last executing test programs: 1.27462065s ago: executing program 1 (id=1930): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x51, 0x7, 0x2, 0x10208, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x2, @void, @value, @value=r0}, 0x50) 1.251441692s ago: executing program 1 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x9}}, 0xfffd, @val={0x8c, 0x10, {0x283, "726712ea1b02", @short="acf28009ddef7a20"}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, 0x0, 0xc1) 1.184000099s ago: executing program 1 (id=1925): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) 1.183352419s ago: executing program 1 (id=1926): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4c00, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x4000, 0x0, 0x0, @by_dev={r2}, [@integrity={0x0, 0x2000, 0x0, 0x78, 'integrity\x00', {{@ram_num={'1:', 0x1}, 0x20, '1024'}, 0x20, '32', 0x20, 'B', ' 1 journal_mac:hmac(sha256):0123456789abcdef'}}]}) 1.17030935s ago: executing program 4 (id=1928): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000440)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x30, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x2f, 0x0, @private1, @private1}}}}}}}, 0x0) 1.103563627s ago: executing program 4 (id=1933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40, 0x1040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4}]}}}]}, 0x3c}}, 0x0) 1.07880869s ago: executing program 1 (id=1936): socket$netlink(0x10, 0x3, 0x14) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@mask_fadd={0x58, 0x114, 0x8, {{0xe9, 0x2400}, 0x0, 0x0, 0x40, 0x0, 0x80000001, 0x6, 0x13, 0x1}}], 0x58}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f00000001c0), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000300)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463b0a2daf8dd3e66c957e3aef3a4b95f4935d34e1bcbc49fc30eb919f98f0c8eeedbb598bc77f0ea766d13268eb19b0cfd6d9624efc20e49f72912e99e06f832a5d6a336636bcef1293071e0a88f8453d9f9759e0c09e456844131b87ca896fd8a", 0xff69, 0xffffffffffffffff) fanotify_init(0xef0, 0x2) syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 1.016838556s ago: executing program 4 (id=1939): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004a04003c00680000ff069078e0000001000000009402890374830f20ac1414aa7f000001000000004e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="510a0074780080e7418ceb"], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) munmap(&(0x7f0000583000/0x4000)=nil, 0x4000) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, 0x0, &(0x7f0000004240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000004280)={0x3, 0x8, &(0x7f0000004340)=ANY=[], &(0x7f0000005500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f00000004c0)="21000000470010aaaaaaaaaa0000000000000000000000000000000000030000000000000000000000000000000300"/76, 0x4d) 1.016212056s ago: executing program 2 (id=1941): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e0c0405c9"], 0xf) 919.858446ms ago: executing program 0 (id=1945): syz_open_dev$video(&(0x7f00000001c0), 0x0, 0x2) 864.298342ms ago: executing program 3 (id=1946): mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x64}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f00000045c0)=@xdp, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000004700)=""/143, 0x8f}, {&(0x7f00000047c0)=""/104, 0x68}, {&(0x7f0000004840)=""/57, 0x39}, {&(0x7f0000004940)=""/245, 0xf5}, {0x0}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005b80)=""/239, 0xef}, {&(0x7f0000000340)=""/162, 0xa2}], 0x8, &(0x7f0000005c80)=""/42, 0x2a}, 0x6}], 0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000005e80)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) 864.076822ms ago: executing program 0 (id=1947): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4c00, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x4000, 0x0, 0x0, @by_dev={r2}, [@integrity={0x0, 0x2000, 0x0, 0x78, 'integrity\x00', {{@ram_num={'1:', 0x1}, 0x20, '1024'}, 0x20, '32', 0x20, 'B', ' 1 journal_mac:hmac(sha256):0123456789abcdef'}}]}) 572.047041ms ago: executing program 3 (id=1948): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x68, 0x0, 0x1, 0x41f, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0) 548.719304ms ago: executing program 3 (id=1949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'test\x00'}]}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) 531.139206ms ago: executing program 0 (id=1950): r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000002940)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r0, &(0x7f0000002980)='1', 0x1) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000200)='.\x00', 0x0, 0x8000, 0x0) 518.466877ms ago: executing program 3 (id=1951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x40, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x40}}, 0x0) 488.701539ms ago: executing program 0 (id=1952): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) 479.8556ms ago: executing program 0 (id=1953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000906010800000000fcffffff060000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 455.276053ms ago: executing program 3 (id=1954): syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800", @ANYBLOB], 0x0) 455.021763ms ago: executing program 0 (id=1955): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000004c0)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) read$hiddev(r0, &(0x7f0000000d40)=""/117, 0x75) 454.640633ms ago: executing program 3 (id=1956): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000004b40)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000004b80), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004c00)={&(0x7f0000004c40)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x8, @b={0x5d, 0x1, 0x0, 0x1, 0x4, 0x6, 0xd, {}, 0x9, 0x0, 0x49, 0x9e, 0x9d, "e9dcedb93f63f2a28cc58cda83208d98744adf00ad9eafa114cfe81eaaa5766b40a75a00af883fe54588e42b1ebb4448333f4bd65aad4a38a3726bf0d4486dad5c4496f6d09ce250e78327da689ffdb29abbfbb0847c2d808bd10f48560fe6150bbeef969a7d43fa95e88d2696e80188c01730f6c8a2899eca9ff36700000000000000000000000000000000000000000000000000006436de1e268993"}}, 0xad) 147.924474ms ago: executing program 1 (id=1957): r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x81800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000001c0)={0x0, @aes256, 0x0, @desc3}) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000680), 0x8200) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000007c0)={{0x9, 0x7}, {0x34, 0x1}, 0x5, 0x0, 0xeb}) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x20, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) socket$packet(0x11, 0x2, 0x300) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000840)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 98.281659ms ago: executing program 2 (id=1958): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000440)=@gcm_256={{0x303}, "ab4fc659949ab924", "794cc3819b2325af225bcc55d7711a8f3b1123673f4f98d74ebae07697f22c28", "94dbed0a", "7a3ae7b1c7e44fe9"}, 0x38) 97.451539ms ago: executing program 4 (id=1959): mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x64}}, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f00000045c0)=@xdp, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000004700)=""/143, 0x8f}, {&(0x7f00000047c0)=""/104, 0x68}, {&(0x7f0000004840)=""/57, 0x39}, {&(0x7f0000004940)=""/245, 0xf5}, {0x0}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005b80)=""/239, 0xef}, {&(0x7f0000000340)=""/162, 0xa2}], 0x8, &(0x7f0000005c80)=""/42, 0x2a}, 0x6}], 0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000005e80)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x130, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x8000000, 0x0, {[{{@ip={@broadcast, @multicast2, 0xffffff00, 0x0, 'vcan0\x00', 'vlan0\x00', {}, {0xff}, 0x8, 0x2bbe86e5b28b8fc5, 0x30}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4081}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x15, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) 97.272509ms ago: executing program 2 (id=1960): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4c00, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x1b0, 0x138, 0x1, 0x0, 0x4000, 0x0, 0x0, @by_dev={r2}, [@integrity={0x0, 0x2000, 0x0, 0x78, 'integrity\x00', {{@ram_num={'1:', 0x1}, 0x20, '1024'}, 0x20, '32', 0x20, 'B', ' 1 journal_mac:hmac(sha256):0123456789abcdef'}}]}) 68.815922ms ago: executing program 2 (id=1961): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000c40)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000c80)=0x1, 0x4) connect$inet(r0, &(0x7f0000000cc0)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000d00)=0xffffffffffffffff, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x14, 0x0, 0x420, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040084}, 0x40) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000f80)='\x00', 0x1}, {&(0x7f0000000fc0)="cf", 0x1}, {&(0x7f0000001000)="08e0", 0x2}, {&(0x7f0000001040)="8a", 0x1}, {&(0x7f0000001080)="f5fb", 0x2}], 0x5}}, {{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001100)="ce", 0x1}, {&(0x7f0000001140)="f2", 0x1}, {&(0x7f0000001180)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001240)="e1", 0x1}, {&(0x7f0000001280)="fa", 0x1}, {&(0x7f00000012c0)="d8", 0x1}, {&(0x7f0000001300)="f2", 0x1}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000001380)='y', 0x1}, {&(0x7f00000013c0)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001440)="87", 0x1}, {&(0x7f0000001480)="11e0", 0x2}], 0x2}}], 0x4, 0x4000000) 46.158044ms ago: executing program 4 (id=1962): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24000084, &(0x7f0000000540)={0xa, 0x4e20, 0x1, @mcast2, 0x7}, 0x1c) 384.529µs ago: executing program 2 (id=1963): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x6}}], 0x20) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)="a4", 0x1}], 0x1}, 0x8040) 166.66µs ago: executing program 2 (id=1964): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) 0s ago: executing program 4 (id=1965): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1cd) mount(0x0, &(0x7f0000000700)='./nfsd\x00', &(0x7f0000000840)='nfsd\x00', 0x0, 0x0) getxattr(&(0x7f0000000240)='./nfsd/portlist\x00', &(0x7f0000000280)=@known='system.posix_acl_access\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./nfsd/portlist\x00', 0x2, 0x130) write(r0, &(0x7f00000000c0)="746370a52032", 0xb) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000080), 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./nfsd/threads\x00', 0x2, 0x0) write(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 [ 358.693823][ T8826] dump_stack_lvl+0xf4/0x15c [ 358.694748][ T8826] dump_stack+0x1c/0x5c [ 358.695575][ T8826] should_fail_ex+0x3cc/0x524 [ 358.696547][ T8826] __should_failslab+0xc0/0x11c [ 358.697618][ T8826] should_failslab+0x10/0x28 [ 358.698433][ T8826] kmem_cache_alloc+0x88/0x310 [ 358.699447][ T8826] __kernfs_new_node+0xec/0x5fc [ 358.700507][ T8826] kernfs_new_node+0x120/0x230 [ 358.701505][ T8826] kernfs_create_dir_ns+0x58/0x138 [ 358.702649][ T8826] sysfs_create_dir_ns+0x120/0x264 [ 358.703705][ T8826] kobject_add_internal+0x5a8/0xb18 [ 358.704807][ T8826] kobject_add+0x144/0x20c [ 358.705773][ T8826] device_add+0x3dc/0xe4c [ 358.706666][ T8826] rfkill_register+0x140/0x89c [ 358.707723][ T8826] hci_register_dev+0x398/0x898 [ 358.708779][ T8826] vhci_create_device+0x34c/0x684 [ 358.709727][ T8826] vhci_write+0x30c/0x3b4 [ 358.710577][ T8826] vfs_write+0x3c8/0x7c8 [ 358.711372][ T8826] ksys_write+0x12c/0x228 [ 358.712178][ T8826] __arm64_sys_write+0x7c/0x90 [ 358.713049][ T8826] invoke_syscall+0x98/0x290 [ 358.713880][ T8826] el0_svc_common+0x13c/0x258 [ 358.714811][ T8826] do_el0_svc+0x5c/0x134 [ 358.715658][ T8826] el0_svc+0x58/0x12c [ 358.716490][ T8826] el0t_64_sync_handler+0x84/0xf0 [ 358.717495][ T8826] el0t_64_sync+0x18c/0x190 [ 358.718460][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.733428][ T8826] kobject_add_internal failed for rfkill57 (error: -12 parent: hci5) [ 358.733875][ T8822] device syzkaller0 entered promiscuous mode [ 358.867294][ T8833] rxe_eth0 speed is unknown, defaulting to 1000 [ 358.913262][ T8835] rxe_eth0 speed is unknown, defaulting to 1000 [ 359.019492][ T8852] device syzkaller1 entered promiscuous mode [ 359.358621][ T8849] FAULT_INJECTION: forcing a failure. [ 359.358621][ T8849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.361035][ T8849] CPU: 0 PID: 8849 Comm: syz.4.1179 Not tainted syzkaller #0 [ 359.362406][ T8849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 359.364382][ T8849] Call trace: [ 359.365061][ T8849] dump_backtrace+0x1c4/0x1f0 [ 359.366044][ T8849] show_stack+0x2c/0x3c [ 359.366909][ T8849] __dump_stack+0x30/0x40 [ 359.367842][ T8849] dump_stack_lvl+0xf4/0x15c [ 359.368828][ T8849] dump_stack+0x1c/0x5c [ 359.369734][ T8849] should_fail_ex+0x3cc/0x524 [ 359.370774][ T8849] should_fail+0x14/0x24 [ 359.371602][ T8849] should_fail_usercopy+0x20/0x30 [ 359.372579][ T8849] __arm64_sys_rt_sigreturn+0x136c/0x1f7c [ 359.373780][ T8849] invoke_syscall+0x98/0x290 [ 359.374660][ T8849] el0_svc_common+0x13c/0x258 [ 359.375614][ T8849] do_el0_svc+0x5c/0x134 [ 359.376445][ T8849] el0_svc+0x58/0x12c [ 359.377251][ T8849] el0t_64_sync_handler+0x84/0xf0 [ 359.378305][ T8849] el0t_64_sync+0x18c/0x190 [ 359.562110][ T8870] device syzkaller0 entered promiscuous mode [ 360.321209][ T8880] rxe_eth0 speed is unknown, defaulting to 1000 [ 361.047169][ T27] kauditd_printk_skb: 106 callbacks suppressed [ 361.047181][ T27] audit: type=1326 audit(2000000084.745:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.2.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9579728 code=0x7ffc0000 [ 361.053247][ T27] audit: type=1326 audit(2000000084.745:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.2.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa9579728 code=0x7ffc0000 [ 361.057762][ T27] audit: type=1326 audit(2000000084.745:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.2.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa955c5ec code=0x7ffc0000 [ 361.062353][ T27] audit: type=1326 audit(2000000084.745:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.2.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa955c5ec code=0x7ffc0000 [ 361.066845][ T27] audit: type=1326 audit(2000000084.745:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.2.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa955c5ec code=0x7ffc0000 [ 361.069403][ T8894] rxe_eth0 speed is unknown, defaulting to 1000 [ 361.071426][ T27] audit: type=1326 audit(2000000084.755:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.2.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa955c5ec code=0x7ffc0000 [ 361.077728][ T27] audit: type=1326 audit(2000000084.755:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.2.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa955c5ec code=0x7ffc0000 [ 361.082758][ T27] audit: type=1326 audit(2000000084.755:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.2.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa955c5ec code=0x7ffc0000 [ 361.088018][ T27] audit: type=1326 audit(2000000084.755:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.2.