last executing test programs: 3.837030667s ago: executing program 4 (id=1462): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x4, 0x70bd2b, 0x25dfdc02, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x841}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c56096c590001040d007000fadb107c0844b9c9", @ANYRES32, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280050016"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.721076589s ago: executing program 4 (id=1464): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, 0x0, &(0x7f0000000280)) 3.68577702s ago: executing program 4 (id=1465): syz_emit_ethernet(0x140, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60010100010a1100fe8000000000000000f3ff00000000bbfe8000000000000000000000000000aa4e200e2201"], 0x0) 3.66193548s ago: executing program 4 (id=1466): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, 0x0, 0x0) futex(0x0, 0x8, 0x1, 0x0, 0x0, 0x1000008) sync() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.161019503s ago: executing program 4 (id=1469): memfd_create(&(0x7f0000000140)='proc\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x82020000) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='270', 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x59) write(r2, &(0x7f0000000100)='1', 0x1) 3.108132394s ago: executing program 4 (id=1470): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000003c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135) syz_usb_connect(0x2, 0xb3, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ef020140"], 0x0) write$UHID_INPUT2(r0, &(0x7f0000000580)={0xc, {0x1, ' '}}, 0x7) 2.759012953s ago: executing program 1 (id=1477): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x480}, {r0, 0x200}], 0x2, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 2.665514495s ago: executing program 2 (id=1478): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(r0, 0x84, 0x85, 0x0, &(0x7f0000000280)) 2.644477006s ago: executing program 2 (id=1479): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000044000)) prlimit64(0x0, 0xf, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x1020, 0x409}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) 2.576073887s ago: executing program 2 (id=1480): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) setsockopt$inet_tcp_buf(r2, 0x6, 0x1c, 0x0, 0x0) futex(0x0, 0x8, 0x1, 0x0, 0x0, 0x1000008) sync() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.427006451s ago: executing program 2 (id=1482): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040ed7e54e20", @ANYRES32], 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/rpc\x00') openat(r3, &(0x7f0000000640)='auth.unix.gid/channel\x00', 0x2, 0x0) 1.935398323s ago: executing program 0 (id=1483): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x50) socket$inet(0xa, 0x801, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x2}}, @TCA_CT_ACTION={0x6, 0x3, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x84}}, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000008004500002012340000401154970a0000010a0000023039d431000c"], 0x24) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x400d4) 1.894624654s ago: executing program 1 (id=1486): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000200), 0x0) 1.816875756s ago: executing program 1 (id=1488): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040ed7e54e20", @ANYRES32], 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/rpc\x00') r4 = openat(r3, &(0x7f0000000640)='auth.unix.gid/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='- 2000000000 0\n', 0xf) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:1f.3/remove\x00', 0x1, 0x0) umount2(&(0x7f0000000280)='./sys\x00', 0xa) connect$bt_sco(r5, &(0x7f00000005c0)={0x1f, @none}, 0x8) io_uring_setup(0x115a, &(0x7f00000002c0)={0x0, 0x3ca, 0x40, 0x3, 0x117}) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 1.773857987s ago: executing program 3 (id=1490): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020a0103070000002cbd7000fddbdf2105001a007f00000100000000000000000000000000ffff2700108aaa56f7369ba8"], 0x38}}, 0x40004) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cifs\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./cifs\x00', &(0x7f0000000380)='cifs\x00', 0x0, &(0x7f00000004c0)='source=//127.0.0.1/test,username=root,password=root,port=12345,handletimeout=1\x00') r2 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x8e) write$P9_RLERRORu(r2, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='hpfs\x00', 0x214003, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000b00)={'ip6tnl0\x00', &(0x7f0000000a80)={'ip6_vti0\x00', 0x0, 0x4, 0x96, 0x9, 0x7, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x80, 0x7800, 0x0, 0x8}}) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{&(0x7f0000000480)={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000004c0)}, {&(0x7f0000000540)="e48866b3d16d938bd07b77b25752d2b1a37ecb69ff1ce4030fc9aebf39a38aff183b02f3c1e2e224ea83b138dcc0b29aed39bf6f7a236c6be2e2c1a07e692414f96ec1c9651ccbae9e948daa6ef800b04ca1afe6c086ca44701efdf0f845017b7b3b1b8bd090ddf3f328519821bc06976664d965dfe444128760e9e627772cbaff960cb0ffff4f9b20cabd2c6364053446", 0x91}, {&(0x7f0000000600)="ca941da0d5c3ebf6d8d3d3fce137cb99c8c9cc1e0cc1442e546dc11cebff6453a9097878f8f327bd506fb7b5d747d0856a31362aee44989f0da884087439441b3510ebe9473ae97d6fa0fdfd9575e3a244f5a5f62825f61bb56b08f7fac211863fa08b5f8730270bed9ad27cdc5ef5c85769df225a65adf6142691c582a4b48f21aa7280c3d20caade30713125b75191594d4a539bd0f5a86197adb75933bda049661d652c77ed8672a020e15eb7c057a59d", 0xb2}, {&(0x7f0000000700)="5a0bd11fa215dda8304d16860967c55ad84e337cdaef87bca6d7586e643e42131682205ba928292c8446ce90ecddf69b2dcb07a635ea0d243d65c95074986ee33838b05085be843b120f87f283196a996062a521a11d5a606167bc83c0a413146e6e", 0x62}, {&(0x7f0000000800)="7e3e3696b9d346b6d9a8d6aa68cb5cdea0394180889e73e603f7c04182b93ca7deb4dc73eef13c7ccf97434c8d4f04e7f6d18877ce8a929f", 0x38}, {0x0}, {&(0x7f0000000880)}, {0x0}], 0x8, &(0x7f0000000c80)=ANY=[], 0x168}}], 0x2, 0x20008000) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0x3) 1.772273397s ago: executing program 0 (id=1491): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 930.208658ms ago: executing program 0 (id=1492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1020, 0x409}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) 892.439288ms ago: executing program 0 (id=1493): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x200000000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)=""/80}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 873.990049ms ago: executing program 2 (id=1494): memfd_create(&(0x7f0000000140)='proc\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f0000000280)='proc\x00', 0x4000, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x82020000) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='270', 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x59) write(r2, &(0x7f0000000100)='1', 0x1) 825.28179ms ago: executing program 3 (id=1495): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, r2, 0x25, 0x0, @val=@perf_event={0x200}}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) 805.236681ms ago: executing program 2 (id=1496): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x480}, {r0, 0x200}], 0x2, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) 789.243362ms ago: executing program 3 (id=1497): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r1, 0xffffffffffffffff, 0x0) 688.466433ms ago: executing program 3 (id=1498): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r0, &(0x7f0000000200), 0x0) 687.029034ms ago: executing program 3 (id=1499): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]) accept4$bt_l2cap(r0, 0x0, 0x0, 0x80000) 42.033879ms ago: executing program 0 (id=1500): syz_emit_ethernet(0x140, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60010100010a1100fe8000000000000000f3ff00000000bbfe8000000000000000000000000000aa4e200e2201"], 0x0) 41.883109ms ago: executing program 1 (id=1501): getsockopt$inet_sctp6_SCTP_PLPMTUD_PROBE_INTERVAL(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f0000000280)) 41.747529ms ago: executing program 3 (id=1502): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 15.97997ms ago: executing program 1 (id=1503): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x50) 14.72841ms ago: executing program 0 (id=1504): r0 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='0.0.0.0:0:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='mount_timeout\x00', &(0x7f0000000180)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000006c0)=ANY=[@ANYBLOB="040ed7e54e20", @ANYRES32], 0x7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) syz_open_procfs(0x0, &(0x7f0000000600)='net/rpc\x00') 0s ago: executing program 1 (id=1505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x1020, 0x409}, [@IFLA_MASTER={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) kernel console output (not intermixed with test programs): xf4/0x15c [ 75.849222][ T5133] dump_stack+0x1c/0x5c [ 75.850104][ T5133] should_fail_ex+0x3cc/0x524 [ 75.851075][ T5133] __should_failslab+0xc0/0x11c [ 75.852076][ T5133] should_failslab+0x10/0x28 [ 75.853075][ T5133] __kmem_cache_alloc_node+0x7c/0x318 [ 75.854185][ T5133] __kmalloc+0xc4/0x180 [ 75.855006][ T5133] hash_ipport6_add+0x1348/0x1cd0 [ 75.855987][ T5133] hash_ipport6_uadt+0x5f8/0x800 [ 75.856932][ T5133] call_ad+0x15c/0x954 [ 75.857694][ T5133] ip_set_ad+0x5e4/0x7d0 [ 75.858488][ T5133] ip_set_uadd+0x74/0x8c [ 75.859309][ T5133] nfnetlink_rcv_msg+0xaac/0xf88 [ 75.860240][ T5133] netlink_rcv_skb+0x220/0x3ec [ 75.861115][ T5133] nfnetlink_rcv+0x210/0x1c54 [ 75.861959][ T5133] netlink_unicast+0x5fc/0x80c [ 75.862835][ T5133] netlink_sendmsg+0x6f0/0x9d8 [ 75.863744][ T5133] ____sys_sendmsg+0x588/0x90c [ 75.864594][ T5133] __sys_sendmsg+0x288/0x374 [ 75.865378][ T5133] __arm64_sys_sendmsg+0x80/0x94 [ 75.866258][ T5133] invoke_syscall+0x98/0x290 [ 75.867088][ T5133] el0_svc_common+0x13c/0x258 [ 75.867899][ T5133] do_el0_svc+0x5c/0x134 [ 75.868658][ T5133] el0_svc+0x58/0x12c [ 75.869360][ T5133] el0t_64_sync_handler+0x84/0xf0 [ 75.870230][ T5133] el0t_64_sync+0x18c/0x190 [ 76.161780][ T5146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 76.170013][ T5146] device gretap0 entered promiscuous mode [ 76.171760][ T5146] device macvtap1 entered promiscuous mode [ 76.237536][ T5150] fuse: Bad value for 'fd' [ 76.546893][ T5168] FAULT_INJECTION: forcing a failure. [ 76.546893][ T5168] name failslab, interval 1, probability 0, space 0, times 0 [ 76.549391][ T5168] CPU: 1 PID: 5168 Comm: syz.1.260 Not tainted syzkaller #0 [ 76.550619][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.552551][ T5168] Call trace: [ 76.553160][ T5168] dump_backtrace+0x1c4/0x1f0 [ 76.554183][ T5168] show_stack+0x2c/0x3c [ 76.555078][ T5168] __dump_stack+0x30/0x40 [ 76.556011][ T5168] dump_stack_lvl+0xf4/0x15c [ 76.557001][ T5168] dump_stack+0x1c/0x5c [ 76.557873][ T5168] should_fail_ex+0x3cc/0x524 [ 76.558873][ T5168] __should_failslab+0xc0/0x11c [ 76.559867][ T5168] should_failslab+0x10/0x28 [ 76.560813][ T5168] __kmem_cache_alloc_node+0x7c/0x318 [ 76.561908][ T5168] __kmalloc+0xc4/0x180 [ 76.562760][ T5168] hash_ipport6_add+0x1348/0x1cd0 [ 76.563819][ T5168] hash_ipport6_uadt+0x5f8/0x800 [ 76.564746][ T5168] call_ad+0x30c/0x954 [ 76.565508][ T5168] ip_set_ad+0x5e4/0x7d0 [ 76.566273][ T5168] ip_set_uadd+0x74/0x8c [ 76.567043][ T5168] nfnetlink_rcv_msg+0xaac/0xf88 [ 76.567960][ T5168] netlink_rcv_skb+0x220/0x3ec [ 76.568870][ T5168] nfnetlink_rcv+0x210/0x1c54 [ 76.569739][ T5168] netlink_unicast+0x5fc/0x80c [ 76.570639][ T5168] netlink_sendmsg+0x6f0/0x9d8 [ 76.571549][ T5168] ____sys_sendmsg+0x588/0x90c [ 76.572448][ T5168] __sys_sendmsg+0x288/0x374 [ 76.573314][ T5168] __arm64_sys_sendmsg+0x80/0x94 [ 76.574255][ T5168] invoke_syscall+0x98/0x290 [ 76.575122][ T5168] el0_svc_common+0x13c/0x258 [ 76.576003][ T5168] do_el0_svc+0x5c/0x134 [ 76.576799][ T5168] el0_svc+0x58/0x12c [ 76.577561][ T5168] el0t_64_sync_handler+0x84/0xf0 [ 76.578529][ T5168] el0t_64_sync+0x18c/0x190 [ 77.957123][ T5186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 78.816775][ T5195] fuse: Unknown parameter '0x0000000000000003' [ 81.114009][ C1] net_ratelimit: 62 callbacks suppressed [ 85.993674][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 86.313623][ C1] net_ratelimit: 60 callbacks suppressed [ 87.457198][ T5198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.459877][ T5198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.605179][ T5210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.282'. [ 88.674509][ T5285] device-mapper: table: 248:0: mirror: Invalid offset (-EINVAL) [ 88.676040][ T5285] device-mapper: ioctl: error adding target to table [ 89.234532][ T5313] FAULT_INJECTION: forcing a failure. [ 89.234532][ T5313] name failslab, interval 1, probability 0, space 0, times 0 [ 89.240205][ T5313] CPU: 1 PID: 5313 Comm: syz.0.305 Not tainted syzkaller #0 [ 89.241513][ T5313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 89.243458][ T5313] Call trace: [ 89.244094][ T5313] dump_backtrace+0x1c4/0x1f0 [ 89.244978][ T5313] show_stack+0x2c/0x3c [ 89.245726][ T5313] __dump_stack+0x30/0x40 [ 89.246491][ T5313] dump_stack_lvl+0xf4/0x15c [ 89.247273][ T5313] dump_stack+0x1c/0x5c [ 89.247999][ T5313] should_fail_ex+0x3cc/0x524 [ 89.248805][ T5313] __should_failslab+0xc0/0x11c [ 89.249669][ T5313] should_failslab+0x10/0x28 [ 89.250474][ T5313] kmem_cache_alloc+0x88/0x310 [ 89.251333][ T5313] getname_flags+0xb8/0x458 [ 89.252128][ T5313] user_path_at_empty+0x40/0x84 [ 89.253003][ T5313] path_setxattr+0xbc/0x260 [ 89.253821][ T5313] __arm64_sys_setxattr+0xc4/0xe0 [ 89.254728][ T5313] invoke_syscall+0x98/0x290 [ 89.255530][ T5313] el0_svc_common+0x13c/0x258 [ 89.256343][ T5313] do_el0_svc+0x5c/0x134 [ 89.257118][ T5313] el0_svc+0x58/0x12c [ 89.257833][ T5313] el0t_64_sync_handler+0x84/0xf0 [ 89.258705][ T5313] el0t_64_sync+0x18c/0x190 [ 89.954725][ T5359] ======================================================= [ 89.954725][ T5359] WARNING: The mand mount option has been deprecated and [ 89.954725][ T5359] and is ignored by this kernel. Remove the mand [ 89.954725][ T5359] option from the mount to silence this warning. [ 89.954725][ T5359] ======================================================= [ 89.965518][ T5359] jffs2: notice: (5359) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 90.453526][ T5335] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 90.455968][ T5335] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.471167][ T5378] FAULT_INJECTION: forcing a failure. [ 90.471167][ T5378] name failslab, interval 1, probability 0, space 0, times 0 [ 90.477072][ T5378] CPU: 1 PID: 5378 Comm: syz.4.319 Not tainted syzkaller #0 [ 90.478228][ T5378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 90.480334][ T5378] Call trace: [ 90.481018][ T5378] dump_backtrace+0x1c4/0x1f0 [ 90.481985][ T5378] show_stack+0x2c/0x3c [ 90.482839][ T5378] __dump_stack+0x30/0x40 [ 90.483721][ T5378] dump_stack_lvl+0xf4/0x15c [ 90.484628][ T5378] dump_stack+0x1c/0x5c [ 90.485402][ T5378] should_fail_ex+0x3cc/0x524 [ 90.486298][ T5378] __should_failslab+0xc0/0x11c [ 90.487265][ T5378] should_failslab+0x10/0x28 [ 90.488136][ T5378] kmem_cache_alloc+0x88/0x310 [ 90.489017][ T5378] getname_flags+0xb8/0x458 [ 90.489784][ T5378] user_path_at_empty+0x40/0x84 [ 90.490644][ T5378] path_setxattr+0xbc/0x260 [ 90.491486][ T5378] __arm64_sys_setxattr+0xc4/0xe0 [ 90.492416][ T5378] invoke_syscall+0x98/0x290 [ 90.493267][ T5378] el0_svc_common+0x13c/0x258 [ 90.494119][ T5378] do_el0_svc+0x5c/0x134 [ 90.494904][ T5378] el0_svc+0x58/0x12c [ 90.495643][ T5378] el0t_64_sync_handler+0x84/0xf0 [ 90.496579][ T5378] el0t_64_sync+0x18c/0x190 [ 90.835139][ T5335] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 