last executing test programs: 36.642301388s ago: executing program 0 (id=50): pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x110) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000005c0), 0x800000, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 35.784329873s ago: executing program 0 (id=83): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0xfffff801}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x18}}], 0x2, 0x40) 35.759720684s ago: executing program 0 (id=85): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000f00001c"], 0x4a) 34.412108101s ago: executing program 0 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) move_mount(r0, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x262) 34.392220948s ago: executing program 0 (id=132): setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) memfd_secret(0x80000) setresuid(0x0, 0xee01, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100040c100000000000224e0000", 0x58}], 0x1) 25.231074696s ago: executing program 0 (id=487): socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/lo/dev_port\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/64, 0x40) 25.216434458s ago: executing program 32 (id=487): socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000080), &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/lo/dev_port\x00', 0x0, 0x0) read(r0, &(0x7f0000000140)=""/64, 0x40) 21.339365011s ago: executing program 5 (id=627): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_SUPPORTED(r0, 0x84, 0x81, &(0x7f0000000640)={0x0, 0x1ff}, 0x8) bind$inet(r0, &(0x7f0000000900)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x8) connect$inet(r0, &(0x7f0000000980)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000009c0)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000a00)={0x2, 0x4e22, @remote}, 0x10) 21.275871207s ago: executing program 5 (id=629): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000250)='/dev/zram0,6', 0xb3) 21.27531393s ago: executing program 5 (id=630): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x9, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x2, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe65f, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x7f, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x5], [0x8, 0x9, 0x80000130, 0x8, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0xb, 0x0, 0x5, 0x42f, 0x0, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x3, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x4000003, 0x3, 0x9, 0x400, 0x3, 0x3, 0xbc45, 0x48c93694, 0xa74, 0x9], [0x7, 0x8, 0x0, 0x5, 0xfbfffffc, 0x100, 0x9, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200000, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x7, 0x2950bfaf, 0x2, 0x4, 0x9, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x6d, 0x7, 0x0, 0x2, 0x2, 0x120000, 0x6, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x1, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x81, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0x2140738a, 0x1, 0xffff2441, 0xfff]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 21.254660513s ago: executing program 5 (id=631): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000002c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x404480c) write$nci(r0, &(0x7f0000000600)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x8, @a={0x7, 0x0, 0x0, 0x2, {0x22, 0x0, "", 0xc, 0x3}, 0x2}}, 0xc) 19.322675651s ago: executing program 2 (id=677): io_setup(0x8f0, &(0x7f0000000000)=0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}}], 0x1, 0x20008080) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000200)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x2}]) 19.01556472s ago: executing program 2 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) unshare(0x6a040000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x4000000, {}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000780)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 18.94968967s ago: executing program 2 (id=679): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2042, 0x19d) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000001600), 0x8800) r0 = syz_io_uring_setup(0xf02, &(0x7f0000000100)={0x0, 0xbf36, 0x10000, 0x0, 0x55}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000240)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x5, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/4085, 0xff5}], 0x8, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x7c65, 0xa334, 0x1, 0x0, 0x0) 18.886241696s ago: executing program 2 (id=682): r0 = fsopen(&(0x7f0000000240)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/resume', 0x161a82, 0x149) sendfile(r2, r2, 0x0, 0xb) 18.848460298s ago: executing program 2 (id=684): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x237, 0x0, 0x2, 0x0, 0x2}) 18.738353633s ago: executing program 2 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000006c0)={0x84}, 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000700)=0xfffffff7, 0x4) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r0, 0xc0484e41, &(0x7f00000006c0)) 18.222245359s ago: executing program 5 (id=692): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x248}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x3) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) 16.622691885s ago: executing program 4 (id=728): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000e80)='select pid=1\nuse_group 0\nnetwork inet stream bind @grp1 0X65535\n', 0x40) 16.612574285s ago: executing program 4 (id=729): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000540)='./dev\x00', &(0x7f0000000580)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/kmsg\x00', 0x60000, 0x0) lseek(r0, 0x0, 0x2) ppoll(&(0x7f0000000700)=[{r0, 0x2208}], 0x1, &(0x7f0000000880)={0x0, 0x989680}, 0x0, 0x0) 16.584166946s ago: executing program 4 (id=730): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0xe) 16.211130196s ago: executing program 1 (id=738): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='27', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0xa5) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) 16.209540479s ago: executing program 1 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./mnt_trace\x00', &(0x7f0000000440)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000780)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000008c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) 16.208863054s ago: executing program 1 (id=741): syz_read_part_table(0x1064, &(0x7f0000001080)="$eJzs0DFOxDAQBdAfkhAi4BpwTCi4Fy0Nx0FCoRiUOLvSbr1SmvcaW+Px+MvhUPPn+Jqk3pJ5Lz0kQ9Jdd/Y/9VvJX01VVelax7CdbZXkLslzqpb7duU7bWoN1SR5uZi5Ppbk6bFfl6+9/DElWc4JxtPmvaVrwW/7DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwpP8AAAD//2PTH4Q=") mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys_sec\x00', &(0x7f0000000600)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000680)=""/9, 0xfffffd87) write$tun(r0, &(0x7f0000004140)=ANY=[], 0xffe) 16.104807003s ago: executing program 1 (id=745): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0xa00010, &(0x7f00000000c0), 0x21, 0x4bf, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000800)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', 0x193042, 0x41) readv(r1, &(0x7f0000000ec0)=[{0x0}, {0x0}, {&(0x7f0000000f00)=""/50, 0x100000}], 0x3) 15.943578517s ago: executing program 1 (id=746): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000001140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x21, r1) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) ptrace$cont(0x1f, r1, 0x0, 0x1) 15.795516196s ago: executing program 3 (id=753): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newsa={0xf0, 0x10, 0x281, 0x0, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@private, 0x4d2, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) 15.698706686s ago: executing program 3 (id=755): mkdirat(0xffffffffffffff9c, &(0x7f0000002940)='./proc\x00', 0x1fb) mount(0x0, &(0x7f0000002980)='./proc\x00', &(0x7f00000029c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000002a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000002a40)='27', 0x2) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/sys/net/ipv4/conf/default/rp_filter\x00', 0x1, 0x0) 15.698024761s ago: executing program 4 (id=756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 15.697542947s ago: executing program 4 (id=765): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3800003, 0x4031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='smaps\x00') r1 = memfd_create(&(0x7f0000000480)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00'/235, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000d, 0x11, r1, 0x0) read$FUSE(r0, &(0x7f0000002a40)={0x2020}, 0x2020) 15.692167051s ago: executing program 3 (id=757): syz_read_part_table(0x1064, &(0x7f0000001080)="$eJzs0DFOxDAQBdAfkhAi4BpwTCi4Fy0Nx0FCoRiUOLvSbr1SmvcaW+Px+MvhUPPn+Jqk3pJ5Lz0kQ9Jdd/Y/9VvJX01VVelax7CdbZXkLslzqpb7duU7bWoN1SR5uZi5Ppbk6bFfl6+9/DElWc4JxtPmvaVrwW/7DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwpP8AAAD//2PTH4Q=") mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./sys_sec\x00', &(0x7f0000000600)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000680)=""/9, 0xfffffd87) write$tun(r0, &(0x7f0000004140)=ANY=[], 0xffe) 15.623870012s ago: executing program 3 (id=758): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000240)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r3, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)={0x10, 0x140b, 0x37dce0c6a9521517, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40008000}, 0x48080) 15.623616956s ago: executing program 4 (id=759): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0xa00010, &(0x7f00000000c0), 0x21, 0x4bf, &(0x7f0000000300)="$eJzs3U9vVF0ZAPDn3nbon7fv26Is1KggomgIM+0AlbDCjcYQEiNx5QJqOzRNZzpNZ4q0sijfwUQSV7rwA7gwcWHCyr073bnBhQkq0VATF2PmzhQKnSlF2s6b3t8vObn33DOd5zyd3HPaM+2cAHLrXERsRcSpiLgXEZPd60m3xM1OaT/u5YtH89svHs0n0Wrd+UeStbevxa6vafuo+5yjEfGD70b8ONkbt7GxuTxXrVbWuvVSs7ZaamxsXl6qzS1WFisr5fLszOz09SvXyoeW69nab55/Z+nWD3//uy89++PWN3/a7tZEt213Hoepk3rhVZy24Yi4dRTBBmCom8+pQXeE/0saEZ+JiPPZ/T8ZQ9mrCQCcZK3WZLQmd9cBgJMuzdbAkrQYUeicp2mx2FnDOxPjabXeaF66X19fWeislU1FIb2/VK1Md9cKp6KQtOsz2fnrevmt+pWIOB0RPxsZy+rF+Xp1YZA/+ABAjn30ev7P3gv490hn/gcATrjRQXcAADh25n8AyB/zPwDkj/kfAPLH/A8A+WP+B4D8Mf8DQK58//btdmltdz//euHBxvpy/cHlhUpjuVhbny/O19dWi4v1+mL2mT21dz1ftV5fnbka6w9LzUqjWWpsbN6t1ddXmnezz/W+WykcS1YAwH5On3365yQitm6MZSV27eVgroaTLR10B4CBGRp0B4CBsdsX5Jff8YEeW/S+ofMnQmN7G54cTX+Ao3fx89b/Ia+s/0N+Wf+H/LL+D/nVaiX2/AeAnLHGDxzs/f8evP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjk1kJUmL3b3AJyJNi8WIjyNiKgrJ/aVqZToiPomIP40URtr1mUF3GgD4QOnfku7+XxcnL0y83Xoq+c9IdoyIn/zizs8fzjWbazPt6//sXP/WWMST7vXyIPoPAHk09F6P3pmnd+bxHS9fPJrfKYffx/6ef7uzuWg77na3dFqGYzg7jkYhIsb/lXTrHcl7Z97b1uOI+Fyv/JNsbWSqu/Pp2/HbsT8+1vjpG/HTrK1zbH8vPnsIfYG8edoef272uv/SOJcde9//o9kI9eF2xr/tPeNf+mr8G+oz/p07SICxX0dc/cP3+sZ/HPGF4V7xk1fxkz7xLxwwx7988cvn+7W1fhlxMXrH3x2r1Kytlhobm5eXanOLlcXKSrk8OzM7ff3KtXIpW6Mu7axU7/X3G5c+2S//8T7xR9+R/9cOmP+v/nvvR1/ZJ/43vtr79T+zT/z2nPj1A8afG/9t3+272/EX+uT/rtf/0gHjP/vr5sIBHwoAHIPGxubyXLVaWRv0yU6HPi39ceIk1yeDHZeAo/f6ph90TwAAAAAAAAAAAAAAgH6O49+JBp0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9f/AgAA//9gOtV4") r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000800)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', 0x193042, 0x41) readv(r1, &(0x7f0000000ec0)=[{0x0}, {0x0}, {&(0x7f0000000f00)=""/50, 0x100000}], 0x3) 15.605308014s ago: executing program 3 (id=760): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000280)) 15.529514656s ago: executing program 3 (id=761): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15.35698644s ago: executing program 1 (id=762): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000cc0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000e40)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000001140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000011c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}]}}}}}}}, 0x0) 15.143149964s ago: executing program 5 (id=763): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000001c0)='10', 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) 3.496308561s ago: executing program 33 (id=688): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000006c0)={0x84}, 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000700)=0xfffffff7, 0x4) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r0, 0xc0484e41, &(0x7f00000006c0)) 497.165255ms ago: executing program 34 (id=761): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) unshare(0x20000000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000400)={0x6200, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 482.717906ms ago: executing program 35 (id=759): socket$kcm(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0xa00010, &(0x7f00000000c0), 0x21, 0x4bf, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000800)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./file1\x00', 0x193042, 0x41) readv(r1, &(0x7f0000000ec0)=[{0x0}, {0x0}, {&(0x7f0000000f00)=""/50, 0x100000}], 0x3) 0s ago: executing program 36 (id=763): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f00000001c0)='10', 0x2) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, 0x0) fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0) kernel console output (not intermixed with test programs): ompute Engine, BIOS Google 09/23/2026 [ 26.417573][ T5251] Call trace: [ 26.417576][ T5251] show_stack+0x2c/0x3c (C) [ 26.417592][ T5251] __dump_stack+0x30/0x40 [ 26.417601][ T5251] dump_stack_lvl+0xd8/0x12c [ 26.417609][ T5251] dump_stack+0x1c/0x28 [ 26.417616][ T5251] should_fail_ex+0x3fc/0x570 [ 26.417630][ T5251] should_failslab+0xc4/0x120 [ 26.417639][ T5251] __kmalloc_noprof+0x108/0x6c8 [ 26.417648][ T5251] tomoyo_realpath_from_path+0xbc/0x4dc [ 26.417660][ T5251] tomoyo_path_number_perm+0x1f0/0x500 [ 26.417670][ T5251] tomoyo_file_ioctl+0x2c/0x3c [ 26.417681][ T5251] security_file_ioctl+0xdc/0x2b0 [ 26.417690][ T5251] __arm64_sys_ioctl+0xb0/0x1cc [ 26.417699][ T5251] invoke_syscall+0x98/0x244 [ 26.417708][ T5251] el0_svc_common+0xec/0x23c [ 26.417715][ T5251] do_el0_svc+0x4c/0x5c [ 26.417723][ T5251] el0_svc+0x60/0x1d8 [ 26.417734][ T5251] el0t_64_sync_handler+0x44/0x104 [ 26.417743][ T5251] el0t_64_sync+0x198/0x19c [ 26.417754][ T5251] ERROR: Out of memory at tomoyo_realpath_from_path. [ 26.457025][ T30] audit: type=1326 audit(26.440:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5254 comm="syz.4.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f379728 code=0x7ffc0000 [ 26.457048][ T30] audit: type=1326 audit(26.440:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5254 comm="syz.4.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f379728 code=0x7ffc0000 [ 26.457135][ T30] audit: type=1326 audit(26.440:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5254 comm="syz.4.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f379728 code=0x7ffc0000 [ 26.459492][ T30] audit: type=1326 audit(26.440:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5254 comm="syz.4.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f379728 code=0x7ffc0000 [ 26.459520][ T30] audit: type=1326 audit(26.440:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5254 comm="syz.4.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7f379728 code=0x7ffc0000 [ 26.460588][ T30] audit: type=1326 audit(26.440:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5254 comm="syz.4.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff7f379728 code=0x7ffc0000 [ 26.460616][ T30] audit: type=1326 audit(26.440:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5254 comm="syz.4.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff7f379420 code=0x7ffc0000 [ 26.460632][ T30] audit: type=1326 audit(26.440:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5254 comm="syz.4.121" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff7f35c5ec code=0x7ffc0000 [ 26.541235][ T5261] input: syz0 as /devices/virtual/input/input4 [ 26.754915][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 26.862343][ T5302] ip6tnl0 speed is unknown, defaulting to 1000 [ 26.862783][ T5302] ip6tnl0 speed is unknown, defaulting to 1000 [ 26.863019][ T5302] ip6tnl0 speed is unknown, defaulting to 1000 [ 26.863733][ T5302] FAULT_INJECTION: forcing a failure. [ 26.863733][ T5302] name failslab, interval 1, probability 0, space 0, times 0 [ 26.863747][ T5302] CPU: 1 UID: 0 PID: 5302 Comm: syz.2.130 Tainted: G L syzkaller #0 PREEMPT [ 26.863759][ T5302] Tainted: [L]=SOFTLOCKUP [ 26.863767][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 26.863772][ T5302] Call trace: [ 26.863775][ T5302] show_stack+0x2c/0x3c (C) [ 26.863793][ T5302] __dump_stack+0x30/0x40 [ 26.863803][ T5302] dump_stack_lvl+0xd8/0x12c [ 26.863812][ T5302] dump_stack+0x1c/0x28 [ 26.863820][ T5302] should_fail_ex+0x3fc/0x570 [ 26.863834][ T5302] should_failslab+0xc4/0x120 [ 26.863843][ T5302] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 26.863853][ T5302] kstrdup+0x50/0x104 [ 26.863862][ T5302] kstrdup_const+0x54/0x6c [ 26.863869][ T5302] __kernfs_new_node+0xb0/0x7d8 [ 26.863882][ T5302] kernfs_new_node+0xf4/0x148 [ 26.863894][ T5302] __kernfs_create_file+0x60/0x2e0 [ 26.863902][ T5302] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 26.863911][ T5302] internal_create_group+0x550/0xb30 [ 26.863921][ T5302] internal_create_groups+0x64/0x138 [ 26.863931][ T5302] sysfs_create_groups+0x2c/0x3c [ 26.863940][ T5302] ib_setup_port_attrs+0xa54/0x1368 [ 26.863954][ T5302] ib_register_device+0x784/0x9e4 [ 26.863962][ T5302] rxe_register_device+0x19c/0x30c [ 26.863974][ T5302] rxe_add+0x8cc/0xd68 [ 26.863983][ T5302] rxe_net_add+0x80/0x114 [ 26.863991][ T5302] rxe_newlink+0x114/0x1c0 [ 26.864000][ T5302] nldev_newlink+0x47c/0x4f4 [ 26.864011][ T5302] rdma_nl_rcv+0x4f0/0x814 [ 26.864021][ T5302] netlink_unicast+0x73c/0x934 [ 26.864033][ T5302] netlink_sendmsg+0x670/0x98c [ 26.864043][ T5302] __sock_sendmsg+0xc8/0x188 [ 26.864053][ T5302] ____sys_sendmsg+0x3d0/0x6c8 [ 26.864063][ T5302] ___sys_sendmsg+0x198/0x224 [ 26.864073][ T5302] __sys_sendmsg+0x158/0x204 [ 26.864083][ T5302] __arm64_sys_sendmsg+0x88/0x9c [ 26.864093][ T5302] invoke_syscall+0x98/0x244 [ 26.864102][ T5302] el0_svc_common+0xec/0x23c [ 26.864110][ T5302] do_el0_svc+0x4c/0x5c [ 26.864117][ T5302] el0_svc+0x60/0x1d8 [ 26.864128][ T5302] el0t_64_sync_handler+0x44/0x104 [ 26.864137][ T5302] el0t_64_sync+0x198/0x19c [ 26.873953][ T5302] infiniband syz0: Couldn't register device with driver model [ 26.874889][ T5302] rdma_rxe: rxe_newlink: failed to add ip6tnl0 [ 26.952219][ T5315] overlayfs: failed to verify upper (27/file1, ino=163, err=-116) [ 26.952239][ T5315] overlayfs: failed to verify index dir 'upper' xattr [ 26.952244][ T5315] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 