last executing test programs: 4.167042319s ago: executing program 4 (id=1423): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,l', 0x4b) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000440)='1\n', 0x2) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='fc\n', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='fc\n', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c) close(r5) symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write(r6, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87) nanosleep(&(0x7f0000000800)={0x0, 0xbebc200}, 0x0) 4.123730968s ago: executing program 1 (id=1424): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xf6, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffff8]}, 0x8, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x1d1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffa) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 4.04837831s ago: executing program 1 (id=1425): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa", 0xde}], 0x1}}], 0x1, 0x4044805) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f0000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6105010303"], 0x10e6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) 3.947761169s ago: executing program 4 (id=1426): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1, 0x0, 0xfffffffffffffe68}, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) 2.94538941s ago: executing program 4 (id=1434): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0xfe, 0xbb8, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000020400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000d"], 0x0, 0x5a}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) unshare(0x40400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c8307500710001000202"], 0x7a) prctl$PR_SET_PTRACER(0x59616d61, r0) openat$dir(0xffffffffffffff9c, 0x0, 0x414301, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2.248329451s ago: executing program 0 (id=1440): futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x3000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9, @none, 0x0, 0x2}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x40000}, 0x14}, 0x1, 0x2b1e}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) futex(0x0, 0x5, 0x0, &(0x7f0000000180), &(0x7f0000048000), 0x0) 2.223206035s ago: executing program 2 (id=1444): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf) r1 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000440)='retrans\x00\xe3\x9b0\xdf\xb8N\xfb\x81\r3p\xf5\x14f\x9b\'xam\v\xbe\xd0\xb2\xc8\xe1\x98\x8d\xd6\xabV\xff\x11\xf3\x1eq\xda\x1f@)\xb5P\x90\x1a\x94Vk\xf0\xef\xd6Vc\xa3\xfd\xabH\xeb\x84\"\xbe\xe5\r\xbe\xca\x82\x8a\xd9\xb3.\xc7z\\\xd3\xa1#\x7f\xb6\t\xe9\xda\xcd\xf1\xbb\xa7A8\x0f\x1b\xf2f\x8d&Rss\xd7\\\xfe)$P\x17\x19\xf2f\xff(\a\xff\x8b`\xc0\x8fF\xe2\xdeI\xab\x0f\xa8|`\x03^~R\xcfoM\x1e\x95^\xaa\xf5\xe5\xfa\xe1i\xa5\xe4\xe5G\xebV\x16\xa2]\x16\xb4\x1d\xa0\xeeb\xed\xcb\x00', &(0x7f0000000400)='\x00\x00\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) 1.890896366s ago: executing program 3 (id=1451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x114, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x3, 0x6, 0xd, 0x5, 0x4, 0x1, 0x5, 0x9, [{0x6, 0x1, 0xfffffff2, 0x7}, {0x0, 0xff, 0xfe000000, 0x1}, {0x9, 0x4, 0x4, 0x4}, {0x8, 0x7, 0xd, 0x1}, {0x5, 0x0, 0x3, 0x7fffffff}, {0x101, 0x398, 0x8, 0x2}, {0x9, 0x1, 0x8, 0x236}, {0x4, 0xe8c, 0xcc, 0x5}, {0xff, 0x40, 0x347c, 0x1a80}, {0xc, 0x80, 0xffffffff, 0x1ff}, {0x7, 0xe, 0xcf1713a8, 0x35ad5b6d}, {0x1, 0x6, 0xff, 0x4}, {0x0, 0xffff, 0x78e, 0x402}]}}]}}]}, 0x114}}, 0x0) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xfd6c) 1.819907267s ago: executing program 3 (id=1452): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,l', 0x4b) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='fc\n', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)='fc\n', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c) close(r6) symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87) nanosleep(&(0x7f0000000800)={0x0, 0xbebc200}, 0x0) 1.664268928s ago: executing program 2 (id=1453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) 844.208878ms ago: executing program 4 (id=1454): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x22}, [@call={0x85, 0x0, 0x0, 0x8b}]}, 0x0, 0x4, 0x6, &(0x7f0000000040)=""/6, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000002c0)={0x1, 0x1, 0x401, 0x4, 0x6, 0xc, 0x3}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x7}, 0x94) 825.888938ms ago: executing program 0 (id=1455): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,l', 0x4b) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='fc\n', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)='fc\n', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c) close(r6) symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87) nanosleep(&(0x7f0000000800)={0x0, 0xbebc200}, 0x0) 805.324281ms ago: executing program 3 (id=1456): r0 = fanotify_init(0x40, 0x80000) r1 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x4) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r3, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) getdents64(r3, &(0x7f0000000400)=""/225, 0xe1) 712.247973ms ago: executing program 1 (id=1457): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x26, 0x0, 0xa}, 0x28) 696.202412ms ago: executing program 3 (id=1458): socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000080)={0x6, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f0000000100)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 675.756319ms ago: executing program 2 (id=1459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0xd, 0x0, 0x5}, {0x6, 0x1, 0x1, 0x40000}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 668.022924ms ago: executing program 1 (id=1460): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xf6, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffff8]}, 0x8, 0x80800) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @private=0xa010101}, {0x2, 0x0, @remote}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x1d1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffa) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 654.549654ms ago: executing program 2 (id=1461): mkdirat(0xffffffffffffffff, 0x0, 0xae) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000000), 0x0) accept(r0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000300)=0x80) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f00005e7000/0x1000)=nil, 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newsa={0x148, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x5, 0x42}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}, @iptfs_reorder_window={0x6, 0x25, 0x3}]}, 0x148}}, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x0, 0x40, 0x32, 0x0, @remote, @local}, {0x4d2, 0x1}}}}}, 0x0) 639.296102ms ago: executing program 2 (id=1462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000800)='\x00', 0x1, 0x0, &(0x7f0000000900)={0x11, 0x300, r4, 0x1, 0x0, 0x6, @local}, 0x14) 610.545711ms ago: executing program 3 (id=1463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfe, {0x0, 0x0, 0x0, r5, {0xffe0}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dd}, 0x4000080) 548.232103ms ago: executing program 0 (id=1464): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x100) write(r1, &(0x7f0000000000)='3', 0x4e) socket$kcm(0x10, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write(r0, &(0x7f0000000500)='md0', 0x3) 536.802907ms ago: executing program 3 (id=1465): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000), 0xfe, 0xbb8, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000020400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000d"], 0x0, 0x5a}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_udp(0xa, 0x2, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) unshare(0x40400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000040)) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="02c8307500710001000202"], 0x7a) prctl$PR_SET_PTRACER(0x59616d61, r0) openat$dir(0xffffffffffffff9c, 0x0, 0x414301, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 536.16478ms ago: executing program 4 (id=1466): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='wwnn=0x2000000010000001,wwpn=0x2000000010000002\n', 0x30) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='wwnn=0x2000000010000001,wwpn=0x2000000010000002,lpwwnn=0x1000000010000001,l', 0x4b) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='fc\n', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r5, &(0x7f0000000580)='fc\n', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r6, &(0x7f0000000600)='nn-0x2000000010000001:pn-0x2000000010000002\n', 0x2c) close(r6) symlinkat(&(0x7f0000000640)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write(r7, &(0x7f0000000740)='transport=fc,traddr=nn-0x2000000010000001:pn-0x2000000010000002,host_traddr=nn-0x1000000010000001:pn-0x1000000010000002,nqn=testsubsys\n', 0x87) nanosleep(&(0x7f0000000800)={0x0, 0xbebc200}, 0x0) 511.149507ms ago: executing program 1 (id=1467): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x4}) 452.188321ms ago: executing program 0 (id=1468): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) process_mrelease(0xffffffffffffffff, 0x7) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x2, {0x1, 0xf1}, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 121.79912ms ago: executing program 1 (id=1469): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x597, &(0x7f0000000680)="$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") socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x369}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x9, 0x20fe, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x200148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x2b060a919de89952, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9b4, 0x2000, 0x2, 0x363}}], 0x1, &(0x7f0000000340)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 56.72843ms ago: executing program 2 (id=1470): openat$ptp0(0xffffffffffffff9c, &(0x7f0000001d00), 0x2e03, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x1e, 0x7ffffffe}]}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) 54.994807ms ago: executing program 4 (id=1471): socket$kcm(0x1e, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}}}}}}, 0x0) 251.39µs ago: executing program 0 (id=1472): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x90, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000600)=""/1}) 0s ago: executing program 0 (id=1473): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a300000000014000000110001"], 0xe0}}, 0x4000000) kernel console output (not intermixed with test programs): /O unit sizes: 1/64, sub-page size 1 [ 32.699789][ T5026] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 32.699797][ T5026] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 32.699803][ T5026] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 32.699810][ T5026] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2030180048 [ 32.699817][ T5026] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 32.701732][ T5031] ubi0: background thread "ubi_bgt0d" started, PID 5031 [ 33.006940][ T24] cdc_ncm 1-1:1.0: MAC-Address: 26:9a:d6:88:3e:cc [ 33.013600][ T24] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 26:9a:d6:88:3e:cc [ 33.030644][ T5022] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 35.436239][ T5081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.35'. [ 36.123274][ T5137] loop1: detected capacity change from 0 to 1024 [ 36.123636][ T5137] EXT4-fs: Ignoring removed bh option [ 36.134381][ T5137] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 36.149796][ T5137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.223606][ T5146] loop4: detected capacity change from 0 to 256 [ 36.245578][ T5144] loop0: detected capacity change from 0 to 256 [ 36.246289][ T5144] vfat: Unknown parameter '1844674407370955161500000000000000000000' [ 36.249481][ T5144] netdevsim netdevsim0: Direct firmware load for T)`)YFnA@T<3ڂ$rcnHwC" -8/ failed with error -2 [ 36.249494][ T5144] netdevsim netdevsim0: Falling back to sysfs fallback for: T)`)YFnA@T<3ڂ$rcnHwC" -8/ [ 36.249847][ T5144] FAULT_INJECTION: forcing a failure. [ 36.249847][ T5144] name failslab, interval 1, probability 0, space 0, times 0 [ 36.249861][ T5144] CPU: 1 UID: 0 PID: 5144 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT [ 36.249870][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.249876][ T5144] Call trace: [ 36.249879][ T5144] show_stack+0x2c/0x3c (C) [ 36.249898][ T5144] __dump_stack+0x30/0x40 [ 36.249915][ T5144] dump_stack_lvl+0xd8/0x12c [ 36.249934][ T5144] dump_stack+0x1c/0x28 [ 36.249945][ T5144] should_fail_ex+0x418/0x58c [ 36.249958][ T5144] should_failslab+0xc4/0x120 [ 36.249971][ T5144] kmem_cache_alloc_noprof+0x94/0x5d4 [ 36.249980][ T5144] __kernfs_new_node+0xf0/0x7d8 [ 36.249991][ T5144] kernfs_new_node+0xe8/0x130 [ 36.250001][ T5144] __kernfs_create_file+0x60/0x2e0 [ 36.250012][ T5144] sysfs_add_bin_file_mode_ns+0x188/0x210 [ 36.250023][ T5144] internal_create_group+0x804/0xb30 [ 36.250036][ T5144] internal_create_groups+0x64/0x138 [ 36.250048][ T5144] sysfs_create_groups+0x2c/0x3c [ 36.250060][ T5144] device_add_attrs+0x17c/0x4e4 [ 36.250070][ T5144] device_add+0x420/0x9e0 [ 36.250078][ T5144] firmware_fallback_sysfs+0x28c/0x930 [ 36.250092][ T5144] _request_firmware+0xb34/0xf5c [ 36.250104][ T5144] request_firmware+0x4c/0x70 [ 36.250116][ T5144] devlink_compat_flash_update+0x134/0x27c [ 36.250130][ T5144] dev_ethtool+0x63c/0x1a98 [ 36.250140][ T5144] dev_ioctl+0x284/0xc88 [ 36.250152][ T5144] sock_do_ioctl+0x198/0x254 [ 36.250163][ T5144] sock_ioctl+0x55c/0x7ec [ 36.250174][ T5144] __arm64_sys_ioctl+0x154/0x1cc [ 36.250187][ T5144] invoke_syscall+0x98/0x244 [ 36.250199][ T5144] el0_svc_common+0xec/0x23c [ 36.250210][ T5144] do_el0_svc+0x4c/0x5c [ 36.250221][ T5144] el0_svc+0x60/0x1d8 [ 36.250233][ T5144] el0t_64_sync_handler+0x44/0x104 [ 36.250245][ T5144] el0t_64_sync+0x198/0x19c [ 36.250795][ T5144] firmware T)`)YFnA@T<3ڂ$rcnHwC" -8!: fw_load_sysfs_fallback: device_register failed [ 36.267816][ T30] audit: type=1326 audit(36.240:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.2.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d78868 code=0x7ffc0000 [ 36.431002][ T30] audit: type=1326 audit(36.390:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.2.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d78868 code=0x7ffc0000 [ 36.525854][ T30] audit: type=1326 audit(36.500:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.2.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d78868 code=0x7ffc0000 [ 36.534611][ T30] audit: type=1326 audit(36.510:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.2.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d78868 code=0x7ffc0000 [ 36.555258][ T30] audit: type=1326 audit(36.530:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.2.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=267 compat=0 ip=0xffffb0d78868 code=0x7ffc0000 [ 36.555294][ T30] audit: type=1326 audit(36.530:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.2.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d78868 code=0x7ffc0000 [ 36.555321][ T30] audit: type=1326 audit(36.530:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.2.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d78868 code=0x7ffc0000 [ 36.573824][ T30] audit: type=1326 audit(36.550:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.2.