90.978188][ T5335] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 90.987448][ T5335] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 90.997982][ T5335] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 90.999341][ T5335] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.007742][ T5335] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 91.020001][ T5335] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 91.021216][ T5335] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.029313][ T5335] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 91.048579][ T5335] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 91.049900][ T5335] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 91.058331][ T5335] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 91.081264][ T5380] FAULT_INJECTION: forcing a failure. [ 91.081264][ T5380] name failslab, interval 1, probability 0, space 0, times 0 [ 91.091570][ T5380] CPU: 1 PID: 5380 Comm: syz.3.321 Not tainted syzkaller #0 [ 91.092673][ T5380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 91.094388][ T5380] Call trace: [ 91.094964][ T5380] dump_backtrace+0x1c4/0x1f0 [ 91.095788][ T5380] show_stack+0x2c/0x3c [ 91.096576][ T5380] __dump_stack+0x30/0x40 [ 91.097351][ T5380] dump_stack_lvl+0xf4/0x15c [ 91.098183][ T5380] dump_stack+0x1c/0x5c [ 91.098958][ T5380] should_fail_ex+0x3cc/0x524 [ 91.099938][ T5380] __should_failslab+0xc0/0x11c [ 91.100963][ T5380] should_failslab+0x10/0x28 [ 91.101939][ T5380] __kmem_cache_alloc_node+0x7c/0x318 [ 91.102978][ T5380] kmalloc_trace+0x48/0x94 [ 91.103809][ T5380] nfc_allocate_device+0x11c/0x4b4 [ 91.104747][ T5380] nci_allocate_device+0x1a4/0x324 [ 91.105707][ T5380] virtual_ncidev_open+0x5c/0xd8 [ 91.106612][ T5380] misc_open+0x310/0x388 [ 91.107436][ T5380] chrdev_open+0x3d0/0x51c [ 91.108272][ T5380] do_dentry_open+0x738/0xf8c [ 91.109101][ T5380] vfs_open+0x7c/0x90 [ 91.109816][ T5380] path_openat+0x1fc0/0x27a0 [ 91.110650][ T5380] do_filp_open+0x198/0x38c [ 91.111443][ T5380] do_sys_openat2+0x134/0x3fc [ 91.112290][ T5380] __arm64_sys_openat+0x11c/0x150 [ 91.113198][ T5380] invoke_syscall+0x98/0x290 [ 91.114048][ T5380] el0_svc_common+0x13c/0x258 [ 91.114913][ T5380] do_el0_svc+0x5c/0x134 [ 91.115682][ T5380] el0_svc+0x58/0x12c [ 91.116409][ T5380] el0t_64_sync_handler+0x84/0xf0 [ 91.117361][ T5380] el0t_64_sync+0x18c/0x190 [ 91.154632][ T5392] fuse: Unknown parameter 'fd0x0000000000000003' [ 91.364307][ T9] net_ratelimit: 147 callbacks suppressed [ 91.436702][ T5416] tipc: Enabling of bearer rejected, failed to enable media [ 91.753695][ T4334] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.418192][ T5400] FAULT_INJECTION: forcing a failure. [ 92.418192][ T5400] name failslab, interval 1, probability 0, space 0, times 0 [ 92.420163][ T5400] CPU: 1 PID: 5400 Comm: syz.0.330 Not tainted syzkaller #0 [ 92.421337][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 92.423059][ T5400] Call trace: [ 92.423606][ T5400] dump_backtrace+0x1c4/0x1f0 [ 92.424472][ T5400] show_stack+0x2c/0x3c [ 92.425233][ T5400] __dump_stack+0x30/0x40 [ 92.426033][ T5400] dump_stack_lvl+0xf4/0x15c [ 92.426887][ T5400] dump_stack+0x1c/0x5c [ 92.427671][ T5400] should_fail_ex+0x3cc/0x524 [ 92.428573][ T5400] __should_failslab+0xc0/0x11c [ 92.429476][ T5400] should_failslab+0x10/0x28 [ 92.430361][ T5400] kmem_cache_alloc+0x88/0x310 [ 92.431219][ T5400] getname_flags+0xb8/0x458 [ 92.432038][ T5400] user_path_at_empty+0x40/0x84 [ 92.432890][ T5400] path_setxattr+0xbc/0x260 [ 92.433699][ T5400] __arm64_sys_setxattr+0xc4/0xe0 [ 92.434637][ T5400] invoke_syscall+0x98/0x290 [ 92.435495][ T5400] el0_svc_common+0x13c/0x258 [ 92.436358][ T5400] do_el0_svc+0x5c/0x134 [ 92.437266][ T5400] el0_svc+0x58/0x12c [ 92.437997][ T5400] el0t_64_sync_handler+0x84/0xf0 [ 92.438882][ T5400] el0t_64_sync+0x18c/0x190 [ 92.440171][ T48] Bluetooth: hci2: Malformed HCI Event [ 93.033847][ T48] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.035100][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.036176][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 93.119581][ T4334] Bluetooth: hci4: command 0x0c1a tx timeout [ 93.564436][ T5463] FAULT_INJECTION: forcing a failure. [ 93.564436][ T5463] name failslab, interval 1, probability 0, space 0, times 0 [ 93.592695][ T5463] CPU: 1 PID: 5463 Comm: syz.2.353 Not tainted syzkaller #0 [ 93.594101][ T5463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 93.596027][ T5463] Call trace: [ 93.596671][ T5463] dump_backtrace+0x1c4/0x1f0 [ 93.597592][ T5463] show_stack+0x2c/0x3c [ 93.598390][ T5463] __dump_stack+0x30/0x40 [ 93.599220][ T5463] dump_stack_lvl+0xf4/0x15c [ 93.600105][ T5463] dump_stack+0x1c/0x5c [ 93.600908][ T5463] should_fail_ex+0x3cc/0x524 [ 93.601804][ T5463] __should_failslab+0xc0/0x11c [ 93.602725][ T5463] should_failslab+0x10/0x28 [ 93.603616][ T5463] kmem_cache_alloc+0x88/0x310 [ 93.604505][ T5463] getname_flags+0xb8/0x458 [ 93.605361][ T5463] user_path_at_empty+0x40/0x84 [ 93.606286][ T5463] path_setxattr+0xbc/0x260 [ 93.607141][ T5463] __arm64_sys_setxattr+0xc4/0xe0 [ 93.608081][ T5463] invoke_syscall+0x98/0x290 [ 93.608919][ T5463] el0_svc_common+0x13c/0x258 [ 93.609810][ T5463] do_el0_svc+0x5c/0x134 [ 93.610748][ T5463] el0_svc+0x58/0x12c [ 93.611590][ T5463] el0t_64_sync_handler+0x84/0xf0 [ 93.612660][ T5463] el0t_64_sync+0x18c/0x190 [ 93.844699][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 93.892033][ T5479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.361'. [ 94.140762][ T5501] FAULT_INJECTION: forcing a failure. [ 94.140762][ T5501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.143658][ T5501] CPU: 1 PID: 5501 Comm: syz.0.367 Not tainted syzkaller #0 [ 94.145069][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 94.146990][ T5501] Call trace: [ 94.147620][ T5501] dump_backtrace+0x1c4/0x1f0 [ 94.148541][ T5501] show_stack+0x2c/0x3c [ 94.149329][ T5501] __dump_stack+0x30/0x40 [ 94.150173][ T5501] dump_stack_lvl+0xf4/0x15c [ 94.151049][ T5501] dump_stack+0x1c/0x5c [ 94.151810][ T5501] should_fail_ex+0x3cc/0x524 [ 94.152655][ T5501] should_fail+0x14/0x24 [ 94.153415][ T5501] should_fail_usercopy+0x20/0x30 [ 94.154328][ T5501] strncpy_from_user+0x48/0x59c [ 94.155200][ T5501] getname_flags+0xec/0x458 [ 94.156039][ T5501] user_path_at_empty+0x40/0x84 [ 94.156901][ T5501] path_setxattr+0xbc/0x260 [ 94.157670][ T5501] __arm64_sys_setxattr+0xc4/0xe0 [ 94.158548][ T5501] invoke_syscall+0x98/0x290 [ 94.159366][ T5501] el0_svc_common+0x13c/0x258 [ 94.160187][ T5501] do_el0_svc+0x5c/0x134 [ 94.160936][ T5501] el0_svc+0x58/0x12c [ 94.161623][ T5501] el0t_64_sync_handler+0x84/0xf0 [ 94.162487][ T5501] el0t_64_sync+0x18c/0x190 [ 94.660895][ T5513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.663217][ T5513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.123863][ T4334] Bluetooth: hci1: command 0x0406 tx timeout [ 95.125033][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 95.126018][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 95.174400][ T5529] FAULT_INJECTION: forcing a failure. [ 95.174400][ T5529] name failslab, interval 1, probability 0, space 0, times 0 [ 95.176597][ T5529] CPU: 0 PID: 5529 Comm: syz.0.378 Not tainted syzkaller #0 [ 95.177786][ T5529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 95.179389][ T5529] Call trace: [ 95.179960][ T5529] dump_backtrace+0x1c4/0x1f0 [ 95.180783][ T5529] show_stack+0x2c/0x3c [ 95.181470][ T5529] __dump_stack+0x30/0x40 [ 95.182146][ T5529] dump_stack_lvl+0xf4/0x15c [ 95.182886][ T5529] dump_stack+0x1c/0x5c [ 95.183545][ T5529] should_fail_ex+0x3cc/0x524 [ 95.184403][ T5529] __should_failslab+0xc0/0x11c [ 95.185327][ T5529] should_failslab+0x10/0x28 [ 95.186251][ T5529] kmem_cache_alloc+0x88/0x310 [ 95.187177][ T5529] getname_flags+0xb8/0x458 [ 95.187961][ T5529] user_path_at_empty+0x40/0x84 [ 95.188840][ T5529] path_setxattr+0xbc/0x260 [ 95.189637][ T5529] __arm64_sys_setxattr+0xc4/0xe0 [ 95.190545][ T5529] invoke_syscall+0x98/0x290 [ 95.191387][ T5529] el0_svc_common+0x13c/0x258 [ 95.192233][ T5529] do_el0_svc+0x5c/0x134 [ 95.193018][ T5529] el0_svc+0x58/0x12c [ 95.193710][ T5529] el0t_64_sync_handler+0x84/0xf0 [ 95.194574][ T5529] el0t_64_sync+0x18c/0x190 [ 95.197234][ T5535] bridge0: port 3(ip6gretap0) entered blocking state [ 95.198485][ T5535] bridge0: port 3(ip6gretap0) entered disabled state [ 95.200360][ T5535] device ip6gretap0 entered promiscuous mode [ 95.202046][ T5535] bridge0: port 3(ip6gretap0) entered blocking state [ 95.203253][ T5535] bridge0: port 3(ip6gretap0) entered forwarding state [ 95.205269][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 95.227055][ T5535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.234690][ T5535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.236493][ T5535] bridge0: port 4(bond0) entered blocking state [ 95.244243][ T5535] bridge0: port 4(bond0) entered disabled state [ 95.246809][ T5535] device bond0 entered promiscuous mode [ 95.247785][ T5535] device bond_slave_0 entered promiscuous mode [ 95.248942][ T5535] device bond_slave_1 entered promiscuous mode [ 95.264496][ T5535] bridge0: port 4(bond0) entered blocking state [ 95.265786][ T5535] bridge0: port 4(bond0) entered forwarding state [ 95.277707][ T5528] bridge0: port 5(team0) entered blocking state [ 95.278866][ T5528] bridge0: port 5(team0) entered disabled state [ 95.280848][ T5528] device team0 entered promiscuous mode [ 95.281738][ T5528] device team_slave_0 entered promiscuous mode [ 95.282970][ T5528] device team_slave_1 entered promiscuous mode [ 95.288452][ T5528] bridge0: port 5(team0) entered blocking state [ 95.289749][ T5528] bridge0: port 5(team0) entered forwarding state [ 95.343503][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 95.915048][ T4334] Bluetooth: hci0: command 0x0406 tx timeout [ 96.252319][ T5567] FAULT_INJECTION: forcing a failure. [ 96.252319][ T5567] name failslab, interval 1, probability 0, space 0, times 0 [ 96.254762][ T5567] CPU: 0 PID: 5567 Comm: syz.0.391 Not tainted syzkaller #0 [ 96.256000][ T5567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.257696][ T5567] Call trace: [ 96.257703][ T5567] dump_backtrace+0x1c4/0x1f0 [ 96.259041][ T5567] show_stack+0x2c/0x3c [ 96.259714][ T5567] __dump_stack+0x30/0x40 [ 96.260517][ T5567] dump_stack_lvl+0xf4/0x15c [ 96.260539][ T5567] dump_stack+0x1c/0x5c [ 96.262113][ T5567] should_fail_ex+0x3cc/0x524 [ 96.262135][ T5567] __should_failslab+0xc0/0x11c [ 96.262147][ T5567] should_failslab+0x10/0x28 [ 96.263044][ T5567] kmem_cache_alloc+0x88/0x310 [ 96.264679][ T5567] getname_flags+0xb8/0x458 [ 96.266301][ T5567] user_path_at_empty+0x40/0x84 [ 96.267323][ T5567] path_setxattr+0xbc/0x260 [ 96.268273][ T5567] __arm64_sys_setxattr+0xc4/0xe0 [ 96.269348][ T5567] invoke_syscall+0x98/0x290 [ 96.270278][ T5567] el0_svc_common+0x13c/0x258 [ 96.271226][ T5567] do_el0_svc+0x5c/0x134 [ 96.272076][ T5567] el0_svc+0x58/0x12c [ 96.272862][ T5567] el0t_64_sync_handler+0x84/0xf0 [ 96.273850][ T5567] el0t_64_sync+0x18c/0x190 [ 96.633645][ C0] net_ratelimit: 68 callbacks suppressed [ 96.728776][ T5584] futex_wake_op: syz.2.397 tries to shift op by 144; fix this program [ 96.734093][ T5584] futex_wake_op: syz.2.397 tries to shift op by 144; fix this program [ 96.742779][ T5584] FAULT_INJECTION: forcing a failure. [ 96.742779][ T5584] name failslab, interval 1, probability 0, space 0, times 0 [ 96.753737][ T5584] CPU: 0 PID: 5584 Comm: syz.2.397 Not tainted syzkaller #0 [ 96.755186][ T5584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 96.757010][ T5584] Call trace: [ 96.757594][ T5584] dump_backtrace+0x1c4/0x1f0 [ 96.758435][ T5584] show_stack+0x2c/0x3c [ 96.759257][ T5584] __dump_stack+0x30/0x40 [ 96.760124][ T5584] dump_stack_lvl+0xf4/0x15c [ 96.761031][ T5584] dump_stack+0x1c/0x5c [ 96.761865][ T5584] should_fail_ex+0x3cc/0x524 [ 96.762768][ T5584] __should_failslab+0xc0/0x11c [ 96.763713][ T5584] should_failslab+0x10/0x28 [ 96.764575][ T5584] kmem_cache_alloc_bulk+0x74/0x4e8 [ 96.765556][ T5584] mas_alloc_nodes+0x3b4/0x758 [ 96.766455][ T5584] mas_preallocate+0x13c/0x310 [ 96.767336][ T5584] __vma_adjust+0x26c/0x16fc [ 96.768174][ T5584] __split_vma+0x328/0x44c [ 96.769014][ T5584] do_mas_align_munmap+0x2e4/0xf28 [ 96.769976][ T5584] do_munmap+0x1d4/0x244 [ 96.770789][ T5584] mremap_to+0x1f8/0x464 [ 96.771564][ T5584] __arm64_sys_mremap+0x5e0/0xee4 [ 96.772470][ T5584] invoke_syscall+0x98/0x290 [ 96.773333][ T5584] el0_svc_common+0x13c/0x258 [ 96.774216][ T5584] do_el0_svc+0x5c/0x134 [ 96.775012][ T5584] el0_svc+0x58/0x12c [ 96.775724][ T5584] el0t_64_sync_handler+0x84/0xf0 [ 96.776675][ T5584] el0t_64_sync+0x18c/0x190 [ 96.901665][ T5592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 97.196166][ T4334] Bluetooth: hci3: command 0x0406 tx timeout [ 97.197428][ T4334] Bluetooth: hci2: command 0x0406 tx timeout [ 97.274021][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 97.974693][ T4334] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 98.108585][ T5627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 98.196492][ T5636] FAULT_INJECTION: forcing a failure. [ 98.196492][ T5636] name failslab, interval 1, probability 0, space 0, times 0 [ 98.198650][ T5636] CPU: 0 PID: 5636 Comm: syz.1.416 Not tainted syzkaller #0 [ 98.199814][ T5636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 98.201468][ T5636] Call trace: [ 98.202034][ T5636] dump_backtrace+0x1c4/0x1f0 [ 98.202858][ T5636] show_stack+0x2c/0x3c [ 98.203592][ T5636] __dump_stack+0x30/0x40 [ 98.204382][ T5636] dump_stack_lvl+0xf4/0x15c [ 98.205216][ T5636] dump_stack+0x1c/0x5c [ 98.205978][ T5636] should_fail_ex+0x3cc/0x524 [ 98.206831][ T5636] __should_failslab+0xc0/0x11c [ 98.207736][ T5636] should_failslab+0x10/0x28 [ 98.208566][ T5636] kmem_cache_alloc+0x88/0x310 [ 98.209448][ T5636] getname_flags+0xb8/0x458 [ 98.210238][ T5636] user_path_at_empty+0x40/0x84 [ 98.211122][ T5636] path_setxattr+0xbc/0x260 [ 98.211950][ T5636] __arm64_sys_setxattr+0xc4/0xe0 [ 98.212886][ T5636] invoke_syscall+0x98/0x290 [ 98.213702][ T5636] el0_svc_common+0x13c/0x258 [ 98.214530][ T5636] do_el0_svc+0x5c/0x134 [ 98.215296][ T5636] el0_svc+0x58/0x12c [ 98.216011][ T5636] el0t_64_sync_handler+0x84/0xf0 [ 98.216892][ T5636] el0t_64_sync+0x18c/0x190 [ 98.244109][ T4334] Bluetooth: hci0: command 0x040c tx timeout [ 99.327045][ T5668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 99.353381][ T5670] FAULT_INJECTION: forcing a failure. [ 99.353381][ T5670] name failslab, interval 1, probability 0, space 0, times 0 [ 99.362399][ T5670] CPU: 0 PID: 5670 Comm: syz.4.427 Not tainted syzkaller #0 [ 99.363746][ T5670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 99.365577][ T5670] Call trace: [ 99.366258][ T5670] dump_backtrace+0x1c4/0x1f0 [ 99.367190][ T5670] show_stack+0x2c/0x3c [ 99.368003][ T5670] __dump_stack+0x30/0x40 [ 99.368842][ T5670] dump_stack_lvl+0xf4/0x15c [ 99.369723][ T5670] dump_stack+0x1c/0x5c [ 99.370485][ T5670] should_fail_ex+0x3cc/0x524 [ 99.371352][ T5670] __should_failslab+0xc0/0x11c [ 99.372259][ T5670] should_failslab+0x10/0x28 [ 99.373134][ T5670] kmem_cache_alloc+0x88/0x310 [ 99.373980][ T5670] getname_flags+0xb8/0x458 [ 99.374003][ T5670] user_path_at_empty+0x40/0x84 [ 99.374016][ T5670] path_setxattr+0xbc/0x260 [ 99.376362][ T5670] __arm64_sys_setxattr+0xc4/0xe0 [ 99.377288][ T5670] invoke_syscall+0x98/0x290 [ 99.377310][ T5670] el0_svc_common+0x13c/0x258 [ 99.378899][ T5670] do_el0_svc+0x5c/0x134 [ 99.379672][ T5670] el0_svc+0x58/0x12c [ 99.380368][ T5670] el0t_64_sync_handler+0x84/0xf0 [ 99.381294][ T5670] el0t_64_sync+0x18c/0x190 [ 100.322921][ T5692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.327652][ T5692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.341332][ T5695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.437'. [ 100.569885][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 