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa955c5ec code=0x7ffc0000 [ 361.092881][ T27] audit: type=1326 audit(2000000084.755:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8884 comm="syz.2.1193" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffa955c5ec code=0x7ffc0000 [ 361.114671][ T8896] device syzkaller1 entered promiscuous mode [ 361.257267][ T8902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.259567][ T8902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.678546][ T8908] device syzkaller0 entered promiscuous mode [ 361.869082][ T8912] rxe_eth0 speed is unknown, defaulting to 1000 [ 362.248786][ T8918] rxe_eth0 speed is unknown, defaulting to 1000 [ 362.309378][ T8925] rxe_eth0 speed is unknown, defaulting to 1000 [ 363.433780][ T8941] device syzkaller1 entered promiscuous mode [ 363.450812][ T8945] device syzkaller0 entered promiscuous mode [ 364.007071][ T8964] rxe_eth0 speed is unknown, defaulting to 1000 [ 364.546213][ T8978] rxe_eth0 speed is unknown, defaulting to 1000 [ 365.018599][ T8983] device syzkaller1 entered promiscuous mode [ 365.436879][ T8996] device syzkaller0 entered promiscuous mode [ 365.564351][ T8999] rxe_eth0 speed is unknown, defaulting to 1000 [ 365.705330][ T9005] FAULT_INJECTION: forcing a failure. [ 365.705330][ T9005] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 365.708318][ T9005] CPU: 1 PID: 9005 Comm: syz.4.1238 Not tainted syzkaller #0 [ 365.709905][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 365.711937][ T9005] Call trace: [ 365.712589][ T9005] dump_backtrace+0x1c4/0x1f0 [ 365.713584][ T9005] show_stack+0x2c/0x3c [ 365.714414][ T9005] __dump_stack+0x30/0x40 [ 365.715327][ T9005] dump_stack_lvl+0xf4/0x15c [ 365.716255][ T9005] dump_stack+0x1c/0x5c [ 365.717131][ T9005] should_fail_ex+0x3cc/0x524 [ 365.718087][ T9005] should_fail_alloc_page+0x74/0xb8 [ 365.719024][ T9005] prepare_alloc_pages+0x1b8/0x4f0 [ 365.719943][ T9005] __alloc_pages+0x134/0x544 [ 365.720796][ T9005] __alloc_pages_bulk+0x444/0x83c [ 365.721825][ T9005] kasan_populate_vmalloc+0xc4/0x26c [ 365.722957][ T9005] alloc_vmap_area+0x1584/0x16c4 [ 365.724039][ T9005] __get_vm_area_node+0x178/0x31c [ 365.725052][ T9005] __vmalloc_node_range+0x1d4/0xe70 [ 365.726049][ T9005] __vmalloc+0xa4/0xe0 [ 365.726847][ T9005] bpf_prog_alloc_no_stats+0x4c/0x3cc [ 365.727802][ T9005] bpf_prog_alloc+0x38/0x1dc [ 365.728687][ T9005] bpf_prog_create_from_user+0x9c/0x464 [ 365.729634][ T9005] do_seccomp+0x900/0xea4 [ 365.730402][ T9005] __arm64_sys_seccomp+0x7c/0x90 [ 365.731333][ T9005] invoke_syscall+0x98/0x290 [ 365.732272][ T9005] el0_svc_common+0x13c/0x258 [ 365.733215][ T9005] do_el0_svc+0x5c/0x134 [ 365.734092][ T9005] el0_svc+0x58/0x12c [ 365.734912][ T9005] el0t_64_sync_handler+0x84/0xf0 [ 365.735890][ T9005] el0t_64_sync+0x18c/0x190 [ 365.736735][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.147990][ T9005] syz.4.1238: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0 [ 366.155169][ T9009] rxe_eth0 speed is unknown, defaulting to 1000 [ 366.163286][ T9005] CPU: 1 PID: 9005 Comm: syz.4.1238 Not tainted syzkaller #0 [ 366.164708][ T9005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 366.166651][ T9005] Call trace: [ 366.167239][ T9005] dump_backtrace+0x1c4/0x1f0 [ 366.168203][ T9005] show_stack+0x2c/0x3c [ 366.168978][ T9005] __dump_stack+0x30/0x40 [ 366.169836][ T9005] dump_stack_lvl+0xf4/0x15c [ 366.170765][ T9005] dump_stack+0x1c/0x5c [ 366.171604][ T9005] warn_alloc+0x214/0x324 [ 366.172581][ T9005] __vmalloc_node_range+0x24c/0xe70 [ 366.173790][ T9005] __vmalloc+0xa4/0xe0 [ 366.174722][ T9005] bpf_prog_alloc_no_stats+0x4c/0x3cc [ 366.175931][ T9005] bpf_prog_alloc+0x38/0x1dc [ 366.176877][ T9005] bpf_prog_create_from_user+0x9c/0x464 [ 366.178172][ T9005] do_seccomp+0x900/0xea4 [ 366.179135][ T9005] __arm64_sys_seccomp+0x7c/0x90 [ 366.180204][ T9005] invoke_syscall+0x98/0x290 [ 366.181132][ T9005] el0_svc_common+0x13c/0x258 [ 366.182050][ T9005] do_el0_svc+0x5c/0x134 [ 366.182901][ T9005] el0_svc+0x58/0x12c [ 366.183787][ T9005] el0t_64_sync_handler+0x84/0xf0 [ 366.184797][ T9005] el0t_64_sync+0x18c/0x190 [ 366.195374][ T9005] Mem-Info: [ 366.196042][ T9005] active_anon:6102 inactive_anon:0 isolated_anon:0 [ 366.196042][ T9005] active_file:14801 inactive_file:2168 isolated_file:0 [ 366.196042][ T9005] unevictable:768 dirty:286 writeback:0 [ 366.196042][ T9005] slab_reclaimable:29359 slab_unreclaimable:101204 [ 366.196042][ T9005] mapped:29279 shmem:958 pagetables:711 [ 366.196042][ T9005] sec_pagetables:0 bounce:0 [ 366.196042][ T9005] kernel_misc_reclaimable:0 [ 366.196042][ T9005] free:1415319 free_pcp:762 free_cma:7360 [ 366.205233][ T9005] Node 0 active_anon:24308kB inactive_anon:0kB active_file:59204kB inactive_file:8672kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:117116kB dirty:1144kB writeback:0kB shmem:3832kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:8892kB pagetables:2744kB sec_pagetables:0kB all_unreclaimable? no [ 366.212155][ T9005] Node 0 DMA free:3076864kB boost:0kB min:20720kB low:25900kB high:31080kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 366.218059][ T9005] lowmem_reserve[]: 0 0 3532 3532 3532 [ 366.219331][ T9005] Node 0 Normal free:2584160kB boost:0kB min:24332kB low:30412kB high:36492kB reserved_highatomic:0KB active_anon:24308kB inactive_anon:0kB active_file:59204kB inactive_file:8672kB unevictable:3072kB writepending:1144kB present:5242880kB managed:3620908kB mlocked:0kB bounce:0kB free_pcp:3300kB local_pcp:2212kB free_cma:0kB [ 366.225976][ T9005] lowmem_reserve[]: 0 0 0 0 0 [ 366.226980][ T9005] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 366.229822][ T9005] Node 0 Normal: 765*4kB (UME) 1436*8kB (UME) 389*16kB (UME) 392*32kB (UME) 317*64kB (UME) 91*128kB (UME) 37*256kB (UME) 15*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 609*4096kB (M) = 2584036kB [ 366.234058][ T9005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 366.236091][ T9005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 366.238239][ T9005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 366.240346][ T9005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 366.242389][ T9005] 17929 total pagecache pages [ 366.243291][ T9005] 2 pages in swap cache [ 366.244255][ T9005] Free swap = 124484kB [ 366.245171][ T9005] Total swap = 124996kB [ 366.246101][ T9005] 2097152 pages RAM [ 366.246871][ T9005] 0 pages HighMem/MovableOnly [ 366.247946][ T9005] 421877 pages reserved [ 366.248889][ T9005] 8192 pages cma reserved [ 366.249850][ T9005] 0 pages hwpoisoned [ 366.647809][ T9017] net_ratelimit: 88741 callbacks suppressed [ 366.647820][ T9017] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 366.662251][ T9016] FAULT_INJECTION: forcing a failure. [ 366.662251][ T9016] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 366.664797][ T9016] CPU: 0 PID: 9016 Comm: syz.0.1250 Not tainted syzkaller #0 [ 366.666166][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 366.667971][ T9016] Call trace: [ 366.668671][ T9016] dump_backtrace+0x1c4/0x1f0 [ 366.669684][ T9016] show_stack+0x2c/0x3c [ 366.670569][ T9016] __dump_stack+0x30/0x40 [ 366.671431][ T9016] dump_stack_lvl+0xf4/0x15c [ 366.672440][ T9016] dump_stack+0x1c/0x5c [ 366.673265][ T9016] should_fail_ex+0x3cc/0x524 [ 366.674293][ T9016] should_fail_alloc_page+0x74/0xb8 [ 366.675495][ T9016] prepare_alloc_pages+0x1b8/0x4f0 [ 366.676594][ T9016] __alloc_pages+0x134/0x544 [ 366.677616][ T9016] alloc_pages+0x434/0x6fc [ 366.678600][ T9016] __get_free_pages+0x18/0x84 [ 366.679555][ T9016] kasan_populate_vmalloc+0x48/0x26c [ 366.680667][ T9016] alloc_vmap_area+0x1584/0x16c4 [ 366.681709][ T9016] __get_vm_area_node+0x178/0x31c [ 366.682714][ T9016] __vmalloc_node_range+0x1d4/0xe70 [ 366.683781][ T9016] __vmalloc+0xa4/0xe0 [ 366.684652][ T9016] bpf_prog_alloc_no_stats+0x4c/0x3cc [ 366.685777][ T9016] bpf_prog_alloc+0x38/0x1dc [ 366.686759][ T9016] bpf_prog_create_from_user+0x9c/0x464 [ 366.687900][ T9016] do_seccomp+0x900/0xea4 [ 366.688753][ T9016] __arm64_sys_seccomp+0x7c/0x90 [ 366.689656][ T9016] invoke_syscall+0x98/0x290 [ 366.690593][ T9016] el0_svc_common+0x13c/0x258 [ 366.691528][ T9016] do_el0_svc+0x5c/0x134 [ 366.692426][ T9016] el0_svc+0x58/0x12c [ 366.693191][ T9016] el0t_64_sync_handler+0x84/0xf0 [ 366.694262][ T9016] el0t_64_sync+0x18c/0x190 [ 367.058355][ T9022] FAULT_INJECTION: forcing a failure. [ 367.058355][ T9022] name failslab, interval 1, probability 0, space 0, times 0 [ 367.063152][ T9022] CPU: 0 PID: 9022 Comm: syz.3.1243 Not tainted syzkaller #0 [ 367.064423][ T9022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 367.066388][ T9022] Call trace: [ 367.067017][ T9022] dump_backtrace+0x1c4/0x1f0 [ 367.067948][ T9022] show_stack+0x2c/0x3c [ 367.068747][ T9022] __dump_stack+0x30/0x40 [ 367.069597][ T9022] dump_stack_lvl+0xf4/0x15c [ 367.070568][ T9022] dump_stack+0x1c/0x5c [ 367.071375][ T9022] should_fail_ex+0x3cc/0x524 [ 367.072324][ T9022] __should_failslab+0xc0/0x11c [ 367.073329][ T9022] should_failslab+0x10/0x28 [ 367.074239][ T9022] kmem_cache_alloc+0x88/0x310 [ 367.075231][ T9022] __proc_create+0x30c/0x718 [ 367.076210][ T9022] proc_create_reg+0x88/0x110 [ 367.077055][ T9022] proc_create_net_data+0xa8/0x1ac [ 367.078070][ T9022] ip6mr_net_init+0x2a4/0x390 [ 367.079054][ T9022] ops_init+0x2b0/0x53c [ 367.079925][ T9022] setup_net+0x494/0xb6c [ 367.080689][ T9022] copy_net_ns+0x2b8/0x578 [ 367.081490][ T9022] create_new_namespaces+0x30c/0x604 [ 367.082580][ T9022] unshare_nsproxy_namespaces+0x108/0x160 [ 367.083846][ T9022] ksys_unshare+0x3f0/0x70c [ 367.084868][ T9022] __arm64_sys_unshare+0x3c/0x50 [ 367.085987][ T9022] invoke_syscall+0x98/0x290 [ 367.086985][ T9022] el0_svc_common+0x13c/0x258 [ 367.088018][ T9022] do_el0_svc+0x5c/0x134 [ 367.088948][ T9022] el0_svc+0x58/0x12c [ 367.089851][ T9022] el0t_64_sync_handler+0x84/0xf0 [ 367.090985][ T9022] el0t_64_sync+0x18c/0x190 [ 367.094814][ T9025] FAULT_INJECTION: forcing a failure. [ 367.094814][ T9025] name failslab, interval 1, probability 0, space 0, times 0 [ 367.097059][ T9025] CPU: 0 PID: 9025 Comm: syz.0.1254 Not tainted syzkaller #0 [ 367.098444][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 367.100239][ T9025] Call trace: [ 367.100826][ T9025] dump_backtrace+0x1c4/0x1f0 [ 367.101672][ T9025] show_stack+0x2c/0x3c [ 367.102553][ T9025] __dump_stack+0x30/0x40 [ 367.103508][ T9025] dump_stack_lvl+0xf4/0x15c [ 367.104572][ T9025] dump_stack+0x1c/0x5c [ 367.105390][ T9025] should_fail_ex+0x3cc/0x524 [ 367.106327][ T9025] __should_failslab+0xc0/0x11c [ 367.107362][ T9025] should_failslab+0x10/0x28 [ 367.108358][ T9025] kmem_cache_alloc_node+0x8c/0x344 [ 367.109335][ T9025] alloc_vmap_area+0x660/0x16c4 [ 367.110168][ T9025] __get_vm_area_node+0x178/0x31c [ 367.111163][ T9025] __vmalloc_node_range+0x1d4/0xe70 [ 367.112173][ T9025] __vmalloc+0xa4/0xe0 [ 367.112968][ T9025] bpf_prog_alloc_no_stats+0x4c/0x3cc [ 367.114018][ T9025] bpf_prog_alloc+0x38/0x1dc [ 367.114978][ T9025] bpf_prog_create_from_user+0x9c/0x464 [ 367.116207][ T9025] do_seccomp+0x900/0xea4 [ 367.117085][ T9025] __arm64_sys_seccomp+0x7c/0x90 [ 367.118119][ T9025] invoke_syscall+0x98/0x290 [ 367.119095][ T9025] el0_svc_common+0x13c/0x258 [ 367.119997][ T9025] do_el0_svc+0x5c/0x134 [ 367.120840][ T9025] el0_svc+0x58/0x12c [ 367.121592][ T9025] el0t_64_sync_handler+0x84/0xf0 [ 367.122559][ T9025] el0t_64_sync+0x18c/0x190 [ 367.132869][ T27] kauditd_printk_skb: 224 callbacks suppressed [ 367.132875][ T27] audit: type=1326 audit(2000000090.444:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.0.1254" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6579728 code=0x7ffc0000 [ 367.140048][ T27] audit: type=1326 audit(2000000090.444:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.0.1254" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6579728 code=0x7ffc0000 [ 367.144621][ T27] audit: type=1326 audit(2000000090.454:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.0.1254" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb6579728 code=0x7ffc0000 [ 367.150222][ T27] audit: type=1326 audit(2000000090.454:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9024 comm="syz.0.1254" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb6579728 code=0x7ffc0000 [ 367.688177][ T9039] device syzkaller0 entered promiscuous mode [ 367.703662][ T27] audit: type=1326 audit(2000000090.978:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.1257" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6579728 code=0x7ffc0000 [ 367.709042][ T27] audit: type=1326 audit(2000000090.978:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.1257" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6579728 code=0x7ffc0000 [ 367.715202][ T27] audit: type=1326 audit(2000000090.978:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.1257" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb655c5ec code=0x7ffc0000 [ 367.722533][ T27] audit: type=1326 audit(2000000090.978:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.1257" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb655c5ec code=0x7ffc0000 [ 367.727620][ T27] audit: type=1326 audit(2000000090.987:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.1257" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb655c5ec code=0x7ffc0000 [ 367.738641][ T27] audit: type=1326 audit(2000000090.987:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9029 comm="syz.0.1257" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb655c5ec code=0x7ffc0000 [ 367.838345][ T9047] rxe_eth0 speed is unknown, defaulting to 1000 [ 367.862350][ T9049] rxe_eth0 speed is unknown, defaulting to 1000 [ 368.249078][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'. [ 368.271669][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 368.304253][ T9058] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 368.315320][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'. [ 368.709329][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1255'. [ 369.306562][ T9081] FAULT_INJECTION: forcing a failure. [ 369.306562][ T9081] name failslab, interval 1, probability 0, space 0, times 0 [ 369.309403][ T9081] CPU: 1 PID: 9081 Comm: syz.4.1263 Not tainted syzkaller #0 [ 369.310906][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 369.312899][ T9081] Call trace: [ 369.313529][ T9081] dump_backtrace+0x1c4/0x1f0 [ 369.314474][ T9081] show_stack+0x2c/0x3c [ 369.315309][ T9081] __dump_stack+0x30/0x40 [ 369.316222][ T9081] dump_stack_lvl+0xf4/0x15c [ 369.317137][ T9081] dump_stack+0x1c/0x5c [ 369.317994][ T9081] should_fail_ex+0x3cc/0x524 [ 369.318979][ T9081] __should_failslab+0xc0/0x11c [ 369.319914][ T9081] should_failslab+0x10/0x28 [ 369.320813][ T9081] slab_pre_alloc_hook+0x6c/0x31c [ 369.321686][ T9081] kmem_cache_alloc_lru+0x60/0x284 [ 369.322660][ T9081] sock_alloc_inode+0x2c/0xcc [ 369.323590][ T9081] new_inode_pseudo+0x68/0x1cc [ 369.324583][ T9081] __sock_create+0x138/0x8a8 [ 369.325545][ T9081] sock_create_kern+0x4c/0x64 [ 369.326527][ T9081] inet_ctl_sock_create+0xa8/0x1fc [ 369.327656][ T9081] igmp6_net_init+0x3c/0x364 [ 369.328631][ T9081] ops_init+0x2b0/0x53c [ 369.329544][ T9081] setup_net+0x494/0xb6c [ 369.330462][ T9081] copy_net_ns+0x2b8/0x578 [ 369.331390][ T9081] create_new_namespaces+0x30c/0x604 [ 369.332454][ T9081] unshare_nsproxy_namespaces+0x108/0x160 [ 369.333617][ T9081] ksys_unshare+0x3f0/0x70c [ 369.334454][ T9081] __arm64_sys_unshare+0x3c/0x50 [ 369.335355][ T9081] invoke_syscall+0x98/0x290 [ 369.336204][ T9081] el0_svc_common+0x13c/0x258 [ 369.337113][ T9081] do_el0_svc+0x5c/0x134 [ 369.337956][ T9081] el0_svc+0x58/0x12c [ 369.338750][ T9081] el0t_64_sync_handler+0x84/0xf0 [ 369.339860][ T9081] el0t_64_sync+0x18c/0x190 [ 369.342248][ T9081] socket: no more sockets [ 369.343028][ T9081] Failed to initialize the IGMP6 control socket (err -23) [ 369.767164][ T9090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 369.811201][ T9093] device syzkaller0 entered promiscuous mode [ 369.967262][ T9095] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.054797][ T9097] rxe_eth0 speed is unknown, defaulting to 1000 [ 370.114881][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1272'. [ 370.152862][ T9106] netlink: 'syz.4.1274': attribute type 1 has an invalid length. [ 370.455356][ T4340] Bluetooth: hci5: command 0x1003 tx timeout [ 370.457112][ T4346] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 370.779206][ T9118] FAULT_INJECTION: forcing a failure. [ 370.779206][ T9118] name failslab, interval 1, probability 0, space 0, times 0 [ 370.781980][ T9118] CPU: 1 PID: 9118 Comm: syz.0.1276 Not tainted syzkaller #0 [ 370.783313][ T9118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 370.785283][ T9118] Call trace: [ 370.785916][ T9118] dump_backtrace+0x1c4/0x1f0 [ 370.786885][ T9118] show_stack+0x2c/0x3c [ 370.787684][ T9118] __dump_stack+0x30/0x40 [ 370.788579][ T9118] dump_stack_lvl+0xf4/0x15c [ 370.789529][ T9118] dump_stack+0x1c/0x5c [ 370.790408][ T9118] should_fail_ex+0x3cc/0x524 [ 370.791345][ T9118] __should_failslab+0xc0/0x11c [ 370.792314][ T9118] should_failslab+0x10/0x28 [ 370.793227][ T9118] slab_pre_alloc_hook+0x6c/0x31c [ 370.794260][ T9118] kmem_cache_alloc_lru+0x60/0x284 [ 370.795212][ T9118] sock_alloc_inode+0x2c/0xcc [ 370.796135][ T9118] new_inode_pseudo+0x68/0x1cc [ 370.797096][ T9118] __sock_create+0x138/0x8a8 [ 370.797945][ T9118] sock_create_kern+0x4c/0x64 [ 370.798828][ T9118] inet_ctl_sock_create+0xa8/0x1fc [ 370.799810][ T9118] igmp6_net_init+0x150/0x364 [ 370.800743][ T9118] ops_init+0x2b0/0x53c [ 370.801456][ T9118] setup_net+0x494/0xb6c [ 370.802330][ T9118] copy_net_ns+0x2b8/0x578 [ 370.803279][ T9118] create_new_namespaces+0x30c/0x604 [ 370.804319][ T9118] unshare_nsproxy_namespaces+0x108/0x160 [ 370.805535][ T9118] ksys_unshare+0x3f0/0x70c [ 370.806506][ T9118] __arm64_sys_unshare+0x3c/0x50 [ 370.807475][ T9118] invoke_syscall+0x98/0x290 [ 370.808285][ T9118] el0_svc_common+0x13c/0x258 [ 370.809204][ T9118] do_el0_svc+0x5c/0x134 [ 370.810000][ T9118] el0_svc+0x58/0x12c [ 370.810763][ T9118] el0t_64_sync_handler+0x84/0xf0 [ 370.811765][ T9118] el0t_64_sync+0x18c/0x190 [ 370.812668][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.815619][ T9118] socket: no more sockets [ 370.816358][ T9118] Failed to initialize the IGMP6 autojoin socket (err -23) [ 371.400698][ T9131] device syzkaller0 entered promiscuous mode [ 371.757260][ T9138] rxe_eth0 speed is unknown, defaulting to 1000 [ 371.802510][ T9140] rxe_eth0 speed is unknown, defaulting to 1000 [ 371.849921][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 372.553545][ T9162] device syzkaller0 entered promiscuous mode [ 372.557801][ T9164] FAULT_INJECTION: forcing a failure. [ 372.557801][ T9164] name failslab, interval 1, probability 0, space 0, times 0 [ 372.563339][ T9164] CPU: 0 PID: 9164 Comm: syz.1.1292 Not tainted syzkaller #0 [ 372.564745][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 372.566939][ T9164] Call trace: [ 372.567673][ T9164] dump_backtrace+0x1c4/0x1f0 [ 372.568729][ T9164] show_stack+0x2c/0x3c [ 372.569657][ T9164] __dump_stack+0x30/0x40 [ 372.570600][ T9164] dump_stack_lvl+0xf4/0x15c [ 372.571565][ T9164] dump_stack+0x1c/0x5c [ 372.572522][ T9164] should_fail_ex+0x3cc/0x524 [ 372.573572][ T9164] __should_failslab+0xc0/0x11c [ 372.574613][ T9164] should_failslab+0x10/0x28 [ 372.575613][ T9164] kmem_cache_alloc+0x88/0x310 [ 372.576582][ T9164] sk_prot_alloc+0x60/0x1e8 [ 372.577540][ T9164] sk_alloc+0x44/0x3a0 [ 372.578397][ T9164] inet6_create+0x6f4/0xf9c [ 372.579267][ T9164] __sock_create+0x448/0x8a8 [ 372.580236][ T9164] sock_create_kern+0x4c/0x64 [ 372.581209][ T9164] inet_ctl_sock_create+0xa8/0x1fc [ 372.582260][ T9164] igmp6_net_init+0x3c/0x364 [ 372.583239][ T9164] ops_init+0x2b0/0x53c [ 372.584060][ T9164] setup_net+0x494/0xb6c [ 372.584885][ T9164] copy_net_ns+0x2b8/0x578 [ 372.585808][ T9164] create_new_namespaces+0x30c/0x604 [ 372.586879][ T9164] unshare_nsproxy_namespaces+0x108/0x160 [ 372.588051][ T9164] ksys_unshare+0x3f0/0x70c [ 372.588841][ T9164] __arm64_sys_unshare+0x3c/0x50 [ 372.589936][ T9164] invoke_syscall+0x98/0x290 [ 372.590916][ T9164] el0_svc_common+0x13c/0x258 [ 372.591897][ T9164] do_el0_svc+0x5c/0x134 [ 372.592799][ T9164] el0_svc+0x58/0x12c [ 372.593684][ T9164] el0t_64_sync_handler+0x84/0xf0 [ 372.594822][ T9164] el0t_64_sync+0x18c/0x190 [ 372.596299][ T9164] Failed to initialize the IGMP6 control socket (err -105) [ 372.801610][ T27] kauditd_printk_skb: 250 callbacks suppressed [ 372.801623][ T27] audit: type=1326 audit(2000000095.750:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.0.1295" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6579728 code=0x7ffc0000 [ 372.810987][ T27] audit: type=1326 audit(2000000095.750:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.0.1295" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb6579728 code=0x7ffc0000 [ 372.816135][ T27] audit: type=1326 audit(2000000095.760:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.0.1295" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb655c5ec code=0x7ffc0000 [ 372.821216][ T27] audit: type=1326 audit(2000000095.760:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.0.1295" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb655c5ec code=0x7ffc0000 [ 372.826136][ T27] audit: type=1326 audit(2000000095.760:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.0.1295" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb655c5ec code=0x7ffc0000 [ 372.833545][ T27] audit: type=1326 audit(2000000095.760:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.0.1295" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb655c5ec code=0x7ffc0000 [ 372.838618][ T27] audit: type=1326 audit(2000000095.760:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.0.1295" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb655c5ec code=0x7ffc0000 [ 372.843851][ T27] audit: type=1326 audit(2000000095.760:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.0.1295" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb655c5ec code=0x7ffc0000 [ 372.858930][ T27] audit: type=1326 audit(2000000095.769:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.0.1295" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb655c5ec code=0x7ffc0000 [ 372.867838][ T27] audit: type=1326 audit(2000000095.769:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.0.1295" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb655c5ec code=0x7ffc0000 [ 372.984515][ T9172] rxe_eth0 speed is unknown, defaulting to 1000 [ 373.055611][ T9175] rxe_eth0 speed is unknown, defaulting to 1000 [ 373.352101][ T9100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 373.796697][ T9195] capability: warning: `syz.2.1305' uses deprecated v2 capabilities in a way that may be insecure [ 373.840983][ T9197] device syzkaller0 entered promiscuous mode [ 374.051215][ T9205] rxe_eth0 speed is unknown, defaulting to 1000 [ 374.074683][ T9207] rxe_eth0 speed is unknown, defaulting to 1000 [ 374.194028][ T9209] rxe_eth0 speed is unknown, defaulting to 1000 [ 374.289056][ T9216] bridge0: port 3(syz_tun) entered blocking state [ 374.290505][ T9216] bridge0: port 3(syz_tun) entered disabled state [ 375.273470][ T9228] device syzkaller0 entered promiscuous mode [ 375.300546][ T9234] rxe_eth0 speed is unknown, defaulting to 1000 [ 375.696979][ T9239] tipc: Started in network mode [ 375.697943][ T9239] tipc: Node identity 4, cluster identity 4711 [ 375.699186][ T9239] tipc: Node number set to 4 [ 375.765214][ T9] tipc: Subscription rejected, illegal request [ 375.777336][ T9243] rxe_eth0 speed is unknown, defaulting to 1000 [ 376.229855][ T9252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1327'. [ 376.242618][ T9257] bridge0: port 3(syz_tun) entered blocking state [ 376.244148][ T9257] bridge0: port 3(syz_tun) entered disabled state [ 376.245976][ T9257] device syz_tun entered promiscuous mode [ 376.251257][ T9257] bridge0: port 3(syz_tun) entered blocking state [ 376.252612][ T9257] bridge0: port 3(syz_tun) entered forwarding state [ 376.259456][ T9259] FAULT_INJECTION: forcing a failure. [ 376.259456][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 376.261937][ T9259] CPU: 1 PID: 9259 Comm: syz.0.1330 Not tainted syzkaller #0 [ 376.263545][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 376.265271][ T9259] Call trace: [ 376.265946][ T9259] dump_backtrace+0x1c4/0x1f0 [ 376.266860][ T9259] show_stack+0x2c/0x3c [ 376.267643][ T9259] __dump_stack+0x30/0x40 [ 376.268419][ T9259] dump_stack_lvl+0xf4/0x15c [ 376.269314][ T9259] dump_stack+0x1c/0x5c [ 376.270211][ T9259] should_fail_ex+0x3cc/0x524 [ 376.271237][ T9259] __should_failslab+0xc0/0x11c [ 376.272342][ T9259] should_failslab+0x10/0x28 [ 376.273411][ T9259] __kmem_cache_alloc_node+0x7c/0x318 [ 376.274639][ T9259] kmalloc_trace+0x48/0x94 [ 376.275646][ T9259] getname_flags+0x27c/0x458 [ 376.276531][ T9259] user_path_at_empty+0x40/0x84 [ 376.277494][ T9259] __arm64_sys_umount+0xf8/0x184 [ 376.278541][ T9259] invoke_syscall+0x98/0x290 [ 376.279488][ T9259] el0_svc_common+0x13c/0x258 [ 376.280461][ T9259] do_el0_svc+0x5c/0x134 [ 376.281288][ T9259] el0_svc+0x58/0x12c [ 376.282062][ T9259] el0t_64_sync_handler+0x84/0xf0 [ 376.283027][ T9259] el0t_64_sync+0x18c/0x190 [ 376.411461][ T9270] rxe_eth0 speed is unknown, defaulting to 1000 [ 376.730652][ T9279] rxe_eth0 speed is unknown, defaulting to 1000 [ 376.736273][ T9277] device syzkaller0 entered promiscuous mode [ 377.258666][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1344'. [ 377.271710][ T9290] svc: failed to register lockdv1 RPC service (errno 101). [ 377.274655][ T9290] lockd_up: makesock failed, error=-101 [ 377.329895][ T9301] rxe_eth0 speed is unknown, defaulting to 1000 [ 377.764718][ T9314] rxe_eth0 speed is unknown, defaulting to 1000 [ 377.774505][ T9319] FAULT_INJECTION: forcing a failure. [ 377.774505][ T9319] name failslab, interval 1, probability 0, space 0, times 0 [ 377.783986][ T9319] CPU: 0 PID: 9319 Comm: syz.4.1353 Not tainted syzkaller #0 [ 377.785542][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 377.787649][ T9319] Call trace: [ 377.788328][ T9319] dump_backtrace+0x1c4/0x1f0 [ 377.789355][ T9319] show_stack+0x2c/0x3c [ 377.790252][ T9319] __dump_stack+0x30/0x40 [ 377.791201][ T9319] dump_stack_lvl+0xf4/0x15c [ 377.792127][ T9319] dump_stack+0x1c/0x5c [ 377.792931][ T9319] should_fail_ex+0x3cc/0x524 [ 377.793892][ T9319] __should_failslab+0xc0/0x11c [ 377.794930][ T9319] should_failslab+0x10/0x28 [ 377.795874][ T9319] __kmem_cache_alloc_node+0x7c/0x318 [ 377.796959][ T9319] kmalloc_trace+0x48/0x94 [ 377.797878][ T9319] sctp_add_bind_addr+0x9c/0x2e8 [ 377.798847][ T9319] sctp_copy_local_addr_list+0x2d4/0x474 [ 377.798882][ T9320] device syzkaller0 entered promiscuous mode [ 377.800034][ T9319] sctp_copy_one_addr+0xb0/0x33c [ 377.802192][ T9319] sctp_bind_addr_copy+0xa8/0x39c [ 377.803197][ T9319] sctp_assoc_set_bind_addr_from_ep+0x128/0x184 [ 377.804410][ T9319] sctp_connect_new_asoc+0x28c/0x5f4 [ 377.805501][ T9319] sctp_sendmsg+0x10f4/0x20f4 [ 377.806440][ T9319] inet_sendmsg+0x154/0x27c [ 377.807363][ T9319] ____sys_sendmsg+0x588/0x90c [ 377.808326][ T9319] __sys_sendmsg+0x288/0x374 [ 377.809225][ T9319] __arm64_sys_sendmsg+0x80/0x94 [ 377.810402][ T9319] invoke_syscall+0x98/0x290 [ 377.811428][ T9319] el0_svc_common+0x13c/0x258 [ 377.812518][ T9319] do_el0_svc+0x5c/0x134 [ 377.813510][ T9319] el0_svc+0x58/0x12c [ 377.814410][ T9319] el0t_64_sync_handler+0x84/0xf0 [ 377.815405][ T9319] el0t_64_sync+0x18c/0x190 [ 377.982908][ T4339] Bluetooth: Frame is too long (len 16, expected len 4) [ 378.267179][ T9329] bridge0: port 3(syz_tun) entered blocking state [ 378.268416][ T9329] bridge0: port 3(syz_tun) entered disabled state [ 378.271122][ T9329] device syz_tun entered promiscuous mode [ 378.398019][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 378.479886][ T9336] rxe_eth0 speed is unknown, defaulting to 1000 [ 379.006225][ T9344] input: syz0 as /devices/virtual/input/input5 [ 379.113179][ T27] kauditd_printk_skb: 263 callbacks suppressed [ 379.113188][ T27] audit: type=1326 audit(2000000101.655:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1363" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0779728 code=0x7ffc0000 [ 379.119492][ T27] audit: type=1326 audit(2000000101.655:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1363" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0779728 code=0x7ffc0000 [ 379.127508][ T27] audit: type=1326 audit(2000000101.655:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1363" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 379.133215][ T27] audit: type=1326 audit(2000000101.655:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1363" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 379.138100][ T27] audit: type=1326 audit(2000000101.655:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1363" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 379.144028][ T9351] rxe_eth0 speed is unknown, defaulting to 1000 [ 379.145681][ T27] audit: type=1326 audit(2000000101.655:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1363" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 379.151040][ T27] audit: type=1326 audit(2000000101.655:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1363" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 379.156297][ T27] audit: type=1326 audit(2000000101.655:968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1363" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 379.160803][ T27] audit: type=1326 audit(2000000101.655:969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1363" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 379.174622][ T27] audit: type=1326 audit(2000000101.655:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9345 comm="syz.1.1363" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 379.246409][ T9356] device syzkaller0 entered promiscuous mode [ 379.257567][ T9353] rxe_eth0 speed is unknown, defaulting to 1000 [ 379.380893][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 379.435710][ T9372] FAULT_INJECTION: forcing a failure. [ 379.435710][ T9372] name failslab, interval 1, probability 0, space 0, times 0 [ 379.440533][ T9372] CPU: 1 PID: 9372 Comm: syz.2.1373 Not tainted syzkaller #0 [ 379.441967][ T9372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 379.444054][ T9372] Call trace: [ 379.444803][ T9372] dump_backtrace+0x1c4/0x1f0 [ 379.445748][ T9372] show_stack+0x2c/0x3c [ 379.446654][ T9372] __dump_stack+0x30/0x40 [ 379.447566][ T9372] dump_stack_lvl+0xf4/0x15c [ 379.448550][ T9372] dump_stack+0x1c/0x5c [ 379.449466][ T9372] should_fail_ex+0x3cc/0x524 [ 379.450476][ T9372] __should_failslab+0xc0/0x11c [ 379.451526][ T9372] should_failslab+0x10/0x28 [ 379.452557][ T9372] kmem_cache_alloc+0x88/0x310 [ 379.453536][ T9372] create_new_namespaces+0x48/0x604 [ 379.454413][ T9372] unshare_nsproxy_namespaces+0x108/0x160 [ 379.455404][ T9372] ksys_unshare+0x3f0/0x70c [ 379.456314][ T9372] __arm64_sys_unshare+0x3c/0x50 [ 379.457279][ T9372] invoke_syscall+0x98/0x290 [ 379.458140][ T9372] el0_svc_common+0x13c/0x258 [ 379.459027][ T9372] do_el0_svc+0x5c/0x134 [ 379.459855][ T9372] el0_svc+0x58/0x12c [ 379.460711][ T9372] el0t_64_sync_handler+0x84/0xf0 [ 379.461742][ T9372] el0t_64_sync+0x18c/0x190 [ 379.579576][ T4339] Bluetooth: hci4: hcon 00000000a43935fc sent 1 < count 65535 [ 380.196951][ T9389] bridge0: port 3(syz_tun) entered blocking state [ 380.199533][ T9389] bridge0: port 3(syz_tun) entered disabled state [ 380.211651][ T9389] device syz_tun entered promiscuous mode [ 380.213107][ T9389] bridge0: port 3(syz_tun) entered blocking state [ 380.214492][ T9389] bridge0: port 3(syz_tun) entered forwarding state [ 380.225616][ T9388] rxe_eth0 speed is unknown, defaulting to 1000 [ 380.375983][ T9398] device syzkaller0 entered promiscuous mode [ 380.413533][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 380.538275][ T9407] FAULT_INJECTION: forcing a failure. [ 380.538275][ T9407] name failslab, interval 1, probability 0, space 0, times 0 [ 380.541048][ T9407] CPU: 0 PID: 9407 Comm: syz.0.1387 Not tainted syzkaller #0 [ 380.542572][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 380.544713][ T9407] Call trace: [ 380.545355][ T9407] dump_backtrace+0x1c4/0x1f0 [ 380.546430][ T9407] show_stack+0x2c/0x3c [ 380.547327][ T9407] __dump_stack+0x30/0x40 [ 380.548234][ T9407] dump_stack_lvl+0xf4/0x15c [ 380.549209][ T9407] dump_stack+0x1c/0x5c [ 380.550093][ T9407] should_fail_ex+0x3cc/0x524 [ 380.551065][ T9407] __should_failslab+0xc0/0x11c [ 380.552066][ T9407] should_failslab+0x10/0x28 [ 380.552992][ T9407] kmem_cache_alloc+0x88/0x310 [ 380.553971][ T9407] create_new_namespaces+0x48/0x604 [ 380.554981][ T9407] unshare_nsproxy_namespaces+0x108/0x160 [ 380.556076][ T9407] ksys_unshare+0x3f0/0x70c [ 380.556915][ T9407] __arm64_sys_unshare+0x3c/0x50 [ 380.557814][ T9407] invoke_syscall+0x98/0x290 [ 380.558749][ T9407] el0_svc_common+0x13c/0x258 [ 380.559721][ T9407] do_el0_svc+0x5c/0x134 [ 380.560602][ T9407] el0_svc+0x58/0x12c [ 380.561415][ T9407] el0t_64_sync_handler+0x84/0xf0 [ 380.562396][ T9407] el0t_64_sync+0x18c/0x190 [ 380.860434][ T9391] pci 0000:00:02.0: [1ae0:001f] type 00 class 0x010802 [ 380.871026][ T9391] pci 0000:00:02.0: BAR 0 [mem 0x10000000000-0x10000003fff 64bit] [ 380.934772][ T9391] pci 0000:00:02.0: BAR 4 [mem 0x101100c0-0x101100ff] [ 380.973701][ T9280] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 380.978151][ T9280] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 380.983231][ T9391] pci 0000:00:02.0: BAR 0 [mem 0x10000000000-0x10000003fff 64bit]: assigned [ 380.985432][ T9280] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 380.997456][ T9391] pci 0000:00:02.0: BAR 4 [mem 0x101100c0-0x101100ff]: assigned [ 381.006907][ T4573] nvme nvme1: pci function 0000:00:02.0 [ 381.051707][ T1699] nvme nvme1: 2/0/0 default/read/poll queues [ 381.052522][ T9415] rxe_eth0 speed is unknown, defaulting to 1000 [ 381.074590][ T9416] rxe_eth0 speed is unknown, defaulting to 1000 [ 381.076556][ T9] GPT:Primary header thinks Alt. header is not at the end of the disk. [ 381.086290][ T9] GPT:2621543 != 20971519 [ 381.087146][ T9] GPT:Alternate GPT header not at the end of the disk. [ 381.097616][ T9] GPT:2621543 != 20971519 [ 381.102795][ T9] GPT: Use GNU Parted to correct GPT errors. [ 381.106586][ T9] nvme0n2: p1 p2 [ 381.113992][ T9418] FAULT_INJECTION: forcing a failure. [ 381.113992][ T9418] name failslab, interval 1, probability 0, space 0, times 0 [ 381.116217][ T9418] CPU: 0 PID: 9418 Comm: syz.4.1391 Not tainted syzkaller #0 [ 381.117542][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 381.119468][ T9418] Call trace: [ 381.120121][ T9418] dump_backtrace+0x1c4/0x1f0 [ 381.121062][ T9418] show_stack+0x2c/0x3c [ 381.121910][ T9418] __dump_stack+0x30/0x40 [ 381.122697][ T9418] dump_stack_lvl+0xf4/0x15c [ 381.123506][ T9418] dump_stack+0x1c/0x5c [ 381.124321][ T9418] should_fail_ex+0x3cc/0x524 [ 381.125255][ T9418] __should_failslab+0xc0/0x11c [ 381.126238][ T9418] should_failslab+0x10/0x28 [ 381.127094][ T9418] __kmem_cache_alloc_node+0x7c/0x318 [ 381.128151][ T9418] __kmalloc+0xc4/0x180 [ 381.128951][ T9418] software_key_eds_op+0x274/0x938 [ 381.129988][ T9418] asymmetric_key_eds_op+0x108/0x128 [ 381.130989][ T9418] keyctl_pkey_e_d_s+0x1c8/0x3a0 [ 381.131943][ T9418] __arm64_sys_keyctl+0x66c/0x8e0 [ 381.132898][ T9418] invoke_syscall+0x98/0x290 [ 381.133795][ T9418] el0_svc_common+0x13c/0x258 [ 381.134738][ T9418] do_el0_svc+0x5c/0x134 [ 381.135622][ T9418] el0_svc+0x58/0x12c [ 381.136463][ T9418] el0t_64_sync_handler+0x84/0xf0 [ 381.137541][ T9418] el0t_64_sync+0x18c/0x190 [ 381.180562][ T9420] rxe_eth0 speed is unknown, defaulting to 1000 [ 381.469812][ T9440] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1398'. [ 381.491928][ T9442] device syzkaller0 entered promiscuous mode [ 381.673740][ T9444] FAULT_INJECTION: forcing a failure. [ 381.673740][ T9444] name failslab, interval 1, probability 0, space 0, times 0 [ 381.677823][ T9444] CPU: 0 PID: 9444 Comm: syz.4.1400 Not tainted syzkaller #0 [ 381.679286][ T9444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 381.681591][ T9444] Call trace: [ 381.682282][ T9444] dump_backtrace+0x1c4/0x1f0 [ 381.683337][ T9444] show_stack+0x2c/0x3c [ 381.684202][ T9444] __dump_stack+0x30/0x40 [ 381.685120][ T9444] dump_stack_lvl+0xf4/0x15c [ 381.686066][ T9444] dump_stack+0x1c/0x5c [ 381.686908][ T9444] should_fail_ex+0x3cc/0x524 [ 381.687902][ T9444] __should_failslab+0xc0/0x11c [ 381.688882][ T9444] should_failslab+0x10/0x28 [ 381.689874][ T9444] kmem_cache_alloc+0x88/0x310 [ 381.690847][ T9444] create_new_namespaces+0x48/0x604 [ 381.691914][ T9444] unshare_nsproxy_namespaces+0x108/0x160 [ 381.693180][ T9444] ksys_unshare+0x3f0/0x70c [ 381.694179][ T9444] __arm64_sys_unshare+0x3c/0x50 [ 381.695218][ T9444] invoke_syscall+0x98/0x290 [ 381.696207][ T9444] el0_svc_common+0x13c/0x258 [ 381.697201][ T9444] do_el0_svc+0x5c/0x134 [ 381.698022][ T9444] el0_svc+0x58/0x12c [ 381.698825][ T9444] el0t_64_sync_handler+0x84/0xf0 [ 381.699771][ T9444] el0t_64_sync+0x18c/0x190 [ 381.793554][ T9446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1401'. [ 382.010264][ T9450] pci 0000:00:02.0: [1ae0:001f] type 00 class 0x010802 [ 382.024752][ T9450] pci 0000:00:02.0: BAR 0 [mem 0x10000000000-0x10000003fff 64bit] [ 382.054901][ T9459] FAULT_INJECTION: forcing a failure. [ 382.054901][ T9459] name failslab, interval 1, probability 0, space 0, times 0 [ 382.062669][ T9459] CPU: 0 PID: 9459 Comm: syz.4.1406 Not tainted syzkaller #0 [ 382.064306][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 382.066363][ T9459] Call trace: [ 382.066996][ T9459] dump_backtrace+0x1c4/0x1f0 [ 382.067922][ T9459] show_stack+0x2c/0x3c [ 382.068711][ T9459] __dump_stack+0x30/0x40 [ 382.069570][ T9459] dump_stack_lvl+0xf4/0x15c [ 382.070528][ T9459] dump_stack+0x1c/0x5c [ 382.074821][ T9459] should_fail_ex+0x3cc/0x524 [ 382.078425][ T9450] pci 0000:00:02.0: BAR 4 [mem 0x101100c0-0x101100ff] [ 382.079116][ T9459] __should_failslab+0xc0/0x11c [ 382.084626][ T9459] should_failslab+0x10/0x28 [ 382.085444][ T9459] __kmem_cache_alloc_node+0x7c/0x318 [ 382.086503][ T9459] kmalloc_trace+0x48/0x94 [ 382.087459][ T9459] drm_master_create+0x5c/0x358 [ 382.088478][ T9459] drm_new_set_master+0xe0/0x354 [ 382.089404][ T9459] drm_master_open+0x12c/0x190 [ 382.090307][ T9459] drm_open+0x5f8/0x9dc [ 382.091142][ T9459] drm_stub_open+0x1c4/0x264 [ 382.092008][ T9459] chrdev_open+0x3d0/0x51c [ 382.092907][ T9459] do_dentry_open+0x738/0xf8c [ 382.097501][ T9459] vfs_open+0x7c/0x90 [ 382.098243][ T9459] path_openat+0x1fc0/0x27a0 [ 382.099179][ T9459] do_filp_open+0x198/0x38c [ 382.100134][ T9459] do_sys_openat2+0x134/0x3fc [ 382.101112][ T9459] __arm64_sys_openat+0x11c/0x150 [ 382.105776][ T9459] invoke_syscall+0x98/0x290 [ 382.106664][ T9459] el0_svc_common+0x13c/0x258 [ 382.107599][ T9459] do_el0_svc+0x5c/0x134 [ 382.108507][ T9459] el0_svc+0x58/0x12c [ 382.109398][ T9459] el0t_64_sync_handler+0x84/0xf0 [ 382.110406][ T9459] el0t_64_sync+0x18c/0x190 [ 382.117875][ T9450] pci 0000:00:02.0: BAR 0 [mem 0x10000000000-0x10000003fff 64bit]: assigned [ 382.122767][ T9421] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 382.135366][ T9450] pci 0000:00:02.0: BAR 4 [mem 0x101100c0-0x101100ff]: assigned [ 382.135686][ T9421] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 382.139966][ T9421] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 382.158175][ T4409] nvme nvme1: pci function 0000:00:02.0 [ 382.158948][ T9461] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.191961][ T4680] nvme nvme1: 2/0/0 default/read/poll queues [ 382.205576][ T8154] GPT:Primary header thinks Alt. header is not at the end of the disk. [ 382.207412][ T8154] GPT:2621543 != 20971519 [ 382.208353][ T8154] GPT:Alternate GPT header not at the end of the disk. [ 382.212425][ T8154] GPT:2621543 != 20971519 [ 382.213587][ T8154] GPT: Use GNU Parted to correct GPT errors. [ 382.214845][ T8154] nvme0n2: p1 p2 [ 382.330949][ T9468] device syzkaller0 entered promiscuous mode [ 382.382981][ T9472] FAULT_INJECTION: forcing a failure. [ 382.382981][ T9472] name failslab, interval 1, probability 0, space 0, times 0 [ 382.382999][ T9472] CPU: 0 PID: 9472 Comm: syz.2.1412 Not tainted syzkaller #0 [ 382.383007][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 382.383012][ T9472] Call trace: [ 382.383014][ T9472] dump_backtrace+0x1c4/0x1f0 [ 382.383025][ T9472] show_stack+0x2c/0x3c [ 382.383030][ T9472] __dump_stack+0x30/0x40 [ 382.383040][ T9472] dump_stack_lvl+0xf4/0x15c [ 382.383047][ T9472] dump_stack+0x1c/0x5c [ 382.383055][ T9472] should_fail_ex+0x3cc/0x524 [ 382.383062][ T9472] __should_failslab+0xc0/0x11c [ 382.383072][ T9472] should_failslab+0x10/0x28 [ 382.383079][ T9472] kmem_cache_alloc+0x88/0x310 [ 382.383087][ T9472] create_new_namespaces+0x48/0x604 [ 382.383093][ T9472] unshare_nsproxy_namespaces+0x108/0x160 [ 382.383099][ T9472] ksys_unshare+0x3f0/0x70c [ 382.383106][ T9472] __arm64_sys_unshare+0x3c/0x50 [ 382.383114][ T9472] invoke_syscall+0x98/0x290 [ 382.383123][ T9472] el0_svc_common+0x13c/0x258 [ 382.383131][ T9472] do_el0_svc+0x5c/0x134 [ 382.383140][ T9472] el0_svc+0x58/0x12c [ 382.383147][ T9472] el0t_64_sync_handler+0x84/0xf0 [ 382.383156][ T9472] el0t_64_sync+0x18c/0x190 [ 382.433112][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'. [ 382.613928][ T9493] FAULT_INJECTION: forcing a failure. [ 382.613928][ T9493] name failslab, interval 1, probability 0, space 0, times 0 [ 382.616088][ T9484] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.617369][ T9493] CPU: 0 PID: 9493 Comm: syz.3.1419 Not tainted syzkaller #0 [ 382.619474][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 382.621741][ T9493] Call trace: [ 382.622476][ T9493] dump_backtrace+0x1c4/0x1f0 [ 382.623477][ T9493] show_stack+0x2c/0x3c [ 382.624421][ T9493] __dump_stack+0x30/0x40 [ 382.625440][ T9493] dump_stack_lvl+0xf4/0x15c [ 382.626438][ T9493] dump_stack+0x1c/0x5c [ 382.627381][ T9493] should_fail_ex+0x3cc/0x524 [ 382.628492][ T9493] __should_failslab+0xc0/0x11c [ 382.629626][ T9493] should_failslab+0x10/0x28 [ 382.630697][ T9493] __kmem_cache_alloc_node+0x7c/0x318 [ 382.631766][ T9493] __kmalloc+0xc4/0x180 [ 382.632646][ T9493] tomoyo_encode+0x260/0x484 [ 382.633531][ T9493] tomoyo_realpath_from_path+0x4b4/0x508 [ 382.634652][ T9493] tomoyo_check_open_permission+0x19c/0x35c [ 382.635898][ T9493] tomoyo_file_open+0x128/0x198 [ 382.636911][ T9493] security_file_open+0x6c/0xac [ 382.637941][ T9493] do_dentry_open+0x294/0xf8c [ 382.638827][ T9493] vfs_open+0x7c/0x90 [ 382.639631][ T9493] path_openat+0x1fc0/0x27a0 [ 382.640529][ T9493] do_filp_open+0x198/0x38c [ 382.641446][ T9493] do_sys_openat2+0x134/0x3fc [ 382.642290][ T9493] __arm64_sys_openat+0x11c/0x150 [ 382.643254][ T9493] invoke_syscall+0x98/0x290 [ 382.644209][ T9493] el0_svc_common+0x13c/0x258 [ 382.645173][ T9493] do_el0_svc+0x5c/0x134 [ 382.646042][ T9493] el0_svc+0x58/0x12c [ 382.646872][ T9493] el0t_64_sync_handler+0x84/0xf0 [ 382.647910][ T9493] el0t_64_sync+0x18c/0x190 [ 382.944710][ T9493] ERROR: Out of memory at tomoyo_realpath_from_path. [ 383.056930][ T9499] rxe_eth0 speed is unknown, defaulting to 1000 [ 383.480754][ T9508] FAULT_INJECTION: forcing a failure. [ 383.480754][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 383.488383][ T3942] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #215: comm udevd: reading directory lblock 0 [ 383.489086][ T9508] CPU: 0 PID: 9508 Comm: syz.0.1424 Not tainted syzkaller #0 [ 383.491497][ T9505] pci 0000:00:02.0: [1ae0:001f] type 00 class 0x010802 [ 383.492578][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 383.492594][ T9508] Call trace: [ 383.492600][ T9508] dump_backtrace+0x1c4/0x1f0 [ 383.492616][ T9508] show_stack+0x2c/0x3c [ 383.492627][ T9508] __dump_stack+0x30/0x40 [ 383.492640][ T9508] dump_stack_lvl+0xf4/0x15c [ 383.492649][ T9508] dump_stack+0x1c/0x5c [ 383.492656][ T9508] should_fail_ex+0x3cc/0x524 [ 383.492665][ T9508] __should_failslab+0xc0/0x11c [ 383.492675][ T9508] should_failslab+0x10/0x28 [ 383.492685][ T9508] kmem_cache_alloc+0x88/0x310 [ 383.492694][ T9508] create_new_namespaces+0x48/0x604 [ 383.492700][ T9508] unshare_nsproxy_namespaces+0x108/0x160 [ 383.492706][ T9508] ksys_unshare+0x3f0/0x70c [ 383.492713][ T9508] __arm64_sys_unshare+0x3c/0x50 [ 383.492721][ T9508] invoke_syscall+0x98/0x290 [ 383.492730][ T9508] el0_svc_common+0x13c/0x258 [ 383.492739][ T9508] do_el0_svc+0x5c/0x134 [ 383.492747][ T9508] el0_svc+0x58/0x12c [ 383.492755][ T9508] el0t_64_sync_handler+0x84/0xf0 [ 383.492763][ T9508] el0t_64_sync+0x18c/0x190 [ 383.519584][ T3942] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 383.525456][ T3942] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 383.530448][ T3942] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #219: comm udevd: reading directory lblock 0 [ 383.564069][ T9505] pci 0000:00:02.0: BAR 0 [mem 0x10000000000-0x10000003fff 64bit] [ 383.597563][ T9505] pci 0000:00:02.0: BAR 4 [mem 0x101100c0-0x101100ff] [ 383.623580][ T9505] pci 0000:00:02.0: BAR 0 [mem 0x10000000000-0x10000003fff 64bit]: assigned [ 383.639023][ T9505] pci 0000:00:02.0: BAR 4 [mem 0x101100c0-0x101100ff]: assigned [ 383.647362][ T4409] nvme nvme1: pci function 0000:00:02.0 [ 383.693720][ T4680] nvme nvme1: 2/0/0 default/read/poll queues [ 383.724014][ T8206] GPT:Primary header thinks Alt. header is not at the end of the disk. [ 383.725982][ T8206] GPT:2621543 != 20971519 [ 383.728580][ T8206] GPT:Alternate GPT header not at the end of the disk. [ 383.730352][ T9518] device syzkaller0 entered promiscuous mode [ 383.731758][ T8206] GPT:2621543 != 20971519 [ 383.732594][ T8206] GPT: Use GNU Parted to correct GPT errors. [ 383.737850][ T8206] nvme0n2: p1 p2 [ 383.916118][ T9530] FAULT_INJECTION: forcing a failure. [ 383.916118][ T9530] name failslab, interval 1, probability 0, space 0, times 0 [ 383.919108][ T9530] CPU: 1 PID: 9530 Comm: syz.0.1431 Not tainted syzkaller #0 [ 383.920762][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 383.923025][ T9530] Call trace: [ 383.923660][ T9530] dump_backtrace+0x1c4/0x1f0 [ 383.924671][ T9530] show_stack+0x2c/0x3c [ 383.925596][ T9530] __dump_stack+0x30/0x40 [ 383.926554][ T9530] dump_stack_lvl+0xf4/0x15c [ 383.927529][ T9530] dump_stack+0x1c/0x5c [ 383.928369][ T9530] should_fail_ex+0x3cc/0x524 [ 383.929276][ T9530] __should_failslab+0xc0/0x11c [ 383.930324][ T9530] should_failslab+0x10/0x28 [ 383.931321][ T9530] __kmem_cache_alloc_node+0x7c/0x318 [ 383.932467][ T9530] kmalloc_trace+0x48/0x94 [ 383.933311][ T9530] drm_master_create+0x5c/0x358 [ 383.934384][ T9530] drm_new_set_master+0xe0/0x354 [ 383.935477][ T9530] drm_master_open+0x12c/0x190 [ 383.936491][ T9530] drm_open+0x5f8/0x9dc [ 383.937438][ T9530] drm_stub_open+0x1c4/0x264 [ 383.938404][ T9530] chrdev_open+0x3d0/0x51c [ 383.939343][ T9530] do_dentry_open+0x738/0xf8c [ 383.940302][ T9530] vfs_open+0x7c/0x90 [ 383.941136][ T9530] path_openat+0x1fc0/0x27a0 [ 383.942017][ T9530] do_filp_open+0x198/0x38c [ 383.942928][ T9530] do_sys_openat2+0x134/0x3fc [ 383.943861][ T9530] __arm64_sys_openat+0x11c/0x150 [ 383.944944][ T9530] invoke_syscall+0x98/0x290 [ 383.945985][ T9530] el0_svc_common+0x13c/0x258 [ 383.947011][ T9530] do_el0_svc+0x5c/0x134 [ 383.947906][ T9530] el0_svc+0x58/0x12c [ 383.948724][ T9530] el0t_64_sync_handler+0x84/0xf0 [ 383.949771][ T9530] el0t_64_sync+0x18c/0x190 [ 383.950782][ C1] vkms_vblank_simulate: vblank timer overrun [ 384.035230][ T9534] rxe_eth0 speed is unknown, defaulting to 1000 [ 384.109092][ T9539] FAULT_INJECTION: forcing a failure. [ 384.109092][ T9539] name failslab, interval 1, probability 0, space 0, times 0 [ 384.143706][ T9539] CPU: 1 PID: 9539 Comm: syz.4.1436 Not tainted syzkaller #0 [ 384.145477][ T9539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 384.147791][ T9539] Call trace: [ 384.148429][ T9539] dump_backtrace+0x1c4/0x1f0 [ 384.149326][ T9539] show_stack+0x2c/0x3c [ 384.150151][ T9539] __dump_stack+0x30/0x40 [ 384.151016][ T9539] dump_stack_lvl+0xf4/0x15c [ 384.151977][ T9539] dump_stack+0x1c/0x5c [ 384.152807][ T9539] should_fail_ex+0x3cc/0x524 [ 384.153742][ T9539] __should_failslab+0xc0/0x11c [ 384.154650][ T9539] should_failslab+0x10/0x28 [ 384.155657][ T9539] __kmem_cache_alloc_node+0x7c/0x318 [ 384.156742][ T9539] __kmalloc+0xc4/0x180 [ 384.157660][ T9539] copy_net_ns+0xf8/0x578 [ 384.158573][ T9539] create_new_namespaces+0x30c/0x604 [ 384.159772][ T9539] unshare_nsproxy_namespaces+0x108/0x160 [ 384.160976][ T9539] ksys_unshare+0x3f0/0x70c [ 384.161974][ T9539] __arm64_sys_unshare+0x3c/0x50 [ 384.163062][ T9539] invoke_syscall+0x98/0x290 [ 384.163973][ T9539] el0_svc_common+0x13c/0x258 [ 384.164895][ T9539] do_el0_svc+0x5c/0x134 [ 384.165787][ T9539] el0_svc+0x58/0x12c [ 384.166559][ T9539] el0t_64_sync_handler+0x84/0xf0 [ 384.167468][ T9539] el0t_64_sync+0x18c/0x190 [ 384.714089][ T9547] rxe_eth0 speed is unknown, defaulting to 1000 [ 385.046850][ T9561] device syzkaller0 entered promiscuous mode [ 385.402366][ T9563] pci 0000:00:02.0: [1ae0:001f] type 00 class 0x010802 [ 385.439673][ T9563] pci 0000:00:02.0: BAR 0 [mem 0x10000000000-0x10000003fff 64bit] [ 385.579032][ T9563] pci 0000:00:02.0: BAR 4 [mem 0x101100c0-0x101100ff] [ 385.623965][ T3907] Aborting journal on device nvme0n1p2-8. [ 385.625560][ T3907] Buffer I/O error on dev nvme0n1p2, logical block 131072, lost sync page write [ 385.627221][ T9563] pci 0000:00:02.0: BAR 0 [mem 0x10000000000-0x10000003fff 64bit]: assigned [ 385.627283][ T3907] JBD2: I/O error when updating journal superblock for nvme0n1p2-8. [ 385.639928][ T9563] pci 0000:00:02.0: BAR 4 [mem 0x101100c0-0x101100ff]: assigned [ 385.646851][ T7] nvme nvme1: pci function 0000:00:02.0 [ 385.661545][ T9556] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 385.686578][ T9556] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 385.700183][ T4319] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 385.718877][ T9568] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 385.721202][ T9567] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 385.728954][ T9567] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 385.732153][ T9568] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 385.747177][ T9571] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 385.755948][ T9573] FAULT_INJECTION: forcing a failure. [ 385.755948][ T9573] name failslab, interval 1, probability 0, space 0, times 0 [ 385.761948][ T9573] CPU: 1 PID: 9573 Comm: syz.2.1446 Not tainted syzkaller #0 [ 385.763400][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 385.765251][ T9573] Call trace: [ 385.765880][ T9573] dump_backtrace+0x1c4/0x1f0 [ 385.766838][ T9573] show_stack+0x2c/0x3c [ 385.767766][ T9573] __dump_stack+0x30/0x40 [ 385.768670][ T9573] dump_stack_lvl+0xf4/0x15c [ 385.769676][ T9573] dump_stack+0x1c/0x5c [ 385.770586][ T9573] should_fail_ex+0x3cc/0x524 [ 385.771541][ T9573] __should_failslab+0xc0/0x11c [ 385.772540][ T9573] should_failslab+0x10/0x28 [ 385.773480][ T9573] __kmem_cache_alloc_node+0x7c/0x318 [ 385.774681][ T9573] kmalloc_trace+0x48/0x94 [ 385.775643][ T9573] drm_file_alloc+0x80/0x6a0 [ 385.776565][ T9573] drm_open+0x2e0/0x9dc [ 385.777487][ T9573] drm_stub_open+0x1c4/0x264 [ 385.778471][ T9573] chrdev_open+0x3d0/0x51c [ 385.779307][ T9573] do_dentry_open+0x738/0xf8c [ 385.780155][ T9573] vfs_open+0x7c/0x90 [ 385.780927][ T9573] path_openat+0x1fc0/0x27a0 [ 385.781767][ T9573] do_filp_open+0x198/0x38c [ 385.782643][ T9573] do_sys_openat2+0x134/0x3fc [ 385.783612][ T9573] __arm64_sys_openat+0x11c/0x150 [ 385.784636][ T9573] invoke_syscall+0x98/0x290 [ 385.785503][ T9573] el0_svc_common+0x13c/0x258 [ 385.786430][ T9573] do_el0_svc+0x5c/0x134 [ 385.787246][ T9573] el0_svc+0x58/0x12c [ 385.788037][ T9573] el0t_64_sync_handler+0x84/0xf0 [ 385.789003][ T9573] el0t_64_sync+0x18c/0x190 [ 385.795309][ T9571] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 385.809457][ T27] kauditd_printk_skb: 405 callbacks suppressed [ 385.809465][ T27] audit: type=1326 audit(2000000107.916:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.4.1447" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf579728 code=0x7ffc0000 [ 385.813984][ T9570] device syzkaller0 entered promiscuous mode [ 385.819713][ T8206] nvme nvme1: 2/0/0 default/read/poll queues [ 385.837672][ T4680] GPT:Primary header thinks Alt. header is not at the end of the disk. [ 385.839455][ T4680] GPT:2621543 != 20971519 [ 385.840396][ T4680] GPT:Alternate GPT header not at the end of the disk. [ 385.843776][ T27] audit: type=1326 audit(2000000107.916:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.4.1447" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffaf55c5ec code=0x7ffc0000 [ 385.852624][ T4680] GPT:2621543 != 20971519 [ 385.859318][ T4680] GPT: Use GNU Parted to correct GPT errors. [ 385.863100][ T4680] nvme0n2: p1 p2 [ 385.874282][ T27] audit: type=1326 audit(2000000107.916:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.4.1447" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaf579728 code=0x7ffc0000 [ 385.880906][ T9552] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 385.906730][ T27] audit: type=1326 audit(2000000107.925:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.4.1447" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffaf55c5ec code=0x7ffc0000 [ 385.924832][ T9577] FAULT_INJECTION: forcing a failure. [ 385.924832][ T9577] name failslab, interval 1, probability 0, space 0, times 