last executing test programs: 28.730209319s ago: executing program 3 (id=243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000840)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0xb, 0x4, [@local, @empty]}]}}}], 0x20}, 0x8000) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) ioctl$MEMUNLOCK(0xffffffffffffffff, 0x40084d06, &(0x7f0000000140)={0xd, 0x1}) r2 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_elf64(r2, &(0x7f0000000400)=ANY=[], 0xfffffdcf) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x400, 0x81, 0xffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/4095, 0x440000}], 0x2000000000000021) 28.654679551s ago: executing program 3 (id=244): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000300)={@empty, @multicast1, 0x1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x52, 0x1, 0x100, 0x25dfdbff, {0x1e}, [@typed={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto(r2, &(0x7f0000000000)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000eeffff7f0c000180080004"], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000200)={0x1e59, 0x2001005a, 0xffff7002, 0x1, 0x6, "e9d30d001f000000000100", 0xfffffffc, 0x1fd}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0xa) preadv(r4, &(0x7f0000000640), 0x10000248, 0x5, 0x0) 28.547901314s ago: executing program 3 (id=245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffe4b, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0xd27, 0x4) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto(r0, &(0x7f0000000380)="50fbdf12a30d7a48b2c51cb3bf52a6b2cdb77ef9af01603a3e68adff5949f1a05ad2fbb22bae1b24430193d8533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1ebeeafb3b9c984e706165f40ce186881f478339b8932380347120b327f3ea27c07e28e8b0c063013d797231dcd24fbb4eab58234f90e5301df6139d990980000088aabbdce8733c7738e96970380fbdd930e0a44e8cd1cb8bcabcce30059c2ee4b77c9be6600795ab307c6a560439f58627d94273", 0xc4, 0x46, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)='}', 0x1) sendto$inet(r2, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 27.62536517s ago: executing program 3 (id=260): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}]}, 0x1, 0x249, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000180)=0x1) preadv2(r2, &(0x7f00000016c0)=[{&(0x7f0000000580)=""/72, 0x48}, {0x0}], 0x2, 0x0, 0x7e, 0x10) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './mnt\x00'}, 0x59) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x118, 0x2, 0x9, 0xd49f99424b7e0b15, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFCTH_TUPLE={0x80, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0xfca5, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7b}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x106}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) move_mount(0xffffffffffffffff, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, 0x0, 0x240) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x9, 0x0, 0x0, 0xfff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r6 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r6, &(0x7f00000003c0)='\a', 0x1, 0x40, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) 26.653506329s ago: executing program 3 (id=269): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000080)="010000000d80ffff", 0x8) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x3, 0x5c8a5, 0xab, &(0x7f00000001c0)="704fb5856c78f5a5647f65916181c78a11c9e731971a959fb9eff6577b3fc87b7bc5ec752647ccb33d35ae73c14475a32d3fb2b415a79394c7cdc8b98957cb172b47a9ad4a008545e622e49ea6ed9e1c7d881a2976cc0424184f8003c1e3a81034c6ebc797e923d1d7a991e5d4f2076f00c80122c680e41feceb66ca7d6a6e94464b3886b5f1e7e6b393447f7d9971ae003abff4fd28a04ec507aead565b10198547c2a53df5c5daaacb41", 0x1}) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x3, 0x5c8a5, 0xab, &(0x7f00000001c0)="704fb5856c78f5a5647f65916181c78a11c9e731971a959fb9eff6577b3fc87b7bc5ec752647ccb33d35ae73c14475a32d3fb2b415a79394c7cdc8b98957cb172b47a9ad4a008545e622e49ea6ed9e1c7d881a2976cc0424184f8003c1e3a81034c6ebc797e923d1d7a991e5d4f2076f00c80122c680e41feceb66ca7d6a6e94464b3886b5f1e7e6b393447f7d9971ae003abff4fd28a04ec507aead565b10198547c2a53df5c5daaacb41", 0x1}) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000100)=0x8001, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000100)=0x8001, 0x4) sendto$inet6(r0, &(0x7f0000000080)='k', 0x1, 0x1, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @local, 0x8}, 0x1c) 26.331031305s ago: executing program 3 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004"], 0xbc}, 0x1, 0x0, 0x0, 0x40000851}, 0x0) 26.283650978s ago: executing program 32 (id=275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000001300020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004"], 0xbc}, 0x1, 0x0, 0x0, 0x40000851}, 0x0) 5.259284305s ago: executing program 1 (id=674): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7bfd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x5, 0x10, 0x1, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x6, 0xb, 0x5}, {0x6, 0x24, 0x1a, 0x7, 0x36}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0xc, 0xce}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5, 0x8, 0xc}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x8, 0xc1, 0x55}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x1a, &(0x7f0000000240)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xf7, 0x40, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x18, 0x8, 0x8, 0x6, 0x38}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.424566776s ago: executing program 1 (id=688): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0) 4.340122313s ago: executing program 1 (id=692): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x101c0) 4.233310184s ago: executing program 1 (id=696): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x445, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000000)='7', 0x1) pwrite64(r1, &(0x7f0000000140)='\"', 0x1, 0xe7c) 4.036257965s ago: executing program 1 (id=699): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x80085610, 0x10000000000004) syz_open_dev$tty1(0xc, 0x4, 0x1) 3.580102275s ago: executing program 1 (id=709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xfc, 0x13, 0x1, 0x70bd2b, 0x0, {{@in6=@private0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x0, 0x2, 0x0, 0xa, 0x40, 0x0, 0x2b, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0xfffffffffffffffc, 0x7}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x32}, 0xa, @in=@multicast2, 0x3503, 0x4, 0x1, 0x5b, 0x5, 0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) 3.508189564s ago: executing program 33 (id=709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xfc, 0x13, 0x1, 0x70bd2b, 0x0, {{@in6=@private0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x2, 0x0, 0x2, 0x0, 0xa, 0x40, 0x0, 0x2b, 0x0, 0xee01}, {0x0, 0x0, 0x6}, {0x0, 0xfffffffffffffffc, 0x7}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x32}, 0xa, @in=@multicast2, 0x3503, 0x4, 0x1, 0x5b, 0x5, 0x8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4010}, 0x4000) 2.198458132s ago: executing program 4 (id=730): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x40, &(0x7f0000000080)={[{@bh}, {@mblk_io_submit}, {@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") syz_usb_connect$midi(0x5, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000040630701204000010203010902"], 0x0) mount(0x0, 0x0, 0x0, 0x800000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 914.590965ms ago: executing program 4 (id=742): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x70bd28, 0x35dfdbff, {0xa, 0x0, 0x0, 0xfc, 0xb5, 0x0, 0x0, 0x3, 0x17}}, 0x1c}, 0x1, 0x0, 0x0, 0x30040c10}, 0x20048810) 820.217014ms ago: executing program 4 (id=744): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) 737.062755ms ago: executing program 4 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) prctl$PR_SET_TIMERSLACK(0x1d, 0x0) 653.027063ms ago: executing program 4 (id=751): unshare(0x26020480) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 637.856135ms ago: executing program 0 (id=752): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) 506.9641ms ago: executing program 4 (id=755): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af000000010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}}, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)={0x40, 0xe, 