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb0d78868 code=0x7ffc0000 [ 36.573852][ T30] audit: type=1326 audit(36.550:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5148 comm="syz.2.47" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb0d78868 code=0x7ffc0000 [ 36.630977][ T4723] Bluetooth: hci0: unexpected event 0x0f length: 84 > 4 [ 36.993330][ T4716] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 36.997813][ T4716] EXT4-fs error (device loop1): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /9/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 36.998805][ T4716] EXT4-fs (loop1): Remounting filesystem read-only [ 37.008495][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.024446][ T4723] Bluetooth: hci1: Malformed HCI Event [ 37.165396][ T5171] loop4: detected capacity change from 0 to 256 [ 37.185053][ T5173] bond1: option updelay: invalid value (18446744071562067969) [ 37.185086][ T5173] bond1: option updelay: allowed values 0 - 2147483647 [ 37.203123][ T5173] bond1 (unregistering): Released all slaves [ 37.243645][ T5181] loop4: detected capacity change from 0 to 1024 [ 37.244034][ T5181] journal_path: Non-blockdev passed as './bus' [ 37.244048][ T5181] EXT4-fs: error: could not find journal device path [ 37.265404][ T4723] Bluetooth: Frame is too long (len 20, expected len 4) [ 37.283456][ T5187] loop4: detected capacity change from 0 to 256 [ 37.391217][ T5205] loop4: detected capacity change from 0 to 128 [ 37.581235][ T5239] loop1: detected capacity change from 0 to 128 [ 37.586343][ T5241] ip_tables: iptables: counters copy to user failed while replacing table [ 37.589705][ T5239] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.622026][ T5239] EXT4-fs (loop1): shut down requested (2) [ 37.622281][ T5239] fscrypt (loop1, inode 12): Error -5 getting encryption context [ 37.658547][ T5253] vlan0: entered promiscuous mode [ 37.686041][ T5255] fscrypt (loop1, inode 12): Error -5 getting encryption context [ 37.686303][ T5239] ptrace attach of ""[5255] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[5239] [ 37.686415][ T5255] fscrypt (loop1, inode 12): Error -5 getting encryption context [ 37.686482][ T5239] fscrypt (loop1, inode 12): Error -5 getting encryption context [ 37.686620][ T5239] fscrypt (loop1, inode 12): Error -5 getting encryption context [ 37.686856][ T5239] fscrypt (loop1, inode 12): Error -5 getting encryption context [ 37.687038][ T5239] fscrypt (loop1, inode 12): Error -5 getting encryption context [ 37.732778][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.842548][ T5282] loop4: detected capacity change from 0 to 128 [ 37.853868][ T5281] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 37.866017][ T5282] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.910774][ T5282] EXT4-fs (loop4): shut down requested (2) [ 37.910961][ T5282] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 37.974692][ T5282] ptrace attach of ""[5295] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[5282] [ 37.974741][ T5295] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 37.974804][ T5282] fscrypt (loop4, inode 12): Error -5 getting encryption context [ 38.151385][ T4715] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.212998][ T5335] netlink: 'syz.1.130': attribute type 4 has an invalid length. [ 38.401172][ T5364] ptrace attach of ""[5365] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[5364] [ 38.424438][ T5367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 38.957901][ T5396] Bluetooth: MGMT ver 1.23 [ 38.981138][ T4723] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 39.130163][ T4723] Bluetooth: hci3: unexpected cc 0x2005 length: 4 > 1 [ 39.134197][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'. [ 39.486731][ T5451] loop4: detected capacity change from 0 to 4096 [ 39.503445][ T5451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.994142][ T5467] capability: warning: `syz.4.186' uses deprecated v2 capabilities in a way that may be insecure [ 40.215347][ T5470] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 40.710404][ T5503] netlink: 104 bytes leftover after parsing attributes in process `syz.2.205'. [ 40.840342][ T5526] netlink: 32 bytes leftover after parsing attributes in process `syz.2.216'. [ 41.174113][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.295078][ T5556] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 41.334472][ T5562] loop4: detected capacity change from 0 to 4096 [ 41.352843][ T5562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.820019][ T5593] loop1: detected capacity change from 0 to 512 [ 41.835077][ T5593] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.245: corrupted in-inode xattr: invalid ea_ino [ 41.835154][ T5593] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.835650][ C1] EXT4-fs (loop1): initial error at time 41: ext4_iget_extra_inode:5210: inode 15 [ 41.835670][ C1] EXT4-fs (loop1): last error at time 41: ext4_iget_extra_inode:5210: inode 15 [ 41.840707][ T5593] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.245: couldn't read orphan inode 15 (err -117) [ 41.840774][ T5593] loop1: lost filesystem error report for type 5 error -117 [ 41.842459][ T5593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.966429][ T5615] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 42.270464][ T5620] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 42.938959][ T4723] Bluetooth: hci2: command 0x0406 tx timeout [ 42.976438][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.054549][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.094830][ T5638] nvme_fcloop: unknown parameter or missing value 'l' [ 43.097944][ T5638] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 43.193936][ T4727] Bluetooth: hci2: unexpected event for opcode 0x080d [ 43.205663][ T4727] Bluetooth: hci3: command 0x0406 tx timeout [ 43.298515][ T1891] IPVS: starting estimator thread 0... [ 43.337741][ T30] audit: type=1326 audit(43.320:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5693 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3178868 code=0x7ffc0000 [ 43.337834][ T30] audit: type=1326 audit(43.320:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5693 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3178868 code=0x7ffc0000 [ 43.355335][ T30] audit: type=1326 audit(43.330:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5693 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3178868 code=0x7ffc0000 [ 43.361646][ T30] audit: type=1326 audit(43.340:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5693 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffb3178868 code=0x7ffc0000 [ 43.361668][ T30] audit: type=1326 audit(43.340:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5693 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3178868 code=0x7ffc0000 [ 43.361683][ T30] audit: type=1326 audit(43.340:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5693 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3178868 code=0x7ffc0000 [ 43.361732][ T30] audit: type=1326 audit(43.330:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5693 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3178868 code=0x7ffc0000 [ 43.362301][ T30] audit: type=1326 audit(43.340:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5693 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3178868 code=0x7ffc0000 [ 43.362380][ T30] audit: type=1326 audit(43.340:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5693 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3178868 code=0x7ffc0000 [ 43.362458][ T30] audit: type=1326 audit(43.340:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5693 comm="syz.4.291" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffb3178868 code=0x7ffc0000 [ 43.385518][ T5684] IPVS: using max 61 ests per chain, 146400 per kthread [ 43.449825][ T5710] loop1: detected capacity change from 0 to 512 [ 43.462622][ T5710] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 43.481436][ T5710] EXT4-fs (loop1): 1 truncate cleaned up [ 43.482703][ T5710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.559412][ T5719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.302'. [ 43.612485][ T5730] fuse: Bad value for 'fd' [ 43.617863][ T5733] nvme_fcloop: unknown parameter or missing value 'l' [ 43.618698][ T5733] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 43.618891][ T5733] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 43.619659][ T5733] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 43.874240][ T5744] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 43.898290][ T5748] netlink: 32 bytes leftover after parsing attributes in process `syz.3.314'. [ 43.898597][ T5748] netlink: 32 bytes leftover after parsing attributes in process `syz.3.314'. [ 43.898646][ T5748] Zero length message leads to an empty skb [ 43.941744][ T5756] ip_tables: iptables: counters copy to user failed while replacing table [ 43.977620][ T4719] Bluetooth: hci0: unknown advertising packet type: 0xd9 [ 43.977637][ T4719] Bluetooth: hci0: unknown advertising packet type: 0x95 [ 43.977646][ T4719] Bluetooth: hci0: unknown advertising packet type: 0x8c [ 44.065588][ T4719] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 44.065605][ T4719] CPU: 1 UID: 0 PID: 4719 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT [ 44.065616][ T4719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.065622][ T4719] Workqueue: hci3 hci_rx_work [ 44.065643][ T4719] Call trace: [ 44.065646][ T4719] show_stack+0x2c/0x3c (C) [ 44.065662][ T4719] __dump_stack+0x30/0x40 [ 44.065674][ T4719] dump_stack_lvl+0xd8/0x12c [ 44.065688][ T4719] dump_stack+0x1c/0x28 [ 44.065699][ T4719] sysfs_warn_dup+0x9c/0xb8 [ 44.065713][ T4719] sysfs_create_dir_ns+0x190/0x1f4 [ 44.065725][ T4719] kobject_add_internal+0x290/0x6f0 [ 44.065734][ T4719] kobject_add_varg+0x9c/0xe8 [ 44.065747][ T4719] kobject_add+0x110/0x1c8 [ 44.065759][ T4719] device_add+0x394/0x9e0 [ 44.065769][ T4719] hci_conn_add_sysfs+0xbc/0x1e8 [ 44.065779][ T4719] le_conn_complete_evt+0xc84/0x122c [ 44.065787][ T4719] hci_le_enh_conn_complete_evt+0x114/0x3d8 [ 44.065800][ T4719] hci_le_meta_evt+0x2b0/0x46c [ 44.065810][ T4719] hci_event_packet+0x4c0/0x9c8 [ 44.065818][ T4719] hci_rx_work+0x2f4/0xd78 [ 44.065829][ T4719] process_scheduled_works+0x91c/0x1250 [ 44.065840][ T4719] worker_thread+0x798/0xbd0 [ 44.065851][ T4719] kthread+0x304/0x3d4 [ 44.065859][ T4719] ret_from_fork+0x10/0x20 [ 44.065888][ T4719] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 44.065902][ T4719] Bluetooth: hci3: failed to register connection device [ 44.068725][ T5770] netlink: 60 bytes leftover after parsing attributes in process `syz.2.326'. [ 44.069171][ T5770] netlink: 60 bytes leftover after parsing attributes in process `syz.2.326'. [ 44.096574][ T4719] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 44.096599][ T4719] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 44.361328][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.404853][ T5796] loop1: detected capacity change from 0 to 4096 [ 44.412130][ T5796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.834934][ T5810] nvme_fcloop: unknown parameter or missing value 'l' [ 44.842806][ T5810] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 44.963179][ T5840] nvme_fcloop: unknown parameter or missing value 'l' [ 44.966932][ T5840] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 44.969891][ T5840] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 44.973469][ T5840] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 44.992915][ T5840] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 45.141247][ T5871] nvme_fcloop: unknown parameter or missing value 'l' [ 45.143442][ T5871] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 45.178635][ T5875] loop0: detected capacity change from 0 to 512 [ 45.187682][ T5875] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.369: corrupted in-inode xattr: invalid ea_ino [ 45.187707][ T5875] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.189149][ T5875] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.369: couldn't read orphan inode 15 (err -117) [ 45.189170][ T5875] loop0: lost filesystem error report for type 5 error -117 [ 45.192302][ T5875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.328262][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.329204][ T5890] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 46.415188][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.449485][ T5908] netlink: 296 bytes leftover after parsing attributes in process `syz.4.379'. [ 46.489778][ T5918] nvme_fcloop: unknown parameter or missing value 'l' [ 46.490695][ T5918] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 46.490907][ T5918] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 46.491249][ T5918] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 46.513435][ T5912] loop0: detected capacity change from 0 to 4096 [ 46.540456][ T5912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.335284][ T4719] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 47.335740][ T4719] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 47.335820][ T4719] Bluetooth: hci2: Injecting HCI hardware error event [ 47.336540][ T4719] Bluetooth: hci2: hardware error 0x00 [ 47.607902][ T5966] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 47.659227][ T5975] netlink: 'syz.3.398': attribute type 8 has an invalid length. [ 47.680572][ T5974] loop1: detected capacity change from 0 to 4096 [ 47.699128][ T5974] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.728083][ T5974] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.399: corrupted inode contents [ 47.732928][ T5974] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #15: comm syz.1.399: mark_inode_dirty error [ 47.741496][ T5974] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.399: corrupted inode contents [ 47.741804][ T5974] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.399: mark_inode_dirty error [ 47.742027][ T5974] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.399: corrupted inode contents [ 47.742247][ T5974] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.399: mark_inode_dirty error [ 47.742932][ T5974] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.399: corrupted inode contents [ 47.745199][ T5974] EXT4-fs error (device loop1): ext4_truncate:4721: inode #15: comm syz.1.399: mark_inode_dirty error [ 47.758076][ T5989] nvme_fcloop: unknown parameter or missing value 'l' [ 47.758956][ T5989] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 47.759172][ T5989] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 47.759480][ T5989] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 47.770930][ T5989] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 47.777282][ T5974] EXT4-fs error (device loop1) in ext4_setattr:6247: Corrupt filesystem [ 47.781295][ T5974] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.399: corrupted inode contents [ 47.803221][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.972022][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.057562][ T6033] loop0: detected capacity change from 0 to 512 [ 48.062054][ T6033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.105774][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.197026][ T10] hid-generic 0005:0C45:0002.0001: unknown main item tag 0x0 [ 48.200370][ T10] hid-generic 0005:0C45:0002.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 48.606374][ T6070] loop1: detected capacity change from 0 to 256 [ 48.665839][ T6077] loop0: detected capacity change from 0 to 2048 [ 48.683210][ T6077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 48.693201][ T6079] pimreg0: tun_chr_ioctl cmd 1074025677 [ 48.693348][ T6079] pimreg0: linktype set to 776 [ 48.729298][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 48.781283][ T6100] loop4: detected capacity change from 0 to 512 [ 48.783443][ T6100] EXT4-fs: Ignoring removed orlov option [ 48.789241][ T6100] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.789262][ T6100] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.797019][ T6100] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #16: comm syz.4.440: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 48.797042][ T6100] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.797765][ T6100] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.440: couldn't read orphan inode 16 (err -117) [ 48.797783][ T6100] loop4: lost filesystem error report for type 5 error -117 [ 48.797955][ T6100] EXT4-fs (loop4): 1 orphan inode deleted [ 48.798924][ T6100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.817647][ T6100] ======================================================= [ 48.817647][ T6100] WARNING: The mand mount option has been deprecated and [ 48.817647][ T6100] and is ignored by this kernel. Remove the mand [ 48.817647][ T6100] option from the mount to silence this warning. [ 48.817647][ T6100] ======================================================= [ 48.817741][ T6100] EXT4-fs: Ignoring removed nobh option [ 48.817751][ T6100] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.846503][ T6100] EXT4-fs error (device loop4): __ext4_remount:6872: comm syz.4.440: Abort forced by user [ 48.847000][ T6100] EXT4-fs (loop4): Remounting filesystem read-only [ 48.847015][ T6100] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.872933][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.525694][ T4719] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 49.691393][ T6149] loop1: detected capacity change from 0 to 1024 [ 49.697478][ T6151] loop0: detected capacity change from 0 to 128 [ 49.701612][ T6151] EXT4-fs (loop0): Test dummy encryption mode enabled [ 49.705534][ T6151] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.712116][ T6149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 49.727035][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 49.737892][ T6151] fscrypt: AES-256-XTS using blk-crypto-fallback [ 49.758495][ T6157] loop1: detected capacity change from 0 to 128 [ 49.762141][ T6157] EXT4-fs: Ignoring removed nobh option [ 49.781780][ T6157] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.827291][ T6157] fscrypt_msg: 4 callbacks suppressed [ 49.827306][ T6157] fscrypt (loop1, inode 12): Reserved bits set in encryption policy [ 49.833799][ T4721] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.880268][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.886076][ T6170] loop0: detected capacity change from 0 to 256 [ 49.976990][ T6178] nvme_fcloop: unknown parameter or missing value 'l' [ 49.980006][ T6178] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 49.980260][ T6178] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 49.997932][ T6178] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 50.216480][ T6207] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 50.216498][ T6207] FAT-fs (loop0): Filesystem has been set read-only [ 50.331931][ T6218] nvme_fcloop: unknown parameter or missing value 'l' [ 50.333410][ T6218] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 50.333595][ T6218] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 50.333848][ T6218] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 50.360215][ T6218] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 50.360566][ T6224] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 50.419435][ T6228] ip_tables: iptables: counters copy to user failed while replacing table [ 50.496017][ T6236] nvme_fcloop: unknown parameter or missing value 'l' [ 50.496709][ T6236] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 50.496876][ T6236] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 50.522770][ T6236] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 50.569361][ T6240] bond0: invalid ARP target specified [ 50.590965][ T6242] netlink: 68 bytes leftover after parsing attributes in