27.050279][ T5334] futex_wake_op: syz.2.137 tries to shift op by 144; fix this program [ 27.117215][ T5337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.144613][ T5341] netlink: 104 bytes leftover after parsing attributes in process `syz.4.142'. [ 27.172882][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.215307][ T5356] EXT4-fs (loop2): Test dummy encryption mode enabled [ 27.220072][ T5356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 27.220110][ T5356] System zones: 1-3, 19-19, 35-36 [ 27.220654][ T5356] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 27.263381][ T5356] FAULT_INJECTION: forcing a failure. [ 27.263381][ T5356] name failslab, interval 1, probability 0, space 0, times 0 [ 27.263400][ T5356] CPU: 0 UID: 0 PID: 5356 Comm: syz.2.144 Tainted: G L syzkaller #0 PREEMPT [ 27.263413][ T5356] Tainted: [L]=SOFTLOCKUP [ 27.263416][ T5356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 27.263422][ T5356] Call trace: [ 27.263425][ T5356] show_stack+0x2c/0x3c (C) [ 27.263441][ T5356] __dump_stack+0x30/0x40 [ 27.263450][ T5356] dump_stack_lvl+0xd8/0x12c [ 27.263458][ T5356] dump_stack+0x1c/0x28 [ 27.263465][ T5356] should_fail_ex+0x3fc/0x570 [ 27.263479][ T5356] should_failslab+0xc4/0x120 [ 27.263488][ T5356] kmem_cache_alloc_noprof+0x94/0x5d4 [ 27.263497][ T5356] ext4_get_nojournal+0xb4/0x200 [ 27.263510][ T5356] __ext4_journal_start_sb+0x248/0x63c [ 27.263522][ T5356] __ext4_new_inode+0x10b0/0x3300 [ 27.263532][ T5356] ext4_mknod+0x1f4/0x414 [ 27.263545][ T5356] vfs_mknod+0x380/0x558 [ 27.263556][ T5356] filename_mknodat+0x3a0/0x5cc [ 27.263567][ T5356] __arm64_sys_mknodat+0xc0/0xe8 [ 27.263578][ T5356] invoke_syscall+0x98/0x244 [ 27.263587][ T5356] el0_svc_common+0xec/0x23c [ 27.263595][ T5356] do_el0_svc+0x4c/0x5c [ 27.263602][ T5356] el0_svc+0x60/0x1d8 [ 27.263613][ T5356] el0t_64_sync_handler+0x44/0x104 [ 27.263623][ T5356] el0t_64_sync+0x198/0x19c [ 27.263636][ T5356] EXT4-fs error (device loop2) in __ext4_new_inode:1096: Out of memory [ 27.328828][ T4717] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 27.353349][ T5372] netlink: 36 bytes leftover after parsing attributes in process `syz.4.148'. [ 27.436613][ T5389] FAULT_INJECTION: forcing a failure. [ 27.436613][ T5389] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 27.436633][ T5389] CPU: 0 UID: 0 PID: 5389 Comm: syz.4.152 Tainted: G L syzkaller #0 PREEMPT [ 27.436646][ T5389] Tainted: [L]=SOFTLOCKUP [ 27.436649][ T5389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 27.436654][ T5389] Call trace: [ 27.436657][ T5389] show_stack+0x2c/0x3c (C) [ 27.436672][ T5389] __dump_stack+0x30/0x40 [ 27.436681][ T5389] dump_stack_lvl+0xd8/0x12c [ 27.436689][ T5389] dump_stack+0x1c/0x28 [ 27.436696][ T5389] should_fail_ex+0x3fc/0x570 [ 27.436710][ T5389] should_fail_alloc_page+0xec/0x10c [ 27.436719][ T5389] prepare_alloc_pages+0x194/0x484 [ 27.436728][ T5389] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 27.436738][ T5389] alloc_pages_mpol+0x1fc/0x3d0 [ 27.436748][ T5389] alloc_frozen_pages_noprof+0xc4/0x10c [ 27.436765][ T5389] alloc_pages_noprof+0x30/0x148 [ 27.436775][ T5389] __pud_alloc+0x54/0x58c [ 27.436787][ T5389] handle_mm_fault+0x1c40/0x2b58 [ 27.436802][ T5389] __get_user_pages+0x82c/0x13b0 [ 27.436812][ T5389] get_user_pages_remote+0x278/0x83c [ 27.436821][ T5389] get_arg_page+0x100/0x1f8 [ 27.436829][ T5389] copy_string_kernel+0x13c/0x1f4 [ 27.436836][ T5389] do_execveat_common+0x254/0x528 [ 27.436845][ T5389] __arm64_sys_execveat+0xe4/0x10c [ 27.436853][ T5389] invoke_syscall+0x98/0x244 [ 27.436862][ T5389] el0_svc_common+0xec/0x23c [ 27.436870][ T5389] do_el0_svc+0x4c/0x5c [ 27.436877][ T5389] el0_svc+0x60/0x1d8 [ 27.436888][ T5389] el0t_64_sync_handler+0x44/0x104 [ 27.436898][ T5389] el0t_64_sync+0x198/0x19c [ 27.453230][ T5384] syzkaller1: entered promiscuous mode [ 27.453245][ T5384] syzkaller1: entered allmulticast mode [ 27.571677][ T5401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 27.605215][ T5412] netlink: 148 bytes leftover after parsing attributes in process `syz.3.159'. [ 27.626873][ T5401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.639433][ T5401] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 3: comm syz.4.155: path /43/bus: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=15, rec_len=4, size=2048 fake=0 [ 27.663022][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.692140][ T4725] Bluetooth: hci1: command tx timeout [ 27.692168][ T4725] Bluetooth: hci0: command tx timeout [ 27.692183][ T4725] Bluetooth: hci2: command tx timeout [ 27.692197][ T4725] Bluetooth: hci3: command tx timeout [ 27.801485][ T5439] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 27.830660][ T5448] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 27.866992][ T4709] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 27.984131][ T5471] FAULT_INJECTION: forcing a failure. [ 27.984131][ T5471] name failslab, interval 1, probability 0, space 0, times 0 [ 27.984156][ T5471] CPU: 1 UID: 0 PID: 5471 Comm: syz.4.176 Tainted: G L syzkaller #0 PREEMPT [ 27.984171][ T5471] Tainted: [L]=SOFTLOCKUP [ 27.984175][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 27.984180][ T5471] Call trace: [ 27.984183][ T5471] show_stack+0x2c/0x3c (C) [ 27.984199][ T5471] __dump_stack+0x30/0x40 [ 27.984207][ T5471] dump_stack_lvl+0xd8/0x12c [ 27.984215][ T5471] dump_stack+0x1c/0x28 [ 27.984223][ T5471] should_fail_ex+0x3fc/0x570 [ 27.984237][ T5471] should_failslab+0xc4/0x120 [ 27.984246][ T5471] __kmalloc_noprof+0x108/0x6c8 [ 27.984255][ T5471] sk_prot_alloc+0xc4/0x1e8 [ 27.984269][ T5471] sk_alloc+0x44/0x320 [ 27.984280][ T5471] __netlink_create+0x78/0x23c [ 27.984291][ T5471] netlink_create+0x3b4/0x610 [ 27.984302][ T5471] __sock_create+0x31c/0x670 [ 27.984311][ T5471] __sys_socket_create+0xc0/0x11c [ 27.984320][ T5471] __sys_socket+0x44/0xec [ 27.984329][ T5471] __arm64_sys_socket+0x84/0x9c [ 27.984338][ T5471] invoke_syscall+0x98/0x244 [ 27.984347][ T5471] el0_svc_common+0xec/0x23c [ 27.984354][ T5471] do_el0_svc+0x4c/0x5c [ 27.984362][ T5471] el0_svc+0x60/0x1d8 [ 27.984373][ T5471] el0t_64_sync_handler+0x44/0x104 [ 27.984382][ T5471] el0t_64_sync+0x198/0x19c [ 28.049876][ T5479] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 28.080195][ T5486] FAULT_INJECTION: forcing a failure. [ 28.080195][ T5486] name failslab, interval 1, probability 0, space 0, times 0 [ 28.080217][ T5486] CPU: 1 UID: 0 PID: 5486 Comm: syz.4.179 Tainted: G L syzkaller #0 PREEMPT [ 28.080229][ T5486] Tainted: [L]=SOFTLOCKUP [ 28.080233][ T5486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 28.080238][ T5486] Call trace: [ 28.080241][ T5486] show_stack+0x2c/0x3c (C) [ 28.080257][ T5486] __dump_stack+0x30/0x40 [ 28.080266][ T5486] dump_stack_lvl+0xd8/0x12c [ 28.080274][ T5486] dump_stack+0x1c/0x28 [ 28.080281][ T5486] should_fail_ex+0x3fc/0x570 [ 28.080295][ T5486] should_failslab+0xc4/0x120 [ 28.080304][ T5486] __kmalloc_noprof+0x108/0x6c8 [ 28.080314][ T5486] posix_acl_alloc+0x34/0x100 [ 28.080325][ T5486] posix_acl_from_xattr+0xbc/0x4d0 [ 28.080337][ T5486] do_set_acl+0x94/0x1a4 [ 28.080347][ T5486] do_setxattr+0x15c/0x19c [ 28.080357][ T5486] filename_setxattr+0x134/0x1f8 [ 28.080367][ T5486] path_setxattrat+0x200/0x2a8 [ 28.080378][ T5486] __arm64_sys_setxattr+0xd0/0xec [ 28.080388][ T5486] invoke_syscall+0x98/0x244 [ 28.080396][ T5486] el0_svc_common+0xec/0x23c [ 28.080404][ T5486] do_el0_svc+0x4c/0x5c [ 28.080412][ T5486] el0_svc+0x60/0x1d8 [ 28.080422][ T5486] el0t_64_sync_handler+0x44/0x104 [ 28.080432][ T5486] el0t_64_sync+0x198/0x19c [ 28.175641][ T5498] FAULT_INJECTION: forcing a failure. [ 28.175641][ T5498] name failslab, interval 1, probability 0, space 0, times 0 [ 28.175664][ T5498] CPU: 0 UID: 0 PID: 5498 Comm: syz.4.184 Tainted: G L syzkaller #0 PREEMPT [ 28.175676][ T5498] Tainted: [L]=SOFTLOCKUP [ 28.175680][ T5498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 28.175685][ T5498] Call trace: [ 28.175688][ T5498] show_stack+0x2c/0x3c (C) [ 28.175703][ T5498] __dump_stack+0x30/0x40 [ 28.175712][ T5498] dump_stack_lvl+0xd8/0x12c [ 28.175720][ T5498] dump_stack+0x1c/0x28 [ 28.175727][ T5498] should_fail_ex+0x3fc/0x570 [ 28.175741][ T5498] should_failslab+0xc4/0x120 [ 28.175755][ T5498] __kmalloc_noprof+0x108/0x6c8 [ 28.175765][ T5498] sk_prot_alloc+0xc4/0x1e8 [ 28.175778][ T5498] sk_alloc+0x44/0x320 [ 28.175790][ T5498] mctp_pf_create+0xcc/0x2f8 [ 28.175803][ T5498] __sock_create+0x31c/0x670 [ 28.175812][ T5498] __sys_socket_create+0xc0/0x11c [ 28.175821][ T5498] __sys_socket+0x44/0xec [ 28.175830][ T5498] __arm64_sys_socket+0x84/0x9c [ 28.175839][ T5498] invoke_syscall+0x98/0x244 [ 28.175848][ T5498] el0_svc_common+0xec/0x23c [ 28.175856][ T5498] do_el0_svc+0x4c/0x5c [ 28.175863][ T5498] el0_svc+0x60/0x1d8 [ 28.175873][ T5498] el0t_64_sync_handler+0x44/0x104 [ 28.175883][ T5498] el0t_64_sync+0x198/0x19c [ 28.245371][ T5506] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 28.257026][ T5509] evm: overlay not supported [ 28.310919][ T5516] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 28.373877][ T5529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.192'. [ 28.377949][ T5529] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.389556][ T5529] bridge_slave_1 (unregistering): left allmulticast mode [ 28.389577][ T5529] bridge_slave_1 (unregistering): left promiscuous mode [ 28.389612][ T5529] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.413208][ T5538] random: crng reseeded on system resumption [ 28.430500][ T5535] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 28.448190][ T5538] FAULT_INJECTION: forcing a failure. [ 28.448190][ T5538] name failslab, interval 1, probability 0, space 0, times 0 [ 28.448214][ T5538] CPU: 0 UID: 0 PID: 5538 Comm: syz.2.196 Tainted: G L syzkaller #0 PREEMPT [ 28.448229][ T5538] Tainted: [L]=SOFTLOCKUP [ 28.448233][ T5538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 28.448238][ T5538] Call trace: [ 28.448241][ T5538] show_stack+0x2c/0x3c (C) [ 28.448258][ T5538] __dump_stack+0x30/0x40 [ 28.448266][ T5538] dump_stack_lvl+0xd8/0x12c [ 28.448274][ T5538] dump_stack+0x1c/0x28 [ 28.448281][ T5538] should_fail_ex+0x3fc/0x570 [ 28.448295][ T5538] should_failslab+0xc4/0x120 [ 28.448304][ T5538] __kmalloc_cache_noprof+0x94/0x5fc [ 28.448313][ T5538] __kthread_create_on_node+0x118/0x3b0 [ 28.448323][ T5538] kthread_create_on_node+0xe4/0x134 [ 28.448331][ T5538] hwrng_start_hwrng_fillfn+0xc0/0x13c [ 28.448344][ T5538] hwrng_pm_notifier+0xb8/0x108 [ 28.448355][ T5538] notifier_call_chain+0x1a4/0x4cc [ 28.448366][ T5538] blocking_notifier_call_chain+0x70/0xa0 [ 28.448377][ T5538] pm_notifier_call_chain+0x2c/0x3c [ 28.448389][ T5538] snapshot_release+0x118/0x1e0 [ 28.448398][ T5538] __fput+0x338/0x74c [ 28.448408][ T5538] fput_close_sync+0x10c/0x278 [ 28.448418][ T5538] filp_close_sync+0x7c/0xb4 [ 28.448426][ T5538] __arm64_sys_close+0x74/0x108 [ 28.448434][ T5538] invoke_syscall+0x98/0x244 [ 28.448442][ T5538] el0_svc_common+0xec/0x23c [ 28.448450][ T5538] do_el0_svc+0x4c/0x5c [ 28.448458][ T5538] el0_svc+0x60/0x1d8 [ 28.448468][ T5538] el0t_64_sync_handler+0x44/0x104 [ 28.448478][ T5538] el0t_64_sync+0x198/0x19c [ 28.448556][ T5538] hwrng_fill thread creation failed [ 28.656207][ T4803] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 28.656226][ T4803] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 28.770045][ T4402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 28.778945][ T5576] set_capacity_and_notify: 8 callbacks suppressed [ 28.778958][ T5576] loop3: detected capacity change from 0 to 8192 [ 28.798433][ T5576] syz.3.208: attempt to access beyond end of device [ 28.798433][ T5576] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 28.798472][ T5576] Buffer I/O error on dev loop3, logical block 57847, async page read [ 28.799591][ T5576] syz.3.208: attempt to access beyond end of device [ 28.799591][ T5576] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 28.799613][ T5576] Buffer I/O error on dev loop3, logical block 57847, async page read [ 28.799630][ T5576] syz.3.208: attempt to access beyond end of device [ 28.799630][ T5576] loop3: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 28.799642][ T5576] Buffer I/O error on dev loop3, logical block 57847, async page read [ 28.800523][ T5583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 28.808834][ T5576] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 28.808850][ T5576] FAT-fs (loop3): Filesystem has been set read-only [ 28.809943][ T5576] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 29.009764][ T5600] FAULT_INJECTION: forcing a failure. [ 29.009764][ T5600] name failslab, interval 1, probability 0, space 0, times 0 [ 29.009785][ T5600] CPU: 0 UID: 0 PID: 5600 Comm: syz.3.218 Tainted: G L syzkaller #0 PREEMPT [ 29.009800][ T5600] Tainted: [L]=SOFTLOCKUP [ 29.009804][ T5600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 29.009809][ T5600] Call trace: [ 29.009813][ T5600] show_stack+0x2c/0x3c (C) [ 29.009828][ T5600] __dump_stack+0x30/0x40 [ 29.009837][ T5600] dump_stack_lvl+0xd8/0x12c [ 29.009845][ T5600] dump_stack+0x1c/0x28 [ 29.009853][ T5600] should_fail_ex+0x3fc/0x570 [ 29.009869][ T5600] should_failslab+0xc4/0x120 [ 29.009878][ T5600] kmem_cache_alloc_noprof+0x94/0x5d4 [ 29.009888][ T5600] prepare_creds+0x34/0x7d0 [ 29.009901][ T5600] cap_task_prctl+0x40c/0x838 [ 29.009914][ T5600] security_task_prctl+0xe8/0x17c [ 29.009925][ T5600] __arm64_sys_prctl+0x13c/0x13c0 [ 29.009937][ T5600] invoke_syscall+0x98/0x244 [ 29.009945][ T5600] el0_svc_common+0xec/0x23c [ 29.009953][ T5600] do_el0_svc+0x4c/0x5c [ 29.009961][ T5600] el0_svc+0x60/0x1d8 [ 29.009971][ T5600] el0t_64_sync_handler+0x44/0x104 [ 29.009981][ T5600] el0t_64_sync+0x198/0x19c [ 29.113057][ T5608] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 29.119075][ T5608] bond1: entered promiscuous mode [ 29.119114][ T5608] bond1: entered allmulticast mode [ 29.119296][ T5608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 29.240083][ T5619] Zero length message leads to an empty skb [ 29.476096][ T5630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 29.682817][ T5640] FAULT_INJECTION: forcing a failure. [ 29.682817][ T5640] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 29.682839][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: syz.2.236 Tainted: G L syzkaller #0 PREEMPT [ 29.682853][ T5640] Tainted: [L]=SOFTLOCKUP [ 29.682857][ T5640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 29.682863][ T5640] Call trace: [ 29.682866][ T5640] show_stack+0x2c/0x3c (C) [ 29.682884][ T5640] __dump_stack+0x30/0x40 [ 29.682894][ T5640] dump_stack_lvl+0xd8/0x12c [ 29.682902][ T5640] dump_stack+0x1c/0x28 [ 29.682910][ T5640] should_fail_ex+0x3fc/0x570 [ 29.682925][ T5640] should_fail+0x14/0x24 [ 29.682938][ T5640] should_fail_usercopy+0x20/0x30 [ 29.682946][ T5640] _inline_copy_from_user+0x3c/0x174 [ 29.682960][ T5640] do_handle_open+0x478/0x95c [ 29.682973][ T5640] __arm64_sys_open_by_handle_at+0x88/0x9c [ 29.682985][ T5640] invoke_syscall+0x98/0x244 [ 29.682994][ T5640] el0_svc_common+0xec/0x23c [ 29.683002][ T5640] do_el0_svc+0x4c/0x5c [ 29.683009][ T5640] el0_svc+0x60/0x1d8 [ 29.683020][ T5640] el0t_64_sync_handler+0x44/0x104 [ 29.683030][ T5640] el0t_64_sync+0x198/0x19c [ 29.709570][ T5642] loop2: detected capacity change from 0 to 2048 [ 29.733028][ T5642] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.748410][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.774176][ T4724] Bluetooth: hci3: command tx timeout [ 29.774208][ T4724] Bluetooth: hci2: command tx timeout [ 29.774225][ T4724] Bluetooth: hci0: command tx timeout [ 29.823202][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 29.857389][ T5656] FAULT_INJECTION: forcing a failure. [ 29.857389][ T5656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 29.857413][ T5656] CPU: 0 UID: 0 PID: 5656 Comm: syz.1.243 Tainted: G L syzkaller #0 PREEMPT [ 29.857427][ T5656] Tainted: [L]=SOFTLOCKUP [ 29.857431][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 29.857436][ T5656] Call trace: [ 29.857439][ T5656] show_stack+0x2c/0x3c (C) [ 29.857454][ T5656] __dump_stack+0x30/0x40 [ 29.857462][ T5656] dump_stack_lvl+0xd8/0x12c [ 29.857470][ T5656] dump_stack+0x1c/0x28 [ 29.857478][ T5656] should_fail_ex+0x3fc/0x570 [ 29.857492][ T5656] should_fail_alloc_page+0xec/0x10c [ 29.857501][ T5656] prepare_alloc_pages+0x194/0x484 [ 29.857511][ T5656] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 29.857520][ T5656] alloc_pages_mpol+0x1fc/0x3d0 [ 29.857530][ T5656] folio_alloc_mpol_noprof+0x4c/0x248 [ 29.857540][ T5656] vma_alloc_folio_noprof+0x100/0x1dc [ 29.857550][ T5656] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 29.857564][ T5656] folio_prealloc+0x3c/0x1b0 [ 29.857572][ T5656] do_pte_missing+0x1bd0/0x28bc [ 29.857580][ T5656] handle_mm_fault+0x14d0/0x2b58 [ 29.857592][ T5656] __get_user_pages+0x82c/0x13b0 [ 29.857602][ T5656] __gup_longterm_locked+0x2f4/0xffc [ 29.857611][ T5656] pin_user_pages+0x9c/0xd8 [ 29.857620][ T5656] xdp_umem_pin_pages+0xf8/0x2c0 [ 29.857634][ T5656] xdp_umem_create+0x4e0/0x6e8 [ 29.857646][ T5656] xsk_setsockopt+0x5d0/0x6c4 [ 29.857657][ T5656] do_sock_setsockopt+0x1f0/0x330 [ 29.857669][ T5656] __sys_setsockopt+0x104/0x170 [ 29.857679][ T5656] __arm64_sys_setsockopt+0xc8/0xe4 [ 29.857689][ T5656] invoke_syscall+0x98/0x244 [ 29.857697][ T5656] el0_svc_common+0xec/0x23c [ 29.857705][ T5656] do_el0_svc+0x4c/0x5c [ 29.857712][ T5656] el0_svc+0x60/0x1d8 [ 29.857723][ T5656] el0t_64_sync_handler+0x44/0x104 [ 29.857733][ T5656] el0t_64_sync+0x198/0x19c [ 29.925906][ T5662] FAULT_INJECTION: forcing a failure. [ 29.925906][ T5662] name fail_futex, interval 1, probability 0, space 0, times 1 [ 29.925926][ T5662] CPU: 0 UID: 0 PID: 5662 Comm: syz.2.247 Tainted: G L syzkaller #0 PREEMPT [ 29.925938][ T5662] Tainted: [L]=SOFTLOCKUP [ 29.925941][ T5662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 29.925946][ T5662] Call trace: [ 29.925949][ T5662] show_stack+0x2c/0x3c (C) [ 29.925964][ T5662] __dump_stack+0x30/0x40 [ 29.925973][ T5662] dump_stack_lvl+0xd8/0x12c [ 29.925981][ T5662] dump_stack+0x1c/0x28 [ 29.925988][ T5662] should_fail_ex+0x3fc/0x570 [ 29.926002][ T5662] should_fail+0x14/0x24 [ 29.926013][ T5662] get_futex_key+0xd00/0x118c [ 29.926025][ T5662] futex_wait_requeue_pi+0x22c/0x85c [ 29.926036][ T5662] do_futex+0x1e0/0x378 [ 29.926047][ T5662] __arm64_sys_futex+0x2e4/0x418 [ 29.926058][ T5662] invoke_syscall+0x98/0x244 [ 29.926066][ T5662] el0_svc_common+0xec/0x23c [ 29.926074][ T5662] do_el0_svc+0x4c/0x5c [ 29.926081][ T5662] el0_svc+0x60/0x1d8 [ 29.926092][ T5662] el0t_64_sync_handler+0x44/0x104 [ 29.926101][ T5662] el0t_64_sync+0x198/0x19c [ 29.974923][ T5671] input: syz1 as /devices/virtual/input/input5 [ 30.089212][ T5688] loop1: detected capacity change from 0 to 1024 [ 30.089968][ T5688] EXT4-fs: Ignoring removed