100.683909][ T5719] FAULT_INJECTION: forcing a failure. [ 100.683909][ T5719] name failslab, interval 1, probability 0, space 0, times 0 [ 100.686225][ T5719] CPU: 1 PID: 5719 Comm: syz.0.445 Not tainted syzkaller #0 [ 100.687472][ T5719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 100.689027][ T5719] Call trace: [ 100.689574][ T5719] dump_backtrace+0x1c4/0x1f0 [ 100.690397][ T5719] show_stack+0x2c/0x3c [ 100.691105][ T5719] __dump_stack+0x30/0x40 [ 100.691953][ T5719] dump_stack_lvl+0xf4/0x15c [ 100.692832][ T5719] dump_stack+0x1c/0x5c [ 100.693632][ T5719] should_fail_ex+0x3cc/0x524 [ 100.694534][ T5719] __should_failslab+0xc0/0x11c [ 100.695418][ T5719] should_failslab+0x10/0x28 [ 100.696310][ T5719] kmem_cache_alloc+0x88/0x310 [ 100.697217][ T5719] getname_flags+0xb8/0x458 [ 100.698084][ T5719] user_path_at_empty+0x40/0x84 [ 100.698948][ T5719] path_setxattr+0xbc/0x260 [ 100.699758][ T5719] __arm64_sys_setxattr+0xc4/0xe0 [ 100.700683][ T5719] invoke_syscall+0x98/0x290 [ 100.701526][ T5719] el0_svc_common+0x13c/0x258 [ 100.702344][ T5719] do_el0_svc+0x5c/0x134 [ 100.703120][ T5719] el0_svc+0x58/0x12c [ 100.703857][ T5719] el0t_64_sync_handler+0x84/0xf0 [ 100.704790][ T5719] el0t_64_sync+0x18c/0x190 [ 101.643993][ C1] net_ratelimit: 56 callbacks suppressed [ 101.648091][ T5742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.454'. [ 101.705468][ T5745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 101.785262][ T5753] FAULT_INJECTION: forcing a failure. [ 101.785262][ T5753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.787768][ T5753] CPU: 0 PID: 5753 Comm: syz.0.460 Not tainted syzkaller #0 [ 101.788989][ T5753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 101.790975][ T5753] Call trace: [ 101.791597][ T5753] dump_backtrace+0x1c4/0x1f0 [ 101.792472][ T5753] show_stack+0x2c/0x3c [ 101.793238][ T5753] __dump_stack+0x30/0x40 [ 101.794035][ T5753] dump_stack_lvl+0xf4/0x15c [ 101.794879][ T5753] dump_stack+0x1c/0x5c [ 101.795628][ T5753] should_fail_ex+0x3cc/0x524 [ 101.796467][ T5753] should_fail+0x14/0x24 [ 101.797223][ T5753] should_fail_usercopy+0x20/0x30 [ 101.798119][ T5753] strncpy_from_user+0x48/0x59c [ 101.798985][ T5753] getname_flags+0xec/0x458 [ 101.799830][ T5753] user_path_at_empty+0x40/0x84 [ 101.800716][ T5753] path_setxattr+0xbc/0x260 [ 101.801568][ T5753] __arm64_sys_setxattr+0xc4/0xe0 [ 101.802519][ T5753] invoke_syscall+0x98/0x290 [ 101.803375][ T5753] el0_svc_common+0x13c/0x258 [ 101.804250][ T5753] do_el0_svc+0x5c/0x134 [ 101.805033][ T5753] el0_svc+0x58/0x12c [ 101.805750][ T5753] el0t_64_sync_handler+0x84/0xf0 [ 101.806660][ T5753] el0t_64_sync+0x18c/0x190 [ 102.395199][ T5777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 102.893272][ T5782] FAULT_INJECTION: forcing a failure. [ 102.893272][ T5782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.904295][ T5782] CPU: 1 PID: 5782 Comm: syz.1.471 Not tainted syzkaller #0 [ 102.905484][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 102.907167][ T5782] Call trace: [ 102.907716][ T5782] dump_backtrace+0x1c4/0x1f0 [ 102.908511][ T5782] show_stack+0x2c/0x3c [ 102.909208][ T5782] __dump_stack+0x30/0x40 [ 102.909929][ T5782] dump_stack_lvl+0xf4/0x15c [ 102.910703][ T5782] dump_stack+0x1c/0x5c [ 102.911365][ T5782] should_fail_ex+0x3cc/0x524 [ 102.912126][ T5782] should_fail+0x14/0x24 [ 102.912790][ T5782] should_fail_usercopy+0x20/0x30 [ 102.913573][ T5782] strncpy_from_user+0x48/0x59c [ 102.914430][ T5782] getname_flags+0xec/0x458 [ 102.915258][ T5782] user_path_at_empty+0x40/0x84 [ 102.916151][ T5782] path_setxattr+0xbc/0x260 [ 102.916994][ T5782] __arm64_sys_setxattr+0xc4/0xe0 [ 102.917923][ T5782] invoke_syscall+0x98/0x290 [ 102.918737][ T5782] el0_svc_common+0x13c/0x258 [ 102.919588][ T5782] do_el0_svc+0x5c/0x134 [ 102.920330][ T5782] el0_svc+0x58/0x12c [ 102.921018][ T5782] el0t_64_sync_handler+0x84/0xf0 [ 102.921879][ T5782] el0t_64_sync+0x18c/0x190 [ 103.032754][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.473'. [ 103.040066][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.041829][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.645108][ T5812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.482'. [ 103.926166][ T5823] FAULT_INJECTION: forcing a failure. [ 103.926166][ T5823] name failslab, interval 1, probability 0, space 0, times 0 [ 103.928902][ T5823] CPU: 1 PID: 5823 Comm: syz.4.486 Not tainted syzkaller #0 [ 103.930319][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 103.932225][ T5823] Call trace: [ 103.932847][ T5823] dump_backtrace+0x1c4/0x1f0 [ 103.933744][ T5823] show_stack+0x2c/0x3c [ 103.934598][ T5823] __dump_stack+0x30/0x40 [ 103.935474][ T5823] dump_stack_lvl+0xf4/0x15c [ 103.936398][ T5823] dump_stack+0x1c/0x5c [ 103.937243][ T5823] should_fail_ex+0x3cc/0x524 [ 103.938163][ T5823] __should_failslab+0xc0/0x11c [ 103.939059][ T5823] should_failslab+0x10/0x28 [ 103.939900][ T5823] kmem_cache_alloc+0x88/0x310 [ 103.940729][ T5823] getname_flags+0xb8/0x458 [ 103.941507][ T5823] user_path_at_empty+0x40/0x84 [ 103.942357][ T5823] path_setxattr+0xbc/0x260 [ 103.943169][ T5823] __arm64_sys_setxattr+0xc4/0xe0 [ 103.944123][ T5823] invoke_syscall+0x98/0x290 [ 103.944999][ T5823] el0_svc_common+0x13c/0x258 [ 103.945870][ T5823] do_el0_svc+0x5c/0x134 [ 103.946630][ T5823] el0_svc+0x58/0x12c [ 103.947364][ T5823] el0t_64_sync_handler+0x84/0xf0 [ 103.948259][ T5823] el0t_64_sync+0x18c/0x190 [ 104.916325][ T5857] netlink: 4 bytes leftover after parsing attributes in process `syz.4.496'. [ 104.932819][ T5859] FAULT_INJECTION: forcing a failure. [ 104.932819][ T5859] name failslab, interval 1, probability 0, space 0, times 0 [ 104.937509][ T5859] CPU: 0 PID: 5859 Comm: syz.2.497 Not tainted syzkaller #0 [ 104.938801][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 104.940691][ T5859] Call trace: [ 104.941399][ T5859] dump_backtrace+0x1c4/0x1f0 [ 104.942447][ T5859] show_stack+0x2c/0x3c [ 104.943348][ T5859] __dump_stack+0x30/0x40 [ 104.944285][ T5859] dump_stack_lvl+0xf4/0x15c [ 104.945224][ T5859] dump_stack+0x1c/0x5c [ 104.946074][ T5859] should_fail_ex+0x3cc/0x524 [ 104.947002][ T5859] __should_failslab+0xc0/0x11c [ 104.947967][ T5859] should_failslab+0x10/0x28 [ 104.948874][ T5859] kmem_cache_alloc+0x88/0x310 [ 104.949825][ T5859] getname_flags+0xb8/0x458 [ 104.950724][ T5859] user_path_at_empty+0x40/0x84 [ 104.951650][ T5859] path_setxattr+0xbc/0x260 [ 104.952532][ T5859] __arm64_sys_setxattr+0xc4/0xe0 [ 104.953489][ T5859] invoke_syscall+0x98/0x290 [ 104.954373][ T5859] el0_svc_common+0x13c/0x258 [ 104.955260][ T5859] do_el0_svc+0x5c/0x134 [ 104.956079][ T5859] el0_svc+0x58/0x12c [ 104.956821][ T5859] el0t_64_sync_handler+0x84/0xf0 [ 104.957757][ T5859] el0t_64_sync+0x18c/0x190 [ 104.991403][ T5867] netlink: 44 bytes leftover after parsing attributes in process `syz.2.500'. [ 105.018819][ T5871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.502'. [ 105.029629][ T5871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.041613][ T5871] device bond1 entered promiscuous mode [ 105.948643][ T5897] FAULT_INJECTION: forcing a failure. [ 105.948643][ T5897] name failslab, interval 1, probability 0, space 0, times 0 [ 105.953483][ T5897] CPU: 0 PID: 5897 Comm: syz.1.512 Not tainted syzkaller #0 [ 105.954931][ T5897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 105.956952][ T5897] Call trace: [ 105.957568][ T5897] dump_backtrace+0x1c4/0x1f0 [ 105.958522][ T5897] show_stack+0x2c/0x3c [ 105.959343][ T5897] __dump_stack+0x30/0x40 [ 105.960205][ T5897] dump_stack_lvl+0xf4/0x15c [ 105.961095][ T5897] dump_stack+0x1c/0x5c [ 105.961872][ T5897] should_fail_ex+0x3cc/0x524 [ 105.962741][ T5897] __should_failslab+0xc0/0x11c [ 105.963691][ T5897] should_failslab+0x10/0x28 [ 105.964545][ T5897] kmem_cache_alloc+0x88/0x310 [ 105.965441][ T5897] getname_flags+0xb8/0x458 [ 105.966256][ T5897] user_path_at_empty+0x40/0x84 [ 105.967195][ T5897] path_setxattr+0xbc/0x260 [ 105.968069][ T5897] __arm64_sys_setxattr+0xc4/0xe0 [ 105.969010][ T5897] invoke_syscall+0x98/0x290 [ 105.969879][ T5897] el0_svc_common+0x13c/0x258 [ 105.970725][ T5897] do_el0_svc+0x5c/0x134 [ 105.971496][ T5897] el0_svc+0x58/0x12c [ 105.972223][ T5897] el0t_64_sync_handler+0x84/0xf0 [ 105.973137][ T5897] el0t_64_sync+0x18c/0x190 [ 106.056348][ T5903] netlink: 44 bytes leftover after parsing attributes in process `syz.0.514'. [ 106.209704][ T5924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'. [ 106.265996][ T5932] FAULT_INJECTION: forcing a failure. [ 106.265996][ T5932] name failslab, interval 1, probability 0, space 0, times 0 [ 106.268574][ T5932] CPU: 1 PID: 5932 Comm: syz.1.523 Not tainted syzkaller #0 [ 106.269816][ T5932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 106.271463][ T5932] Call trace: [ 106.272031][ T5932] dump_backtrace+0x1c4/0x1f0 [ 106.272835][ T5932] show_stack+0x2c/0x3c [ 106.273493][ T5932] __dump_stack+0x30/0x40 [ 106.274295][ T5932] dump_stack_lvl+0xf4/0x15c [ 106.275165][ T5932] dump_stack+0x1c/0x5c [ 106.275914][ T5932] should_fail_ex+0x3cc/0x524 [ 106.276806][ T5932] __should_failslab+0xc0/0x11c [ 106.277702][ T5932] should_failslab+0x10/0x28 [ 106.278565][ T5932] kmem_cache_alloc+0x88/0x310 [ 106.279460][ T5932] getname_flags+0xb8/0x458 [ 106.280294][ T5932] user_path_at_empty+0x40/0x84 [ 106.281217][ T5932] path_setxattr+0xbc/0x260 [ 106.282055][ T5932] __arm64_sys_setxattr+0xc4/0xe0 [ 106.283042][ T5932] invoke_syscall+0x98/0x290 [ 106.283954][ T5932] el0_svc_common+0x13c/0x258 [ 106.284863][ T5932] do_el0_svc+0x5c/0x134 [ 106.285665][ T5932] el0_svc+0x58/0x12c [ 106.286450][ T5932] el0t_64_sync_handler+0x84/0xf0 [ 106.287360][ T5932] el0t_64_sync+0x18c/0x190 [ 106.444819][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.525'. [ 106.713710][ C0] net_ratelimit: 49 callbacks suppressed [ 107.171584][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 107.239867][ T5975] FAULT_INJECTION: forcing a failure. [ 107.239867][ T5975] name failslab, interval 1, probability 0, space 0, times 0 [ 107.243532][ T5975] CPU: 0 PID: 5975 Comm: syz.0.535 Not tainted syzkaller #0 [ 107.244924][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 107.246764][ T5975] Call trace: [ 107.247350][ T5975] dump_backtrace+0x1c4/0x1f0 [ 107.248197][ T5975] show_stack+0x2c/0x3c [ 107.248952][ T5975] __dump_stack+0x30/0x40 [ 107.249763][ T5975] dump_stack_lvl+0xf4/0x15c [ 107.250616][ T5975] dump_stack+0x1c/0x5c [ 107.251399][ T5975] should_fail_ex+0x3cc/0x524 [ 107.252280][ T5975] __should_failslab+0xc0/0x11c [ 107.253192][ T5975] should_failslab+0x10/0x28 [ 107.254045][ T5975] kmem_cache_alloc+0x88/0x310 [ 107.254938][ T5975] getname_flags+0xb8/0x458 [ 107.255771][ T5975] user_path_at_empty+0x40/0x84 [ 107.256644][ T5975] path_setxattr+0xbc/0x260 [ 107.257481][ T5975] __arm64_sys_setxattr+0xc4/0xe0 [ 107.258424][ T5975] invoke_syscall+0x98/0x290 [ 107.259280][ T5975] el0_svc_common+0x13c/0x258 [ 107.260160][ T5975] do_el0_svc+0x5c/0x134 [ 107.260955][ T5975] el0_svc+0x58/0x12c [ 107.261684][ T5975] el0t_64_sync_handler+0x84/0xf0 [ 107.262615][ T5975] el0t_64_sync+0x18c/0x190 [ 107.290589][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.537'. [ 107.525526][ T5960] pci 0000:00:00.0: [1ae0:0042] type 00 class 0x020000 [ 107.531166][ T5960] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff] [ 107.534703][ T5960] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f] [ 107.537949][ T5960] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff] [ 107.556303][ T5960] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff]: assigned [ 107.557865][ T5960] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff]: assigned [ 107.559347][ T5960] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f]: assigned [ 107.570095][ T4378] gvnic 0000:00:00.0: Driver is running with DQO RDA queue format. [ 107.571541][ T4378] gvnic 0000:00:00.0: MAC addr: 42:01:0a:80:01:07 [ 107.572724][ T4378] gvnic 0000:00:00.0: TX queues 2, RX queues 2 [ 107.574416][ T4378] gvnic 0000:00:00.0: Max TX queues 2, Max RX queues 2 [ 107.677412][ T4378] gvnic 0000:00:00.0: GVE version 1.0.0 [ 107.678449][ T4378] gvnic 0000:00:00.0: GVE queue format 3 [ 107.683029][ T5945] gvnic 0000:00:00.0 enp0s0: renamed from eth0 [ 108.269305][ T1655] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 108.280068][ T1655] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready [ 111.834128][ C1] net_ratelimit: 55 callbacks suppressed [ 116.953624][ C1] net_ratelimit: 48 callbacks suppressed [ 120.832597][ T6114] Zero length message leads to an empty skb [ 120.897515][ T6123] FAULT_INJECTION: forcing a failure. [ 120.897515][ T6123] name failslab, interval 1, probability 0, space 0, times 0 [ 120.900334][ T6123] CPU: 0 PID: 6123 Comm: syz.1.549 Not tainted syzkaller #0 [ 120.901570][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 120.903474][ T6123] Call trace: [ 120.904126][ T6123] dump_backtrace+0x1c4/0x1f0 [ 120.905039][ T6123] show_stack+0x2c/0x3c [ 120.905923][ T6123] __dump_stack+0x30/0x40 [ 120.906871][ T6123] dump_stack_lvl+0xf4/0x15c [ 120.907787][ T6123] dump_stack+0x1c/0x5c [ 120.908642][ T6123] should_fail_ex+0x3cc/0x524 [ 120.909552][ T6123] __should_failslab+0xc0/0x11c [ 120.910458][ T6123] should_failslab+0x10/0x28 [ 120.911304][ T6123] kmem_cache_alloc+0x88/0x310 [ 120.912182][ T6123] getname_flags+0xb8/0x458 [ 120.912999][ T6123] user_path_at_empty+0x40/0x84 [ 120.913871][ T6123] path_setxattr+0xbc/0x260 [ 120.914695][ T6123] __arm64_sys_setxattr+0xc4/0xe0 [ 120.915628][ T6123] invoke_syscall+0x98/0x290 [ 120.916468][ T6123] el0_svc_common+0x13c/0x258 [ 120.917322][ T6123] do_el0_svc+0x5c/0x134 [ 120.918105][ T6123] el0_svc+0x58/0x12c [ 120.918840][ T6123] el0t_64_sync_handler+0x84/0xf0 [ 120.919770][ T6123] el0t_64_sync+0x18c/0x190 [ 120.930213][ T6126] netlink: 12 bytes leftover after parsing attributes in process `syz.0.551'. [ 120.932082][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.550'. [ 121.737870][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'. [ 121.756957][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.564'. [ 122.074257][ T9] net_ratelimit: 59 callbacks suppressed [ 122.762135][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'. [ 122.960110][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 122.976011][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.153717][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 123.159420][ T7] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 123.160792][ T7] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 123.174376][ T7] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 123.176249][ T7] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 123.178327][ T7] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 123.180903][ T7] usb 1-1: config 168 interface 0 has no altsetting 0 [ 123.184014][ T7] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 123.185247][ T7] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 123.187490][ T7] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 123.189217][ T7] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 123.191093][ T7] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 123.203509][ T7] usb 1-1: config 168 interface 0 has no altsetting 0 [ 123.206902][ T7] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 123.208074][ T7] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 123.209944][ T7] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 123.211882][ T7] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 123.223705][ T7] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 123.226267][ T7] usb 1-1: config 168 interface 0 has no altsetting 0 [ 123.230505][ T7] usb 1-1: string descriptor 0 read error: -22 [ 123.231720][ T7] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 123.233352][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.254579][ T7] adutux 1-1:168.0: interrupt endpoints not found [ 123.364981][ T6233] netlink: 12 bytes leftover after parsing attributes in process `syz.2.593'. [ 123.450105][ T7] usb 1-1: USB disconnect, device number 2 [ 123.692190][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 123.972696][ T4334] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 123.975735][ T4334] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 124.009726][ T6268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'. [ 125.028114][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.623'. [ 125.237924][ T6327] 9pnet_virtio: no channels available for device syz [ 125.914041][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.915335][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.145791][ T6346] device syzkaller0 entered promiscuous mode [ 126.354812][ T6370] __nla_validate_parse: 1 callbacks suppressed [ 126.354821][ T6370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.654'. [ 126.600833][ T27] audit: type=1326 audit(126.590:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.661" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff925788e8 code=0x7ffc0000 [ 126.604760][ T27] audit: type=1326 audit(126.590:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.661" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=293 compat=0 ip=0xffff925788e8 code=0x7ffc0000 [ 126.608787][ T27] audit: type=1326 audit(126.590:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.661" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff925788e8 code=0x7ffc0000 [ 126.612378][ T27] audit: type=1326 audit(126.590:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.661" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=208 compat=0 ip=0xffff925788e8 code=0x7ffc0000 [ 126.621546][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.634167][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.653707][ T27] audit: type=1326 audit(126.590:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.661" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff925788e8 code=0x7ffc0000 [ 126.657831][ T27] audit: type=1326 audit(126.590:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.661" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff925788e8 code=0x7ffc0000 [ 126.662147][ T27] audit: type=1326 audit(126.600:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.661" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff925788e8 code=0x7ffc0000 [ 126.679334][ T6396] FAULT_INJECTION: forcing a failure. [ 126.679334][ T6396] name failslab, interval 1, probability 0, space 0, times 0 [ 126.679873][ T27] audit: type=1326 audit(126.600:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.661" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9255b7ac code=0x7ffc0000 [ 126.685202][ T6396] CPU: 0 PID: 6396 Comm: syz.3.666 Not tainted syzkaller #0 [ 126.687439][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 126.689304][ T6396] Call trace: [ 126.689915][ T6396] dump_backtrace+0x1c4/0x1f0 [ 126.690776][ T6396] show_stack+0x2c/0x3c [ 126.691554][ T6396] __dump_stack+0x30/0x40 [ 126.692364][ T6396] dump_stack_lvl+0xf4/0x15c [ 126.693211][ T6396] dump_stack+0x1c/0x5c [ 126.693983][ T6396] should_fail_ex+0x3cc/0x524 [ 126.694849][ T6396] __should_failslab+0xc0/0x11c [ 126.695750][ T6396] should_failslab+0x10/0x28 [ 126.696537][ T27] audit: type=1326 audit(126.600:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.661" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff92578510 code=0x7ffc0000 [ 126.696577][ T6396] __kmem_cache_alloc_node+0x7c/0x318 [ 126.700237][ T27] audit: type=1326 audit(126.600:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6384 comm="syz.4.661" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff92578510 code=0x7ffc0000 [ 126.701129][ T6396] kmalloc_trace+0x48/0x94 [ 126.705636][ T6396] fuse_dev_alloc+0x94/0x1e4 [ 126.706490][ T6396] fuse_dev_alloc_install+0x1c/0x50 [ 126.707459][ T6396] cuse_channel_open+0xe8/0x5c0 [ 126.708355][ T6396] misc_open+0x310/0x388 [ 126.709126][ T6396] chrdev_open+0x3d0/0x51c [ 126.709942][ T6396] do_dentry_open+0x738/0xf8c [ 126.710769][ T6396] vfs_open+0x7c/0x90 [ 126.711498][ T6396] path_openat+0x1fc0/0x27a0 [ 126.712322][ T6396] do_filp_open+0x198/0x38c [ 126.713129][ T6396] do_sys_openat2+0x134/0x3fc [ 126.713995][ T6396] __arm64_sys_openat+0x11c/0x150 [ 126.714898][ T6396] invoke_syscall+0x98/0x290 [ 126.715765][ T6396] el0_svc_common+0x13c/0x258 [ 126.716612][ T6396] do_el0_svc+0x5c/0x134 [ 126.717362][ T6396] el0_svc+0x58/0x12c [ 126.718069][ T6396] el0t_64_sync_handler+0x84/0xf0 [ 126.718972][ T6396] el0t_64_sync+0x18c/0x190 [ 126.791827][ T6403] device syzkaller0 entered promiscuous mode [ 127.193667][ C0] net_ratelimit: 44 callbacks suppressed [ 127.228977][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 127.616444][ T6449] device tunl0 entered promiscuous mode [ 127.624127][ T6449] netlink: 'syz.1.690': attribute type 4 has an invalid length. [ 127.625887][ T6449] netlink: 9 bytes leftover after parsing attributes in process `syz.1.690'. [ 127.652307][ T6453] device syzkaller0 entered promiscuous mode [ 128.004616][ T4334] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 128.006257][ T4334] Bluetooth: hci0: Injecting HCI hardware error event [ 128.008321][ T4334] Bluetooth: hci0: hardware error 0x00 [ 128.566778][ T6500] capability: warning: `syz.4.711' uses deprecated v2 capabilities in a way that may be insecure [ 128.639767][ T6503] nvme_fc: nvme_fc_create_ctrl: nn-0x1000000044001122:pn-0x2000000044001122 - nn-0x1000000044001123:pn-0x2000000044001123 combination not found [ 128.777859][ T6520] device syzkaller0 entered promiscuous mode [ 130.086624][ T4334] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 130.389319][ T6562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.392315][ T6562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.491872][ T6573] device syzkaller0 entered promiscuous mode [ 130.775164][ T6594] smc: net device lo applied user defined pnetid SYZ0 [ 131.513724][ T4334] Bluetooth: hci4: command 0x0405 tx timeout [ 131.670827][ T6597] device syzkaller0 entered promiscuous mode [ 131.837993][ T6620] FAULT_INJECTION: forcing a failure. [ 131.837993][ T6620] name failslab, interval 1, probability 0, space 0, times 0 [ 131.840332][ T6620] CPU: 1 PID: 6620 Comm: syz.0.765 Not tainted syzkaller #0 [ 131.841478][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 131.843105][ T6620] Call trace: [ 131.843647][ T6620] dump_backtrace+0x1c4/0x1f0 [ 131.844506][ T6620] show_stack+0x2c/0x3c [ 131.845263][ T6620] __dump_stack+0x30/0x40 [ 131.846082][ T6620] dump_stack_lvl+0xf4/0x15c [ 131.846979][ T6620] dump_stack+0x1c/0x5c [ 131.847760][ T6620] should_fail_ex+0x3cc/0x524 [ 131.848628][ T6620] __should_failslab+0xc0/0x11c [ 131.849518][ T6620] should_failslab+0x10/0x28 [ 131.850390][ T6620] __kmem_cache_alloc_node+0x7c/0x318 [ 131.851393][ T6620] kmalloc_trace+0x48/0x94 [ 131.852229][ T6620] fib_insert_alias+0x79c/0xf14 [ 131.853134][ T6620] fib_trie_unmerge+0x288/0xb38 [ 131.854061][ T6620] fib_unmerge+0xdc/0x2fc [ 131.854858][ T6620] fib4_rule_configure+0xe0/0x980 [ 131.855769][ T6620] fib_nl_newrule+0xe30/0x1618 [ 131.856694][ T6620] rtnetlink_rcv_msg+0x694/0xcc4 [ 131.857612][ T6620] netlink_rcv_skb+0x220/0x3ec [ 131.858481][ T6620] rtnetlink_rcv+0x28/0x38 [ 131.859291][ T6620] netlink_unicast+0x5fc/0x80c [ 131.860174][ T6620] netlink_sendmsg+0x6f0/0x9d8 [ 131.861055][ T6620] ____sys_sendmsg+0x588/0x90c [ 131.862074][ T6620] __sys_sendmsg+0x288/0x374 [ 131.863024][ T6620] __arm64_sys_sendmsg+0x80/0x94 [ 131.864043][ T6620] invoke_syscall+0x98/0x290 [ 131.864920][ T6620] el0_svc_common+0x13c/0x258 [ 131.865817][ T6620] do_el0_svc+0x5c/0x134 [ 131.866668][ T6620] el0_svc+0x58/0x12c [ 131.867420][ T6620] el0t_64_sync_handler+0x84/0xf0 [ 131.868349][ T6620] el0t_64_sync+0x18c/0x190 [ 132.195545][ T6634] binder: 6633:6634 ioctl 4018620d 0 returned -22 [ 132.199915][ T6634] binder: tried to use weak ref as strong ref [ 132.206910][ T6634] binder: 6633:6634 Acquire 1 refcount change on invalid ref 0 ret -22 [ 132.211686][ T6634] binder: 6633:6634 got transaction to invalid handle, 1 [ 132.215416][ T6634] binder: 6634:6633 cannot find target node [ 132.217664][ T6634] binder: 6633:6634 transaction call to 0:0 failed 41/29201/-22, size 0-0 line 3062 [ 132.221808][ T6634] binder: 6633:6634 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 132.233631][ C1] net_ratelimit: 47 callbacks suppressed [ 132.235381][ T6634] binder: 6634 RLIMIT_NICE not set [ 132.273430][ T6641] binder: 6633:6641 got reply transaction with no transaction stack [ 132.275439][ T6641] binder: 6633:6641 transaction reply to 0:0 failed 42/29201/-71, size 0-0 line 2963 [ 133.294612][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 133.295898][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 137.433641][ C1] net_ratelimit: 53 callbacks suppressed [ 142.553681][ C0] net_ratelimit: 49 callbacks suppressed [ 143.469329][ T6645] tipc: Enabling of bearer rejected, failed to enable media [ 143.548719][ T6691] binder: 6690:6691 ioctl 4018620d 0 returned -22 [ 143.552055][ T6691] binder: tried to use weak ref as strong ref [ 143.553168][ T6691] binder: 6690:6691 Acquire 1 refcount change on invalid ref 0 ret -22 [ 143.556077][ T6691] binder: 6690:6691 got transaction to invalid handle, 1 [ 143.557478][ T6691] binder: 6691:6690 cannot find target node [ 143.558448][ T6691] binder: 6690:6691 transaction call to 0:0 failed 45/29201/-22, size 0-0 line 3062 [ 143.560275][ T6691] binder: 6690:6691 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 143.562399][ T6691] binder: 6691 RLIMIT_NICE not set [ 143.612116][ T6698] binder: 6690:6698 got reply transaction with no transaction stack [ 143.613574][ T6698] binder: 6690:6698 transaction reply to 0:0 failed 46/29201/-71, size 0-0 line 2963 [ 144.463964][ T1968] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.465234][ T1968] binder: undelivered TRANSACTION_ERROR: 29201 [ 144.493025][ T6711] FAULT_INJECTION: forcing a failure. [ 144.493025][ T6711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.498189][ T6711] CPU: 1 PID: 6711 Comm: syz.4.795 Not tainted syzkaller #0 [ 144.499392][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 144.501103][ T6711] Call trace: [ 144.501696][ T6711] dump_backtrace+0x1c4/0x1f0 [ 144.502510][ T6711] show_stack+0x2c/0x3c [ 144.503247][ T6711] __dump_stack+0x30/0x40 [ 144.504057][ T6711] dump_stack_lvl+0xf4/0x15c [ 144.504952][ T6711] dump_stack+0x1c/0x5c [ 144.505738][ T6711] should_fail_ex+0x3cc/0x524 [ 144.506752][ T6711] should_fail+0x14/0x24 [ 144.507674][ T6711] should_fail_usercopy+0x20/0x30 [ 144.508748][ T6711] strncpy_from_user+0x48/0x59c [ 144.509787][ T6711] getname_flags+0xec/0x458 [ 144.510731][ T6711] user_path_at_empty+0x40/0x84 [ 144.511741][ T6711] path_setxattr+0xbc/0x260 [ 144.512691][ T6711] __arm64_sys_setxattr+0xc4/0xe0 [ 144.513740][ T6711] invoke_syscall+0x98/0x290 [ 144.514684][ T6711] el0_svc_common+0x13c/0x258 [ 144.515577][ T6711] do_el0_svc+0x5c/0x134 [ 144.516379][ T6711] el0_svc+0x58/0x12c [ 144.517120][ T6711] el0t_64_sync_handler+0x84/0xf0 [ 144.518050][ T6711] el0t_64_sync+0x18c/0x190 [ 144.848382][ T6669] device syzkaller0 entered promiscuous mode [ 144.908784][ T6728] tipc: Enabling of bearer rejected, failed to enable media [ 144.968339][ T6740] binder: 6739:6740 ioctl 4018620d 0 returned -22 [ 144.971251][ T6740] binder: tried to use weak ref as strong ref [ 144.977892][ T6740] binder: 6739:6740 Acquire 1 refcount change on invalid ref 0 ret -22 [ 144.979504][ T6740] binder: 6739:6740 got transaction to invalid handle, 1 [ 144.980712][ T6740] binder: 6740:6739 cannot find target node [ 144.981738][ T6740] binder: 6739:6740 transaction call to 0:0 failed 49/29201/-22, size 0-0 line 3062 [ 144.985161][ T6740] binder: 6739:6740 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 145.040574][ T6746] binder: 6739:6746 transaction reply to 0:0 failed 50/29201/-71, size 0-0 line 2963 [ 145.834883][ T6752] FAULT_INJECTION: forcing a failure. [ 145.834883][ T6752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.837203][ T6752] CPU: 0 PID: 6752 Comm: syz.0.806 Not tainted syzkaller #0 [ 145.838506][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 145.840328][ T6752] Call trace: [ 145.840957][ T6752] dump_backtrace+0x1c4/0x1f0 [ 145.841919][ T6752] show_stack+0x2c/0x3c [ 145.842698][ T6752] __dump_stack+0x30/0x40 [ 145.843518][ T6752] dump_stack_lvl+0xf4/0x15c [ 145.844333][ T6752] dump_stack+0x1c/0x5c [ 145.845100][ T6752] should_fail_ex+0x3cc/0x524 [ 145.845981][ T6752] should_fail+0x14/0x24 [ 145.846770][ T6752] should_fail_usercopy+0x20/0x30 [ 145.847757][ T6752] strncpy_from_user+0x48/0x59c [ 145.848688][ T6752] getname_flags+0xec/0x458 [ 145.849553][ T6752] user_path_at_empty+0x40/0x84 [ 145.850521][ T6752] path_setxattr+0xbc/0x260 [ 145.851415][ T6752] __arm64_sys_setxattr+0xc4/0xe0 [ 145.852414][ T6752] invoke_syscall+0x98/0x290 [ 145.853319][ T6752] el0_svc_common+0x13c/0x258 [ 145.854176][ T6752] do_el0_svc+0x5c/0x134 [ 145.854965][ T6752] el0_svc+0x58/0x12c [ 145.855734][ T6752] el0t_64_sync_handler+0x84/0xf0 [ 145.856666][ T6752] el0t_64_sync+0x18c/0x190 [ 145.871718][ T1968] binder: undelivered TRANSACTION_ERROR: 29201 [ 145.872961][ T1968] binder: undelivered TRANSACTION_ERROR: 29201 [ 147.673631][ C0] net_ratelimit: 58 callbacks suppressed [ 152.713625][ C1] net_ratelimit: 51 callbacks suppressed [ 156.341144][ T6766] device syzkaller0 entered promiscuous mode [ 156.431388][ T6788] binder_user_error: 2 callbacks suppressed [ 156.431394][ T6788] binder: 6786:6788 tried to acquire reference to desc 0, got 1 instead [ 156.437706][ T6788] binder: 6786:6788 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 156.440319][ T6788] binder: 6788 RLIMIT_NICE not set [ 156.441289][ T6788] binder: 6788 RLIMIT_NICE not set [ 156.442461][ T6788] binder: 6788 RLIMIT_NICE not set [ 156.444938][ T6788] binder_alloc: 6786: binder_alloc_buf, no vma [ 156.446153][ T6788] binder: cannot allocate buffer: vma cleared, target dead or dying [ 156.446179][ T6788] binder: 6786:6788 transaction reply to 6786:6788 failed 56/29189/-3, size 0-0 line 3247 [ 156.449309][ T6788] binder: send failed reply for transaction 55 to 6786:6788 [ 156.451165][ T14] binder: undelivered TRANSACTION_COMPLETE [ 156.452171][ T14] binder: undelivered TRANSACTION_ERROR: 29189 [ 156.463799][ T14] binder: undelivered TRANSACTION_ERROR: 29190 [ 156.492949][ T6792] FAULT_INJECTION: forcing a failure. [ 156.492949][ T6792] name failslab, interval 1, probability 0, space 0, times 0 [ 156.498326][ T6792] CPU: 0 PID: 6792 Comm: syz.3.817 Not tainted syzkaller #0 [ 156.499576][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 156.501255][ T6792] Call trace: [ 156.501804][ T6792] dump_backtrace+0x1c4/0x1f0 [ 156.502619][ T6792] show_stack+0x2c/0x3c [ 156.503394][ T6792] __dump_stack+0x30/0x40 [ 156.504180][ T6792] dump_stack_lvl+0xf4/0x15c [ 156.505001][ T6792] dump_stack+0x1c/0x5c [ 156.505754][ T6792] should_fail_ex+0x3cc/0x524 [ 156.506601][ T6792] __should_failslab+0xc0/0x11c [ 156.507484][ T6792] should_failslab+0x10/0x28 [ 156.508310][ T6792] __kmem_cache_alloc_node+0x7c/0x318 [ 156.509360][ T6792] __kmalloc_node_track_caller+0xb8/0x174 [ 156.510427][ T6792] kvasprintf+0x12c/0x204 [ 156.511236][ T6792] kvasprintf_const+0x154/0x2e4 [ 156.512108][ T6792] kobject_set_name_vargs+0xd8/0x1c8 [ 156.513053][ T6792] dev_set_name+0xe8/0x13c [ 156.513841][ T6792] nfc_allocate_device+0x1a4/0x4b4 [ 156.514779][ T6792] nci_allocate_device+0x1a4/0x324 [ 156.515761][ T6792] virtual_ncidev_open+0x5c/0xd8 [ 156.516619][ T6792] misc_open+0x310/0x388 [ 156.517375][ T6792] chrdev_open+0x3d0/0x51c [ 156.518182][ T6792] do_dentry_open+0x738/0xf8c [ 156.519004][ T6792] vfs_open+0x7c/0x90 [ 156.519717][ T6792] path_openat+0x1fc0/0x27a0 [ 156.520507][ T6792] do_filp_open+0x198/0x38c [ 156.521360][ T6792] do_sys_openat2+0x134/0x3fc [ 156.522223][ T6792] __arm64_sys_openat+0x11c/0x150 [ 156.523170][ T6792] invoke_syscall+0x98/0x290 [ 156.524033][ T6792] el0_svc_common+0x13c/0x258 [ 156.524919][ T6792] do_el0_svc+0x5c/0x134 [ 156.525736][ T6792] el0_svc+0x58/0x12c [ 156.526481][ T6792] el0t_64_sync_handler+0x84/0xf0 [ 156.527412][ T6792] el0t_64_sync+0x18c/0x190 [ 157.521239][ T6774] pci 0000:00:00.0: [1ae0:0042] type 00 class 0x020000 [ 157.526919][ T6774] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff] [ 157.530504][ T6774] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f] [ 157.534070][ T6774] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff] [ 157.546184][ T6774] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff]: assigned [ 157.547599][ T6774] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff]: assigned [ 157.548949][ T6774] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f]: assigned [ 157.557259][ T112] gvnic 0000:00:00.0: Driver is running with DQO RDA queue format. [ 157.558709][ T112] gvnic 0000:00:00.0: MAC addr: 42:01:0a:80:01:07 [ 157.559945][ T112] gvnic 0000:00:00.0: TX queues 2, RX queues 2 [ 157.561003][ T112] gvnic 0000:00:00.0: Max TX queues 2, Max RX queues 2 [ 157.668048][ T112] gvnic 0000:00:00.0: GVE version 1.0.0 [ 157.669131][ T112] gvnic 0000:00:00.0: GVE queue format 3 [ 157.707999][ T6812] gvnic 0000:00:00.0 enp0s0: renamed from eth0 [ 157.753637][ C0] net_ratelimit: 50 callbacks suppressed [ 158.191749][ T9] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 158.199655][ T1655] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready [ 162.793628][ C1] net_ratelimit: 49 callbacks suppressed [ 167.833625][ C0] net_ratelimit: 55 callbacks suppressed [ 170.455459][ T6932] netlink: 68 bytes leftover after parsing attributes in process `syz.0.823'. [ 170.466390][ T6937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.827'. [ 170.468374][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 170.468381][ T27] audit: type=1326 audit(170.460:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.3.826" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 170.476591][ T27] audit: type=1326 audit(170.470:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.3.826" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff96d5b7ac code=0x7ffc0000 [ 170.480348][ T27] audit: type=1326 audit(170.470:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.3.826" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff96d78510 code=0x7ffc0000 [ 170.491320][ T6935] gadgetfs: bound to dummy_udc driver [ 170.498757][ T6938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.502260][ T6938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.513995][ T27] audit: type=1326 audit(170.470:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.3.826" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff96d78510 code=0x7ffc0000 [ 170.518027][ T27] audit: type=1326 audit(170.500:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.3.826" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 170.522119][ T27] audit: type=1326 audit(170.510:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.3.826" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff96d78510 code=0x7ffc0000 [ 170.522152][ T27] audit: type=1326 audit(170.510:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.3.826" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 170.554877][ T4376] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 170.570569][ T4376] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 170.576670][ T6946] overlayfs: failed to set xattr on upper [ 170.577829][ T6946] overlayfs: ...falling back to index=off,metacopy=off. [ 170.597459][ T27] audit: type=1326 audit(170.510:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.3.826" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 170.614921][ T27] audit: type=1326 audit(170.510:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.3.826" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff96d78510 code=0x7ffc0000 [ 170.619418][ T27] audit: type=1326 audit(170.510:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6929 comm="syz.3.826" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 170.628329][ T6944] tipc: Started in network mode [ 170.629219][ T6944] tipc: Node identity ac1414aa, cluster identity 4711 [ 170.631005][ T6944] tipc: New replicast peer: 172.20.20.187 [ 170.633004][ T6944] tipc: Enabled bearer , priority 10 [ 170.635909][ T6949] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 170.661433][ T6942] device bond_slave_0 entered promiscuous mode [ 170.662899][ T6942] device bond_slave_1 entered promiscuous mode [ 170.674659][ T6942] device vlan2 entered promiscuous mode [ 170.675729][ T6942] device bond0 entered promiscuous mode [ 170.694678][ T6955] ubi0: attaching mtd1 [ 170.696634][ T6955] ubi0: scanning is finished [ 170.697374][ T6955] ubi0: empty MTD device detected [ 170.698537][ T6955] ubi0 error: ubi_early_get_peb: no free eraseblocks [ 170.700512][ T6955] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28 [ 170.773900][ T7] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 170.775530][ C0] gadgetfs: connected [ 170.776763][ T7] gadgetfs: disconnected [ 170.825503][ T24] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 170.871757][ T6970] Illegal XDP return value 4294967294 on prog (id 42) dev syz_tun, expect packet loss! [ 170.900469][ T6933] gadgetfs: suspended from state 2 [ 171.007442][ T6985] device-mapper: ioctl: name not supplied when creating device [ 171.015309][ T4334] Bluetooth: hci3: unexpected cc 0x206e length: 9 > 3 [ 171.016627][ T4334] Bluetooth: hci3: unexpected event for opcode 0x206e [ 171.042492][ T4334] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 171.156050][ T7] usb 1-1: device not accepting address 3, error -71 [ 171.337929][ T1968] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 171.494647][ T6995] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.593723][ T6934] ceph: No mds server is up or the cluster is laggy [ 171.692348][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.843'. [ 171.744920][ T4376] tipc: Node number set to 2886997162 [ 171.975863][ T7032] device-mapper: ioctl: name not supplied when creating device [ 172.035450][ T7036] ieee802154 phy0 wpan0: encryption failed: -22 [ 172.115661][ T7047] ubi0: attaching mtd1 [ 172.116925][ T7047] ubi0: scanning is finished [ 172.117754][ T7047] ubi0: empty MTD device detected [ 172.118751][ T7047] ubi0 error: ubi_early_get_peb: no free eraseblocks [ 172.120301][ T7047] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -28 [ 172.156454][ T4334] Bluetooth: hci2: unexpected cc 0x206e length: 9 > 3 [ 172.158426][ T4334] Bluetooth: hci2: unexpected event for opcode 0x206e [ 172.231845][ T7016] pci 0000:00:00.0: [1ae0:0042] type 00 class 0x020000 [ 172.237290][ T7016] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff] [ 172.240836][ T7016] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f] [ 172.244448][ T7016] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff] [ 172.256560][ T7016] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff]: assigned [ 172.257964][ T7016] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff]: assigned [ 172.259348][ T7016] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f]: assigned [ 172.265946][ T4374] gvnic 0000:00:00.0: Driver is running with DQO RDA queue format. [ 172.267782][ T4374] gvnic 0000:00:00.0: MAC addr: 42:01:0a:80:01:07 [ 172.276181][ T4374] gvnic 0000:00:00.0: TX queues 2, RX queues 2 [ 172.277601][ T4374] gvnic 0000:00:00.0: Max TX queues 2, Max RX queues 2 [ 172.641894][ T4374] gvnic 0000:00:00.0: GVE version 1.0.0 [ 172.642941][ T4374] gvnic 0000:00:00.0: GVE queue format 3 [ 172.690540][ T6976] gvnic 0000:00:00.0 enp0s0: renamed from eth0 [ 172.883651][ C0] net_ratelimit: 54 callbacks suppressed [ 173.211051][ T1655] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 173.220451][ T1655] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready [ 177.913624][ C1] net_ratelimit: 48 callbacks suppressed [ 183.043636][ C0] net_ratelimit: 50 callbacks suppressed [ 186.392748][ T7171] overlayfs: failed to set xattr on upper [ 186.403997][ T7171] overlayfs: ...falling back to index=off,metacopy=off. [ 186.433412][ T7179] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(1701064494.118.0), cmd(6) [ 187.015454][ T7211] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(1701064494.118.0), cmd(6) [ 187.366040][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.367371][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.380665][ T7212] pci 0000:00:00.0: [1ae0:0042] type 00 class 0x020000 [ 187.385997][ T7212] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff] [ 187.389505][ T7212] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f] [ 187.392897][ T7212] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff] [ 187.404709][ T7212] pci 0000:00:00.0: BAR 2 [mem 0x10000000-0x100fffff]: assigned [ 187.406151][ T7212] pci 0000:00:00.0: BAR 0 [mem 0x10100000-0x1010ffff]: assigned [ 187.407512][ T7212] pci 0000:00:00.0: BAR 1 [mem 0x10110000-0x1011007f]: assigned [ 187.416171][ T7] gvnic 0000:00:00.0: Driver is running with DQO RDA queue format. [ 187.417637][ T7] gvnic 0000:00:00.0: MAC addr: 42:01:0a:80:01:07 [ 187.418777][ T7] gvnic 0000:00:00.0: TX queues 2, RX queues 2 [ 187.419843][ T7] gvnic 0000:00:00.0: Max TX queues 2, Max RX queues 2 [ 187.475143][ T7] gvnic 0000:00:00.0: GVE version 1.0.0 [ 187.476294][ T7] gvnic 0000:00:00.0: GVE queue format 3 [ 187.511533][ T7232] gvnic 0000:00:00.0 enp0s0: renamed from eth0 [ 188.073658][ C0] net_ratelimit: 51 callbacks suppressed [ 188.163594][ T4390] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 188.172048][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready [ 193.113691][ T7216] net_ratelimit: 48 callbacks suppressed [ 198.233647][ C0] net_ratelimit: 54 callbacks suppressed [ 200.708103][ T7368] tipc: Started in network mode [ 200.709093][ T7368] tipc: Node identity ac1414aa, cluster identity 4711 [ 200.710394][ T7368] tipc: New replicast peer: 172.20.20.187 [ 200.711738][ T7368] tipc: Enabled bearer , priority 10 [ 200.722834][ T27] kauditd_printk_skb: 87 callbacks suppressed [ 200.722841][ T27] audit: type=1326 audit(200.710:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.1.893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 200.725380][ T7372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.892'. [ 200.734902][ T27] audit: type=1326 audit(200.730:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.1.893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff9ed5b7ac code=0x7ffc0000 [ 200.743491][ T7374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.745077][ T27] audit: type=1326 audit(200.730:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.1.893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9ed78510 code=0x7ffc0000 [ 200.745103][ T27] audit: type=1326 audit(200.730:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.1.893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9ed78510 code=0x7ffc0000 [ 200.756874][ T7374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.758511][ T27] audit: type=1326 audit(200.750:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.1.893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 200.762716][ T27] audit: type=1326 audit(200.750:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.1.893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9ed78510 code=0x7ffc0000 [ 200.778092][ T27] audit: type=1326 audit(200.750:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.1.893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 200.781795][ T27] audit: type=1326 audit(200.750:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.1.893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9ed78510 code=0x7ffc0000 [ 200.787635][ T7376] gadgetfs: bound to dummy_udc driver [ 200.810635][ T27] audit: type=1326 audit(200.750:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.1.893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 200.821300][ T27] audit: type=1326 audit(200.750:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7373 comm="syz.1.893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff9ed78510 code=0x7ffc0000 [ 200.834638][ T112] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 200.838120][ T112] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 200.841650][ T7384] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 200.869690][ T4334] Bluetooth: hci1: unexpected event for opcode 0x204e [ 200.919160][ T7394] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 200.935822][ T7391] device bond_slave_0 entered promiscuous mode [ 200.936945][ T7391] device bond_slave_1 entered promiscuous mode [ 200.938038][ T7391] device vlan2 entered promiscuous mode [ 200.946779][ T7391] device bond0 entered promiscuous mode [ 201.053687][ T4374] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 201.055290][ C0] gadgetfs: connected [ 201.056823][ T4374] gadgetfs: disconnected [ 201.068202][ T7400] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(1701064494.118.0), cmd(6) [ 201.085375][ T4334] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 201.096978][ T112] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 201.605043][ T112] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 201.823694][ T112] tipc: Node number set to 2886997162 [ 201.913688][ T7379] ceph: No mds server is up or the cluster is laggy [ 202.506004][ T7453] tipc: Started in network mode [ 202.506990][ T7453] tipc: Node identity ac1414aa, cluster identity 4711 [ 202.508269][ T7453] tipc: New replicast peer: 172.20.20.187 [ 202.509486][ T7453] tipc: Enabled bearer , priority 10 [ 202.746301][ T4334] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 202.758886][ T7484] tipc: Enabling of bearer rejected, already enabled [ 203.165938][ T7499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.939'. [ 203.273649][ C0] net_ratelimit: 49 callbacks suppressed [ 203.289837][ T7514] tipc: Started in network mode [ 203.290868][ T7514] tipc: Node identity ac1414aa, cluster identity 4711 [ 203.294974][ T7514] tipc: New replicast peer: 172.20.20.187 [ 203.300778][ T7514] tipc: Enabled bearer , priority 10 [ 203.378546][ T7520] overlayfs: failed to set xattr on upper [ 203.384218][ T7520] overlayfs: ...falling back to index=off,metacopy=off. [ 203.587538][ T7540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.600284][ T7540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.623745][ T4378] tipc: Node number set to 2886997162 [ 203.729224][ T7554] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 203.835562][ T7567] overlayfs: failed to set xattr on upper [ 203.836699][ T7567] overlayfs: ...falling back to index=off,metacopy=off. [ 204.025961][ T7588] gadgetfs: bound to dummy_udc driver [ 204.116525][ T7596] overlayfs: failed to set xattr on upper [ 204.117787][ T7596] overlayfs: ...falling back to index=off,metacopy=off. [ 204.293814][ T4378] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 204.295459][ C0] gadgetfs: connected [ 204.296583][ T7587] gadgetfs: suspended from state 3 [ 204.297589][ T7587] gadgetfs: disconnected [ 204.360318][ T22] tipc: Node number set to 2886997162 [ 204.365059][ T4334] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 204.833079][ T4334] Bluetooth: hci3: unexpected event for opcode 0x204e [ 204.864768][ T7651] gadgetfs: bound to dummy_udc driver [ 204.873223][ T7649] device bond_slave_0 entered promiscuous mode [ 204.874490][ T7649] device bond_slave_1 entered promiscuous mode [ 204.878890][ T7649] device vlan2 entered promiscuous mode [ 204.879869][ T7649] device bond0 entered promiscuous mode [ 205.127891][ T7653] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 205.296123][ C0] gadgetfs: connected [ 205.299596][ T4378] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 205.301208][ T4378] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 205.301219][ T4378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.310078][ C0] gadgetfs: configuration #1 [ 205.314836][ T7650] gadgetfs: suspended from state 3 [ 205.319057][ T4378] usb 1-1: can't set config #1, error -71 [ 205.320220][ T7650] gadgetfs: disconnected [ 205.329282][ T4378] usb 1-1: USB disconnect, device number 6 [ 205.531570][ T7684] gadgetfs: bound to dummy_udc driver [ 205.608579][ T7686] binder: 7685:7686 tried to acquire reference to desc 0, got 1 instead [ 205.612987][ T7686] binder: 7685:7686 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 205.616108][ T7686] binder: 7686 RLIMIT_NICE not set [ 205.617163][ T7686] binder: 7686 RLIMIT_NICE not set [ 205.618793][ T7686] binder: 7685:7686 got reply transaction with bad transaction stack, transaction 61 has target 7685:7686 [ 205.621128][ T7686] binder: 7685:7686 transaction reply to 0:0 failed 62/29201/-71, size 0-0 line 2978 [ 205.626857][ T112] binder: release 7685:7686 transaction 61 out, still active [ 205.628337][ T112] binder: undelivered TRANSACTION_COMPLETE [ 205.629336][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 205.637396][ T1968] binder: release 7685:7686 transaction 61 in, still active [ 205.638681][ T1968] binder: send failed reply for transaction 61, target dead [ 205.834832][ T7643] ceph: No mds server is up or the cluster is laggy [ 205.883732][ T4378] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 205.885503][ C0] gadgetfs: connected [ 205.886587][ T7683] gadgetfs: suspended from state 3 [ 205.887557][ T7683] gadgetfs: disconnected [ 205.961537][ T4334] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 206.039038][ T27] kauditd_printk_skb: 203 callbacks suppressed [ 206.039050][ T27] audit: type=1326 audit(206.030:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7641 comm="syz.0.1004" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 206.048533][ T7717] binder: 7716:7717 tried to acquire reference to desc 0, got 1 instead [ 206.051892][ T7717] binder: 7716:7717 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 206.055044][ T7717] binder: 7717 RLIMIT_NICE not set [ 206.055981][ T7717] binder: 7717 RLIMIT_NICE not set [ 206.057300][ T7717] binder: 7716:7717 got reply transaction with bad transaction stack, transaction 67 has target 7716:7717 [ 206.059296][ T7717] binder: 7716:7717 transaction reply to 0:0 failed 68/29201/-71, size 0-0 line 2978 [ 206.061668][ T112] binder: release 7716:7717 transaction 67 out, still active [ 206.062892][ T112] binder: undelivered TRANSACTION_COMPLETE [ 206.064317][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.068271][ T7720] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1033'. [ 206.460656][ T7739] overlayfs: failed to set xattr on upper [ 206.461940][ T7739] overlayfs: ...falling back to index=off,metacopy=off. [ 206.463486][ T7739] overlayfs: overlapping lowerdir path [ 206.598290][ T7749] tipc: New replicast peer: 172.20.20.187 [ 206.600201][ T7749] tipc: Enabled bearer , priority 10 [ 206.762062][ T7770] overlayfs: failed to set xattr on upper [ 206.763255][ T7770] overlayfs: ...falling back to index=off,metacopy=off. [ 206.768067][ T7770] overlayfs: overlapping lowerdir path [ 206.798023][ T7775] tipc: Enabling of bearer rejected, already enabled [ 206.819362][ T7776] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 206.935791][ T24] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 206.969672][ T4334] Bluetooth: hci2: unexpected event for opcode 0x204e [ 206.986377][ T27] audit: type=1326 audit(206.980:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.3.1065" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 206.990597][ T27] audit: type=1326 audit(206.980:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.3.1065" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 206.998019][ T7801] overlayfs: failed to set xattr on upper [ 206.998966][ T7801] overlayfs: ...falling back to index=off,metacopy=off. [ 207.000242][ T7801] overlayfs: overlapping lowerdir path [ 207.001906][ T27] audit: type=1326 audit(206.990:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.3.1065" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=163 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 207.009758][ T27] audit: type=1326 audit(206.990:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.3.1065" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 207.014104][ T7799] device bond_slave_0 entered promiscuous mode [ 207.015344][ T7799] device bond_slave_1 entered promiscuous mode [ 207.016806][ T7799] device vlan3 entered promiscuous mode [ 207.017828][ T7799] device bond0 entered promiscuous mode [ 207.022926][ T27] audit: type=1326 audit(206.990:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.3.1065" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 207.028169][ T27] audit: type=1326 audit(206.990:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.3.1065" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 207.033084][ T27] audit: type=1326 audit(206.990:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.3.1065" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 207.038051][ T27] audit: type=1326 audit(206.990:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.3.1065" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 207.042452][ T27] audit: type=1326 audit(206.990:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7785 comm="syz.3.1065" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 207.098546][ T7811] tipc: Enabling of bearer rejected, already enabled [ 207.143077][ T7815] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 207.177576][ T7818] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1070'. [ 207.281000][ T7828] overlayfs: failed to set xattr on upper [ 207.282287][ T7828] overlayfs: ...falling back to index=off,metacopy=off. [ 207.287049][ T7828] overlayfs: failed to resolve './file1/file0': -2 [ 207.329889][ T7832] gadgetfs: bound to dummy_udc driver [ 207.376624][ T7838] tipc: Enabling of bearer rejected, already enabled [ 207.467190][ T7846] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 207.572962][ T4334] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 207.593976][ T4378] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 207.595493][ C0] gadgetfs: connected [ 207.596497][ T4378] gadgetfs: disconnected [ 207.966650][ T4374] tipc: Node number set to 1486169505 [ 207.994551][ T7787] ceph: No mds server is up or the cluster is laggy [ 208.010214][ T7863] overlayfs: failed to set xattr on upper [ 208.011359][ T7863] overlayfs: ...falling back to index=off,metacopy=off. [ 208.012718][ T7863] overlayfs: failed to resolve './file1/file0': -2 [ 208.071861][ T7874] tipc: Enabling of bearer rejected, already enabled [ 208.132028][ T7881] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.146166][ T7884] gadgetfs: bound to dummy_udc driver [ 208.261777][ T7897] overlayfs: failed to set xattr on upper [ 208.263128][ T7897] overlayfs: ...falling back to index=off,metacopy=off. [ 208.266151][ T7897] overlayfs: failed to resolve './file1/file0': -2 [ 208.299904][ T7901] device syzkaller0 entered promiscuous mode [ 208.393633][ C1] net_ratelimit: 39 callbacks suppressed [ 208.524090][ C0] gadgetfs: connected [ 208.525252][ T7883] gadgetfs: suspended from state 3 [ 208.526300][ T7883] gadgetfs: disconnected [ 208.530023][ T4378] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 208.531373][ T4378] usb 1-1: can't read configurations, error -71 [ 208.599680][ T7914] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 208.612274][ T4334] Bluetooth: hci2: unexpected cc 0x2003 length: 0 < 9 [ 208.613494][ T4334] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 208.789851][ T7930] device syzkaller0 entered promiscuous mode [ 208.882212][ T7940] gadgetfs: bound to dummy_udc driver [ 208.997431][ T1968] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 209.030907][ T4334] Bluetooth: hci1: unexpected event for opcode 0x204e [ 209.099969][ T7961] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 209.203706][ T4378] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 209.205296][ C0] gadgetfs: connected [ 209.206238][ T4378] gadgetfs: disconnected [ 209.316493][ T4334] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 209.775092][ T7945] ceph: No mds server is up or the cluster is laggy [ 209.940250][ T7988] gadgetfs: bound to dummy_udc driver [ 210.074936][ T7952] ceph: No mds server is up or the cluster is laggy [ 210.393909][ C0] gadgetfs: connected [ 210.395172][ T7987] gadgetfs: suspended from state 3 [ 210.396133][ T7987] gadgetfs: disconnected [ 210.401932][ T4378] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 210.403378][ T4378] usb 1-1: can't read configurations, error -71 [ 210.405671][ T4378] usb usb1-port1: attempt power cycle [ 210.441469][ T8000] device syzkaller0 entered promiscuous mode [ 210.459664][ T4334] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 210.756373][ T4334] Bluetooth: hci2: unexpected event for opcode 0x204e [ 211.077467][ T8027] gadgetfs: bound to dummy_udc driver [ 211.436502][ T8011] ceph: No mds server is up or the cluster is laggy [ 211.556042][ T27] kauditd_printk_skb: 38 callbacks suppressed [ 211.556049][ T27] audit: type=1326 audit(211.550:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8018 comm="syz.3.1161" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 211.587212][ T4378] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 211.623070][ C0] gadgetfs: connected [ 211.628172][ T8026] gadgetfs: suspended from state 3 [ 211.629179][ T8026] gadgetfs: disconnected [ 211.658595][ T4378] usb 1-1: device descriptor read/all, error -71 [ 211.752888][ T4334] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 211.758216][ T8019] ceph: No mds server is up or the cluster is laggy [ 211.810560][ T8044] device syzkaller0 entered promiscuous mode [ 212.389237][ T8068] gadgetfs: bound to dummy_udc driver [ 212.823675][ T4378] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 212.855334][ C0] gadgetfs: connected [ 212.856525][ T8067] gadgetfs: suspended from state 3 [ 212.857493][ T8067] gadgetfs: disconnected [ 212.872682][ T4378] usb 1-1: device descriptor read/all, error -71 [ 212.876629][ T4378] usb usb1-port1: unable to enumerate USB device [ 213.017549][ T8083] device syzkaller0 entered promiscuous mode [ 213.039694][ T4334] Bluetooth: hci2: unexpected event for opcode 0x204e [ 213.044698][ T27] audit: type=1326 audit(213.040:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.1186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 213.048818][ T27] audit: type=1326 audit(213.040:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.1186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=163 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 213.052785][ T27] audit: type=1326 audit(213.040:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.1186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 213.059652][ T27] audit: type=1326 audit(213.040:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.1186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 213.072060][ T27] audit: type=1326 audit(213.040:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.1186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 213.077141][ T27] audit: type=1326 audit(213.040:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.1186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 213.082336][ T27] audit: type=1326 audit(213.040:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.1186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 213.091159][ T27] audit: type=1326 audit(213.040:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.1186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 213.104529][ T4334] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 213.230022][ T8070] ceph: No mds server is up or the cluster is laggy [ 213.247836][ T8103] gadgetfs: bound to dummy_udc driver [ 213.523709][ T1968] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 213.527860][ C1] gadgetfs: connected [ 213.529495][ T8102] gadgetfs: suspended from state 3 [ 213.532699][ T8102] gadgetfs: disconnected [ 213.593634][ C1] net_ratelimit: 29 callbacks suppressed [ 213.652065][ T8119] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(1701064494.118.0), cmd(6) [ 214.083770][ T8085] ceph: No mds server is up or the cluster is laggy [ 214.145471][ T27] audit: type=1326 audit(214.140:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8084 comm="syz.3.1186" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 214.412071][ T8121] device syzkaller0 entered promiscuous mode [ 214.422584][ T8149] gadgetfs: bound to dummy_udc driver [ 214.439276][ T8150] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(1701064494.118.0), cmd(6) [ 214.478561][ T4334] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 214.728841][ T4334] Bluetooth: hci1: unexpected event for opcode 0x204e [ 214.833672][ T1968] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 214.835382][ C1] gadgetfs: connected [ 214.836853][ T1968] gadgetfs: disconnected [ 215.492752][ T8165] ceph: No mds server is up or the cluster is laggy [ 215.500005][ T8187] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(1701064494.118.0), cmd(6) [ 215.594858][ T8193] device syzkaller0 entered promiscuous mode [ 215.647282][ T8204] gadgetfs: bound to dummy_udc driver [ 215.669967][ T4334] Bluetooth: hci2: unexpected event for opcode 0x006e [ 215.753774][ T8173] ceph: No mds server is up or the cluster is laggy [ 215.931427][ T8216] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(1701064494.118.0), cmd(3) [ 215.934872][ T8216] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 216.024112][ C1] gadgetfs: connected [ 216.025898][ T8203] gadgetfs: suspended from state 3 [ 216.026781][ T8203] gadgetfs: disconnected [ 216.028320][ T1968] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 216.029631][ T1968] usb 1-1: can't read configurations, error -71 [ 216.112194][ T8236] device syzkaller0 entered promiscuous mode [ 216.158651][ T8240] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(1701064494.118.0), cmd(3) [ 216.161013][ T8240] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 216.425723][ T4334] Bluetooth: hci1: unexpected event for opcode 0x204e [ 216.497706][ T8265] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(1701064494.118.0), cmd(3) [ 216.500125][ T8265] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 216.613329][ T8275] device syzkaller0 entered promiscuous mode [ 216.852628][ T8224] ceph: No mds server is up or the cluster is laggy [ 216.986686][ T4334] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 217.000201][ T8291] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 217.001937][ T8291] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 217.112963][ T8300] device syzkaller0 entered promiscuous mode [ 217.124254][ T4334] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 217.126058][ T4334] Bluetooth: hci3: Injecting HCI hardware error event [ 217.132322][ T4334] Bluetooth: hci3: hardware error 0x00 [ 217.227000][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 217.227010][ T27] audit: type=1326 audit(217.220:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8253 comm="syz.4.1252" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff925788e8 code=0x7ffc0000 [ 217.347629][ T8310] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967286. macoff=82 [ 217.434192][ T8254] ceph: No mds server is up or the