process `syz.4.503'. [ 50.963758][ T6262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.076014][ T6261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.892452][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.944992][ T6277] set_capacity_and_notify: 5 callbacks suppressed [ 51.945016][ T6277] loop1: detected capacity change from 0 to 4096 [ 51.971288][ T6277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.974524][ T6284] loop0: detected capacity change from 0 to 256 [ 52.086836][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.382548][ T6297] netlink: 76 bytes leftover after parsing attributes in process `syz.0.524'. [ 52.382568][ T6297] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 52.411255][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.448277][ T6306] loop4: detected capacity change from 0 to 256 [ 52.541725][ T6316] loop0: detected capacity change from 0 to 1024 [ 52.564546][ T6316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.588135][ T6316] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 52.590015][ T6316] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 52.590046][ T6316] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.590046][ T6316] [ 52.590056][ T6316] EXT4-fs (loop0): Total free blocks count 0 [ 52.590063][ T6316] EXT4-fs (loop0): Free/Dirty block details [ 52.590074][ T6316] EXT4-fs (loop0): free_blocks=20480 [ 52.590086][ T6316] EXT4-fs (loop0): dirty_blocks=96 [ 52.590092][ T6316] EXT4-fs (loop0): Block reservation details [ 52.590098][ T6316] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 52.617764][ T6327] loop4: detected capacity change from 0 to 4096 [ 52.626341][ T6327] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.637860][ T1891] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 53.050325][ T6340] loop0: detected capacity change from 0 to 128 [ 53.055721][ T6340] EXT4-fs (loop0): Test dummy encryption mode enabled [ 53.057118][ T6340] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 53.066415][ T6340] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 53.095076][ T4721] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.107915][ T4719] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 53.115674][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 53.115687][ T30] audit: type=1400 audit(53.090:24): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="lowerdir" requested=w pid=6345 comm="syz.0.541" name="file1" dev="tmpfs" ino=570 [ 53.298864][ T6366] loop0: detected capacity change from 0 to 128 [ 53.347633][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.438614][ T6380] loop1: detected capacity change from 0 to 512 [ 53.442346][ T6380] EXT4-fs (loop1): Test dummy encryption mode enabled [ 53.447749][ T6380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.474877][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.761733][ T6433] loop1: detected capacity change from 0 to 4096 [ 54.067292][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.067596][ T6433] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.612679][ T6473] nvme_fcloop: unknown parameter or missing value 'l' [ 54.613440][ T6473] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 54.613616][ T6473] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 54.613782][ T6473] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 54.623214][ T6473] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 54.723343][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 55.033591][ T6518] loop0: detected capacity change from 0 to 256 [ 55.037930][ T6518] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.045564][ T6518] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.109258][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.215866][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.0.614'. [ 55.215882][ T6535] EXT4-fs (loop1): 1 truncate cleaned up [ 55.218236][ T6535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.221745][ T6535] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.613:6535 [ 55.242620][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.265926][ T6544] syz.1.617 uses obsolete (PF_INET,SOCK_PACKET) [ 55.333668][ T6552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.354771][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.401793][ T4719] Bluetooth: hci4: connection err: -111 [ 55.430341][ T6566] syz.1.627: attempt to access beyond end of device [ 55.430341][ T6566] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 55.430401][ T6566] Buffer I/O error on dev loop1, logical block 57847, async page read [ 55.432507][ T6566] syz.1.627: attempt to access beyond end of device [ 55.432507][ T6566] loop1: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 55.432527][ T6566] Buffer I/O error on dev loop1, logical block 57847, async page read [ 55.443115][ T10] usb 1-1: USB disconnect, device number 2 [ 55.448983][ T10] cdc_ncm 1-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 55.510302][ T1163] kernel write not supported for file /media2 (pid: 1163 comm: kworker/0:3) [ 55.636297][ T6601] FAULT_INJECTION: forcing a failure. [ 55.636297][ T6601] name failslab, interval 1, probability 0, space 0, times 0 [ 55.636318][ T6601] CPU: 0 UID: 0 PID: 6601 Comm: syz.1.635 Tainted: G L syzkaller #0 PREEMPT [ 55.636330][ T6601] Tainted: [L]=SOFTLOCKUP [ 55.636334][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 55.636339][ T6601] Call trace: [ 55.636342][ T6601] show_stack+0x2c/0x3c (C) [ 55.636359][ T6601] __dump_stack+0x30/0x40 [ 55.636372][ T6601] dump_stack_lvl+0xd8/0x12c [ 55.636383][ T6601] dump_stack+0x1c/0x28 [ 55.636394][ T6601] should_fail_ex+0x418/0x58c [ 55.636407][ T6601] should_failslab+0xc4/0x120 [ 55.636420][ T6601] kmem_cache_alloc_noprof+0x94/0x5d4 [ 55.636428][ T6601] copy_net_ns+0x194/0x698 [ 55.636440][ T6601] create_new_namespaces+0x304/0x50c [ 55.636451][ T6601] unshare_nsproxy_namespaces+0x120/0x170 [ 55.636461][ T6601] ksys_unshare+0x438/0x6cc [ 55.636470][ T6601] __arm64_sys_unshare+0x40/0x54 [ 55.636479][ T6601] invoke_syscall+0x98/0x244 [ 55.636491][ T6601] el0_svc_common+0xec/0x23c [ 55.636502][ T6601] do_el0_svc+0x4c/0x5c [ 55.636513][ T6601] el0_svc+0x60/0x1d8 [ 55.636525][ T6601] el0t_64_sync_handler+0x44/0x104 [ 55.636537][ T6601] el0t_64_sync+0x198/0x19c [ 55.871616][ T6629] netlink: 236 bytes leftover after parsing attributes in process `syz.3.644'. [ 55.871634][ T6629] netlink: 103 bytes leftover after parsing attributes in process `syz.3.644'. [ 55.871645][ T6629] netlink: 5 bytes leftover after parsing attributes in process `syz.3.644'. [ 55.871653][ T6629] netlink: 20 bytes leftover after parsing attributes in process `syz.3.644'. [ 55.871660][ T6629] netlink: 7 bytes leftover after parsing attributes in process `syz.3.644'. [ 55.871667][ T6629] netlink: 'syz.3.644': attribute type 5 has an invalid length. [ 56.084165][ T6665] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 56.467185][ T6737] fuse: fd is not a fuse device [ 56.565087][ T6755] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 57.042991][ T6837] FAULT_INJECTION: forcing a failure. [ 57.042991][ T6837] name failslab, interval 1, probability 0, space 0, times 0 [ 57.043033][ T6837] CPU: 0 UID: 0 PID: 6837 Comm: syz.1.709 Tainted: G L syzkaller #0 PREEMPT [ 57.043046][ T6837] Tainted: [L]=SOFTLOCKUP [ 57.043050][ T6837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 57.043055][ T6837] Call trace: [ 57.043058][ T6837] show_stack+0x2c/0x3c (C) [ 57.043077][ T6837] __dump_stack+0x30/0x40 [ 57.043090][ T6837] dump_stack_lvl+0xd8/0x12c [ 57.043102][ T6837] dump_stack+0x1c/0x28 [ 57.043113][ T6837] should_fail_ex+0x418/0x58c [ 57.043126][ T6837] should_failslab+0xc4/0x120 [ 57.043140][ T6837] kmem_cache_alloc_noprof+0x94/0x5d4 [ 57.043148][ T6837] prepare_creds+0x34/0x7d0 [ 57.043161][ T6837] __sys_setresgid+0x414/0x7ac [ 57.043171][ T6837] __arm64_sys_setresgid+0x84/0x98 [ 57.043182][ T6837] invoke_syscall+0x98/0x244 [ 57.043194][ T6837] el0_svc_common+0xec/0x23c [ 57.043206][ T6837] do_el0_svc+0x4c/0x5c [ 57.043217][ T6837] el0_svc+0x60/0x1d8 [ 57.043229][ T6837] el0t_64_sync_handler+0x44/0x104 [ 57.043240][ T6837] el0t_64_sync+0x198/0x19c [ 57.070964][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.710'. [ 57.072506][ T6843] set_capacity_and_notify: 5 callbacks suppressed [ 57.072516][ T6843] loop4: detected capacity change from 0 to 2048 [ 57.090930][ T6843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.105640][ T6843] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.711: bg 0: block 345: padding at end of block bitmap is not set [ 57.114953][ T6843] fs-verity (loop4, inode 13): Error -28 writing Merkle tree block 0 [ 57.114983][ T6843] fs-verity (loop4, inode 13): Error -28 building Merkle tree [ 57.141480][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.173122][ T6862] syzkaller1: entered allmulticast mode [ 57.213509][ T6866] loop0: detected capacity change from 0 to 512 [ 57.280215][ T6874] netlink: 136 bytes leftover after parsing attributes in process `syz.0.719'. [ 57.280237][ T6874] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 57.373281][ T6897] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 57.439453][ T6902] FAULT_INJECTION: forcing a failure. [ 57.439453][ T6902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.439479][ T6902] CPU: 1 UID: 0 PID: 6902 Comm: syz.0.728 Tainted: G L syzkaller #0 PREEMPT [ 57.439492][ T6902] Tainted: [L]=SOFTLOCKUP [ 57.439495][ T6902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 57.439501][ T6902] Call trace: [ 57.439504][ T6902] show_stack+0x2c/0x3c (C) [ 57.439524][ T6902] __dump_stack+0x30/0x40 [ 57.439538][ T6902] dump_stack_lvl+0xd8/0x12c [ 57.439550][ T6902] dump_stack+0x1c/0x28 [ 57.439561][ T6902] should_fail_ex+0x418/0x58c [ 57.439574][ T6902] should_fail+0x14/0x24 [ 57.439585][ T6902] should_fail_usercopy+0x20/0x30 [ 57.439597][ T6902] _inline_copy_from_user+0x38/0x18c [ 57.439607][ T6902] __arm64_sys_copy_file_range+0x194/0x5dc [ 57.439616][ T6902] invoke_syscall+0x98/0x244 [ 57.439628][ T6902] el0_svc_common+0xec/0x23c [ 57.439640][ T6902] do_el0_svc+0x4c/0x5c [ 57.439651][ T6902] el0_svc+0x60/0x1d8 [ 57.439663][ T6902] el0t_64_sync_handler+0x44/0x104 [ 57.439675][ T6902] el0t_64_sync+0x198/0x19c [ 57.459636][ T6910] netlink: 'syz.1.731': attribute type 83 has an invalid length. [ 57.504801][ T6920] warning: `syz.3.737' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.517975][ T6918] Injecting memory failure for pfn 0x11f8e9 at process virtual address 0x20000000 [ 57.523448][ T6915] nvme_fcloop: unknown parameter or missing value 'l' [ 57.529277][ T6918] Memory failure: 0x11f8e9: Sending SIGBUS to syz.0.735:6918 due to hardware memory corruption [ 57.529351][ T6918] Memory failure: 0x11f8e9: recovery action for dirty LRU page: Recovered [ 57.529378][ T6918] Injecting memory failure for pfn 0x2193df at process virtual address 0x20001000 [ 57.529586][ T6918] Memory failure: 0x2193df: unhandlable page. [ 57.529594][ T6918] Memory failure: 0x2193df: recovery action for reserved kernel page: Ignored [ 57.542834][ T6915] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 57.547604][ T6915] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 57.566325][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'. [ 57.569369][ T6915] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 57.634980][ T6939] loop0: detected capacity change from 0 to 256 [ 57.667177][ T6944] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 57.679164][ T6939] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 57.845029][ T1899] Bluetooth: Error in BCSP hdr checksum [ 58.490052][ T7024] loop0: detected capacity change from 0 to 128 [ 58.501579][ T7024] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.567374][ T4721] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.639655][ T7037] FAULT_INJECTION: forcing a failure. [ 58.639655][ T7037] name failslab, interval 1, probability 0, space 0, times 0 [ 58.639686][ T7037] CPU: 0 UID: 0 PID: 7037 Comm: syz.0.774 Tainted: G L syzkaller #0 PREEMPT [ 58.639699][ T7037] Tainted: [L]=SOFTLOCKUP [ 58.639703][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 58.639709][ T7037] Call trace: [ 58.639712][ T7037] show_stack+0x2c/0x3c (C) [ 58.639731][ T7037] __dump_stack+0x30/0x40 [ 58.639745][ T7037] dump_stack_lvl+0xd8/0x12c [ 58.639756][ T7037] dump_stack+0x1c/0x28 [ 58.639768][ T7037] should_fail_ex+0x418/0x58c [ 58.639782][ T7037] should_failslab+0xc4/0x120 [ 58.639795][ T7037] kmem_cache_alloc_noprof+0x94/0x5d4 [ 58.639804][ T7037] mpol_new+0x14c/0x264 [ 58.639814][ T7037] do_set_mempolicy+0xa4/0x280 [ 58.639823][ T7037] __arm64_sys_set_mempolicy+0x1a0/0x1f8 [ 58.639833][ T7037] invoke_syscall+0x98/0x244 [ 58.639845][ T7037] el0_svc_common+0xec/0x23c [ 58.639857][ T7037] do_el0_svc+0x4c/0x5c [ 58.639868][ T7037] el0_svc+0x60/0x1d8 [ 58.639881][ T7037] el0t_64_sync_handler+0x44/0x104 [ 58.639892][ T7037] el0t_64_sync+0x198/0x19c [ 58.691641][ T7039] tipc: Started in network mode [ 58.691667][ T7039] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 58.691773][ T7039] tipc: Enabled bearer , priority 0 [ 58.692820][ T7039] tipc: Rcv corrupt discovery message [ 58.788691][ T7044] Soft offlining pfn 0x12180f at process virtual address 0x20000000 [ 58.798600][ T7044] Soft offlining pfn 0x121f26 at process virtual address 0x20001000 [ 58.799708][ T7044] Soft offlining pfn 0x11e570 at process virtual address 0x20002000 [ 58.959989][ T7054] loop0: detected capacity change from 0 to 1024 [ 58.968679][ T7054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.008367][ T7054] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.064745][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.092116][ T1163] kernel write not supported for file bpf-prog (pid: 1163 comm: kworker/0:3) [ 59.104267][ T49] nci: nci_rx_work: unknown MT 0x7 [ 59.291606][ T7088] loop0: detected capacity change from 0 to 4096 [ 59.299600][ T7088] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.299661][ T7088] EXT4-fs (loop0): Test dummy encryption mode enabled [ 59.300716][ T7088] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 59.300757][ T7088] System zones: 0-5 [ 59.301599][ T7088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.337945][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.483194][ T7101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 59.596481][ T4928] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 59.745839][ T4928] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 59.746546][ T4928] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 59.746567][ T4928] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 59.746585][ T4928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.806354][ T4937] tipc: Node number set to 43690 [ 59.846259][ T4719] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 59.890238][ T7112] netlink: 'syz.4.804': attribute type 2 has an invalid length. [ 59.952998][ T4928] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 59.953118][ T4928] cxacru 1-1:1.0: probe with driver cxacru failed with error -22 [ 60.051345][ T7125] loop4: detected capacity change from 0 to 128 [ 60.051832][ T7125] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.154273][ T4928] usb 1-1: USB disconnect, device number 3 [ 60.622068][ T7131] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 60.663953][ T4937] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 60.665815][ T4937] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 60.792616][ T7145] nvme_fcloop: unknown parameter or missing value 'l' [ 60.793392][ T7145] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 60.793652][ T7145] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 60.809915][ T7145] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 61.594393][ T7153] input: syz0 as /devices/virtual/input/input2 [ 61.691202][ T7155] input: syz0 as /devices/virtual/input/input3 [ 61.831900][ T7160] loop0: detected capacity change from 0 to 512 [ 61.844046][ T7160] EXT4-fs: Ignoring removed orlov option [ 61.854124][ T7160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.861596][ T7160] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.823: corrupted xattr block 33: overlapping e_value [ 61.868855][ T7160] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.823: corrupted xattr block 33: overlapping e_value [ 61.869151][ T7160] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.823: corrupted xattr block 33: overlapping e_value [ 61.885298][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.027797][ T7064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.077759][ T7183] nvme_fcloop: unknown parameter or missing value 'l' [ 62.078499][ T7183] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 62.078657][ T7183] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 62.082089][ T7189] loop4: detected capacity change from 0 to 4096 [ 62.082468][ T7183] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 62.105033][ T7183] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 62.769829][ T7248] FAULT_INJECTION: forcing a failure. [ 62.769829][ T7248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.769851][ T7248] CPU: 1 UID: 0 PID: 7248 Comm: syz.1.860 Tainted: G L syzkaller #0 PREEMPT [ 62.769863][ T7248] Tainted: [L]=SOFTLOCKUP [ 62.769867][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 62.769872][ T7248] Call trace: [ 62.769876][ T7248] show_stack+0x2c/0x3c (C) [ 62.769895][ T7248] __dump_stack+0x30/0x40 [ 62.769911][ T7248] dump_stack_lvl+0xd8/0x12c [ 62.769927][ T7248] dump_stack+0x1c/0x28 [ 62.769938][ T7248] should_fail_ex+0x418/0x58c [ 62.769954][ T7248] should_fail+0x14/0x24 [ 62.769965][ T7248] should_fail_usercopy+0x20/0x30 [ 62.769978][ T7248] bpf_verifier_vlog+0x2f0/0xbc0 [ 62.769992][ T7248] btf_verifier_log+0x120/0x1a0 [ 62.770001][ T7248] btf_parse_hdr+0x48c/0x71c [ 62.770011][ T7248] btf_new_fd+0x288/0xa50 [ 62.770023][ T7248] bpf_btf_load+0x144/0x190 [ 62.770034][ T7248] __sys_bpf+0x7f0/0x82c [ 62.770043][ T7248] __arm64_sys_bpf+0xd0/0xec [ 62.770052][ T7248] invoke_syscall+0x98/0x244 [ 62.770064][ T7248] el0_svc_common+0xec/0x23c [ 62.770076][ T7248] do_el0_svc+0x4c/0x5c [ 62.770087][ T7248] el0_svc+0x60/0x1d8 [ 62.770099][ T7248] el0t_64_sync_handler+0x44/0x104 [ 62.770111][ T7248] el0t_64_sync+0x198/0x19c [ 62.966171][ T7257] ip_tables: iptables: counters copy to user failed while replacing table [ 63.048776][ T7260] loop0: detected capacity change from 0 to 2048 [ 63.073247][ T7260] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.200054][ T7271] FAULT_INJECTION: forcing a failure. [ 63.200054][ T7271] name failslab, interval 1, probability 0, space 0, times 0 [ 63.200078][ T7271] CPU: 0 UID: 0 PID: 7271 Comm: syz.0.869 Tainted: G L syzkaller #0 PREEMPT [ 63.200092][ T7271] Tainted: [L]=SOFTLOCKUP [ 63.200096][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 63.200101][ T7271] Call trace: [ 63.200105][ T7271] show_stack+0x2c/0x3c (C) [ 63.200124][ T7271] __dump_stack+0x30/0x40 [ 63.200137][ T7271] dump_stack_lvl+0xd8/0x12c [ 63.200149][ T7271] dump_stack+0x1c/0x28 [ 63.200160][ T7271] should_fail_ex+0x418/0x58c [ 63.200173][ T7271] should_failslab+0xc4/0x120 [ 63.200186][ T7271] __kmalloc_noprof+0x108/0x6c8 [ 63.200195][ T7271] bitmap_zalloc+0x34/0x44 [ 63.200207][ T7271] vb2_core_allocated_buffers_storage+0xd4/0x188 [ 63.200222][ T7271] vb2_core_create_bufs+0x2dc/0x9b4 [ 63.200233][ T7271] vb2_create_bufs+0x478/0x66c [ 63.200243][ T7271] v4l2_m2m_ioctl_create_bufs+0xcc/0x100 [ 63.200255][ T7271] v4l_create_bufs+0x11c/0x21c [ 63.200264][ T7271] __video_do_ioctl+0x768/0xaa8 [ 63.200272][ T7271] video_usercopy+0x74c/0xe88 [ 63.200280][ T7271] video_ioctl2+0x3c/0x50 [ 63.200288][ T7271] v4l2_ioctl+0x148/0x18c [ 63.200296][ T7271] __arm64_sys_ioctl+0x154/0x1cc [ 63.200309][ T7271] invoke_syscall+0x98/0x244 [ 63.200320][ T7271] el0_svc_common+0xec/0x23c [ 63.200332][ T7271] do_el0_svc+0x4c/0x5c [ 63.200343][ T7271] el0_svc+0x60/0x1d8 [ 63.200355][ T7271] el0t_64_sync_handler+0x44/0x104 [ 63.200366][ T7271] el0t_64_sync+0x198/0x19c [ 63.247531][ T7273] loop0: detected capacity change from 0 to 512 [ 63.250248][ T7273] ext4: Unknown parameter 'noacl' [ 63.532393][ T7276] FAULT_INJECTION: forcing a failure. [ 63.532393][ T7276] name fail_futex, interval 1, probability 0, space 0, times 1 [ 63.532419][ T7276] CPU: 0 UID: 0 PID: 7276 Comm: syz.4.871 Tainted: G L syzkaller #0 PREEMPT [ 63.532438][ T7276] Tainted: [L]=SOFTLOCKUP [ 63.532442][ T7276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 63.532448][ T7276] Call trace: [ 63.532452][ T7276] show_stack+0x2c/0x3c (C) [ 63.532472][ T7276] __dump_stack+0x30/0x40 [ 63.532486][ T7276] dump_stack_lvl+0xd8/0x12c [ 63.532497][ T7276] dump_stack+0x1c/0x28 [ 63.532509][ T7276] should_fail_ex+0x418/0x58c [ 63.532522][ T7276] should_fail+0x14/0x24 [ 63.532533][ T7276] get_futex_key+0x1ec/0x12b0 [ 63.532544][ T7276] futex_wake+0x10c/0x594 [ 63.532555][ T7276] do_futex+0x2c4/0x378 [ 63.532565][ T7276] __arm64_sys_futex+0x2e4/0x418 [ 63.532575][ T7276] invoke_syscall+0x98/0x244 [ 63.532587][ T7276] el0_svc_common+0xec/0x23c [ 63.532598][ T7276] do_el0_svc+0x4c/0x5c [ 63.532609][ T7276] el0_svc+0x60/0x1d8 [ 63.532621][ T7276] el0t_64_sync_handler+0x44/0x104 [ 63.532633][ T7276] el0t_64_sync+0x198/0x19c [ 63.629292][ T7283] loop4: detected capacity change from 0 to 512 [ 63.629868][ T7283] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.633028][ T7283] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.874: bad orphan inode 131083 [ 63.633046][ T7283] loop4: lost filesystem error report for type 5 error -117 [ 63.688712][ T7289] FAULT_INJECTION: forcing a failure. [ 63.688712][ T7289] name failslab, interval 1, probability 0, space 0, times 0 [ 63.688735][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.1.876 Tainted: G L syzkaller #0 PREEMPT [ 63.688748][ T7289] Tainted: [L]=SOFTLOCKUP [ 63.688751][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 63.688756][ T7289] Call trace: [ 63.688759][ T7289] show_stack+0x2c/0x3c (C) [ 63.688778][ T7289] __dump_stack+0x30/0x40 [ 63.688792][ T7289] dump_stack_lvl+0xd8/0x12c [ 63.688803][ T7289] dump_stack+0x1c/0x28 [ 63.688814][ T7289] should_fail_ex+0x418/0x58c [ 63.688829][ T7289] should_failslab+0xc4/0x120 [ 63.688842][ T7289] __kmalloc_noprof+0x108/0x6c8 [ 63.688851][ T7289] security_prepare_creds+0x60/0x35c [ 63.688862][ T7289] prepare_creds+0x500/0x7d0 [ 63.688875][ T7289] ovl_fill_super+0x184/0x32fc [ 63.688885][ T7289] vfs_get_super+0xb8/0x148 [ 63.688895][ T7289] get_tree_nodev+0x2c/0x3c [ 63.688910][ T7289] ovl_get_tree+0x28/0x38 [ 63.688920][ T7289] vfs_get_tree+0x90/0x28c [ 63.688929][ T7289] fc_mount+0x24/0xac [ 63.688939][ T7289] do_new_mount+0x2a4/0x538 [ 63.688950][ T7289] path_mount+0x5f0/0xa88 [ 63.688961][ T7289] do_mount+0xe8/0x148 [ 63.688971][ T7289] __arm64_sys_mount+0x33c/0x388 [ 63.688982][ T7289] invoke_syscall+0x98/0x244 [ 63.688995][ T7289] el0_svc_common+0xec/0x23c [ 63.689006][ T7289] do_el0_svc+0x4c/0x5c [ 63.689018][ T7289] el0_svc+0x60/0x1d8 [ 63.689030][ T7289] el0t_64_sync_handler+0x44/0x104 [ 63.689042][ T7289] el0t_64_sync+0x198/0x19c [ 63.715325][ T7291] nvme_fcloop: unknown parameter or missing value 'l' [ 63.722073][ T7291] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 63.722252][ T7291] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 63.727225][ T7291] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 63.748002][ T7291] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 63.837458][ T7311] tipc: Started in network mode [ 63.837480][ T7311] tipc: Node identity ac1414aa, cluster identity 4711 [ 63.838596][ T7311] tipc: New replicast peer: 172.20.20.187 [ 63.838893][ T7311] tipc: Enabled bearer , priority 10 [ 63.866181][ T7304] netlink: 32 bytes leftover after parsing attributes in process `syz.2.883'. [ 64.202516][ T7355] FAULT_INJECTION: forcing a failure. [ 64.202516][ T7355] name failslab, interval 1, probability 0, space 0, times 0 [ 64.202542][ T7355] CPU: 1 UID: 0 PID: 7355 Comm: syz.4.903 Tainted: G L syzkaller #0 PREEMPT [ 64.202554][ T7355] Tainted: [L]=SOFTLOCKUP [ 64.202557][ T7355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.202563][ T7355] Call trace: [ 64.202566][ T7355] show_stack+0x2c/0x3c (C) [ 64.202585][ T7355] __dump_stack+0x30/0x40 [ 64.202600][ T7355] dump_stack_lvl+0xd8/0x12c [ 64.202611][ T7355] dump_stack+0x1c/0x28 [ 64.202622][ T7355] should_fail_ex+0x418/0x58c [ 64.202635][ T7355] should_failslab+0xc4/0x120 [ 64.202649][ T7355] kmem_cache_alloc_node_noprof+0x98/0x604 [ 64.202658][ T7355] __alloc_skb+0x1f0/0x610 [ 64.202669][ T7355] __pskb_copy_fclone+0xb0/0xb3c [ 64.202681][ T7355] hwsim_hw_xmit+0x3a8/0x138c [ 64.202694][ T7355] ieee802154_tx+0x220/0x4e4 [ 64.202704][ T7355] ieee802154_subif_start_xmit+0xe8/0x174 [ 64.202712][ T7355] dev_hard_start_xmit+0x1dc/0x794 [ 64.202722][ T7355] sch_direct_xmit+0x1ac/0x3b0 [ 64.202733][ T7355] __dev_queue_xmit+0x10b4/0x2a68 [ 64.202743][ T7355] dgram_sendmsg+0x580/0xb6c [ 64.202754][ T7355] ieee802154_sock_sendmsg+0x94/0x110 [ 64.202767][ T7355] __sock_sendmsg+0xc8/0x17c [ 64.202776][ T7355] ____sys_sendmsg+0x3d0/0x6c8 [ 64.202787][ T7355] ___sys_sendmsg+0x198/0x224 [ 64.202798][ T7355] __sys_sendmsg+0x158/0x204 [ 64.202808][ T7355] __arm64_sys_sendmsg+0x88/0x9c [ 64.202819][ T7355] invoke_syscall+0x98/0x244 [ 64.202831][ T7355] el0_svc_common+0xec/0x23c [ 64.202843][ T7355] do_el0_svc+0x4c/0x5c [ 64.202854][ T7355] el0_svc+0x60/0x1d8 [ 64.202865][ T7355] el0t_64_sync_handler+0x44/0x104 [ 64.202877][ T7355] el0t_64_sync+0x198/0x19c [ 64.247883][ T7352] ptrace attach of ""[7359] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[7352] [ 64.307958][ T7365] FAULT_INJECTION: forcing a failure. [ 64.307958][ T7365] name failslab, interval 1, probability 0, space 0, times 0 [ 64.307985][ T7365] CPU: 1 UID: 0 PID: 7365 Comm: syz.4.906 Tainted: G L syzkaller #0 PREEMPT [ 64.308001][ T7365] Tainted: [L]=SOFTLOCKUP [ 64.308004][ T7365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.308010][ T7365] Call trace: [ 64.308013][ T7365] show_stack+0x2c/0x3c (C) [ 64.308033][ T7365] __dump_stack+0x30/0x40 [ 64.308048][ T7365] dump_stack_lvl+0xd8/0x12c [ 64.308059][ T7365] dump_stack+0x1c/0x28 [ 64.308070][ T7365] should_fail_ex+0x418/0x58c [ 64.308084][ T7365] should_failslab+0xc4/0x120 [ 64.308097][ T7365] kmem_cache_alloc_node_noprof+0x98/0x604 [ 64.308107][ T7365] __alloc_skb+0x1f0/0x610 [ 64.308119][ T7365] tipc_buf_acquire+0x34/0xe8 [ 64.308131][ T7365] named_prepare_buf+0x40/0x154 [ 64.308142][ T7365] tipc_named_withdraw+0x178/0x51c [ 64.308152][ T7365] tipc_nametbl_withdraw+0x104/0x28c [ 64.308164][ T7365] tipc_sk_withdraw+0x4a0/0x524 [ 64.308174][ T7365] tipc_sk_leave+0x138/0x1a4 [ 64.308184][ T7365] tipc_release+0x14c/0x10d0 [ 64.308193][ T7365] __sock_release+0xa0/0x1d4 [ 64.308203][ T7365] sock_close+0x24/0x38 [ 64.308214][ T7365] __fput+0x338/0x74c [ 64.308224][ T7365] fput_close_sync+0x10c/0x278 [ 64.308232][ T7365] __arm64_sys_close+0x80/0x110 [ 64.308245][ T7365] invoke_syscall+0x98/0x244 [ 64.308257][ T7365] el0_svc_common+0xec/0x23c [ 64.308269][ T7365] do_el0_svc+0x4c/0x5c [ 64.308280][ T7365] el0_svc+0x60/0x1d8 [ 64.308293][ T7365] el0t_64_sync_handler+0x44/0x104 [ 64.308304][ T7365] el0t_64_sync+0x198/0x19c [ 64.308315][ T7365] tipc: Withdrawal distribution failure [ 64.336972][ T7369] ip_tables: iptables: counters copy to user failed while replacing table [ 64.359281][ T7371] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 64.396025][ T7377] loop1: detected capacity change from 0 to 2048 [ 64.472348][ T7389] loop1: detected capacity change from 0 to 512 [ 64.474353][ T7389] EXT4-fs: Mount option(s) incompatible with ext2 [ 64.483334][ T7389] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 64.483353][ T7389] overlayfs: failed to set xattr on upper [ 64.483358][ T7389] overlayfs: ...falling back to redirect_dir=nofollow. [ 64.483363][ T7389] overlayfs: ...falling back to uuid=null. [ 64.486724][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.486753][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.499243][ T9] cfg80211: failed to load regulatory.db [ 64.515750][ T4810] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 64.585293][ T7395] loop1: detected capacity change from 0 to 4096 [ 64.685896][ T4810] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 64.686269][ T4810] usb 1-1: config 0 has no interfaces? [ 64.686283][ T4810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.688802][ T4810] usb 1-1: config 0 descriptor?? [ 64.822856][ T4727] Bluetooth: hci4: command tx timeout [ 64.853162][ T4810] tipc: Node number set to 2886997162 [ 64.955349][ T2827] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 65.012329][ T2827] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 65.101666][ T7404] fido_id[7404]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 65.116622][ T4810] kernel write not supported for file /input/event0 (pid: 4810 comm: kworker/0:6) [ 65.300840][ T7421] fuse: fd is not a fuse device [ 65.458918][ T7451] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 65.458936][ T7451] overlayfs: failed to set xattr on upper [ 65.458942][ T7451] overlayfs: ...falling back to redirect_dir=nofollow. [ 65.458947][ T7451] overlayfs: ...falling back to uuid=null. [ 65.548253][ T7465] FAULT_INJECTION: forcing a failure. [ 65.548253][ T7465] name failslab, interval 1, probability 0, space 0, times 0 [ 65.548280][ T7465] CPU: 1 UID: 0 PID: 7465 Comm: syz.4.943 Tainted: G L syzkaller #0 PREEMPT [ 65.548293][ T7465] Tainted: [L]=SOFTLOCKUP [ 65.548296][ T7465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 65.548302][ T7465] Call trace: [ 65.548305][ T7465] show_stack+0x2c/0x3c (C) [ 65.548324][ T7465] __dump_stack+0x30/0x40 [ 65.548337][ T7465] dump_stack_lvl+0xd8/0x12c [ 65.548348][ T7465] dump_stack+0x1c/0x28 [ 65.548359][ T7465] should_fail_ex+0x418/0x58c [ 65.548372][ T7465] should_failslab+0xc4/0x120 [ 65.548385][ T7465] kmem_cache_alloc_node_noprof+0x98/0x604 [ 65.548394][ T7465] __alloc_skb+0x1f0/0x610 [ 65.548406][ T7465] tipc_buf_acquire+0x34/0xe8 [ 65.548417][ T7465] tipc_msg_build+0x114/0xb70 [ 65.548427][ T7465] __tipc_sendstream+0x69c/0xfdc [ 65.548437][ T7465] tipc_sendstream+0x64/0x88 [ 65.548447][ T7465] __sock_sendmsg+0xc8/0x17c [ 65.548456][ T7465] ____sys_sendmsg+0x3d0/0x6c8 [ 65.548467][ T7465] ___sys_sendmsg+0x198/0x224 [ 65.548477][ T7465] __sys_sendmsg+0x158/0x204 [ 65.548488][ T7465] __arm64_sys_sendmsg+0x88/0x9c [ 65.548498][ T7465] invoke_syscall+0x98/0x244 [ 65.548511][ T7465] el0_svc_common+0xec/0x23c [ 65.548522][ T7465] do_el0_svc+0x4c/0x5c [ 65.548533][ T7465] el0_svc+0x60/0x1d8 [ 65.548545][ T7465] el0t_64_sync_handler+0x44/0x104 [ 65.548556][ T7465] el0t_64_sync+0x198/0x19c [ 65.890234][ T30] audit: type=1326 audit(65.870:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="syz.2.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d78868 code=0x7ffc0000 [ 65.890621][ T30] audit: type=1326 audit(65.870:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="syz.2.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb0d78868 code=0x7ffc0000 [ 65.890644][ T30] audit: type=1326 audit(65.870:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="syz.2.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb0d78868 code=0x7ffc0000 [ 65.890660][ T30] audit: type=1326 audit(65.870:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7478 comm="syz.2.952" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb0d78868 code=0x7ffc0000 [ 65.929846][ T7481] netlink: 'syz.2.953': attribute type 1 has an invalid length. [ 65.947763][ T7481] bond1: entered promiscuous mode [ 65.947951][ T7481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.961562][ T7481] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.961771][ T7481] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 65.961784][ T7481] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 65.963590][ T7481] bond1: (slave ip6gre1): making interface the new active one [ 65.963603][ T7481] ip6gre1: entered promiscuous mode [ 65.964405][ T7481] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 66.268114][ T7501] fuse: fd is not a fuse device [ 66.434107][ T7514] loop4: detected capacity change from 0 to 128 [ 66.530087][ T7521] FAULT_INJECTION: forcing a failure. [ 66.530087][ T7521] name failslab, interval 1, probability 0, space 0, times 0 [ 66.530109][ T7521] CPU: 1 UID: 0 PID: 7521 Comm: syz.4.969 Tainted: G L syzkaller #0 PREEMPT [ 66.530122][ T7521] Tainted: [L]=SOFTLOCKUP [ 66.530125][ T7521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 66.530130][ T7521] Call trace: [ 66.530133][ T7521] show_stack+0x2c/0x3c (C) [ 66.530152][ T7521] __dump_stack+0x30/0x40 [ 66.530166][ T7521] dump_stack_lvl+0xd8/0x12c [ 66.530178][ T7521] dump_stack+0x1c/0x28 [ 66.530188][ T7521] should_fail_ex+0x418/0x58c [ 66.530201][ T7521] should_failslab+0xc4/0x120 [ 66.530214][ T7521] kmem_cache_alloc_noprof+0x94/0x5d4 [ 66.530223][ T7521] cred_alloc_blank+0x24/0xb4 [ 66.530235][ T7521] keyctl_session_to_parent+0x50/0x98c [ 66.530246][ T7521] __arm64_sys_keyctl+0x2a8/0x3e8 [ 66.530256][ T7521] invoke_syscall+0x98/0x244 [ 66.530268][ T7521] el0_svc_common+0xec/0x23c [ 66.530279][ T7521] do_el0_svc+0x4c/0x5c [ 66.530290][ T7521] el0_svc+0x60/0x1d8 [ 66.530302][ T7521] el0t_64_sync_handler+0x44/0x104 [ 66.530313][ T7521] el0t_64_sync+0x198/0x19c [ 66.629417][ T1163] kernel read not supported for file /dummy_udc (pid: 1163 comm: kworker/0:3) [ 66.822178][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 66.879671][ T4727] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 66.879688][ T4727] CPU: 1 UID: 0 PID: 4727 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT [ 66.879701][ T4727] Tainted: [L]=SOFTLOCKUP [ 66.879704][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 66.879709][ T4727] Workqueue: hci1 hci_rx_work [ 66.879726][ T4727] Call trace: [ 66.879729][ T4727] show_stack+0x2c/0x3c (C) [ 66.879744][ T4727] __dump_stack+0x30/0x40 [ 66.879756][ T4727] dump_stack_lvl+0xd8/0x12c [ 66.879767][ T4727] dump_stack+0x1c/0x28 [ 66.879778][ T4727] sysfs_warn_dup+0x9c/0xb8 [ 66.879792][ T4727] sysfs_create_dir_ns+0x190/0x1f4 [ 66.879804][ T4727] kobject_add_internal+0x290/0x6f0 [ 66.879814][ T4727] kobject_add_varg+0x9c/0xe8 [ 66.879826][ T4727] kobject_add+0x110/0x1c8 [ 66.879838][ T4727] device_add+0x394/0x9e0 [ 66.879848][ T4727] hci_conn_add_sysfs+0xbc/0x1e8 [ 66.879858][ T4727] le_conn_complete_evt+0xc84/0x122c [ 66.879867][ T4727] hci_le_conn_complete_evt+0x114/0x3d8 [ 66.879879][ T4727] hci_le_meta_evt+0x2b0/0x46c [ 66.879889][ T4727] hci_event_packet+0x4c0/0x9c8 [ 66.879898][ T4727] hci_rx_work+0x2f4/0xd78 [ 66.879908][ T4727] process_scheduled_works+0x91c/0x1250 [ 66.879923][ T4727] worker_thread+0x798/0xbd0 [ 66.879934][ T4727] kthread+0x304/0x3d4 [ 66.879943][ T4727] ret_from_fork+0x10/0x20 [ 66.879960][ T4727] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 66.879977][ T4727] Bluetooth: hci1: failed to register connection device [ 66.893523][ T7566] overlayfs: failed to clone upperpath [ 67.207029][ T2827] usb 1-1: USB disconnect, device number 4 [ 67.309255][ T7596] binder: 7595:7596 ioctl c0306201 200001c0 returned -14 [ 67.378456][ T7600] loop0: detected capacity change from 0 to 128 [ 67.420666][ T7600] EXT4-fs mount: 10 callbacks suppressed [ 67.420682][ T7600] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 67.444651][ T7603] FAULT_INJECTION: forcing a failure. [ 67.444651][ T7603] name failslab, interval 1, probability 0, space 0, times 0 [ 67.444692][ T7603] CPU: 1 UID: 0 PID: 7603 Comm: syz.1.1002 Tainted: G L syzkaller #0 PREEMPT [ 67.444705][ T7603] Tainted: [L]=SOFTLOCKUP [ 67.444709][ T7603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 67.444714][ T7603] Call trace: [ 67.444717][ T7603] show_stack+0x2c/0x3c (C) [ 67.444735][ T7603] __dump_stack+0x30/0x40 [ 67.444748][ T7603] dump_stack_lvl+0xd8/0x12c [ 67.444759][ T7603] dump_stack+0x1c/0x28 [ 67.444770][ T7603] should_fail_ex+0x418/0x58c [ 67.444784][ T7603] should_failslab+0xc4/0x120 [ 67.444797][ T7603] kmem_cache_alloc_noprof+0x94/0x5d4 [ 67.444805][ T7603] do_getname+0x48/0x234 [ 67.444814][ T7603] getname_flags+0x2c/0x3c [ 67.444822][ T7603] vfs_fstatat+0x48/0xd0 [ 67.444832][ T7603] __arm64_sys_newfstatat+0x134/0x1c8 [ 67.444843][ T7603] invoke_syscall+0x98/0x244 [ 67.444855][ T7603] el0_svc_common+0xec/0x23c [ 67.444867][ T7603] do_el0_svc+0x4c/0x5c [ 67.444878][ T7603] el0_svc+0x60/0x1d8 [ 67.444890][ T7603] el0t_64_sync_handler+0x44/0x104 [ 67.444901][ T7603] el0t_64_sync+0x198/0x19c [ 67.489138][ T4721] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 67.529575][ T7607] overlayfs: failed to clone upperpath [ 67.531161][ T7607] overlayfs: failed to clone upperpath [ 67.533046][ T7610] FAULT_INJECTION: forcing a failure. [ 67.533046][ T7610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.533067][ T7610] CPU: 1 UID: 0 PID: 7610 Comm: syz.1.1005 Tainted: G L syzkaller #0 PREEMPT [ 67.533080][ T7610] Tainted: [L]=SOFTLOCKUP [ 67.533083][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 67.533089][ T7610] Call trace: [ 67.533092][ T7610] show_stack+0x2c/0x3c (C) [ 67.533111][ T7610] __dump_stack+0x30/0x40 [ 67.533123][ T7610] dump_stack_lvl+0xd8/0x12c [ 67.533135][ T7610] dump_stack+0x1c/0x28 [ 67.533146][ T7610] should_fail_ex+0x418/0x58c [ 67.533159][ T7610] should_fail+0x14/0x24 [ 67.533170][ T7610] should_fail_usercopy+0x20/0x30 [ 67.533181][ T7610] copy_from_sockptr+0x7c/0x1e0 [ 67.533193][ T7610] __cgroup_bpf_run_filter_setsockopt+0x260/0xbbc [ 67.533205][ T7610] do_sock_setsockopt+0x2e8/0x330 [ 67.533217][ T7610] __sys_setsockopt+0x104/0x170 [ 67.533228][ T7610] __arm64_sys_setsockopt+0xc8/0xe4 [ 67.533238][ T7610] invoke_syscall+0x98/0x244 [ 67.533250][ T7610] el0_svc_common+0xec/0x23c [ 67.533261][ T7610] do_el0_svc+0x4c/0x5c [ 67.533272][ T7610] el0_svc+0x60/0x1d8 [ 67.533285][ T7610] el0t_64_sync_handler+0x44/0x104 [ 67.533296][ T7610] el0t_64_sync+0x198/0x19c [ 67.551466][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1006'. [ 67.730983][ T7622] loop4: detected capacity change from 0 to 4096 [ 67.756541][ T7622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.533793][ T7653] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4722] was attempted by ""[7653] [ 68.582714][ T7657] fuse: Bad value for 'fd' [ 68.639965][ T7664] overlayfs: failed to clone upperpath [ 68.655784][ T7666] loop1: detected capacity change from 0 to 512 [ 68.682065][ T7666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.706989][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.739991][ T7680] nvme_fcloop: unknown parameter or missing value 'l' [ 68.740554][ T7680] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 68.740727][ T7680] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 68.741000][ T7680] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 68.758698][ T7680] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 69.057727][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.150071][ T7729] loop1: detected capacity change from 0 to 8 [ 69.152823][ T7729] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 69.152831][ T7729] unable to read xattr id index table [ 69.201841][ T30] audit: type=1400 audit(69.180:29): lsm=SMACK fn=smack_file_lock action=denied subject="_" object="lowerdir" requested=l pid=7732 comm="syz.3.1048" path="/246/file0" dev="tmpfs" ino=1336 [ 69.302840][ T7744] nvme_fcloop: unknown parameter or missing value 'l' [ 69.303971][ T7744] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 69.304165][ T7744] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 69.304451][ T7744] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 69.313935][ T7744] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 69.324829][ T7747] ip_tables: iptables: counters copy to user failed while replacing table [ 69.523687][ T7750] FAULT_INJECTION: forcing a failure. [ 69.523687][ T7750] name failslab, interval 1, probability 0, space 0, times 0 [ 69.523709][ T7750] CPU: 1 UID: 0 PID: 7750 Comm: syz.0.1053 Tainted: G L syzkaller #0 PREEMPT [ 69.523723][ T7750] Tainted: [L]=SOFTLOCKUP [ 69.523727][ T7750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 69.523732][ T7750] Call trace: [ 69.523735][ T7750] show_stack+0x2c/0x3c (C) [ 69.523754][ T7750] __dump_stack+0x30/0x40 [ 69.523767][ T7750] dump_stack_lvl+0xd8/0x12c [ 69.523778][ T7750] dump_stack+0x1c/0x28 [ 69.523789][ T7750] should_fail_ex+0x418/0x58c [ 69.523802][ T7750] should_failslab+0xc4/0x120 [ 69.523815][ T7750] kmem_cache_alloc_noprof+0x94/0x5d4 [ 69.523824][ T7750] sk_prot_alloc+0x60/0x1e8 [ 69.523834][ T7750] sk_alloc+0x44/0x320 [ 69.523841][ T7750] unix_create1+0xcc/0x5b0 [ 69.523852][ T7750] unix_create+0x154/0x200 [ 69.523862][ T7750] __sock_create+0x31c/0x670 [ 69.523872][ T7750] p9_fd_create_unix+0x1d0/0x42c [ 69.523882][ T7750] p9_client_create+0x338/0xa40 [ 69.523895][ T7750] v9fs_session_init+0x58/0xa7c [ 69.523908][ T7750] v9fs_get_tree+0xc4/0x8e8 [ 69.523924][ T7750] vfs_get_tree+0x90/0x28c [ 69.523935][ T7750] fc_mount+0x24/0xac [ 69.523945][ T7750] do_new_mount+0x2a4/0x538 [ 69.523957][ T7750] path_mount+0x5f0/0xa88 [ 69.523968][ T7750] do_mount+0xe8/0x148 [ 69.523978][ T7750] __arm64_sys_mount+0x33c/0x388 [ 69.523989][ T7750] invoke_syscall+0x98/0x244 [ 69.524001][ T7750] el0_svc_common+0xec/0x23c [ 69.524012][ T7750] do_el0_svc+0x4c/0x5c [ 69.524024][ T7750] el0_svc+0x60/0x1d8 [ 69.524035][ T7750] el0t_64_sync_handler+0x44/0x104 [ 69.524047][ T7750] el0t_64_sync+0x198/0x19c [ 69.524078][ T7750] 9pnet_fd: p9_fd_create_unix (7750): problem creating socket [ 69.538003][ T7752] loop4: detected capacity change from 0 to 512 [ 69.539560][ T7752] EXT4-fs: Ignoring removed nobh option [ 69.539595][ T7752] EXT4-fs: Ignoring removed i_version option [ 69.544759][ T7752] EXT4-fs: Mount option(s) incompatible with ext2 [ 69.611295][ T7756] loop4: detected capacity change from 0 to 512 [ 69.622087][ T7756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.644597][ T7756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.663779][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.814925][ T7770] fuse: fd is not a fuse device [ 69.840627][ T4719] Bluetooth: Frame is too long (len 10, expected len 4) [ 69.841307][ T4719] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 69.887207][ T7783] nvme_fcloop: unknown parameter or missing value 'l' [ 69.887880][ T7783] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 69.888090][ T7783] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 69.888331][ T7783] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 69.896506][ T7783] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 70.211782][ T7813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1076'. [ 70.211797][ T7813] FAULT_INJECTION: forcing a failure. [ 70.211797][ T7813] name failslab, interval 1, probability 0, space 0, times 0 [ 70.211812][ T7813] CPU: 1 UID: 0 PID: 7813 Comm: syz.4.1076 Tainted: G L syzkaller #0 PREEMPT [ 70.211824][ T7813] Tainted: [L]=SOFTLOCKUP [ 70.211827][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 70.211833][ T7813] Call trace: [ 70.211835][ T7813] show_stack+0x2c/0x3c (C) [ 70.211855][ T7813] __dump_stack+0x30/0x40 [ 70.211869][ T7813] dump_stack_lvl+0xd8/0x12c [ 70.211880][ T7813] dump_stack+0x1c/0x28 [ 70.211891][ T7813] should_fail_ex+0x418/0x58c [ 70.211907][ T7813] should_failslab+0xc4/0x120 [ 70.211926][ T7813] __kmalloc_noprof+0x108/0x6c8 [ 70.211935][ T7813] nft_obj_init+0x1b4/0x2ec [ 70.211948][ T7813] nf_tables_newobj+0x6a4/0x16d4 [ 70.211957][ T7813] nfnetlink_rcv+0xc8c/0x16ec [ 70.211966][ T7813] netlink_unicast+0x600/0x7f8 [ 70.211977][ T7813] netlink_sendmsg+0x648/0x948 [ 70.211988][ T7813] __sock_sendmsg+0xc8/0x17c [ 70.211999][ T7813] ____sys_sendmsg+0x3d0/0x6c8 [ 70.212010][ T7813] ___sys_sendmsg+0x198/0x224 [ 70.212020][ T7813] __sys_sendmsg+0x158/0x204 [ 70.212031][ T7813] __arm64_sys_sendmsg+0x88/0x9c [ 70.212042][ T7813] invoke_syscall+0x98/0x244 [ 70.212055][ T7813] el0_svc_common+0xec/0x23c [ 70.212066][ T7813] do_el0_svc+0x4c/0x5c [ 70.212077][ T7813] el0_svc+0x60/0x1d8 [ 70.212090][ T7813] el0t_64_sync_handler+0x44/0x104 [ 70.212101][ T7813] el0t_64_sync+0x198/0x19c [ 70.277547][ T7816] FAULT_INJECTION: forcing a failure. [ 70.277547][ T7816] name failslab, interval 1, probability 0, space 0, times 0 [ 70.277569][ T7816] CPU: 1 UID: 0 PID: 7816 Comm: syz.4.1077 Tainted: G L syzkaller #0 PREEMPT [ 70.277581][ T7816] Tainted: [L]=SOFTLOCKUP [ 70.277584][ T7816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 70.277589][ T7816] Call trace: [ 70.277593][ T7816] show_stack+0x2c/0x3c (C) [ 70.277612][ T7816] __dump_stack+0x30/0x40 [ 70.277624][ T7816] dump_stack_lvl+0xd8/0x12c [ 70.277636][ T7816] dump_stack+0x1c/0x28 [ 70.277647][ T7816] should_fail_ex+0x418/0x58c [ 70.277660][ T7816] should_failslab+0xc4/0x120 [ 70.277673][ T7816] kmem_cache_alloc_noprof+0x94/0x5d4 [ 70.277681][ T7816] __kernfs_new_node+0xf0/0x7d8 [ 70.277692][ T7816] kernfs_new_node+0xe8/0x130 [ 70.277705][ T7816] __kernfs_create_file+0x60/0x2e0 [ 70.277716][ T7816] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 70.277728][ T7816] internal_create_group+0x550/0xb30 [ 70.277740][ T7816] internal_create_groups+0x64/0x138 [ 70.277753][ T7816] sysfs_create_groups+0x2c/0x3c [ 70.277765][ T7816] net_rx_queue_update_kobjects+0x214/0x66c [ 70.277778][ T7816] netdev_register_kobject+0x210/0x328 [ 70.277789][ T7816] register_netdevice+0xd74/0x14c0 [ 70.277802][ T7816] bond_newlink+0x50/0xd8 [ 70.277811][ T7816] rtnl_newlink_create+0x294/0x6b8 [ 70.277821][ T7816] rtnl_newlink+0xfe4/0x138c [ 70.277830][ T7816] rtnetlink_rcv_msg+0x66c/0x9bc [ 70.277839][ T7816] netlink_rcv_skb+0x238/0x414 [ 70.277850][ T7816] rtnetlink_rcv+0x28/0x38 [ 70.277859][ T7816] netlink_unicast+0x600/0x7f8 [ 70.277868][ T7816] netlink_sendmsg+0x648/0x948 [ 70.277879][ T7816] __sock_sendmsg+0xc8/0x17c [ 70.277889][ T7816] ____sys_sendmsg+0x3d0/0x6c8 [ 70.277899][ T7816] ___sys_sendmsg+0x198/0x224 [ 70.277910][ T7816] __sys_sendmsg+0x158/0x204 [ 70.277926][ T7816] __arm64_sys_sendmsg+0x88/0x9c [ 70.277937][ T7816] invoke_syscall+0x98/0x244 [ 70.277949][ T7816] el0_svc_common+0xec/0x23c [ 70.277961][ T7816] do_el0_svc+0x4c/0x5c [ 70.277972][ T7816] el0_svc+0x60/0x1d8 [ 70.277984][ T7816] el0t_64_sync_handler+0x44/0x104 [ 70.277995][ T7816] el0t_64_sync+0x198/0x19c [ 70.301009][ T7821] overlayfs: failed to clone upperpath [ 70.303567][ T7816] bond1 (unregistered): Released all slaves [ 70.414139][ T7837] loop1: detected capacity change from 0 to 256 [ 70.459236][ T7840] FAULT_INJECTION: forcing a failure. [ 70.459236][ T7840] name failslab, interval 1, probability 0, space 0, times 0 [ 70.459261][ T7840] CPU: 1 UID: 0 PID: 7840 Comm: syz.0.1086 Tainted: G L syzkaller #0 PREEMPT [ 70.459275][ T7840] Tainted: [L]=SOFTLOCKUP [ 70.459279][ T7840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 70.459284][ T7840] Call trace: [ 70.459287][ T7840] show_stack+0x2c/0x3c (C) [ 70.459308][ T7840] __dump_stack+0x30/0x40 [ 70.459320][ T7840] dump_stack_lvl+0xd8/0x12c [ 70.459331][ T7840] dump_stack+0x1c/0x28 [ 70.459342][ T7840] should_fail_ex+0x418/0x58c [ 70.459355][ T7840] should_failslab+0xc4/0x120 [ 70.459368][ T7840] kmem_cache_alloc_noprof+0x94/0x5d4 [ 70.459377][ T7840] __kernfs_new_node+0xf0/0x7d8 [ 70.459387][ T7840] kernfs_new_node+0xe8/0x130 [ 70.459397][ T7840] __kernfs_create_file+0x60/0x2e0 [ 70.459408][ T7840] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 70.459419][ T7840] internal_create_group+0x550/0xb30 [ 70.459432][ T7840] internal_create_groups+0x64/0x138 [ 70.459444][ T7840] sysfs_create_groups+0x2c/0x3c [ 70.459456][ T7840] device_add_attrs+0x17c/0x4e4 [ 70.459466][ T7840] device_add+0x420/0x9e0 [ 70.459474][ T7840] wakeup_source_sysfs_add+0x1b4/0x2a4 [ 70.459487][ T7840] wakeup_source_register+0x158/0x2fc [ 70.459497][ T7840] ep_create_wakeup_source+0xf4/0x240 [ 70.459510][ T7840] ep_insert+0xab8/0x12d4 [ 70.459521][ T7840] do_epoll_ctl_file+0xa0c/0xbd4 [ 70.459532][ T7840] do_epoll_ctl+0xa0/0x140 [ 70.459542][ T7840] __arm64_sys_epoll_ctl+0x164/0x1b8 [ 70.459554][ T7840] invoke_syscall+0x98/0x244 [ 70.459566][ T7840] el0_svc_common+0xec/0x23c [ 70.459577][ T7840] do_el0_svc+0x4c/0x5c [ 70.459588][ T7840] el0_svc+0x60/0x1d8 [ 70.459600][ T7840] el0t_64_sync_handler+0x44/0x104 [ 70.459611][ T7840] el0t_64_sync+0x198/0x19c [ 70.478616][ T7837] syz.1.1085: attempt to access beyond end of device [ 70.478616][ T7837] loop1: rw=2049, sector=1808, nr_sectors = 24 limit=256 [ 70.479369][ T7837] syz.1.1085: attempt to access beyond end of device [ 70.479369][ T7837] loop1: rw=2049, sector=1864, nr_sectors = 32 limit=256 [ 70.479449][ T7837] syz.1.1085: attempt to access beyond end of device [ 70.479449][ T7837] loop1: rw=2049, sector=1928, nr_sectors = 36 limit=256 [ 70.484579][ T7837] syz.1.1085: attempt to access beyond end of device [ 70.484579][ T7837] loop1: rw=2049, sector=1768, nr_sectors = 8 limit=256 [ 70.508658][ T7837] syz.1.1085: attempt to access beyond end of device [ 70.508658][ T7837] loop1: rw=8390657, sector=1772, nr_sectors = 4 limit=256 [ 70.508678][ T7837] Buffer I/O error on dev loop1, logical block 443, lost async page write [ 70.508751][ T7837] syz.1.1085: attempt to access beyond end of device [ 70.508751][ T7837] loop1: rw=2049, sector=1776, nr_sectors = 56 limit=256 [ 70.509165][ T7837] syz.1.1085: attempt to access beyond end of device [ 70.509165][ T7837] loop1: rw=2049, sector=1864, nr_sectors = 32 limit=256 [ 70.509299][ T7837] syz.1.1085: attempt to access beyond end of device [ 70.509299][ T7837] loop1: rw=2049, sector=1928, nr_sectors = 40 limit=256 [ 70.521114][ T7837] syz.1.1085: attempt to access beyond end of device [ 70.521114][ T7837] loop1: rw=8390657, sector=1768, nr_sectors = 4 limit=256 [ 70.521151][ T7837] Buffer I/O error on dev loop1, logical block 442, lost async page write [ 70.564675][ T7847] bridge1: entered allmulticast mode [ 70.597871][ T7853] FAULT_INJECTION: forcing a failure. [ 70.597871][ T7853] name failslab, interval 1, probability 0, space 0, times 0 [ 70.597892][ T7853] CPU: 1 UID: 0 PID: 7853 Comm: syz.0.1092 Tainted: G L syzkaller #0 PREEMPT [ 70.597905][ T7853] Tainted: [L]=SOFTLOCKUP [ 70.597908][ T7853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 70.597913][ T7853] Call trace: [ 70.597921][ T7853] show_stack+0x2c/0x3c (C) [ 70.597943][ T7853] __dump_stack+0x30/0x40 [ 70.597957][ T7853] dump_stack_lvl+0xd8/0x12c [ 70.597969][ T7853] dump_stack+0x1c/0x28 [ 70.597980][ T7853] should_fail_ex+0x418/0x58c [ 70.597993][ T7853] should_failslab+0xc4/0x120 [ 70.598006][ T7853] __kmalloc_noprof+0x108/0x6c8 [ 70.598015][ T7853] kernfs_fop_write_iter+0x144/0x3b8 [ 70.598027][ T7853] vfs_write+0x51c/0xa0c [ 70.598040][ T7853] ksys_write+0x12c/0x228 [ 70.598051][ T7853] __arm64_sys_write+0x84/0x98 [ 70.598064][ T7853] invoke_syscall+0x98/0x244 [ 70.598076][ T7853] el0_svc_common+0xec/0x23c [ 70.598087][ T7853] do_el0_svc+0x4c/0x5c [ 70.598099][ T7853] el0_svc+0x60/0x1d8 [ 70.598111][ T7853] el0t_64_sync_handler+0x44/0x104 [ 70.598122][ T7853] el0t_64_sync+0x198/0x19c [ 70.768343][ T7887] fuse: fd is not a fuse device [ 70.864062][ T7905] FAULT_INJECTION: forcing a failure. [ 70.864062][ T7905] name failslab, interval 1, probability 0, space 0, times 0 [ 70.864083][ T7905] CPU: 1 UID: 0 PID: 7905 Comm: syz.0.1113 Tainted: G L syzkaller #0 PREEMPT [ 70.864095][ T7905] Tainted: [L]=SOFTLOCKUP [ 70.864099][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 70.864104][ T7905] Call trace: [ 70.864106][ T7905] show_stack+0x2c/0x3c (C) [ 70.864125][ T7905] __dump_stack+0x30/0x40 [ 70.864138][ T7905] dump_stack_lvl+0xd8/0x12c [ 70.864149][ T7905] dump_stack+0x1c/0x28 [ 70.864160][ T7905] should_fail_ex+0x418/0x58c [ 70.864174][ T7905] should_failslab+0xc4/0x120 [ 70.864188][ T7905] __kmalloc_cache_noprof+0x94/0x5fc [ 70.864197][ T7905] __request_module+0x2dc/0x670 [ 70.864207][ T7905] nvmf_dev_write+0x164c/0x20a0 [ 70.864216][ T7905] vfs_write+0x2a4/0xa0c [ 70.864229][ T7905] ksys_write+0x12c/0x228 [ 70.864241][ T7905] __arm64_sys_write+0x84/0x98 [ 70.864253][ T7905] invoke_syscall+0x98/0x244 [ 70.864266][ T7905] el0_svc_common+0xec/0x23c [ 70.864277][ T7905] do_el0_svc+0x4c/0x5c [ 70.864288][ T7905] el0_svc+0x60/0x1d8 [ 70.864300][ T7905] el0t_64_sync_handler+0x44/0x104 [ 70.864311][ T7905] el0t_64_sync+0x198/0x19c [ 70.864323][ T7905] nvme_fabrics: missing parameter 'transport=%s' [ 70.864327][ T7905] nvme_fabrics: missing parameter 'nqn=%s' [ 70.955694][ T7917] fuse: fd is not a fuse device [ 70.996168][ T7922] overlayfs: failed to clone upperpath [ 71.032067][ T7927] FAULT_INJECTION: forcing a failure. [ 71.032067][ T7927] name failslab, interval 1, probability 0, space 0, times 0 [ 71.032088][ T7927] CPU: 1 UID: 0 PID: 7927 Comm: syz.0.1122 Tainted: G L syzkaller #0 PREEMPT [ 71.032104][ T7927] Tainted: [L]=SOFTLOCKUP [ 71.032108][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 71.032113][ T7927] Call trace: [ 71.032117][ T7927] show_stack+0x2c/0x3c (C) [ 71.032139][ T7927] __dump_stack+0x30/0x40 [ 71.032152][ T7927] dump_stack_lvl+0xd8/0x12c [ 71.032163][ T7927] dump_stack+0x1c/0x28 [ 