0 [ 385.927021][ T9577] CPU: 0 PID: 9577 Comm: syz.2.1449 Not tainted syzkaller #0 [ 385.928429][ T9577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 385.930286][ T9577] Call trace: [ 385.930896][ T9577] dump_backtrace+0x1c4/0x1f0 [ 385.931797][ T9577] show_stack+0x2c/0x3c [ 385.932587][ T9577] __dump_stack+0x30/0x40 [ 385.933465][ T9577] dump_stack_lvl+0xf4/0x15c [ 385.934418][ T9577] dump_stack+0x1c/0x5c [ 385.935249][ T9577] should_fail_ex+0x3cc/0x524 [ 385.936136][ T9577] __should_failslab+0xc0/0x11c [ 385.937106][ T9577] should_failslab+0x10/0x28 [ 385.938060][ T9577] __kmem_cache_alloc_node+0x7c/0x318 [ 385.939183][ T9577] __kmalloc+0xc4/0x180 [ 385.940063][ T9577] security_sk_alloc+0x54/0x140 [ 385.941026][ T9577] sk_prot_alloc+0xe0/0x1e8 [ 385.941971][ T9577] sk_alloc+0x44/0x3a0 [ 385.942843][ T9577] __netlink_create+0x80/0x2a8 [ 385.943822][ T9577] __netlink_kernel_create+0x130/0x6a4 [ 385.944910][ T9577] uevent_net_init+0xe8/0x2a0 [ 385.945894][ T9577] ops_init+0x2b0/0x53c [ 385.946779][ T9577] setup_net+0x494/0xb6c [ 385.947652][ T9577] copy_net_ns+0x2b8/0x578 [ 385.948525][ T9577] create_new_namespaces+0x30c/0x604 [ 385.949502][ T9577] unshare_nsproxy_namespaces+0x108/0x160 [ 385.950606][ T9577] ksys_unshare+0x3f0/0x70c [ 385.951476][ T9577] __arm64_sys_unshare+0x3c/0x50 [ 385.952509][ T9577] invoke_syscall+0x98/0x290 [ 385.953424][ T9577] el0_svc_common+0x13c/0x258 [ 385.954324][ T9577] do_el0_svc+0x5c/0x134 [ 385.955237][ T9577] el0_svc+0x58/0x12c [ 385.956104][ T9577] el0t_64_sync_handler+0x84/0xf0 [ 385.957172][ T9577] el0t_64_sync+0x18c/0x190 [ 385.958799][ T2068] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.960126][ T2068] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.961941][ T9577] kobject_uevent: unable to create netlink socket! [ 385.963502][ T27] audit: type=1326 audit(2000000107.925:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.4.1447" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffaf55c5ec code=0x7ffc0000 [ 385.984243][ T27] audit: type=1326 audit(2000000107.925:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.4.1447" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffaf55c5ec code=0x7ffc0000 [ 385.998913][ T27] audit: type=1326 audit(2000000107.935:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.4.1447" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffaf55c5ec code=0x7ffc0000 [ 386.006438][ T27] audit: type=1326 audit(2000000107.935:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.4.1447" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffaf55c5ec code=0x7ffc0000 [ 386.012135][ T27] audit: type=1326 audit(2000000107.935:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.4.1447" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffaf55c5ec code=0x7ffc0000 [ 386.017830][ T27] audit: type=1326 audit(2000000107.935:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9567 comm="syz.4.1447" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffaf55c5ec code=0x7ffc0000 [ 386.054307][ T9581] rxe_eth0 speed is unknown, defaulting to 1000 [ 386.276047][ T9583] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1451'. [ 386.338463][ T9590] EXT4-fs error: 53 callbacks suppressed [ 386.338483][ T9590] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1455: Detected aborted journal [ 386.352485][ T9590] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1455: Detected aborted journal [ 386.358981][ T9590] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1455: Detected aborted journal [ 386.384268][ T9590] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1455: Detected aborted journal [ 386.388898][ T9590] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1455: Detected aborted journal [ 386.398501][ T9590] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1455: Detected aborted journal [ 386.416807][ T9590] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1455: Detected aborted journal [ 386.419910][ T9590] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1455: Detected aborted journal [ 386.581089][ T9582] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.4.1451: Detected aborted journal [ 386.585624][ T9590] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1455: Detected aborted journal [ 387.605747][ T9614] FAULT_INJECTION: forcing a failure. [ 387.605747][ T9614] name failslab, interval 1, probability 0, space 0, times 0 [ 387.611716][ T9614] CPU: 1 PID: 9614 Comm: syz.1.1461 Not tainted syzkaller #0 [ 387.613130][ T9614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 387.615336][ T9614] Call trace: [ 387.616064][ T9614] dump_backtrace+0x1c4/0x1f0 [ 387.617100][ T9614] show_stack+0x2c/0x3c [ 387.617987][ T9614] __dump_stack+0x30/0x40 [ 387.618940][ T9614] dump_stack_lvl+0xf4/0x15c [ 387.619870][ T9614] dump_stack+0x1c/0x5c [ 387.620747][ T9614] should_fail_ex+0x3cc/0x524 [ 387.621735][ T9614] __should_failslab+0xc0/0x11c [ 387.622780][ T9614] should_failslab+0x10/0x28 [ 387.623808][ T9614] __kmem_cache_alloc_node+0x7c/0x318 [ 387.625016][ T9614] kmalloc_trace+0x48/0x94 [ 387.625991][ T9614] drm_master_create+0x5c/0x358 [ 387.626887][ T9614] drm_new_set_master+0xe0/0x354 [ 387.627910][ T9614] drm_master_open+0x12c/0x190 [ 387.628894][ T9614] drm_open+0x5f8/0x9dc [ 387.629769][ T9614] drm_stub_open+0x1c4/0x264 [ 387.630747][ T9614] chrdev_open+0x3d0/0x51c [ 387.631719][ T9614] do_dentry_open+0x738/0xf8c [ 387.632723][ T9614] vfs_open+0x7c/0x90 [ 387.633555][ T9614] path_openat+0x1fc0/0x27a0 [ 387.634448][ T9614] do_filp_open+0x198/0x38c [ 387.635337][ T9614] do_sys_openat2+0x134/0x3fc [ 387.636242][ T9614] __arm64_sys_openat+0x11c/0x150 [ 387.637261][ T9614] invoke_syscall+0x98/0x290 [ 387.638314][ T9614] el0_svc_common+0x13c/0x258 [ 387.639357][ T9614] do_el0_svc+0x5c/0x134 [ 387.640243][ T9614] el0_svc+0x58/0x12c [ 387.641037][ T9614] el0t_64_sync_handler+0x84/0xf0 [ 387.642089][ T9614] el0t_64_sync+0x18c/0x190 [ 387.643036][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.668675][ T9623] FAULT_INJECTION: forcing a failure. [ 387.668675][ T9623] name failslab, interval 1, probability 0, space 0, times 0 [ 387.675246][ T9623] CPU: 0 PID: 9623 Comm: syz.3.1467 Not tainted syzkaller #0 [ 387.675620][ T9621] device syzkaller0 entered promiscuous mode [ 387.676760][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 387.676772][ T9623] Call trace: [ 387.676777][ T9623] dump_backtrace+0x1c4/0x1f0 [ 387.681668][ T9623] show_stack+0x2c/0x3c [ 387.682511][ T9623] __dump_stack+0x30/0x40 [ 387.683430][ T9623] dump_stack_lvl+0xf4/0x15c [ 387.684291][ T9623] dump_stack+0x1c/0x5c [ 387.685034][ T9623] should_fail_ex+0x3cc/0x524 [ 387.685931][ T9623] __should_failslab+0xc0/0x11c [ 387.686843][ T9623] should_failslab+0x10/0x28 [ 387.687822][ T9623] __kmem_cache_alloc_node+0x7c/0x318 [ 387.689025][ T9623] kmalloc_trace+0x48/0x94 [ 387.689927][ T9623] mqueue_init_fs_context+0x60/0x374 [ 387.691011][ T9623] alloc_fs_context+0x530/0x778 [ 387.691986][ T9623] fs_context_for_mount+0x34/0x44 [ 387.693020][ T9623] mq_init_ns+0xdc/0x4d8 [ 387.693924][ T9623] copy_ipcs+0x274/0x4d4 [ 387.694855][ T9623] create_new_namespaces+0x1b0/0x604 [ 387.696017][ T9623] unshare_nsproxy_namespaces+0x108/0x160 [ 387.697272][ T9623] ksys_unshare+0x3f0/0x70c [ 387.698179][ T9623] __arm64_sys_unshare+0x3c/0x50 [ 387.699270][ T9623] invoke_syscall+0x98/0x290 [ 387.700311][ T9623] el0_svc_common+0x13c/0x258 [ 387.701331][ T9623] do_el0_svc+0x5c/0x134 [ 387.702196][ T9623] el0_svc+0x58/0x12c [ 387.703100][ T9623] el0t_64_sync_handler+0x84/0xf0 [ 387.704199][ T9623] el0t_64_sync+0x18c/0x190 [ 387.745069][ T9632] FAULT_INJECTION: forcing a failure. [ 387.745069][ T9632] name failslab, interval 1, probability 0, space 0, times 0 [ 387.747389][ T9632] CPU: 1 PID: 9632 Comm: syz.1.1469 Not tainted syzkaller #0 [ 387.748748][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 387.751073][ T9632] Call trace: [ 387.751836][ T9632] dump_backtrace+0x1c4/0x1f0 [ 387.752883][ T9632] show_stack+0x2c/0x3c [ 387.753766][ T9632] __dump_stack+0x30/0x40 [ 387.754614][ T9632] dump_stack_lvl+0xf4/0x15c [ 387.755566][ T9632] dump_stack+0x1c/0x5c [ 387.756411][ T9632] should_fail_ex+0x3cc/0x524 [ 387.757414][ T9632] __should_failslab+0xc0/0x11c [ 387.758380][ T9632] should_failslab+0x10/0x28 [ 387.759276][ T9632] __kmem_cache_alloc_node+0x7c/0x318 [ 387.760406][ T9632] __kmalloc+0xc4/0x180 [ 387.761267][ T9632] sk_prot_alloc+0xc4/0x1e8 [ 387.762138][ T9632] sk_alloc+0x44/0x3a0 [ 387.762931][ T9632] __netlink_create+0x80/0x2a8 [ 387.763910][ T9632] __netlink_kernel_create+0x130/0x6a4 [ 387.764930][ T9632] uevent_net_init+0xe8/0x2a0 [ 387.765848][ T9632] ops_init+0x2b0/0x53c [ 387.766732][ T9632] setup_net+0x494/0xb6c [ 387.767646][ T9632] copy_net_ns+0x2b8/0x578 [ 387.768529][ T9632] create_new_namespaces+0x30c/0x604 [ 387.769550][ T9632] unshare_nsproxy_namespaces+0x108/0x160 [ 387.770609][ T9632] ksys_unshare+0x3f0/0x70c [ 387.771430][ T9632] __arm64_sys_unshare+0x3c/0x50 [ 387.772396][ T9632] invoke_syscall+0x98/0x290 [ 387.773302][ T9632] el0_svc_common+0x13c/0x258 [ 387.774284][ T9632] do_el0_svc+0x5c/0x134 [ 387.775144][ T9632] el0_svc+0x58/0x12c [ 387.775928][ T9632] el0t_64_sync_handler+0x84/0xf0 [ 387.776964][ T9632] el0t_64_sync+0x18c/0x190 [ 387.777963][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.783081][ T9632] kobject_uevent: unable to create netlink socket! [ 388.302951][ T9639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1474'. [ 388.854792][ T9663] FAULT_INJECTION: forcing a failure. [ 388.854792][ T9663] name failslab, interval 1, probability 0, space 0, times 0 [ 388.858670][ T9663] CPU: 0 PID: 9663 Comm: syz.3.1482 Not tainted syzkaller #0 [ 388.860164][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 388.862120][ T9663] Call trace: [ 388.862763][ T9663] dump_backtrace+0x1c4/0x1f0 [ 388.863733][ T9663] show_stack+0x2c/0x3c [ 388.864583][ T9663] __dump_stack+0x30/0x40 [ 388.865441][ T9663] dump_stack_lvl+0xf4/0x15c [ 388.866469][ T9663] dump_stack+0x1c/0x5c [ 388.867337][ T9663] should_fail_ex+0x3cc/0x524 [ 388.868282][ T9663] __should_failslab+0xc0/0x11c [ 388.869358][ T9663] should_failslab+0x10/0x28 [ 388.870377][ T9663] kmem_cache_alloc+0x88/0x310 [ 388.871356][ T9663] create_new_namespaces+0x48/0x604 [ 388.872407][ T9663] unshare_nsproxy_namespaces+0x108/0x160 [ 388.873571][ T9663] ksys_unshare+0x3f0/0x70c [ 388.874491][ T9663] __arm64_sys_unshare+0x3c/0x50 [ 388.875433][ T9663] invoke_syscall+0x98/0x290 [ 388.876380][ T9663] el0_svc_common+0x13c/0x258 [ 388.877395][ T9663] do_el0_svc+0x5c/0x134 [ 388.878258][ T9663] el0_svc+0x58/0x12c [ 388.879183][ T9663] el0t_64_sync_handler+0x84/0xf0 [ 388.880311][ T9663] el0t_64_sync+0x18c/0x190 [ 389.084602][ T9673] device syzkaller0 entered promiscuous mode [ 389.182275][ T9676] FAULT_INJECTION: forcing a failure. [ 389.182275][ T9676] name failslab, interval 1, probability 0, space 0, times 0 [ 389.187701][ T9676] CPU: 0 PID: 9676 Comm: syz.1.1486 Not tainted syzkaller #0 [ 389.189350][ T9676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 389.191549][ T9676] Call trace: [ 389.192269][ T9676] dump_backtrace+0x1c4/0x1f0 [ 389.193259][ T9676] show_stack+0x2c/0x3c [ 389.194104][ T9676] __dump_stack+0x30/0x40 [ 389.195002][ T9676] dump_stack_lvl+0xf4/0x15c [ 389.195935][ T9676] dump_stack+0x1c/0x5c [ 389.196698][ T9676] should_fail_ex+0x3cc/0x524 [ 389.197577][ T9676] __should_failslab+0xc0/0x11c [ 389.198509][ T9676] should_failslab+0x10/0x28 [ 389.199481][ T9676] __kmem_cache_alloc_node+0x7c/0x318 [ 389.200682][ T9676] __kmalloc+0xc4/0x180 [ 389.201546][ T9676] sk_prot_alloc+0xc4/0x1e8 [ 389.202515][ T9676] sk_alloc+0x44/0x3a0 [ 389.203304][ T9676] __netlink_create+0x80/0x2a8 [ 389.204233][ T9676] __netlink_kernel_create+0x130/0x6a4 [ 389.205390][ T9676] uevent_net_init+0xe8/0x2a0 [ 389.206377][ T9676] ops_init+0x2b0/0x53c [ 389.207234][ T9676] setup_net+0x494/0xb6c [ 389.208098][ T9676] copy_net_ns+0x2b8/0x578 [ 389.208994][ T9676] create_new_namespaces+0x30c/0x604 [ 389.210081][ T9676] unshare_nsproxy_namespaces+0x108/0x160 [ 389.211250][ T9676] ksys_unshare+0x3f0/0x70c [ 389.212199][ T9676] __arm64_sys_unshare+0x3c/0x50 [ 389.213211][ T9676] invoke_syscall+0x98/0x290 [ 389.214197][ T9676] el0_svc_common+0x13c/0x258 [ 389.215246][ T9676] do_el0_svc+0x5c/0x134 [ 389.216149][ T9676] el0_svc+0x58/0x12c [ 389.216966][ T9676] el0t_64_sync_handler+0x84/0xf0 [ 389.218003][ T9676] el0t_64_sync+0x18c/0x190 [ 389.227060][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1487'. [ 389.237726][ T9676] kobject_uevent: unable to create netlink socket! [ 389.886454][ T9698] FAULT_INJECTION: forcing a failure. [ 389.886454][ T9698] name failslab, interval 1, probability 0, space 0, times 0 [ 389.891345][ T9698] CPU: 1 PID: 9698 Comm: syz.1.1495 Not tainted syzkaller #0 [ 389.892787][ T9698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 389.894982][ T9698] Call trace: [ 389.895687][ T9698] dump_backtrace+0x1c4/0x1f0 [ 389.896671][ T9698] show_stack+0x2c/0x3c [ 389.897525][ T9698] __dump_stack+0x30/0x40 [ 389.898434][ T9698] dump_stack_lvl+0xf4/0x15c [ 389.899380][ T9698] dump_stack+0x1c/0x5c [ 389.900240][ T9698] should_fail_ex+0x3cc/0x524 [ 389.901156][ T9698] __should_failslab+0xc0/0x11c [ 389.902221][ T9698] should_failslab+0x10/0x28 [ 389.903184][ T9698] __kmem_cache_alloc_node+0x7c/0x318 [ 389.904392][ T9698] kmalloc_trace+0x48/0x94 [ 389.905313][ T9698] mqueue_init_fs_context+0x60/0x374 [ 389.906474][ T9698] alloc_fs_context+0x530/0x778 [ 389.907547][ T9698] fs_context_for_mount+0x34/0x44 [ 389.908564][ T9698] mq_init_ns+0xdc/0x4d8 [ 389.909456][ T9698] copy_ipcs+0x274/0x4d4 [ 389.910264][ T9698] create_new_namespaces+0x1b0/0x604 [ 389.911342][ T9698] unshare_nsproxy_namespaces+0x108/0x160 [ 389.912440][ T9698] ksys_unshare+0x3f0/0x70c [ 389.913347][ T9698] __arm64_sys_unshare+0x3c/0x50 [ 389.914299][ T9698] invoke_syscall+0x98/0x290 [ 389.915182][ T9698] el0_svc_common+0x13c/0x258 [ 389.916142][ T9698] do_el0_svc+0x5c/0x134 [ 389.917015][ T9698] el0_svc+0x58/0x12c [ 389.917857][ T9698] el0t_64_sync_handler+0x84/0xf0 [ 389.918911][ T9698] el0t_64_sync+0x18c/0x190 [ 389.919945][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.209747][ T9708] FAULT_INJECTION: forcing a failure. [ 390.209747][ T9708] name failslab, interval 1, probability 0, space 0, times 0 [ 390.214644][ T9708] CPU: 1 PID: 9708 Comm: syz.0.1507 Not tainted syzkaller #0 [ 390.216126][ T9708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 390.218371][ T9708] Call trace: [ 390.219111][ T9708] dump_backtrace+0x1c4/0x1f0 [ 390.220082][ T9708] show_stack+0x2c/0x3c [ 390.220970][ T9708] __dump_stack+0x30/0x40 [ 390.221843][ T9708] dump_stack_lvl+0xf4/0x15c [ 390.222727][ T9708] dump_stack+0x1c/0x5c [ 390.223510][ T9708] should_fail_ex+0x3cc/0x524 [ 390.224423][ T9708] __should_failslab+0xc0/0x11c [ 390.224891][ T9703] device syzkaller0 entered promiscuous mode [ 390.225327][ T9708] should_failslab+0x10/0x28 [ 390.227462][ T9708] __kmem_cache_alloc_node+0x7c/0x318 [ 390.228605][ T9708] kmalloc_trace+0x48/0x94 [ 390.229444][ T9708] mqueue_init_fs_context+0x60/0x374 [ 390.230471][ T9708] alloc_fs_context+0x530/0x778 [ 390.231421][ T9708] fs_context_for_mount+0x34/0x44 [ 390.232440][ T9708] mq_init_ns+0xdc/0x4d8 [ 390.233363][ T9708] copy_ipcs+0x274/0x4d4 [ 390.234200][ T9708] create_new_namespaces+0x1b0/0x604 [ 390.235202][ T9708] unshare_nsproxy_namespaces+0x108/0x160 [ 390.236304][ T9708] ksys_unshare+0x3f0/0x70c [ 390.237229][ T9708] __arm64_sys_unshare+0x3c/0x50 [ 390.238254][ T9708] invoke_syscall+0x98/0x290 [ 390.239214][ T9708] el0_svc_common+0x13c/0x258 [ 390.240071][ T9708] do_el0_svc+0x5c/0x134 [ 390.240880][ T9708] el0_svc+0x58/0x12c [ 390.241580][ T9708] el0t_64_sync_handler+0x84/0xf0 [ 390.242578][ T9708] el0t_64_sync+0x18c/0x190 [ 390.349175][ T9716] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1500'. [ 390.354419][ T9718] rxe_eth0 speed is unknown, defaulting to 1000 [ 390.693496][ T9721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1503'. [ 390.802155][ T9736] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 390.824705][ T9738] FAULT_INJECTION: forcing a failure. [ 390.824705][ T9738] name failslab, interval 1, probability 0, space 0, times 0 [ 390.827623][ T9738] CPU: 1 PID: 9738 Comm: syz.2.1511 Not tainted syzkaller #0 [ 390.829356][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 390.831522][ T9738] Call trace: [ 390.832248][ T9738] dump_backtrace+0x1c4/0x1f0 [ 390.833256][ T9738] show_stack+0x2c/0x3c [ 390.834226][ T9738] __dump_stack+0x30/0x40 [ 390.835220][ T9738] dump_stack_lvl+0xf4/0x15c [ 390.836273][ T9738] dump_stack+0x1c/0x5c [ 390.837101][ T9738] should_fail_ex+0x3cc/0x524 [ 390.837988][ T9738] __should_failslab+0xc0/0x11c [ 390.838992][ T9738] should_failslab+0x10/0x28 [ 390.839860][ T9738] __kmem_cache_alloc_node+0x7c/0x318 [ 390.840927][ T9738] kmalloc_trace+0x48/0x94 [ 390.841781][ T9738] mqueue_init_fs_context+0x60/0x374 [ 390.842840][ T9738] alloc_fs_context+0x530/0x778 [ 390.843821][ T9738] fs_context_for_mount+0x34/0x44 [ 390.844728][ T9738] mq_init_ns+0xdc/0x4d8 [ 390.845473][ T9738] copy_ipcs+0x274/0x4d4 [ 390.846300][ T9738] create_new_namespaces+0x1b0/0x604 [ 390.847355][ T9738] unshare_nsproxy_namespaces+0x108/0x160 [ 390.848395][ T9738] ksys_unshare+0x3f0/0x70c [ 390.849198][ T9738] __arm64_sys_unshare+0x3c/0x50 [ 390.850115][ T9738] invoke_syscall+0x98/0x290 [ 390.851053][ T9738] el0_svc_common+0x13c/0x258 [ 390.851914][ T9738] do_el0_svc+0x5c/0x134 [ 390.852905][ T9738] el0_svc+0x58/0x12c [ 390.853858][ T9738] el0t_64_sync_handler+0x84/0xf0 [ 390.855002][ T9738] el0t_64_sync+0x18c/0x190 [ 390.855990][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.151497][ T9707] EXT4-fs: 154 callbacks suppressed [ 391.151512][ T9707] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 391.173269][ T4319] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 391.181899][ T9732] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 391.183383][ T4319] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 391.193845][ T9741] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 391.195976][ T9732] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 391.198231][ T9732] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 391.200824][ T9743] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 391.202887][ T9741] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 391.209127][ T9743] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 391.326240][ T9747] libceph: resolve 'c' (ret=-3): failed [ 391.346150][ T9747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.440781][ T9752] device syzkaller0 entered promiscuous mode [ 391.698405][ T9757] rxe_eth0 speed is unknown, defaulting to 1000 [ 391.698494][ T9732] EXT4-fs error: 143 callbacks suppressed [ 391.698506][ T9732] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1509: Detected aborted journal [ 391.760196][ T27] kauditd_printk_skb: 292 callbacks suppressed [ 391.760211][ T27] audit: type=1326 audit(2000000113.484:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.1.1516" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0779728 code=0x7ffc0000 [ 391.787390][ T27] audit: type=1326 audit(2000000113.484:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.1.1516" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 391.792614][ T9756] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1517: Detected aborted journal [ 391.797896][ T9756] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1517: Detected aborted journal [ 391.803779][ T27] audit: type=1326 audit(2000000113.484:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.1.1516" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0779728 code=0x7ffc0000 [ 391.805719][ T9756] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1517: Detected aborted journal [ 391.816552][ T9756] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1517: Detected aborted journal [ 391.818986][ T27] audit: type=1326 audit(2000000113.521:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.1.1516" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 391.834206][ T27] audit: type=1326 audit(2000000113.521:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.1.1516" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 391.845542][ T27] audit: type=1326 audit(2000000113.531:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.1.1516" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 391.850655][ T4319] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 391.865324][ T27] audit: type=1326 audit(2000000113.531:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.1.1516" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 391.867305][ T9760] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1519: Detected aborted journal [ 391.879307][ T9761] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1518: Detected aborted journal [ 391.879533][ T27] audit: type=1326 audit(2000000113.531:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.1.1516" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 391.889363][ T9761] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1518: Detected aborted journal [ 391.891975][ T9753] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1516: Detected aborted journal [ 391.901199][ T27] audit: type=1326 audit(2000000113.531:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.1.1516" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 391.908666][ T27] audit: type=1326 audit(2000000113.531:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9753 comm="syz.1.1516" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 391.933803][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1518'. [ 391.969409][ T9769] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 391.978489][ T9771] FAULT_INJECTION: forcing a failure. [ 391.978489][ T9771] name failslab, interval 1, probability 0, space 0, times 0 [ 391.983257][ T9771] CPU: 0 PID: 9771 Comm: syz.1.1523 Not tainted syzkaller #0 [ 391.984799][ T9771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 391.986896][ T9771] Call trace: [ 391.987580][ T9771] dump_backtrace+0x1c4/0x1f0 [ 391.988601][ T9771] show_stack+0x2c/0x3c [ 391.989534][ T9771] __dump_stack+0x30/0x40 [ 391.990493][ T9771] dump_stack_lvl+0xf4/0x15c [ 391.991510][ T9771] dump_stack+0x1c/0x5c [ 391.992491][ T9771] should_fail_ex+0x3cc/0x524 [ 391.993516][ T9771] __should_failslab+0xc0/0x11c [ 391.994607][ T9771] should_failslab+0x10/0x28 [ 391.995691][ T9771] __kmem_cache_alloc_node+0x7c/0x318 [ 391.996875][ T9771] kmalloc_trace+0x48/0x94 [ 391.997921][ T9771] mqueue_init_fs_context+0x60/0x374 [ 391.999057][ T9771] alloc_fs_context+0x530/0x778 [ 392.000087][ T9771] fs_context_for_mount+0x34/0x44 [ 392.001121][ T9771] mq_init_ns+0xdc/0x4d8 [ 392.002008][ T9771] copy_ipcs+0x274/0x4d4 [ 392.002983][ T9771] create_new_namespaces+0x1b0/0x604 [ 392.004149][ T9771] unshare_nsproxy_namespaces+0x108/0x160 [ 392.005333][ T9771] ksys_unshare+0x3f0/0x70c [ 392.006366][ T9771] __arm64_sys_unshare+0x3c/0x50 [ 392.007436][ T9771] invoke_syscall+0x98/0x290 [ 392.008403][ T9771] el0_svc_common+0x13c/0x258 [ 392.009413][ T9771] do_el0_svc+0x5c/0x134 [ 392.010355][ T9771] el0_svc+0x58/0x12c [ 392.011151][ T9771] el0t_64_sync_handler+0x84/0xf0 [ 392.012187][ T9771] el0t_64_sync+0x18c/0x190 [ 392.032168][ T9775] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1525'. [ 392.092840][ T9783] rxe_eth0 speed is unknown, defaulting to 1000 [ 392.139994][ T9781] device syzkaller0 entered promiscuous mode [ 392.923205][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1533'. [ 393.074207][ T9803] FAULT_INJECTION: forcing a failure. [ 393.074207][ T9803] name failslab, interval 1, probability 0, space 0, times 0 [ 393.083657][ T9803] CPU: 0 PID: 9803 Comm: syz.3.1537 Not tainted syzkaller #0 [ 393.085031][ T9803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 393.086948][ T9803] Call trace: [ 393.087561][ T9803] dump_backtrace+0x1c4/0x1f0 [ 393.088516][ T9803] show_stack+0x2c/0x3c [ 393.089349][ T9803] __dump_stack+0x30/0x40 [ 393.090229][ T9803] dump_stack_lvl+0xf4/0x15c [ 393.091187][ T9803] dump_stack+0x1c/0x5c [ 393.092061][ T9803] should_fail_ex+0x3cc/0x524 [ 393.093018][ T9803] __should_failslab+0xc0/0x11c [ 393.094006][ T9803] should_failslab+0x10/0x28 [ 393.094955][ T9803] kmem_cache_alloc+0x88/0x310 [ 393.095929][ T9803] create_new_namespaces+0x48/0x604 [ 393.096933][ T9803] unshare_nsproxy_namespaces+0x108/0x160 [ 393.098100][ T9803] ksys_unshare+0x3f0/0x70c [ 393.099072][ T9803] __arm64_sys_unshare+0x3c/0x50 [ 393.100084][ T9803] invoke_syscall+0x98/0x290 [ 393.101072][ T9803] el0_svc_common+0x13c/0x258 [ 393.101997][ T9803] do_el0_svc+0x5c/0x134 [ 393.102798][ T9803] el0_svc+0x58/0x12c [ 393.103552][ T9803] el0t_64_sync_handler+0x84/0xf0 [ 393.104511][ T9803] el0t_64_sync+0x18c/0x190 [ 393.138747][ T9816] ubi0 error: ubi_open_volume: cannot open device 0, volume 0, error -19 [ 393.182147][ T9819] rxe_eth0 speed is unknown, defaulting to 1000 [ 393.200762][ T9821] device syzkaller0 entered promiscuous mode [ 393.296585][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'. [ 393.442913][ T9845] FAULT_INJECTION: forcing a failure. [ 393.442913][ T9845] name failslab, interval 1, probability 0, space 0, times 0 [ 393.456880][ T9845] CPU: 1 PID: 9845 Comm: syz.3.1555 Not tainted syzkaller #0 [ 393.458445][ T9845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 393.460560][ T9845] Call trace: [ 393.461225][ T9845] dump_backtrace+0x1c4/0x1f0 [ 393.462227][ T9845] show_stack+0x2c/0x3c [ 393.463073][ T9845] __dump_stack+0x30/0x40 [ 393.463955][ T9845] dump_stack_lvl+0xf4/0x15c [ 393.464906][ T9845] dump_stack+0x1c/0x5c [ 393.465742][ T9845] should_fail_ex+0x3cc/0x524 [ 393.466695][ T9845] __should_failslab+0xc0/0x11c [ 393.467646][ T9845] should_failslab+0x10/0x28 [ 393.468576][ T9845] __kmem_cache_alloc_node+0x7c/0x318 [ 393.469712][ T9845] kmalloc_trace+0x48/0x94 [ 393.470573][ T9845] mqueue_init_fs_context+0x60/0x374 [ 393.471649][ T9845] alloc_fs_context+0x530/0x778 [ 393.472659][ T9845] fs_context_for_mount+0x34/0x44 [ 393.473709][ T9845] mq_init_ns+0xdc/0x4d8 [ 393.474579][ T9845] copy_ipcs+0x274/0x4d4 [ 393.475464][ T9845] create_new_namespaces+0x1b0/0x604 [ 393.476497][ T9845] unshare_nsproxy_namespaces+0x108/0x160 [ 393.477634][ T9845] ksys_unshare+0x3f0/0x70c [ 393.478626][ T9845] __arm64_sys_unshare+0x3c/0x50 [ 393.479686][ T9845] invoke_syscall+0x98/0x290 [ 393.480629][ T9845] el0_svc_common+0x13c/0x258 [ 393.481600][ T9845] do_el0_svc+0x5c/0x134 [ 393.482500][ T9845] el0_svc+0x58/0x12c [ 393.483281][ T9845] el0t_64_sync_handler+0x84/0xf0 [ 393.484310][ T9845] el0t_64_sync+0x18c/0x190 [ 393.504038][ T9849] input: syz0 as /devices/virtual/input/input6 [ 393.508662][ T9850] rxe_eth0 speed is unknown, defaulting to 1000 [ 393.521555][ T9849] netlink: 'syz.4.1556': attribute type 3 has an invalid length. [ 393.745345][ T9868] device syzkaller0 entered promiscuous mode [ 393.877836][ T9880] FAULT_INJECTION: forcing a failure. [ 393.877836][ T9880] name failslab, interval 1, probability 0, space 0, times 0 [ 393.886189][ T9880] CPU: 0 PID: 9880 Comm: syz.3.1569 Not tainted syzkaller #0 [ 393.887532][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 393.889421][ T9880] Call trace: [ 393.890077][ T9880] dump_backtrace+0x1c4/0x1f0 [ 393.891086][ T9880] show_stack+0x2c/0x3c [ 393.891975][ T9880] __dump_stack+0x30/0x40 [ 393.892898][ T9880] dump_stack_lvl+0xf4/0x15c [ 393.893816][ T9880] dump_stack+0x1c/0x5c [ 393.894715][ T9880] should_fail_ex+0x3cc/0x524 [ 393.895659][ T9880] __should_failslab+0xc0/0x11c [ 393.896652][ T9880] should_failslab+0x10/0x28 [ 393.897555][ T9880] __kmem_cache_alloc_node+0x7c/0x318 [ 393.898519][ T9880] kmalloc_trace+0x48/0x94 [ 393.899421][ T9880] mqueue_init_fs_context+0x60/0x374 [ 393.900427][ T9880] alloc_fs_context+0x530/0x778 [ 393.901402][ T9880] fs_context_for_mount+0x34/0x44 [ 393.902273][ T9880] mq_init_ns+0xdc/0x4d8 [ 393.903055][ T9880] copy_ipcs+0x274/0x4d4 [ 393.903935][ T9880] create_new_namespaces+0x1b0/0x604 [ 393.905173][ T9880] unshare_nsproxy_namespaces+0x108/0x160 [ 393.906527][ T9880] ksys_unshare+0x3f0/0x70c [ 393.907444][ T9880] __arm64_sys_unshare+0x3c/0x50 [ 393.908519][ T9880] invoke_syscall+0x98/0x290 [ 393.909571][ T9880] el0_svc_common+0x13c/0x258 [ 393.910528][ T9880] do_el0_svc+0x5c/0x134 [ 393.911330][ T9880] el0_svc+0x58/0x12c [ 393.912258][ T9880] el0t_64_sync_handler+0x84/0xf0 [ 393.913404][ T9880] el0t_64_sync+0x18c/0x190 [ 393.961576][ T9882] rxe_eth0 speed is unknown, defaulting to 1000 [ 394.227833][ T9908] device syzkaller0 entered promiscuous mode [ 394.352826][ T9918] rxe_eth0 speed is unknown, defaulting to 1000 [ 394.991208][ T9965] rxe_eth0 speed is unknown, defaulting to 1000 [ 395.049935][ T9971] device syzkaller0 entered promiscuous mode [ 395.329920][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1609'. [ 395.765977][T10010] device syzkaller0 entered promiscuous mode [ 395.773790][T10009] rxe_eth0 speed is unknown, defaulting to 1000 [ 396.323386][ T1517] libceph: connect (1)[c::]:6789 error -101 [ 396.324867][ T1517] libceph: mon0 (1)[c::]:6789 connect error [ 396.331958][ T1517] libceph: connect (1)[c::]:6789 error -101 [ 396.333450][ T1517] libceph: mon0 (1)[c::]:6789 connect error [ 396.401935][T10029] FAULT_INJECTION: forcing a failure. [ 396.401935][T10029] name fail_futex, interval 1, probability 0, space 0, times 0 [ 396.404705][T10029] CPU: 1 PID: 10029 Comm: syz.2.1629 Not tainted syzkaller #0 [ 396.406395][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 396.408681][T10029] Call trace: [ 396.409384][T10029] dump_backtrace+0x1c4/0x1f0 [ 396.410453][T10029] show_stack+0x2c/0x3c [ 396.411368][T10029] __dump_stack+0x30/0x40 [ 396.412312][T10029] dump_stack_lvl+0xf4/0x15c [ 396.413305][T10029] dump_stack+0x1c/0x5c [ 396.414146][T10029] should_fail_ex+0x3cc/0x524 [ 396.415195][T10029] should_fail+0x14/0x24 [ 396.416092][T10029] get_futex_key+0x904/0xec0 [ 396.416989][T10029] futex_wake+0x10c/0x458 [ 396.417935][T10029] do_futex+0x2c4/0x340 [ 396.418766][T10029] __arm64_sys_futex+0x390/0x414 [ 396.419801][T10029] invoke_syscall+0x98/0x290 [ 396.420640][T10029] el0_svc_common+0x13c/0x258 [ 396.421451][T10029] do_el0_svc+0x5c/0x134 [ 396.422244][T10029] el0_svc+0x58/0x12c [ 396.423007][T10029] el0t_64_sync_handler+0x84/0xf0 [ 396.423972][T10029] el0t_64_sync+0x18c/0x190 [ 396.507630][T10019] ceph: No mds server is up or the cluster is laggy [ 396.522907][T10037] EXT4-fs: 200 callbacks suppressed [ 396.522914][T10037] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 396.532422][T10038] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 396.548712][T10043] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 396.563497][T10043] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 396.574365][T10030] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 396.581039][T10045] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 396.583805][T10046] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 396.584606][T10045] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 396.612028][T10045] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 396.628935][T10050] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 397.347740][T10099] EXT4-fs error: 247 callbacks suppressed [ 397.347751][T10099] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1656: Detected aborted journal [ 397.352949][T10099] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1656: Detected aborted journal [ 397.363828][T10101] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1657: Detected aborted journal [ 397.381984][T10103] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1658: Detected aborted journal [ 397.389775][T10104] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1659: Detected aborted journal [ 397.395587][T10107] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1533: comm kworker/u4:8: reading directory lblock 0 [ 397.398666][T10103] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1658: Detected aborted journal [ 397.401539][T10108] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1533: comm kworker/u4:8: reading directory lblock 0 [ 397.420265][T10109] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1660: Detected aborted journal [ 397.422435][T10110] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1661: Detected aborted journal [ 397.427019][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'. [ 397.429060][T10112] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1660'. [ 397.431014][T10112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1660'. [ 397.510904][ T27] kauditd_printk_skb: 636 callbacks suppressed [ 397.510915][ T27] audit: type=1326 audit(2000000118.865:2324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.1662" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0779728 code=0x7ffc0000 [ 397.518302][ T27] audit: type=1326 audit(2000000118.874:2325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.1662" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 397.523598][ T27] audit: type=1326 audit(2000000118.874:2326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.1662" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0779728 code=0x7ffc0000 [ 397.529208][ T27] audit: type=1326 audit(2000000118.893:2327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.1662" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 397.534612][ T27] audit: type=1326 audit(2000000118.893:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.1662" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 397.539472][ T27] audit: type=1326 audit(2000000118.902:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.1662" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 397.544948][ T27] audit: type=1326 audit(2000000118.902:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.1662" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 397.551289][ T27] audit: type=1326 audit(2000000118.911:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.1662" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 397.556349][ T27] audit: type=1326 audit(2000000118.911:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.1662" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 397.561467][ T27] audit: type=1326 audit(2000000118.921:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10113 