cluster is laggy [ 217.518547][ T8317] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 217.520712][ T8317] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 217.578702][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'. [ 217.949111][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'. [ 217.987403][ T8304] ceph: No mds server is up or the cluster is laggy [ 218.036674][ T8336] device syzkaller0 entered promiscuous mode [ 218.318799][ T8357] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 218.347408][ T8357] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 218.413220][ T48] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 218.633638][ C1] net_ratelimit: 37 callbacks suppressed [ 218.750488][ T48] Bluetooth: hci2: unexpected event for opcode 0x204e [ 218.758132][ T27] audit: type=1326 audit(218.750:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.3.1293" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 218.761963][ T27] audit: type=1326 audit(218.750:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.3.1293" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff96d788e8 code=0x7ffc0000 [ 218.881275][ T8386] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1300'. [ 218.890443][ T8387] device syzkaller0 entered promiscuous mode [ 218.930708][ T48] Bluetooth: hci3: unexpected event for opcode 0x204e [ 218.933690][ T27] audit: type=1326 audit(218.920:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.1299" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 218.938801][ T27] audit: type=1326 audit(218.930:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.1299" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 218.943559][ T27] audit: type=1326 audit(218.930:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.1299" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=163 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 218.948681][ T27] audit: type=1326 audit(218.930:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.1299" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 218.953532][ T27] audit: type=1326 audit(218.930:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.1299" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 218.958221][ T27] audit: type=1326 audit(218.930:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.1299" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 218.965138][ T27] audit: type=1326 audit(218.930:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.0.1299" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 219.028140][ T8386] netlink: 'syz.1.1300': attribute type 39 has an invalid length. [ 219.092814][ T8395] device-mapper: ioctl: name not supplied when creating device [ 219.152907][ T8399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.156457][ T8399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.170534][ T8399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.175475][ T8399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.193750][ T4334] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 219.209110][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.210475][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.212596][ T8391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.222447][ T8391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.657099][ T8449] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 219.659636][ T8449] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 219.743919][ T4334] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 219.843978][ T8365] ceph: No mds server is up or the cluster is laggy [ 219.914126][ T8383] ceph: No mds server is up or the cluster is laggy [ 219.975416][ T8495] device syzkaller0 entered promiscuous mode [ 219.975622][ T8497] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 219.979184][ T8497] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 220.107717][ T8515] tipc: Enabling of bearer rejected, already enabled [ 220.150770][ T8523] ksmbd: Unknown IPC event: 4, ignore. [ 220.161356][ T8527] binder_user_error: 16 callbacks suppressed [ 220.161366][ T8527] binder: 8525:8527 tried to acquire reference to desc 0, got 1 instead [ 220.166153][ T8527] binder: 8525:8527 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 220.168293][ T8527] binder: 8527 RLIMIT_NICE not set [ 220.169290][ T8527] binder: 8527 RLIMIT_NICE not set [ 220.170296][ T8527] binder: 8527 RLIMIT_NICE not set [ 220.171131][ T8527] binder_alloc: 8525: binder_alloc_buf, no vma [ 220.172160][ T8527] binder_debug: 22 callbacks suppressed [ 220.172174][ T8527] binder: cannot allocate buffer: vma cleared, target dead or dying [ 220.173121][ T8527] binder: 8525:8527 transaction reply to 8525:8527 failed 95/29189/-3, size 0-0 line 3247 [ 220.177016][ T8527] binder: send failed reply for transaction 94 to 8525:8527 [ 220.179422][ T7] binder: undelivered TRANSACTION_COMPLETE [ 220.180454][ T7] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.207557][ T7] binder: undelivered TRANSACTION_ERROR: 29190 [ 220.226919][ T8532] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 220.230867][ T8532] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 220.305050][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'. [ 220.338592][ T4334] Bluetooth: hci4: unexpected event for opcode 0x204e [ 221.353963][ T8540] ceph: No mds server is up or the cluster is laggy [ 221.632879][ T8564] raw_sendmsg: syz.2.1344 forgot to set AF_INET. Fix it! [ 221.733892][ T48] Bluetooth: hci4: unexpected event for opcode 0x204e [ 222.473746][ T4334] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 222.506879][ T8574] device-mapper: ioctl: name not supplied when creating device [ 222.713992][ T8568] ceph: No mds server is up or the cluster is laggy [ 223.753624][ C1] net_ratelimit: 36 callbacks suppressed [ 228.953687][ T39] net_ratelimit: 26 callbacks suppressed [ 231.197125][ T8552] tipc: Enabling of bearer rejected, already enabled [ 231.208530][ T8571] device vlan2 entered promiscuous mode [ 231.259872][ T8584] binder: 8583:8584 tried to acquire reference to desc 0, got 1 instead [ 231.262034][ T8584] binder: 8583:8584 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 231.264462][ T8584] binder: 8584 RLIMIT_NICE not set [ 231.316445][ T8598] binder: 8583:8598 got reply transaction with no transaction stack [ 231.318046][ T8598] binder: 8583:8598 transaction reply to 0:0 failed 101/29201/-71, size 0-0 line 2963 [ 231.357097][ T8604] device-mapper: ioctl: name not supplied when creating device [ 231.360587][ T4334] Bluetooth: hci1: unexpected event for opcode 0x204e [ 231.400141][ T8607] tipc: Enabling of bearer rejected, already enabled [ 231.500299][ T4334] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 231.590948][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 231.590957][ T27] audit: type=1326 audit(231.580:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.1.1362" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 231.598991][ T27] audit: type=1326 audit(231.590:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.1.1362" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=163 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 231.610711][ T27] audit: type=1326 audit(231.590:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.1.1362" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 231.620471][ T27] audit: type=1326 audit(231.590:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.1.1362" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 231.631380][ T27] audit: type=1326 audit(231.590:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.1.1362" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 231.647298][ T27] audit: type=1326 audit(231.590:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.1.1362" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 231.658502][ T27] audit: type=1326 audit(231.590:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.1.1362" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 231.671685][ T27] audit: type=1326 audit(231.590:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.1.1362" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 231.681514][ T27] audit: type=1326 audit(231.590:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.1.1362" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 231.689345][ T27] audit: type=1326 audit(231.590:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8624 comm="syz.1.1362" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffff9ed788e8 code=0x7ffc0000 [ 232.032949][ T8646] device syzkaller0 entered promiscuous mode [ 232.093779][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 232.256878][ T8653] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1366'. [ 232.379999][ T8655] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1366'. [ 232.393801][ T8591] ceph: No mds server is up or the cluster is laggy [ 232.563921][ T8625] ceph: No mds server is up or the cluster is laggy [ 232.677170][ T8659] gadgetfs: bound to dummy_udc driver [ 232.943710][ T1968] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 232.945486][ C1] gadgetfs: connected [ 232.947374][ T1968] gadgetfs: disconnected [ 233.993638][ C1] net_ratelimit: 28 callbacks suppressed [ 239.043659][ C1] net_ratelimit: 23 callbacks suppressed [ 243.099648][ T8669] tipc: Enabling of bearer rejected, already enabled [ 243.118641][ T8681] binder: 8680:8681 tried to acquire reference to desc 0, got 1 instead [ 243.120737][ T8681] binder: 8680:8681 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 243.122755][ T8681] binder: 8681 RLIMIT_NICE not set [ 243.138022][ T8672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 243.172250][ T8689] binder: 8680:8689 got reply transaction with no transaction stack [ 243.176470][ T8689] binder: 8680:8689 transaction reply to 0:0 failed 106/29201/-71, size 0-0 line 2963 [ 243.248681][ T4334] Bluetooth: hci2: unexpected event for opcode 0x204e [ 243.550039][ T8698] device syzkaller0 entered promiscuous mode [ 243.949136][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.065788][ T8756] gadgetfs: bound to dummy_udc driver [ 244.233844][ T8693] ceph: No mds server is up or the cluster is laggy [ 244.235419][ T4381] net_ratelimit: 32 callbacks suppressed [ 244.343747][ T24] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 244.343934][ C1] gadgetfs: connected [ 244.344128][ T24] gadgetfs: disconnected [ 245.016714][ T48] Bluetooth: hci4: unexpected event for opcode 0x204e [ 245.020010][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 245.020023][ T27] audit: type=1326 audit(245.010:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.1389" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa1788e8 code=0x7ffc0000 [ 245.028101][ T27] audit: type=1326 audit(245.010:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.1389" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa1788e8 code=0x7ffc0000 [ 245.032796][ T27] audit: type=1326 audit(245.020:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.1389" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=163 compat=0 ip=0xffffaa1788e8 code=0x7ffc0000 [ 245.037713][ T27] audit: type=1326 audit(245.020:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.1389" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa1788e8 code=0x7ffc0000 [ 245.042540][ T27] audit: type=1326 audit(245.020:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.1389" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa1788e8 code=0x7ffc0000 [ 245.047822][ T27] audit: type=1326 audit(245.020:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.1389" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=427 compat=0 ip=0xffffaa1788e8 code=0x7ffc0000 [ 245.052467][ T27] audit: type=1326 audit(245.020:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.1389" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa1788e8 code=0x7ffc0000 [ 245.057803][ T27] audit: type=1326 audit(245.020:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.1389" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa1788e8 code=0x7ffc0000 [ 245.062180][ T27] audit: type=1326 audit(245.020:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.1389" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffaa1788e8 code=0x7ffc0000 [ 245.066569][ T27] audit: type=1326 audit(245.020:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8800 comm="syz.2.1389" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa1788e8 code=0x7ffc0000 [ 245.993765][ T8801] ceph: No mds server is up or the cluster is laggy [ 246.083875][ T4334] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 246.083878][ T48] Bluetooth: hci5: command 0x1003 tx timeout [ 246.483830][ T8784] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 246.722769][ T8816] binder: 8815:8816 tried to acquire reference to desc 0, got 1 instead [ 246.731601][ T8816] binder: 8815:8816 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 246.739799][ T8816] binder: 8816 RLIMIT_NICE not set [ 246.782396][ T8817] binder: 8815:8817 got reply transaction with no transaction stack [ 246.784889][ T8817] binder: 8815:8817 transaction reply to 0:0 failed 111/29201/-71, size 0-0 line 2963 [ 247.108858][ T8819] gadgetfs: bound to dummy_udc driver [ 247.373679][ T1968] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 247.375304][ C1] gadgetfs: connected [ 247.376078][ T1968] gadgetfs: disconnected [ 247.553288][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.624701][ T4334] Bluetooth: hci4: unexpected event for opcode 0x204e [ 248.633868][ T8826] ceph: No mds server is up or the cluster is laggy [ 248.793967][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.795196][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.950661][ T8834] FAULT_INJECTION: forcing a failure. [ 248.950661][ T8834] name failslab, interval 1, probability 0, space 0, times 0 [ 248.953099][ T8834] CPU: 0 PID: 8834 Comm: syz.2.1398 Not tainted syzkaller #0 [ 248.954629][ T8834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 248.956663][ T8834] Call trace: [ 248.957336][ T8834] dump_backtrace+0x1c4/0x1f0 [ 248.958231][ T8834] show_stack+0x2c/0x3c [ 248.959033][ T8834] __dump_stack+0x30/0x40 [ 248.959874][ T8834] dump_stack_lvl+0xf4/0x15c [ 248.960723][ T8834] dump_stack+0x1c/0x5c [ 248.961491][ T8834] should_fail_ex+0x3cc/0x524 [ 248.962345][ T8834] __should_failslab+0xc0/0x11c [ 248.963245][ T8834] should_failslab+0x10/0x28 [ 248.964088][ T8834] slab_pre_alloc_hook+0x6c/0x31c [ 248.965030][ T8834] kmem_cache_alloc_lru+0x60/0x284 [ 248.966007][ T8834] __d_alloc+0x40/0x68c [ 248.966810][ T8834] d_alloc_pseudo+0x28/0x8c [ 248.967689][ T8834] alloc_file_pseudo+0xd8/0x1f4 [ 248.968626][ T8834] sock_alloc_file+0xb4/0x234 [ 248.969500][ T8834] __sys_socket+0x138/0x1b0 [ 248.970359][ T8834] __arm64_sys_socket+0x7c/0x94 [ 248.971242][ T8834] invoke_syscall+0x98/0x290 [ 248.972089][ T8834] el0_svc_common+0x13c/0x258 [ 248.972938][ T8834] do_el0_svc+0x5c/0x134 [ 248.973691][ T8834] el0_svc+0x58/0x12c [ 248.974416][ T8834] el0t_64_sync_handler+0x84/0xf0 [ 248.975344][ T8834] el0t_64_sync+0x18c/0x190 [ 249.353637][ C1] net_ratelimit: 27 callbacks suppressed [ 254.420053][ T22] net_ratelimit: 25 callbacks suppressed [ 255.366427][ T8797] tipc: Enabling of bearer rejected, already enabled [ 255.435456][ T8849] gadgetfs: bound to dummy_udc driver [ 255.472682][ T8856] binder: 8855:8856 tried to acquire reference to desc 0, got 1 instead [ 255.475837][ T8856] binder: 8855:8856 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 255.477829][ T8856] binder: 8856 RLIMIT_NICE not set [ 255.477857][ T8856] binder: 8856 RLIMIT_NICE not set [ 255.479305][ T8856] binder: 8855:8856 got reply transaction with bad transaction stack, transaction 116 has target 8855:8856 [ 255.481644][ T8856] binder: 8855:8856 transaction reply to 0:0 