71.032174][ T7927] should_fail_ex+0x418/0x58c [ 71.032187][ T7927] should_failslab+0xc4/0x120 [ 71.032200][ T7927] kmem_cache_alloc_noprof+0x94/0x5d4 [ 71.032208][ T7927] radix_tree_node_alloc+0xa0/0x348 [ 71.032222][ T7927] radix_tree_extend+0x160/0x458 [ 71.032233][ T7927] idr_get_free+0x130/0x830 [ 71.032245][ T7927] idr_alloc_u32+0x134/0x2a4 [ 71.032256][ T7927] idr_alloc+0x84/0xf0 [ 71.032267][ T7927] loop_add+0x1ec/0x8e4 [ 71.032276][ T7927] loop_control_ioctl+0x138/0x510 [ 71.032284][ T7927] __arm64_sys_ioctl+0x154/0x1cc [ 71.032297][ T7927] invoke_syscall+0x98/0x244 [ 71.032308][ T7927] el0_svc_common+0xec/0x23c [ 71.032320][ T7927] do_el0_svc+0x4c/0x5c [ 71.032331][ T7927] el0_svc+0x60/0x1d8 [ 71.032341][ T7927] el0t_64_sync_handler+0x44/0x104 [ 71.032353][ T7927] el0t_64_sync+0x198/0x19c [ 71.104295][ T7936] loop0: detected capacity change from 0 to 128 [ 71.105099][ T7936] EXT4-fs (loop0): Test dummy encryption mode enabled [ 71.111351][ T7936] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.149463][ T4721] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.487408][ T7955] nvme_fcloop: unknown parameter or missing value 'l' [ 71.488045][ T7955] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 71.488213][ T7955] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 71.488488][ T7955] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 71.504363][ T7955] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 71.847861][ T7967] process 'syz.2.1140' launched '/dev/fd/3' with NULL argv: empty string added [ 71.898343][ T7971] nvme_fcloop: unknown parameter or missing value 'l' [ 71.899046][ T7971] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 71.899502][ T7971] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 71.914194][ T7971] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 72.074492][ T7974] misc userio: Can't change port proto on an already running userio instance [ 72.142539][ T7984] nvme_fcloop: unknown parameter or missing value 'l' [ 72.143222][ T7984] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 72.143390][ T7984] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 72.143638][ T7984] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 72.155763][ T7984] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 72.247708][ T7994] loop4: detected capacity change from 0 to 128 [ 72.250607][ T7994] EXT4-fs (loop4): Test dummy encryption mode enabled [ 72.263481][ T7994] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.300523][ T4715] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.672869][ T8036] fuse: Bad value for 'fd' [ 72.759930][ T8050] nvme_fcloop: unknown parameter or missing value 'l' [ 72.760846][ T8050] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 72.761115][ T8050] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 72.769356][ T8050] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 73.084725][ T8056] fuse: fd is not a fuse device [ 73.135564][ T2827] atkbd serio0: keyboard reset failed on [ 73.233393][ T8074] fuse: fd is not a fuse device [ 73.249046][ T8076] netlink: 'syz.3.1184': attribute type 4 has an invalid length. [ 73.277372][ T8080] nvme_fcloop: unknown parameter or missing value 'l' [ 73.278110][ T8080] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 73.278347][ T8080] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 73.278632][ T8080] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 73.291877][ T8080] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 73.519218][ T8087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.795820][ T14] tipc: Subscription rejected, illegal request [ 73.925546][ T4719] Bluetooth: hci4: command 0x2016 tx timeout [ 74.076315][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 74.119093][ T8122] fuse: Bad value for 'fd' [ 74.137798][ T8124] overlayfs: failed to clone upperpath [ 74.250272][ T8143] ip_tables: iptables: counters copy to user failed while replacing table [ 74.251196][ T8143] ip_tables: iptables: counters copy to user failed while replacing table [ 74.274743][ T8145] fuse: fd is not a fuse device [ 74.351231][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.351398][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.425231][ T8153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.431027][ T8153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.708164][ T8186] bridge0: port 3(syz_tun) entered blocking state [ 74.708201][ T8186] bridge0: port 3(syz_tun) entered disabled state [ 74.708310][ T8186] syz_tun: entered allmulticast mode [ 74.708837][ T8186] syz_tun: entered promiscuous mode [ 74.709102][ T8186] bridge0: port 3(syz_tun) entered blocking state [ 74.709133][ T8186] bridge0: port 3(syz_tun) entered forwarding state [ 74.715557][ T1899] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.715940][ T1899] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.715960][ T1899] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.715976][ T1899] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.750643][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1222'. [ 74.769635][ T8190] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 74.772593][ T8190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.788396][ T8195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1224'. [ 74.788417][ T8195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 75.012292][ T8224] fuse: Bad value for 'fd' [ 75.055372][ T8230] random: crng reseeded on system resumption [ 75.059872][ T8230] FAULT_INJECTION: forcing a failure. [ 75.059872][ T8230] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 75.059898][ T8230] CPU: 1 UID: 0 PID: 8230 Comm: syz.0.1236 Tainted: G L syzkaller #0 PREEMPT [ 75.059922][ T8230] Tainted: [L]=SOFTLOCKUP [ 75.059926][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 75.059932][ T8230] Call trace: [ 75.059936][ T8230] show_stack+0x2c/0x3c (C) [ 75.059958][ T8230] __dump_stack+0x30/0x40 [ 75.059972][ T8230] dump_stack_lvl+0xd8/0x12c [ 75.059984][ T8230] dump_stack+0x1c/0x28 [ 75.059995][ T8230] should_fail_ex+0x418/0x58c [ 75.060008][ T8230] should_fail_alloc_page+0xec/0x10c [ 75.060021][ T8230] prepare_alloc_pages+0x194/0x484 [ 75.060030][ T8230] __alloc_frozen_pages_noprof+0x180/0x578 [ 75.060039][ T8230] alloc_pages_mpol+0x1fc/0x3d0 [ 75.060049][ T8230] alloc_frozen_pages_noprof+0xc4/0x10c [ 75.060058][ T8230] alloc_pages_noprof+0x30/0x148 [ 75.060067][ T8230] get_free_pages_noprof+0x1c/0xbc [ 75.060076][ T8230] get_zeroed_page_noprof+0x18/0x24 [ 75.060084][ T8230] get_image_page+0x30/0x1f8 [ 75.060093][ T8230] alloc_rtree_node+0x48/0xac [ 75.060102][ T8230] memory_bm_create+0x3ec/0x60c [ 75.060110][ T8230] create_basic_memory_bitmaps+0x88/0x34c [ 75.060118][ T8230] snapshot_open+0x18c/0x270 [ 75.060128][ T8230] misc_open+0x2dc/0x338 [ 75.060140][ T8230] chrdev_open+0x398/0x3e8 [ 75.060151][ T8230] do_dentry_open+0x5c4/0xfbc [ 75.060162][ T8230] vfs_open+0x44/0x2dc [ 75.060173][ T8230] path_openat+0x1084/0x18f0 [ 75.060183][ T8230] do_file_open+0x1c8/0x2e8 [ 75.060192][ T8230] do_sys_openat2+0x114/0x1e8 [ 75.060204][ T8230] do_sys_open+0xb0/0xe0 [ 75.060214][ T8230] __arm64_sys_openat+0xa8/0xc4 [ 75.060226][ T8230] invoke_syscall+0x98/0x244 [ 75.060238][ T8230] el0_svc_common+0xec/0x23c [ 75.060249][ T8230] do_el0_svc+0x4c/0x5c [ 75.060260][ T8230] el0_svc+0x60/0x1d8 [ 75.060272][ T8230] el0t_64_sync_handler+0x44/0x104 [ 75.060283][ T8230] el0t_64_sync+0x198/0x19c [ 75.118609][ T8233] FAULT_INJECTION: forcing a failure. [ 75.118609][ T8233] name failslab, interval 1, probability 0, space 0, times 0 [ 75.118631][ T8233] CPU: 0 UID: 0 PID: 8233 Comm: syz.0.1237 Tainted: G L syzkaller #0 PREEMPT [ 75.118644][ T8233] Tainted: [L]=SOFTLOCKUP [ 75.118648][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 75.118654][ T8233] Call trace: [ 75.118658][ T8233] show_stack+0x2c/0x3c (C) [ 75.118678][ T8233] __dump_stack+0x30/0x40 [ 75.118691][ T8233] dump_stack_lvl+0xd8/0x12c [ 75.118703][ T8233] dump_stack+0x1c/0x28 [ 75.118715][ T8233] should_fail_ex+0x418/0x58c [ 75.118728][ T8233] should_failslab+0xc4/0x120 [ 75.118741][ T8233] __kmalloc_cache_noprof+0x94/0x5fc [ 75.118751][ T8233] __hw_addr_create+0x70/0x234 [ 75.118762][ T8233] __hw_addr_add_ex+0x1b0/0x460 [ 75.118771][ T8233] __dev_mc_add+0x9c/0x10c [ 75.118781][ T8233] dev_mc_add+0x2c/0x3c [ 75.118790][ T8233] igmp_group_added+0x18c/0x4c4 [ 75.118801][ T8233] ____ip_mc_inc_group+0xafc/0xd64 [ 75.118812][ T8233] __ip_mc_join_group+0x3d4/0x4d0 [ 75.118822][ T8233] ip_mc_join_group_ssm+0x34/0x48 [ 75.118833][ T8233] do_ip_setsockopt+0x1734/0x2628 [ 75.118846][ T8233] ip_setsockopt+0x80/0x128 [ 75.118857][ T8233] udp_setsockopt+0xa8/0xc0 [ 75.118867][ T8233] sock_common_setsockopt+0xb0/0xcc [ 75.118878][ T8233] do_sock_setsockopt+0x1f0/0x330 [ 75.118889][ T8233] __sys_setsockopt+0x104/0x170 [ 75.118900][ T8233] __arm64_sys_setsockopt+0xc8/0xe4 [ 75.118916][ T8233] invoke_syscall+0x98/0x244 [ 75.118929][ T8233] el0_svc_common+0xec/0x23c [ 75.118941][ T8233] do_el0_svc+0x4c/0x5c [ 75.118952][ T8233] el0_svc+0x60/0x1d8 [ 75.118965][ T8233] el0t_64_sync_handler+0x44/0x104 [ 75.118977][ T8233] el0t_64_sync+0x198/0x19c [ 75.190238][ T8239] fuse: fd is not a fuse device [ 75.308191][ T8254] syzkaller1: entered promiscuous mode [ 75.308211][ T8254] syzkaller1: entered allmulticast mode [ 75.470036][ T8259] evm: overlay not supported [ 75.766834][ T4727] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 76.252529][ T8281] nvme_fcloop: unknown parameter or missing value 'l' [ 76.253326][ T8281] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 76.253583][ T8281] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 76.261069][ T8281] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 76.521484][ T8292] fuse: Bad value for 'fd' [ 76.664982][ T1732] IPVS: starting estimator thread 0... [ 76.745535][ T8307] IPVS: using max 61 ests per chain, 146400 per kthread [ 77.713655][ T8316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1268'. [ 77.722416][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1268'. [ 77.813411][ T8327] FAULT_INJECTION: forcing a failure. [ 77.813411][ T8327] name failslab, interval 1, probability 0, space 0, times 0 [ 77.813455][ T8327] CPU: 0 UID: 0 PID: 8327 Comm: syz.0.1272 Tainted: G L syzkaller #0 PREEMPT [ 77.813472][ T8327] Tainted: [L]=SOFTLOCKUP [ 77.813476][ T8327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 77.813482][ T8327] Call trace: [ 77.813485][ T8327] show_stack+0x2c/0x3c (C) [ 77.813506][ T8327] __dump_stack+0x30/0x40 [ 77.813521][ T8327] dump_stack_lvl+0xd8/0x12c [ 77.813533][ T8327] dump_stack+0x1c/0x28 [ 77.813544][ T8327] should_fail_ex+0x418/0x58c [ 77.813557][ T8327] should_failslab+0xc4/0x120 [ 77.813570][ T8327] __kmalloc_noprof+0x108/0x6c8 [ 77.813579][ T8327] vb2_core_allocated_buffers_storage+0x70/0x188 [ 77.813593][ T8327] vb2_core_reqbufs+0x580/0xe0c [ 77.813605][ T8327] vb2_ioctl_reqbufs+0x1d8/0x344 [ 77.813615][ T8327] v4l_reqbufs+0x110/0x188 [ 77.813624][ T8327] __video_do_ioctl+0x768/0xaa8 [ 77.813632][ T8327] video_usercopy+0x74c/0xe88 [ 77.813640][ T8327] video_ioctl2+0x3c/0x50 [ 77.813648][ T8327] v4l2_ioctl+0x148/0x18c [ 77.813656][ T8327] __arm64_sys_ioctl+0x154/0x1cc [ 77.813668][ T8327] invoke_syscall+0x98/0x244 [ 77.813681][ T8327] el0_svc_common+0xec/0x23c [ 77.813692][ T8327] do_el0_svc+0x4c/0x5c [ 77.813703][ T8327] el0_svc+0x60/0x1d8 [ 77.813715][ T8327] el0t_64_sync_handler+0x44/0x104 [ 77.813727][ T8327] el0t_64_sync+0x198/0x19c [ 77.865985][ T8333] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 77.866001][ T8333] binder: 8330:8333 ioctl 4018620d 20000100 returned -1 [ 77.875297][ T8333] binder: 8330:8333 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 77.875976][ T8333] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 77.875985][ T8333] binder: 8330:8333 ioctl 4018620d 20004a80 returned -1 [ 77.876191][ T8333] binder: 8330:8333 Acquire 1 refcount change on invalid ref 0 ret -22 [ 77.876449][ T8333] binder: 8330:8333 got transaction to invalid handle, 1 [ 77.876506][ T8333] binder: 8330:8333 cannot find target node [ 77.876523][ T8333] binder: 8330:8333 transaction async to 0:0 failed 2/29201/-22, code 0 size 0-0 line 3253 [ 77.876688][ T8164] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.897745][ T8335] loop4: detected capacity change from 0 to 128 [ 77.905366][ T8335] EXT4-fs (loop4): Test dummy encryption mode enabled [ 77.922526][ T8335] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.944279][ T8345] netlink: 'syz.2.1277': attribute type 1 has an invalid length. [ 77.962936][ T8345] 8021q: adding VLAN 0 to HW filter on device bond3 [ 77.985912][ T8343] TC_ACT_REPEAT abuse ? [ 77.994038][ T4715] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.032017][ T8345] bond3: (slave geneve2): making interface the new active one [ 78.033106][ T8345] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 78.104110][ T8358] fuse: fd is not a fuse device [ 78.132887][ T8362] loop0: detected capacity change from 0 to 4096 [ 78.164761][ T8362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.582330][ T4727] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 78.669313][ T8388] overlayfs: failed to clone upperpath [ 78.745310][ T4928] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.750196][ T4928] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.839265][ T8415] fuse: fd is not a fuse device [ 78.990164][ T8429] loop4: detected capacity change from 0 to 128 [ 78.994516][ T8429] EXT4-fs (loop4): Test dummy encryption mode enabled [ 79.007793][ T8429] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.023657][ T8424] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1303'. [ 79.047909][ T4715] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.460780][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.762451][ T8476] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 79.762465][ T8476] binder: 8475:8476 ioctl 4018620d 200000c0 returned -1 [ 79.764289][ T8476] binder: 8475:8476 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 79.764302][ T8476] binder: 8475:8476 unknown command 0 [ 79.764309][ T8476] binder: 8475:8476 ioctl c0306201 20000080 returned -22 [ 79.765427][ T8476] binder: BINDER_SET_CONTEXT_MGR bad uid 0 != 60929 [ 79.776358][ T8476] binder: 8475:8476 ioctl 4018620d 20000040 returned -1 [ 79.778742][ T8476] binder: 8475:8476 Acquire 1 refcount change on invalid ref 0 ret -22 [ 79.780741][ T8476] binder: 8475:8476 got transaction to invalid handle, 1 [ 79.780753][ T8476] binder: 8475:8476 cannot find target node [ 79.780765][ T8476] binder: 8475:8476 transaction call to 0:0 failed 3/29201/-22, code 0 size 104-3992 line 3253 [ 79.781068][ T8163] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.901247][ T8489] nvme_fcloop: unknown parameter or missing value 'l' [ 79.902078][ T8489] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 79.902317][ T8489] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 79.902755][ T8489] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 79.913698][ T8489] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 80.009420][ T8494] loop4: detected capacity change from 0 to 4096 [ 80.010530][ T8494] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.012328][ T8494] EXT4-fs (loop4): Test dummy encryption mode enabled [ 80.020742][ T8494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.089683][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.133001][ T8501] ip_tables: iptables: counters copy to user failed while replacing table [ 80.158219][ T8504] fuse: fd is not a fuse device [ 80.246017][ T8510] loop1: detected capacity change from 0 to 128 [ 80.253181][ T8510] EXT4-fs (loop1): Test dummy encryption mode enabled [ 80.267595][ T8510] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.357176][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.603257][ T8517] mount: server 127. not responding, timed out [ 80.768320][ T8528] IPVS: nq: TCP 127.0.0.1:21 - no destination available [ 80.782773][ T8530] nvme_fcloop: unknown parameter or missing value 'l' [ 80.785245][ T8530] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 80.791014][ T8530] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 80.792179][ T8530] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 80.830732][ T8530] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 80.903414][ T8533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.903670][ T8533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.291924][ T8550] loop1: detected capacity change from 0 to 128 [ 81.301589][ T8550] EXT4-fs (loop1): Test dummy encryption mode enabled [ 81.313051][ T8552] loop0: detected capacity change from 0 to 8 [ 81.316888][ T8550] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.383673][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.496275][ T8563] binder: 8559:8563 tried to acquire reference to desc 0, got 1 instead [ 81.496524][ T8563] binder: 8559:8563 got transaction with invalid parent offset [ 81.496533][ T8563] binder: 8563:8559 failed to fixup parent [ 81.496666][ T8563] binder: 8559:8563 transaction call to 8559:0 failed 8/29201/-22, code 0 size 120-24 line 3718 [ 81.500140][ T4937] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.518815][ T8567] nvme_fcloop: unknown parameter or missing value 'l' [ 81.519436][ T8567] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 81.519602][ T8567] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 81.519857][ T8567] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 81.522510][ T8562] ptrace attach of ""[8570] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[8562] [ 81.645883][ T8567] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 82.200308][ T8586] loop1: detected