/0xf0 [ 46.426076][ T4896] el0t_64_sync+0x18c/0x190 [ 46.428782][ T4896] cgroup: cgroup_addrm_files: failed to add throttle.read_bps_device, err=-12 [ 46.462024][ T4902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.463800][ T4902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.489110][ T4905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.491694][ T4905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.503655][ T4373] pwc: recv_control_msg error -32 req 02 val 2500 [ 46.505322][ T4373] pwc: recv_control_msg error -32 req 02 val 2400 [ 46.507140][ T4373] pwc: recv_control_msg error -32 req 02 val 2600 [ 46.508775][ T4373] pwc: recv_control_msg error -32 req 02 val 2900 [ 46.712010][ T4373] pwc: recv_control_msg error -71 req 04 val 1100 [ 46.713593][ T4373] pwc: recv_control_msg error -71 req 04 val 1200 [ 46.716389][ T4373] pwc: Registered as video11. [ 46.717945][ T4373] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input2 [ 46.725714][ T4373] usb 1-1: USB disconnect, device number 2 [ 46.928135][ T4919] jffs2: notice: (4919) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 46.978569][ T4927] rnbd_client L211: map_device: Parameters missing [ 47.015470][ T4933] netlink: 1 bytes leftover after parsing attributes in process `syz.3.194'. [ 47.246896][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 47.296603][ T4952] using random self ethernet address [ 47.298030][ T4952] using random host ethernet address [ 47.589328][ T4952] usb0: HOST MAC fa:8d:96:e5:f4:64 [ 47.595108][ T4952] usb0: MAC ce:3a:78:62:4e:e0 [ 47.683402][ T4967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.685906][ T4967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.697270][ T4970] FAULT_INJECTION: forcing a failure. [ 47.697270][ T4970] name failslab, interval 1, probability 0, space 0, times 0 [ 47.699721][ T4970] CPU: 0 PID: 4970 Comm: syz.0.206 Not tainted syzkaller #0 [ 47.701148][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 47.703036][ T4970] Call trace: [ 47.703704][ T4970] dump_backtrace+0x1c4/0x1f0 [ 47.704764][ T4970] show_stack+0x2c/0x3c [ 47.705620][ T4970] __dump_stack+0x30/0x40 [ 47.706463][ T4970] dump_stack_lvl+0xf4/0x15c [ 47.707285][ T4974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.707392][ T4970] dump_stack+0x1c/0x5c [ 47.709919][ T4970] should_fail_ex+0x3cc/0x524 [ 47.710817][ T4970] __should_failslab+0xc0/0x11c [ 47.711795][ T4970] should_failslab+0x10/0x28 [ 47.712706][ T4970] kmem_cache_alloc+0x88/0x310 [ 47.712762][ T4974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.713629][ T4970] __kernfs_new_node+0xec/0x5fc [ 47.716122][ T4970] kernfs_new_node+0x120/0x230 [ 47.717071][ T4970] __kernfs_create_file+0x60/0x2e0 [ 47.718060][ T4970] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 47.719080][ T4970] sysfs_merge_group+0x164/0x2ac [ 47.720004][ T4970] dpm_sysfs_add+0xc8/0x26c [ 47.720825][ T4970] device_add+0x678/0xe4c [ 47.721590][ T4970] device_create_groups_vargs+0x1fc/0x298 [ 47.722618][ T4970] device_create+0xf4/0x148 [ 47.723484][ T4970] bdi_register_va+0x150/0x81c [ 47.724426][ T4970] super_setup_bdi_name+0x100/0x208 [ 47.725471][ T4970] ceph_get_tree+0x86c/0x1134 [ 47.726356][ T4970] vfs_get_tree+0x90/0x278 [ 47.727252][ T4970] do_new_mount+0x228/0x804 [ 47.728136][ T4970] path_mount+0x5ac/0xe6c [ 47.729003][ T4970] __arm64_sys_mount+0x4a0/0x5a0 [ 47.729951][ T4970] invoke_syscall+0x98/0x290 [ 47.730807][ T4970] el0_svc_common+0x13c/0x258 [ 47.731712][ T4970] do_el0_svc+0x5c/0x134 [ 47.732512][ T4970] el0_svc+0x58/0x12c [ 47.733273][ T4970] el0t_64_sync_handler+0x84/0xf0 [ 47.734230][ T4970] el0t_64_sync+0x18c/0x190 [ 47.735113][ C0] vkms_vblank_simulate: vblank timer overrun [ 47.744686][ T4970] ceph: No mds server is up or the cluster is laggy [ 47.855346][ T4987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.857301][ T4987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.899868][ T4377] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 47.911875][ T4341] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 47.925937][ T4974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.928849][ T4974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.965322][ T5002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.967036][ T5002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.080966][ T4377] usb 1-1: Dual-Role OTG device on HNP port [ 48.082388][ T4377] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 48.084193][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.113672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 48.113912][ T4377] cdc_ncm 1-1:1.0: MAC-Address: fa:8d:96:e5:f4:64 [ 48.121136][ T4377] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), fa:8d:96:e5:f4:64 [ 48.324114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): usb1: link becomes ready [ 48.510269][ T5060] FAULT_INJECTION: forcing a failure. [ 48.510269][ T5060] name failslab, interval 1, probability 0, space 0, times 0 [ 48.516052][ T5060] CPU: 0 PID: 5060 Comm: syz.0.224 Not tainted syzkaller #0 [ 48.517473][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 48.519465][ T5060] Call trace: [ 48.520114][ T5060] dump_backtrace+0x1c4/0x1f0 [ 48.521042][ T5060] show_stack+0x2c/0x3c [ 48.521881][ T5060] __dump_stack+0x30/0x40 [ 48.522739][ T5060] dump_stack_lvl+0xf4/0x15c [ 48.523655][ T5060] dump_stack+0x1c/0x5c [ 48.524561][ T5060] should_fail_ex+0x3cc/0x524 [ 48.525428][ T5060] __should_failslab+0xc0/0x11c [ 48.526373][ T5060] should_failslab+0x10/0x28 [ 48.527243][ T5060] __kmem_cache_alloc_node+0x7c/0x318 [ 48.528268][ T5060] kmalloc_trace+0x48/0x94 [ 48.529133][ T5060] snd_seq_fifo_new+0x58/0x1a8 [ 48.530047][ T5060] snd_seq_open+0x194/0x484 [ 48.530918][ T5060] snd_open+0x294/0x348 [ 48.531704][ T5060] chrdev_open+0x3d0/0x51c [ 48.532559][ T5060] do_dentry_open+0x738/0xf8c [ 48.533478][ T5060] vfs_open+0x7c/0x90 [ 48.534250][ T5060] path_openat+0x1fc0/0x27a0 [ 48.535115][ T5060] do_filp_open+0x198/0x38c [ 48.535982][ T5060] do_sys_openat2+0x134/0x3fc [ 48.536877][ T5060] __arm64_sys_openat+0x11c/0x150 [ 48.537835][ T5060] invoke_syscall+0x98/0x290 [ 48.538732][ T5060] el0_svc_common+0x13c/0x258 [ 48.539645][ T5060] do_el0_svc+0x5c/0x134 [ 48.540526][ T5060] el0_svc+0x58/0x12c [ 48.541286][ T5060] el0t_64_sync_handler+0x84/0xf0 [ 48.542226][ T5060] el0t_64_sync+0x18c/0x190 [ 48.543106][ C0] vkms_vblank_simulate: vblank timer overrun [ 48.717884][ T5076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.721802][ T5076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.076424][ T5078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.080286][ T5078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.092944][ T5080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.094889][ T5080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.264503][ T5084] FAULT_INJECTION: forcing a failure. [ 49.264503][ T5084] name failslab, interval 1, probability 0, space 0, times 0 [ 49.266864][ T5084] CPU: 1 PID: 5084 Comm: syz.3.233 Not tainted syzkaller #0 [ 49.268195][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.270127][ T5084] Call trace: [ 49.270768][ T5084] dump_backtrace+0x1c4/0x1f0 [ 49.271662][ T5084] show_stack+0x2c/0x3c [ 49.272481][ T5084] __dump_stack+0x30/0x40 [ 49.273371][ T5084] dump_stack_lvl+0xf4/0x15c [ 49.274282][ T5084] dump_stack+0x1c/0x5c [ 49.275112][ T5084] should_fail_ex+0x3cc/0x524 [ 49.275999][ T5084] __should_failslab+0xc0/0x11c [ 49.276981][ T5084] should_failslab+0x10/0x28 [ 49.277842][ T5084] __kmem_cache_alloc_node+0x7c/0x318 [ 49.278870][ T5084] kmalloc_trace+0x48/0x94 [ 49.279723][ T5084] device_add+0xbc/0xe4c [ 49.280519][ T5084] wakeup_source_sysfs_add+0x1b4/0x2a8 [ 49.281557][ T5084] wakeup_source_register+0x148/0x21c [ 49.282576][ T5084] ep_create_wakeup_source+0xec/0x230 [ 49.283669][ T5084] ep_insert+0xcb4/0x13ec [ 49.284523][ T5084] do_epoll_ctl+0x6dc/0xc60 [ 49.285389][ T5084] __arm64_sys_epoll_ctl+0x204/0x294 [ 49.286437][ T5084] invoke_syscall+0x98/0x290 [ 49.287347][ T5084] el0_svc_common+0x13c/0x258 [ 49.288285][ T5084] do_el0_svc+0x5c/0x134 [ 49.289110][ T5084] el0_svc+0x58/0x12c [ 49.289907][ T5084] el0t_64_sync_handler+0x84/0xf0 [ 49.290929][ T5084] el0t_64_sync+0x18c/0x190 [ 49.434747][ T5099] netlink: 48 bytes leftover after parsing attributes in process `syz.0.240'. [ 49.546002][ T5102] FAULT_INJECTION: forcing a failure. [ 49.546002][ T5102] name failslab, interval 1, probability 0, space 0, times 0 [ 49.548533][ T5102] CPU: 1 PID: 5102 Comm: syz.0.241 Not tainted syzkaller #0 [ 49.549870][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.551737][ T5102] Call trace: [ 49.552404][ T5102] dump_backtrace+0x1c4/0x1f0 [ 49.553326][ T5102] show_stack+0x2c/0x3c [ 49.554181][ T5102] __dump_stack+0x30/0x40 [ 49.555059][ T5102] dump_stack_lvl+0xf4/0x15c [ 49.555978][ T5102] dump_stack+0x1c/0x5c [ 49.556787][ T5102] should_fail_ex+0x3cc/0x524 [ 49.557704][ T5102] __should_failslab+0xc0/0x11c [ 49.558654][ T5102] should_failslab+0x10/0x28 [ 49.559546][ T5102] kmem_cache_alloc+0x88/0x310 [ 49.560530][ T5102] __alloc_file+0x30/0x234 [ 49.561446][ T5102] alloc_empty_file+0xa0/0x184 [ 49.562416][ T5102] path_openat+0xe0/0x27a0 [ 49.563330][ T5102] do_filp_open+0x198/0x38c [ 49.564317][ T5102] do_sys_openat2+0x134/0x3fc [ 49.565204][ T5102] __arm64_sys_openat+0x11c/0x150 [ 49.566167][ T5102] invoke_syscall+0x98/0x290 [ 49.567073][ T5102] el0_svc_common+0x13c/0x258 [ 49.568031][ T5102] do_el0_svc+0x5c/0x134 [ 49.568840][ T5102] el0_svc+0x58/0x12c [ 49.569622][ T5102] el0t_64_sync_handler+0x84/0xf0 [ 49.570617][ T5102] el0t_64_sync+0x18c/0x190 [ 49.642098][ T5110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.650321][ T5110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.663508][ T4341] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 49.816702][ T5121] device syzkaller1 entered promiscuous mode [ 49.989357][ T5125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.991487][ T5125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.997237][ T5125] FAULT_INJECTION: forcing a failure. [ 49.997237][ T5125] name failslab, interval 1, probability 0, space 0, times 0 [ 50.000477][ T5125] CPU: 0 PID: 5125 Comm: syz.3.251 Not tainted syzkaller #0 [ 50.002165][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.004150][ T5125] Call trace: [ 50.004816][ T5125] dump_backtrace+0x1c4/0x1f0 [ 50.005732][ T5125] show_stack+0x2c/0x3c [ 50.006551][ T5125] __dump_stack+0x30/0x40 [ 50.007398][ T5125] dump_stack_lvl+0xf4/0x15c [ 50.008312][ T5125] dump_stack+0x1c/0x5c [ 50.009116][ T5125] should_fail_ex+0x3cc/0x524 [ 50.010061][ T5125] __should_failslab+0xc0/0x11c [ 50.011104][ T5125] should_failslab+0x10/0x28 [ 50.012102][ T5125] __kmem_cache_alloc_node+0x7c/0x318 [ 50.013166][ T5125] kmalloc_trace+0x48/0x94 [ 50.014011][ T5125] kobject_uevent_env+0x258/0x88c [ 50.014978][ T5125] kobject_uevent+0x2c/0x3c [ 50.015838][ T5125] driver_register+0x2a0/0x37c [ 50.016769][ T5125] usb_gadget_register_driver_owner+0xf0/0x25c [ 50.017966][ T5125] raw_ioctl+0x1014/0x326c [ 50.018830][ T5125] __arm64_sys_ioctl+0x14c/0x1c8 [ 50.019778][ T5125] invoke_syscall+0x98/0x290 [ 50.020652][ T5125] el0_svc_common+0x13c/0x258 [ 50.021581][ T5125] do_el0_svc+0x5c/0x134 [ 50.022373][ T5125] el0_svc+0x58/0x12c [ 50.023118][ T5125] el0t_64_sync_handler+0x84/0xf0 [ 50.024180][ T5125] el0t_64_sync+0x18c/0x190 [ 50.029888][ T5125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.032082][ T5125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.144079][ T5129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.146007][ T5129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.346815][ T5148] FAULT_INJECTION: forcing a failure. [ 50.346815][ T5148] name failslab, interval 1, probability 0, space 0, times 0 [ 50.349135][ T5148] CPU: 1 PID: 5148 Comm: syz.2.261 Not tainted syzkaller #0 [ 50.350558][ T5148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.352543][ T5148] Call trace: [ 50.353184][ T5143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.353313][ T5143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.354697][ T5148] dump_backtrace+0x1c4/0x1f0 [ 50.357244][ T5148] show_stack+0x2c/0x3c [ 50.358049][ T5148] __dump_stack+0x30/0x40 [ 50.358914][ T5148] dump_stack_lvl+0xf4/0x15c [ 50.359827][ T5148] dump_stack+0x1c/0x5c [ 50.360652][ T5148] should_fail_ex+0x3cc/0x524 [ 50.361526][ T5148] __should_failslab+0xc0/0x11c [ 50.362445][ T5148] should_failslab+0x10/0x28 [ 50.363418][ T5148] kmem_cache_alloc+0x88/0x310 [ 50.364387][ T5148] security_file_alloc+0x38/0x11c [ 50.365386][ T5148] __alloc_file+0xac/0x234 [ 50.366262][ T5148] alloc_empty_file+0xa0/0x184 [ 50.367153][ T5148] alloc_file+0x64/0x564 [ 50.367969][ T5148] alloc_file_pseudo+0x16c/0x1f4 [ 50.368869][ T5148] sock_alloc_file+0xb4/0x234 [ 50.369703][ T5148] __sys_socket+0x138/0x1b0 [ 50.370539][ T5148] __arm64_sys_socket+0x7c/0x94 [ 50.371436][ T5148] invoke_syscall+0x98/0x290 [ 50.372316][ T5148] el0_svc_common+0x13c/0x258 [ 50.373199][ T5148] do_el0_svc+0x5c/0x134 [ 50.373955][ T5148] el0_svc+0x58/0x12c [ 50.374686][ T5148] el0t_64_sync_handler+0x84/0xf0 [ 50.375606][ T5148] el0t_64_sync+0x18c/0x190 [ 50.396309][ T5150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.398133][ T5150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.554228][ T5152] UBIFS error (pid: 5152): cannot open "./file1", error -22 [ 50.591410][ T5156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.594938][ T5156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.697088][ T5158] jffs2: notice: (5158) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 50.700930][ T5158] FAULT_INJECTION: forcing a failure. [ 50.700930][ T5158] name failslab, interval 1, probability 0, space 0, times 0 [ 50.703779][ T5158] CPU: 0 PID: 5158 Comm: syz.4.266 Not tainted syzkaller #0 [ 50.705279][ T5158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.707390][ T5158] Call trace: [ 50.708101][ T5158] dump_backtrace+0x1c4/0x1f0 [ 50.709087][ T5158] show_stack+0x2c/0x3c [ 50.709916][ T5158] __dump_stack+0x30/0x40 [ 50.710741][ T5158] dump_stack_lvl+0xf4/0x15c [ 50.711649][ T5158] dump_stack+0x1c/0x5c [ 50.712395][ T5158] should_fail_ex+0x3cc/0x524 [ 50.713292][ T5158] __should_failslab+0xc0/0x11c [ 50.714231][ T5158] should_failslab+0x10/0x28 [ 50.715236][ T5158] slab_pre_alloc_hook+0x6c/0x31c [ 50.716281][ T5158] kmem_cache_alloc_lru+0x60/0x284 [ 50.717282][ T5158] jffs2_alloc_inode+0x2c/0x48 [ 50.718300][ T5158] iget_locked+0x174/0x754 [ 50.719215][ T5158] jffs2_iget+0xc8/0xaa4 [ 50.720048][ T5158] jffs2_do_fill_super+0x4c0/0xa20 [ 50.721017][ T5158] jffs2_fill_super+0x258/0x28c [ 50.721929][ T5158] mtd_get_sb+0xc4/0x2a0 [ 50.722814][ T5158] mtd_get_sb_by_nr+0x94/0xb0 [ 50.723730][ T5158] get_tree_mtd+0x4bc/0x61c [ 50.724583][ T5158] jffs2_get_tree+0x28/0x38 [ 50.725455][ T5158] vfs_get_tree+0x90/0x278 [ 50.726305][ T5158] do_new_mount+0x228/0x804 [ 50.727185][ T5158] path_mount+0x5ac/0xe6c [ 50.728097][ T5158] __arm64_sys_mount+0x4a0/0x5a0 [ 50.729118][ T5158] invoke_syscall+0x98/0x290 [ 50.730042][ T5158] el0_svc_common+0x13c/0x258 [ 50.730968][ T5158] do_el0_svc+0x5c/0x134 [ 50.731804][ T5158] el0_svc+0x58/0x12c [ 50.732578][ T5158] el0t_64_sync_handler+0x84/0xf0 [ 50.733543][ T5158] el0t_64_sync+0x18c/0x190 [ 50.820955][ T5166] netlink: 60 bytes leftover after parsing attributes in process `syz.4.270'. [ 50.822706][ T5166] netlink: 60 bytes leftover after parsing attributes in process `syz.4.270'. [ 50.825011][ T5166] netlink: 60 bytes leftover after parsing attributes in process `syz.4.270'. [ 50.844390][ T5168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.846286][ T5168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.934242][ T4341] Bluetooth: hci1: unexpected event for opcode 0x203d [ 50.949263][ T5174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.274'. [ 51.147426][ T4338] bridge0: port 3(syz_tun) entered disabled state [ 51.183509][ T4338] device syz_tun left promiscuous mode [ 51.185149][ T4338] bridge0: port 3(syz_tun) entered disabled state [ 51.346867][ T5185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.348597][ T5185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.441745][ T4337] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.443616][ T4337] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.445816][ T4337] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.448065][ T4337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.452549][ T4337] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.454098][ T4337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.718971][ T4385] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.772802][ T4385] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.774813][ T5210] binder: 5209:5210 tried to acquire reference to desc 0, got 1 instead [ 51.777795][ T5210] binder: 5209:5210 got transaction with invalid data ptr [ 51.779165][ T5210] binder: 5209:5210 transaction call to 5209:0 failed 11/29201/-14, size 22-0 line 3582 [ 51.782095][ T3901] binder: undelivered TRANSACTION_ERROR: 29201 [ 51.809848][ T4385] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.864005][ T4385] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.242664][ T5191] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 52.244828][ T5191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 52.246211][ T5191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 52.247678][ T5191] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 52.251045][ T5191] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 52.252379][ T5191] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.255030][ T5191] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 52.264246][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.266225][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.301313][ T5245] FAULT_INJECTION: forcing a failure. [ 52.301313][ T5245] name failslab, interval 1, probability 0, space 0, times 0 [ 52.303813][ T5245] CPU: 0 PID: 5245 Comm: syz.4.293 Not tainted syzkaller #0 [ 52.305173][ T5245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 52.307035][ T5245] Call trace: [ 52.307668][ T5245] dump_backtrace+0x1c4/0x1f0 [ 52.308532][ T5245] show_stack+0x2c/0x3c [ 52.309345][ T5245] __dump_stack+0x30/0x40 [ 52.310193][ T5245] dump_stack_lvl+0xf4/0x15c [ 52.311122][ T5245] dump_stack+0x1c/0x5c [ 52.311939][ T5245] should_fail_ex+0x3cc/0x524 [ 52.312879][ T5245] __should_failslab+0xc0/0x11c [ 52.313821][ T5245] should_failslab+0x10/0x28 [ 52.314748][ T5245] __kmem_cache_alloc_node+0x7c/0x318 [ 52.315791][ T5245] kmalloc_trace+0x48/0x94 [ 52.316662][ T5245] snd_mixer_oss_open+0xec/0x21c [ 52.317643][ T5245] soundcore_open+0x2f8/0x47c [ 52.318571][ T5245] chrdev_open+0x3d0/0x51c [ 52.319440][ T5245] do_dentry_open+0x738/0xf8c [ 52.320366][ T5245] vfs_open+0x7c/0x90 [ 52.321139][ T5245] path_openat+0x1fc0/0x27a0 [ 52.322106][ T5245] do_filp_open+0x198/0x38c [ 52.322942][ T5245] do_sys_openat2+0x134/0x3fc [ 52.323809][ T5245] __arm64_sys_openat+0x11c/0x150 [ 52.324770][ T5245] invoke_syscall+0x98/0x290 [ 52.325701][ T5245] el0_svc_common+0x13c/0x258 [ 52.326658][ T5245] do_el0_svc+0x5c/0x134 [ 52.327500][ T5245] el0_svc+0x58/0x12c [ 52.328237][ T5245] el0t_64_sync_handler+0x84/0xf0 [ 52.329151][ T5245] el0t_64_sync+0x18c/0x190 [ 52.424063][ T5254] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.425923][ T5254] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.427530][ T5254] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.429266][ T5254] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.441874][ T5189] chnl_net:caif_netlink_parms(): no params data found [ 52.536198][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.537791][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.541533][ T5189] device bridge_slave_0 entered promiscuous mode [ 52.556033][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.557851][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.561007][ T5189] device bridge_slave_1 entered promiscuous mode [ 52.573586][ T5189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.576762][ T5189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.587480][ T5189] team0: Port device team_slave_0 added [ 52.602452][ T5189] team0: Port device team_slave_1 added [ 52.623473][ T5248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.625279][ T5248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.842539][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.844001][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.854295][ T5189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.882810][ T5189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.884223][ T5189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.892955][ T5189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.982117][ T5189] device hsr_slave_0 entered promiscuous mode [ 53.020028][ T5189] device hsr_slave_1 entered promiscuous mode [ 53.036824][ T5312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.040271][ T5189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.040625][ T5312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.041744][ T5189] Cannot create hsr debugfs directory [ 53.044575][ T5295] netlink: 'syz.3.304': attribute type 10 has an invalid length. [ 53.123550][ T5318] FAULT_INJECTION: forcing a failure. [ 53.123550][ T5318] name failslab, interval 1, probability 0, space 0, times 0 [ 53.126186][ T5318] CPU: 0 PID: 5318 Comm: syz.3.309 Not tainted syzkaller #0 [ 53.127764][ T5318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 53.129775][ T5318] Call trace: [ 53.130476][ T5318] dump_backtrace+0x1c4/0x1f0 [ 53.131432][ T5318] show_stack+0x2c/0x3c [ 53.132247][ T5318] __dump_stack+0x30/0x40 [ 53.133156][ T5318] dump_stack_lvl+0xf4/0x15c [ 53.134034][ T5318] dump_stack+0x1c/0x5c [ 53.134853][ T5318] should_fail_ex+0x3cc/0x524 [ 53.135743][ T5318] __should_failslab+0xc0/0x11c [ 53.136661][ T5318] should_failslab+0x10/0x28 [ 53.137547][ T5318] kmem_cache_alloc+0x88/0x310 [ 53.138481][ T5318] alloc_vfsmnt+0x34/0x4b4 [ 53.139357][ T5318] vfs_create_mount+0x84/0x4b4 [ 53.140223][ T5318] fc_mount+0x98/0xac [ 53.140943][ T5318] mq_init_ns+0x324/0x4d8 [ 53.141741][ T5318] copy_ipcs+0x274/0x4d4 [ 53.142593][ T5318] create_new_namespaces+0x1b0/0x604 [ 53.143566][ T5318] unshare_nsproxy_namespaces+0x108/0x160 [ 53.144615][ T5318] ksys_unshare+0x3f0/0x70c [ 53.145471][ T5318] __arm64_sys_unshare+0x3c/0x50 [ 53.146393][ T5318] invoke_syscall+0x98/0x290 [ 53.147229][ T5318] el0_svc_common+0x13c/0x258 [ 53.148146][ T5318] do_el0_svc+0x5c/0x134 [ 53.149048][ T5318] el0_svc+0x58/0x12c [ 53.149819][ T5318] el0t_64_sync_handler+0x84/0xf0 [ 53.150859][ T5318] el0t_64_sync+0x18c/0x190 [ 53.178901][ T27] audit: type=1326 audit(53.160:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.1.310" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9379368 code=0x0 [ 53.356173][ T5328] FAULT_INJECTION: forcing a failure. [ 53.356173][ T5328] name failslab, interval 1, probability 0, space 0, times 0 [ 53.359073][ T5328] CPU: 1 PID: 5328 Comm: syz.3.312 Not tainted syzkaller #0 [ 53.360601][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 53.362870][ T5328] Call trace: [ 53.363621][ T5328] dump_backtrace+0x1c4/0x1f0 [ 53.364651][ T5328] show_stack+0x2c/0x3c [ 53.365484][ T5328] __dump_stack+0x30/0x40 [ 53.366364][ T5328] dump_stack_lvl+0xf4/0x15c [ 53.367315][ T5328] dump_stack+0x1c/0x5c [ 53.368163][ T5328] should_fail_ex+0x3cc/0x524 [ 53.369122][ T5328] __should_failslab+0xc0/0x11c [ 53.370080][ T5328] should_failslab+0x10/0x28 [ 53.370933][ T5328] __kmem_cache_alloc_node+0x7c/0x318 [ 53.372010][ T5328] kmalloc_trace+0x48/0x94 [ 53.372893][ T5328] xprt_alloc+0x3d4/0x638 [ 53.373783][ T5328] xs_setup_xprt+0xa0/0x334 [ 53.374684][ T5328] xs_setup_tcp+0x84/0x6bc [ 53.375553][ T5328] xprt_create_transport+0x164/0x698 [ 53.376516][ T5328] rpc_create+0x35c/0x680 [ 53.377384][ T5328] nfs_create_rpc_client+0x3f0/0x5b8 [ 53.378404][ T5328] nfs4_alloc_client+0x60c/0x964 [ 53.379368][ T5328] nfs_get_client+0x898/0xbf4 [ 53.380307][ T5328] nfs4_set_client+0x290/0x424 [ 53.381249][ T5328] nfs4_create_server+0x37c/0xd70 [ 53.382236][ T5328] nfs4_try_get_tree+0x4c/0x114 [ 53.383136][ T5328] nfs_get_tree+0xc9c/0x1024 [ 53.384072][ T5328] vfs_get_tree+0x90/0x278 [ 53.384959][ T5328] do_new_mount+0x228/0x804 [ 53.385857][ T5328] path_mount+0x5ac/0xe6c [ 53.386715][ T5328] __arm64_sys_mount+0x4a0/0x5a0 [ 53.387729][ T5328] invoke_syscall+0x98/0x290 [ 53.388681][ T5328] el0_svc_common+0x13c/0x258 [ 53.389677][ T5328] do_el0_svc+0x5c/0x134 [ 53.390599][ T5328] el0_svc+0x58/0x12c [ 53.391487][ T5328] el0t_64_sync_handler+0x84/0xf0 [ 53.392513][ T5328] el0t_64_sync+0x18c/0x190 [ 53.452893][ T4385] device hsr_slave_0 left promiscuous mode [ 53.473659][ T5335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.475773][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.491435][ T4385] device hsr_slave_1 left promiscuous mode [ 53.529736][ T4341] Bluetooth: hci0: command 0x0c1a tx timeout [ 53.559808][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.569287][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.575329][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.577039][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.578955][ T4385] device bridge_slave_1 left promiscuous mode [ 53.580958][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.635909][ T4337] block nbd0: Receive control failed (result -32) [ 53.639421][ T4385] device bridge_slave_0 left promiscuous mode [ 53.640341][ T5289] block nbd0: shutting down sockets [ 53.640775][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.683535][ T4337] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 53.779996][ T4385] device veth1_macvtap left promiscuous mode [ 53.781477][ T4385] device veth0_macvtap left promiscuous mode [ 53.782684][ T4385] device veth1_vlan left promiscuous mode [ 53.784023][ T4385] device veth0_vlan left promiscuous mode [ 54.001674][ T5351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.005196][ T5351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.203216][ T5355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.205709][ T5355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.249788][ T4337] Bluetooth: hci4: command 0x0405 tx timeout [ 54.249800][ T4341] Bluetooth: hci1: command 0x0c1a tx timeout [ 54.329727][ T4334] Bluetooth: hci3: command 0x041b tx timeout [ 54.531350][ T5357] FAULT_INJECTION: forcing a failure. [ 54.531350][ T5357] name failslab, interval 1, probability 0, space 0, times 0 [ 54.533890][ T5357] CPU: 0 PID: 5357 Comm: syz.3.324 Not tainted syzkaller #0 [ 54.535225][ T5357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 54.537223][ T5357] Call trace: [ 54.537880][ T5357] dump_backtrace+0x1c4/0x1f0 [ 54.538834][ T5357] show_stack+0x2c/0x3c [ 54.539698][ T5357] __dump_stack+0x30/0x40 [ 54.540580][ T5357] dump_stack_lvl+0xf4/0x15c [ 54.541516][ T5357] dump_stack+0x1c/0x5c [ 54.542273][ T5357] should_fail_ex+0x3cc/0x524 [ 54.543113][ T5357] __should_failslab+0xc0/0x11c [ 54.544002][ T5357] should_failslab+0x10/0x28 [ 54.544873][ T5357] __kmem_cache_alloc_node+0x7c/0x318 [ 54.545864][ T5357] kmalloc_trace+0x48/0x94 [ 54.546692][ T5357] sctp_add_bind_addr+0x9c/0x2e8 [ 54.547662][ T5357] sctp_do_bind+0x4f0/0x828 [ 54.548534][ T5357] sctp_connect_new_asoc+0x218/0x5f4 [ 54.549465][ T5357] __sctp_connect+0x4bc/0xb54 [ 54.550334][ T5357] sctp_setsockopt_connectx_old+0xf0/0x168 [ 54.551420][ T5357] sctp_setsockopt+0x8e4/0x1000 [ 54.552286][ T5357] sock_common_setsockopt+0xb0/0xcc [ 54.553272][ T5357] __sys_setsockopt+0x2fc/0x50c [ 54.554150][ T5357] __arm64_sys_setsockopt+0xc0/0xdc [ 54.555132][ T5357] invoke_syscall+0x98/0x290 [ 54.555967][ T5357] el0_svc_common+0x13c/0x258 [ 54.556855][ T5357] do_el0_svc+0x5c/0x134 [ 54.557685][ T5357] el0_svc+0x58/0x12c [ 54.558422][ T5357] el0t_64_sync_handler+0x84/0xf0 [ 54.559351][ T5357] el0t_64_sync+0x18c/0x190 [ 54.747810][ T5372] FAULT_INJECTION: forcing a failure. [ 54.747810][ T5372] name failslab, interval 1, probability 0, space 0, times 0 [ 54.750875][ T5372] CPU: 0 PID: 5372 Comm: syz.0.330 Not tainted syzkaller #0 [ 54.752421][ T5372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 54.754392][ T5372] Call trace: [ 54.755049][ T5372] dump_backtrace+0x1c4/0x1f0 [ 54.755947][ T5372] show_stack+0x2c/0x3c [ 54.756777][ T5372] __dump_stack+0x30/0x40 [ 54.757636][ T5372] dump_stack_lvl+0xf4/0x15c [ 54.758537][ T5372] dump_stack+0x1c/0x5c [ 54.759334][ T5372] should_fail_ex+0x3cc/0x524 [ 54.760257][ T5372] __should_failslab+0xc0/0x11c [ 54.761217][ T5372] should_failslab+0x10/0x28 [ 54.762116][ T5372] slab_pre_alloc_hook+0x6c/0x31c [ 54.763105][ T5372] kmem_cache_alloc_lru+0x60/0x284 [ 54.764129][ T5372] proc_alloc_inode+0x2c/0xb8 [ 54.765091][ T5372] new_inode_pseudo+0x68/0x1cc [ 54.766024][ T5372] new_inode+0x38/0x174 [ 54.766872][ T5372] proc_get_inode+0x30/0x624 [ 54.767811][ T5372] proc_lookup_de+0x23c/0x2e8 [ 54.768774][ T5372] proc_tgid_net_lookup+0x60/0x11c [ 54.769835][ T5372] path_openat+0xc74/0x27a0 [ 54.770775][ T5372] do_filp_open+0x198/0x38c [ 54.771660][ T5372] do_sys_openat2+0x134/0x3fc [ 54.772598][ T5372] __arm64_sys_openat+0x11c/0x150 [ 54.773598][ T5372] invoke_syscall+0x98/0x290 [ 54.774546][ T5372] el0_svc_common+0x13c/0x258 [ 54.775426][ T5372] do_el0_svc+0x5c/0x134 [ 54.776284][ T5372] el0_svc+0x58/0x12c [ 54.777061][ T5372] el0t_64_sync_handler+0x84/0xf0 [ 54.778062][ T5372] el0t_64_sync+0x18c/0x190 [ 54.805504][ T5374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.807586][ T5374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.877463][ T5376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.879353][ T5376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.296324][ T5386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.298240][ T5386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.403700][ T4334] Bluetooth: hci1: unexpected subevent 0x06 length: 30 > 10 [ 55.406018][ T5390] 9pnet_fd: Insufficient options for proto=fd [ 55.822142][ T5392] binder: 5391:5392 ioctl c0306201 20000080 returned -14 [ 55.824249][ T5392] binder: 5391:5392 ioctl c0306201 200003c0 returned -14 [ 55.845019][ T5394] FAULT_INJECTION: forcing a failure. [ 55.845019][ T5394] name fail_futex, interval 1, probability 0, space 0, times 1 [ 55.847611][ T5394] CPU: 0 PID: 5394 Comm: syz.3.341 Not tainted syzkaller #0 [ 55.849098][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 55.851169][ T5394] Call trace: [ 55.851851][ T5394] dump_backtrace+0x1c4/0x1f0 [ 55.852859][ T5394] show_stack+0x2c/0x3c [ 55.853703][ T5394] __dump_stack+0x30/0x40 [ 55.854513][ T5394] dump_stack_lvl+0xf4/0x15c [ 55.855418][ T5394] dump_stack+0x1c/0x5c [ 55.856247][ T5394] should_fail_ex+0x3cc/0x524 [ 55.857233][ T5394] should_fail+0x14/0x24 [ 55.858207][ T5394] get_futex_key+0x904/0xfb0 [ 55.859190][ T5394] futex_wake+0x10c/0x458 [ 55.860013][ T5394] do_futex+0x2c4/0x340 [ 55.860827][ T5394] mm_release+0x190/0x274 [ 55.861656][ T5394] exit_mm_release+0x30/0x40 [ 55.862575][ T5394] exit_mm+0x50/0x290 [ 55.863427][ T5394] do_exit+0x4d0/0x19ac [ 55.864298][ T5394] do_group_exit+0x198/0x238 [ 55.865236][ T5394] get_signal+0x11f4/0x133c [ 55.866133][ T5394] do_notify_resume+0x364/0x2c84 [ 55.867107][ T5394] el0_svc+0x9c/0x12c [ 55.867905][ T5394] el0t_64_sync_handler+0x84/0xf0 [ 55.868872][ T5394] el0t_64_sync+0x18c/0x190 [ 55.942066][ T4385] team0 (unregistering): Port device team_slave_1 removed [ 56.004553][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.006133][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.122018][ T4385] team0 (unregistering): Port device team_slave_0 removed [ 56.281332][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.329770][ T4337] Bluetooth: hci4: command 0x0c1a tx timeout [ 56.419650][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 56.480625][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.796072][ T5404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.797938][ T5404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.394372][ T5412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.396255][ T5412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.449854][ T4337] Bluetooth: hci1: command 0x2021 tx timeout [ 57.901292][ T4385] bond0 (unregistering): Released all slaves [ 58.177681][ T5189] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.216666][ T5189] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.237537][ T5429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.243245][ T5429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.251306][ T5189] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.274701][ T5189] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.349003][ T5189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.358335][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.360450][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.363728][ T5189] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.367635][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.376191][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.378483][ T105] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.380030][ T105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.393644][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.395579][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.397499][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.399443][ T105] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.401094][ T105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.403969][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.406028][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.408301][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.414547][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.416722][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.418717][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.425988][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.428088][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.433001][ T5189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.435590][ T5189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.444312][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.446568][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.446978][ T5429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.448263][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.459544][ T5429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.489784][ T4334] Bluetooth: hci3: command 0x0419 tx timeout [ 58.523213][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.524871][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.529458][ T5189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.632895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.634886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.647350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.649443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.652841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.654732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.658698][ T5189] device veth0_vlan entered promiscuous mode [ 58.667186][ T5189] device veth1_vlan entered promiscuous mode [ 58.685063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.687471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.689278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.694610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.701679][ T5189] device veth0_macvtap entered promiscuous mode [ 58.710484][ T5189] device veth1_macvtap entered promiscuous mode [ 58.720750][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.724638][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.726932][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.728961][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.732921][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.735585][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.737838][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.741826][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.747792][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.750105][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.751921][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.753867][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.757095][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.762377][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.764894][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.766975][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.769214][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.772570][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.774701][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.776747][ T5189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.779788][ T5189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.783770][ T5189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.785372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.787931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.842339][ T5189] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.844387][ T5189] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.846570][ T5189] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.848264][ T5189] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.902275][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.903852][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.905953][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.912384][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.913908][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.915524][ T105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.997165][ T4337] Bluetooth: hci0: adv larger than maximum supported [ 58.997206][ T4337] Bluetooth: hci0: Malformed LE Event: 0x0d [ 59.084735][ T4334] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 59.542844][ T5527] process 'syz.5.361' launched './file0' with NULL argv: empty string added [ 59.594758][ T5532] FAULT_INJECTION: forcing a failure. [ 59.594758][ T5532] name fail_futex, interval 1, probability 0, space 0, times 0 [ 59.597945][ T5532] CPU: 0 PID: 5532 Comm: syz.3.363 Not tainted syzkaller #0 [ 59.599434][ T5532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 59.601468][ T5532] Call trace: [ 59.602146][ T5532] dump_backtrace+0x1c4/0x1f0 [ 59.603100][ T5532] show_stack+0x2c/0x3c [ 59.603924][ T5532] __dump_stack+0x30/0x40 [ 59.604854][ T5532] dump_stack_lvl+0xf4/0x15c [ 59.605815][ T5532] dump_stack+0x1c/0x5c [ 59.606716][ T5532] should_fail_ex+0x3cc/0x524 [ 59.607655][ T5532] should_fail+0x14/0x24 [ 59.608520][ T5532] get_futex_key+0x904/0xfb0 [ 59.609407][ T5532] futex_wake+0x10c/0x458 [ 59.610230][ T5532] do_futex+0x2c4/0x340 [ 59.611020][ T5532] __arm64_sys_futex+0x390/0x414 [ 59.611943][ T5532] invoke_syscall+0x98/0x290 [ 59.612848][ T5532] el0_svc_common+0x13c/0x258 [ 59.613764][ T5532] do_el0_svc+0x5c/0x134 [ 59.614579][ T5532] el0_svc+0x58/0x12c [ 59.615328][ T5532] el0t_64_sync_handler+0x84/0xf0 [ 59.616280][ T5532] el0t_64_sync+0x18c/0x190 [ 59.632374][ T5534] IPVS: ip_vs_add_dest(): tunnel port is zero [ 59.693344][ T5544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.697377][ T5544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.697463][ T5542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.708304][ T5542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.728364][ T5550] xt_nfacct: accounting object `' does not exist [ 59.784675][ T5553] FAULT_INJECTION: forcing a failure. [ 59.784675][ T5553] name failslab, interval 1, probability 0, space 0, times 0 [ 59.787197][ T5553] CPU: 1 PID: 5553 Comm: syz.4.372 Not tainted syzkaller #0 [ 59.788767][ T5553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 59.790913][ T5553] Call trace: [ 59.791621][ T5553] dump_backtrace+0x1c4/0x1f0 [ 59.792626][ T5553] show_stack+0x2c/0x3c [ 59.793519][ T5553] __dump_stack+0x30/0x40 [ 59.794453][ T5553] dump_stack_lvl+0xf4/0x15c [ 59.795426][ T5553] dump_stack+0x1c/0x5c [ 59.796327][ T5553] should_fail_ex+0x3cc/0x524 [ 59.797364][ T5553] __should_failslab+0xc0/0x11c [ 59.798403][ T5553] should_failslab+0x10/0x28 [ 59.799314][ T5553] kmem_cache_alloc+0x88/0x310 [ 59.800343][ T5553] security_file_alloc+0x38/0x11c [ 59.801331][ T5553] __alloc_file+0xac/0x234 [ 59.802231][ T5553] alloc_empty_file+0xa0/0x184 [ 59.803280][ T5553] alloc_file+0x64/0x564 [ 59.804141][ T5553] alloc_file_pseudo+0x16c/0x1f4 [ 59.805187][ T5553] anon_inode_getfile+0xc4/0x16c [ 59.806208][ T5553] __pidfd_prepare+0xac/0x188 [ 59.807194][ T5553] pidfd_prepare+0x64/0x8c [ 59.808117][ T5553] __arm64_sys_pidfd_open+0xf0/0x288 [ 59.809222][ T5553] invoke_syscall+0x98/0x290 [ 59.810204][ T5553] el0_svc_common+0x13c/0x258 [ 59.811211][ T5553] do_el0_svc+0x5c/0x134 [ 59.812140][ T5553] el0_svc+0x58/0x12c [ 59.813029][ T5553] el0t_64_sync_handler+0x84/0xf0 [ 59.814137][ T5553] el0t_64_sync+0x18c/0x190 [ 60.244577][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.247245][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.351572][ T5571] ieee802154 phy0 wpan0: encryption failed: -22 [ 60.569993][ T4334] Bluetooth: hci3: command 0x0c1a tx timeout [ 60.611670][ T5586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.614571][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.622163][ T5588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.623825][ T5588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.773979][ T4337] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 60.801571][ T5592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.803413][ T5592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.974744][ T5415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.003247][ T5597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.005290][ T5597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.246362][ T27] audit: type=1326 audit(61.230:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5600 comm="syz.5.393" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffae179368 code=0x0 [ 61.331901][ T5609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.334424][ T5609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.362411][ T5607] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 61.728968][ T5634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.731682][ T5634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.877752][ T5640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.880225][ T5640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.260997][ T5644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.262937][ T5644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.511223][ T5656] FAULT_INJECTION: forcing a failure. [ 62.511223][ T5656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 62.513959][ T5656] CPU: 1 PID: 5656 Comm: syz.0.414 Not tainted syzkaller #0 [ 62.515385][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 62.517412][ T5656] Call trace: [ 62.518098][ T5656] dump_backtrace+0x1c4/0x1f0 [ 62.519040][ T5656] show_stack+0x2c/0x3c [ 62.519822][ T5656] __dump_stack+0x30/0x40 [ 62.520643][ T5656] dump_stack_lvl+0xf4/0x15c [ 62.521525][ T5656] dump_stack+0x1c/0x5c [ 62.522317][ T5656] should_fail_ex+0x3cc/0x524 [ 62.523248][ T5656] should_fail_alloc_page+0x74/0xb8 [ 62.524285][ T5656] prepare_alloc_pages+0x1b8/0x4f0 [ 62.525327][ T5656] __alloc_pages+0x134/0x544 [ 62.526279][ T5656] alloc_pages+0x434/0x6fc [ 62.527168][ T5656] get_zeroed_page+0x20/0x8c [ 62.528066][ T5656] __pud_alloc+0x48/0x1b8 [ 62.528922][ T5656] copy_page_range+0x2448/0x29b4 [ 62.529941][ T5656] copy_mm+0xb08/0x1208 [ 62.530775][ T5656] copy_process+0x16d8/0x38b4 [ 62.531681][ T5656] kernel_clone+0x1ec/0x938 [ 62.532581][ T5656] __arm64_sys_clone+0x15c/0x1c8 [ 62.533544][ T5656] invoke_syscall+0x98/0x290 [ 62.534401][ T5656] el0_svc_common+0x13c/0x258 [ 62.535361][ T5656] do_el0_svc+0x5c/0x134 [ 62.536188][ T5656] el0_svc+0x58/0x12c [ 