0x8, "814fb9c0366a6a5b"}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x82, 0x1, "90"}, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0}) 471.264156ms ago: executing program 5 (id=756): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [0x0, 0x300]}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 403.250907ms ago: executing program 0 (id=757): setresuid(0x0, 0xee00, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 403.050422ms ago: executing program 2 (id=758): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0xffffffff00000000, 0x2}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, 0x0) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) 374.46386ms ago: executing program 5 (id=759): bpf$MAP_CREATE(0x0, 0x0, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) setregid(0xee00, 0xee00) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0xfd, 0x3c2, &(0x7f0000000700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7, 0xffef}) 372.849463ms ago: executing program 2 (id=760): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7f}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 367.804472ms ago: executing program 0 (id=761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x4008090) 244.354424ms ago: executing program 2 (id=762): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x1) 244.168134ms ago: executing program 5 (id=763): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) connect(r0, &(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0x3fff}, 0x80) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) 244.088172ms ago: executing program 0 (id=764): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x80, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) read$FUSE(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000980)=ANY=[@ANYBLOB="07001f00000000000000000086dd60"], 0x0) 217.688236ms ago: executing program 2 (id=765): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) connect$tipc(r0, 0x0, 0x0) 151.863995ms ago: executing program 5 (id=766): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) 121.997372ms ago: executing program 2 (id=767): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmsg$inet6(r0, &(0x7f0000000680)={&(0x7f0000000040)={0xa, 0x4e22, 0x100000, @loopback}, 0x1c, 0x0}, 0x8080) sendto$inet6(r0, 0x0, 0x0, 0x10004004, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb2a}], 0x1, 0x40032060, 0x0) 120.675858ms ago: executing program 0 (id=768): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000140)={&(0x7f0000000000)="c945221e00000000", 0x8}) 20.266249ms ago: executing program 5 (id=769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="05002abd7000fddbdf2501000000060006004e240000fc0908802804000324000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0004098070000080060001000a00000014000200fe80000000000000000000000000000a0500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030001000000060001000a00000014000200fe8000000000000000000000000000aa0500030003000000a0000080060001000a0000001400020000000000000000000000ffff640101010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1414aa0500030002000000060001000a00000014000200fc00000000000000000000000000000105000300020000000600010002000000080002000a0101020500030001000000d0000080060001000200000008000200ac1e01010500030000000000060001000a00000014000200000000000000000000000000000000000500030000000000060001000200000008000200ac1414bb0500030006000000060001000a00000014000200fe8000000000000000000000000000420500030001000000060001000a00000014000200fc02000000000000000000000000000105000300020000000600010002000000080002007f0000010500030002000000060001000200000008000200000000000500030002000000ac000080060001000200000008000200ac1414aa0500030001000000060001000a00000014000200fc00000000000000000000000000000005000300020000000600010002000000080002000a01010105000300000000000600010002000000080002007f0000010500030001000000060001000200000008000200e00000010500030001000000060001000a0000001400020020010000000000000000000000000001050003000200000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000a00000014000200ff0100000000000000000000000000010500030002000000060001000200000008000200ac1414aa05000300000000000c010080060001000200000008000200000000000500030001000000060001000a00000014000200fe8000000000000000000000000000410500030003000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030000000000060001000a00000014000200fc0200000000000000000000000000000500030003000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fc0200000000000000000000000000010500030001000000060001000a00000014000200fe80000000000000000000000000002b050003000200000040000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000300030000008c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c24000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000a000100000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e22000000000000000000000000040500807002098094"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 20.115402ms ago: executing program 2 (id=770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0xf, 0x8, 0x40, 0x42, 0x1, 0x40000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) 15.435809ms ago: executing program 6 (id=710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x202}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44000) 15.06075ms ago: executing program 5 (id=771): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x6, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0xd}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0x23e}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 0s ago: executing program 0 (id=772): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 5 (id=773): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') kernel console output (not intermixed with test programs): ot in datazone - block = 0, count = 16 [ 33.636233][ T5091] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.36: bg 0: block 112: padding at end of block bitmap is not set [ 33.668680][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.670552][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671642][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671679][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671711][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671736][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671761][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671785][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671809][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671833][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671856][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671878][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671904][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671927][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671950][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671974][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.671999][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672023][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672045][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672068][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672093][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672121][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672144][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672168][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672193][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672215][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672240][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672263][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672288][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672311][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672334][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672357][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.672383][ T5097] binder: 5094:5097 ioctl c018937a 20000040 returned -22 [ 33.677832][ T5095] netlink: 'syz.1.39': attribute type 13 has an invalid length. [ 33.677844][ T5095] netlink: 44 bytes leftover after parsing attributes in process `syz.1.39'. [ 33.735055][ T5096] binder: 5094:5096 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 33.736795][ T5096] binder: 5094:5096 ioctl c0306201 200001c0 returned -22 [ 33.746825][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.825042][ T5103] team0: Port device syz_tun added [ 33.935065][ T5111] Dev loop2: unable to read RDB block 7 [ 33.935102][ T5111] loop2: unable to read partition table [ 33.935177][ T5111] loop2: partition table beyond EOD, truncated [ 33.935204][ T5111] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 34.054634][ T5118] vlan2: entered allmulticast mode [ 34.054803][ T5118] bond0: entered allmulticast mode [ 34.054852][ T5118] bond_slave_0: entered allmulticast mode [ 34.054913][ T5118] bond_slave_1: entered allmulticast mode [ 34.078465][ T4710] Bluetooth: hci1: command tx timeout [ 34.078729][ T4710] Bluetooth: hci2: command tx timeout [ 34.078917][ T4710] Bluetooth: hci4: command tx timeout [ 34.079154][ T4710] Bluetooth: hci0: command tx timeout [ 34.083107][ T4712] Bluetooth: hci3: command tx timeout [ 34.216637][ T5120] journal_path: Lookup failure for './file0' [ 34.218100][ T5120] EXT4-fs: error: could not find journal device path [ 34.902279][ T5132] syzkaller0: entered promiscuous mode [ 34.902312][ T5132] syzkaller0: entered allmulticast mode [ 34.917914][ T5134] bridge0: port 3(vlan2) entered blocking state [ 34.932981][ T5134] bridge0: port 3(vlan2) entered disabled state [ 34.933094][ T5134] vlan2: entered allmulticast mode [ 34.933102][ T5134] bridge0: entered allmulticast mode [ 34.944236][ T5134] vlan2: left allmulticast mode [ 34.944277][ T5134] bridge0: left allmulticast mode [ 35.071721][ T5142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 35.076055][ T5144] EXT4-fs (loop3): Test dummy encryption mode enabled [ 35.089789][ T5142] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20003 [ 35.102669][ T5150] bridge1: entered promiscuous mode [ 35.103696][ T5144] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.53: corrupted in-inode xattr: invalid ea_ino [ 35.103767][ T5144] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.106532][ T5144] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.53: couldn't read orphan inode 15 (err -117) [ 35.106598][ T5144] loop3: lost filesystem error report for type 5 error -117 [ 35.107247][ T5144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.123621][ T5150] bridge1: entered allmulticast mode [ 35.140121][ T5150] team0: Port device bridge1 added [ 35.152043][ T5144] fscrypt: AES-256-XTS using blk-crypto-fallback [ 35.164347][ T5155] ext4: Unknown parameter 'fsname' [ 35.195685][ T5155] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 35.197459][ T5155] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.55: attempt to clear invalid blocks 1024 len 1 [ 35.197477][ T5155] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 35.197638][ T5155] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.55: invalid indirect mapped block 1819239214 (level 0) [ 35.197662][ T5155] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 35.197792][ T5155] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.55: invalid indirect mapped block 33554432 (level 2) [ 35.197804][ T5155] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 35.198221][ T5155] EXT4-fs (loop1): 1 truncate cleaned up [ 35.198689][ T5155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.217563][ T4704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.266660][ T30] audit: type=1326 audit(35.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5163 comm="syz.0.58" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 35.271959][ T30] audit: type=1326 audit(35.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5163 comm="syz.0.58" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 35.286281][ T30] audit: type=1326 audit(35.230:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5163 comm="syz.0.58" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 35.295114][ T30] audit: type=1326 audit(35.250:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5163 comm="syz.0.58" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 35.303418][ T30] audit: type=1326 audit(35.250:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5163 comm="syz.0.58" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=160 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 35.307571][ T30] audit: type=1326 audit(35.250:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5163 comm="syz.0.58" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 35.308055][ T5167] ip6t_srh: unknown srh invflags 4000 [ 35.383691][ T5173] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #15: comm syz.4.60: iget: bad i_size value: 38620345925642 [ 35.383736][ T5173] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.383895][ T5173] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.60: couldn't read orphan inode 15 (err -117) [ 35.383909][ T5173] loop4: lost filesystem error report for type 5 error -117 [ 35.391422][ T5173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.426605][ T5172] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.60: bg 0: block 5: invalid block bitmap [ 35.429314][ T5181] fuse: Bad value for 'fd' [ 35.434254][ T5173] EXT4-fs (loop4): shut down requested (0) [ 35.444466][ T4703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.533071][ T5192] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 35.533142][ T5192] System zones: 1-12 [ 35.537352][ T5181] fuse: Bad value for 'fd' [ 35.539900][ T5192] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #12: comm syz.0.64: missing EA_INODE flag [ 35.539939][ T5192] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 35.543740][ T5192] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.64: error while reading EA inode 12 err=-117 [ 35.543790][ T5192] loop0: lost filesystem error report for type 5 error -117 [ 35.545511][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 35.545524][ C1] EXT4-fs (loop0): initial error at time 35: ext4_xattr_inode_iget:437: inode 12 [ 35.545542][ C1] EXT4-fs (loop0): last error at time 35: ext4_xattr_inode_iget:442 [ 35.549386][ T5194] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.65: inode #15: comm syz.1.65: iget: illegal inode # [ 35.549407][ T5194] loop1: lost filesystem error report for type 5 error -117 [ 35.555074][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 35.555089][ C1] EXT4-fs (loop1): initial error at time 35: ext4_orphan_get:1403 [ 35.555104][ C1] EXT4-fs (loop1): last error at time 35: ext4_orphan_get:1403 [ 35.555766][ T5194] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.65: couldn't read orphan inode 15 (err -117) [ 35.555789][ T5194] loop1: lost filesystem error report for type 5 error -117 [ 35.559506][ T5192] EXT4-fs (loop0): 1 orphan inode deleted [ 35.559995][ T5192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.560771][ T5194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.578646][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.653093][ T4703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.693027][ T5221] fuse: Unknown parameter '' [ 35.704629][ T5222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.68'. [ 35.706262][ T5221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.68'. [ 35.706544][ T5227] fuse: Unknown parameter 'fowner>18446744073709551615' [ 35.841832][ T5239] loop4: p1 p2 p4[EZD] [ 35.843891][ T5239] loop4: p4 start 201326592 is beyond EOD, truncated [ 36.125089][ T4707] Bluetooth: hci3: command tx timeout [ 36.128049][ T4707] Bluetooth: hci0: command tx timeout [ 36.129320][ T4707] Bluetooth: hci4: command tx timeout [ 36.130550][ T4707] Bluetooth: hci2: command tx timeout [ 36.131707][ T4707] Bluetooth: hci1: command tx timeout [ 36.266362][ T5261] EXT4-fs error (device loop4): __ext4_iget:5592: inode #11: block 1: comm syz.4.73: invalid block [ 36.269806][ T5261] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 36.272400][ T5261] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.73: couldn't read orphan inode 11 (err -117) [ 36.272440][ T5261] loop4: lost filesystem error report for type 5 error -117 [ 36.277902][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 36.277920][ C0] EXT4-fs (loop4): initial error at time 36: __ext4_iget:5592: inode 11: block 1 [ 36.277943][ C0] EXT4-fs (loop4): last error at time 36: ext4_orphan_get:1408 [ 36.281790][ T5261] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.323467][ T5261] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.73: Directory hole found for htree leaf block 0 [ 