failed 117/29201/-71, size 0-0 line 2978 [ 255.484913][ T22] binder: release 8855:8856 transaction 116 out, still active [ 255.486231][ T22] binder: undelivered TRANSACTION_COMPLETE [ 255.487428][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 255.498396][ T22] binder: release 8855:8856 transaction 116 in, still active [ 255.499893][ T22] binder: send failed reply for transaction 116, target dead [ 255.545746][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 255.545755][ T27] audit: type=1326 audit(255.540:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.0.1407" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 255.553563][ T27] audit: type=1326 audit(255.540:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.0.1407" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=163 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 255.564362][ T27] audit: type=1326 audit(255.540:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.0.1407" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 255.571869][ T27] audit: type=1326 audit(255.540:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.0.1407" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=209 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 255.575024][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1411'. [ 255.588495][ T27] audit: type=1326 audit(255.540:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.0.1407" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 255.592928][ T27] audit: type=1326 audit(255.540:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.0.1407" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 255.601018][ T27] audit: type=1326 audit(255.540:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.0.1407" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 255.607395][ T4334] Bluetooth: hci4: unexpected event for opcode 0x204e [ 255.615706][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1411'. [ 255.643770][ T8877] tipc: Enabling of bearer rejected, already enabled [ 255.703793][ T1968] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 255.705859][ C1] gadgetfs: connected [ 255.710222][ T8848] gadgetfs: suspended from state 3 [ 255.711163][ T8848] gadgetfs: disconnected [ 255.869585][ T8897] binder: 8896:8897 tried to acquire reference to desc 0, got 1 instead [ 255.871916][ T8897] binder: 8896:8897 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 255.874997][ T8897] binder: 8897 RLIMIT_NICE not set [ 255.875871][ T8897] binder: 8897 RLIMIT_NICE not set [ 255.876860][ T8897] binder: 8896:8897 got reply transaction with bad transaction stack, transaction 122 has target 8896:8897 [ 255.878831][ T8897] binder: 8896:8897 transaction reply to 0:0 failed 123/29201/-71, size 0-0 line 2978 [ 255.881164][ T4374] binder: release 8896:8897 transaction 122 out, still active [ 255.882507][ T4374] binder: undelivered TRANSACTION_COMPLETE [ 255.883519][ T4374] binder: undelivered TRANSACTION_ERROR: 29201 [ 256.553851][ T8858] ceph: No mds server is up or the cluster is laggy [ 256.635001][ T8866] ceph: No mds server is up or the cluster is laggy [ 256.654088][ T27] audit: type=1326 audit(256.650:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8857 comm="syz.0.1407" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbb788e8 code=0x7ffc0000 [ 257.913975][ T8906] ceph: No mds server is up or the cluster is laggy [ 258.272644][ T8920] gadgetfs: bound to dummy_udc driver [ 258.553681][ T4374] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 258.555447][ C0] gadgetfs: connected [ 258.556236][ T4374] gadgetfs: disconnected [ 259.593700][ T11] net_ratelimit: 30 callbacks suppressed [ 264.793794][ T4381] net_ratelimit: 29 callbacks suppressed [ 266.643126][ T8916] tipc: Enabling of bearer rejected, already enabled [ 266.698384][ T8931] binder: 8930:8931 tried to acquire reference to desc 0, got 1 instead [ 266.702324][ T8931] binder: 8930:8931 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 266.718946][ T8931] binder: 8931 RLIMIT_NICE not set [ 266.720043][ T8931] binder: 8931 RLIMIT_NICE not set [ 266.724776][ T8931] binder: 8930:8931 got reply transaction with bad transaction stack, transaction 128 has target 8930:8931 [ 266.726705][ T8931] binder_debug: 2 callbacks suppressed [ 266.726716][ T8931] binder: 8930:8931 transaction reply to 0:0 failed 129/29201/-71, size 0-0 line 2978 [ 266.744734][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1434'. [ 266.752316][ T112] binder: release 8930:8931 transaction 128 out, still active [ 266.767761][ T112] binder: undelivered TRANSACTION_COMPLETE [ 266.768815][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.769943][ T112] binder: release 8930:8931 transaction 128 in, still active [ 266.771256][ T112] binder: send failed reply for transaction 128, target dead [ 266.791162][ T4334] Bluetooth: hci4: unexpected event for opcode 0x204e [ 266.897738][ T4334] Bluetooth: hci1: unexpected event for opcode 0x4ad0 [ 266.948384][ T8963] CUSE: info not properly terminated [ 267.753766][ T8943] ceph: No mds server is up or the cluster is laggy [ 268.292228][ T8982] binder: 8981:8982 got transaction to invalid handle, 1 [ 268.294929][ T8982] binder: 8982:8981 cannot find target node [ 268.296022][ T8982] binder: 8981:8982 transaction call to 0:0 failed 133/29201/-22, size 0-0 line 3062 [ 268.300228][ T8982] binder: 8981:8982 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 268.302575][ T8982] binder: 8982 RLIMIT_NICE not set [ 268.351477][ T8983] binder: 8981:8983 got reply transaction with no transaction stack [ 268.353242][ T8983] binder: 8981:8983 transaction reply to 0:0 failed 134/29201/-71, size 0-0 line 2963 [ 269.122282][ T22] binder: undelivered TRANSACTION_ERROR: 29201 [ 269.923801][ T39] net_ratelimit: 27 callbacks suppressed [ 274.953723][ T39] net_ratelimit: 20 callbacks suppressed [ 278.349183][ T8970] device tunl0 left promiscuous mode [ 278.355339][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 278.356642][ T8970] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 278.413863][ T8973] tipc: Enabling of bearer rejected, already enabled [ 278.576916][ T4334] Bluetooth: hci4: unexpected event for opcode 0x204e [ 279.252056][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1462'. [ 279.347753][ T9058] CIFS: Attempting to mount \\127.0.0.1\test [ 279.493958][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.498149][ T9068] device bridge_slave_0 left promiscuous mode [ 279.499477][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.804178][ T9000] ceph: No mds server is up or the cluster is laggy [ 279.811050][ T9013] ceph: No mds server is up or the cluster is laggy [ 279.952105][ T3901] wiimote 0005:057E:0306.0002: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 279.955979][ T3901] wiimote 0005:057E:0306.0002: New device registered [ 279.958254][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.960283][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.970891][ T9076] wiimote 0005:057E:0306.0002: Unhandled report 32 size 1 [ 279.975628][ T9076] wiimote 0005:057E:0306.0002: Event data for report 0 was too short (2 vs 1) [ 279.981055][ T9075] wiimote 0005:057E:0306.0002: Device removed [ 279.983407][ T9077] fido_id[9077]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 280.153776][ T39] net_ratelimit: 21 callbacks suppressed [ 280.215299][ T9058] CIFS: VFS: Error connecting to socket. Aborting operation. [ 280.216824][ T9058] CIFS: VFS: cifs_mount failed w/return code = -4 [ 280.271472][ T9087] binder: BINDER_SET_CONTEXT_MGR already set [ 280.272796][ T9087] binder: 9086:9087 ioctl 4018620d 20004a80 returned -16 [ 280.275181][ T9087] binder: 9086:9087 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 280.279529][ T9087] binder: 9087 RLIMIT_NICE not set [ 280.326475][ T9092] binder: 9086:9092 got reply transaction with no transaction stack [ 280.328146][ T9092] binder_debug: 1 callbacks suppressed [ 280.328159][ T9092] binder: 9086:9092 transaction reply to 0:0 failed 137/29201/-71, size 0-0 line 2963 [ 280.422133][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.425629][ T9097] device bridge_slave_0 left promiscuous mode [ 280.426824][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.565202][ T9102] FAULT_INJECTION: forcing a failure. [ 280.565202][ T9102] name failslab, interval 1, probability 0, space 0, times 0 [ 280.567467][ T9102] CPU: 0 PID: 9102 Comm: syz.3.1481 Not tainted syzkaller #0 [ 280.568692][ T9102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 280.570584][ T9102] Call trace: [ 280.571194][ T9102] dump_backtrace+0x1c4/0x1f0 [ 280.572042][ T9102] show_stack+0x2c/0x3c [ 280.572823][ T9102] __dump_stack+0x30/0x40 [ 280.573726][ T9102] dump_stack_lvl+0xf4/0x15c [ 280.574574][ T9102] dump_stack+0x1c/0x5c [ 280.575315][ T9102] should_fail_ex+0x3cc/0x524 [ 280.575339][ T9102] __should_failslab+0xc0/0x11c [ 280.576975][ T9102] should_failslab+0x10/0x28 [ 280.576994][ T9102] __kmem_cache_alloc_node+0x7c/0x318 [ 280.578832][ T9102] kmalloc_trace+0x48/0x94 [ 280.578853][ T9102] __hw_addr_add_ex+0x1cc/0x5b0 [ 280.580562][ T9102] dev_mc_add+0x8c/0xf8 [ 280.581323][ T9102] igmp6_group_added+0x1d4/0x538 [ 280.582174][ T9102] __ipv6_dev_mc_inc+0x818/0xa64 [ 280.582191][ T9102] ipv6_dev_mc_inc+0x2c/0x3c [ 280.582200][ T9102] dev_forward_change+0x1a0/0x840 [ 280.583762][ T9102] addrconf_sysctl_forward+0x514/0x6f8 [ 280.583779][ T9102] proc_sys_call_handler+0x3f8/0x69c [ 280.583788][ T9102] proc_sys_write+0x2c/0x3c [ 280.585548][ T9102] vfs_write+0x3c8/0x7c8 [ 280.587263][ T9102] ksys_write+0x12c/0x228 [ 280.588683][ T9102] __arm64_sys_write+0x7c/0x90 [ 280.588696][ T9102] invoke_syscall+0x98/0x290 [ 280.590246][ T9102] el0_svc_common+0x13c/0x258 [ 280.591063][ T9102] do_el0_svc+0x5c/0x134 [ 280.591081][ T9102] el0_svc+0x58/0x12c [ 280.591088][ T9102] el0t_64_sync_handler+0x84/0xf0 [ 280.592515][ T9102] el0t_64_sync+0x18c/0x190 [ 280.690681][ T4334] Bluetooth: hci4: unexpected event for opcode 0x204e [ 281.033743][ T3901] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 281.037889][ T3901] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input6 [ 281.040817][ T3901] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input7 [ 281.043879][ T3901] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input5 [ 281.103755][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 281.299971][ T9138] CIFS: Attempting to mount \\127.0.0.1\test [ 281.763808][ T9104] ceph: No mds server is up or the cluster is laggy [ 282.093821][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.095972][ T9162] device bridge_slave_0 left promiscuous mode [ 282.097165][ T9162] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.176268][ T9164] binder: BINDER_SET_CONTEXT_MGR already set [ 282.177441][ T9164] binder: 9163:9164 ioctl 4018620d 20004a80 returned -16 [ 282.179069][ T9164] binder: 9163:9164 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 282.181740][ T9164] binder: 9164 RLIMIT_NICE not set [ 282.184618][ T9138] CIFS: VFS: Error connecting to socket. Aborting operation. [ 282.185980][ T9138] CIFS: VFS: cifs_mount failed w/return code = -4 [ 282.230923][ T9168] binder: 9163:9168 got reply transaction with no transaction stack [ 282.232484][ T9168] binder: 9163:9168 transaction reply to 0:0 failed 140/29201/-71, size 0-0 line 2963 [ 282.314434][ T9126] ceph: No mds server is up or the cluster is laggy [ 282.997787][ T112] binder: undelivered TRANSACTION_ERROR: 29201 [ 283.065740][ T9220] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.068398][ T9220] device bridge_slave_0 left promiscuous mode [ 283.069597][ T9220] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.070991][ T9220] Unable to handle kernel paging request at virtual address fbd5200000000024 [ 283.072499][ T9220] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 283.077576][ T9220] Mem abort info: [ 283.078303][ T9220] ESR = 0x0000000096000004 [ 283.079306][ T9220] EC = 0x25: DABT (current EL), IL = 32 bits [ 283.080588][ T9220] SET = 0, FnV = 0 [ 283.081298][ T9220] EA = 0, S1PTW = 0 [ 283.082181][ T9220] FSC = 0x04: level 0 translation fault [ 283.083199][ T9220] Data abort info: [ 283.084951][ T9220] ISV = 0, ISS = 0x00000004 [ 283.085822][ T9220] CM = 0, WnR = 0 [ 283.086493][ T9220] [fbd5200000000024] address between user and kernel address ranges [ 283.088092][ T9220] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP [ 283.089189][ T9171] kcov: kcov_task_exit: t = ffff0000fe560000, kcov->t = ffff0000fe560000 [ 283.089258][ T9220] Modules linked in: [ 283.090852][ T9176] kcov: kcov_task_exit: t = ffff0000fe563800, kcov->t = ffff0000fe563800 [ 283.091276][ T9220] CPU: 0 PID: 9220 Comm: syz.1.1505 Not tainted syzkaller #0 [ 283.094002][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 283.095782][ T9220] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 283.097182][ T9220] pc : br_del_frame+0xcc/0x158 [ 283.098075][ T9220] lr : br_del_frame+0x2c/0x158 [ 283.098933][ T9220] sp : ffff800022786ab0 [ 283.099677][ T9220] x29: ffff800022786ab0 x28: 1fffe0001a8d8000 x27: dfff800000000000 [ 283.101151][ T9220] x26: dead000000000122 x25: dfff800000000000 x24: 1fffe000197ec381 [ 283.102602][ T9220] x23: 1ffff00002c87853 x22: dfff800000000000 x21: 0000000000000000 [ 283.104042][ T9220] x20: ffff80001643c298 x19: dead000000000122 x18: 1fffe00033c1c97e [ 283.105505][ T9220] x17: ffff80001641d000 x16: ffff8000082dd38c x15: 0000000000000000 [ 283.106993][ T9220] x14: 0000000000000001 x13: 1fffe00033c1caa8 x12: 0000000000080000 [ 283.108509][ T9220] x11: 000000000002bd26 x10: ffff80002398c000 x9 : ffff800010b9bca8 [ 283.110051][ T9220] x8 : 1bd5a00000000024 x7 : ffff800008363570 x6 : 0000000000000000 [ 283.111491][ T9220] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 283.112976][ T9220] x2 : 0000000000000006 x1 : ffff80001643c280 x0 : ffff0000ce31cc80 [ 283.114399][ T9220] dump_backtrace(regs = 0000000069e7777d tsk = 0000000000000000) [ 283.116080][ T9220] Call trace: [ 283.116714][ T9220] br_del_frame+0xcc/0x158 [ 283.117543][ T9220] mep_delete_implementation+0x268/0x2b4 [ 283.118599][ T9220] br_cfm_port_del+0x108/0x1bc [ 283.119524][ T9220] del_nbp+0x154/0x910 [ 283.120289][ T9220] br_del_if+0x154/0x32c [ 283.121101][ T9220] br_del_slave+0x28/0x38 [ 283.121913][ T9220] do_setlink+0xb78/0x2158 [ 283.122743][ T9220] rtnl_setlink+0x314/0x408 [ 283.123607][ T9220] rtnetlink_rcv_msg+0x694/0xcc4 [ 283.124555][ T9220] netlink_rcv_skb+0x220/0x3ec [ 283.125478][ T9220] rtnetlink_rcv+0x28/0x38 [ 283.126335][ T9220] netlink_unicast+0x5fc/0x80c [ 283.127219][ T9220] netlink_sendmsg+0x6f0/0x9d8 [ 283.128099][ T9220] ____sys_sendmsg+0x588/0x90c [ 283.128977][ T9220] __sys_sendmsg+0x288/0x374 [ 283.129805][ T9220] __arm64_sys_sendmsg+0x80/0x94 [ 283.130674][ T9220] invoke_syscall+0x98/0x290 [ 283.131497][ T9220] el0_svc_common+0x13c/0x258 [ 283.132372][ T9220] do_el0_svc+0x5c/0x134 [ 283.133177][ T9220] el0_svc+0x58/0x12c [ 283.133939][ T9220] el0t_64_sync_handler+0x84/0xf0 [ 283.134874][ T9220] el0t_64_sync+0x18c/0x190 [ 283.135725][ T9220] Code: aa1403e0 97d15db7 f9400293 d343fe68 (38766908) [ 283.136977][ T9220] ---[ end trace 0000000000000000 ]--- [ 283.273667][ C1] nf_conntrack: new packet for 00000000e305e1f3 [ 283.274870][ C1] nf_nat: Already setup manip DST for ct 00000000e305e1f3 (status bits 0x188) [ 283.276476][ C1] nf_nat: Already setup manip SRC for ct 00000000e305e1f3 (status bits 0x188) [ 283.353610][ C1] wireguard: wg0: Handshake for peer 25 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 283.542366][ T9220] Kernel panic - not syncing: Oops: Fatal exception [ 283.543695][ T9220] SMP: stopping secondary CPUs [ 283.544556][ T9220] Kernel Offset: disabled [ 283.545357][ T9220] CPU features: 0x0a0000,000f0097,a65bfea7 [ 283.546420][ T9220] Memory Limit: none [ 283.930050][ T9220] Rebooting in 86400 seconds..