62.536980][ T5656] el0t_64_sync_handler+0x84/0xf0 [ 62.537949][ T5656] el0t_64_sync+0x18c/0x190 [ 62.572873][ T4337] Bluetooth: hci4: unexpected event for opcode 0x041c [ 62.577084][ T5665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.585846][ T5665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.659728][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 62.833671][ T5686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.835885][ T5686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.144921][ T5697] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.6225946.0), cmd(2) [ 63.189317][ T5703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.194433][ T5703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.275671][ T5712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.277683][ T5712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.398210][ T5703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.400762][ T5703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.403231][ T27] audit: type=1326 audit(63.390:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5702 comm="syz.3.430" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff98979368 code=0x0 [ 63.424571][ T5722] device syzkaller1 entered promiscuous mode [ 63.659741][ T5756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.661453][ T5756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.846499][ T5777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.848381][ T5777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.123851][ T5798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.125775][ T5798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.183248][ T5800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.185378][ T5800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.491877][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493176][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.729907][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 64.736517][ T5828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.739364][ T5828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.242625][ T5858] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.244575][ T5858] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.246468][ T5858] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.248279][ T5858] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 66.318907][ T5864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.321060][ T5864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.819783][ T4337] Bluetooth: hci3: command 0x0405 tx timeout [ 66.999504][ T5888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.001702][ T5888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.555439][ T5894] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 67.556987][ T5894] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 67.559941][ T5894] vhci_hcd vhci_hcd.0: Device attached [ 67.564113][ T5894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.565998][ T5894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.568016][ T5895] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 67.572645][ T9] vhci_hcd: stop threads [ 67.574033][ T9] vhci_hcd: release socket [ 67.574996][ T9] vhci_hcd: disconnect device [ 67.655458][ T4334] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 67.737462][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.741502][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.751059][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.754753][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.759263][ T5906] lo speed is unknown, defaulting to 1000 [ 67.764431][ T5906] lo speed is unknown, defaulting to 1000 [ 67.766561][ T5906] lo speed is unknown, defaulting to 1000 [ 67.790883][ T1518] lo speed is unknown, defaulting to 1000 [ 67.792706][ T5906] infiniband sz1: set active [ 67.793767][ T5906] infiniband sz1: added lo [ 67.809544][ T5906] FAULT_INJECTION: forcing a failure. [ 67.809544][ T5906] name failslab, interval 1, probability 0, space 0, times 0 [ 67.812314][ T5906] CPU: 0 PID: 5906 Comm: syz.5.501 Not tainted syzkaller #0 [ 67.813840][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 67.816031][ T5906] Call trace: [ 67.816768][ T5906] dump_backtrace+0x1c4/0x1f0 [ 67.817766][ T5906] show_stack+0x2c/0x3c [ 67.818647][ T5906] __dump_stack+0x30/0x40 [ 67.819597][ T5906] dump_stack_lvl+0xf4/0x15c [ 67.820572][ T5906] dump_stack+0x1c/0x5c [ 67.821449][ T5906] should_fail_ex+0x3cc/0x524 [ 67.822390][ T5906] __should_failslab+0xc0/0x11c [ 67.823379][ T5906] should_failslab+0x10/0x28 [ 67.824315][ T5906] kmem_cache_alloc+0x88/0x310 [ 67.825374][ T5906] radix_tree_node_alloc+0xa0/0x348 [ 67.826504][ T5906] radix_tree_insert+0x1ac/0x58c [ 67.827606][ T5906] uapi_merge_def+0xb68/0x1440 [ 67.828514][ T5906] uapi_merge_def+0x234/0x1440 [ 67.829427][ T5906] uverbs_alloc_api+0x16c/0x15a4 [ 67.830370][ T5906] ib_uverbs_add_one+0x348/0x600 [ 67.831336][ T5906] add_client_context+0x3fc/0x720 [ 67.832312][ T5906] enable_device_and_get+0x17c/0x3b0 [ 67.833287][ T5906] ib_register_device+0xdcc/0x1030 [ 67.834215][ T5906] rxe_register_device+0x210/0x34c [ 67.835257][ T5906] rxe_add+0x938/0xe48 [ 67.836047][ T5906] rxe_net_add+0x7c/0xf0 [ 67.836826][ T5906] rxe_newlink+0x70/0xfc [ 67.837688][ T5906] nldev_newlink+0x430/0x50c [ 67.838643][ T5906] rdma_nl_rcv+0x4fc/0x828 [ 67.839514][ T5906] netlink_unicast+0x5fc/0x80c [ 67.840434][ T5906] netlink_sendmsg+0x6f0/0x9d8 [ 67.841377][ T5906] ____sys_sendmsg+0x588/0x90c [ 67.842263][ T5906] __sys_sendmsg+0x288/0x374 [ 67.843179][ T5906] __arm64_sys_sendmsg+0x80/0x94 [ 67.844136][ T5906] invoke_syscall+0x98/0x290 [ 67.844949][ T5906] el0_svc_common+0x13c/0x258 [ 67.845856][ T5906] do_el0_svc+0x5c/0x134 [ 67.846669][ T5906] el0_svc+0x58/0x12c [ 67.847416][ T5906] el0t_64_sync_handler+0x84/0xf0 [ 67.848372][ T5906] el0t_64_sync+0x18c/0x190 [ 67.853633][ T5906] RDS/IB: sz1: added [ 67.854805][ T5906] smc: adding ib device sz1 with port count 1 [ 67.856420][ T5906] smc: ib device sz1 port 1 has pnetid [ 67.862068][ T1518] lo speed is unknown, defaulting to 1000 [ 67.863798][ T5906] lo speed is unknown, defaulting to 1000 [ 67.887323][ T5906] lo speed is unknown, defaulting to 1000 [ 67.888223][ T5919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.893547][ T5919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.912901][ T5906] lo speed is unknown, defaulting to 1000 [ 67.935368][ T5906] lo speed is unknown, defaulting to 1000 [ 67.956330][ T5906] lo speed is unknown, defaulting to 1000 [ 68.090245][ T5921] capability: warning: `syz.1.507' uses deprecated v2 capabilities in a way that may be insecure [ 68.095104][ T5921] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 68.097040][ T5921] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 68.247722][ T5932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.250123][ T5932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.797686][ T4334] Bluetooth: hci4: unexpected event for opcode 0x2031 [ 69.045997][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.319096][ T5983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.321505][ T5983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.500814][ T5994] FAULT_INJECTION: forcing a failure. [ 69.500814][ T5994] name failslab, interval 1, probability 0, space 0, times 0 [ 69.503611][ T5994] CPU: 0 PID: 5994 Comm: syz.5.522 Not tainted syzkaller #0 [ 69.505229][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 69.507457][ T5994] Call trace: [ 69.508139][ T5994] dump_backtrace+0x1c4/0x1f0 [ 69.509119][ T5994] show_stack+0x2c/0x3c [ 69.509980][ T5994] __dump_stack+0x30/0x40 [ 69.510862][ T5994] dump_stack_lvl+0xf4/0x15c [ 69.511766][ T5994] dump_stack+0x1c/0x5c [ 69.512543][ T5994] should_fail_ex+0x3cc/0x524 [ 69.513405][ T5994] __should_failslab+0xc0/0x11c [ 69.514365][ T5994] should_failslab+0x10/0x28 [ 69.515304][ T5994] __kmem_cache_alloc_node+0x7c/0x318 [ 69.516411][ T5994] __kmalloc+0xc4/0x180 [ 69.517266][ T5994] security_sk_alloc+0x54/0x140 [ 69.518223][ T5994] sk_prot_alloc+0xe0/0x1e8 [ 69.519092][ T5994] sk_alloc+0x44/0x3a0 [ 69.519871][ T5994] alg_create+0xc4/0x144 [ 69.520677][ T5994] __sock_create+0x448/0x8a8 [ 69.521545][ T5994] __sys_socket+0xc0/0x1b0 [ 69.522399][ T5994] __arm64_sys_socket+0x7c/0x94 [ 69.523307][ T5994] invoke_syscall+0x98/0x290 [ 69.524170][ T5994] el0_svc_common+0x13c/0x258 [ 69.525103][ T5994] do_el0_svc+0x5c/0x134 [ 69.525927][ T5994] el0_svc+0x58/0x12c [ 69.526726][ T5994] el0t_64_sync_handler+0x84/0xf0 [ 69.527708][ T5994] el0t_64_sync+0x18c/0x190 [ 69.553696][ T5998] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 69.593226][ T6005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.595325][ T6005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.611597][ T24] cfg80211: failed to load regulatory.db [ 69.651338][ T6008] lo speed is unknown, defaulting to 1000 [ 69.970568][ T6028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.975097][ T6028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.124407][ T6042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.127790][ T6042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.511218][ T6073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.513446][ T6073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.648274][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.652248][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.708104][ T6081] device syzkaller1 entered promiscuous mode [ 71.154499][ T6115] overlayfs: failed to clone upperpath [ 71.157820][ T6115] overlayfs: failed to clone upperpath [ 71.217864][ T6121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.543'. [ 71.226670][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.231707][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.810752][ T4334] Bluetooth: hci0: Unknown advertising packet type: 0xff00 [ 71.907152][ C0] Unknown status report in ack skb [ 72.004363][ T6154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.007612][ T6154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.022075][ T6157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.023975][ T6157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.609013][ T6178] FAULT_INJECTION: forcing a failure. [ 72.609013][ T6178] name failslab, interval 1, probability 0, space 0, times 0 [ 72.612437][ T6178] CPU: 0 PID: 6178 Comm: syz.1.567 Not tainted syzkaller #0 [ 72.614074][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 72.616478][ T6178] Call trace: [ 72.617184][ T6178] dump_backtrace+0x1c4/0x1f0 [ 72.618312][ T6178] show_stack+0x2c/0x3c [ 72.619284][ T6178] __dump_stack+0x30/0x40 [ 72.620326][ T6178] dump_stack_lvl+0xf4/0x15c [ 72.621327][ T6178] dump_stack+0x1c/0x5c [ 72.622232][ T6178] should_fail_ex+0x3cc/0x524 [ 72.623208][ T6178] __should_failslab+0xc0/0x11c [ 72.624152][ T6178] should_failslab+0x10/0x28 [ 72.625041][ T6178] kmem_cache_alloc+0x88/0x310 [ 72.626087][ T6178] ep_insert+0x508/0x13ec [ 