bh option [ 30.107483][ T5688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.155505][ T4710] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 30.170425][ T4710] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /52/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 30.177427][ T4710] EXT4-fs (loop1): Remounting filesystem read-only [ 30.180073][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.199871][ T5696] sctp: [Deprecated]: syz.2.262 (pid 5696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 30.199871][ T5696] Use struct sctp_sack_info instead [ 30.304272][ T5707] netlink: 20 bytes leftover after parsing attributes in process `syz.1.266'. [ 30.382961][ T5718] loop2: detected capacity change from 0 to 1024 [ 30.403018][ T5718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 30.415693][ T5718] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: comm syz.2.270: lblock 0 mapped to illegal pblock 0 (length 6) [ 30.427685][ T5718] EXT4-fs error (device loop2): ext4_ext_remove_space:2977: inode #15: comm syz.2.270: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 30.434619][ T5718] EXT4-fs error (device loop2) in ext4_setattr:7187: Corrupt filesystem [ 30.438630][ T5718] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.270: bg 0: block 112: padding at end of block bitmap is not set [ 30.443771][ T5718] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 30.443792][ T5718] EXT4-fs (loop2): This should not happen!! Data will be lost [ 30.443792][ T5718] [ 30.443803][ T5718] EXT4-fs (loop2): Total free blocks count 0 [ 30.443812][ T5718] EXT4-fs (loop2): Free/Dirty block details [ 30.443824][ T5718] EXT4-fs (loop2): free_blocks=0 [ 30.443834][ T5718] EXT4-fs (loop2): dirty_blocks=0 [ 30.443841][ T5718] EXT4-fs (loop2): Block reservation details [ 30.443847][ T5718] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 30.449367][ T5723] FAULT_INJECTION: forcing a failure. [ 30.449367][ T5723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 30.449387][ T5723] CPU: 1 UID: 0 PID: 5723 Comm: syz.1.273 Tainted: G L syzkaller #0 PREEMPT [ 30.449400][ T5723] Tainted: [L]=SOFTLOCKUP [ 30.449404][ T5723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 30.449409][ T5723] Call trace: [ 30.449412][ T5723] show_stack+0x2c/0x3c (C) [ 30.449427][ T5723] __dump_stack+0x30/0x40 [ 30.449436][ T5723] dump_stack_lvl+0xd8/0x12c [ 30.449444][ T5723] dump_stack+0x1c/0x28 [ 30.449451][ T5723] should_fail_ex+0x3fc/0x570 [ 30.449466][ T5723] should_fail+0x14/0x24 [ 30.449478][ T5723] should_fail_usercopy+0x20/0x30 [ 30.449486][ T5723] _inline_copy_from_user+0x3c/0x188 [ 30.449496][ T5723] copy_clone_args_from_user+0x4a4/0x5d0 [ 30.449506][ T5723] __arm64_sys_clone3+0x150/0x390 [ 30.449514][ T5723] invoke_syscall+0x98/0x244 [ 30.449523][ T5723] el0_svc_common+0xec/0x23c [ 30.449531][ T5723] do_el0_svc+0x4c/0x5c [ 30.449538][ T5723] el0_svc+0x60/0x1d8 [ 30.449549][ T5723] el0t_64_sync_handler+0x44/0x104 [ 30.449559][ T5723] el0t_64_sync+0x198/0x19c [ 30.460948][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 30.495302][ T5727] FAULT_INJECTION: forcing a failure. [ 30.495302][ T5727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 30.495320][ T5727] CPU: 0 UID: 0 PID: 5727 Comm: syz.1.276 Tainted: G L syzkaller #0 PREEMPT [ 30.495332][ T5727] Tainted: [L]=SOFTLOCKUP [ 30.495335][ T5727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 30.495340][ T5727] Call trace: [ 30.495343][ T5727] show_stack+0x2c/0x3c (C) [ 30.495358][ T5727] __dump_stack+0x30/0x40 [ 30.495367][ T5727] dump_stack_lvl+0xd8/0x12c [ 30.495375][ T5727] dump_stack+0x1c/0x28 [ 30.495382][ T5727] should_fail_ex+0x3fc/0x570 [ 30.495396][ T5727] should_fail_alloc_page+0xec/0x10c [ 30.495405][ T5727] prepare_alloc_pages+0x194/0x484 [ 30.495414][ T5727] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 30.495423][ T5727] alloc_pages_mpol+0x1fc/0x3d0 [ 30.495433][ T5727] alloc_frozen_pages_noprof+0xc4/0x10c [ 30.495443][ T5727] alloc_pages_noprof+0x30/0x148 [ 30.495453][ T5727] get_free_pages_noprof+0x1c/0xbc [ 30.495462][ T5727] __kasan_populate_vmalloc+0x48/0x1d0 [ 30.495474][ T5727] alloc_vmap_area+0xcd8/0x12ec [ 30.495484][ T5727] __get_vm_area_node+0x210/0x32c [ 30.495494][ T5727] __vmalloc_node_range_noprof+0x2e0/0xeec [ 30.495504][ T5727] __vmalloc_node_noprof+0xec/0x14c [ 30.495514][ T5727] __vmalloc_noprof+0x64/0x8c [ 30.495524][ T5727] bpf_prog_calc_tag+0x68/0x314 [ 30.495535][ T5727] bpf_jit_subprogs+0x898/0x3c58 [ 30.495547][ T5727] bpf_fixup_call_args+0x2c4/0x344 [ 30.495559][ T5727] bpf_check+0x18f8/0x2948 [ 30.495568][ T5727] bpf_prog_load+0xf6c/0x15a4 [ 30.495578][ T5727] __sys_bpf+0x7e8/0x840 [ 30.495588][ T5727] __arm64_sys_bpf+0xd0/0xec [ 30.495597][ T5727] invoke_syscall+0x98/0x244 [ 30.495606][ T5727] el0_svc_common+0xec/0x23c [ 30.495617][ T5727] do_el0_svc+0x4c/0x5c [ 30.495625][ T5727] el0_svc+0x60/0x1d8 [ 30.495635][ T5727] el0t_64_sync_handler+0x44/0x104 [ 30.495645][ T5727] el0t_64_sync+0x198/0x19c [ 30.587814][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 30.597454][ T5737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.280'. [ 30.599097][ T5737] ifb0: entered allmulticast mode [ 30.600715][ T5737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 30.648980][ T5747] ªªªªªª: renamed from vlan0 (while UP) [ 30.678964][ T5751] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 30.753306][ T5759] FAULT_INJECTION: forcing a failure. [ 30.753306][ T5759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 30.753331][ T5759] CPU: 0 UID: 0 PID: 5759 Comm: syz.1.290 Tainted: G L syzkaller #0 PREEMPT [ 30.753346][ T5759] Tainted: [L]=SOFTLOCKUP [ 30.753350][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 30.753355][ T5759] Call trace: [ 30.753358][ T5759] show_stack+0x2c/0x3c (C) [ 30.753373][ T5759] __dump_stack+0x30/0x40 [ 30.753382][ T5759] dump_stack_lvl+0xd8/0x12c [ 30.753390][ T5759] dump_stack+0x1c/0x28 [ 30.753397][ T5759] should_fail_ex+0x3fc/0x570 [ 30.753412][ T5759] should_fail+0x14/0x24 [ 30.753424][ T5759] should_fail_usercopy+0x20/0x30 [ 30.753432][ T5759] _inline_copy_from_user+0x3c/0x174 [ 30.753445][ T5759] copy_from_sockptr+0x60/0x8c [ 30.753455][ T5759] ip_mroute_setsockopt+0x548/0xd28 [ 30.753465][ T5759] do_ip_setsockopt+0xa6c/0x2628 [ 30.753478][ T5759] ip_setsockopt+0x80/0x128 [ 30.753490][ T5759] raw_setsockopt+0xd8/0x294 [ 30.753500][ T5759] sock_common_setsockopt+0xb0/0xcc [ 30.753510][ T5759] do_sock_setsockopt+0x1f0/0x330 [ 30.753521][ T5759] __sys_setsockopt+0x104/0x170 [ 30.753530][ T5759] __arm64_sys_setsockopt+0xc8/0xe4 [ 30.753540][ T5759] invoke_syscall+0x98/0x244 [ 30.753549][ T5759] el0_svc_common+0xec/0x23c [ 30.753557][ T5759] do_el0_svc+0x4c/0x5c [ 30.753564][ T5759] el0_svc+0x60/0x1d8 [ 30.753575][ T5759] el0t_64_sync_handler+0x44/0x104 [ 30.753585][ T5759] el0t_64_sync+0x198/0x19c [ 30.811159][ T4803] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 30.811177][ T4803] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 30.858014][ T5773] netlink: 104 bytes leftover after parsing attributes in process `syz.2.297'. [ 30.921468][ T5777] FAULT_INJECTION: forcing a failure. [ 30.921468][ T5777] name failslab, interval 1, probability 0, space 0, times 0 [ 30.921492][ T5777] CPU: 0 UID: 0 PID: 5777 Comm: syz.4.299 Tainted: G L syzkaller #0 PREEMPT [ 30.921506][ T5777] Tainted: [L]=SOFTLOCKUP [ 30.921510][ T5777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 30.921516][ T5777] Call trace: [ 30.921519][ T5777] show_stack+0x2c/0x3c (C) [ 30.921534][ T5777] __dump_stack+0x30/0x40 [ 30.921543][ T5777] dump_stack_lvl+0xd8/0x12c [ 30.921551][ T5777] dump_stack+0x1c/0x28 [ 30.921558][ T5777] should_fail_ex+0x3fc/0x570 [ 30.921572][ T5777] should_failslab+0xc4/0x120 [ 30.921581][ T5777] kmem_cache_alloc_noprof+0x94/0x5d4 [ 30.921590][ T5777] __kernfs_new_node+0xf0/0x7d8 [ 30.921603][ T5777] kernfs_new_node+0xf4/0x148 [ 30.921615][ T5777] __kernfs_create_file+0x60/0x2e0 [ 30.921623][ T5777] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 30.921632][ T5777] sysfs_merge_group+0x164/0x2ac [ 30.921641][ T5777] dpm_sysfs_add+0xc8/0x258 [ 30.921652][ T5777] device_add+0x468/0x9e0 [ 30.921660][ T5777] netdev_register_kobject+0x184/0x328 [ 30.921672][ T5777] register_netdevice+0xee0/0x16d0 [ 30.921684][ T5777] ipip6_tunnel_create+0x1d8/0x220 [ 30.921697][ T5777] ipip6_tunnel_locate+0x590/0x7b0 [ 30.921708][ T5777] ipip6_tunnel_ctl+0x24c/0x5c4 [ 30.921718][ T5777] ip_tunnel_siocdevprivate+0x100/0x1a4 [ 30.921728][ T5777] ipip6_tunnel_siocdevprivate+0x1d8/0x1454 [ 30.921739][ T5777] dev_ifsioc+0x654/0xc34 [ 30.921756][ T5777] dev_ioctl+0x560/0xc88 [ 30.921767][ T5777] sock_ioctl+0x734/0x7ec [ 30.921778][ T5777] __arm64_sys_ioctl+0x154/0x1cc [ 30.921787][ T5777] invoke_syscall+0x98/0x244 [ 30.921796][ T5777] el0_svc_common+0xec/0x23c [ 30.921804][ T5777] do_el0_svc+0x4c/0x5c [ 30.921811][ T5777] el0_svc+0x60/0x1d8 [ 30.921822][ T5777] el0t_64_sync_handler+0x44/0x104 [ 30.921832][ T5777] el0t_64_sync+0x198/0x19c [ 31.116376][ T5797] loop4: detected capacity change from 0 to 2048 [ 31.117227][ T5797] EXT4-fs: Ignoring removed i_version option [ 31.127026][ T5797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.207600][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.280380][ T5819] FAULT_INJECTION: forcing a failure. [ 31.280380][ T5819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 31.280402][ T5819] CPU: 1 UID: 0 PID: 5819 Comm: syz.1.308 Tainted: G L syzkaller #0 PREEMPT [ 31.280414][ T5819] Tainted: [L]=SOFTLOCKUP [ 31.280417][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 31.280423][ T5819] Call trace: [ 31.280425][ T5819] show_stack+0x2c/0x3c (C) [ 31.280441][ T5819] __dump_stack+0x30/0x40 [ 31.280449][ T5819] dump_stack_lvl+0xd8/0x12c [ 31.280457][ T5819] dump_stack+0x1c/0x28 [ 31.280465][ T5819] should_fail_ex+0x3fc/0x570 [ 31.280478][ T5819] should_fail+0x14/0x24 [ 31.280490][ T5819] should_fail_usercopy+0x20/0x30 [ 31.280498][ T5819] bpf_verifier_vlog+0x81c/0xbc0 [ 31.280509][ T5819] __btf_verifier_log+0xe8/0x13c [ 31.280521][ T5819] btf_parse_hdr+0x3f4/0x71c [ 31.280532][ T5819] btf_new_fd+0x288/0x7a8 [ 31.280542][ T5819] bpf_btf_load+0x144/0x190 [ 31.280553][ T5819] __sys_bpf+0x804/0x840 [ 31.280563][ T5819] __arm64_sys_bpf+0xd0/0xec [ 31.280572][ T5819] invoke_syscall+0x98/0x244 [ 31.280581][ T5819] el0_svc_common+0xec/0x23c [ 31.280588][ T5819] do_el0_svc+0x4c/0x5c [ 31.280596][ T5819] el0_svc+0x60/0x1d8 [ 31.280607][ T5819] el0t_64_sync_handler+0x44/0x104 [ 31.280617][ T5819] el0t_64_sync+0x198/0x19c [ 31.462329][ T5836] loop1: detected capacity change from 0 to 2048 [ 31.478713][ T5836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.542136][ T5844] FAULT_INJECTION: forcing a failure. [ 31.542136][ T5844] name failslab, interval 1, probability 0, space 0, times 0 [ 31.542161][ T5844] CPU: 1 UID: 0 PID: 5844 Comm: syz.3.313 Tainted: G L syzkaller #0 PREEMPT [ 31.542178][ T5844] Tainted: [L]=SOFTLOCKUP [ 31.542182][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 31.542187][ T5844] Call trace: [ 31.542190][ T5844] show_stack+0x2c/0x3c (C) [ 31.542206][ T5844] __dump_stack+0x30/0x40 [ 31.542215][ T5844] dump_stack_lvl+0xd8/0x12c [ 31.542223][ T5844] dump_stack+0x1c/0x28 [ 31.542231][ T5844] should_fail_ex+0x3fc/0x570 [ 31.542245][ T5844] should_failslab+0xc4/0x120 [ 31.542253][ T5844] __kmalloc_noprof+0x108/0x6c8 [ 31.542263][ T5844] sk_prot_alloc+0xc4/0x1e8 [ 31.542276][ T5844] sk_alloc+0x44/0x320 [ 31.542289][ T5844] can_create+0x19c/0x530 [ 31.542301][ T5844] __sock_create+0x31c/0x670 [ 31.542310][ T5844] __sys_socket_create+0xc0/0x11c [ 31.542319][ T5844] __sys_socket+0x44/0xec [ 31.542328][ T5844] __arm64_sys_socket+0x84/0x9c [ 31.542338][ T5844] invoke_syscall+0x98/0x244 [ 31.542346][ T5844] el0_svc_common+0xec/0x23c [ 31.542354][ T5844] do_el0_svc+0x4c/0x5c [ 31.542362][ T5844] el0_svc+0x60/0x1d8 [ 31.542372][ T5844] el0t_64_sync_handler+0x44/0x104 [ 31.542382][ T5844] el0t_64_sync+0x198/0x19c [ 31.582971][ T5846] FAULT_INJECTION: forcing a failure. [ 31.582971][ T5846] name failslab, interval 1, probability 0, space 0, times 0 [ 31.582994][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz.4.314 Tainted: G L syzkaller #0 PREEMPT [ 31.583007][ T5846] Tainted: [L]=SOFTLOCKUP [ 31.583011][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 31.583015][ T5846] Call trace: [ 31.583018][ T5846] show_stack+0x2c/0x3c (C) [ 31.583035][ T5846] __dump_stack+0x30/0x40 [ 31.583044][ T5846] dump_stack_lvl+0xd8/0x12c [ 31.583052][ T5846] dump_stack+0x1c/0x28 [ 31.583060][ T5846] should_fail_ex+0x3fc/0x570 [ 31.583076][ T5846] should_failslab+0xc4/0x120 [ 31.583085][ T5846] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 31.583095][ T5846] __d_alloc+0x50/0x654 [ 31.583105][ T5846] __d_alloc_parallel+0xcc/0xfd4 [ 31.583116][ T5846] d_alloc_parallel+0x2c/0x3c [ 31.583126][ T5846] proc_sys_fill_cache+0x200/0x334 [ 31.583137][ T5846] proc_sys_readdir+0x378/0x524 [ 31.583147][ T5846] iterate_dir+0x33c/0x6f0 [ 31.583156][ T5846] __arm64_sys_getdents64+0x124/0x310 [ 31.583165][ T5846] invoke_syscall+0x98/0x244 [ 31.583173][ T5846] el0_svc_common+0xec/0x23c [ 31.583181][ T5846] do_el0_svc+0x4c/0x5c [ 31.583189][ T5846] el0_svc+0x60/0x1d8 [ 31.583200][ T5846] el0t_64_sync_handler+0x44/0x104 [ 31.583209][ T5846] el0t_64_sync+0x198/0x19c [ 31.589903][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.629585][ T5850] loop3: detected capacity change from 0 to 512 [ 31.645210][ T5850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.667177][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.668368][ T4725] block nbd4: Receive control failed (result -107) [ 31.678538][ T5855] block nbd4: shutting down sockets [ 31.722493][ T5864] netlink: 'syz.4.319': attribute type 10 has an invalid length. [ 31.739723][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.740515][ T5864] team0: Port device netdevsim1 added [ 31.748581][ T5864] netlink: 'syz.4.319': attribute type 10 has an invalid length. [ 31.760957][ T5864] team0: Port device netdevsim1 removed [ 31.764647][ T5864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.766119][ T5864] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 31.853490][ T5886] block nbd4: NBD_DISCONNECT [ 31.853525][ T5886] block nbd4: Send disconnect failed -32 [ 31.853539][ T5886] block nbd4: Disconnected due to user request. [ 31.853546][ T5886] block nbd4: shutting down sockets [ 31.884584][ T5891] loop1: detected capacity change from 0 to 256 [ 31.953093][ T5906] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 32.065449][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.065648][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.206429][ T5939] loop4: detected capacity change from 0 to 512 [ 32.208662][ T5939] EXT4-fs: Ignoring removed bh option [ 32.219153][ T5939] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 32.235142][ T5939] EXT4-fs (loop4): 1 truncate cleaned up [ 32.235664][ T5939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.260003][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.323746][ T5946] loop3: detected capacity change from 0 to 1024 [ 32.325393][ T5946] EXT4-fs: Ignoring removed bh option [ 32.326596][ T5946] EXT4-fs (loop3): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 32.348723][ T5946] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.365416][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.396460][ T1101] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.420812][ T5960] FAULT_INJECTION: forcing a failure. [ 32.420812][ T5960] name failslab, interval 1, probability 0, space 0, times 0 [ 32.420833][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.4.352 Tainted: G L syzkaller #0 PREEMPT [ 32.420845][ T5960] Tainted: [L]=SOFTLOCKUP [ 32.420849][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 32.420854][ T5960] Call trace: [ 32.420857][ T5960] show_stack+0x2c/0x3c (C) [ 32.420873][ T5960] __dump_stack+0x30/0x40 [ 32.420882][ T5960] dump_stack_lvl+0xd8/0x12c [ 32.420890][ T5960] dump_stack+0x1c/0x28 [ 32.420897][ T5960] should_fail_ex+0x3fc/0x570 [ 32.420912][ T5960] should_failslab+0xc4/0x120 [ 32.420920][ T5960] __kmalloc_cache_noprof+0x94/0x5fc [ 32.420930][ T5960] shmem_fill_super+0xd0/0xe74 [ 32.420943][ T5960] get_tree_super+0xb8/0x148 [ 32.420954][ T5960] get_tree_nodev+0x2c/0x3c [ 32.420964][ T5960] shmem_get_tree+0x28/0x38 [ 32.420976][ T5960] vfs_get_tree+0x90/0x28c [ 32.420989][ T5960] fc_mount+0x24/0xac [ 32.421001][ T5960] do_new_mount+0x2a4/0x538 [ 32.421013][ T5960] path_mount+0x5f0/0xa88 [ 32.421024][ T5960] do_mount+0xe8/0x148 [ 32.421036][ T5960] __arm64_sys_mount+0x33c/0x388 [ 32.421048][ T5960] invoke_syscall+0x98/0x244 [ 32.421056][ T5960] el0_svc_common+0xec/0x23c [ 32.421064][ T5960] do_el0_svc+0x4c/0x5c [ 32.421072][ T5960] el0_svc+0x60/0x1d8 [ 32.421082][ T5960] el0t_64_sync_handler+0x44/0x104 [ 32.421092][ T5960] el0t_64_sync+0x198/0x19c [ 32.656120][ T5993] virtio-fs: tag <> not found [ 32.901086][ T6022] syz_tun: entered allmulticast mode [ 32.904273][ T6021] syz_tun: left allmulticast mode [ 32.916226][ T6024] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 32.941274][ T6024] EXT4-fs (loop4): 1 orphan inode deleted [ 32.941443][ T6024] FAULT_INJECTION: forcing a failure. [ 32.941443][ T6024] name failslab, interval 1, probability 0, space 0, times 0 [ 32.941457][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.4.375 Tainted: G L syzkaller #0 PREEMPT [ 32.941470][ T6024] Tainted: [L]=SOFTLOCKUP [ 32.941473][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 32.941478][ T6024] Call trace: [ 32.941481][ T6024] show_stack+0x2c/0x3c (C) [ 32.941497][ T6024] __dump_stack+0x30/0x40 [ 32.941506][ T6024] dump_stack_lvl+0xd8/0x12c [ 32.941514][ T6024] dump_stack+0x1c/0x28 [ 32.941521][ T6024] should_fail_ex+0x3fc/0x570 [ 32.941536][ T6024] should_failslab+0xc4/0x120 [ 32.941544][ T6024] kmem_cache_alloc_noprof+0x94/0x5d4 [ 32.941553][ T6024] __kernfs_new_node+0xf0/0x7d8 [ 32.941566][ T6024] kernfs_new_node+0xf4/0x148 [ 32.941578][ T6024] __kernfs_create_file+0x60/0x2e0 [ 32.941587][ T6024] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 32.941596][ T6024] internal_create_group+0x550/0xb30 [ 32.941605][ T6024] internal_create_groups+0x64/0x138 [ 32.941615][ T6024] sysfs_create_groups+0x2c/0x3c [ 32.941624][ T6024] kobject_add_internal+0x2cc/0x6f0 [ 32.941637][ T6024] kobject_add_varg+0x9c/0xe8 [ 32.941648][ T6024] kobject_init_and_add+0xec/0x13c [ 32.941659][ T6024] ext4_register_sysfs+0xb0/0x294 [ 32.941673][ T6024] ext4_fill_super+0x4914/0x4e3c [ 32.941684][ T6024] get_tree_bdev_flags+0x388/0x43c [ 32.941695][ T6024] get_tree_bdev+0x2c/0x3c [ 32.941706][ T6024] ext4_get_tree+0x28/0x38 [ 32.941716][ T6024] vfs_get_tree+0x90/0x28c [ 32.941727][ T6024] fc_mount+0x24/0xac [ 32.941738][ T6024] do_new_mount+0x2a4/0x538 [ 32.941758][ T6024] path_mount+0x5f0/0xa88 [ 32.941769][ T6024] do_mount+0xe8/0x148 [ 32.941781][ T6024] __arm64_sys_mount+0x33c/0x388 [ 32.941794][ T6024] invoke_syscall+0x98/0x244 [ 32.941802][ T6024] el0_svc_common+0xec/0x23c [ 32.941810][ T6024] do_el0_svc+0x4c/0x5c [ 32.941818][ T6024] el0_svc+0x60/0x1d8 [ 32.941828][ T6024] el0t_64_sync_handler+0x44/0x104 [ 32.941837][ T6024] el0t_64_sync+0x198/0x19c [ 32.942901][ T6024] kobject: kobject_add_internal failed for loop4 (error: -12 parent: ext4) [ 32.971072][ T4803] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 32.971089][ T4803] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 32.971459][ T4725] Bluetooth: hci0: command 0x0c1a tx timeout [ 32.980694][ T6026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 32.997879][ T2980] __quota_error: 60 callbacks suppressed [ 32.997891][ T2980] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 32.997920][ T2980] EXT4-fs error (device loop4): ext4_release_dquot:7156: comm kworker/u8:8: Failed to release dquot type 1 [ 32.997930][ T2980] loop4: lost filesystem error report for type 5 error -117 [ 32.999759][ T6026] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: block 1: comm syz.2.376: lblock 1 mapped to illegal pblock 1 (length 5) [ 33.001335][ T6026] EXT4-fs (loop2): Remounting filesystem read-only [ 33.005742][ T6024] EXT4-fs (loop4): mount failed [ 33.069818][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.099748][ T13] IPVS: starting estimator thread 0... [ 33.157486][ T6046] syz_tun: entered allmulticast mode [ 33.159559][ T6045] syz_tun: left allmulticast mode [ 33.182878][ T6038] IPVS: using max 60 ests per chain, 144000 per kthread [ 33.186873][ T6050] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 33.234503][ T6056] FAULT_INJECTION: forcing a failure. [ 33.234503][ T6056] name failslab, interval 1, probability 0, space 0, times 0 [ 33.234524][ T6056] CPU: 1 UID: 0 PID: 6056 Comm: syz.4.387 Tainted: G L syzkaller #0 PREEMPT [ 33.234536][ T6056] Tainted: [L]=SOFTLOCKUP [ 33.234540][ T6056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.234545][ T6056] Call trace: [ 33.234548][ T6056] show_stack+0x2c/0x3c (C) [ 33.234564][ T6056] __dump_stack+0x30/0x40 [ 33.234573][ T6056] dump_stack_lvl+0xd8/0x12c [ 33.234580][ T6056] dump_stack+0x1c/0x28 [ 33.234588][ T6056] should_fail_ex+0x3fc/0x570 [ 33.234601][ T6056] should_failslab+0xc4/0x120 [ 33.234610][ T6056] kmem_cache_alloc_noprof+0x94/0x5d4 [ 33.234619][ T6056] __kernfs_new_node+0xf0/0x7d8 [ 33.234632][ T6056] kernfs_new_node+0xf4/0x148 [ 33.234643][ T6056] __kernfs_create_file+0x60/0x2e0 [ 33.234651][ T6056] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 33.234660][ T6056] internal_create_group+0x550/0xb30 [ 33.234670][ T6056] internal_create_groups+0x64/0x138 [ 33.234679][ T6056] sysfs_create_groups+0x2c/0x3c [ 33.234688][ T6056] device_add_attrs+0x17c/0x4e4 [ 33.234698][ T6056] device_add+0x420/0x9e0 [ 33.234705][ T6056] netdev_register_kobject+0x184/0x328 [ 33.234718][ T6056] register_netdevice+0xee0/0x16d0 [ 33.234730][ T6056] xfrmi_newlink+0x284/0x424 [ 33.234740][ T6056] rtnl_newlink_create+0x294/0x6b8 [ 33.234749][ T6056] rtnl_newlink+0xfe8/0x1390 [ 33.234758][ T6056] rtnetlink_rcv_msg+0x66c/0x9bc [ 33.234772][ T6056] netlink_rcv_skb+0x238/0x414 [ 33.234783][ T6056] rtnetlink_rcv+0x28/0x38 [ 33.234791][ T6056] netlink_unicast+0x73c/0x934 [ 33.234801][ T6056] netlink_sendmsg+0x670/0x98c [ 33.234812][ T6056] __sock_sendmsg+0xc8/0x188 [ 33.234821][ T6056] ____sys_sendmsg+0x3d0/0x6c8 [ 33.234831][ T6056] ___sys_sendmsg+0x198/0x224 [ 33.234841][ T6056] __sys_sendmsg+0x158/0x204 [ 33.234851][ T6056] __arm64_sys_sendmsg+0x88/0x9c [ 33.234861][ T6056] invoke_syscall+0x98/0x244 [ 33.234870][ T6056] el0_svc_common+0xec/0x23c [ 33.234878][ T6056] do_el0_svc+0x4c/0x5c [ 33.234885][ T6056] el0_svc+0x60/0x1d8 [ 33.234896][ T6056] el0t_64_sync_handler+0x44/0x104 [ 33.234906][ T6056] el0t_64_sync+0x198/0x19c [ 33.287888][ T6061] EXT4-fs: Ignoring removed bh option [ 33.289036][ T6061] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 33.295086][ T6061] EXT4-fs (loop2): 1 truncate cleaned up [ 33.295513][ T6061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.316528][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.373223][ T6067] FAULT_INJECTION: forcing a failure. [ 33.373223][ T6067] name failslab, interval 1, probability 0, space 0, times 0 [ 33.373244][ T6067] CPU: 1 UID: 0 PID: 6067 Comm: syz.2.391 Tainted: G L syzkaller #0 PREEMPT [ 33.373256][ T6067] Tainted: [L]=SOFTLOCKUP [ 33.373260][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.373265][ T6067] Call trace: [ 33.373268][ T6067] show_stack+0x2c/0x3c (C) [ 33.373284][ T6067] __dump_stack+0x30/0x40 [ 33.373293][ T6067] dump_stack_lvl+0xd8/0x12c [ 33.373301][ T6067] dump_stack+0x1c/0x28 [ 33.373308][ T6067] should_fail_ex+0x3fc/0x570 [ 33.373322][ T6067] should_failslab+0xc4/0x120 [ 33.373331][ T6067] __kmalloc_cache_noprof+0x94/0x5fc [ 33.373340][ T6067] crypto_larval_alloc+0x64/0x248 [ 33.373352][ T6067] crypto_alg_mod_lookup+0x164/0x3fc [ 33.373363][ T6067] crypto_alloc_tfm_node+0xdc/0x22c [ 33.373374][ T6067] crypto_alloc_sig+0x40/0x54 [ 33.373386][ T6067] software_key_query+0x280/0xa78 [ 33.373396][ T6067] query_asymmetric_key+0x100/0x120 [ 33.373406][ T6067] keyctl_pkey_params_get_2+0x254/0x54c [ 33.373418][ T6067] keyctl_pkey_e_d_s+0xbc/0x3ac [ 33.373428][ T6067] __arm64_sys_keyctl+0x3ac/0x3e8 [ 33.373438][ T6067] invoke_syscall+0x98/0x244 [ 33.373447][ T6067] el0_svc_common+0xec/0x23c [ 33.373454][ T6067] do_el0_svc+0x4c/0x5c [ 33.373462][ T6067] el0_svc+0x60/0x1d8 [ 33.373473][ T6067] el0t_64_sync_handler+0x44/0x104 [ 33.373482][ T6067] el0t_64_sync+0x198/0x19c [ 33.476775][ T6063] loop4: p1 p3 < > [ 33.525168][ T4684] udevd[4684]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 33.526628][ T4686] udevd[4686]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 33.677986][ T6091] bond0: entered promiscuous mode [ 33.678012][ T6091] bond_slave_0: entered promiscuous mode [ 33.678116][ T6091] bond_slave_1: entered promiscuous mode [ 33.715014][ T6088] loop4: AHDI p1 p4 [ 33.739102][ T6089] overlayfs: statfs failed on './file0' [ 33.810396][ T4684] udevd[4684]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 33.965167][ T6116] FAULT_INJECTION: forcing a failure. [ 33.965167][ T6116] name failslab, interval 1, probability 0, space 0, times 0 [ 33.965190][ T6116] CPU: 1 UID: 0 PID: 6116 Comm: syz.1.413 Tainted: G L syzkaller #0 PREEMPT [ 33.965203][ T6116] Tainted: [L]=SOFTLOCKUP [ 33.965207][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.965212][ T6116] Call trace: [ 33.965215][ T6116] show_stack+0x2c/0x3c (C) [ 33.965231][ T6116] __dump_stack+0x30/0x40 [ 33.965239][ T6116] dump_stack_lvl+0xd8/0x12c [ 33.965247][ T6116] dump_stack+0x1c/0x28 [ 33.965254][ T6116] should_fail_ex+0x3fc/0x570 [ 33.965268][ T6116] should_failslab+0xc4/0x120 [ 33.965276][ T6116] kmem_cache_alloc_noprof+0x94/0x5d4 [ 33.965285][ T6116] prepare_creds+0x34/0x7d0 [ 33.965297][ T6116] cap_task_prctl+0x40c/0x838 [ 33.965310][ T6116] security_task_prctl+0xe8/0x17c [ 33.965319][ T6116] __arm64_sys_prctl+0x13c/0x13c0 [ 33.965330][ T6116] invoke_syscall+0x98/0x244 [ 33.965339][ T6116] el0_svc_common+0xec/0x23c [ 33.965347][ T6116] do_el0_svc+0x4c/0x5c [ 33.965354][ T6116] el0_svc+0x60/0x1d8 [ 33.965365][ T6116] el0t_64_sync_handler+0x44/0x104 [ 33.965375][ T6116] el0t_64_sync+0x198/0x19c [ 34.019350][ T6118] netlink: 24 bytes leftover after parsing attributes in process `syz.3.414'. [ 34.021627][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.030096][ T6118] bridge_slave_1 (unregistering): left allmulticast mode [ 34.030118][ T6118] bridge_slave_1 (unregistering): left promiscuous mode [ 34.030150][ T6118] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.145052][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.427'. [ 34.146456][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.163105][ T6137] bridge_slave_1 (unregistering): left allmulticast mode [ 34.163126][ T6137] bridge_slave_1 (unregistering): left promiscuous mode [ 34.163151][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.343255][ T6153] FAULT_INJECTION: forcing a failure. [ 34.343255][ T6153] name failslab, interval 1, probability 0, space 0, times 0 [ 34.343277][ T6153] CPU: 0 UID: 0 PID: 6153 Comm: syz.3.424 Tainted: G L syzkaller #0 PREEMPT [ 34.343289][ T6153] Tainted: [L]=SOFTLOCKUP [ 34.343293][ T6153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 34.343298][ T6153] Call trace: [ 34.343301][ T6153] show_stack+0x2c/0x3c (C) [ 34.343316][ T6153] __dump_stack+0x30/0x40 [ 34.343325][ T6153] dump_stack_lvl+0xd8/0x12c [ 34.343333][ T6153] dump_stack+0x1c/0x28 [ 34.343340][ T6153] should_fail_ex+0x3fc/0x570 [ 34.343354][ T6153] should_failslab+0xc4/0x120 [ 34.343363][ T6153] __kmalloc_noprof+0x108/0x6c8 [ 34.343372][ T6153] sk_prot_alloc+0xc4/0x1e8 [ 34.343385][ T6153] sk_alloc+0x44/0x320 [ 34.343397][ T6153] __netlink_create+0x78/0x23c [ 34.343408][ T6153] netlink_create+0x3b4/0x610 [ 34.343419][ T6153] __sock_create+0x31c/0x670 [ 34.343428][ T6153] __sys_socket_create+0xc0/0x11c [ 34.343441][ T6153] __sys_socket+0x44/0xec [ 34.343450][ T6153] __arm64_sys_socket+0x84/0x9c [ 34.343459][ T6153] invoke_syscall+0x98/0x244 [ 34.343468][ T6153] el0_svc_common+0xec/0x23c [ 34.343476][ T6153] do_el0_svc+0x4c/0x5c [ 34.343484][ T6153] el0_svc+0x60/0x1d8 [ 34.343494][ T6153] el0t_64_sync_handler+0x44/0x104 [ 34.343504][ T6153] el0t_64_sync+0x198/0x19c [ 34.812169][ T6209] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 34.814139][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.814969][ T6209] team0: Port device netdevsim1 added [ 34.819768][ T6209] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 34.830418][ T6209] team0: Port device netdevsim1 removed [ 34.835903][ T6209] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.836389][ T6209] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 34.836720][ T6209] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 34.862849][ T6213] set_capacity_and_notify: 5 callbacks suppressed [ 34.862863][ T6213] loop4: detected capacity change from 0 to 1024 [ 34.877376][ T6213] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.889098][ T6213] EXT4-fs error (device loop4): ext4_map_blocks:951: inode #15: comm syz.4.440: lblock 0 mapped to illegal pblock 0 (length 6) [ 34.912683][ T6213] EXT4-fs error (device loop4): ext4_ext_remove_space:2977: inode #15: comm syz.4.440: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 4, max 4(4), depth 0(0) [ 34.917065][ T6213] EXT4-fs error (device loop4) in ext4_setattr:7187: Corrupt filesystem [ 34.919971][ T6213] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.440: bg 0: block 112: padding at end of block bitmap is not set [ 34.924870][ T6213] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 34.924889][ T6213] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.924889][ T6213] [ 34.924898][ T6213] EXT4-fs (loop4): Total free blocks count 0 [ 34.924905][ T6213] EXT4-fs (loop4): Free/Dirty block details [ 34.924913][ T6213] EXT4-fs (loop4): free_blocks=0 [ 34.924921][ T6213] EXT4-fs (loop4): dirty_blocks=0 [ 34.924927][ T6213] EXT4-fs (loop4): Block reservation details [ 34.924933][ T6213] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 34.948064][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.977049][ T6225] loop2: detected capacity change from 0 to 2048 [ 34.977672][ T6225] EXT4-fs: Ignoring removed i_version option [ 35.000184][ T6225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.043721][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.132095][ T4725] Bluetooth: hci3: command 0x0c1a tx timeout [ 35.132259][ T4803] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 35.132272][ T4803] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 35.136579][ T6242] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 35.160204][ T6244] netlink: 'syz.1.452': attribute type 10 has an invalid length. [ 35.166597][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.167489][ T6244] team0: Port device netdevsim1 added [ 35.183297][ T6244] netlink: 'syz.1.452': attribute type 10 has an invalid length. [ 35.185268][ T6244] team0: Port device netdevsim1 removed [ 35.186186][ T6244] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.187184][ T6244] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 35.320017][ T6256] netlink: 104 bytes leftover after parsing attributes in process `syz.1.458'. [ 35.351834][ T6260] loop2: detected capacity change from 0 to 512 [ 35.355680][ T6260] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 35.365294][ T6260] EXT4-fs (loop2): 1 orphan inode deleted [ 35.365392][ T6260] FAULT_INJECTION: forcing a failure. [ 35.365392][ T6260] name failslab, interval 1, probability 0, space 0, times 0 [ 35.365406][ T6260] CPU: 1 UID: 0 PID: 6260 Comm: syz.2.459 Tainted: G L syzkaller #0 PREEMPT [ 35.365418][ T6260] Tainted: [L]=SOFTLOCKUP [ 35.365421][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 35.365426][ T6260] Call trace: [ 35.365429][ T6260] show_stack+0x2c/0x3c (C) [ 35.365445][ T6260] __dump_stack+0x30/0x40 [ 35.365454][ T6260] dump_stack_lvl+0xd8/0x12c [ 35.365462][ T6260] dump_stack+0x1c/0x28 [ 35.365469][ T6260] should_fail_ex+0x3fc/0x570 [ 35.365483][ T6260] should_failslab+0xc4/0x120 [ 35.365492][ T6260] kmem_cache_alloc_noprof+0x94/0x5d4 [ 35.365501][ T6260] __kernfs_new_node+0xf0/0x7d8 [ 35.365514][ T6260] kernfs_new_node+0xf4/0x148 [ 35.365526][ T6260] __kernfs_create_file+0x60/0x2e0 [ 35.365534][ T6260] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 35.365543][ T6260] internal_create_group+0x550/0xb30 [ 35.365553][ T6260] internal_create_groups+0x64/0x138 [ 35.365562][ T6260] sysfs_create_groups+0x2c/0x3c [ 35.365571][ T6260] kobject_add_internal+0x2cc/0x6f0 [ 35.365584][ T6260] kobject_add_varg+0x9c/0xe8 [ 35.365595][ T6260] kobject_init_and_add+0xec/0x13c [ 35.365606][ T6260] ext4_register_sysfs+0xb0/0x294 [ 35.365620][ T6260] ext4_fill_super+0x4914/0x4e3c [ 35.365631][ T6260] get_tree_bdev_flags+0x388/0x43c [ 35.365642][ T6260] get_tree_bdev+0x2c/0x3c [ 35.365653][ T6260] ext4_get_tree+0x28/0x38 [ 35.365663][ T6260] vfs_get_tree+0x90/0x28c [ 35.365674][ T6260] fc_mount+0x24/0xac [ 35.365685][ T6260] do_new_mount+0x2a4/0x538 [ 35.365697][ T6260] path_mount+0x5f0/0xa88 [ 35.365708][ T6260] do_mount+0xe8/0x148 [ 35.365720][ T6260] __arm64_sys_mount+0x33c/0x388 [ 35.365732][ T6260] invoke_syscall+0x98/0x244 [ 35.365740][ T6260] el0_svc_common+0xec/0x23c [ 35.365748][ T6260] do_el0_svc+0x4c/0x5c [ 35.365756][ T6260] el0_svc+0x60/0x1d8 [ 35.365774][ T6260] el0t_64_sync_handler+0x44/0x104 [ 35.365785][ T6260] el0t_64_sync+0x198/0x19c [ 35.365978][ T6260] kobject: kobject_add_internal failed for loop2 (error: -12 parent: ext4) [ 35.370565][ T6119] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 35.370601][ T6119] EXT4-fs error (device loop2): ext4_release_dquot:7156: comm kworker/u8:10: Failed to release dquot type 1 [ 35.370612][ T6119] loop2: lost filesystem error report for type 5 error -117 [ 35.373740][ T6264] loop1: detected capacity change from 0 to 512 [ 35.376352][ T6264] EXT4-fs: Ignoring removed bh option [ 35.383586][ T6264] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 35.400033][ T6260] EXT4-fs (loop2): mount failed [ 35.406331][ T6264] EXT4-fs (loop1): 1 truncate cleaned up [ 35.406717][ T6264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.435567][ T6254] syz_tun: entered allmulticast mode [ 35.449128][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.467266][ T6253] syz_tun: left allmulticast mode [ 35.532847][ T6119] IPVS: starting estimator thread 0... [ 35.627217][ T6289] FAULT_INJECTION: forcing a failure. [ 35.627217][ T6289] name failslab, interval 1, probability 0, space 0, times 0 [ 35.627239][ T6289] CPU: 1 UID: 0 PID: 6289 Comm: syz.1.471 Tainted: G L syzkaller #0 PREEMPT [ 35.627253][ T6289] Tainted: [L]=SOFTLOCKUP [ 35.627256][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 35.627261][ T6289] Call trace: [ 35.627264][ T6289] show_stack+0x2c/0x3c (C) [ 35.627281][ T6289] __dump_stack+0x30/0x40 [ 35.627289][ T6289] dump_stack_lvl+0xd8/0x12c [ 35.627297][ T6289] dump_stack+0x1c/0x28 [ 35.627305][ T6289] should_fail_ex+0x3fc/0x570 [ 35.627319][ T6289] should_failslab+0xc4/0x120 [ 35.627327][ T6289] __kmalloc_cache_noprof+0x94/0x5fc [ 35.627337][ T6289] crypto_larval_alloc+0x64/0x248 [ 35.627349][ T6289] crypto_alg_mod_lookup+0x164/0x3fc [ 35.627360][ T6289] crypto_alloc_tfm_node+0xdc/0x22c [ 35.627371][ T6289] crypto_alloc_sig+0x40/0x54 [ 35.627383][ T6289] software_key_query+0x280/0xa78 [ 35.627394][ T6289] query_asymmetric_key+0x100/0x120 [ 35.627403][ T6289] keyctl_pkey_params_get_2+0x254/0x54c [ 35.627415][ T6289] keyctl_pkey_e_d_s+0xbc/0x3ac [ 35.627425][ T6289] __arm64_sys_keyctl+0x3ac/0x3e8 [ 35.627434][ T6289] invoke_syscall+0x98/0x244 [ 35.627443][ T6289] el0_svc_common+0xec/0x23c [ 35.627451][ T6289] do_el0_svc+0x4c/0x5c [ 35.627458][ T6289] el0_svc+0x60/0x1d8 [ 35.627469][ T6289] el0t_64_sync_handler+0x44/0x104 [ 35.627478][ T6289] el0t_64_sync+0x198/0x19c [ 35.632103][ T6279] IPVS: using max 50 ests per chain, 120000 per kthread [ 35.720354][ T6295] FAULT_INJECTION: forcing a failure. [ 35.720354][ T6295] name failslab, interval 1, probability 0, space 0, times 0 [ 35.720382][ T6295] CPU: 0 UID: 0 PID: 6295 Comm: syz.1.474 Tainted: G L syzkaller #0 PREEMPT [ 35.720395][ T6295] Tainted: [L]=SOFTLOCKUP [ 35.720399][ T6295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 35.720404][ T6295] Call trace: [ 35.720407][ T6295] show_stack+0x2c/0x3c (C) [ 35.720422][ T6295] __dump_stack+0x30/0x40 [ 35.720431][ T6295] dump_stack_lvl+0xd8/0x12c [ 35.720439][ T6295] dump_stack+0x1c/0x28 [ 35.720446][ T6295] should_fail_ex+0x3fc/0x570 [ 35.720461][ T6295] should_failslab+0xc4/0x120 [ 35.720469][ T6295] kmem_cache_alloc_noprof+0x94/0x5d4 [ 35.720478][ T6295] __kernfs_new_node+0xf0/0x7d8 [ 35.720491][ T6295] kernfs_new_node+0xf4/0x148 [ 35.720503][ T6295] __kernfs_create_file+0x60/0x2e0 [ 35.720511][ T6295] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 35.720520][ T6295] sysfs_merge_group+0x164/0x2ac [ 35.720530][ T6295] dpm_sysfs_add+0xc8/0x258 [ 35.720540][ T6295] device_add+0x468/0x9e0 [ 35.720548][ T6295] netdev_register_kobject+0x184/0x328 [ 35.720560][ T6295] register_netdevice+0xee0/0x16d0 [ 35.720572][ T6295] xfrmi_newlink+0x284/0x424 [ 35.720583][ T6295] rtnl_newlink_create+0x294/0x6b8 [ 35.720592][ T6295] rtnl_newlink+0xfe8/0x1390 [ 35.720601][ T6295] rtnetlink_rcv_msg+0x66c/0x9bc [ 35.720609][ T6295] netlink_rcv_skb+0x238/0x414 [ 35.720620][ T6295] rtnetlink_rcv+0x28/0x38 [ 35.720628][ T6295] netlink_unicast+0x73c/0x934 [ 35.720638][ T6295] netlink_sendmsg+0x670/0x98c [ 35.720649][ T6295] __sock_sendmsg+0xc8/0x188 [ 35.720658][ T6295] ____sys_sendmsg+0x3d0/0x6c8 [ 35.720668][ T6295] ___sys_sendmsg+0x198/0x224 [ 35.720678][ T6295] __sys_sendmsg+0x158/0x204 [ 35.720688][ T6295] __arm64_sys_sendmsg+0x88/0x9c [ 35.720698][ T6295] invoke_syscall+0x98/0x244 [ 35.720707][ T6295] el0_svc_common+0xec/0x23c [ 35.720715][ T6295] do_el0_svc+0x4c/0x5c [ 35.720722][ T6295] el0_svc+0x60/0x1d8 [ 35.720732][ T6295] el0t_64_sync_handler+0x44/0x104 [ 35.720742][ T6295] el0t_64_sync+0x198/0x19c [ 35.798621][ T6299] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 35.806104][ T6301] syz_tun: entered allmulticast mode [ 35.806804][ T6300] syz_tun: left allmulticast mode [ 35.871768][ T6312] loop3: detected capacity change from 0 to 512 [ 35.875792][ T6312] EXT4-fs: Ignoring removed bh option [ 35.879646][ T6312] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 35.887362][ T6312] EXT4-fs (loop3): 1 truncate cleaned up [ 35.887773][ T6312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.964418][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.990697][ T6313] loop1: detected capacity change from 0 to 32768 [ 36.032898][ T6191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.053588][ T6313] loop1: p1 p3 < > [ 36.091975][ T4724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.094099][ T4724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.094580][ T4724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.096161][ T4724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.096428][ T4724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.129953][ T6191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.138421][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.140328][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.140599][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.147774][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.149181][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.243525][ T6340] udevd[6340]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 36.245366][ T4684] udevd[4684]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 36.285672][ T6191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.374197][ T6191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.391677][ T6329] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.544814][ T6191] bridge_slave_1: left allmulticast mode [ 36.544857][ T6191] bridge_slave_1: left promiscuous mode [ 36.545341][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.560188][ T6191] bridge_slave_0: left allmulticast mode [ 36.560210][ T6191] bridge_slave_0: left promiscuous mode [ 36.560311][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.573681][ T6377] loop2: detected capacity change from 0 to 1024 [ 36.574202][ T6377] EXT4-fs: Ignoring removed bh option [ 36.577377][ T6377] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 36.591069][ T6377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.616957][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.679107][ T6191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.712466][ T6191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.742541][ T6191] bond0 (unregistering): Released all slaves [ 36.764735][ T6385] FAULT_INJECTION: forcing a failure. [ 36.764735][ T6385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.764778][ T6385] CPU: 0 UID: 0 PID: 6385 Comm: syz.2.506 Tainted: G L syzkaller #0 PREEMPT [ 36.764796][ T6385] Tainted: [L]=SOFTLOCKUP [ 36.764800][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.764806][ T6385] Call trace: [ 36.764809][ T6385] show_stack+0x2c/0x3c (C) [ 36.764827][ T6385] __dump_stack+0x30/0x40 [ 36.764836][ T6385] dump_stack_lvl+0xd8/0x12c [ 36.764844][ T6385] dump_stack+0x1c/0x28 [ 36.764851][ T6385] should_fail_ex+0x3fc/0x570 [ 36.764865][ T6385] should_fail+0x14/0x24 [ 36.764878][ T6385] should_fail_usercopy+0x20/0x30 [ 36.764886][ T6385] _inline_copy_from_user+0x3c/0x174 [ 36.764898][ T6385] copy_from_sockptr+0x60/0x8c [ 36.764908][ T6385] ip_mroute_setsockopt+0x548/0xd28 [ 36.764918][ T6385] do_ip_setsockopt+0xa6c/0x2628 [ 36.764931][ T6385] ip_setsockopt+0x80/0x128 [ 36.764943][ T6385] raw_setsockopt+0xd8/0x294 [ 36.764953][ T6385] sock_common_setsockopt+0xb0/0xcc [ 36.764963][ T6385] do_sock_setsockopt+0x1f0/0x330 [ 36.764974][ T6385] __sys_setsockopt+0x104/0x170 [ 36.764984][ T6385] __arm64_sys_setsockopt+0xc8/0xe4 [ 36.764994][ T6385] invoke_syscall+0x98/0x244 [ 36.765003][ T6385] el0_svc_common+0xec/0x23c [ 36.765010][ T6385] do_el0_svc+0x4c/0x5c [ 36.765018][ T6385] el0_svc+0x60/0x1d8 [ 36.765029][ T6385] el0t_64_sync_handler+0x44/0x104 [ 36.765039][ T6385] el0t_64_sync+0x198/0x19c [ 36.848800][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.848872][ T6329] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.848928][ T6329] bridge_slave_0: entered allmulticast mode [ 36.849514][ T6329] bridge_slave_0: entered promiscuous mode [ 36.850724][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.850783][ T6329] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.850840][ T6329] bridge_slave_1: entered allmulticast mode [ 36.851640][ T6329] bridge_slave_1: entered promiscuous mode [ 36.860142][ T6329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.861474][ T6329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.867555][ T6329] team0: Port device team_slave_0 added [ 36.868688][ T6329] team0: Port device team_slave_1 added [ 36.940323][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.940336][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.940375][ T6329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.940926][ T6329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.940934][ T6329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.940948][ T6329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.007160][ T6329] hsr_slave_0: entered promiscuous mode [ 37.007512][ T6329] hsr_slave_1: entered promiscuous mode [ 37.007695][ T6329] debugfs: 'hsr0' already exists in 'hsr' [ 37.007703][ T6329] Cannot create hsr debugfs directory [ 37.047501][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 37.131828][ T6329] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.137467][ T6329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.140086][ T6329] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.160176][ T6329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.169771][ T6329] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.173533][ T6329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.178498][ T6329] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.195796][ T6329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.216171][ T6191] hsr_slave_0: left promiscuous mode [ 37.216464][ T6191] hsr_slave_1: left promiscuous mode [ 37.216745][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.216769][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.217203][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.217212][ T6191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.237956][ T6191] veth1_macvtap: left promiscuous mode [ 37.237996][ T6191] veth0_macvtap: left promiscuous mode [ 37.238045][ T6191] veth1_vlan: left promiscuous mode [ 37.238122][ T6191] veth0_vlan: left promiscuous mode [ 37.464546][ T6191] team0 (unregistering): Port device team_slave_1 removed [ 37.469578][ T6191] team0 (unregistering): Port device team_slave_0 removed [ 37.497208][ T6459] FAULT_INJECTION: forcing a failure. [ 37.497208][ T6459] name failslab, interval 1, probability 0, space 0, times 0 [ 37.497228][ T6459] CPU: 1 UID: 0 PID: 6459 Comm: syz.1.522 Tainted: G L syzkaller #0 PREEMPT [ 37.497240][ T6459] Tainted: [L]=SOFTLOCKUP [ 37.497243][ T6459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 37.497248][ T6459] Call trace: [ 37.497251][ T6459] show_stack+0x2c/0x3c (C) [ 37.497266][ T6459] __dump_stack+0x30/0x40 [ 37.497275][ T6459] dump_stack_lvl+0xd8/0x12c [ 37.497283][ T6459] dump_stack+0x1c/0x28 [ 37.497290][ T6459] should_fail_ex+0x3fc/0x570 [ 37.497304][ T6459] should_failslab+0xc4/0x120 [ 37.497313][ T6459] __kmalloc_cache_noprof+0x94/0x5fc [ 37.497323][ T6459] shmem_fill_super+0xd0/0xe74 [ 37.497335][ T6459] get_tree_super+0xb8/0x148 [ 37.497347][ T6459] get_tree_nodev+0x2c/0x3c [ 37.497358][ T6459] shmem_get_tree+0x28/0x38 [ 37.497369][ T6459] vfs_get_tree+0x90/0x28c [ 37.497380][ T6459] fc_mount+0x24/0xac [ 37.497392][ T6459] do_new_mount+0x2a4/0x538 [ 37.497404][ T6459] path_mount+0x5f0/0xa88 [ 37.497416][ T6459] do_mount+0xe8/0x148 [ 37.497427][ T6459] __arm64_sys_mount+0x33c/0x388 [ 37.497439][ T6459] invoke_syscall+0x98/0x244 [ 37.497448][ T6459] el0_svc_common+0xec/0x23c [ 37.497456][ T6459] do_el0_svc+0x4c/0x5c [ 37.497464][ T6459] el0_svc+0x60/0x1d8 [ 37.497474][ T6459] el0t_64_sync_handler+0x44/0x104 [ 37.497484][ T6459] el0t_64_sync+0x198/0x19c [ 37.568798][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 37.587348][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.587379][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.587449][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.587478][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.623320][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.623495][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.639907][ T6329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.655997][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.656505][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.665162][ T6329] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.684999][ T6119] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.685035][ T6119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.687777][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.687802][ T6119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.719977][ T6329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.918614][ T6329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.970578][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 38.009955][ T6517] loop2: detected capacity change from 0 to 256 [ 38.064081][ T6329] veth0_vlan: entered promiscuous mode [ 38.069109][ T6329] veth1_vlan: entered promiscuous mode [ 38.097993][ T6329] veth0_macvtap: entered promiscuous mode [ 38.100893][ T6329] veth1_macvtap: entered promiscuous mode [ 38.117803][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.128710][ T6329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.176333][ T6129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.176346][ T6129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.192282][ T6129] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.192318][ T6129] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.192333][ T6129] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.192348][ T6129] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.207409][ T6129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.207423][ T6129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.240496][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 38.246027][ T6540] loop2: detected capacity change from 0 to 1024 [ 38.251980][ T4725] Bluetooth: hci4: command tx timeout [ 38.255079][ T6540] EXT4-fs: Ignoring removed oldalloc option [ 38.255091][ T6540] EXT4-fs: Ignoring removed orlov option [ 38.277585][ T6540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.293894][ T6540] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.536: bg 0: block 112: padding at end of block bitmap is not set [ 38.313203][ T6539] EXT4-fs error (device loop2): ext4_map_blocks:951: inode #15: comm syz.2.536: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.315595][ T6551] FAULT_INJECTION: forcing a failure. [ 38.315595][ T6551] name failslab, interval 1, probability 0, space 0, times 0 [ 38.315613][ T6551] CPU: 1 UID: 0 PID: 6551 Comm: syz.4.538 Tainted: G L syzkaller #0 PREEMPT [ 38.315625][ T6551] Tainted: [L]=SOFTLOCKUP [ 38.315628][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.315633][ T6551] Call trace: [ 38.315636][ T6551] show_stack+0x2c/0x3c (C) [ 38.315652][ T6551] __dump_stack+0x30/0x40 [ 38.315661][ T6551] dump_stack_lvl+0xd8/0x12c [ 38.315668][ T6551] dump_stack+0x1c/0x28 [ 38.315676][ T6551] should_fail_ex+0x3fc/0x570 [ 38.315690][ T6551] should_failslab+0xc4/0x120 [ 38.315699][ T6551] kmem_cache_alloc_noprof+0x94/0x5d4 [ 38.315708][ T6551] security_inode_alloc+0x40/0x304 [ 38.315717][ T6551] inode_init_always_gfp+0x704/0xb20 [ 38.315730][ T6551] alloc_inode+0x9c/0x198 [ 38.315741][ T6551] path_from_stashed+0x1d8/0x4ec [ 38.315754][ T6551] ns_get_path+0x74/0x94 [ 38.315769][ T6551] proc_ns_get_link+0x154/0x29c [ 38.315779][ T6551] pick_link+0x5c8/0xcf0 [ 38.315791][ T6551] step_into_slowpath+0x468/0x670 [ 38.315804][ T6551] path_openat+0x774/0x1910 [ 38.315814][ T6551] do_file_open+0x1c8/0x2e8 [ 38.315825][ T6551] do_sys_openat2+0x114/0x1ec [ 38.315833][ T6551] do_sys_open+0xb0/0xe0 [ 38.315840][ T6551] __arm64_sys_openat+0xa8/0xc4 [ 38.315848][ T6551] invoke_syscall+0x98/0x244 [ 38.315856][ T6551] el0_svc_common+0xec/0x23c [ 38.315864][ T6551] do_el0_svc+0x4c/0x5c [ 38.315871][ T6551] el0_svc+0x60/0x1d8 [ 38.315882][ T6551] el0t_64_sync_handler+0x44/0x104 [ 38.315891][ T6551] el0t_64_sync+0x198/0x19c [ 38.324404][ T6539] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #15: comm syz.2.536: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.329177][ T6539] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #15: comm syz.2.536: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.340074][ T6539] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #15: comm syz.2.536: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.340335][ T6539] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #15: comm syz.2.536: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.340480][ T6539] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #15: comm syz.2.536: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.340883][ T6540] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #15: comm syz.2.536: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.349461][ T6540] EXT4-fs error (device loop2): ext4_map_blocks:867: inode #15: comm syz.2.536: lblock 0 mapped to illegal pblock 0 (length 1) [ 38.395597][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.430444][ T6562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.430760][ T6562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.435700][ T30] audit: type=1326 audit(38.420:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6462 comm="syz.1.533" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4979728 code=0x7fc00000 [ 38.457377][ T6561] FAULT_INJECTION: forcing a failure. [ 38.457377][ T6561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.457399][ T6561] CPU: 1 UID: 0 PID: 6561 Comm: syz.4.543 Tainted: G L syzkaller #0 PREEMPT [ 38.457413][ T6561] Tainted: [L]=SOFTLOCKUP [ 38.457416][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.457421][ T6561] Call trace: [ 38.457424][ T6561] show_stack+0x2c/0x3c (C) [ 38.457440][ T6561] __dump_stack+0x30/0x40 [ 38.457450][ T6561] dump_stack_lvl+0xd8/0x12c [ 38.457458][ T6561] dump_stack+0x1c/0x28 [ 38.457465][ T6561] should_fail_ex+0x3fc/0x570 [ 38.457480][ T6561] should_fail+0x14/0x24 [ 38.457492][ T6561] should_fail_usercopy+0x20/0x30 [ 38.457500][ T6561] strncpy_from_user+0x48/0x388 [ 38.457510][ T6561] path_getxattrat+0x12c/0x2cc [ 38.457522][ T6561] __arm64_sys_getxattr+0xb0/0xc8 [ 38.457532][ T6561] invoke_syscall+0x98/0x244 [ 38.457540][ T6561] el0_svc_common+0xec/0x23c [ 38.457548][ T6561] do_el0_svc+0x4c/0x5c [ 38.457556][ T6561] el0_svc+0x60/0x1d8 [ 38.457566][ T6561] el0t_64_sync_handler+0x44/0x104 [ 38.457576][ T6561] el0t_64_sync+0x198/0x19c [ 38.485904][ T6566] FAULT_INJECTION: forcing a failure. [ 38.485904][ T6566] name fail_futex, interval 1, probability 0, space 0, times 0 [ 38.485926][ T6566] CPU: 1 UID: 0 PID: 6566 Comm: syz.1.545 Tainted: G L syzkaller #0 PREEMPT [ 38.485938][ T6566] Tainted: [L]=SOFTLOCKUP [ 38.485942][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.485947][ T6566] Call trace: [ 38.485950][ T6566] show_stack+0x2c/0x3c (C) [ 38.485964][ T6566] __dump_stack+0x30/0x40 [ 38.485973][ T6566] dump_stack_lvl+0xd8/0x12c [ 38.485981][ T6566] dump_stack+0x1c/0x28 [ 38.485988][ T6566] should_fail_ex+0x3fc/0x570 [ 38.486002][ T6566] should_fail+0x14/0x24 [ 38.486013][ T6566] get_futex_key+0x1e0/0x118c [ 38.486024][ T6566] futex_wait_setup+0x58/0x674 [ 38.486036][ T6566] __futex_wait+0x11c/0x2b8 [ 38.486047][ T6566] futex_wait+0x108/0x2c0 [ 38.486059][ T6566] do_futex+0x320/0x378 [ 38.486069][ T6566] __arm64_sys_futex+0x2e4/0x418 [ 38.486080][ T6566] invoke_syscall+0x98/0x244 [ 38.486088][ T6566] el0_svc_common+0xec/0x23c [ 38.486096][ T6566] do_el0_svc+0x4c/0x5c [ 38.486104][ T6566] el0_svc+0x60/0x1d8 [ 38.486114][ T6566] el0t_64_sync_handler+0x44/0x104 [ 38.486124][ T6566] el0t_64_sync+0x198/0x19c [ 38.519442][ T6568] FAULT_INJECTION: forcing a failure. [ 38.519442][ T6568] name fail_futex, interval 1, probability 0, space 0, times 0 [ 38.519463][ T6568] CPU: 1 UID: 0 PID: 6568 Comm: syz.5.544 Tainted: G L syzkaller #0 PREEMPT [ 38.519477][ T6568] Tainted: [L]=SOFTLOCKUP [ 38.519481][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.519486][ T6568] Call trace: [ 38.519489][ T6568] show_stack+0x2c/0x3c (C) [ 38.519505][ T6568] __dump_stack+0x30/0x40 [ 38.519514][ T6568] dump_stack_lvl+0xd8/0x12c [ 38.519522][ T6568] dump_stack+0x1c/0x28 [ 38.519529][ T6568] should_fail_ex+0x3fc/0x570 [ 38.519545][ T6568] should_fail+0x14/0x24 [ 38.519557][ T6568] get_futex_key+0x70c/0x118c [ 38.519570][ T6568] futex_wake+0x10c/0x594 [ 38.519582][ T6568] do_futex+0x2c4/0x378 [ 38.519593][ T6568] __arm64_sys_futex+0x2e4/0x418 [ 38.519604][ T6568] invoke_syscall+0x98/0x244 [ 38.519613][ T6568] el0_svc_common+0xec/0x23c [ 38.519621][ T6568] do_el0_svc+0x4c/0x5c [ 38.519628][ T6568] el0_svc+0x60/0x1d8 [ 38.519640][ T6568] el0t_64_sync_handler+0x44/0x104 [ 38.519650][ T6568] el0t_64_sync+0x198/0x19c [ 38.567920][ T6576] netlink: 'syz.1.549': attribute type 4 has an invalid length. [ 38.590227][ T6580] loop5: detected capacity change from 0 to 256 [ 38.647959][ T6587] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.799423][ T6611] FAULT_INJECTION: forcing a failure. [ 38.799423][ T6611] name failslab, interval 1, probability 0, space 0, times 0 [ 38.799444][ T6611] CPU: 0 UID: 0 PID: 6611 Comm: syz.3.564 Tainted: G L syzkaller #0 PREEMPT [ 38.799456][ T6611] Tainted: [L]=SOFTLOCKUP [ 38.799459][ T6611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.799464][ T6611] Call trace: [ 38.799467][ T6611] show_stack+0x2c/0x3c (C) [ 38.799482][ T6611] __dump_stack+0x30/0x40 [ 38.799490][ T6611] dump_stack_lvl+0xd8/0x12c [ 38.799498][ T6611] dump_stack+0x1c/0x28 [ 38.799505][ T6611] should_fail_ex+0x3fc/0x570 [ 38.799519][ T6611] should_failslab+0xc4/0x120 [ 38.799528][ T6611] __kmalloc_noprof+0x108/0x6c8 [ 38.799537][ T6611] security_prepare_creds+0x60/0x35c [ 38.799547][ T6611] prepare_creds+0x500/0x7d0 [ 38.799559][ T6611] lookup_user_key+0x35c/0xe68 [ 38.799569][ T6611] keyctl_session_to_parent+0x38/0x988 [ 38.799578][ T6611] __arm64_sys_keyctl+0x2a8/0x3e8 [ 38.799587][ T6611] invoke_syscall+0x98/0x244 [ 38.799596][ T6611] el0_svc_common+0xec/0x23c [ 38.799604][ T6611] do_el0_svc+0x4c/0x5c [ 38.799611][ T6611] el0_svc+0x60/0x1d8 [ 38.799622][ T6611] el0t_64_sync_handler+0x44/0x104 [ 38.799631][ T6611] el0t_64_sync+0x198/0x19c [ 38.882193][ T6618] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.885210][ T6618] EXT4-fs (loop1): Test dummy encryption mode enabled [ 38.891169][ T6618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.936233][ T6628] FAULT_INJECTION: forcing a failure. [ 38.936233][ T6628] name failslab, interval 1, probability 0, space 0, times 0 [ 38.936275][ T6628] CPU: 1 UID: 0 PID: 6628 Comm: syz.3.570 Tainted: G L syzkaller #0 PREEMPT [ 38.936290][ T6628] Tainted: [L]=SOFTLOCKUP [ 38.936294][ T6628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.936299][ T6628] Call trace: [ 38.936302][ T6628] show_stack+0x2c/0x3c (C) [ 38.936318][ T6628] __dump_stack+0x30/0x40 [ 38.936326][ T6628] dump_stack_lvl+0xd8/0x12c [ 38.936334][ T6628] dump_stack+0x1c/0x28 [ 38.936342][ T6628] should_fail_ex+0x3fc/0x570 [ 38.936355][ T6628] should_failslab+0xc4/0x120 [ 38.936364][ T6628] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 38.936375][ T6628] kvasprintf+0x110/0x1e4 [ 38.936387][ T6628] kasprintf+0xe8/0x13c [ 38.936398][ T6628] logfc+0x12c/0x414 [ 38.936407][ T6628] nfs_get_tree+0x520/0xe24 [ 38.936417][ T6628] vfs_get_tree+0x90/0x28c [ 38.936428][ T6628] vfs_cmd_create+0xb8/0x1d0 [ 38.936438][ T6628] vfs_fsconfig_locked+0x17c/0x2bc [ 38.936449][ T6628] __arm64_sys_fsconfig+0x634/0x72c [ 38.936459][ T6628] invoke_syscall+0x98/0x244 [ 38.936468][ T6628] el0_svc_common+0xec/0x23c [ 38.936476][ T6628] do_el0_svc+0x4c/0x5c [ 38.936484][ T6628] el0_svc+0x60/0x1d8 [ 38.936494][ T6628] el0t_64_sync_handler+0x44/0x104 [ 38.936504][ T6628] el0t_64_sync+0x198/0x19c [ 38.937616][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.990073][ T6631] FAULT_INJECTION: forcing a failure. [ 38.990073][ T6631] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 38.990094][ T6631] CPU: 0 UID: 0 PID: 6631 Comm: syz.3.574 Tainted: G L syzkaller #0 PREEMPT [ 38.990106][ T6631] Tainted: [L]=SOFTLOCKUP [ 38.990109][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.990115][ T6631] Call trace: [ 38.990117][ T6631] show_stack+0x2c/0x3c (C) [ 38.990133][ T6631] __dump_stack+0x30/0x40 [ 38.990143][ T6631] dump_stack_lvl+0xd8/0x12c [ 38.990151][ T6631] dump_stack+0x1c/0x28 [ 38.990158][ T6631] should_fail_ex+0x3fc/0x570 [ 38.990175][ T6631] should_fail_alloc_page+0xec/0x10c [ 38.990185][ T6631] prepare_alloc_pages+0x194/0x484 [ 38.990194][ T6631] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 38.990204][ T6631] alloc_pages_mpol+0x1fc/0x3d0 [ 38.990216][ T6631] alloc_frozen_pages_noprof+0xc4/0x10c [ 38.990227][ T6631] alloc_pages_noprof+0x30/0x148 [ 38.990236][ T6631] kimage_alloc_pages+0xa8/0x3d8 [ 38.990247][ T6631] kimage_alloc_page+0xc4/0x5bc [ 38.990256][ T6631] kimage_add_entry+0xe8/0x26c [ 38.990266][ T6631] kimage_load_segment+0x878/0xd3c [ 38.990275][ T6631] do_kexec_load+0x460/0x678 [ 38.990285][ T6631] __arm64_sys_kexec_load+0x1b4/0x1d4 [ 38.990295][ T6631] invoke_syscall+0x98/0x244 [ 38.990304][ T6631] el0_svc_common+0xec/0x23c [ 38.990312][ T6631] do_el0_svc+0x4c/0x5c [ 38.990319][ T6631] el0_svc+0x60/0x1d8 [ 38.990331][ T6631] el0t_64_sync_handler+0x44/0x104 [ 38.990341][ T6631] el0t_64_sync+0x198/0x19c [ 39.043466][ T6639] netlink: 'syz.1.577': attribute type 4 has an invalid length. [ 39.043654][ T6639] netlink: 'syz.1.577': attribute type 4 has an invalid length. [ 39.066226][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.578'. [ 39.088072][ T6647] ªªªªª»: renamed from dummy0 (while UP) [ 39.088131][ T6647] FAULT_INJECTION: forcing a failure. [ 39.088131][ T6647] name failslab, interval 1, probability 0, space 0, times 0 [ 39.088145][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.4.580 Tainted: G L syzkaller #0 PREEMPT [ 39.088157][ T6647] Tainted: [L]=SOFTLOCKUP [ 39.088161][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.088166][ T6647] Call trace: [ 39.088169][ T6647] show_stack+0x2c/0x3c (C) [ 39.088185][ T6647] __dump_stack+0x30/0x40 [ 39.088194][ T6647] dump_stack_lvl+0xd8/0x12c [ 39.088201][ T6647] dump_stack+0x1c/0x28 [ 39.088209][ T6647] should_fail_ex+0x3fc/0x570 [ 39.088223][ T6647] should_failslab+0xc4/0x120 [ 39.088232][ T6647] __kmalloc_noprof+0x108/0x6c8 [ 39.088241][ T6647] kobject_rename+0xe4/0x238 [ 39.088254][ T6647] device_rename+0x158/0x214 [ 39.088263][ T6647] netif_change_name+0x234/0x6b8 [ 39.088277][ T6647] dev_change_name+0x104/0x1f4 [ 39.088285][ T6647] dev_ifsioc+0x288/0xc34 [ 39.088297][ T6647] dev_ioctl+0x394/0xc88 [ 39.088308][ T6647] sock_do_ioctl+0x198/0x254 [ 39.088319][ T6647] sock_ioctl+0x55c/0x7ec [ 39.088329][ T6647] __arm64_sys_ioctl+0x154/0x1cc [ 39.088338][ T6647] invoke_syscall+0x98/0x244 [ 39.088347][ T6647] el0_svc_common+0xec/0x23c [ 39.088355][ T6647] do_el0_svc+0x4c/0x5c [ 39.088362][ T6647] el0_svc+0x60/0x1d8 [ 39.088372][ T6647] el0t_64_sync_handler+0x44/0x104 [ 39.088382][ T6647] el0t_64_sync+0x198/0x19c [ 39.155728][ T6656] FAULT_INJECTION: forcing a failure. [ 39.155728][ T6656] name failslab, interval 1, probability 0, space 0, times 0 [ 39.155747][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: syz.1.584 Tainted: G L syzkaller #0 PREEMPT [ 39.155766][ T6656] Tainted: [L]=SOFTLOCKUP [ 39.155769][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.155775][ T6656] Call trace: [ 39.155779][ T6656] show_stack+0x2c/0x3c (C) [ 39.155796][ T6656] __dump_stack+0x30/0x40 [ 39.155806][ T6656] dump_stack_lvl+0xd8/0x12c [ 39.155814][ T6656] dump_stack+0x1c/0x28 [ 39.155821][ T6656] should_fail_ex+0x3fc/0x570 [ 39.155835][ T6656] should_failslab+0xc4/0x120 [ 39.155844][ T6656] __kmalloc_cache_noprof+0x94/0x5fc [ 39.155853][ T6656] getname_long+0x5c/0x120 [ 39.155866][ T6656] do_getname+0x174/0x234 [ 39.155875][ T6656] __arm64_sys_unlinkat+0xa8/0x108 [ 39.155886][ T6656] invoke_syscall+0x98/0x244 [ 39.155895][ T6656] el0_svc_common+0xec/0x23c [ 39.155903][ T6656] do_el0_svc+0x4c/0x5c [ 39.155910][ T6656] el0_svc+0x60/0x1d8 [ 39.155921][ T6656] el0t_64_sync_handler+0x44/0x104 [ 39.155930][ T6656] el0t_64_sync+0x198/0x19c [ 39.194705][ T6660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.194892][ T6660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.425005][ T6678] loop1: p1 p3 < > [ 39.553248][ T6340] udevd[6340]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 39.554301][ T4684] udevd[4684]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 39.590420][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 39.623259][ T6706] hsr0: entered promiscuous mode [ 39.624953][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 39.625950][ T6706] hsr_slave_0: left promiscuous mode [ 39.626406][ T6706] hsr_slave_1: left promiscuous mode [ 39.633523][ T6706] hsr0 (unregistering): left promiscuous mode [ 39.680726][ T6716] FAULT_INJECTION: forcing a failure. [ 39.680726][ T6716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 39.680749][ T6716] CPU: 0 UID: 0 PID: 6716 Comm: syz.2.610 Tainted: G L syzkaller #0 PREEMPT [ 39.680773][ T6716] Tainted: [L]=SOFTLOCKUP [ 39.680777][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.680782][ T6716] Call trace: [ 39.680785][ T6716] show_stack+0x2c/0x3c (C) [ 39.680801][ T6716] __dump_stack+0x30/0x40 [ 39.680811][ T6716] dump_stack_lvl+0xd8/0x12c [ 39.680819][ T6716] dump_stack+0x1c/0x28 [ 39.680826][ T6716] should_fail_ex+0x3fc/0x570 [ 39.680841][ T6716] should_fail+0x14/0x24 [ 39.680853][ T6716] should_fail_usercopy+0x20/0x30 [ 39.680861][ T6716] netlink_setsockopt+0x19c/0x850 [ 39.680875][ T6716] do_sock_setsockopt+0x1f0/0x330 [ 39.680887][ T6716] __sys_setsockopt+0x104/0x170 [ 39.680897][ T6716] __arm64_sys_setsockopt+0xc8/0xe4 [ 39.680907][ T6716] invoke_syscall+0x98/0x244 [ 39.680916][ T6716] el0_svc_common+0xec/0x23c [ 39.680923][ T6716] do_el0_svc+0x4c/0x5c [ 39.680931][ T6716] el0_svc+0x60/0x1d8 [ 39.680942][ T6716] el0t_64_sync_handler+0x44/0x104 [ 39.680952][ T6716] el0t_64_sync+0x198/0x19c [ 39.804253][ T6736] ªªªªªª: renamed from vlan0 (while UP) [ 39.857136][ T6747] FAULT_INJECTION: forcing a failure. [ 39.857136][ T6747] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 39.857156][ T6747] CPU: 0 UID: 0 PID: 6747 Comm: syz.5.625 Tainted: G L syzkaller #0 PREEMPT [ 39.857169][ T6747] Tainted: [L]=SOFTLOCKUP [ 39.857172][ T6747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 39.857177][ T6747] Call trace: [ 39.857180][ T6747] show_stack+0x2c/0x3c (C) [ 39.857194][ T6747] __dump_stack+0x30/0x40 [ 39.857203][ T6747] dump_stack_lvl+0xd8/0x12c [ 39.857211][ T6747] dump_stack+0x1c/0x28 [ 39.857218][ T6747] should_fail_ex+0x3fc/0x570 [ 39.857232][ T6747] should_fail_alloc_page+0xec/0x10c [ 39.857241][ T6747] prepare_alloc_pages+0x194/0x484 [ 39.857250][ T6747] __alloc_frozen_pages_noprof+0x180/0x3c4 [ 39.857259][ T6747] alloc_pages_mpol+0x1fc/0x3d0 [ 39.857269][ T6747] alloc_frozen_pages_noprof+0xc4/0x10c [ 39.857279][ T6747] alloc_pages_noprof+0x30/0x148 [ 39.857288][ T6747] __pte_alloc+0x40/0x1c4 [ 39.857299][ T6747] move_page_tables+0x1f78/0x2440 [ 39.857310][ T6747] move_vma+0x838/0x1370 [ 39.857321][ T6747] mremap_to+0x368/0x424 [ 39.857331][ T6747] __arm64_sys_mremap+0xb74/0xe28 [ 39.857342][ T6747] invoke_syscall+0x98/0x244 [ 39.857351][ T6747] el0_svc_common+0xec/0x23c [ 39.857359][ T6747] do_el0_svc+0x4c/0x5c [ 39.857366][ T6747] el0_svc+0x60/0x1d8 [ 39.857377][ T6747] el0t_64_sync_handler+0x44/0x104 [ 39.857386][ T6747] el0t_64_sync+0x198/0x19c [ 39.895559][ T6749] nvme nvme0: using deprecated NVME_IOCTL_IO_CMD ioctl on the char device! [ 39.957448][ T6755] block2mtd: too many arguments [ 39.983292][ T6758] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 39.983292][ T6758] The task syz.4.628 (6758) triggered the difference, watch for misbehavior. [ 40.331174][ T4725] Bluetooth: hci4: command tx timeout [ 40.517875][ T6780] set_capacity_and_notify: 4 callbacks suppressed [ 40.517889][ T6780] loop3: detected capacity change from 0 to 512 [ 40.545808][ T6780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.557352][ T6780] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.637: corrupted xattr block 33: invalid header [ 40.557786][ T6780] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.637: corrupted xattr block 33: invalid header [ 40.558071][ T6780] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.637: corrupted xattr block 33: invalid header [ 40.578649][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 40.615285][ T6789] nullb0: [POWERTEC] p1 [ 40.615794][ T6789] nullb0: p1 start 809004142 is beyond EOD, truncated [ 40.617810][ T6129] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 40.618419][ T6129] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 63 with error 28 [ 40.618435][ T6129] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.618435][ T6129] [ 40.618444][ T6129] EXT4-fs (loop3): Total free blocks count 0 [ 40.618451][ T6129] EXT4-fs (loop3): Free/Dirty block details [ 40.618458][ T6129] EXT4-fs (loop3): free_blocks=65280 [ 40.618466][ T6129] EXT4-fs (loop3): dirty_blocks=63 [ 40.618472][ T6129] EXT4-fs (loop3): Block reservation details [ 40.618478][ T6129] EXT4-fs (loop3): i_reserved_data_blocks=63 [ 40.628107][ T4713] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.639471][ T6791] loop2: detected capacity change from 0 to 512 [ 40.645322][ T6791] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.665278][ T6791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.714832][ T4717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.819442][ T6812] input: syz0 as /devices/virtual/input/input6 [ 40.844786][ T6816] FAULT_INJECTION: forcing a failure. [ 40.844786][ T6816] name failslab, interval 1, probability 0, space 0, times 0 [ 40.844806][ T6816] CPU: 1 UID: 0 PID: 6816 Comm: syz.3.652 Tainted: G L syzkaller #0 PREEMPT [ 40.844818][ T6816] Tainted: [L]=SOFTLOCKUP [ 40.844821][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 40.844826][ T6816] Call trace: [ 40.844829][ T6816] show_stack+0x2c/0x3c (C) [ 40.844845][ T6816] __dump_stack+0x30/0x40 [ 40.844854][ T6816] dump_stack_lvl+0xd8/0x12c [ 40.844863][ T6816] dump_stack+0x1c/0x28 [ 40.844870][ T6816] should_fail_ex+0x3fc/0x570 [ 40.844885][ T6816] should_failslab+0xc4/0x120 [ 40.844894][ T6816] kmem_cache_alloc_noprof+0x94/0x5d4 [ 40.844904][ T6816] mpol_new+0x14c/0x264 [ 40.844915][ T6816] __arm64_sys_mbind+0x428/0x994 [ 40.844925][ T6816] invoke_syscall+0x98/0x244 [ 40.844933][ T6816] el0_svc_common+0xec/0x23c [ 40.844941][ T6816] do_el0_svc+0x4c/0x5c [ 40.844949][ T6816] el0_svc+0x60/0x1d8 [ 40.844960][ T6816] el0t_64_sync_handler+0x44/0x104 [ 40.844970][ T6816] el0t_64_sync+0x198/0x19c [ 41.101906][ T6829] tls_set_device_offload_rx: netdev not found [ 41.151284][ T6835] FAULT_INJECTION: forcing a failure. [ 41.151284][ T6835] name failslab, interval 1, probability 0, space 0, times 0 [ 41.151304][ T6835] CPU: 0 UID: 0 PID: 6835 Comm: syz.1.660 Tainted: G L syzkaller #0 PREEMPT [ 41.151316][ T6835] Tainted: [L]=SOFTLOCKUP [ 41.151319][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 41.151325][ T6835] Call trace: [ 41.151328][ T6835] show_stack+0x2c/0x3c (C) [ 41.151344][ T6835] __dump_stack+0x30/0x40 [ 41.151353][ T6835] dump_stack_lvl+0xd8/0x12c [ 41.151361][ T6835] dump_stack+0x1c/0x28 [ 41.151368][ T6835] should_fail_ex+0x3fc/0x570 [ 41.151385][ T6835] should_failslab+0xc4/0x120 [ 41.151394][ T6835] __kmalloc_cache_noprof+0x94/0x5fc [ 41.151405][ T6835] prog_array_map_alloc+0x60/0x1e8 [ 41.151414][ T6835] map_create+0xa6c/0x153c [ 41.151426][ T6835] __sys_bpf+0x308/0x840 [ 41.151435][ T6835] __arm64_sys_bpf+0xd0/0xec [ 41.151445][ T6835] invoke_syscall+0x98/0x244 [ 41.151454][ T6835] el0_svc_common+0xec/0x23c [ 41.151462][ T6835] do_el0_svc+0x4c/0x5c [ 41.151469][ T6835] el0_svc+0x60/0x1d8 [ 41.151481][ T6835] el0t_64_sync_handler+0x44/0x104 [ 41.151490][ T6835] el0t_64_sync+0x198/0x19c [ 41.192203][ T6837] loop1: detected capacity change from 0 to 256 [ 41.192701][ T6837] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 41.197144][ T6837] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.233518][ T6839] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 41.448143][ T6853] nvmet: adding nsid 1 to subsystem testsubsys [ 41.477129][ T6857] serio: Serial port ptm0 [ 41.631833][ T6863] netlink: 'syz.2.672': attribute type 1 has an invalid length. [ 41.637105][ T6863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.639451][ T6863] bond1: option tlb_dynamic_lb: unable to set because the bond device is up [ 42.240583][ T6883] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.411464][ T4725] Bluetooth: hci4: command tx timeout [ 42.420574][ T6899] FAULT_INJECTION: forcing a failure. [ 42.420574][ T6899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.420592][ T6899] CPU: 0 UID: 0 PID: 6899 Comm: syz.1.685 Tainted: G L syzkaller #0 PREEMPT [ 42.420604][ T6899] Tainted: [L]=SOFTLOCKUP [ 42.420608][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 42.420613][ T6899] Call trace: [ 42.420615][ T6899] show_stack+0x2c/0x3c (C) [ 42.420632][ T6899] __dump_stack+0x30/0x40 [ 42.420640][ T6899] dump_stack_lvl+0xd8/0x12c [ 42.420648][ T6899] dump_stack+0x1c/0x28 [ 42.420655][ T6899] should_fail_ex+0x3fc/0x570 [ 42.420669][ T6899] should_fail+0x14/0x24 [ 42.420681][ T6899] should_fail_usercopy+0x20/0x30 [ 42.420689][ T6899] bpf_verifier_vlog+0x3f4/0xbc0 [ 42.420699][ T6899] btf_verifier_log+0x120/0x1a0 [ 42.420711][ T6899] btf_func_proto_log+0x658/0x7a0 [ 42.420719][ T6899] __btf_verifier_log_type+0x3bc/0x5e4 [ 42.420731][ T6899] btf_func_proto_check_meta+0x118/0x154 [ 42.420743][ T6899] btf_check_all_metas+0x294/0x85c [ 42.420764][ T6899] btf_parse_type_sec+0x104/0x1054 [ 42.420772][ T6899] btf_new_fd+0x33c/0x7a8 [ 42.420783][ T6899] bpf_btf_load+0x144/0x190 [ 42.420794][ T6899] __sys_bpf+0x804/0x840 [ 42.420804][ T6899] __arm64_sys_bpf+0xd0/0xec [ 42.420813][ T6899] invoke_syscall+0x98/0x244 [ 42.420822][ T6899] el0_svc_common+0xec/0x23c [ 42.420830][ T6899] do_el0_svc+0x4c/0x5c [ 42.420838][ T6899] el0_svc+0x60/0x1d8 [ 42.420848][ T6899] el0t_64_sync_handler+0x44/0x104 [ 42.420858][ T6899] el0t_64_sync+0x198/0x19c [ 42.489181][ T6903] netlink: 'syz.1.687': attribute type 4 has an invalid length. [ 42.517095][ T6907] warning: `syz.1.689' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 42.542277][ T6909] loop1: detected capacity change from 0 to 2048 [ 42.547403][ T6909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.568902][ T6909] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.001999][ T6760] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 43.160301][ T6922] loop4: detected capacity change from 0 to 32768 [ 43.191885][ T6922] loop4: p1 p3 < > [ 43.263288][ T4684] udevd[4684]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 43.264716][ T6340] udevd[6340]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 43.451533][ T6941] FAULT_INJECTION: forcing a failure. [ 43.451533][ T6941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.451553][ T6941] CPU: 0 UID: 0 PID: 6941 Comm: syz.4.703 Tainted: G L syzkaller #0 PREEMPT [ 43.451566][ T6941] Tainted: [L]=SOFTLOCKUP [ 43.451569][ T6941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.451574][ T6941] Call trace: [ 43.451577][ T6941] show_stack+0x2c/0x3c (C) [ 43.451592][ T6941] __dump_stack+0x30/0x40 [ 43.451601][ T6941] dump_stack_lvl+0xd8/0x12c [ 43.451608][ T6941] dump_stack+0x1c/0x28 [ 43.451616][ T6941] should_fail_ex+0x3fc/0x570 [ 43.451630][ T6941] should_fail+0x14/0x24 [ 43.451642][ T6941] should_fail_usercopy+0x20/0x30 [ 43.451650][ T6941] bpf_verifier_vlog+0x2f0/0xbc0 [ 43.451660][ T6941] __btf_verifier_log+0xe8/0x13c [ 43.451672][ T6941] btf_parse_hdr+0x3f4/0x71c [ 43.451683][ T6941] btf_new_fd+0x288/0x7a8 [ 43.451693][ T6941] bpf_btf_load+0x144/0x190 [ 43.451704][ T6941] __sys_bpf+0x804/0x840 [ 43.451714][ T6941] __arm64_sys_bpf+0xd0/0xec [ 43.451723][ T6941] invoke_syscall+0x98/0x244 [ 43.451732][ T6941] el0_svc_common+0xec/0x23c [ 43.451740][ T6941] do_el0_svc+0x4c/0x5c [ 43.451747][ T6941] el0_svc+0x60/0x1d8 [ 43.451765][ T6941] el0t_64_sync_handler+0x44/0x104 [ 43.451775][ T6941] el0t_64_sync+0x198/0x19c [ 43.463683][ T6943] loop9: detected capacity change from 0 to 7 [ 43.610131][ T6956] input: syz0 as /devices/virtual/input/input7 [ 43.887096][ T6963] FAULT_INJECTION: forcing a failure. [ 43.887096][ T6963] name failslab, interval 1, probability 0, space 0, times 0 [ 43.887118][ T6963] CPU: 0 UID: 0 PID: 6963 Comm: syz.3.712 Tainted: G L syzkaller #0 PREEMPT [ 43.887131][ T6963] Tainted: [L]=SOFTLOCKUP [ 43.887134][ T6963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.887140][ T6963] Call trace: [ 43.887143][ T6963] show_stack+0x2c/0x3c (C) [ 43.887159][ T6963] __dump_stack+0x30/0x40 [ 43.887168][ T6963] dump_stack_lvl+0xd8/0x12c [ 43.887176][ T6963] dump_stack+0x1c/0x28 [ 43.887184][ T6963] should_fail_ex+0x3fc/0x570 [ 43.887199][ T6963] should_failslab+0xc4/0x120 [ 43.887208][ T6963] __kmalloc_cache_noprof+0x94/0x5fc [ 43.887218][ T6963] cgroup_init_fs_context+0x64/0x808 [ 43.887232][ T6963] alloc_fs_context+0x7d8/0xba4 [ 43.887243][ T6963] fs_context_for_mount+0x34/0x44 [ 43.887252][ T6963] __arm64_sys_fsopen+0x148/0x220 [ 43.887263][ T6963] invoke_syscall+0x98/0x244 [ 43.887271][ T6963] el0_svc_common+0xec/0x23c [ 43.887279][ T6963] do_el0_svc+0x4c/0x5c [ 43.887287][ T6963] el0_svc+0x60/0x1d8 [ 43.887298][ T6963] el0t_64_sync_handler+0x44/0x104 [ 43.887307][ T6963] el0t_64_sync+0x198/0x19c [ 44.354943][ T6982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.355118][ T6982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.376854][ T6987] loop4: detected capacity change from 0 to 512 [ 44.381876][ T6987] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 44.388412][ T6987] EXT4-fs (loop4): 1 truncate cleaned up [ 44.388812][ T6987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.398239][ T6987] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #13: comm syz.4.720: invalid indirect mapped block 4294901760 (level 0) [ 44.399213][ T6987] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #13: comm syz.4.720: invalid indirect mapped block 2185560079 (level 0) [ 44.399793][ T6987] EXT4-fs error (device loop4): ext4_free_branches:1040: inode #13: comm syz.4.720: invalid indirect mapped block 65535 (level 2) [ 44.404559][ T6987] EXT4-fs error (device loop4): __ext4_get_inode_loc:5733: comm syz.4.720: Invalid inode table block 1 in block_group 0 [ 44.405969][ T6987] EXT4-fs error (device loop4) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 44.406306][ T6987] EXT4-fs error (device loop4): ext4_dirty_inode:7679: inode #16: comm syz.4.720: mark_inode_dirty error [ 44.411804][ T6987] EXT4-fs error (device loop4): __ext4_get_inode_loc:5733: comm syz.4.720: Invalid inode table block 1 in block_group 0 [ 44.414783][ T6987] EXT4-fs error (device loop4) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 44.415027][ T6987] EXT4-fs error (device loop4): ext4_dirty_inode:7679: inode #16: comm syz.4.720: mark_inode_dirty error [ 44.415196][ T6987] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.720: Invalid block bitmap block 3925999616 in block_group 0 [ 44.449526][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.491425][ T4725] Bluetooth: hci4: command tx timeout [ 44.883048][ T7014] FAULT_INJECTION: forcing a failure. [ 44.883048][ T7014] name failslab, interval 1, probability 0, space 0, times 0 [ 44.883070][ T7014] CPU: 0 UID: 0 PID: 7014 Comm: syz.1.733 Tainted: G L syzkaller #0 PREEMPT [ 44.883082][ T7014] Tainted: [L]=SOFTLOCKUP [ 44.883085][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.883090][ T7014] Call trace: [ 44.883093][ T7014] show_stack+0x2c/0x3c (C) [ 44.883108][ T7014] __dump_stack+0x30/0x40 [ 44.883118][ T7014] dump_stack_lvl+0xd8/0x12c [ 44.883126][ T7014] dump_stack+0x1c/0x28 [ 44.883133][ T7014] should_fail_ex+0x3fc/0x570 [ 44.883149][ T7014] should_failslab+0xc4/0x120 [ 44.883158][ T7014] __kmalloc_noprof+0x108/0x6c8 [ 44.883168][ T7014] security_prepare_creds+0x60/0x35c [ 44.883181][ T7014] prepare_creds+0x500/0x7d0 [ 44.883193][ T7014] lookup_user_key+0x35c/0xe68 [ 44.883203][ T7014] keyctl_session_to_parent+0x38/0x988 [ 44.883213][ T7014] __arm64_sys_keyctl+0x2a8/0x3e8 [ 44.883222][ T7014] invoke_syscall+0x98/0x244 [ 44.883231][ T7014] el0_svc_common+0xec/0x23c [ 44.883239][ T7014] do_el0_svc+0x4c/0x5c [ 44.883247][ T7014] el0_svc+0x60/0x1d8 [ 44.883257][ T7014] el0t_64_sync_handler+0x44/0x104 [ 44.883267][ T7014] el0t_64_sync+0x198/0x19c [ 44.928732][ T7018] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 44.936841][ T7018] 8021q: adding VLAN 0 to HW filter on device bond3 [ 44.947734][ T7018] bond3: option tlb_dynamic_lb: unable to set because the bond device is up [ 44.966140][ T7023] netlink: 44 bytes leftover after parsing attributes in process `syz.1.737'. [ 44.968721][ T7023] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.978236][ T7023] netlink: 44 bytes leftover after parsing attributes in process `syz.1.737'. [ 44.997998][ T7025] FAULT_INJECTION: forcing a failure. [ 44.997998][ T7025] name failslab, interval 1, probability 0, space 0, times 0 [ 44.998019][ T7025] CPU: 1 UID: 0 PID: 7025 Comm: syz.1.738 Tainted: G L syzkaller #0 PREEMPT [ 44.998032][ T7025] Tainted: [L]=SOFTLOCKUP [ 44.998035][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.998040][ T7025] Call trace: [ 44.998043][ T7025] show_stack+0x2c/0x3c (C) [ 44.998058][ T7025] __dump_stack+0x30/0x40 [ 44.998067][ T7025] dump_stack_lvl+0xd8/0x12c [ 44.998075][ T7025] dump_stack+0x1c/0x28 [ 44.998082][ T7025] should_fail_ex+0x3fc/0x570 [ 44.998097][ T7025] should_failslab+0xc4/0x120 [ 44.998106][ T7025] __kmalloc_cache_noprof+0x94/0x5fc [ 44.998117][ T7025] sget_fc+0x644/0x152c [ 44.998128][ T7025] kernfs_get_tree+0x1b0/0x7dc [ 44.998140][ T7025] vfs_get_tree+0x90/0x28c [ 44.998151][ T7025] fc_mount+0x24/0xac [ 44.998162][ T7025] do_new_mount+0x2a4/0x538 [ 44.998174][ T7025] path_mount+0x5f0/0xa88 [ 44.998185][ T7025] do_mount+0xe8/0x148 [ 44.998196][ T7025] __arm64_sys_mount+0x33c/0x388 [ 44.998209][ T7025] invoke_syscall+0x98/0x244 [ 44.998217][ T7025] el0_svc_common+0xec/0x23c [ 44.998225][ T7025] do_el0_svc+0x4c/0x5c [ 44.998233][ T7025] el0_svc+0x60/0x1d8 [ 44.998243][ T7025] el0t_64_sync_handler+0x44/0x104 [ 44.998253][ T7025] el0t_64_sync+0x198/0x19c [ 45.036373][ T7029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.739'. [ 45.036393][ T7029] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 45.063042][ T7033] FAULT_INJECTION: forcing a failure. [ 45.063042][ T7033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.063065][ T7033] CPU: 0 UID: 0 PID: 7033 Comm: syz.3.742 Tainted: G L syzkaller #0 PREEMPT [ 45.063079][ T7033] Tainted: [L]=SOFTLOCKUP [ 45.063083][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.063088][ T7033] Call trace: [ 45.063091][ T7033] show_stack+0x2c/0x3c (C) [ 45.063107][ T7033] __dump_stack+0x30/0x40 [ 45.063116][ T7033] dump_stack_lvl+0xd8/0x12c [ 45.063124][ T7033] dump_stack+0x1c/0x28 [ 45.063131][ T7033] should_fail_ex+0x3fc/0x570 [ 45.063145][ T7033] should_fail+0x14/0x24 [ 45.063157][ T7033] should_fail_usercopy+0x20/0x30 [ 45.063165][ T7033] bpf_verifier_vlog+0x2f0/0xbc0 [ 45.063175][ T7033] __btf_verifier_log+0xe8/0x13c [ 45.063187][ T7033] btf_parse_hdr+0x3f4/0x71c [ 45.063198][ T7033] btf_new_fd+0x288/0x7a8 [ 45.063209][ T7033] bpf_btf_load+0x144/0x190 [ 45.063220][ T7033] __sys_bpf+0x804/0x840 [ 45.063230][ T7033] __arm64_sys_bpf+0xd0/0xec [ 45.063239][ T7033] invoke_syscall+0x98/0x244 [ 45.063248][ T7033] el0_svc_common+0xec/0x23c [ 45.063256][ T7033] do_el0_svc+0x4c/0x5c [ 45.063263][ T7033] el0_svc+0x60/0x1d8 [ 45.063274][ T7033] el0t_64_sync_handler+0x44/0x104 [ 45.063284][ T7033] el0t_64_sync+0x198/0x19c [ 45.068361][ T7031] loop1: detected capacity change from 0 to 8192 [ 45.084333][ T7031] loop1: AHDI p1 p4 [ 45.152230][ T7040] loop3: detected capacity change from 0 to 2048 [ 45.175640][ T4684] udevd[4684]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 45.175892][ T7040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.177735][ T7043] loop1: detected capacity change from 0 to 512 [ 45.195140][ T7043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.199571][ T7043] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.745: corrupted xattr block 33: overlapping e_value [ 45.199903][ T7043] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.745: corrupted xattr block 33: overlapping e_value [ 45.212529][ T7040] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.215964][ T7043] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.745: corrupted xattr block 33: overlapping e_value [ 45.224388][ T7043] EXT4-fs error (device loop1): ext4_xattr_block_get:608: inode #15: comm syz.1.745: corrupted xattr block 33: overlapping e_value [ 45.300883][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.331268][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.334359][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.427394][ T7064] FAULT_INJECTION: forcing a failure. [ 45.427394][ T7064] name failslab, interval 1, probability 0, space 0, times 0 [ 45.427413][ T7064] CPU: 1 UID: 0 PID: 7064 Comm: syz.3.752 Tainted: G L syzkaller #0 PREEMPT [ 45.427426][ T7064] Tainted: [L]=SOFTLOCKUP [ 45.427429][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.427434][ T7064] Call trace: [ 45.427438][ T7064] show_stack+0x2c/0x3c (C) [ 45.427454][ T7064] __dump_stack+0x30/0x40 [ 45.427463][ T7064] dump_stack_lvl+0xd8/0x12c [ 45.427471][ T7064] dump_stack+0x1c/0x28 [ 45.427478][ T7064] should_fail_ex+0x3fc/0x570 [ 45.427492][ T7064] should_failslab+0xc4/0x120 [ 45.427501][ T7064] __kvmalloc_node_noprof+0x160/0x7fc [ 45.427511][ T7064] bpf_int_jit_compile+0x5a8/0x11d8 [ 45.427523][ T7064] __bpf_prog_select_runtime+0x3b0/0x6dc [ 45.427536][ T7064] bpf_prog_select_runtime+0x2c/0x3c [ 45.427547][ T7064] bpf_prepare_filter+0xc74/0xdac [ 45.427558][ T7064] bpf_prog_create_from_user+0x1c4/0x26c [ 45.427569][ T7064] do_seccomp+0x6f8/0xbf8 [ 45.427580][ T7064] __arm64_sys_seccomp+0x84/0x98 [ 45.427591][ T7064] invoke_syscall+0x98/0x244 [ 45.427599][ T7064] el0_svc_common+0xec/0x23c [ 45.427607][ T7064] do_el0_svc+0x4c/0x5c [ 45.427615][ T7064] el0_svc+0x60/0x1d8 [ 45.427625][ T7064] el0t_64_sync_handler+0x44/0x104 [ 45.427635][ T7064] el0t_64_sync+0x198/0x19c [ 45.506903][ T7068] FAULT_INJECTION: forcing a failure. [ 45.506903][ T7068] name failslab, interval 1, probability 0, space 0, times 0 [ 45.506923][ T7068] CPU: 0 UID: 0 PID: 7068 Comm: syz.3.755 Tainted: G L syzkaller #0 PREEMPT [ 45.506936][ T7068] Tainted: [L]=SOFTLOCKUP [ 45.506939][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.506944][ T7068] Call trace: [ 45.506947][ T7068] show_stack+0x2c/0x3c (C) [ 45.506962][ T7068] __dump_stack+0x30/0x40 [ 45.506970][ T7068] dump_stack_lvl+0xd8/0x12c [ 45.506978][ T7068] dump_stack+0x1c/0x28 [ 45.506986][ T7068] should_fail_ex+0x3fc/0x570 [ 45.507000][ T7068] should_failslab+0xc4/0x120 [ 45.507010][ T7068] kmem_cache_alloc_noprof+0x94/0x5d4 [ 45.507019][ T7068] security_inode_alloc+0x40/0x304 [ 45.507029][ T7068] inode_init_always_gfp+0x704/0xb20 [ 45.507042][ T7068] alloc_inode+0x9c/0x198 [ 45.507053][ T7068] new_inode+0x20/0x50 [ 45.507065][ T7068] proc_sys_make_inode+0x5c/0x440 [ 45.507076][ T7068] proc_sys_lookup+0x1d4/0x2a0 [ 45.507085][ T7068] __lookup_slow+0x1e4/0x2b4 [ 45.507096][ T7068] lookup_slow+0x60/0x84 [ 45.507106][ T7068] link_path_walk+0xaa4/0x1488 [ 45.507118][ T7068] path_openat+0x158/0x1910 [ 45.507129][ T7068] do_file_open+0x1c8/0x2e8 [ 45.507140][ T7068] do_sys_openat2+0x114/0x1ec [ 45.507148][ T7068] do_sys_open+0xb0/0xe0 [ 45.507155][ T7068] __arm64_sys_openat+0xa8/0xc4 [ 45.507163][ T7068] invoke_syscall+0x98/0x244 [ 45.507171][ T7068] el0_svc_common+0xec/0x23c [ 45.507179][ T7068] do_el0_svc+0x4c/0x5c [ 45.507187][ T7068] el0_svc+0x60/0x1d8 [ 45.507198][ T7068] el0t_64_sync_handler+0x44/0x104 [ 45.507207][ T7068] el0t_64_sync+0x198/0x19c [ 45.577733][ T7074] loop3: detected capacity change from 0 to 8192 [ 45.583575][ T7074] loop3: AHDI p1 p4 [ 45.644211][ T7079] loop4: detected capacity change from 0 to 512 [ 45.652960][ T7081] FAULT_INJECTION: forcing a failure. [ 45.652960][ T7081] name failslab, interval 1, probability 0, space 0, times 0 [ 45.652980][ T7081] CPU: 0 UID: 0 PID: 7081 Comm: syz.3.760 Tainted: G L syzkaller #0 PREEMPT [ 45.652992][ T7081] Tainted: [L]=SOFTLOCKUP [ 45.652996][ T7081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.653002][ T7081] Call trace: [ 45.653004][ T7081] show_stack+0x2c/0x3c (C) [ 45.653021][ T7081] __dump_stack+0x30/0x40 [ 45.653030][ T7081] dump_stack_lvl+0xd8/0x12c [ 45.653043][ T7081] dump_stack+0x1c/0x28 [ 45.653050][ T7081] should_fail_ex+0x3fc/0x570 [ 45.653064][ T7081] should_failslab+0xc4/0x120 [ 45.653073][ T7081] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 45.653082][ T7081] __d_alloc+0x50/0x654 [ 45.653093][ T7081] d_alloc_anon+0x24/0x34 [ 45.653102][ T7081] path_from_stashed+0x300/0x4ec [ 45.653116][ T7081] ns_get_path+0x74/0x94 [ 45.653125][ T7081] proc_ns_get_link+0x154/0x29c [ 45.653135][ T7081] pick_link+0x5c8/0xcf0 [ 45.653147][ T7081] step_into_slowpath+0x468/0x670 [ 45.653159][ T7081] path_openat+0x774/0x1910 [ 45.653170][ T7081] do_file_open+0x1c8/0x2e8 [ 45.653181][ T7081] do_sys_openat2+0x114/0x1ec [ 45.653188][ T7081] do_sys_open+0xb0/0xe0 [ 45.653196][ T7081] __arm64_sys_openat+0xa8/0xc4 [ 45.653203][ T7081] invoke_syscall+0x98/0x244 [ 45.653212][ T7081] el0_svc_common+0xec/0x23c [ 45.653220][ T7081] do_el0_svc+0x4c/0x5c [ 45.653228][ T7081] el0_svc+0x60/0x1d8 [ 45.653238][ T7081] el0t_64_sync_handler+0x44/0x104 [ 45.653248][ T7081] el0t_64_sync+0x198/0x19c [ 45.665451][ T4684] udevd[4684]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 45.667652][ T7079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.678498][ T7079] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.759: corrupted xattr block 33: overlapping e_value [ 45.680252][ T7079] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.759: corrupted xattr block 33: overlapping e_value [ 45.680666][ T7079] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.759: corrupted xattr block 33: overlapping e_value [ 45.695535][ T7079] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.759: corrupted xattr block 33: overlapping e_value [ 64.497594][ T26] cfg80211: failed to load regulatory.db [ 64.503074][ T1609] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.503110][ T1609] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.932391][ T1609] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.932422][ T1609] ieee802154 phy1 wpan1: encryption failed: -22 [ 158.731220][ T4725] Bluetooth: hci4: command 0x0406 tx timeout [ 187.371706][ T1609] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.371737][ T1609] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.661153][ T31] INFO: task jbd2/nvme0n1p2-:4310 blocked for more than 143 seconds. [ 204.661173][ T31] Tainted: G L syzkaller #0 [ 204.661179][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 204.661184][ T31] task:jbd2/nvme0n1p2- state:D stack:0 pid:4310 tgid:4310 ppid:2 task_flags:0x240040 flags:0x00000010 [ 204.661199][ T31] Call trace: [ 204.661203][ T31] __switch_to+0x2b4/0x6e4 (T) [ 204.661219][ T31] __schedule+0x1368/0x2b50 [ 204.661227][ T31] schedule+0x13c/0x20c [ 204.661235][ T31] __bio_queue_enter+0x2c0/0x6b8 [ 204.661249][ T31] blk_mq_submit_bio+0x5f8/0x227c [ 204.661258][ T31] __submit_bio+0x94/0x2dc [ 204.661266][ T31] submit_bio_noacct_nocheck+0x290/0xa14 [ 204.661277][ T31] submit_bio_noacct+0xd80/0x16e8 [ 204.661288][ T31] submit_bio+0x2d0/0x410 [ 204.661298][ T31] __bh_submit+0x6a0/0x7bc [ 204.661307][ T31] bh_submit+0x3c/0x50 [ 204.661315][ T31] jbd2_journal_commit_transaction+0x1904/0x4e24 [ 204.661327][ T31] kjournald2+0x2ec/0x5dc [ 204.661336][ T31] kthread+0x304/0x3d4 [ 204.661345][ T31] ret_from_fork+0x10/0x20 [ 204.661365][ T31] INFO: task syz-executor:4628 blocked in I/O wait for more than 143 seconds. [ 204.661372][ T31] Tainted: G L syzkaller #0 [ 204.661376][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 204.661380][ T31] task:syz-executor state:D stack:0 pid:4628 tgid:4628 ppid:4624 task_flags:0x440100 flags:0x00000000 [ 204.661392][ T31] Call trace: [ 204.661394][ T31] __switch_to+0x2b4/0x6e4 (T) [ 204.661403][ T31] __schedule+0x1368/0x2b50 [ 204.661410][ T31] schedule+0x13c/0x20c [ 204.661417][ T31] io_schedule+0x1c/0xe0 [ 204.661425][ T31] bit_wait_io+0x1c/0xe8 [ 204.661433][ T31] __wait_on_bit+0xb8/0x178 [ 204.661441][ T31] out_of_line_wait_on_bit+0x130/0x184 [ 204.661449][ T31] do_get_write_access+0x4e4/0x1308 [ 204.661459][ T31] jbd2_journal_get_write_access+0x1d8/0x214 [ 204.661469][ T31] __ext4_journal_get_write_access+0x84/0x2dc [ 204.661481][ T31] ext4_reserve_inode_write+0x130/0x208 [ 204.661489][ T31] __ext4_mark_inode_dirty+0x154/0x7b4 [ 204.661500][ T31] ext4_dirty_inode+0xd8/0x114 [ 204.661508][ T31] __mark_inode_dirty+0x378/0x1634 [ 204.661517][ T31] generic_update_time+0xe8/0x110 [ 204.661526][ T31] file_update_time_flags+0x2b8/0x338 [ 204.661534][ T31] file_update_time+0x24/0x34 [ 204.661542][ T31] ext4_page_mkwrite+0x1bc/0xda8 [ 204.661550][ T31] do_page_mkwrite+0x138/0x2b8 [ 204.661558][ T31] do_pte_missing+0x5ac/0x28bc [ 204.661566][ T31] handle_mm_fault+0x14d0/0x2b58 [ 204.661577][ T31] do_page_fault+0x4d8/0xc00 [ 204.661588][ T31] do_translation_fault+0xc4/0x114 [ 204.661599][ T31] do_mem_abort+0x70/0x194 [ 204.661609][ T31] el0_da+0x78/0x1d4 [ 204.661618][ T31] el0t_64_sync_handler+0xd8/0x104 [ 204.661627][ T31] el0t_64_sync+0x198/0x19c [ 204.661670][ T31] INFO: task kworker/u8:49:6194 blocked for more than 143 seconds. [ 204.661677][ T31] Tainted: G L syzkaller #0 [ 204.661681][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 204.661685][ T31] task:kworker/u8:49 state:D stack:0 pid:6194 tgid:6194 ppid:2 task_flags:0x4208060 flags:0x00000010 [ 204.661697][ T31] Workqueue: writeback wb_workfn (flush-259:0) [ 204.661710][ T31] Call trace: [ 204.661713][ T31] __switch_to+0x2b4/0x6e4 (T) [ 204.661721][ T31] __schedule+0x1368/0x2b50 [ 204.661728][ T31] schedule+0x13c/0x20c [ 204.661735][ T31] __bio_queue_enter+0x2c0/0x6b8 [ 204.661746][ T31] blk_mq_submit_bio+0x5f8/0x227c [ 204.661754][ T31] __submit_bio+0x94/0x2dc [ 204.661765][ T31] submit_bio_noacct_nocheck+0x290/0xa14 [ 204.661778][ T31] submit_bio_noacct+0xd80/0x16e8 [ 204.661790][ T31] submit_bio+0x2d0/0x410 [ 204.661802][ T31] __bh_submit+0x6a0/0x7bc [ 204.661809][ T31] __block_write_full_folio+0x790/0xccc [ 204.661818][ T31] block_write_full_folio+0x2a0/0x348 [ 204.661827][ T31] blkdev_writepages+0xec/0x184 [ 204.661835][ T31] do_writepages+0x284/0x47c [ 204.661844][ T31] __writeback_single_inode+0x144/0x1634 [ 204.661854][ T31] writeback_sb_inodes+0x790/0x15f4 [ 204.661865][ T31] __writeback_inodes_wb+0xec/0x210 [ 204.661875][ T31] wb_writeback+0x3d0/0xd40 [ 204.661885][ T31] wb_workfn+0x948/0xc78 [ 204.661894][ T31] process_scheduled_works+0x91c/0x1250 [ 204.661903][ T31] worker_thread+0x798/0xbd0 [ 204.661913][ T31] kthread+0x304/0x3d4 [ 204.661921][ T31] ret_from_fork+0x10/0x20 [ 204.661940][ T31] INFO: task syz.4.759:7078 blocked in I/O wait for more than 143 seconds. [ 204.661946][ T31] Tainted: G L syzkaller #0 [ 204.661951][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 