comm="syz.1.1662" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffffb075c5ec code=0x7ffc0000 [ 397.745329][T10137] FAULT_INJECTION: forcing a failure. [ 397.745329][T10137] name failslab, interval 1, probability 0, space 0, times 0 [ 397.748085][T10137] CPU: 1 PID: 10137 Comm: syz.4.1671 Not tainted syzkaller #0 [ 397.749607][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 397.751598][T10137] Call trace: [ 397.752201][T10137] dump_backtrace+0x1c4/0x1f0 [ 397.753165][T10137] show_stack+0x2c/0x3c [ 397.754029][T10137] __dump_stack+0x30/0x40 [ 397.754925][T10137] dump_stack_lvl+0xf4/0x15c [ 397.755874][T10137] dump_stack+0x1c/0x5c [ 397.756685][T10137] should_fail_ex+0x3cc/0x524 [ 397.757633][T10137] __should_failslab+0xc0/0x11c [ 397.758616][T10137] should_failslab+0x10/0x28 [ 397.759565][T10137] __kmem_cache_alloc_node+0x7c/0x318 [ 397.760734][T10137] kmalloc_trace+0x48/0x94 [ 397.761603][T10137] alloc_ucounts+0x168/0x4c4 [ 397.762484][T10137] set_cred_ucounts+0xf4/0x19c [ 397.763456][T10137] __sys_setuid+0x248/0x4e8 [ 397.764290][T10137] __arm64_sys_setuid+0x3c/0x4c [ 397.765197][T10137] invoke_syscall+0x98/0x290 [ 397.766153][T10137] el0_svc_common+0x13c/0x258 [ 397.767095][T10137] do_el0_svc+0x5c/0x134 [ 397.767917][T10137] el0_svc+0x58/0x12c [ 397.768668][T10137] el0t_64_sync_handler+0x84/0xf0 [ 397.769659][T10137] el0t_64_sync+0x18c/0x190 [ 397.803981][T10146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.804106][T10146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.967377][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 398.029849][T10150] FAULT_INJECTION: forcing a failure. [ 398.029849][T10150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.032641][T10150] CPU: 0 PID: 10150 Comm: syz.2.1677 Not tainted syzkaller #0 [ 398.034149][T10150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 398.036067][T10150] Call trace: [ 398.036774][T10150] dump_backtrace+0x1c4/0x1f0 [ 398.037828][T10150] show_stack+0x2c/0x3c [ 398.038720][T10150] __dump_stack+0x30/0x40 [ 398.039659][T10150] dump_stack_lvl+0xf4/0x15c [ 398.040660][T10150] dump_stack+0x1c/0x5c [ 398.041538][T10150] should_fail_ex+0x3cc/0x524 [ 398.042470][T10150] should_fail+0x14/0x24 [ 398.043311][T10150] should_fail_usercopy+0x20/0x30 [ 398.044348][T10150] __arm64_sys_rt_sigreturn+0x136c/0x1f7c [ 398.045549][T10150] invoke_syscall+0x98/0x290 [ 398.046577][T10150] el0_svc_common+0x13c/0x258 [ 398.047507][T10150] do_el0_svc+0x5c/0x134 [ 398.048341][T10150] el0_svc+0x58/0x12c [ 398.049140][T10150] el0t_64_sync_handler+0x84/0xf0 [ 398.050188][T10150] el0t_64_sync+0x18c/0x190 [ 398.570300][T10188] device syzkaller0 entered promiscuous mode [ 398.584429][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1694'. [ 398.899013][T10201] FAULT_INJECTION: forcing a failure. [ 398.899013][T10201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.910727][T10201] CPU: 0 PID: 10201 Comm: syz.2.1699 Not tainted syzkaller #0 [ 398.912353][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 398.914293][T10201] Call trace: [ 398.914949][T10201] dump_backtrace+0x1c4/0x1f0 [ 398.915887][T10201] show_stack+0x2c/0x3c [ 398.916709][T10201] __dump_stack+0x30/0x40 [ 398.917630][T10201] dump_stack_lvl+0xf4/0x15c [ 398.918600][T10201] dump_stack+0x1c/0x5c [ 398.919400][T10201] should_fail_ex+0x3cc/0x524 [ 398.920311][T10201] should_fail+0x14/0x24 [ 398.921207][T10201] should_fail_usercopy+0x20/0x30 [ 398.922181][T10201] __arm64_sys_rt_sigreturn+0x136c/0x1f7c [ 398.923313][T10201] invoke_syscall+0x98/0x290 [ 398.924284][T10201] el0_svc_common+0x13c/0x258 [ 398.925281][T10201] do_el0_svc+0x5c/0x134 [ 398.926249][T10201] el0_svc+0x58/0x12c [ 398.927097][T10201] el0t_64_sync_handler+0x84/0xf0 [ 398.928180][T10201] el0t_64_sync+0x18c/0x190 [ 399.001233][T10216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.003032][T10216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.177135][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1706'. [ 399.438542][T10239] rxe_eth0 speed is unknown, defaulting to 1000 [ 399.586435][T10247] FAULT_INJECTION: forcing a failure. [ 399.586435][T10247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.589142][T10247] CPU: 0 PID: 10247 Comm: syz.2.1716 Not tainted syzkaller #0 [ 399.590515][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 399.592399][T10247] Call trace: [ 399.593053][T10247] dump_backtrace+0x1c4/0x1f0 [ 399.593957][T10247] show_stack+0x2c/0x3c [ 399.594697][T10247] __dump_stack+0x30/0x40 [ 399.595561][T10247] dump_stack_lvl+0xf4/0x15c [ 399.596443][T10247] dump_stack+0x1c/0x5c [ 399.597259][T10247] should_fail_ex+0x3cc/0x524 [ 399.598164][T10247] should_fail+0x14/0x24 [ 399.598942][T10247] should_fail_usercopy+0x20/0x30 [ 399.599923][T10247] __arm64_sys_rt_sigreturn+0x136c/0x1f7c [ 399.601098][T10247] invoke_syscall+0x98/0x290 [ 399.601951][T10247] el0_svc_common+0x13c/0x258 [ 399.602824][T10247] do_el0_svc+0x5c/0x134 [ 399.603646][T10247] el0_svc+0x58/0x12c [ 399.604359][T10247] el0t_64_sync_handler+0x84/0xf0 [ 399.605263][T10247] el0t_64_sync+0x18c/0x190 [ 400.455661][T10285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.458678][T10285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.572137][T10296] XFS (nullb0): Invalid superblock magic number [ 400.636936][T10286] FAULT_INJECTION: forcing a failure. [ 400.636936][T10286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.639844][T10286] CPU: 1 PID: 10286 Comm: syz.0.1730 Not tainted syzkaller #0 [ 400.641196][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 400.643244][T10286] Call trace: [ 400.643858][T10286] dump_backtrace+0x1c4/0x1f0 [ 400.644754][T10286] show_stack+0x2c/0x3c [ 400.645584][T10286] __dump_stack+0x30/0x40 [ 400.646431][T10286] dump_stack_lvl+0xf4/0x15c [ 400.647335][T10286] dump_stack+0x1c/0x5c [ 400.648205][T10286] should_fail_ex+0x3cc/0x524 [ 400.649204][T10286] should_fail+0x14/0x24 [ 400.650019][T10286] should_fail_usercopy+0x20/0x30 [ 400.651069][T10286] __arm64_sys_rt_sigreturn+0x136c/0x1f7c [ 400.652170][T10286] invoke_syscall+0x98/0x290 [ 400.653119][T10286] el0_svc_common+0x13c/0x258 [ 400.654068][T10286] do_el0_svc+0x5c/0x134 [ 400.654967][T10286] el0_svc+0x58/0x12c [ 400.655681][T10286] el0t_64_sync_handler+0x84/0xf0 [ 400.656608][T10286] el0t_64_sync+0x18c/0x190 [ 400.848862][T10311] device macsec0 entered promiscuous mode [ 400.850225][T10311] device gretap0 entered promiscuous mode [ 400.863234][T10311] device gretap0 left promiscuous mode [ 401.559378][T10329] FAULT_INJECTION: forcing a failure. [ 401.559378][T10329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.559425][T10329] CPU: 1 PID: 10329 Comm: syz.0.1746 Not tainted syzkaller #0 [ 401.559442][T10329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 401.559449][T10329] Call trace: [ 401.559452][T10329] dump_backtrace+0x1c4/0x1f0 [ 401.559465][T10329] show_stack+0x2c/0x3c [ 401.559470][T10329] __dump_stack+0x30/0x40 [ 401.559480][T10329] dump_stack_lvl+0xf4/0x15c [ 401.559488][T10329] dump_stack+0x1c/0x5c [ 401.559495][T10329] should_fail_ex+0x3cc/0x524 [ 401.559503][T10329] should_fail+0x14/0x24 [ 401.559509][T10329] should_fail_usercopy+0x20/0x30 [ 401.559515][T10329] __arm64_sys_rt_sigreturn+0x136c/0x1f7c [ 401.559525][T10329] invoke_syscall+0x98/0x290 [ 401.559535][T10329] el0_svc_common+0x13c/0x258 [ 401.559544][T10329] do_el0_svc+0x5c/0x134 [ 401.559552][T10329] el0_svc+0x58/0x12c [ 401.559560][T10329] el0t_64_sync_handler+0x84/0xf0 [ 401.559568][T10329] el0t_64_sync+0x18c/0x190 [ 401.992992][T10350] EXT4-fs: 181 callbacks suppressed [ 401.993003][T10350] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 402.000688][T10349] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 402.010837][T10349] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 402.014057][T10354] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 402.014755][T10355] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 402.034996][T10354] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 402.037141][T10358] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 402.046788][T10360] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 402.056913][ T4319] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 402.058027][T10360] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 402.096708][T10372] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 402.097071][T10361] device-mapper: table: 248:4: adding target device ram9 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=8192 [ 402.102427][T10361] device-mapper: table: 248:4: adding target device ram9 caused an alignment inconsistency: physical_block_size=4096, logical_block_size=512, alignment_offset=0, start=8192 [ 402.125527][T10376] ubi: mtd0 is already attached to ubi0 [ 402.322691][T10374] FAULT_INJECTION: forcing a failure. [ 402.322691][T10374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.327059][T10374] CPU: 0 PID: 10374 Comm: syz.1.1764 Not tainted syzkaller #0 [ 402.328724][T10374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 402.330696][T10374] Call trace: [ 402.331293][T10374] dump_backtrace+0x1c4/0x1f0 [ 402.332187][T10374] show_stack+0x2c/0x3c [ 402.333011][T10374] __dump_stack+0x30/0x40 [ 402.333878][T10374] dump_stack_lvl+0xf4/0x15c [ 402.334818][T10374] dump_stack+0x1c/0x5c [ 402.335626][T10374] should_fail_ex+0x3cc/0x524 [ 402.336517][T10374] should_fail+0x14/0x24 [ 402.337321][T10374] should_fail_usercopy+0x20/0x30 [ 402.338308][T10374] __arm64_sys_rt_sigreturn+0x136c/0x1f7c [ 402.339342][T10374] invoke_syscall+0x98/0x290 [ 402.340290][T10374] el0_svc_common+0x13c/0x258 [ 402.341229][T10374] do_el0_svc+0x5c/0x134 [ 402.342115][T10374] el0_svc+0x58/0x12c [ 402.342908][T10374] el0t_64_sync_handler+0x84/0xf0 [ 402.343925][T10374] el0t_64_sync+0x18c/0x190 [ 402.433244][T10397] netlink: 'syz.3.1772': attribute type 3 has an invalid length. [ 402.684158][T10411] FAULT_INJECTION: forcing a failure. [ 402.684158][T10411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.690275][T10411] CPU: 1 PID: 10411 Comm: syz.1.1779 Not tainted syzkaller #0 [ 402.691644][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 402.693669][T10411] Call trace: [ 402.694340][T10411] dump_backtrace+0x1c4/0x1f0 [ 402.695238][T10411] show_stack+0x2c/0x3c [ 402.696007][T10411] __dump_stack+0x30/0x40 [ 402.696878][T10411] dump_stack_lvl+0xf4/0x15c [ 402.697751][T10411] dump_stack+0x1c/0x5c [ 402.698562][T10411] should_fail_ex+0x3cc/0x524 [ 402.699524][T10411] should_fail+0x14/0x24 [ 402.700373][T10411] should_fail_usercopy+0x20/0x30 [ 402.701381][T10411] __arm64_sys_rt_sigreturn+0x136c/0x1f7c [ 402.702516][T10411] invoke_syscall+0x98/0x290 [ 402.703451][T10411] el0_svc_common+0x13c/0x258 [ 402.704357][T10411] do_el0_svc+0x5c/0x134 [ 402.705230][T10411] el0_svc+0x58/0x12c [ 402.706010][T10411] el0t_64_sync_handler+0x84/0xf0 [ 402.707104][T10411] el0t_64_sync+0x18c/0x190 [ 402.727771][T10410] EXT4-fs error: 215 callbacks suppressed [ 402.727781][T10410] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1779: Detected aborted journal [ 402.751722][T10418] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1781: Detected aborted journal [ 402.774540][T10420] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1782: Detected aborted journal [ 402.784490][T10420] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1782: Detected aborted journal [ 403.066686][T10424] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1783: Detected aborted journal [ 403.082029][T10425] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.0.1784: Detected aborted journal [ 403.093378][T10424] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1783: Detected aborted journal [ 403.103747][T10428] EXT4-fs error (device nvme0n1p2): __ext4_find_entry:1687: inode #1533: comm kworker/u4:2: reading directory lblock 0 [ 403.111940][T10424] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1783: Detected aborted journal [ 403.168035][T10429] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.2.1785: Detected aborted journal [ 403.204383][T10432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1786'. [ 403.666955][T10446] FAULT_INJECTION: forcing a failure. [ 403.666955][T10446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.683595][T10446] CPU: 1 PID: 10446 Comm: syz.3.1792 Not tainted syzkaller #0 [ 403.685009][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 403.686862][T10446] Call trace: [ 403.687474][T10446] dump_backtrace+0x1c4/0x1f0 [ 403.688343][T10446] show_stack+0x2c/0x3c [ 403.689175][T10446] __dump_stack+0x30/0x40 [ 403.690091][T10446] dump_stack_lvl+0xf4/0x15c [ 403.691062][T10446] dump_stack+0x1c/0x5c [ 403.691817][T10446] should_fail_ex+0x3cc/0x524 [ 403.692745][T10446] should_fail+0x14/0x24 [ 403.693571][T10446] should_fail_usercopy+0x20/0x30 [ 403.694586][T10446] __arm64_sys_rt_sigreturn+0x136c/0x1f7c [ 403.695601][T10446] invoke_syscall+0x98/0x290 [ 403.696509][T10446] el0_svc_common+0x13c/0x258 [ 403.697456][T10446] do_el0_svc+0x5c/0x134 [ 403.698327][T10446] el0_svc+0x58/0x12c [ 403.699115][T10446] el0t_64_sync_handler+0x84/0xf0 [ 403.700043][T10446] el0t_64_sync+0x18c/0x190 [ 403.801228][T10459] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1797'. [ 404.148824][T10467] FAULT_INJECTION: forcing a failure. [ 404.148824][T10467] name failslab, interval 1, probability 0, space 0, times 0 [ 404.148919][T10459] device-mapper: table: 248:5: integrity: Unknown tag size (-EINVAL) [ 404.151222][T10467] CPU: 0 PID: 10467 Comm: syz.3.1800 Not tainted syzkaller #0 [ 404.152999][T10459] device-mapper: ioctl: error adding target to table [ 404.154306][T10467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 404.154320][T10467] Call trace: [ 404.154326][T10467] dump_backtrace+0x1c4/0x1f0 [ 404.158956][T10467] show_stack+0x2c/0x3c [ 404.159759][T10467] __dump_stack+0x30/0x40 [ 404.160615][T10467] dump_stack_lvl+0xf4/0x15c [ 404.161532][T10467] dump_stack+0x1c/0x5c [ 404.162361][T10467] should_fail_ex+0x3cc/0x524 [ 404.163258][T10467] __should_failslab+0xc0/0x11c [ 404.164206][T10467] should_failslab+0x10/0x28 [ 404.165158][T10467] kmem_cache_alloc+0x88/0x310 [ 404.166074][T10467] jffs2_prealloc_raw_node_refs+0xe4/0x6c8 [ 404.167273][T10467] jffs2_scan_medium+0x1320/0x5bc8 [ 404.168214][T10467] jffs2_do_mount_fs+0x5dc/0x1c28 [ 404.169183][T10467] jffs2_do_fill_super+0x484/0xa20 [ 404.170214][T10467] jffs2_fill_super+0x258/0x28c [ 404.171127][T10467] mtd_get_sb+0xc4/0x2a0 [ 404.171912][T10467] mtd_get_sb_by_nr+0x94/0xb0 [ 404.172861][T10467] get_tree_mtd+0x4bc/0x61c [ 404.173678][T10467] jffs2_get_tree+0x28/0x38 [ 404.174560][T10467] vfs_get_tree+0x90/0x278 [ 404.175418][T10467] do_new_mount+0x228/0x818 [ 404.176299][T10467] path_mount+0x5ac/0xe6c [ 404.177142][T10467] __arm64_sys_mount+0x4a0/0x5a0 [ 404.178094][T10467] invoke_syscall+0x98/0x290 [ 404.178907][T10467] el0_svc_common+0x13c/0x258 [ 404.179806][T10467] do_el0_svc+0x5c/0x134 [ 404.180616][T10467] el0_svc+0x58/0x12c [ 404.181415][T10467] el0t_64_sync_handler+0x84/0xf0 [ 404.182349][T10467] el0t_64_sync+0x18c/0x190 [ 404.505028][T10486] FAULT_INJECTION: forcing a failure. [ 404.505028][T10486] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.508946][T10486] CPU: 1 PID: 10486 Comm: syz.3.1809 Not tainted syzkaller #0 [ 404.510333][T10486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 404.512160][T10486] Call trace: [ 404.512813][T10486] dump_backtrace+0x1c4/0x1f0 [ 404.513730][T10486] show_stack+0x2c/0x3c [ 404.514551][T10486] __dump_stack+0x30/0x40 [ 404.515407][T10486] dump_stack_lvl+0xf4/0x15c [ 404.516288][T10486] dump_stack+0x1c/0x5c [ 404.517096][T10486] should_fail_ex+0x3cc/0x524 [ 404.517978][T10486] should_fail+0x14/0x24 [ 404.518833][T10486] should_fail_usercopy+0x20/0x30 [ 404.519781][T10486] __arm64_sys_rt_sigreturn+0x136c/0x1f7c [ 404.520856][T10486] invoke_syscall+0x98/0x290 [ 404.521709][T10486] el0_svc_common+0x13c/0x258 [ 404.522562][T10486] do_el0_svc+0x5c/0x134 [ 404.523322][T10486] el0_svc+0x58/0x12c [ 404.524147][T10486] el0t_64_sync_handler+0x84/0xf0 [ 404.525156][T10486] el0t_64_sync+0x18c/0x190 [ 404.573115][T10511] CIFS: Attempting to mount \\127.0.0.1\share [ 404.575108][T10511] CIFS: VFS: No username specified [ 406.036845][T10557] device-mapper: ioctl: device has been removed from the dev hash table. [ 406.746132][T10592] device wlan0 entered promiscuous mode [ 406.988060][T10598] FAULT_INJECTION: forcing a failure. [ 406.988060][T10598] name failslab, interval 1, probability 0, space 0, times 0 [ 407.000058][T10599] Bluetooth: MGMT ver 1.22 [ 407.072173][T10598] CPU: 1 PID: 10598 Comm: syz.4.1857 Not tainted syzkaller #0 [ 407.073681][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 407.075736][T10598] Call trace: [ 407.076365][T10598] dump_backtrace+0x1c4/0x1f0 [ 407.077245][T10598] show_stack+0x2c/0x3c [ 407.078072][T10598] __dump_stack+0x30/0x40 [ 407.078959][T10598] dump_stack_lvl+0xf4/0x15c [ 407.079877][T10598] dump_stack+0x1c/0x5c [ 407.080739][T10598] should_fail_ex+0x3cc/0x524 [ 407.081683][T10598] __should_failslab+0xc0/0x11c [ 407.082603][T10598] should_failslab+0x10/0x28 [ 407.083461][T10598] kmem_cache_alloc+0x88/0x310 [ 407.084344][T10598] security_inode_alloc+0x38/0x11c [ 