72.627009][ T6178] do_epoll_ctl+0x6dc/0xc60 [ 72.628014][ T6178] __arm64_sys_epoll_ctl+0x204/0x294 [ 72.629142][ T6178] invoke_syscall+0x98/0x290 [ 72.630077][ T6178] el0_svc_common+0x13c/0x258 [ 72.631081][ T6178] do_el0_svc+0x5c/0x134 [ 72.631973][ T6178] el0_svc+0x58/0x12c [ 72.632814][ T6178] el0t_64_sync_handler+0x84/0xf0 [ 72.633762][ T6178] el0t_64_sync+0x18c/0x190 [ 72.765455][ T6185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.767421][ T6185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.099657][ C0] net_ratelimit: 97 callbacks suppressed [ 74.605924][ T6225] netlink: 'syz.4.588': attribute type 39 has an invalid length. [ 74.608687][ T6225] device veth0_macvtap left promiscuous mode [ 74.729731][ T4337] Bluetooth: hci1: command 0x2016 tx timeout [ 74.769120][ T27] audit: type=1326 audit(74.750:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.593" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b79368 code=0x7ffc0000 [ 74.776499][ T27] audit: type=1326 audit(74.750:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.593" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b79368 code=0x7ffc0000 [ 74.781508][ T27] audit: type=1326 audit(74.760:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.593" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb6b79368 code=0x7ffc0000 [ 74.786664][ T27] audit: type=1326 audit(74.760:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.593" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b79368 code=0x7ffc0000 [ 74.793483][ T27] audit: type=1326 audit(74.760:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.593" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b79368 code=0x7ffc0000 [ 74.797878][ T27] audit: type=1326 audit(74.760:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.593" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffffb6b79368 code=0x7ffc0000 [ 74.803142][ T27] audit: type=1326 audit(74.760:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.593" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b79368 code=0x7ffc0000 [ 74.808313][ T27] audit: type=1326 audit(74.760:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.593" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b79368 code=0x7ffc0000 [ 74.815975][ T27] audit: type=1326 audit(74.760:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.593" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffffb6b79368 code=0x7ffc0000 [ 74.821469][ T27] audit: type=1326 audit(74.770:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.4.593" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6b79368 code=0x7ffc0000 [ 74.899693][ T6185] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 74.901203][ T4334] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.769703][ T6185] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.771009][ T6185] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.775777][ T6185] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.777556][ T6185] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 75.779075][ T6185] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.781822][ T6185] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 75.813762][ T6250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.817649][ T6250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.862183][ T6256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.864128][ T6256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.396780][ T6271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.398774][ T6271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.444567][ T6276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.447745][ T6276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.672790][ T6280] jffs2: notice: (6280) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 76.705409][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.708139][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.969702][ T4337] Bluetooth: hci1: command 0x0c1a tx timeout [ 77.212596][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'. [ 77.263065][ T6312] FAULT_INJECTION: forcing a failure. [ 77.263065][ T6312] name failslab, interval 1, probability 0, space 0, times 0 [ 77.265996][ T6312] CPU: 0 PID: 6312 Comm: syz.3.628 Not tainted syzkaller #0 [ 77.267491][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 77.267517][ T6312] Call trace: [ 77.267521][ T6312] dump_backtrace+0x1c4/0x1f0 [ 77.271304][ T6312] show_stack+0x2c/0x3c [ 77.272118][ T6312] __dump_stack+0x30/0x40 [ 77.272963][ T6312] dump_stack_lvl+0xf4/0x15c [ 77.273902][ T6312] dump_stack+0x1c/0x5c [ 77.274743][ T6312] should_fail_ex+0x3cc/0x524 [ 77.275755][ T6312] __should_failslab+0xc0/0x11c [ 77.275974][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.276756][ T6312] should_failslab+0x10/0x28 [ 77.279314][ T6312] __kmem_cache_alloc_node+0x7c/0x318 [ 77.279336][ T6312] kmalloc_node_trace+0x44/0x90 [ 77.280459][ T6312] blkg_alloc+0xd8/0x6d4 [ 77.280478][ T6312] blkcg_init_disk+0x1d0/0x480 [ 77.280489][ T6312] __alloc_disk_node+0x234/0x438 [ 77.280499][ T6312] __blk_alloc_disk+0x40/0xb8 [ 77.280508][ T6312] dm_create+0x514/0xf48 [ 77.280515][ T6312] dev_create+0xf4/0x25c [ 77.280521][ T6312] dm_ctl_ioctl+0xaac/0xf1c [ 77.280526][ T6312] __arm64_sys_ioctl+0x14c/0x1c8 [ 77.280533][ T6312] invoke_syscall+0x98/0x290 [ 77.280540][ T6312] el0_svc_common+0x13c/0x258 [ 77.280546][ T6312] do_el0_svc+0x5c/0x134 [ 77.280553][ T6312] el0_svc+0x58/0x12c [ 77.282369][ T6312] el0t_64_sync_handler+0x84/0xf0 [ 77.284441][ T6312] el0t_64_sync+0x18c/0x190 [ 77.296219][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.387751][ T4334] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 77.483148][ T6345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.485151][ T6345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.849660][ T4334] Bluetooth: hci3: command 0x0c1a tx timeout [ 77.851126][ T4334] Bluetooth: hci2: command 0x0c1a tx timeout [ 77.913200][ T6370] FAULT_INJECTION: forcing a failure. [ 77.913200][ T6370] name failslab, interval 1, probability 0, space 0, times 0 [ 77.915921][ T6370] CPU: 0 PID: 6370 Comm: syz.3.638 Not tainted syzkaller #0 [ 77.917429][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 77.919486][ T6370] Call trace: [ 77.920154][ T6370] dump_backtrace+0x1c4/0x1f0 [ 77.921016][ T6370] show_stack+0x2c/0x3c [ 77.921848][ T6370] __dump_stack+0x30/0x40 [ 77.922614][ T6370] dump_stack_lvl+0xf4/0x15c [ 77.923464][ T6370] dump_stack+0x1c/0x5c [ 77.924252][ T6370] should_fail_ex+0x3cc/0x524 [ 77.925121][ T6370] __should_failslab+0xc0/0x11c [ 77.926089][ T6370] should_failslab+0x10/0x28 [ 77.927004][ T6370] __kmem_cache_alloc_node+0x7c/0x318 [ 77.928057][ T6370] kmalloc_trace+0x48/0x94 [ 77.928940][ T6370] sctp_add_bind_addr+0x9c/0x2e8 [ 77.929932][ T6370] sctp_copy_local_addr_list+0x2d4/0x474 [ 77.931080][ T6370] sctp_copy_one_addr+0xb0/0x33c [ 77.931982][ T6370] sctp_bind_addr_copy+0xa8/0x39c [ 77.932989][ T6370] sctp_assoc_set_bind_addr_from_ep+0x128/0x184 [ 77.934153][ T6370] sctp_connect_new_asoc+0x28c/0x5f4 [ 77.935185][ T6370] __sctp_connect+0x4bc/0xb54 [ 77.936104][ T6370] sctp_setsockopt_connectx_old+0xf0/0x168 [ 77.937263][ T6370] sctp_setsockopt+0x8e4/0x1000 [ 77.938205][ T6370] sock_common_setsockopt+0xb0/0xcc [ 77.939256][ T6370] __sys_setsockopt+0x2fc/0x50c [ 77.940197][ T6370] __arm64_sys_setsockopt+0xc0/0xdc [ 77.941217][ T6370] invoke_syscall+0x98/0x290 [ 77.942149][ T6370] el0_svc_common+0x13c/0x258 [ 77.943036][ T6370] do_el0_svc+0x5c/0x134 [ 77.943895][ T6370] el0_svc+0x58/0x12c [ 77.944683][ T6370] el0t_64_sync_handler+0x84/0xf0 [ 77.945600][ T6370] el0t_64_sync+0x18c/0x190 [ 77.974048][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.976063][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.584348][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.586308][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.723730][ T6390] FAULT_INJECTION: forcing a failure. [ 78.723730][ T6390] name failslab, interval 1, probability 0, space 0, times 0 [ 78.726242][ T6390] CPU: 0 PID: 6390 Comm: syz.1.646 Not tainted syzkaller #0 [ 78.727537][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 78.729431][ T6390] Call trace: [ 78.730054][ T6390] dump_backtrace+0x1c4/0x1f0 [ 78.730997][ T6390] show_stack+0x2c/0x3c [ 78.731840][ T6390] __dump_stack+0x30/0x40 [ 78.732682][ T6390] dump_stack_lvl+0xf4/0x15c [ 78.733591][ T6390] dump_stack+0x1c/0x5c [ 78.734327][ T6390] should_fail_ex+0x3cc/0x524 [ 78.735245][ T6390] __should_failslab+0xc0/0x11c [ 78.736139][ T6390] should_failslab+0x10/0x28 [ 78.737057][ T6390] __kmem_cache_alloc_node+0x7c/0x318 [ 78.738183][ T6390] kmalloc_trace+0x48/0x94 [ 78.739089][ T6390] proc_fill_super+0x84/0x6ac [ 78.740000][ T6390] get_tree_nodev+0xb4/0x16c [ 78.740907][ T6390] proc_get_tree+0x28/0x38 [ 78.741801][ T6390] vfs_get_tree+0x90/0x278 [ 78.742688][ T6390] vfs_fsconfig_locked+0x1e0/0x374 [ 78.743723][ T6390] __arm64_sys_fsconfig+0x640/0x790 [ 78.744758][ T6390] invoke_syscall+0x98/0x290 [ 78.745585][ T6390] el0_svc_common+0x13c/0x258 [ 78.746469][ T6390] do_el0_svc+0x5c/0x134 [ 78.747263][ T6390] el0_svc+0x58/0x12c [ 78.748082][ T6390] el0t_64_sync_handler+0x84/0xf0 [ 78.749055][ T6390] el0t_64_sync+0x18c/0x190 [ 78.853054][ T4337] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 78.978788][ T6412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.981339][ T6412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.049701][ T4337] Bluetooth: hci1: command 0x0406 tx timeout [ 79.210934][ T6134] net_ratelimit: 61 callbacks suppressed [ 79.333650][ T4337] Bluetooth: hci4: unexpected event for opcode 0x0406 [ 79.505388][ T6431] device-mapper: table: 248:0: multipath: invalid number of priority groups (-EINVAL) [ 79.507279][ T6431] device-mapper: ioctl: error adding target to table [ 79.798392][ T6445] FAULT_INJECTION: forcing a failure. [ 79.798392][ T6445] name failslab, interval 1, probability 0, space 0, times 0 [ 79.801012][ T6445] CPU: 1 PID: 6445 Comm: syz.1.669 Not tainted syzkaller #0 [ 79.802306][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 79.804134][ T6445] Call trace: [ 79.804758][ T6445] dump_backtrace+0x1c4/0x1f0 [ 79.805671][ T6445] show_stack+0x2c/0x3c [ 79.806415][ T6445] __dump_stack+0x30/0x40 [ 79.807249][ T6445] dump_stack_lvl+0xf4/0x15c [ 79.808129][ T6445] dump_stack+0x1c/0x5c [ 79.808922][ T6445] should_fail_ex+0x3cc/0x524 [ 79.809809][ T6445] __should_failslab+0xc0/0x11c [ 79.810748][ T6445] should_failslab+0x10/0x28 [ 79.811665][ T6445] kmem_cache_alloc+0x88/0x310 [ 79.812578][ T6445] posix_lock_inode+0x1c4/0x3458 [ 79.813545][ T6445] fcntl_setlk+0xac4/0x11a0 [ 79.814431][ T6445] do_fcntl+0x77c/0x15f0 [ 79.815317][ T6445] __arm64_sys_fcntl+0x110/0x1e4 [ 79.816341][ T6445] invoke_syscall+0x98/0x290 [ 79.817195][ T6445] el0_svc_common+0x13c/0x258 [ 79.818120][ T6445] do_el0_svc+0x5c/0x134 [ 79.818977][ T6445] el0_svc+0x58/0x12c [ 79.819789][ T6445] el0t_64_sync_handler+0x84/0xf0 [ 79.820799][ T6445] el0t_64_sync+0x18c/0x190 [ 79.897778][ T4334] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 79.900843][ T4334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 79.903946][ T4334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 79.906019][ T4334] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 79.907809][ T4334] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 79.909420][ T4334] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 79.929724][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 79.983530][ T6451] lo speed is unknown, defaulting to 1000 [ 80.032194][ T6464] FAULT_INJECTION: forcing a failure. [ 80.032194][ T6464] name failslab, interval 1, probability 0, space 0, times 0 [ 80.032212][ T6464] CPU: 0 PID: 6464 Comm: syz.3.677 Not tainted syzkaller #0 [ 80.032220][ T6464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 80.036224][ T6464] Call trace: [ 80.038874][ T6464] dump_backtrace+0x1c4/0x1f0 [ 80.038899][ T6464] show_stack+0x2c/0x3c [ 80.040619][ T6464] __dump_stack+0x30/0x40 [ 80.041417][ T6464] dump_stack_lvl+0xf4/0x15c [ 80.041433][ T6464] dump_stack+0x1c/0x5c [ 80.043051][ T6464] should_fail_ex+0x3cc/0x524 [ 80.043071][ T6464] __should_failslab+0xc0/0x11c [ 80.044883][ T6464] should_failslab+0x10/0x28 [ 80.045823][ T6464] __kmem_cache_alloc_node+0x7c/0x318 [ 80.046867][ T6464] __kmalloc+0xc4/0x180 [ 80.047706][ T6464] security_prepare_creds+0x54/0x140 [ 80.048671][ T6464] prepare_creds+0x420/0x698 [ 80.049564][ T6464] lookup_user_key+0x1a0/0xf94 [ 80.049584][ T6464] __arm64_sys_add_key+0x3d4/0x520 [ 80.051344][ T6464] invoke_syscall+0x98/0x290 [ 80.052217][ T6464] el0_svc_common+0x13c/0x258 [ 80.052234][ T6464] do_el0_svc+0x5c/0x134 [ 80.053820][ T6464] el0_svc+0x58/0x12c [ 80.054599][ T6464] el0t_64_sync_handler+0x84/0xf0 [ 80.055568][ T6464] el0t_64_sync+0x18c/0x190 [ 80.113136][ T6451] chnl_net:caif_netlink_parms(): no params data found [ 80.146241][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.147561][ T6451] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.149391][ T6451] device bridge_slave_0 entered promiscuous mode [ 80.152432][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.153873][ T6451] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.155549][ T6451] device bridge_slave_1 entered promiscuous mode [ 80.169316][ T6451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.174708][ T6451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.191027][ T6451] team0: Port device team_slave_0 added [ 80.193246][ T6451] team0: Port device team_slave_1 added [ 80.205063][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.208253][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.213468][ T6451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.216321][ T6451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.217558][ T6451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.223641][ T6451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.282573][ T6451] device hsr_slave_0 entered promiscuous mode [ 80.320076][ T6451] device hsr_slave_1 entered promiscuous mode [ 80.359715][ T6451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.361027][ T6451] Cannot create hsr debugfs directory [ 80.376049][ T6486] FAULT_INJECTION: forcing a failure. [ 80.376049][ T6486] name failslab, interval 1, probability 0, space 0, times 0 [ 80.378911][ T6486] CPU: 0 PID: 6486 Comm: syz.3.684 Not tainted syzkaller #0 [ 80.380564][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 80.382847][ T6486] Call trace: [ 80.383600][ T6486] dump_backtrace+0x1c4/0x1f0 [ 80.384735][ T6486] show_stack+0x2c/0x3c [ 80.385711][ T6486] __dump_stack+0x30/0x40 [ 80.386699][ T6486] dump_stack_lvl+0xf4/0x15c [ 80.387688][ T6486] dump_stack+0x1c/0x5c [ 80.388654][ T6486] should_fail_ex+0x3cc/0x524 [ 80.389717][ T6486] __should_failslab+0xc0/0x11c [ 80.390729][ T6486] should_failslab+0x10/0x28 [ 80.391710][ T6486] __kmem_cache_alloc_node+0x7c/0x318 [ 80.392888][ T6486] kmalloc_trace+0x48/0x94 [ 80.393812][ T6486] bus_add_driver+0xd0/0x518 [ 80.394817][ T6486] driver_register+0x200/0x37c [ 80.395740][ T6486] usb_gadget_register_driver_owner+0xf0/0x25c [ 80.397103][ T6486] raw_ioctl+0x1014/0x326c [ 80.397943][ T6486] __arm64_sys_ioctl+0x14c/0x1c8 [ 80.398837][ T6486] invoke_syscall+0x98/0x290 [ 80.399754][ T6486] el0_svc_common+0x13c/0x258 [ 80.399774][ T6486] do_el0_svc+0x5c/0x134 [ 80.401451][ T6486] el0_svc+0x58/0x12c [ 80.402219][ T6486] el0t_64_sync_handler+0x84/0xf0 [ 80.403214][ T6486] el0t_64_sync+0x18c/0x190 [ 80.411250][ T6486] UDC core: USB Raw Gadget: driver registration failed: -12 [ 80.412905][ T6486] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 80.518106][ T6451] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 80.572431][ T6451] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 80.616811][ T6451] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 80.662480][ T6451] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 80.720860][ T6451] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.722370][ T6451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.724150][ T6451] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.726219][ T6451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.824579][ T6451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.832542][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.835134][ T266] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.837503][ T266] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.843863][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 80.850645][ T6451] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.855476][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.857436][ T266] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.858972][ T266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.872290][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.874266][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.875619][ T6134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.886184][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.895207][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.897118][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.909414][ T6451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.912107][ T6451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.917386][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.919439][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.923828][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.950881][ T6498] FAULT_INJECTION: forcing a failure. [ 80.950881][ T6498] name failslab, interval 1, probability 0, space 0, times 0 [ 80.953536][ T6498] CPU: 0 PID: 6498 Comm: syz.1.688 Not tainted syzkaller #0 [ 80.954961][ T6498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 80.957039][ T6498] Call trace: [ 80.957697][ T6498] dump_backtrace+0x1c4/0x1f0 [ 80.958663][ T6498] show_stack+0x2c/0x3c [ 80.959560][ T6498] __dump_stack+0x30/0x40 [ 80.960486][ T6498] dump_stack_lvl+0xf4/0x15c [ 80.961490][ T6498] dump_stack+0x1c/0x5c [ 80.962385][ T6498] should_fail_ex+0x3cc/0x524 [ 80.963344][ T6498] __should_failslab+0xc0/0x11c [ 80.963363][ T6498] should_failslab+0x10/0x28 [ 80.964532][ T6498] __kmem_cache_alloc_node+0x7c/0x318 [ 80.966563][ T6498] kmalloc_trace+0x48/0x94 [ 80.967503][ T6498] legacy_init_fs_context+0x5c/0xc8 [ 80.968573][ T6498] alloc_fs_context+0x530/0x778 [ 80.969575][ T6498] fs_context_for_mount+0x34/0x44 [ 80.970670][ T6498] __arm64_sys_fsopen+0xf0/0x2d4 [ 80.971646][ T6498] invoke_syscall+0x98/0x290 [ 80.972643][ T6498] el0_svc_common+0x13c/0x258 [ 80.973605][ T6498] do_el0_svc+0x5c/0x134 [ 80.973625][ T6498] el0_svc+0x58/0x12c [ 80.973635][ T6498] el0t_64_sync_handler+0x84/0xf0 [ 80.973644][ T6498] el0t_64_sync+0x18c/0x190 [ 81.040554][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.042275][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.047819][ T6451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.164386][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.166756][ T4394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.186691][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.188891][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.192848][ T6451] device veth0_vlan entered promiscuous mode [ 81.194484][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.202512][ T6134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.213552][ T6451] device veth1_vlan entered promiscuous mode [ 81.225091][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.227286][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.230368][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.233212][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.236636][ T6451] device veth0_macvtap entered promiscuous mode [ 81.242083][ T6451] device veth1_macvtap entered promiscuous mode [ 81.249418][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.255711][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.257933][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.260974][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.263215][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.265444][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.267342][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.269952][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.272187][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.274205][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.276953][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.278664][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.285281][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.287575][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.302967][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.307830][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.310861][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.312989][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.315083][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.317465][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.323321][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.325968][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.331588][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.333672][ T6451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.335962][ T6451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.339115][ T6451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.345092][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.347215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.359130][ T6451] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.362996][ T6451] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.365020][ T6451] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.366934][ T6451] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.420932][ T6530] input: syz0 as /devices/virtual/input/input3 [ 