36.385052][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.425692][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.439989][ T5281] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.512503][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 36.575527][ T5286] overlayfs: failed to resolve './bus': -2 [ 36.592247][ T5285] hsr_slave_1 (unregistering): left promiscuous mode [ 36.638328][ T5296] FAULT_INJECTION: forcing a failure. [ 36.638328][ T5296] name failslab, interval 1, probability 0, space 0, times 0 [ 36.638370][ T5296] CPU: 0 UID: 0 PID: 5296 Comm: syz.2.84 Not tainted syzkaller #0 PREEMPT [ 36.638383][ T5296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 36.638390][ T5296] Call trace: [ 36.638393][ T5296] show_stack+0x2c/0x3c (C) [ 36.638413][ T5296] __dump_stack+0x30/0x40 [ 36.638429][ T5296] dump_stack_lvl+0xd8/0x12c [ 36.638440][ T5296] dump_stack+0x1c/0x28 [ 36.638451][ T5296] should_fail_ex+0x41c/0x590 [ 36.638464][ T5296] should_failslab+0xc4/0x120 [ 36.638477][ T5296] kmem_cache_alloc_noprof+0x94/0x5d4 [ 36.638489][ T5296] prepare_creds+0x34/0x7d0 [ 36.638502][ T5296] keyctl_set_reqkey_keyring+0x84/0x1e4 [ 36.638512][ T5296] __arm64_sys_keyctl+0x120/0x3e8 [ 36.638522][ T5296] invoke_syscall+0x98/0x244 [ 36.638534][ T5296] el0_svc_common+0xec/0x23c [ 36.638545][ T5296] do_el0_svc+0x4c/0x5c [ 36.638556][ T5296] el0_svc+0x64/0x260 [ 36.638567][ T5296] el0t_64_sync_handler+0x44/0x104 [ 36.638577][ T5296] el0t_64_sync+0x198/0x19c [ 36.661333][ T5292] loop4: p1 p2 p4[EZD] [ 36.665014][ T5292] loop4: p4 start 201326592 is beyond EOD, truncated [ 36.687186][ T4719] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.762605][ T5306] netlink: 52 bytes leftover after parsing attributes in process `syz.3.89'. [ 36.808772][ T5299] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 36.808809][ T5299] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 36.809138][ T5299] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 37.130329][ T4696] udevd[4696]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 37.131512][ T4695] udevd[4695]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 37.203760][ T5321] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 37.205004][ T5324] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 37.205170][ T5321] Cannot find map_set index 0 as target [ 37.206781][ T5323] veth2: entered allmulticast mode [ 37.250063][ T5328] set_capacity_and_notify: 13 callbacks suppressed [ 37.250097][ T5328] loop4: detected capacity change from 0 to 128 [ 37.258238][ T5328] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.284881][ T5328] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)" [ 37.291041][ T5328] fuse: Unknown parameter 'default_permissionse1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 37.306520][ T4711] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.327042][ T5334] netlink: 'syz.4.98': attribute type 1 has an invalid length. [ 37.337396][ T5334] bond1: entered promiscuous mode [ 37.339090][ T5334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.345922][ T5334] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 37.348643][ T5334] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 37.351728][ T5334] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 37.573297][ T5360] loop2: detected capacity change from 0 to 1024 [ 37.577350][ T5360] EXT4-fs: Ignoring removed oldalloc option [ 37.577362][ T5360] EXT4-fs: Ignoring removed orlov option [ 37.586812][ T5360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.684074][ T5365] loop4: detected capacity change from 0 to 256 [ 37.688159][ T5365] loop4: detected capacity change from 0 to 256 [ 37.691949][ T5365] loop4: detected capacity change from 0 to 256 [ 37.695644][ T5365] loop4: detected capacity change from 0 to 256 [ 37.756936][ T5365] loop4: detected capacity change from 0 to 256 [ 37.761246][ T5365] loop4: detected capacity change from 0 to 256 [ 37.765112][ T5365] loop4: detected capacity change from 0 to 256 [ 37.769544][ T5365] loop4: detected capacity change from 0 to 256 [ 37.865318][ T5367] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.106: bg 0: block 112: padding at end of block bitmap is not set [ 37.877561][ T5367] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 37.877578][ T5367] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.877578][ T5367] [ 37.877586][ T5367] EXT4-fs (loop2): Total free blocks count 0 [ 37.877593][ T5367] EXT4-fs (loop2): Free/Dirty block details [ 37.877604][ T5367] EXT4-fs (loop2): free_blocks=0 [ 37.877615][ T5367] EXT4-fs (loop2): dirty_blocks=32 [ 37.877622][ T5367] EXT4-fs (loop2): Block reservation details [ 37.877628][ T5367] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 37.883725][ T5366] input: syz1 as /devices/virtual/input/input3 [ 37.994027][ T5377] bridge0: port 3(vlan2) entered blocking state [ 37.996568][ T5377] bridge0: port 3(vlan2) entered disabled state [ 37.998424][ T5377] vlan2: entered allmulticast mode [ 38.000037][ T5377] bridge0: entered allmulticast mode [ 38.007394][ T5377] vlan2: left allmulticast mode [ 38.009200][ T5377] bridge0: left allmulticast mode [ 38.013632][ T5374] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.013674][ T5374] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.013692][ T5374] EXT4-fs (loop0): bad geometry: first data block is 0 with a 1k block and cluster size [ 38.205431][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 38.207035][ T30] audit: type=1326 audit(38.139:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5391 comm="syz.1.116" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 38.217770][ T5388] loop3: p1 p2 p4[EZD] [ 38.222099][ T4712] Bluetooth: hci0: command tx timeout [ 38.222137][ T4712] Bluetooth: hci1: command tx timeout [ 38.222162][ T4712] Bluetooth: hci2: command tx timeout [ 38.222184][ T4712] Bluetooth: hci4: command tx timeout [ 38.222203][ T4712] Bluetooth: hci3: command tx timeout [ 38.224610][ T5388] loop3: p4 start 201326592 is beyond EOD, truncated [ 38.232542][ T30] audit: type=1326 audit(38.168:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5391 comm="syz.1.116" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 38.232580][ T30] audit: type=1326 audit(38.168:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5391 comm="syz.1.116" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 38.242605][ T30] audit: type=1326 audit(38.168:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5391 comm="syz.1.116" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 38.247653][ T30] audit: type=1326 audit(38.178:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5391 comm="syz.1.116" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 38.252748][ T30] audit: type=1326 audit(38.178:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5391 comm="syz.1.116" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 38.252782][ T30] audit: type=1326 audit(38.178:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5391 comm="syz.1.116" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 38.252808][ T30] audit: type=1326 audit(38.178:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5391 comm="syz.1.116" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 38.252828][ T30] audit: type=1326 audit(38.178:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5391 comm="syz.1.116" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 38.252847][ T30] audit: type=1326 audit(38.178:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5391 comm="syz.1.116" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb27792a8 code=0x7ffc0000 [ 38.278072][ T5392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 38.339415][ T5397] syzkaller0: entered promiscuous mode [ 38.339452][ T5397] syzkaller0: entered allmulticast mode [ 38.356183][ T5397] tipc: Started in network mode [ 38.356215][ T5397] tipc: Node identity c2f2dd7179b4, cluster identity 4711 [ 38.357831][ T5397] tipc: Enabled bearer , priority 0 [ 38.384448][ T4695] udevd[4695]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 38.386461][ T5397] tipc: Resetting bearer [ 38.391237][ T5396] tipc: Resetting bearer [ 38.392313][ T4693] udevd[4693]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 38.402751][ T5396] tipc: Disabling bearer [ 38.420040][ T5402] netlink: 'syz.4.120': attribute type 5 has an invalid length. [ 38.494168][ T5399] netlink: 'syz.3.119': attribute type 2 has an invalid length. [ 38.494461][ T5399] netlink: 'syz.3.119': attribute type 2 has an invalid length. [ 38.512793][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.532392][ T5410] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.534001][ T5412] Cannot find add_set index 0 as target [ 38.573205][ T5418] EXT4-fs: Ignoring removed orlov option [ 38.603639][ T5410] EXT4-fs error (device loop4): ext4_init_orphan_info:619: comm syz.4.122: orphan file block 0: bad magic [ 38.603685][ T5410] loop4: lost filesystem error report for type 5 error -117 [ 38.604374][ T5410] EXT4-fs (loop4): mount failed [ 38.629875][ T5418] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 38.630270][ T5418] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.125: corrupted inode contents [ 38.630284][ T5418] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.631048][ T5418] EXT4-fs error (device loop1): ext4_dirty_inode:6731: inode #11: comm syz.1.125: mark_inode_dirty error [ 38.631062][ T5418] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.631214][ T5418] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.125: invalid indirect mapped block 1 (level 1) [ 38.631226][ T5418] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 38.631344][ T5418] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.125: corrupted inode contents [ 38.631836][ T5418] EXT4-fs error (device loop1) in ext4_orphan_del:304: Corrupt filesystem [ 38.631848][ T5418] loop1: lost filesystem error report for type 5 error -117 [ 38.631960][ T5418] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #11: comm syz.1.125: corrupted inode contents [ 38.632066][ T5418] EXT4-fs error (device loop1): ext4_truncate:4721: inode #11: comm syz.1.125: mark_inode_dirty error [ 38.632177][ T5418] EXT4-fs error (device loop1) in ext4_process_orphan:346: Corrupt filesystem [ 38.632185][ T5418] loop1: lost filesystem error report for type 5 error -117 [ 38.632314][ T5418] EXT4-fs (loop1): 1 truncate cleaned up [ 38.632743][ T5418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.946936][ T5428] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 13: comm syz.1.125: path /23/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 38.965701][ T5435] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.125: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 38.981228][ T5434] netlink: 96 bytes leftover after parsing attributes in process `syz.4.127'. [ 38.989923][ T5443] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #2: block 13: comm syz.1.125: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 39.005856][ T5451] overlayfs: missing 'workdir' [ 39.085836][ T5434] EXT4-fs: journaled quota format not specified [ 39.153235][ T4703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.169614][ T5458] overlayfs: missing 'lowerdir' [ 39.174821][ T5458] overlayfs: missing 'lowerdir' [ 39.180318][ T5458] overlayfs: missing 'lowerdir' [ 39.184956][ T5458] overlayfs: missing 'lowerdir' [ 39.185926][ T4854] IPVS: starting estimator thread 0... [ 39.191735][ T5459] fuse: Bad value for 'fd' [ 39.196682][ T5458] overlayfs: missing 'lowerdir' [ 39.205753][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.208195][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.210934][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.212643][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.215354][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.219067][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.223648][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.226494][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.235530][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.239781][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.247430][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.250062][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.256324][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.261999][ T5469] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.269801][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.272415][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.277330][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.280472][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.298792][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.301794][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.303841][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.306390][ T5464] IPVS: using max 47 ests per chain, 112800 per kthread [ 39.314299][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.321678][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.349233][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.359272][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.363941][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.368625][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.370572][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.374979][ T5458] overlay: filesystem on ./file0 not supported as upperdir [ 39.480453][ T4703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.618191][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 39.622849][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 39.900548][ T5520] squashfs: Unknown parameter '€' [ 39.916663][ T5520] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.918576][ T5520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.918900][ T5520] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 39.945265][ T5520] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4223: comm syz.2.142: Allocating blocks 41-42 which overlap fs metadata [ 39.952455][ T5520] loop2: lost filesystem error report for type 5 error -117 [ 39.955409][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 39.955438][ C1] EXT4-fs (loop2): initial error at time 39: ext4_mb_mark_diskspace_used:4223 [ 39.955472][ C1] EXT4-fs (loop2): last error at time 39: ext4_mb_mark_diskspace_used:4223 [ 39.961998][ T5520] EXT4-fs (loop2): Remounting filesystem read-only [ 39.962328][ T5520] EXT4-fs (loop2): 1 truncate cleaned up [ 39.962794][ T5520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.311807][ T5572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 40.598363][ T5597] overlayfs: failed to get inode (-116) [ 40.718974][ T5604] binder: 5603:5604 ioctl c0306201 20000080 returned -14 [ 40.721876][ T5604] binder: 5603:5604 got transaction to invalid handle, 1 [ 40.723518][ T5604] binder: 5603:5604 cannot find target node [ 40.724912][ T5604] binder: 5603:5604 transaction call to 0:0 failed 5/29201/-22, code 0 size 112-24 line 3252 [ 40.756346][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.777381][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 40.859200][ T5626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.869079][ T5626] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 40.874806][ T5626] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.879070][ T5626] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.879660][ T5630] netlink: 'syz.0.159': attribute type 2 has an invalid length. [ 40.883412][ T5630] †: entered promiscuous mode [ 40.884709][ T5626] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.884709][ T5626] [ 40.887154][ T5626] EXT4-fs (loop3): Total free blocks count 0 [ 40.888603][ T5626] EXT4-fs (loop3): Free/Dirty block details [ 40.888994][ T5626] EXT4-fs (loop3): free_blocks=20480 [ 40.889013][ T5626] EXT4-fs (loop3): dirty_blocks=80 [ 40.889023][ T5626] EXT4-fs (loop3): Block reservation details [ 40.889031][ T5626] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 40.911849][ T13] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 40.932681][ T5632] netlink: 'syz.3.160': attribute type 32 has an invalid length. [ 40.934256][ T5632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 40.940657][ T5632] bond1: option coupled_control: invalid value (115) [ 40.951147][ T5632] bond1 (unregistering): Released all slaves [ 40.958038][ T5636] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 40.993195][ T5642] sctp: [Deprecated]: syz.3.160 (pid 5642) Use of int in max_burst socket option deprecated. [ 40.993195][ T5642] Use struct sctp_assoc_value instead [ 41.009646][ T5644] EXT4-fs: Ignoring removed bh option [ 41.009697][ T5644] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.017212][ T5644] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 41.018748][ T5644] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 41.018887][ T5644] EXT4-fs (loop0): orphan cleanup on readonly fs [ 41.022936][ T5644] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.164: Failed to acquire dquot type 1 [ 41.022964][ T5644] loop0: lost filesystem error report for type 5 error -5 [ 41.023173][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 41.023194][ C1] EXT4-fs (loop0): last error at time 40: ext4_acquire_dquot:7069 [ 41.023469][ T5644] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.164: Invalid block bitmap block 0 in block_group 0 [ 41.023493][ T5644] loop0: lost filesystem error report for type 5 error -117 [ 41.024324][ T5644] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.164: Invalid block bitmap block 0 in block_group 0 [ 41.024349][ T5644] loop0: lost filesystem error report for type 5 error -117 [ 41.024508][ T5644] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:487: comm syz.0.164: Invalid block bitmap block 0 in block_group 0 [ 41.024527][ T5644] loop0: lost filesystem error report for type 5 error -117 [ 41.024777][ T5644] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.164: Failed to acquire dquot type 1 [ 41.024794][ T5644] loop0: lost filesystem error report for type 5 error -28 [ 41.027132][ T5644] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.164: Failed to acquire dquot type 1 [ 41.027171][ T5644] loop0: lost filesystem error report for type 5 error -28 [ 41.027889][ T5644] EXT4-fs (loop0): 1 orphan inode deleted [ 41.060404][ T5644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.070350][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.092310][ T5649] Bluetooth: MGMT ver 1.23 [ 41.387110][ T5654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.393197][ T5653] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:107: comm syz.2.163: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 41.397341][ T5653] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.163: corrupted xattr block 33: invalid checksum [ 41.398211][ T5653] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.163: corrupted xattr block 33: invalid checksum [ 41.398816][ T5653] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.163: corrupted xattr block 33: invalid checksum [ 41.413679][ T10] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2933: inode #15: comm kworker/0:1: corrupted xattr block 33: invalid checksum [ 41.419695][ T10] fserror_report: 3 callbacks suppressed [ 41.419726][ T10] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74 [ 41.421773][ T10] EXT4-fs warning (device loop2): ext4_evict_inode:288: xattr delete (err -74) [ 41.446348][ T5658] netlink: 9 bytes leftover after parsing attributes in process `syz.3.167'. [ 41.446498][ T5658] 0·: renamed from hsr0 (while UP) [ 41.452264][ T5658] 0·: entered allmulticast mode [ 41.452297][ T5658] hsr_slave_0: entered allmulticast mode [ 41.452309][ T5658] hsr_slave_1: entered allmulticast mode [ 41.452560][ T5658] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 41.544469][ T5664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.553796][ T5677] bridge0: port 3(team0) entered blocking state [ 41.559541][ T5677] bridge0: port 3(team0) entered disabled state [ 41.559734][ T5677] team0: entered allmulticast mode [ 41.559751][ T5677] team_slave_0: entered allmulticast mode [ 41.559776][ T5677] team_slave_1: entered allmulticast mode [ 41.579423][ T5677] team0: entered promiscuous mode [ 41.580582][ T5677] team_slave_0: entered promiscuous mode [ 41.581919][ T5677] team_slave_1: entered promiscuous mode [ 41.582875][ T4703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.588308][ T5677] bridge0: port 3(team0) entered blocking state [ 41.588365][ T5677] bridge0: port 3(team0) entered forwarding state [ 41.617822][ T5682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 41.660564][ T5687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 41.675034][ T5687] System zones: 1-3, 19-19, 35-36 [ 41.675717][ T5687] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 41.688484][ T5687] EXT4-fs warning (device loop3): verify_group_input:137: Cannot add at group 1986330625 (only 1 groups) [ 41.716738][ T5691] EXT4-fs: Ignoring removed orlov option [ 41.719040][ T4704] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.731251][ T5691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.783118][ T5698] EXT4-fs (loop3): Test dummy encryption mode enabled [ 41.788452][ T5698] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.177: inode has both inline data and extents flags [ 41.795052][ T5698] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.795289][ T5698] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.177: couldn't read orphan inode 15 (err -117) [ 41.795316][ T5698] loop3: lost filesystem error report for type 5 error -117 [ 41.799838][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 41.799852][ C1] EXT4-fs (loop3): initial error at time 41: ext4_orphan_get:1403: inode 15 [ 41.799871][ C1] EXT4-fs (loop3): last error at time 41: ext4_orphan_get:1408 [ 41.807284][ T5698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.838298][ T4703] EXT4-fs error (device loop1): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 41.839052][ T4703] EXT4-fs (loop1): Remounting filesystem read-only [ 41.844446][ T4703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.941148][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.012479][ T5705] veth2: entered allmulticast mode [ 42.116836][ T5721] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 42.485711][ T5733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 42.488439][ T5733] netlink: 12 bytes leftover after parsing attributes in process `syz.2.186'. [ 42.548255][ T5734] netlink: 80 bytes leftover after parsing attributes in process `syz.2.186'. [ 42.619592][ T5736] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 42.619807][ T5736] vhci_hcd vhci_hcd.2: invalid port number 96 [ 42.619828][ T5736] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0060 l0 [ 42.691497][ T5739] set_capacity_and_notify: 42 callbacks suppressed [ 42.693486][ T5739] loop2: detected capacity change from 0 to 256 [ 42.709065][ T5740] loop4: detected capacity change from 0 to 2048 [ 42.715465][ T5739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.188'. [ 42.747361][ T5740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.759196][ T5740] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 42.759882][ T5740] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 42.759907][ T5740] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.759907][ T5740] [ 42.759920][ T5740] EXT4-fs (loop4): Total free blocks count 0 [ 42.759932][ T5740] EXT4-fs (loop4): Free/Dirty block details [ 42.759944][ T5740] EXT4-fs (loop4): free_blocks=2415919504 [ 42.759956][ T5740] EXT4-fs (loop4): dirty_blocks=16 [ 42.759966][ T5740] EXT4-fs (loop4): Block reservation details [ 42.759976][ T5740] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 42.859120][ T5750] IPVS: Unknown mcast interface: syzkaller1 [ 42.862052][ T5750] overlayfs: failed to get inode (-116) [ 42.864976][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.960450][ T5755] FAULT_INJECTION: forcing a failure. [ 42.960450][ T5755] name failslab, interval 1, probability 0, space 0, times 0 [ 42.960497][ T5755] CPU: 0 UID: 60928 PID: 5755 Comm: syz.4.191 Not tainted syzkaller #0 PREEMPT [ 42.960514][ T5755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 42.960520][ T5755] Call trace: [ 42.960523][ T5755] show_stack+0x2c/0x3c (C) [ 42.960540][ T5755] __dump_stack+0x30/0x40 [ 42.960551][ T5755] dump_stack_lvl+0xd8/0x12c [ 42.960560][ T5755] dump_stack+0x1c/0x28 [ 42.960570][ T5755] should_fail_ex+0x41c/0x590 [ 42.960581][ T5755] should_failslab+0xc4/0x120 [ 42.960591][ T5755] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 42.960602][ T5755] __d_alloc+0x50/0x690 [ 42.960611][ T5755] d_alloc+0x54/0x17c [ 42.960618][ T5755] lookup_one_qstr_excl+0x9c/0x200 [ 42.960628][ T5755] __start_dirop+0xb8/0xf4 [ 42.960635][ T5755] filename_create+0x194/0x2b0 [ 42.960643][ T5755] filename_mkdirat+0xbc/0x3f4 [ 42.960656][ T5755] __arm64_sys_mkdirat+0x9c/0xc0 [ 42.960665][ T5755] invoke_syscall+0x98/0x244 [ 42.960675][ T5755] el0_svc_common+0xec/0x23c [ 42.960684][ T5755] do_el0_svc+0x4c/0x5c [ 42.960694][ T5755] el0_svc+0x64/0x260 [ 42.960703][ T5755] el0t_64_sync_handler+0x44/0x104 [ 42.960712][ T5755] el0t_64_sync+0x198/0x19c [ 43.008164][ T5754] loop2: detected capacity change from 0 to 8192 [ 43.058779][ T5754] loop2: p1 p2 p4[EZD] [ 43.064063][ T5754] loop2: p4 start 201326592 is beyond EOD, truncated [ 43.121302][ T5763] loop1: detected capacity change from 0 to 512 [ 43.173098][ T5763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.225412][ T5771] overlay: filesystem on ./file0 not supported as upperdir [ 43.255704][ T5776] loop2: detected capacity change from 0 to 8192 [ 43.256386][ T5776] FAT-fs (loop2): bogus number of directory entries (65535) [ 43.256397][ T5776] FAT-fs (loop2): Can't find a valid FAT filesystem [ 43.267645][ T5776] x_tables: duplicate underflow at hook 2 [ 43.270295][ T5764] 9pnet_virtio: no channels available for device ./file0 [ 43.363579][ T4696] udevd[4696]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 43.364722][ T4695] udevd[4695]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 43.370112][ T4703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.649130][ T5784] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 43.654443][ T5784] netlink: 'syz.1.197': attribute type 15 has an invalid length. [ 43.694259][ T5786] FAULT_INJECTION: forcing a failure. [ 43.694259][ T5786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.694299][ T5786] CPU: 0 UID: 0 PID: 5786 Comm: syz.1.198 Not tainted syzkaller #0 PREEMPT [ 43.694312][ T5786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 43.694319][ T5786] Call trace: [ 43.694323][ T5786] show_stack+0x2c/0x3c (C) [ 43.694344][ T5786] __dump_stack+0x30/0x40 [ 43.694358][ T5786] dump_stack_lvl+0xd8/0x12c [ 43.694370][ T5786] dump_stack+0x1c/0x28 [ 43.694381][ T5786] should_fail_ex+0x41c/0x590 [ 43.694395][ T5786] should_fail+0x14/0x24 [ 43.694406][ T5786] should_fail_usercopy+0x20/0x30 [ 43.694418][ T5786] put_itimerval+0x138/0x278 [ 43.694429][ T5786] __arm64_sys_getitimer+0xb4/0x104 [ 43.694439][ T5786] invoke_syscall+0x98/0x244 [ 43.694451][ T5786] el0_svc_common+0xec/0x23c [ 43.694463][ T5786] do_el0_svc+0x4c/0x5c [ 43.694474][ T5786] el0_svc+0x64/0x260 [ 43.694485][ T5786] el0t_64_sync_handler+0x44/0x104 [ 43.694495][ T5786] el0t_64_sync+0x198/0x19c [ 43.734152][ T5786] netlink: 224 bytes leftover after parsing attributes in process `syz.1.198'. [ 43.736590][ T5786] netlink: 24 bytes leftover after parsing attributes in process `syz.1.198'. [ 43.945666][ T5789] warning: `syz.1.199' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 43.982535][ T4704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.073851][ T5803] loop1: detected capacity change from 0 to 8192 [ 44.157341][ T5816] loop4: detected capacity change from 0 to 2048 [ 44.157724][ T5816] EXT4-fs: Ignoring removed nobh option [ 44.158317][ T5816] ext4: Unknown parameter 'func' [ 44.160530][ T644] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.160669][ T644] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.160699][ T644] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.160718][ T644] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.215751][ T5818] loop0: detected capacity change from 0 to 8192 [ 44.225556][ T5820] loop1: detected capacity change from 0 to 1024 [ 44.232542][ T5820] EXT4-fs: Ignoring removed bh option [ 44.236871][ T5820] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 44.252136][ T5820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.349903][ T5828] input: syz0 as /devices/virtual/input/input4 [ 44.543168][ T5818] loop0: p1 < > p2 p3 p4 < p5 > [ 44.544227][ T5818] loop0: partition table partially beyond EOD, truncated [ 44.546730][ T5818] loop0: p1 start 196608 is beyond EOD, truncated [ 44.548061][ T5818] loop0: p2 start 16776960 is beyond EOD, truncated [ 44.549466][ T5818] loop0: p3 start 16711680 is beyond EOD, truncated [ 44.566289][ T5818] loop0: p5 start 16776960 is beyond EOD, truncated [ 44.576336][ T5820] EXT4-fs error (device loop1): ext4_find_dest_de:2052: inode #12: block 7: comm syz.1.209: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 44.581132][ T30] kauditd_printk_skb: 148 callbacks suppressed [ 44.582489][ T30] audit: type=1326 audit(44.147:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5834 comm="syz.3.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff839792a8 code=0x7ffc0000 [ 44.589610][ T30] audit: type=1326 audit(44.156:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5834 comm="syz.3.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff839792a8 code=0x7ffc0000 [ 44.589657][ T30] audit: type=1326 audit(44.156:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5834 comm="syz.3.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=160 compat=0 ip=0xffff839792a8 code=0x7ffc0000 [ 44.589687][ T30] audit: type=1326 audit(44.156:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5834 comm="syz.3.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff839792a8 code=0x7ffc0000 [ 44.589712][ T30] audit: type=1326 audit(44.156:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5834 comm="syz.3.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff839792a8 code=0x7ffc0000 [ 44.613331][ T30] audit: type=1326 audit(44.156:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5834 comm="syz.3.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff839792a8 code=0x7ffc0000 [ 44.613377][ T30] audit: type=1326 audit(44.174:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5834 comm="syz.3.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff839792a8 code=0x7ffc0000 [ 44.613402][ T30] audit: type=1326 audit(44.174:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5834 comm="syz.3.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff839792a8 code=0x7ffc0000 [ 44.618763][ T5820] EXT4-fs (loop1): Remounting filesystem read-only [ 44.622796][ T30] audit: type=1326 audit(44.184:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5834 comm="syz.3.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=160 compat=0 ip=0xffff839792a8 code=0x7ffc0000 [ 44.622821][ T30] audit: type=1326 audit(44.184:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5834 comm="syz.3.212" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff839792a8 code=0x7ffc0000 [ 44.624226][ T5836] evm: overlay not supported [ 44.656245][ T5831] loop2: detected capacity change from 0 to 256 [ 44.813731][ T4703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.923360][ T5847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.152424][ T5869] overlayfs: failed lookup in lower (newroot/54, name='bus', err=-40): overlapping layers [ 45.156177][ T5872] overlayfs: failed lookup in lower (newroot/54, name='bus', err=-40): overlapping layers [ 45.160052][ T5874] overlayfs: failed lookup in lower (newroot/54, name='bus', err=-40): overlapping layers [ 45.214481][ T5878] EXT4-fs: Ignoring removed nobh option [ 45.239992][ T5878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.282343][ T5882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.225'. [ 45.285930][ T4704] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.306129][ T5882] syz.2.225 uses obsolete (PF_INET,SOCK_PACKET) [ 45.322589][ T5877] binder: 5876:5877 tried to acquire reference to desc 0, got 1 instead [ 45.324907][ T5877] binder: 5876:5877 got reply transaction with bad transaction stack, transaction 10 has target 5876:0 [ 45.324953][ T5877] binder: 5876:5877 transaction reply to 0:0 failed 11/29201/-71, code 0 size 0-0 line 3170 [ 45.325328][ T5885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.225'. [ 45.334562][ T5886] netlink: 24 bytes leftover after parsing attributes in process `syz.2.225'. [ 45.344072][ T10] binder: release 5876:5877 transaction 10 out, still active [ 45.346378][ T10] binder: undelivered TRANSACTION_COMPLETE [ 45.347975][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 45.372950][ T5890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.226'. [ 45.429231][ T24] binder: send failed reply for transaction 10, target dead [ 45.650163][ T5906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.653606][ T5906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.656642][ T5906] ext2: Unknown parameter 'dont_appraise' [ 46.156981][ T5919] random: crng reseeded on system resumption [ 