capacity change from 0 to 512 [ 82.206991][ T8586] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.1372: iget: bad i_size value: 38620345925642 [ 82.207020][ T8586] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.207744][ T8586] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.1372: couldn't read orphan inode 15 (err -117) [ 82.207760][ T8586] loop1: lost filesystem error report for type 5 error -117 [ 82.209973][ T8586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.333285][ T8596] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.1372: bg 0: block 5: invalid block bitmap [ 82.347714][ T8596] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1028 with error 28 [ 82.347735][ T8596] EXT4-fs (loop1): This should not happen!! Data will be lost [ 82.347735][ T8596] [ 82.347743][ T8596] EXT4-fs (loop1): Total free blocks count 0 [ 82.347750][ T8596] EXT4-fs (loop1): Free/Dirty block details [ 82.347761][ T8596] EXT4-fs (loop1): free_blocks=0 [ 82.347769][ T8596] EXT4-fs (loop1): dirty_blocks=2554 [ 82.347776][ T8596] EXT4-fs (loop1): Block reservation details [ 82.347782][ T8596] EXT4-fs (loop1): i_reserved_data_blocks=2554 [ 82.433395][ T1891] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1028 with max blocks 1524 with error 28 [ 82.508289][ T8612] netlink: 'syz.1.1370': attribute type 1 has an invalid length. [ 82.602718][ T8625] ip_tables: iptables: counters copy to user failed while replacing table [ 82.611618][ T8626] ip_tables: iptables: counters copy to user failed while replacing table [ 82.685515][ T8627] ptrace attach of ""[8629] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[8627] [ 83.061643][ T8651] FAULT_INJECTION: forcing a failure. [ 83.061643][ T8651] name failslab, interval 1, probability 0, space 0, times 0 [ 83.061673][ T8651] CPU: 1 UID: 0 PID: 8651 Comm: syz.1.1387 Tainted: G L syzkaller #0 PREEMPT [ 83.061689][ T8651] Tainted: [L]=SOFTLOCKUP [ 83.061693][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 83.061698][ T8651] Call trace: [ 83.061701][ T8651] show_stack+0x2c/0x3c (C) [ 83.061722][ T8651] __dump_stack+0x30/0x40 [ 83.061735][ T8651] dump_stack_lvl+0xd8/0x12c [ 83.061746][ T8651] dump_stack+0x1c/0x28 [ 83.061757][ T8651] should_fail_ex+0x418/0x58c [ 83.061770][ T8651] should_failslab+0xc4/0x120 [ 83.061783][ T8651] kmem_cache_alloc_noprof+0x94/0x5d4 [ 83.061792][ T8651] __proc_create+0x348/0x788 [ 83.061802][ T8651] proc_create_reg+0x88/0x110 [ 83.061813][ T8651] proc_create_seq_private+0x5c/0x12c [ 83.061823][ T8651] htable_create+0x3b8/0x750 [ 83.061841][ T8651] hashlimit_mt_check_common+0x5f0/0x970 [ 83.061852][ T8651] hashlimit_mt_check_v1+0x1d0/0x324 [ 83.061863][ T8651] xt_check_match+0x4f4/0xaa4 [ 83.061873][ T8651] translate_table+0xf58/0x17f8 [ 83.061885][ T8651] do_ipt_set_ctl+0x908/0xc38 [ 83.061896][ T8651] nf_setsockopt+0xa0/0xe4 [ 83.061904][ T8651] ip_setsockopt+0x118/0x128 [ 83.061922][ T8651] sctp_setsockopt+0x148/0xe70 [ 83.061932][ T8651] sock_common_setsockopt+0xb0/0xcc [ 83.061943][ T8651] do_sock_setsockopt+0x1f0/0x330 [ 83.061954][ T8651] __sys_setsockopt+0x104/0x170 [ 83.061964][ T8651] __arm64_sys_setsockopt+0xc8/0xe4 [ 83.061975][ T8651] invoke_syscall+0x98/0x244 [ 83.061987][ T8651] el0_svc_common+0xec/0x23c [ 83.061998][ T8651] do_el0_svc+0x4c/0x5c [ 83.062009][ T8651] el0_svc+0x60/0x1d8 [ 83.062021][ T8651] el0t_64_sync_handler+0x44/0x104 [ 83.062032][ T8651] el0t_64_sync+0x198/0x19c [ 83.305410][ T8663] fuse: Bad value for 'fd' [ 83.324397][ T8665] fuse: Bad value for 'fd' [ 83.435472][ T8674] overlayfs: failed to clone upperpath [ 83.445153][ T8671] C: renamed from lo (while UP) [ 83.449879][ T8671] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 83.467023][ T8677] FAULT_INJECTION: forcing a failure. [ 83.467023][ T8677] name failslab, interval 1, probability 0, space 0, times 0 [ 83.467049][ T8677] CPU: 0 UID: 0 PID: 8677 Comm: syz.4.1398 Tainted: G L syzkaller #0 PREEMPT [ 83.467064][ T8677] Tainted: [L]=SOFTLOCKUP [ 83.467068][ T8677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 83.467074][ T8677] Call trace: [ 83.467078][ T8677] show_stack+0x2c/0x3c (C) [ 83.467099][ T8677] __dump_stack+0x30/0x40 [ 83.467111][ T8677] dump_stack_lvl+0xd8/0x12c [ 83.467123][ T8677] dump_stack+0x1c/0x28 [ 83.467134][ T8677] should_fail_ex+0x418/0x58c [ 83.467147][ T8677] should_failslab+0xc4/0x120 [ 83.467161][ T8677] __kmalloc_cache_noprof+0x94/0x5fc [ 83.467170][ T8677] limit_mt_check+0x1e0/0x4e4 [ 83.467183][ T8677] xt_check_match+0x4f4/0xaa4 [ 83.467193][ T8677] translate_table+0x1054/0x18f4 [ 83.467205][ T8677] do_ip6t_set_ctl+0x908/0xc38 [ 83.467216][ T8677] nf_setsockopt+0xa0/0xe4 [ 83.467223][ T8677] ipv6_setsockopt+0x130/0x16c [ 83.467233][ T8677] rawv6_setsockopt+0x204/0x4c4 [ 83.467244][ T8677] sock_common_setsockopt+0xb0/0xcc [ 83.467255][ T8677] do_sock_setsockopt+0x1f0/0x330 [ 83.467266][ T8677] __sys_setsockopt+0x104/0x170 [ 83.467276][ T8677] __arm64_sys_setsockopt+0xc8/0xe4 [ 83.467287][ T8677] invoke_syscall+0x98/0x244 [ 83.467299][ T8677] el0_svc_common+0xec/0x23c [ 83.467311][ T8677] do_el0_svc+0x4c/0x5c [ 83.467322][ T8677] el0_svc+0x60/0x1d8 [ 83.467334][ T8677] el0t_64_sync_handler+0x44/0x104 [ 83.467346][ T8677] el0t_64_sync+0x198/0x19c [ 83.540625][ T8684] nvme_fcloop: unknown parameter or missing value 'l' [ 83.541915][ T8684] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 83.542117][ T8684] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 83.559837][ T8684] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 83.571288][ T8684] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 83.637822][ T8697] fuse: Bad value for 'fd' [ 83.780874][ T8704] ptrace attach of ""[8712] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[8704] [ 83.822493][ T8716] FAULT_INJECTION: forcing a failure. [ 83.822493][ T8716] name failslab, interval 1, probability 0, space 0, times 0 [ 83.822517][ T8716] CPU: 1 UID: 0 PID: 8716 Comm: syz.4.1413 Tainted: G L syzkaller #0 PREEMPT [ 83.822530][ T8716] Tainted: [L]=SOFTLOCKUP [ 83.822533][ T8716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 83.822538][ T8716] Call trace: [ 83.822541][ T8716] show_stack+0x2c/0x3c (C) [ 83.822561][ T8716] __dump_stack+0x30/0x40 [ 83.822573][ T8716] dump_stack_lvl+0xd8/0x12c [ 83.822584][ T8716] dump_stack+0x1c/0x28 [ 83.822595][ T8716] should_fail_ex+0x418/0x58c [ 83.822608][ T8716] should_failslab+0xc4/0x120 [ 83.822621][ T8716] __kmalloc_cache_noprof+0x94/0x5fc [ 83.822630][ T8716] percpu_ref_init+0xcc/0x2f0 [ 83.822641][ T8716] blkg_alloc+0xf8/0x6cc [ 83.822652][ T8716] blkcg_init_disk+0x198/0x290 [ 83.822663][ T8716] __alloc_disk_node+0x260/0x494 [ 83.822675][ T8716] __blk_alloc_disk+0xec/0x1a8 [ 83.822687][ T8716] dm_create+0x3ec/0xd94 [ 83.822697][ T8716] dev_create+0x108/0x258 [ 83.822706][ T8716] dm_ctl_ioctl+0x884/0xbbc [ 83.822714][ T8716] __arm64_sys_ioctl+0x154/0x1cc [ 83.822727][ T8716] invoke_syscall+0x98/0x244 [ 83.822739][ T8716] el0_svc_common+0xec/0x23c [ 83.822751][ T8716] do_el0_svc+0x4c/0x5c [ 83.822762][ T8716] el0_svc+0x60/0x1d8 [ 83.822774][ T8716] el0t_64_sync_handler+0x44/0x104 [ 83.822786][ T8716] el0t_64_sync+0x198/0x19c [ 83.968436][ T8733] nvme_fcloop: unknown parameter or missing value 'l' [ 83.969257][ T8733] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 83.969427][ T8733] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 83.969684][ T8733] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 83.988452][ T8733] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 84.151127][ T8745] nvme_fcloop: unknown parameter or missing value 'l' [ 84.151739][ T8745] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 84.151927][ T8745] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 84.152342][ T8745] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 84.166460][ T8745] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 84.213030][ T8748] loop1: detected capacity change from 0 to 128 [ 84.214796][ T8748] EXT4-fs (loop1): Test dummy encryption mode enabled [ 84.223620][ T8748] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.274956][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.599814][ T8761] overlayfs: failed to clone upperpath [ 85.406897][ T8779] loop4: detected capacity change from 0 to 4096 [ 85.412080][ T8779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.897463][ T4727] Bluetooth: hci0: link tx timeout [ 85.898524][ T4727] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 85.992794][ T8788] fuse: Bad value for 'fd' [ 86.090064][ T8800] overlayfs: failed to clone upperpath [ 86.324616][ T8820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.325111][ T8820] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.327533][ T8820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.340599][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.341166][ T8820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.342663][ T8820] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.342677][ T8820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.344084][ T8820] veth1_vlan: left promiscuous mode [ 86.344388][ T8820] veth0_vlan: left promiscuous mode [ 86.344869][ T8820] veth0_vlan: entered promiscuous mode [ 86.345775][ T8820] veth1_vlan: entered promiscuous mode [ 86.347829][ T8820] veth1_macvtap: left promiscuous mode [ 86.348148][ T8820] veth0_macvtap: left promiscuous mode [ 86.348411][ T8820] veth0_macvtap: entered promiscuous mode [ 86.348724][ T8820] veth1_macvtap: entered promiscuous mode [ 86.352356][ T8820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.352763][ T8820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.353146][ T8820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.353630][ T8820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.354726][ T1899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.354786][ T1899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.354813][ T1899] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.354841][ T1899] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.358154][ T1671] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.358179][ T1671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.358741][ T1671] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.358759][ T1671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.392691][ T8165] syz2: Port: 1 Link ACTIVE [ 87.482542][ T4715] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.535627][ T8752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 87.580650][ T8842] FAULT_INJECTION: forcing a failure. [ 87.580650][ T8842] name fail_futex, interval 1, probability 0, space 0, times 0 [ 87.580675][ T8842] CPU: 0 UID: 0 PID: 8842 Comm: syz.1.1457 Tainted: G L syzkaller #0 PREEMPT [ 87.580687][ T8842] Tainted: [L]=SOFTLOCKUP [ 87.580691][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 87.580696][ T8842] Call trace: [ 87.580699][ T8842] show_stack+0x2c/0x3c (C) [ 87.580718][ T8842] __dump_stack+0x30/0x40 [ 87.580732][ T8842] dump_stack_lvl+0xd8/0x12c [ 87.580743][ T8842] dump_stack+0x1c/0x28 [ 87.580754][ T8842] should_fail_ex+0x418/0x58c [ 87.580769][ T8842] should_fail+0x14/0x24 [ 87.580780][ T8842] get_futex_key+0x1ec/0x12b0 [ 87.580791][ T8842] futex_wake+0x10c/0x594 [ 87.580802][ T8842] do_futex+0x2c4/0x378 [ 87.580812][ T8842] __arm64_sys_futex+0x2e4/0x418 [ 87.580823][ T8842] invoke_syscall+0x98/0x244 [ 87.580835][ T8842] el0_svc_common+0xec/0x23c [ 87.580846][ T8842] do_el0_svc+0x4c/0x5c [ 87.580857][ T8842] el0_svc+0x60/0x1d8 [ 87.580870][ T8842] el0t_64_sync_handler+0x44/0x104 [ 87.580884][ T8842] el0t_64_sync+0x198/0x19c [ 87.692949][ T8855] loop1: detected capacity change from 0 to 128 [ 87.741796][ T8855] EXT4-fs (loop1): Test dummy encryption mode enabled [ 87.777879][ T8855] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.812520][ T4716] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.824559][ T8870] nvme_fcloop: unknown parameter or missing value 'l' [ 87.829917][ T8870] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 87.841223][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'. [ 87.869847][ T8870] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 87.870226][ T8870] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 87.888017][ T8870] nvme_fc: nvme_fc_create_ctrl: nn-0x2000000010000001:pn-0x2000000010000002 - nn-0x1000000010000001:pn-0x1000000010000002 combination not found [ 87.889872][ T8876] loop1: detected capacity change from 0 to 1024 [ 87.894813][ T8876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.928665][ T4719] Bluetooth: hci0: command 0x0406 tx timeout [ 88.253368][ T4716] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.301749][ T8884] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1470'. [ 88.302324][ T8889] loop1: detected capacity change from 0 to 1024 [ 88.354875][ T8889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.395079][ T4937] ------------[ cut here ]------------ [ 89.395091][ T4937] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 89.395212][ T4937] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x410/0x440, CPU#1: kworker/1:5/4937 [ 89.406036][ T4937] Modules linked in: [ 89.406798][ T4937] CPU: 1 UID: 0 PID: 4937 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT [ 89.409097][ T4937] Tainted: [L]=SOFTLOCKUP [ 89.410027][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 89.412303][ T4937] Workqueue: events drm_fb_helper_damage_work [ 89.413677][ T4937] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 89.415427][ T4937] pc : drm_crtc_wait_one_vblank+0x410/0x440 [ 89.416551][ T4937] lr : drm_crtc_wait_one_vblank+0x408/0x440 [ 89.417757][ T4937] sp : ffff8000a85d7820 [ 89.418624][ T4937] x29: ffff8000a85d78d0 x28: dfff800000000000 x27: ffff0000c6a88080 [ 89.420354][ T4937] x26: ffff8000a85d7820 x25: dfff800000000000 x24: ffff7000150baf04 [ 89.422078][ T4937] x23: ffff800086eca3e0 x22: ffff0000c6a7e000 x21: ffff800086f51720 [ 89.423490][ T4937] x20: ffff0000c6578000 x19: 0000000000000000 x18: 1fffe00035bd7428 [ 89.425188][ T4937] x17: 0000000000000003 x16: ffff800088a77000 x15: ffff800088b27700 [ 89.426823][ T4937] x14: 000000000000125b x13: 0000000000000001 x12: 0000000000000003 [ 89.428467][ T4937] x11: 0000000000000000 x10: 0000000000000002 x9 : 1727bdfcf5fad900 [ 89.430345][ T4937] x8 : 1727bdfcf5fad900 x7 : ffff800080482944 x6 : 0000000000000000 [ 89.432079][ T4937] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3620 [ 89.433657][ T4937] x2 : 0000000100000000 x1 : 0000000000000000 x0 : ffff0000c6578000 [ 89.435454][ T4937] Call trace: [ 89.436158][ T4937] drm_crtc_wait_one_vblank+0x410/0x440 (P) [ 89.437286][ T4937] drm_client_modeset_wait_for_vblank+0xc4/0xec [ 89.438661][ T4937] drm_fb_helper_damage_work+0x520/0xbc0 [ 89.439783][ T4937] process_scheduled_works+0x91c/0x1250 [ 89.440790][ T4937] worker_thread+0x798/0xbd0 [ 89.441667][ T4937] kthread+0x304/0x3d4 [ 89.442514][ T4937] ret_from_fork+0x10/0x20 [ 89.443480][ T4937] irq event stamp: 114610 [ 89.444407][ T4937] hardirqs last enabled at (114609): [] vprintk_store+0x924/0xb94 [ 89.446416][ T4937] hardirqs last disabled at (114610): [] el1_brk64+0x20/0x54 [ 89.448548][ T4937] softirqs last enabled at (114250): [] handle_softirqs+0xb2c/0xcbc [ 89.450879][ T4937] softirqs last disabled at (114195): [] __do_softirq+0x14/0x20 [ 89.453079][ T4937] ---[ end trace 0000000000000000 ]--- [ 90.462428][ T4937] ------------[ cut here ]------------ [ 90.462442][ T4937] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 90.462563][ T4937] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x410/0x440, CPU#1: kworker/1:5/4937 [ 90.467663][ T4937] Modules linked in: [ 90.468424][ T4937] CPU: 1 UID: 0 PID: 4937 Comm: kworker/1:5 Tainted: G W L syzkaller #0 PREEMPT [ 90.470562][ T4937] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 90.471647][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 90.473820][ T4937] Workqueue: events drm_fb_helper_damage_work [ 90.475281][ T4937] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 90.477080][ T4937] pc : drm_crtc_wait_one_vblank+0x410/0x440 [ 90.478283][ T4937] lr : drm_crtc_wait_one_vblank+0x408/0x440 [ 90.479371][ T4937] sp : ffff8000a85d7820 [ 90.480246][ T4937] x29: ffff8000a85d78d0 x28: dfff800000000000 x27: ffff0000c6a88080 [ 90.481712][ T4937] x26: ffff8000a85d7820 x25: dfff800000000000 x24: ffff7000150baf04 [ 90.483416][ T4937] x23: ffff800086eca3e0 x22: ffff0000c6a7e000 x21: ffff800086f51720 [ 90.485174][ T4937] x20: ffff0000c6578000 x19: 0000000000000000 x18: 1fffe00035bd7428 [ 90.487027][ T4937] x17: 0000000000000003 x16: ffff800088a77000 x15: ffff800088b27700 [ 90.488667][ T4937] x14: 00000000000012a0 x13: 0000000000000001 x12: 0000000000000003 [ 90.490487][ T4937] x11: 0000000000000000 x10: 0000000000000002 x9 : 1727bdfcf5fad900 [ 90.492196][ T4937] x8 : 1727bdfcf5fad900 x7 : ffff800080482944 x6 : 0000000000000000 [ 90.494098][ T4937] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3620 [ 90.496050][ T4937] x2 : 0000000100000000 x1 : 0000000000000000 x0 : ffff0000c6578000 [ 90.497802][ T4937] Call trace: [ 90.498500][ T4937] drm_crtc_wait_one_vblank+0x410/0x440 (P) [ 90.499734][ T4937] drm_client_modeset_wait_for_vblank+0xc4/0xec [ 90.500984][ T4937] drm_fb_helper_damage_work+0x520/0xbc0 [ 90.502284][ T4937] process_scheduled_works+0x91c/0x1250 [ 90.503614][ T4937] worker_thread+0x798/0xbd0 [ 90.504569][ T4937] kthread+0x304/0x3d4 [ 90.505487][ T4937] ret_from_fork+0x10/0x20 [ 90.506351][ T4937] irq event stamp: 114714 [ 90.507149][ T4937] hardirqs last enabled at (114713): [] vprintk_store+0x924/0xb94 [ 90.509020][ T4937] hardirqs last disabled at (114714): [] el1_brk64+0x20/0x54 [ 90.510702][ T4937] softirqs last enabled at (114668): [] handle_softirqs+0xb2c/0xcbc [ 90.512559][ T4937] softirqs last disabled at (114613): [] __do_softirq+0x14/0x20 [ 90.514436][ T4937] ---[ end trace 0000000000000000 ]--- [ 91.572190][ T4937] ------------[ cut here ]------------ [ 91.572204][ T4937] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 91.572326][ T4937] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x410/0x440, CPU#1: kworker/1:5/4937 [ 91.578047][ T4937] Modules linked in: [ 91.578989][ T4937] CPU: 1 UID: 0 PID: 4937 Comm: kworker/1:5 Tainted: G W L syzkaller #0 PREEMPT [ 91.581422][ T4937] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 91.582430][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 91.584265][ T4937] Workqueue: events drm_fb_helper_damage_work [ 91.585615][ T4937] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 91.587081][ T4937] pc : drm_crtc_wait_one_vblank+0x410/0x440 [ 91.588386][ T4937] lr : drm_crtc_wait_one_vblank+0x408/0x440 [ 91.589637][ T4937] sp : ffff8000a85d7820 [ 91.590507][ T4937] x29: ffff8000a85d78d0 x28: dfff800000000000 x27: ffff0000c6a88080 [ 91.592440][ T4937] x26: ffff8000a85d7820 x25: dfff800000000000 x24: ffff7000150baf04 [ 91.594384][ T4937] x23: ffff800086eca3e0 x22: ffff0000c6a7e000 x21: ffff800086f51720 [ 91.596363][ T4937] x20: ffff0000c6578000 x19: 0000000000000000 x18: 1fffe00035bd7428 [ 91.598213][ T4937] x17: 0000000000000003 x16: ffff800088a77000 x15: 0000000000000000 [ 91.599919][ T4937] x14: 00000000000012e5 x13: 0000000000000001 x12: 0000000000000003 [ 91.601820][ T4937] x11: 0000000000000000 x10: 0000000000000002 x9 : 1727bdfcf5fad900 [ 91.603656][ T4937] x8 : 1727bdfcf5fad900 x7 : ffff800080482944 x6 : 0000000000000000 [ 91.605370][ T4937] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3620 [ 91.607099][ T4937] x2 : 0000000100000000 x1 : 0000000000000000 x0 : ffff0000c6578000 [ 91.608703][ T4937] Call trace: [ 91.609426][ T4937] drm_crtc_wait_one_vblank+0x410/0x440 (P) [ 91.610546][ T4937] drm_client_modeset_wait_for_vblank+0xc4/0xec [ 91.611799][ T4937] drm_fb_helper_damage_work+0x520/0xbc0 [ 91.613014][ T4937] process_scheduled_works+0x91c/0x1250 [ 91.614191][ T4937] worker_thread+0x798/0xbd0 [ 91.615230][ T4937] kthread+0x304/0x3d4 [ 91.616094][ T4937] ret_from_fork+0x10/0x20 [ 91.616967][ T4937] irq event stamp: 114826 [ 91.617876][ T4937] hardirqs last enabled at (114825): [] vprintk_store+0x924/0xb94 [ 91.619930][ T4937] hardirqs last disabled at (114826): [] el1_brk64+0x20/0x54 [ 91.621906][ T4937] softirqs last enabled at (114780): [] handle_softirqs+0xb2c/0xcbc [ 91.624062][ T4937] softirqs last disabled at (114717): [] __do_softirq+0x14/0x20 [ 91.626094][ T4937] ---[ end trace 0000000000000000 ]--- [ 92.731509][ T4937] ------------[ cut here ]------------ [ 92.731520][ T4937] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 92.731641][ T4937] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x410/0x440, CPU#1: kworker/1:5/4937 [ 92.736677][ T4937] Modules linked in: [ 92.737520][ T4937] CPU: 1 UID: 0 PID: 4937 Comm: kworker/1:5 Tainted: G W L syzkaller #0 PREEMPT [ 92.739740][ T4937] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 92.740803][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 92.742968][ T4937] Workqueue: events drm_fb_helper_damage_work [ 92.744280][ T4937] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 92.745883][ T4937] pc : drm_crtc_wait_one_vblank+0x410/0x440 [ 92.747010][ T4937] lr : drm_crtc_wait_one_vblank+0x408/0x440 [ 92.748159][ T4937] sp : ffff8000a85d7820 [ 92.748914][ T4937] x29: ffff8000a85d78d0 x28: dfff800000000000 x27: ffff0000c6a88080 [ 92.750461][ T4937] x26: ffff8000a85d7820 x25: dfff800000000000 x24: ffff7000150baf04 [ 92.752043][ T4937] x23: ffff800086eca3e0 x22: ffff0000c6a7e000 x21: ffff800086f51720 [ 92.753760][ T4937] x20: ffff0000c6578000 x19: 0000000000000000 x18: 1fffe00035bd7428 [ 92.755489][ T4937] x17: 0000000000000003 x16: ffff800088a77000 x15: ffff800088b27700 [ 92.756995][ T4937] x14: 000000000000132a x13: 0000000000000001 x12: 0000000000000003 [ 92.758437][ T4937] x11: 0000000000000000 x10: 0000000000000002 x9 : 1727bdfcf5fad900 [ 92.760100][ T4937] x8 : 1727bdfcf5fad900 x7 : ffff800080482944 x6 : 0000000000000000 [ 92.761809][ T4937] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3620 [ 92.763442][ T4937] x2 : 0000000100000000 x1 : 0000000000000000 x0 : ffff0000c6578000 [ 92.765115][ T4937] Call trace: [ 92.765866][ T4937] drm_crtc_wait_one_vblank+0x410/0x440 (P) [ 92.767195][ T4937] drm_client_modeset_wait_for_vblank+0xc4/0xec [ 92.768727][ T4937] drm_fb_helper_damage_work+0x520/0xbc0 [ 92.769959][ T4937] process_scheduled_works+0x91c/0x1250 [ 92.771234][ T4937] worker_thread+0x798/0xbd0 [ 92.772329][ T4937] kthread+0x304/0x3d4 [ 92.773308][ T4937] ret_from_fork+0x10/0x20 [ 92.774265][ T4937] irq event stamp: 114936 [ 92.775197][ T4937] hardirqs last enabled at (114935): [] vprintk_store+0x924/0xb94 [ 92.777113][ T4937] hardirqs last disabled at (114936): [] el1_brk64+0x20/0x54 [ 92.778969][ T4937] softirqs last enabled at (114890): [] handle_softirqs+0xb2c/0xcbc [ 92.781181][ T4937] softirqs last disabled at (114829): [] __do_softirq+0x14/0x20 [ 92.783177][ T4937] ---[ end trace 0000000000000000 ]--- [ 93.891506][ T4937] ------------[ cut here ]------------ [ 93.891519][ T4937] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 93.891647][ T4937] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x410/0x440, CPU#1: kworker/1:5/4937 [ 93.896740][ T4937] Modules linked in: [ 93.897494][ T4937] CPU: 1 UID: 0 PID: 4937 Comm: kworker/1:5 Tainted: G W L syzkaller #0 PREEMPT [ 93.899512][ T4937] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 93.900513][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 93.902474][ T4937] Workqueue: events drm_fb_helper_damage_work [ 93.903696][ T4937] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 93.905343][ T4937] pc : drm_crtc_wait_one_vblank+0x410/0x440 [ 93.906568][ T4937] lr : drm_crtc_wait_one_vblank+0x408/0x440 [ 93.907737][ T4937] sp : ffff8000a85d7820 [ 93.908601][ T4937] x29: ffff8000a85d78d0 x28: dfff800000000000 x27: ffff0000c6a88080 [ 93.910291][ T4937] x26: ffff8000a85d7820 x25: dfff800000000000 x24: ffff7000150baf04 [ 93.911984][ T4937] x23: ffff800086eca3e0 x22: ffff0000c6a7e000 x21: ffff800086f51720 [ 93.913700][ T4937] x20: ffff0000c6578000 x19: 0000000000000000 x18: 1fffe00035bd7428 [ 93.915256][ T4937] x17: 0000000000000003 x16: ffff800088a77000 x15: ffff800088b27700 [ 93.916960][ T4937] x14: 000000000000136f x13: 0000000000000001 x12: 0000000000000003 [ 93.918651][ T4937] x11: 0000000000000000 x10: 0000000000000002 x9 : 1727bdfcf5fad900 [ 93.920358][ T4937] x8 : 1727bdfcf5fad900 x7 : ffff800080482944 x6 : 0000000000000000 [ 93.922294][ T4937] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3620 [ 93.924259][ T4937] x2 : 0000000100000000 x1 : 0000000000000000 x0 : ffff0000c6578000 [ 93.926146][ T4937] Call trace: [ 93.926736][ T4937] drm_crtc_wait_one_vblank+0x410/0x440 (P) [ 93.927881][ T4937] drm_client_modeset_wait_for_vblank+0xc4/0xec [ 93.929213][ T4937] drm_fb_helper_damage_work+0x520/0xbc0 [ 93.930437][ T4937] process_scheduled_works+0x91c/0x1250 [ 93.931556][ T4937] worker_thread+0x798/0xbd0 [ 93.932555][ T4937] kthread+0x304/0x3d4 [ 93.933442][ T4937] ret_from_fork+0x10/0x20 [ 93.934284][ T4937] irq event stamp: 114984 [ 93.935232][ T4937] hardirqs last enabled at (114983): [] vprintk_store+0x924/0xb94 [ 93.937335][ T4937] hardirqs last disabled at (114984): [] el1_brk64+0x20/0x54 [ 93.939389][ T4937] softirqs last enabled at (114890): [] handle_softirqs+0xb2c/0xcbc [ 93.941244][ T4937] softirqs last disabled at (114829): [] __do_softirq+0x14/0x20 [ 93.943237][ T4937] ---[ end trace 0000000000000000 ]--- [ 95.006021][ T4937] ------------[ cut here ]------------ [ 95.006033][ T4937] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 95.006161][ T4937] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x410/0x440, CPU#1: kworker/1:5/4937 [ 95.011007][ T4937] Modules linked in: [ 95.011786][ T4937] CPU: 1 UID: 0 PID: 4937 Comm: kworker/1:5 Tainted: G W L syzkaller #0 PREEMPT [ 95.014002][ T4937] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 95.015155][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 95.017447][ T4937] Workqueue: events drm_fb_helper_damage_work [ 95.018871][ T4937] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 95.020663][ T4937] pc : drm_crtc_wait_one_vblank+0x410/0x440 [ 95.021962][ T4937] lr : drm_crtc_wait_one_vblank+0x408/0x440 [ 95.023291][ T4937] sp : ffff8000a85d7820 [ 95.024143][ T4937] x29: ffff8000a85d78d0 x28: dfff800000000000 x27: ffff0000c6a88080 [ 95.025803][ T4937] x26: ffff8000a85d7820 x25: dfff800000000000 x24: ffff7000150baf04 [ 95.027417][ T4937] x23: ffff800086eca3e0 x22: ffff0000c6a7e000 x21: ffff800086f51720 [ 95.029178][ T4937] x20: ffff0000c6578000 x19: 0000000000000000 x18: 1fffe00035bd7428 [ 95.030823][ T4937] x17: 0000000000000003 x16: ffff800088a77000 x15: ffff800088b27700 [ 95.032282][ T4937] x14: 00000000000013b4 x13: 0000000000000001 x12: 0000000000000003 [ 95.034095][ T4937] x11: 0000000000000000 x10: 0000000000000002 x9 : 1727bdfcf5fad900 [ 95.035982][ T4937] x8 : 1727bdfcf5fad900 x7 : ffff800080482944 x6 : 0000000000000000 [ 95.037788][ T4937] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3620 [ 95.039391][ T4937] x2 : 0000000100000000 x1 : 0000000000000000 x0 : ffff0000c6578000 [ 95.041219][ T4937] Call trace: [ 95.041849][ T4937] drm_crtc_wait_one_vblank+0x410/0x440 (P) [ 95.043096][ T4937] drm_client_modeset_wait_for_vblank+0xc4/0xec [ 95.044570][ T4937] drm_fb_helper_damage_work+0x520/0xbc0 [ 95.045873][ T4937] process_scheduled_works+0x91c/0x1250 [ 95.047061][ T4937] worker_thread+0x798/0xbd0 [ 95.048157][ T4937] kthread+0x304/0x3d4 [ 95.049154][ T4937] ret_from_fork+0x10/0x20 [ 95.050207][ T4937] irq event stamp: 115032 [ 95.051213][ T4937] hardirqs last enabled at (115031): [] vprintk_store+0x924/0xb94 [ 95.053386][ T4937] hardirqs last disabled at (115032): [] el1_brk64+0x20/0x54 [ 95.055599][ T4937] softirqs last enabled at (114890): [] handle_softirqs+0xb2c/0xcbc [ 95.057564][ T4937] softirqs last disabled at (114829): [] __do_softirq+0x14/0x20 [ 95.059463][ T4937] ---[ end trace 0000000000000000 ]--- [ 96.171764][ T4937] ------------[ cut here ]------------ [ 96.171776][ T4937] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 96.171907][ T4937] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x410/0x440, CPU#1: kworker/1:5/4937 [ 96.177016][ T4937] Modules linked in: [ 96.177742][ T4937] CPU: 1 UID: 0 PID: 4937 Comm: kworker/1:5 Tainted: G W L syzkaller #0 PREEMPT [ 96.179819][ T4937] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 96.180893][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 96.182974][ T4937] Workqueue: events drm_fb_helper_damage_work [ 96.184261][ T4937] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.185768][ T4937] pc : drm_crtc_wait_one_vblank+0x410/0x440 [ 96.186862][ T4937] lr : drm_crtc_wait_one_vblank+0x408/0x440 [ 96.188105][ T4937] sp : ffff8000a85d7820 [ 96.188978][ T4937] x29: ffff8000a85d78d0 x28: dfff800000000000 x27: ffff0000c6a88080 [ 96.190552][ T4937] x26: ffff8000a85d7820 x25: dfff800000000000 x24: ffff7000150baf04 [ 96.192164][ T4937] x23: ffff800086eca3e0 x22: ffff0000c6a7e000 x21: ffff800086f51720 [ 96.193793][ T4937] x20: ffff0000c6578000 x19: 0000000000000000 x18: 1fffe00035bd7428 [ 96.195363][ T4937] x17: 0000000000000003 x16: ffff800088a77000 x15: ffff800088b27700 [ 96.196888][ T4937] x14: 00000000000013f9 x13: 0000000000000001 x12: 0000000000000003 [ 96.198447][ T4937] x11: 0000000000000000 x10: 0000000000000002 x9 : 1727bdfcf5fad900 [ 96.200225][ T4937] x8 : 1727bdfcf5fad900 x7 : ffff800080482944 x6 : 0000000000000000 [ 96.202019][ T4937] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3620 [ 96.203750][ T4937] x2 : 0000000100000000 x1 : 0000000000000000 x0 : ffff0000c6578000 [ 96.205543][ T4937] Call trace: [ 96.206258][ T4937] drm_crtc_wait_one_vblank+0x410/0x440 (P) [ 96.207531][ T4937] drm_client_modeset_wait_for_vblank+0xc4/0xec [ 96.208885][ T4937] drm_fb_helper_damage_work+0x520/0xbc0 [ 96.210020][ T4937] process_scheduled_works+0x91c/0x1250 [ 96.211252][ T4937] worker_thread+0x798/0xbd0 [ 96.212293][ T4937] kthread+0x304/0x3d4 [ 96.213121][ T4937] ret_from_fork+0x10/0x20 [ 96.214083][ T4937] irq event stamp: 115080 [ 96.215034][ T4937] hardirqs last enabled at (115079): [] vprintk_store+0x924/0xb94 [ 96.217147][ T4937] hardirqs last disabled at (115080): [] el1_brk64+0x20/0x54 [ 96.219168][ T4937] softirqs last enabled at (114890): [] handle_softirqs+0xb2c/0xcbc [ 96.221347][ T4937] softirqs last disabled at (114829): [] __do_softirq+0x14/0x20 [ 96.223382][ T4937] ---[ end trace 0000000000000000 ]--- [ 97.338961][ T4937] ------------[ cut here ]------------ [ 97.338972][ T4937] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 97.339100][ T4937] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x410/0x440, CPU#1: kworker/1:5/4937 [ 97.344544][ T4937] Modules linked in: [ 97.345464][ T4937] CPU: 1 UID: 0 PID: 4937 Comm: kworker/1:5 Tainted: G W L syzkaller #0 PREEMPT [ 97.347970][ T4937] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 97.349235][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 97.351607][ T4937] Workqueue: events drm_fb_helper_damage_work [ 97.352938][ T4937] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 97.354816][ T4937] pc : drm_crtc_wait_one_vblank+0x410/0x440 [ 97.356207][ T4937] lr : drm_crtc_wait_one_vblank+0x408/0x440 [ 97.357573][ T4937] sp : ffff8000a85d7820 [ 97.358543][ T4937] x29: ffff8000a85d78d0 x28: dfff800000000000 x27: ffff0000c6a88080 [ 97.360377][ T4937] x26: ffff8000a85d7820 x25: dfff800000000000 x24: ffff7000150baf04 [ 97.362125][ T4937] x23: ffff800086eca3e0 x22: ffff0000c6a7e000 x21: ffff800086f51720 [ 97.363960][ T4937] x20: ffff0000c6578000 x19: 0000000000000000 x18: 1fffe00035bd7428 [ 97.365819][ T4937] x17: 0000000000000003 x16: ffff800088a77000 x15: ffff800088b27700 [ 97.367682][ T4937] x14: 000000000000143e x13: 0000000000000001 x12: 0000000000000003 [ 97.369539][ T4937] x11: 0000000000000000 x10: 0000000000000002 x9 : 1727bdfcf5fad900 [ 97.371334][ T4937] x8 : 1727bdfcf5fad900 x7 : ffff800080482944 x6 : 0000000000000000 [ 97.373026][ T4937] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3620 [ 97.374794][ T4937] x2 : 0000000100000000 x1 : 0000000000000000 x0 : ffff0000c6578000 [ 97.376562][ T4937] Call trace: [ 97.377287][ T4937] drm_crtc_wait_one_vblank+0x410/0x440 (P) [ 97.378626][ T4937] drm_client_modeset_wait_for_vblank+0xc4/0xec [ 97.380027][ T4937] drm_fb_helper_damage_work+0x520/0xbc0 [ 97.381196][ T4937] process_scheduled_works+0x91c/0x1250 [ 97.382423][ T4937] worker_thread+0x798/0xbd0 [ 97.383406][ T4937] kthread+0x304/0x3d4 [ 97.384296][ T4937] ret_from_fork+0x10/0x20 [ 97.385261][ T4937] irq event stamp: 115216 [ 97.386218][ T4937] hardirqs last enabled at (115215): [] vprintk_store+0x924/0xb94 [ 97.388261][ T4937] hardirqs last disabled at (115216): [] el1_brk64+0x20/0x54 [ 97.390240][ T4937] softirqs last enabled at (115136): [] handle_softirqs+0xb2c/0xcbc [ 97.392207][ T4937] softirqs last disabled at (115083): [] __do_softirq+0x14/0x20 [ 97.394200][ T4937] ---[ end trace 0000000000000000 ]--- [ 98.459681][ T4937] ------------[ cut here ]------------ [ 98.459693][ T4937] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 98.459813][ T4937] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x410/0x440, CPU#1: kworker/1:5/4937 [ 98.464636][ T4937] Modules linked in: [ 98.465463][ T4937] CPU: 1 UID: 0 PID: 4937 Comm: kworker/1:5 Tainted: G W L syzkaller #0 PREEMPT [ 98.467676][ T4937] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 98.468771][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 98.470707][ T4937] Workqueue: events drm_fb_helper_damage_work [ 98.471997][ T4937] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 98.473470][ T4937] pc : drm_crtc_wait_one_vblank+0x410/0x440 [ 98.474721][ T4937] lr : drm_crtc_wait_one_vblank+0x408/0x440 [ 98.475867][ T4937] sp : ffff8000a85d7820 [ 98.476684][ T4937] x29: ffff8000a85d78d0 x28: dfff800000000000 x27: ffff0000c6a88080 [ 98.478334][ T4937] x26: ffff8000a85d7820 x25: dfff800000000000 x24: ffff7000150baf04 [ 98.479825][ T4937] x23: ffff800086eca3e0 x22: ffff0000c6a7e000 x21: ffff800086f51720 [ 98.481564][ T4937] x20: ffff0000c6578000 x19: 0000000000000000 x18: 1fffe00035bd7428 [ 98.483405][ T4937] x17: 0000000000000003 x16: ffff800088a77000 x15: ffff800088b27700 [ 98.485191][ T4937] x14: 0000000000001483 x13: 0000000000000001 x12: 0000000000000003 [ 98.486990][ T4937] x11: 0000000000000000 x10: 0000000000000002 x9 : 1727bdfcf5fad900 [ 98.488753][ T4937] x8 : 1727bdfcf5fad900 x7 : ffff800080482944 x6 : 0000000000000000 [ 98.490407][ T4937] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f3620 [ 98.492210][ T4937] x2 : 0000000100000000 x1 : 0000000000000000 x0 : ffff0000c6578000 [ 98.493990][ T4937] Call trace: [ 98.494705][ T4937] drm_crtc_wait_one_vblank+0x410/0x440 (P) [ 98.495963][ T4937] drm_client_modeset_wait_for_vblank+0xc4/0xec [ 98.497418][ T4937] drm_fb_helper_damage_work+0x520/0xbc0 [ 98.498707][ T4937] process_scheduled_works+0x91c/0x1250 [ 98.499897][ T4937] worker_thread+0x798/0xbd0 [ 98.500910][ T4937] kthread+0x304/0x3d4 [ 98.501824][ T4937] ret_from_fork+0x10/0x20 [ 98.502746][ T4937] irq event stamp: 115318 [ 98.503672][ T4937] hardirqs last enabled at (115317): [] vprintk_store+0x924/0xb94 [ 98.505762][ T4937] hardirqs last disabled at (115318): [] el1_brk64+0x20/0x54 [ 98.507860][ T4937] softirqs last enabled at (115272): [] handle_softirqs+0xb2c/0xcbc [ 98.509740][ T4937] softirqs last disabled at (115219): [] __do_softirq+0x14/0x20 [ 98.511771][ T4937] ---[ end trace 0000000000000000 ]---