81.443288][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.444847][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.447500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.466361][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.467883][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.469860][ T266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.555563][ T6538] FAULT_INJECTION: forcing a failure. [ 81.555563][ T6538] name failslab, interval 1, probability 0, space 0, times 0 [ 81.558428][ T6538] CPU: 0 PID: 6538 Comm: syz.3.701 Not tainted syzkaller #0 [ 81.559810][ T6538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 81.561747][ T6538] Call trace: [ 81.562415][ T6538] dump_backtrace+0x1c4/0x1f0 [ 81.563347][ T6538] show_stack+0x2c/0x3c [ 81.564174][ T6538] __dump_stack+0x30/0x40 [ 81.565012][ T6538] dump_stack_lvl+0xf4/0x15c [ 81.565907][ T6538] dump_stack+0x1c/0x5c [ 81.566639][ T6538] should_fail_ex+0x3cc/0x524 [ 81.567523][ T6538] __should_failslab+0xc0/0x11c [ 81.568415][ T6538] should_failslab+0x10/0x28 [ 81.569308][ T6538] __kmem_cache_alloc_node+0x7c/0x318 [ 81.570306][ T6538] kmalloc_trace+0x48/0x94 [ 81.571173][ T6538] sctp_add_bind_addr+0x9c/0x2e8 [ 81.572089][ T6538] sctp_copy_local_addr_list+0x2d4/0x474 [ 81.573185][ T6538] sctp_copy_one_addr+0xb0/0x33c [ 81.574167][ T6538] sctp_bind_addr_copy+0x178/0x39c [ 81.575140][ T6538] sctp_assoc_set_bind_addr_from_ep+0x128/0x184 [ 81.576365][ T6538] sctp_connect_new_asoc+0x28c/0x5f4 [ 81.577375][ T6538] sctp_sendmsg+0x10f4/0x20f4 [ 81.578269][ T6538] inet_sendmsg+0x154/0x27c [ 81.579121][ T6538] ____sys_sendmsg+0x588/0x90c [ 81.580270][ T6538] __sys_sendmmsg+0x320/0x7ec [ 81.581056][ T6538] __arm64_sys_sendmmsg+0xa4/0xc0 [ 81.581987][ T6538] invoke_syscall+0x98/0x290 [ 81.582828][ T6538] el0_svc_common+0x13c/0x258 [ 81.582850][ T6538] do_el0_svc+0x5c/0x134 [ 81.584573][ T6538] el0_svc+0x58/0x12c [ 81.585333][ T6538] el0t_64_sync_handler+0x84/0xf0 [ 81.586240][ T6538] el0t_64_sync+0x18c/0x190 [ 81.604780][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.606804][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.929870][ T4334] Bluetooth: hci5: command 0x0409 tx timeout [ 82.135214][ T6561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.137221][ T6561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.670845][ T6611] vivid-000: ================= START STATUS ================= [ 82.673053][ T6611] vivid-000: Test Pattern: 75% Colorbar [ 82.675005][ T6611] vivid-000: Fill Percentage of Frame: 100 [ 82.676478][ T6611] vivid-000: Horizontal Movement: No Movement [ 82.677915][ T6611] vivid-000: Vertical Movement: No Movement [ 82.679206][ T6611] vivid-000: OSD Text Mode: All [ 82.680950][ T6611] vivid-000: Show Border: false [ 82.682178][ T6611] vivid-000: Show Square: false [ 82.683387][ T6611] vivid-000: Sensor Flipped Horizontally: false [ 82.684755][ T6611] vivid-000: Sensor Flipped Vertically: false [ 82.686111][ T6611] vivid-000: Insert SAV Code in Image: false [ 82.687496][ T6611] vivid-000: Insert EAV Code in Image: false [ 82.689013][ T6611] vivid-000: Insert Video Guard Band: false [ 82.690785][ T6611] vivid-000: Reduced Framerate: false [ 82.692128][ T6611] vivid-000: Enable Capture Cropping: true [ 82.693390][ T6611] vivid-000: Enable Capture Composing: true [ 82.694643][ T6611] vivid-000: Enable Capture Scaler: true [ 82.695927][ T6611] vivid-000: Timestamp Source: End of Frame [ 82.697269][ T6611] vivid-000: Colorspace: sRGB [ 82.698596][ T6611] vivid-000: Transfer Function: Default [ 82.700916][ T6611] vivid-000: Y'CbCr Encoding: Default [ 82.702224][ T6611] vivid-000: HSV Encoding: Hue 0-179 [ 82.703578][ T6611] vivid-000: Quantization: Default [ 82.704782][ T6611] vivid-000: Apply Alpha To Red Only: false [ 82.706110][ T6611] vivid-000: Standard Aspect Ratio: 4x3 [ 82.707415][ T6611] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 82.709411][ T6611] vivid-000: DV Timings: 640x480p59 inactive [ 82.711291][ T6611] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 82.713314][ T6611] vivid-000: Maximum EDID Blocks: 2 [ 82.714724][ T6611] vivid-000: Limited RGB Range (16-235): false [ 82.716159][ T6611] vivid-000: Rx RGB Quantization Range: Automatic [ 82.717674][ T6611] vivid-000: Power Present: 0x00000001 [ 82.718881][ T6611] tpg source WxH: 640x360 (Y'CbCr) [ 82.720798][ T6611] tpg field: 1 [ 82.721779][ T6611] tpg crop: 640x360@0x0 [ 82.722870][ T6611] tpg compose: 640x360@0x0 [ 82.723831][ T6611] tpg colorspace: 8 [ 82.724764][ T6611] tpg transfer function: 0/2 [ 82.725666][ T6611] tpg Y'CbCr encoding: 0/1 [ 82.726773][ T6611] tpg quantization: 0/2 [ 82.727597][ T6611] tpg RGB range: 0/2 [ 82.728538][ T6611] vivid-000: ================== END STATUS ================== [ 82.894548][ T4337] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 82.896368][ T4337] Bluetooth: hci0: Injecting HCI hardware error event [ 82.898511][ T4334] Bluetooth: hci0: hardware error 0x00 [ 84.009614][ T4337] Bluetooth: hci5: command 0x041b tx timeout [ 84.329596][ C0] net_ratelimit: 93 callbacks suppressed [ 84.970276][ T4334] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 86.089867][ T4334] Bluetooth: hci5: command 0x040f tx timeout [ 88.179645][ T4334] Bluetooth: hci5: command 0x0419 tx timeout [ 89.450552][ C1] net_ratelimit: 87 callbacks suppressed [ 94.570994][ C1] net_ratelimit: 68 callbacks suppressed [ 99.689603][ C0] net_ratelimit: 75 callbacks suppressed [ 104.729591][ C1] net_ratelimit: 63 callbacks suppressed [ 109.769602][ C1] net_ratelimit: 64 callbacks suppressed [ 114.889593][ C0] net_ratelimit: 56 callbacks suppressed [ 120.089774][ T105] net_ratelimit: 58 callbacks suppressed [ 125.289716][ T105] net_ratelimit: 56 callbacks suppressed [ 125.930851][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.932022][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 130.329684][ T4394] net_ratelimit: 58 callbacks suppressed [ 135.529952][ T4394] net_ratelimit: 58 callbacks suppressed [ 140.659645][ C0] net_ratelimit: 55 callbacks suppressed [ 145.769651][ T4393] net_ratelimit: 53 callbacks suppressed [ 151.369596][ C1] net_ratelimit: 63 callbacks suppressed [ 156.569611][ C1] net_ratelimit: 56 callbacks suppressed [ 161.770769][ C0] net_ratelimit: 58 callbacks suppressed [ 166.969591][ C1] net_ratelimit: 56 callbacks suppressed [ 172.010702][ C1] net_ratelimit: 63 callbacks suppressed [ 177.369614][ C1] net_ratelimit: 53 callbacks suppressed [ 182.569606][ C1] net_ratelimit: 59 callbacks suppressed [ 187.380782][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.382008][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.769609][ C1] net_ratelimit: 61 callbacks suppressed [ 192.969588][ C1] net_ratelimit: 59 callbacks suppressed [ 198.169594][ C1] net_ratelimit: 98 callbacks suppressed [ 203.369619][ C1] net_ratelimit: 83 callbacks suppressed [ 204.809823][ T4334] Bluetooth: hci5: command 0x0406 tx timeout [ 208.489645][ T105] net_ratelimit: 80 callbacks suppressed [ 213.609703][ T105] net_ratelimit: 60 callbacks suppressed [ 218.729616][ C0] net_ratelimit: 59 callbacks suppressed [ 224.169591][ C1] net_ratelimit: 69 callbacks suppressed [ 229.369595][ C1] net_ratelimit: 68 callbacks suppressed [ 233.449918][ T28] INFO: task syz-executor:5189 blocked for more than 143 seconds. [ 233.449973][ C1] virtqueue callback for 000000001d70d629 (000000001a326ba9) [ 233.451604][ T28] Not tainted syzkaller #0 [ 233.453325][ C1] nf_nat: Already setup manip DST for ct 0000000086b5da9b (status bits 0x188) [ 233.454236][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 233.456029][ C1] nf_nat: Already setup manip SRC for ct 0000000086b5da9b (status bits 0x188) [ 233.457917][ T28] task:syz-executor state:D stack:0 pid:5189 ppid:1 flags:0x00000001 [ 233.463688][ T28] dump_backtrace(regs = 0000000000000000 tsk = 000000007344a01a) [ 233.465553][ T28] Call trace: [ 233.466334][ T28] __switch_to+0x2f4/0x550 [ 233.467390][ T28] __schedule+0xdb4/0x1a6c [ 233.468428][ T28] schedule+0xc4/0x170 [ 233.469414][ T28] schedule_preempt_disabled+0x18/0x2c [ 233.470743][ T28] __mutex_lock_common+0xb20/0x1f3c [ 233.471985][ T28] mutex_lock_nested+0x38/0x44 [ 233.473022][ T28] nfsd_shutdown_threads+0x60/0x204 [ 233.474096][ T28] nfsd_umount+0x48/0xf8 [ 233.474989][ T28] deactivate_locked_super+0xb4/0x128 [ 233.476096][ T28] deactivate_super+0xe4/0x104 [ 233.477074][ T28] cleanup_mnt+0x3a8/0x430 [ 233.477932][ T28] __cleanup_mnt+0x20/0x30 [ 233.478783][ T28] task_work_run+0x1f4/0x280 [ 233.479727][ T28] do_notify_resume+0x20f8/0x2c84 [ 233.480780][ T28] el0_svc+0x9c/0x12c [ 233.482177][ T28] el0t_64_sync_handler+0x84/0xf0 [ 233.483255][ T28] el0t_64_sync+0x18c/0x190 [ 233.484259][ T28] [ 233.484259][ T28] Showing all locks held in the system: [ 233.485759][ T28] 1 lock held by rcu_tasks_kthre/12: [ 233.486834][ T28] #0: ffff8000155a7e70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 233.489035][ T28] 1 lock held by rcu_tasks_trace/13: [ 233.490157][ T28] #0: ffff8000155a8690 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xc48 [ 233.492686][ T28] 1 lock held by khungtaskd/28: [ 233.493761][ T28] #0: ffff8000155a7500 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 233.495929][ T28] 2 locks held by getty/4082: [ 233.496903][ T28] #0: ffff0000d6dca098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 233.498889][ T28] #1: ffff800020aee2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2e8/0xfa8 [ 233.501015][ T28] 2 locks held by syz-executor/5189: [ 233.502139][ T28] #0: ffff0000dcdcc0e0 (&type->s_umount_key#83){+.+.}-{3:3}, at: deactivate_super+0xdc/0x104 [ 233.504159][ T28] #1: ffff8000158343a8 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_shutdown_threads+0x60/0x204 [ 233.506197][ T28] 3 locks held by syz.0.470/5837: [ 233.507210][ T28] #0: ffff0000d966a368 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x118/0x17c [ 233.509168][ T28] #1: ffff0000d20d0460 (sb_writers#20){.+.+}-{0:0}, at: vfs_write+0x254/0x7c8 [ 233.511232][ T28] #2: ffff8000158343a8 (nfsd_mutex){+.+.}-{3:3}, at: write_ports+0xbc/0x9f0 [ 233.513245][ T28] [ 233.513769][ T28] ============================================= [ 233.513769][ T28] [ 233.515498][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 233.516867][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 233.518274][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 233.520245][ T28] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 233.521794][ T28] Call trace: [ 233.522481][ T28] dump_backtrace+0x1c4/0x1f0 [ 233.523432][ T28] show_stack+0x2c/0x3c [ 233.524322][ T28] __dump_stack+0x30/0x40 [ 233.525246][ T28] dump_stack_lvl+0xf4/0x15c [ 233.526180][ T28] dump_stack+0x1c/0x5c [ 233.527037][ T28] panic+0x2f8/0x7ac [ 233.527816][ T28] hung_task_panic+0x0/0x2c [ 233.528736][ T28] kthread+0x254/0x2e0 [ 233.529608][ T28] ret_from_fork+0x10/0x20 [ 233.530557][ T28] SMP: stopping secondary CPUs [ 233.531541][ T28] Kernel Offset: disabled [ 233.532475][ T28] CPU features: 0x0a0000,000f0097,a65bfea7 [ 233.533728][ T28] Memory Limit: none [ 233.874374][ T28] Rebooting in 86400 seconds..