204.661954][ T31] task:syz.4.759 state:D stack:0 pid:7078 tgid:7078 ppid:4709 task_flags:0x440040 flags:0x00800001 [ 204.661965][ T31] Call trace: [ 204.661968][ T31] __switch_to+0x2b4/0x6e4 (T) [ 204.661975][ T31] __schedule+0x1368/0x2b50 [ 204.661983][ T31] schedule+0x13c/0x20c [ 204.661990][ T31] io_schedule+0x1c/0xe0 [ 204.661998][ T31] bit_wait_io+0x1c/0xe8 [ 204.662005][ T31] __wait_on_bit+0xb8/0x178 [ 204.662013][ T31] out_of_line_wait_on_bit+0x130/0x184 [ 204.662021][ T31] do_get_write_access+0x4e4/0x1308 [ 204.662031][ T31] jbd2_journal_get_write_access+0x1d8/0x214 [ 204.662041][ T31] __ext4_journal_get_write_access+0x84/0x2dc [ 204.662052][ T31] ext4_reserve_inode_write+0x130/0x208 [ 204.662060][ T31] __ext4_mark_inode_dirty+0x154/0x7b4 [ 204.662071][ T31] ext4_dirty_inode+0xd8/0x114 [ 204.662078][ T31] __mark_inode_dirty+0x378/0x1634 [ 204.662088][ T31] generic_update_time+0xe8/0x110 [ 204.662096][ T31] file_update_time_flags+0x2b8/0x338 [ 204.662104][ T31] file_update_time+0x24/0x34 [ 204.662112][ T31] ext4_page_mkwrite+0x1bc/0xda8 [ 204.662120][ T31] do_page_mkwrite+0x138/0x2b8 [ 204.662128][ T31] do_pte_missing+0x5ac/0x28bc [ 204.662135][ T31] handle_mm_fault+0x14d0/0x2b58 [ 204.662146][ T31] do_page_fault+0x7e8/0xc00 [ 204.662157][ T31] do_translation_fault+0xc4/0x114 [ 204.662167][ T31] do_mem_abort+0x70/0x194 [ 204.662178][ T31] el0_da+0x78/0x1d4 [ 204.662186][ T31] el0t_64_sync_handler+0xd8/0x104 [ 204.662195][ T31] el0t_64_sync+0x198/0x19c [ 204.662205][ T31] INFO: task syz.3.761:7084 blocked in I/O wait for more than 143 seconds. [ 204.662211][ T31] Tainted: G L syzkaller #0 [ 204.662215][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 204.662219][ T31] task:syz.3.761 state:D stack:0 pid:7084 tgid:7084 ppid:4713 task_flags:0x440040 flags:0x00000001 [ 204.662229][ T31] Call trace: [ 204.662232][ T31] __switch_to+0x2b4/0x6e4 (T) [ 204.662239][ T31] __schedule+0x1368/0x2b50 [ 204.662247][ T31] schedule+0x13c/0x20c [ 204.662254][ T31] io_schedule+0x1c/0xe0 [ 204.662262][ T31] bit_wait_io+0x1c/0xe8 [ 204.662269][ T31] __wait_on_bit+0xb8/0x178 [ 204.662277][ T31] out_of_line_wait_on_bit+0x130/0x184 [ 204.662285][ T31] do_get_write_access+0x4e4/0x1308 [ 204.662294][ T31] jbd2_journal_get_write_access+0x1d8/0x214 [ 204.662304][ T31] __ext4_journal_get_write_access+0x84/0x2dc [ 204.662315][ T31] ext4_reserve_inode_write+0x130/0x208 [ 204.662323][ T31] __ext4_mark_inode_dirty+0x154/0x7b4 [ 204.662333][ T31] ext4_dirty_inode+0xd8/0x114 [ 204.662341][ T31] __mark_inode_dirty+0x378/0x1634 [ 204.662351][ T31] generic_update_time+0xe8/0x110 [ 204.662358][ T31] file_update_time_flags+0x2b8/0x338 [ 204.662366][ T31] file_update_time+0x24/0x34 [ 204.662374][ T31] ext4_page_mkwrite+0x1bc/0xda8 [ 204.662382][ T31] do_page_mkwrite+0x138/0x2b8 [ 204.662390][ T31] do_pte_missing+0x5ac/0x28bc [ 204.662398][ T31] handle_mm_fault+0x14d0/0x2b58 [ 204.662408][ T31] do_page_fault+0x7e8/0xc00 [ 204.662419][ T31] do_translation_fault+0xc4/0x114 [ 204.662430][ T31] do_mem_abort+0x70/0x194 [ 204.662440][ T31] el0_da+0x78/0x1d4 [ 204.662448][ T31] el0t_64_sync_handler+0xd8/0x104 [ 204.662457][ T31] el0t_64_sync+0x198/0x19c [ 204.662466][ T31] INFO: task syz.1.762:7088 blocked in I/O wait for more than 143 seconds. [ 204.662472][ T31] Tainted: G L syzkaller #0 [ 204.662477][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 204.662480][ T31] task:syz.1.762 state:D stack:0 pid:7088 tgid:7088 ppid:4710 task_flags:0x440040 flags:0x00800001 [ 204.662491][ T31] Call trace: [ 204.662493][ T31] __switch_to+0x2b4/0x6e4 (T) [ 204.662501][ T31] __schedule+0x1368/0x2b50 [ 204.662509][ T31] schedule+0x13c/0x20c [ 204.662516][ T31] io_schedule+0x1c/0xe0 [ 204.662524][ T31] bit_wait_io+0x1c/0xe8 [ 204.662531][ T31] __wait_on_bit+0xb8/0x178 [ 204.662539][ T31] out_of_line_wait_on_bit+0x130/0x184 [ 204.662547][ T31] do_get_write_access+0x4e4/0x1308 [ 204.662556][ T31] jbd2_journal_get_write_access+0x1d8/0x214 [ 204.662566][ T31] __ext4_journal_get_write_access+0x84/0x2dc [ 204.662577][ T31] ext4_reserve_inode_write+0x130/0x208 [ 204.662585][ T31] __ext4_mark_inode_dirty+0x154/0x7b4 [ 204.662595][ T31] ext4_dirty_inode+0xd8/0x114 [ 204.662603][ T31] __mark_inode_dirty+0x378/0x1634 [ 204.662613][ T31] generic_update_time+0xe8/0x110 [ 204.662620][ T31] touch_atime+0x2d0/0x4e8 [ 204.662628][ T31] ext4_file_mmap_prepare+0x1dc/0x398 [ 204.662637][ T31] mmap_region+0xbc8/0x2800 [ 204.662647][ T31] do_mmap+0xb88/0x1104 [ 204.662656][ T31] vm_mmap_pgoff+0x2a8/0x4a4 [ 204.662664][ T31] ksys_mmap_pgoff+0x364/0x5b4 [ 204.662673][ T31] __arm64_sys_mmap+0x110/0x12c [ 204.662681][ T31] invoke_syscall+0x98/0x244 [ 204.662688][ T31] el0_svc_common+0xec/0x23c [ 204.662696][ T31] do_el0_svc+0x4c/0x5c [ 204.662704][ T31] el0_svc+0x60/0x1d8 [ 204.662712][ T31] el0t_64_sync_handler+0x44/0x104 [ 204.662721][ T31] el0t_64_sync+0x198/0x19c [ 204.662730][ T31] INFO: task syz.5.763:7089 blocked in I/O wait for more than 143 seconds. [ 204.662736][ T31] Tainted: G L syzkaller #0 [ 204.662740][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 204.662743][ T31] task:syz.5.763 state:D stack:0 pid:7089 tgid:7089 ppid:6329 task_flags:0x440040 flags:0x00800001 [ 204.662754][ T31] Call trace: [ 204.662757][ T31] __switch_to+0x2b4/0x6e4 (T) [ 204.662767][ T31] __schedule+0x1368/0x2b50 [ 204.662775][ T31] schedule+0x13c/0x20c [ 204.662783][ T31] io_schedule+0x1c/0xe0 [ 204.662791][ T31] bit_wait_io+0x1c/0xe8 [ 204.662799][ T31] __wait_on_bit+0xb8/0x178 [ 204.662806][ T31] out_of_line_wait_on_bit+0x130/0x184 [ 204.662814][ T31] do_get_write_access+0x4e4/0x1308 [ 204.662824][ T31] jbd2_journal_get_write_access+0x1d8/0x214 [ 204.662834][ T31] __ext4_journal_get_write_access+0x84/0x2dc [ 204.662845][ T31] ext4_reserve_inode_write+0x130/0x208 [ 204.662853][ T31] __ext4_mark_inode_dirty+0x154/0x7b4 [ 204.662863][ T31] ext4_dirty_inode+0xd8/0x114 [ 204.662871][ T31] __mark_inode_dirty+0x378/0x1634 [ 204.662880][ T31] generic_update_time+0xe8/0x110 [ 204.662888][ T31] touch_atime+0x2d0/0x4e8 [ 204.662896][ T31] ext4_file_mmap_prepare+0x1dc/0x398 [ 204.662904][ T31] mmap_region+0xbc8/0x2800 [ 204.662915][ T31] do_mmap+0xb88/0x1104 [ 204.662923][ T31] vm_mmap_pgoff+0x2a8/0x4a4 [ 204.662931][ T31] ksys_mmap_pgoff+0x364/0x5b4 [ 204.662940][ T31] __arm64_sys_mmap+0x110/0x12c [ 204.662947][ T31] invoke_syscall+0x98/0x244 [ 204.662955][ T31] el0_svc_common+0xec/0x23c [ 204.662963][ T31] do_el0_svc+0x4c/0x5c [ 204.662970][ T31] el0_svc+0x60/0x1d8 [ 204.662979][ T31] el0t_64_sync_handler+0x44/0x104 [ 204.662988][ T31] el0t_64_sync+0x198/0x19c [ 204.662996][ T31] INFO: task dhcpcd:7090 blocked in I/O wait for more than 143 seconds. [ 204.663002][ T31] Tainted: G L syzkaller #0 [ 204.663006][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 204.663010][ T31] task:dhcpcd state:D stack:0 pid:7090 tgid:7090 ppid:4402 task_flags:0x440040 flags:0x00000008 [ 204.663020][ T31] Call trace: [ 204.663023][ T31] __switch_to+0x2b4/0x6e4 (T) [ 204.663031][ T31] __schedule+0x1368/0x2b50 [ 204.663038][ T31] schedule+0x13c/0x20c [ 204.663046][ T31] io_schedule+0x1c/0xe0 [ 204.663053][ T31] bit_wait_io+0x1c/0xe8 [ 204.663061][ T31] __wait_on_bit+0xb8/0x178 [ 204.663068][ T31] out_of_line_wait_on_bit+0x130/0x184 [ 204.663076][ T31] do_get_write_access+0x4e4/0x1308 [ 204.663086][ T31] jbd2_journal_get_write_access+0x1d8/0x214 [ 204.663096][ T31] __ext4_journal_get_write_access+0x84/0x2dc [ 204.663106][ T31] ext4_reserve_inode_write+0x130/0x208 [ 204.663114][ T31] __ext4_mark_inode_dirty+0x154/0x7b4 [ 204.663125][ T31] ext4_dirty_inode+0xd8/0x114 [ 204.663132][ T31] __mark_inode_dirty+0x378/0x1634 [ 204.663142][ T31] generic_update_time+0xe8/0x110 [ 204.663149][ T31] touch_atime+0x2d0/0x4e8 [ 204.663157][ T31] filemap_read+0xba4/0xd04 [ 204.663167][ T31] generic_file_read_iter+0x9c/0x344 [ 204.663178][ T31] ext4_file_read_iter+0x440/0x7e4 [ 204.663186][ T31] __kernel_read+0x3b4/0x7cc [ 204.663194][ T31] kernel_read+0x78/0x90 [ 204.663202][ T31] load_elf_binary+0x13ec/0x1dd4 [ 204.663211][ T31] bprm_execve+0x7d0/0x11e8 [ 204.663220][ T31] do_execveat_common+0x3dc/0x528 [ 204.663228][ T31] __arm64_sys_execve+0xa8/0xcc [ 204.663236][ T31] invoke_syscall+0x98/0x244 [ 204.663244][ T31] el0_svc_common+0xec/0x23c [ 204.663252][ T31] do_el0_svc+0x4c/0x5c [ 204.663259][ T31] el0_svc+0x60/0x1d8 [ 204.663268][ T31] el0t_64_sync_handler+0x44/0x104 [ 204.663277][ T31] el0t_64_sync+0x198/0x19c [ 204.663285][ T31] INFO: task syz-executor:7091 blocked in I/O wait for more than 143 seconds. [ 204.663292][ T31] Tainted: G L syzkaller #0 [ 204.663296][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 204.663300][ T31] task:syz-executor state:D stack:0 pid:7091 tgid:7091 ppid:4628 task_flags:0x440000 flags:0x00800010 [ 204.663311][ T31] Call trace: [ 204.663314][ T31] __switch_to+0x2b4/0x6e4 (T) [ 204.663321][ T31] __schedule+0x1368/0x2b50 [ 204.663329][ T31] schedule+0x13c/0x20c [ 204.663336][ T31] io_schedule+0x1c/0xe0 [ 204.663344][ T31] bit_wait_io+0x1c/0xe8 [ 204.663351][ T31] __wait_on_bit+0xb8/0x178 [ 204.663359][ T31] out_of_line_wait_on_bit+0x130/0x184 [ 204.663367][ T31] do_get_write_access+0x4e4/0x1308 [ 204.663377][ T31] jbd2_journal_get_write_access+0x1d8/0x214 [ 204.663387][ T31] __ext4_journal_get_write_access+0x84/0x2dc [ 204.663398][ T31] ext4_reserve_inode_write+0x130/0x208 [ 204.663406][ T31] __ext4_mark_inode_dirty+0x154/0x7b4 [ 204.663416][ T31] add_dirent_to_buf+0x348/0x484 [ 204.663427][ T31] __ext4_add_entry+0x4a4/0x1788 [ 204.663438][ T31] ext4_mkdir+0x488/0x9a8 [ 204.663448][ T31] vfs_mkdir+0x2ec/0x4cc [ 204.663458][ T31] filename_mkdirat+0x228/0x420 [ 204.663468][ T31] __arm64_sys_mkdirat+0x9c/0xc0 [ 204.663479][ T31] invoke_syscall+0x98/0x244 [ 204.663487][ T31] el0_svc_common+0xec/0x23c [ 204.663494][ T31] do_el0_svc+0x4c/0x5c [ 204.663502][ T31] el0_svc+0x60/0x1d8 [ 204.663511][ T31] el0t_64_sync_handler+0x44/0x104 [ 204.663520][ T31] el0t_64_sync+0x198/0x19c [ 204.663528][ T31] INFO: task syz-executor:7092 blocked for more than 143 seconds. [ 204.663534][ T31] Tainted: G L syzkaller #0 [ 204.663538][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 204.663542][ T31] task:syz-executor state:D stack:0 pid:7092 tgid:7092 ppid:4628 task_flags:0x400000 flags:0x00800000 [ 204.663553][ T31] Call trace: [ 204.663555][ T31] __switch_to+0x2b4/0x6e4 (T) [ 204.663563][ T31] __schedule+0x1368/0x2b50 [ 204.663571][ T31] schedule+0x13c/0x20c [ 204.663578][ T31] schedule_preempt_disabled+0x18/0x2c [ 204.663586][ T31] rwsem_down_write_slowpath+0x6b0/0xf40 [ 204.663595][ T31] down_write_nested+0x22c/0x2a8 [ 204.663607][ T31] __start_dirop+0xa0/0xf4 [ 204.663616][ T31] filename_create+0x194/0x2b0 [ 204.663626][ T31] filename_mkdirat+0xbc/0x420 [ 204.663636][ T31] __arm64_sys_mkdirat+0x9c/0xc0 [ 204.663646][ T31] invoke_syscall+0x98/0x244 [ 204.663654][ T31] el0_svc_common+0xec/0x23c [ 204.663662][ T31] do_el0_svc+0x4c/0x5c [ 204.663670][ T31] el0_svc+0x60/0x1d8 [ 204.663678][ T31] el0t_64_sync_handler+0x44/0x104 [ 204.663687][ T31] el0t_64_sync+0x198/0x19c [ 204.663696][ T31] INFO: task syz-executor:7093 blocked for more than 143 seconds. [ 204.663702][ T31] Tainted: G L syzkaller #0 [ 204.663706][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 204.663710][ T31] task:syz-executor state:D stack:0 pid:7093 tgid:7093 ppid:4628 task_flags:0x400000 flags:0x00800000 [ 204.663721][ T31] Call trace: [ 204.663723][ T31] __switch_to+0x2b4/0x6e4 (T) [ 204.663731][ T31] __schedule+0x1368/0x2b50 [ 204.663739][ T31] schedule+0x13c/0x20c [ 204.663746][ T31] schedule_preempt_disabled+0x18/0x2c [ 204.663754][ T31] rwsem_down_write_slowpath+0x6b0/0xf40 [ 204.663765][ T31] down_write_nested+0x22c/0x2a8 [ 204.663777][ T31] __start_dirop+0xa0/0xf4 [ 204.663787][ T31] filename_create+0x194/0x2b0 [ 204.663797][ T31] filename_mkdirat+0xbc/0x420 [ 204.663807][ T31] __arm64_sys_mkdirat+0x9c/0xc0 [ 204.663817][ T31] invoke_syscall+0x98/0x244 [ 204.663825][ T31] el0_svc_common+0xec/0x23c [ 204.663833][ T31] do_el0_svc+0x4c/0x5c [ 204.663840][ T31] el0_svc+0x60/0x1d8 [ 204.663849][ T31] el0t_64_sync_handler+0x44/0x104 [ 204.663858][ T31] el0t_64_sync+0x198/0x19c [ 204.663866][ T31] INFO: task syz-executor:7094 blocked for more than 143 seconds. [ 204.663872][ T31] Tainted: G L syzkaller #0 [ 204.663877][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 204.663880][ T31] task:syz-executor state:D stack:0 pid:7094 tgid:7094 ppid:4628 task_flags:0x400000 flags:0x00800000 [ 204.663891][ T31] Call trace: [ 204.663893][ T31] __switch_to+0x2b4/0x6e4 (T) [ 204.663901][ T31] __schedule+0x1368/0x2b50 [ 204.663909][ T31] schedule+0x13c/0x20c [ 204.663916][ T31] schedule_preempt_disabled+0x18/0x2c [ 204.663924][ T31] rwsem_down_write_slowpath+0x6b0/0xf40 [ 204.663933][ T31] down_write_nested+0x22c/0x2a8 [ 204.663944][ T31] __start_dirop+0xa0/0xf4 [ 204.663953][ T31] filename_create+0x194/0x2b0 [ 204.663963][ T31] filename_mkdirat+0xbc/0x420 [ 204.663973][ T31] __arm64_sys_mkdirat+0x9c/0xc0 [ 204.663983][ T31] invoke_syscall+0x98/0x244 [ 204.663991][ T31] el0_svc_common+0xec/0x23c [ 204.663998][ T31] do_el0_svc+0x4c/0x5c [ 204.664006][ T31] el0_svc+0x60/0x1d8 [ 204.664015][ T31] el0t_64_sync_handler+0x44/0x104 [ 204.664024][ T31] el0t_64_sync+0x198/0x19c [ 204.664032][ T31] [ 204.664032][ T31] Showing all locks held in the system: [ 204.664038][ T31] locks held by khungtaskd/31: 1, last CPU#1: [ 204.664044][ T31] #0: ffff800089aa5660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x4c/0x188 [ 204.664078][ T31] locks held by getty/4493: 2, on CPU#0: [ 204.664084][ T31] #0: ffff0000ca5d90a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 204.664106][ T31] #1: ffff8000932bb2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x350/0xffc [ 204.664129][ T31] locks held by syz-executor/4628: 3, on CPU#1: [ 204.664135][ T31] #0: ffff0000d2f26180 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x38/0x2c0 [ 204.664157][ T31] #1: ffff0000d186a570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a4/0xda8 [ 204.664177][ T31] #2: ffff0000d1868950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x19b0/0x1bc0 [ 204.664204][ T31] locks held by kworker/u8:49/6194: 3, on CPU#0: [ 204.664210][ T31] #0: ffff0000c1eec948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x8c8/0x1250 [ 204.664232][ T31] #1: ffff80009b817c20 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x8d0/0x1250 [ 204.664254][ T31] #2: ffff0000c1938100 (&type->s_umount_key#67){.+.+}-{4:4}, at: super_trylock_shared+0x24/0xdc [ 204.664281][ T31] locks held by syz.2.688/6905: 2, on CPU#0: [ 204.664287][ T31] #0: ffff0000c5d00570 (&ctrl->scan_lock){+.+.}-{4:4}, at: nvme_passthru_start+0x68/0xf4 [ 204.664310][ T31] #1: ffff0000c8ee5558 (&subsys->lock){+.+.}-{4:4}, at: nvme_passthru_start+0x90/0xf4 [ 204.664332][ T31] locks held by syz.4.759/7078: 3, on CPU#1: [ 204.664338][ T31] #0: ffff0000d6514e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1c4/0x498 [ 204.664359][ T31] #1: ffff0000d186a570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a4/0xda8 [ 204.664379][ T31] #2: ffff0000d1868950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x19b0/0x1bc0 [ 204.664401][ T31] locks held by syz.3.761/7084: 3, on CPU#0: [ 204.664407][ T31] #0: ffff0000cc240088 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1c4/0x498 [ 204.664428][ T31] #1: ffff0000d186a570 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a4/0xda8 [ 204.664448][ T31] #2: ffff0000d1868950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x19b0/0x1bc0 [ 204.664469][ T31] locks held by syz.1.762/7088: 3, on CPU#0: [ 204.664475][ T31] #0: ffff0000d3ae7680 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1b0/0x4a4 [ 204.664495][ T31] #1: ffff0000d186a478 (sb_writers#3){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x1dc/0x398 [ 204.664518][ T31] #2: ffff0000d1868950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x19b0/0x1bc0 [ 204.664540][ T31] locks held by syz.5.763/7089: 3, on CPU#0: [ 204.664545][ T31] #0: ffff0000d459a280 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1b0/0x4a4 [ 204.664565][ T31] #1: ffff0000d186a478 (sb_writers#3){.+.+}-{0:0}, at: ext4_file_mmap_prepare+0x1dc/0x398 [ 204.664588][ T31] #2: ffff0000d1868950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x19b0/0x1bc0 [ 204.664610][ T31] locks held by dhcpcd/7090: 3, on CPU#1: [ 204.664616][ T31] #0: ffff0000c57d3168 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xac/0x11e8 [ 204.664636][ T31] #1: ffff0000d186a478 (sb_writers#3){.+.+}-{0:0}, at: filemap_read+0xba4/0xd04 [ 204.664660][ T31] #2: ffff0000d1868950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x19b0/0x1bc0 [ 204.664682][ T31] locks held by syz-executor/7091: 3, on CPU#1: [ 204.664687][ T31] #0: ffff0000d186a478 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 204.664711][ T31] #1: ffff0000d01639e0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: __start_dirop+0xa0/0xf4 [ 204.664738][ T31] #2: ffff0000d1868950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x19b0/0x1bc0 [ 204.664759][ T31] locks held by syz-executor/7092: 2, on CPU#1: [ 204.664767][ T31] #0: ffff0000d186a478 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 204.664792][ T31] #1: ffff0000d01639e0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: __start_dirop+0xa0/0xf4 [ 204.664817][ T31] locks held by syz-executor/7093: 2, on CPU#1: [ 204.664823][ T31] #0: ffff0000d186a478 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 204.664847][ T31] #1: ffff0000d01639e0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: __start_dirop+0xa0/0xf4 [ 204.664873][ T31] locks held by syz-executor/7094: 2, on CPU#0: [ 204.664879][ T31] #0: ffff0000d186a478 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 204.664902][ T31] #1: ffff0000d01639e0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: __start_dirop+0xa0/0xf4 [ 204.664928][ T31] [ 204.664931][ T31] ============================================= [ 204.664931][ T31] [ 204.664936][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 205.128585][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT [ 205.130845][ T31] Tainted: [L]=SOFTLOCKUP [ 205.131755][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 205.133820][ T31] Call trace: [ 205.134461][ T31] show_stack+0x2c/0x3c (C) [ 205.135362][ T31] __dump_stack+0x30/0x40 [ 205.136267][ T31] dump_stack_lvl+0x30/0x12c [ 205.137229][ T31] dump_stack+0x1c/0x28 [ 205.138050][ T31] vpanic+0x314/0x7d4 [ 205.138836][ T31] oops_exit+0x0/0x40 [ 205.139607][ T31] hung_task_panic+0x0/0x2c [ 205.140411][ T31] kthread+0x304/0x3d4 [ 205.141215][ T31] ret_from_fork+0x10/0x20 [ 205.142075][ T31] SMP: stopping secondary CPUs [ 205.143053][ T31] Kernel Offset: disabled [ 205.143916][ T31] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 205.145348][ T31] Memory Limit: none [ 205.542154][ T31] Rebooting in 86400 seconds..