407.085367][T10598] inode_init_always+0x6c8/0xb28 [ 407.086369][T10598] new_inode_pseudo+0x7c/0x1cc [ 407.087363][T10598] new_inode+0x38/0x174 [ 407.088212][T10598] proc_pid_make_inode+0x30/0x1a8 [ 407.089183][T10598] proc_task_instantiate+0x5c/0x27c [ 407.090226][T10598] proc_task_lookup+0x324/0x4e4 [ 407.091186][T10598] __lookup_slow+0x25c/0x38c [ 407.092140][T10598] lookup_slow+0x60/0x84 [ 407.093005][T10598] walk_component+0x278/0x374 [ 407.093828][T10598] link_path_walk+0x5d4/0xcd8 [ 407.094665][T10598] path_openat+0x1c0/0x27a0 [ 407.095583][T10598] do_filp_open+0x198/0x38c [ 407.096477][T10598] do_sys_openat2+0x134/0x3fc [ 407.097388][T10598] __arm64_sys_openat+0x11c/0x150 [ 407.098358][T10598] invoke_syscall+0x98/0x290 [ 407.099199][T10598] el0_svc_common+0x13c/0x258 [ 407.100042][T10598] do_el0_svc+0x5c/0x134 [ 407.100866][T10598] el0_svc+0x58/0x12c [ 407.101591][T10598] el0t_64_sync_handler+0x84/0xf0 [ 407.102574][T10598] el0t_64_sync+0x18c/0x190 [ 407.103635][ C1] vkms_vblank_simulate: vblank timer overrun [ 407.474487][T10597] EXT4-fs: 166 callbacks suppressed [ 407.474498][T10597] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 407.505916][ T4319] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 407.512160][T10609] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 407.518763][T10610] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 407.524493][T10609] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 407.541229][T10610] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 407.551621][T10610] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 407.577480][T10613] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 407.582203][T10613] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 407.609731][T10615] EXT4-fs (nvme0n1p2): Remounting filesystem read-only [ 407.706777][T10616] device-mapper: ioctl: device has been removed from the dev hash table. [ 407.729869][T10631] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 407.733566][T10632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.736643][T10632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.323974][T10615] EXT4-fs error: 166 callbacks suppressed [ 408.323987][T10615] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1862: Detected aborted journal [ 408.334611][T10615] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1862: Detected aborted journal [ 408.338705][T10615] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1862: Detected aborted journal [ 408.345151][T10653] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1877: Detected aborted journal [ 408.348402][T10615] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1862: Detected aborted journal [ 408.354553][T10653] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1877: Detected aborted journal [ 408.360595][ T4319] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal [ 408.371544][T10656] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.1.1878: Detected aborted journal [ 408.385533][T10658] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1879: Detected aborted journal [ 408.392959][T10658] EXT4-fs error (device nvme0n1p2): ext4_journal_check_start:83: comm syz.3.1879: Detected aborted journal [ 409.122994][T10696] device-mapper: ioctl: Unable to rename non-existent device, to LVM-syzc1 [ 409.446117][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1901'. [ 409.503997][T10729] random: crng reseeded on system resumption [ 409.573427][T10739] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 409.603845][ T4339] Bluetooth: hci1: Invalid handle: 0xffc9 > 0x0eff [ 410.606588][T10787] device-mapper: table: 248:0: integrity: Bitmap mode can be only used with internal hash (-EINVAL) [ 410.609011][T10787] device-mapper: ioctl: error adding target to table [ 410.647866][ T39] bond0: (slave bond_slave_0): interface is now down [ 410.649412][ T39] bond0: (slave bond_slave_1): interface is now down [ 410.652503][ T39] bond0: now running without any active interface! [ 410.748837][T10814] FAULT_INJECTION: forcing a failure. [ 410.748837][T10814] name fail_futex, interval 1, probability 0, space 0, times 0 [ 410.753945][T10814] CPU: 0 PID: 10814 Comm: syz.0.1942 Not tainted syzkaller #0 [ 410.755465][T10814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 410.757294][T10814] Call trace: [ 410.757888][T10814] dump_backtrace+0x1c4/0x1f0 [ 410.758823][T10814] show_stack+0x2c/0x3c [ 410.759623][T10814] __dump_stack+0x30/0x40 [ 410.760532][T10814] dump_stack_lvl+0xf4/0x15c [ 410.761424][T10814] dump_stack+0x1c/0x5c [ 410.762180][T10814] should_fail_ex+0x3cc/0x524 [ 410.763107][T10814] should_fail+0x14/0x24 [ 410.763957][T10814] get_futex_key+0x904/0xec0 [ 410.764896][T10814] futex_wake+0x10c/0x458 [ 410.765685][T10814] do_futex+0x2c4/0x340 [ 410.766502][T10814] __arm64_sys_futex+0x390/0x414 [ 410.767506][T10814] invoke_syscall+0x98/0x290 [ 410.768542][T10814] el0_svc_common+0x13c/0x258 [ 410.769506][T10814] do_el0_svc+0x5c/0x134 [ 410.770446][T10814] el0_svc+0x58/0x12c [ 410.771342][T10814] el0t_64_sync_handler+0x84/0xf0 [ 410.772497][T10814] el0t_64_sync+0x18c/0x190 [ 410.809413][T10820] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1944'. [ 411.269046][T10847] input: syz0 as /devices/virtual/input/input7 [ 411.650403][T10860] device-mapper: table: 248:3: integrity: Bitmap mode can be only used with internal hash (-EINVAL) [ 411.653077][T10860] device-mapper: ioctl: error adding target to table [ 411.739516][T10872] ================================================================== [ 411.741354][T10872] BUG: KASAN: use-after-free in nfsd_nrthreads+0xf8/0xfc [ 411.742940][T10872] Read of size 4 at addr ffff0000f58f3054 by task syz.4.1965/10872 [ 411.744677][T10872] [ 411.745186][T10872] CPU: 0 PID: 10872 Comm: syz.4.1965 Not tainted syzkaller #0 [ 411.746739][T10872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 411.748928][T10872] Call trace: [ 411.749629][T10872] dump_backtrace+0x1c4/0x1f0 [ 411.750640][T10872] show_stack+0x2c/0x3c [ 411.751554][T10872] __dump_stack+0x30/0x40 [ 411.752529][T10872] dump_stack_lvl+0xf4/0x15c [ 411.753519][T10872] print_address_description+0x88/0x218 [ 411.754734][T10872] print_report+0x50/0x68 [ 411.755760][T10872] kasan_report+0xa8/0xfc [ 411.756725][T10872] __asan_report_load4_noabort+0x2c/0x38 [ 411.757955][T10872] nfsd_nrthreads+0xf8/0xfc [ 411.758903][T10872] write_threads+0x1c0/0x310 [ 411.759915][T10872] nfsctl_transaction_write+0x114/0x164 [ 411.761044][T10872] vfs_write+0x2a8/0x7c8 [ 411.761855][T10872] ksys_write+0x12c/0x228 [ 411.762763][T10872] __arm64_sys_write+0x7c/0x90 [ 411.763780][T10872] invoke_syscall+0x98/0x290 [ 411.764755][T10872] el0_svc_common+0x13c/0x258 [ 411.765656][T10872] do_el0_svc+0x5c/0x134 [ 411.766433][T10872] el0_svc+0x58/0x12c [ 411.767183][T10872] el0t_64_sync_handler+0x84/0xf0 [ 411.768188][T10872] el0t_64_sync+0x18c/0x190 [ 411.769100][T10872] [ 411.769564][T10872] Allocated by task 10872: [ 411.770469][T10872] kasan_set_track+0x4c/0x80 [ 411.771441][T10872] kasan_save_alloc_info+0x24/0x30 [ 411.772481][T10872] __kasan_kmalloc+0xa0/0xb8 [ 411.773441][T10872] kmalloc_trace+0x7c/0x94 [ 411.774364][T10872] __svc_create+0x80/0x89c [ 411.775286][T10872] svc_create_pooled+0x648/0x7d8 [ 411.776318][T10872] nfsd_create_serv+0x284/0x6a4 [ 411.777334][T10872] write_ports+0x3e0/0x9f0 [ 411.778240][T10872] nfsctl_transaction_write+0x114/0x164 [ 411.779300][T10872] vfs_write+0x2a8/0x7c8 [ 411.780169][T10872] ksys_write+0x12c/0x228 [ 411.781071][T10872] __arm64_sys_write+0x7c/0x90 [ 411.782011][T10872] invoke_syscall+0x98/0x290 [ 411.782981][T10872] el0_svc_common+0x13c/0x258 [ 411.783953][T10872] do_el0_svc+0x5c/0x134 [ 411.784754][T10872] el0_svc+0x58/0x12c [ 411.785463][T10872] el0t_64_sync_handler+0x84/0xf0 [ 411.786430][T10872] el0t_64_sync+0x18c/0x190 [ 411.787349][T10872] [ 411.787765][T10872] Freed by task 10872: [ 411.788483][T10872] kasan_set_track+0x4c/0x80 [ 411.789359][T10872] kasan_save_free_info+0x38/0x5c [ 411.790308][T10872] ____kasan_slab_free+0x148/0x1b0 [ 411.791348][T10872] __kasan_slab_free+0x18/0x28 [ 411.792346][T10872] slab_free_freelist_hook+0x16c/0x1e8 [ 411.793530][T10872] __kmem_cache_free+0xbc/0x21c [ 411.794476][T10872] kfree+0xd0/0x1a8 [ 411.795197][T10872] svc_destroy+0x144/0x184 [ 411.796050][T10872] write_ports+0x6ec/0x9f0 [ 411.796939][T10872] nfsctl_transaction_write+0x114/0x164 [ 411.797971][T10872] vfs_write+0x2a8/0x7c8 [ 411.798936][T10872] ksys_write+0x12c/0x228 [ 411.799879][T10872] __arm64_sys_write+0x7c/0x90 [ 411.800913][T10872] invoke_syscall+0x98/0x290 [ 411.801882][T10872] el0_svc_common+0x13c/0x258 [ 411.802787][T10872] do_el0_svc+0x5c/0x134 [ 411.803670][T10872] el0_svc+0x58/0x12c [ 411.804511][T10872] el0t_64_sync_handler+0x84/0xf0 [ 411.805475][T10872] el0t_64_sync+0x18c/0x190 [ 411.806364][T10872] [ 411.806822][T10872] Last potentially related work creation: [ 411.807915][T10872] kasan_save_stack+0x40/0x70 [ 411.808799][T10872] __kasan_record_aux_stack+0xc0/0xdc [ 411.809774][T10872] kasan_record_aux_stack_noalloc+0x14/0x20 [ 411.810855][T10872] insert_work+0x64/0x37c [ 411.811756][T10872] __queue_work+0xd00/0x1280 [ 411.812694][T10872] delayed_work_timer_fn+0x74/0x94 [ 411.813748][T10872] call_timer_fn+0x1b8/0x96c [ 411.814660][T10872] __run_timers+0x4d0/0x6d8 [ 411.815502][T10872] run_timer_softirq+0x7c/0x114 [ 411.816451][T10872] handle_softirqs+0x318/0xc90 [ 411.817402][T10872] __do_softirq+0x14/0x20 [ 411.818323][T10872] [ 411.818824][T10872] The buggy address belongs to the object at ffff0000f58f3000 [ 411.818824][T10872] which belongs to the cache kmalloc-512 of size 512 [ 411.821674][T10872] The buggy address is located 84 bytes inside of [ 411.821674][T10872] 512-byte region [ffff0000f58f3000, ffff0000f58f3200) [ 411.824217][T10872] [ 411.824669][T10872] The buggy address belongs to the physical page: [ 411.825970][T10872] page:00000000b7222a1e refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1358f0 [ 411.827942][T10872] head:00000000b7222a1e order:2 compound_mapcount:0 compound_pincount:0 [ 411.829611][T10872] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 411.831107][T10872] raw: 05ffc00000010200 0000000000000000 dead000000000001 ffff0000c0002600 [ 411.832848][T10872] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 411.834502][T10872] page dumped because: kasan: bad access detected [ 411.835719][T10872] [ 411.836185][T10872] Memory state around the buggy address: [ 411.837256][T10872] ffff0000f58f2f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 411.838832][T10872] ffff0000f58f2f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 411.840222][T10872] >ffff0000f58f3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.841802][T10872] ^ [ 411.843052][T10872] ffff0000f58f3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.844742][T10872] ffff0000f58f3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 411.846314][T10872] ================================================================== [ 411.856003][T10872] Disabling lock debugging due to kernel taint [ 411.862898][ T4342] ------------[ cut here ]------------ [ 411.864209][ T4342] refcount_t: addition on 0; use-after-free. [ 411.865694][ T4342] WARNING: CPU: 0 PID: 4342 at lib/refcount.c:25 refcount_warn_saturate+0x134/0x1f8 [ 411.867443][ T4342] Modules linked in: [ 411.868307][ T4342] CPU: 0 PID: 4342 Comm: syz-executor Tainted: G B syzkaller #0 [ 411.870133][ T4342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 411.872239][ T4342] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 411.873944][ T4342] pc : refcount_warn_saturate+0x134/0x1f8 [ 411.875162][ T4342] lr : refcount_warn_saturate+0x134/0x1f8 [ 411.876455][ T4342] sp : ffff800021be79b0 [ 411.877285][ T4342] x29: ffff800021be79b0 x28: ffff0000ec06dc80 x27: ffff0000ec06dc80 [ 411.878816][ T4342] x26: dfff800000000000 x25: 0000000000000002 x24: 0000000000000002 [ 411.880421][ T4342] x23: 0000000000000003 x22: 0000000000000000 x21: ffff0000f58f3000 [ 411.882058][ T4342] x20: ffff0000f58f3050 x19: ffff800018db4000 x18: 1fffe00033c2177e [ 411.883727][ T4342] x17: ffff8000163dd000 x16: ffff800008043dd4 x15: 0000000040000000 [ 411.885373][ T4342] x14: 0000000000000001 x13: 1fffe00033c23e88 x12: 0000000000000000 [ 411.887076][ T4342] x11: ff008000080490b8 x10: 0000000040000000 x9 : 7d22c1bd5d95b400 [ 411.888712][ T4342] x8 : 7d22c1bd5d95b400 x7 : ffff800011cfc180 x6 : ffff80000825b754 [ 411.890422][ T4342] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 411.892167][ T4342] x2 : ffff800021be7560 x1 : 0000000000000000 x0 : ffff80000825b7e8 [ 411.893778][ T4342] Call trace: [ 411.894463][ T4342] refcount_warn_saturate+0x134/0x1f8 [ 411.895488][ T4342] nfsd_shutdown_threads+0x188/0x204 [ 411.896567][ T4342] nfsd_umount+0x48/0xf8 [ 411.897348][ T4342] deactivate_locked_super+0xb4/0x128 [ 411.898423][ T4342] deactivate_super+0xe4/0x104 [ 411.899344][ T4342] cleanup_mnt+0x3a8/0x430 [ 411.900213][ T4342] __cleanup_mnt+0x20/0x30 [ 411.901067][ T4342] task_work_run+0x1f4/0x280 [ 411.901964][ T4342] do_notify_resume+0x20f8/0x2c84 [ 411.903039][ T4342] el0_svc+0x9c/0x12c [ 411.903935][ T4342] el0t_64_sync_handler+0x84/0xf0 [ 411.904994][ T4342] el0t_64_sync+0x18c/0x190 [ 411.905910][ T4342] irq event stamp: 2199064 [ 411.906793][ T4342] hardirqs last enabled at (2199063): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 411.908747][ T4342] hardirqs last disabled at (2199064): [] __schedule+0x294/0x1aa4 [ 411.910562][ T4342] softirqs last enabled at (2199046): [] local_bh_enable+0x10/0x34 [ 411.912513][ T4342] softirqs last disabled at (2199044): [] local_bh_disable+0x10/0x34 [ 411.914291][ T4342] ---[ end trace 0000000000000000 ]--- [ 411.928315][ T4342] Unable to handle kernel paging request at virtual address fbd529d5a0000003 [ 411.930042][ T4342] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f] [ 411.931904][ T4342] Mem abort info: [ 411.932640][ T4342] ESR = 0x0000000096000004 [ 411.933669][ T4342] EC = 0x25: DABT (current EL), IL = 32 bits [ 411.934866][ T4342] SET = 0, FnV = 0 [ 411.935596][ T4342] EA = 0, S1PTW = 0 [ 411.936312][ T4342] FSC = 0x04: level 0 translation fault [ 411.937427][ T4342] Data abort info: [ 411.938186][ T4342] ISV = 0, ISS = 0x00000004 [ 411.939081][ T4342] CM = 0, WnR = 0 [ 411.939094][ T4342] [fbd529d5a0000003] address between user and kernel address ranges [ 411.939102][ T4342] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP M[a y 41118. 90339:13085]:[3 1T4 3s4y2z]k aMloldeurl ekse rlni.nakleedr ti n:ke rn[e l 4:11 .9[3 9 14131]1[. 9T42384321]5 ]C[PU :T 403 4P2ID]: U4n3a4b2l Ceo mtmo: hsaynzd-elxee ckuetronre lT apinatgeidn:g Gr e q u eBs t aWt v i r t u a l saydzdkraelslse r f#b0d5 29d5[a 0 401010.09043509 9][ T4342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 411.946791][ T4342] pstate: 02400005 (nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 411.946808][ T4342] pc : svc_unregister+0x130/0x624 [ 411.946817][ T4342] lr : svc_unregister+0x120/0x624 [ 411.946822][ T4342] sp : ffff800021be78d0 [ 411.946825][ T4342] x29: ffff800021be7900 x28: dfff800000000000 x27: ffff0000d01f9458 M[a y 41181 .0934:63853:53]1[ sTy4z3k4a2l]l exr2 6k:e rfnf.falfe0r0t0 0kde9rfnce1lc:8 0[ x 2451:1 .d9e3a0d044e2a]d[0 0T040304021] cK AxS2A4N:: 0m0a0y0b0e0 0w0i0l0d0-0m0e0m0o2ry -ac[c e4s1s1 .i9n4 68r4a3n]g[e T[403x4d2e]a dx42e3a:d 0f0f0f0f00001080-d00x1dfe9a4d544e axd2020:0 010f0f1ffe]0001a03f28a x2 1: ffff0000d01f9440 [ 411.946851][ T4342] x20: 1fffe0001a03f28b x19: 0000000000000010 x18: 1fffe00033c2177e [ 411.946859][ T4342] x17: ffff8000163dd000 x16: ffff800011ba16d0 x15: 0000000000000000 [ 411.957567][ T4342] x14: 0000000011b9dcb0 x13: 00000000cd919831 x12: ffff800008021d48 [ 411.960823][ T4342] x11: ff00800010f0f430 x10: 0000000000000000 x9 : ffff80001d66f950 [ 411.962286][ T4342] x8 : 1bd5a9d5a0000003 x7 : 0000000000000000 x6 : 000000000000003f [ 411.963849][ T4342] x5 : 0000000000000040 x4 : 0000000000000001 x3 : ffff800010f0f290 [ 411.965565][ T4342] x2 : 0000000000000000 x1 : 0000000000000008 x0 : 0000000000000000 [ 411.967348][ T4342] Call trace: [ 411.968088][ T4342] svc_unregister+0x130/0x624 [ 411.969151][ T4342] svc_rpcb_cleanup+0x28/0x40 [ 411.970167][ T4342] nfsd_last_thread+0x114/0x2e4 [ 411.971241][ T4342] nfsd_shutdown_threads+0xe4/0x204 [ 411.972395][ T4342] nfsd_umount+0x48/0xf8 [ 411.973333][ T4342] deactivate_locked_super+0xb4/0x128 [ 411.974483][ T4342] deactivate_super+0xe4/0x104 [ 411.975503][ T4342] cleanup_mnt+0x3a8/0x430 [ 411.976476][ T4342] __cleanup_mnt+0x20/0x30 [ 411.977433][ T4342] task_work_run+0x1f4/0x280 [ 411.978471][ T4342] do_notify_resume+0x20f8/0x2c84 [ 411.979517][ T4342] el0_svc+0x9c/0x12c [ 411.980332][ T4342] el0t_64_sync_handler+0x84/0xf0 [ 411.981382][ T4342] el0t_64_sync+0x18c/0x190 [ 411.982323][ T4342] Code: f8736b28 b4000148 91007119 d343ff28 (38fc6908) [ 411.983799][ T4342] ---[ end trace 0000000000000000 ]--- [ 412.311386][ T4342] Kernel panic - not syncing: Oops: Fatal exception [ 412.312594][ T4342] SMP: stopping secondary CPUs [ 412.313543][ T4342] Kernel Offset: disabled [ 412.314399][ T4342] CPU features: 0x050000,000f0097,a65bfea7 [ 412.315430][ T4342] Memory Limit: none [ 412.629633][ T4342] Rebooting in 86400 seconds..