46.199640][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.229561][ T5859] ext4: Unknown parameter 'defcontext' [ 46.290355][ T5930] netlink: 'syz.0.235': attribute type 1 has an invalid length. [ 46.730571][ T5944] ipt_rpfilter: unknown options [ 47.285228][ T5966] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 47.288429][ T5966] bond1 (unregistering): Released all slaves [ 47.627402][ T5971] capability: warning: `syz.4.248' uses deprecated v2 capabilities in a way that may be insecure [ 47.736952][ T5982] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.741943][ T5983] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.752973][ T5983] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #3: block 5: comm syz.0.253: lblock 5 mapped to illegal pblock 5 (length 1) [ 47.756994][ T5983] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 47.757676][ T5983] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.253: Failed to acquire dquot type 0 [ 47.759764][ T5983] loop0: lost filesystem error report for type 5 error -117 [ 47.762278][ T5983] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 5: comm syz.0.253: lblock 5 mapped to illegal pblock 5 (length 1) [ 47.766640][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 47.766653][ C1] EXT4-fs (loop0): initial error at time 47: ext4_map_blocks:832: inode 3: block 5 [ 47.766680][ C1] EXT4-fs (loop0): last error at time 47: ext4_acquire_dquot:7069 [ 47.770055][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.770265][ T5983] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 47.776258][ T5983] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.253: Failed to acquire dquot type 0 [ 47.780531][ T5983] loop0: lost filesystem error report for type 5 error -117 [ 47.782838][ T5983] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.253: Freeing blocks not in datazone - block = 0, count = 4096 [ 47.787066][ T5983] loop0: lost filesystem error report for type 5 error -117 [ 47.788907][ T5983] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #3: block 5: comm syz.0.253: lblock 5 mapped to illegal pblock 5 (length 1) [ 47.788943][ T5983] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 47.794009][ T5983] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.253: Failed to acquire dquot type 0 [ 47.798653][ T5983] loop0: lost filesystem error report for type 5 error -117 [ 47.799120][ T5983] EXT4-fs (loop0): 1 orphan inode deleted [ 47.802290][ T5983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.822398][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.949429][ T5999] netlink: 'syz.4.258': attribute type 4 has an invalid length. [ 48.059552][ T6007] EXT4-fs (loop3): Test dummy encryption mode enabled [ 48.066658][ T6007] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.441509][ T6016] gre1: entered allmulticast mode [ 48.475393][ T6012] netlink: 'syz.3.260': attribute type 2 has an invalid length. [ 48.475432][ T6012] netlink: 'syz.3.260': attribute type 2 has an invalid length. [ 48.475442][ T6012] __nla_validate_parse: 5 callbacks suppressed [ 48.475449][ T6012] netlink: 64 bytes leftover after parsing attributes in process `syz.3.260'. [ 48.744437][ T5991] FAULT_INJECTION: forcing a failure. [ 48.744437][ T5991] name fail_futex, interval 1, probability 0, space 0, times 1 [ 48.744485][ T5991] CPU: 0 UID: 0 PID: 5991 Comm: syz.0.256 Not tainted syzkaller #0 PREEMPT [ 48.744506][ T5991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 48.744512][ T5991] Call trace: [ 48.744515][ T5991] show_stack+0x2c/0x3c (C) [ 48.744533][ T5991] __dump_stack+0x30/0x40 [ 48.744546][ T5991] dump_stack_lvl+0xd8/0x12c [ 48.744556][ T5991] dump_stack+0x1c/0x28 [ 48.744565][ T5991] should_fail_ex+0x41c/0x590 [ 48.744576][ T5991] should_fail+0x14/0x24 [ 48.744586][ T5991] get_futex_key+0x1ec/0x12b0 [ 48.744595][ T5991] futex_wake+0x10c/0x594 [ 48.744604][ T5991] do_futex+0x2c4/0x378 [ 48.744613][ T5991] mm_exit_exec_release+0x190/0x27c [ 48.744621][ T5991] exit_mm+0x54/0x264 [ 48.744631][ T5991] do_exit+0x524/0x1a74 [ 48.744641][ T5991] do_group_exit+0x198/0x238 [ 48.744655][ T5991] get_signal+0xfb0/0x1094 [ 48.744665][ T5991] arch_do_signal_or_restart+0x288/0x444c [ 48.744676][ T5991] exit_to_user_mode_loop+0x70/0x17c [ 48.744686][ T5991] el0_svc+0x18c/0x260 [ 48.744695][ T5991] el0t_64_sync_handler+0x44/0x104 [ 48.744704][ T5991] el0t_64_sync+0x198/0x19c [ 48.819098][ T6061] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.830561][ T6061] syzkaller1: entered allmulticast mode [ 48.854589][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.265'. [ 48.877673][ T6064] set_capacity_and_notify: 10 callbacks suppressed [ 48.877717][ T6064] loop1: detected capacity change from 0 to 8192 [ 48.878701][ T6064] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.928238][ T6069] FAULT_INJECTION: forcing a failure. [ 48.928238][ T6069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.930925][ T6069] CPU: 1 UID: 0 PID: 6069 Comm: syz.4.267 Not tainted syzkaller #0 PREEMPT [ 48.930951][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 48.930958][ T6069] Call trace: [ 48.930961][ T6069] show_stack+0x2c/0x3c (C) [ 48.930986][ T6069] __dump_stack+0x30/0x40 [ 48.931002][ T6069] dump_stack_lvl+0xd8/0x12c [ 48.931015][ T6069] dump_stack+0x1c/0x28 [ 48.931026][ T6069] should_fail_ex+0x41c/0x590 [ 48.931039][ T6069] should_fail+0x14/0x24 [ 48.931050][ T6069] should_fail_usercopy+0x20/0x30 [ 48.931063][ T6069] _inline_copy_from_user+0x3c/0x174 [ 48.931076][ T6069] do_ip_vs_set_ctl+0x26c/0x93c [ 48.931087][ T6069] nf_setsockopt+0xa0/0xe4 [ 48.931099][ T6069] ip_setsockopt+0x118/0x128 [ 48.931109][ T6069] raw_setsockopt+0xd8/0x294 [ 48.931121][ T6069] sock_common_setsockopt+0xb0/0xcc [ 48.931131][ T6069] do_sock_setsockopt+0x1f0/0x330 [ 48.931141][ T6069] __sys_setsockopt+0x104/0x170 [ 48.931150][ T6069] __arm64_sys_setsockopt+0xc8/0xe4 [ 48.931159][ T6069] invoke_syscall+0x98/0x244 [ 48.931171][ T6069] el0_svc_common+0xec/0x23c [ 48.931182][ T6069] do_el0_svc+0x4c/0x5c [ 48.931193][ T6069] el0_svc+0x64/0x260 [ 48.931204][ T6069] el0t_64_sync_handler+0x44/0x104 [ 48.931214][ T6069] el0t_64_sync+0x198/0x19c [ 49.011494][ T4704] EXT4-fs error (device loop3): ext4_lookup:1787: inode #11: comm syz-executor: iget: checksum invalid [ 49.017560][ T4704] EXT4-fs error (device loop3): ext4_lookup:1787: inode #11: comm syz-executor: iget: checksum invalid [ 49.087141][ T6073] Cannot find add_set index 0 as target [ 49.184948][ T6078] netlink: 'syz.0.271': attribute type 13 has an invalid length. [ 49.317899][ T4704] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.354672][ T5668] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.391556][ T6088] FAULT_INJECTION: forcing a failure. [ 49.391556][ T6088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.394471][ T6088] CPU: 0 UID: 0 PID: 6088 Comm: syz.4.277 Not tainted syzkaller #0 PREEMPT [ 49.394493][ T6088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 49.394500][ T6088] Call trace: [ 49.394503][ T6088] show_stack+0x2c/0x3c (C) [ 49.394528][ T6088] __dump_stack+0x30/0x40 [ 49.394542][ T6088] dump_stack_lvl+0xd8/0x12c [ 49.394554][ T6088] dump_stack+0x1c/0x28 [ 49.394566][ T6088] should_fail_ex+0x41c/0x590 [ 49.394579][ T6088] should_fail+0x14/0x24 [ 49.394590][ T6088] should_fail_usercopy+0x20/0x30 [ 49.394602][ T6088] bpf_vlog_reverse_ubuf+0x254/0x578 [ 49.394616][ T6088] bpf_vlog_finalize+0x164/0x36c [ 49.394628][ T6088] bpf_log_attr_finalize+0x90/0x28c [ 49.394640][ T6088] btf_new_fd+0x3a8/0xa24 [ 49.394656][ T6088] bpf_btf_load+0x144/0x190 [ 49.394667][ T6088] __sys_bpf+0x7f0/0x82c [ 49.394677][ T6088] __arm64_sys_bpf+0xd0/0xec [ 49.394686][ T6088] invoke_syscall+0x98/0x244 [ 49.394698][ T6088] el0_svc_common+0xec/0x23c [ 49.394710][ T6088] do_el0_svc+0x4c/0x5c [ 49.394721][ T6088] el0_svc+0x64/0x260 [ 49.394732][ T6088] el0t_64_sync_handler+0x44/0x104 [ 49.394742][ T6088] el0t_64_sync+0x198/0x19c [ 49.420946][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 49.423808][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 49.426178][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 49.428263][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 49.430230][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 49.451536][ T5668] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.460536][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.278'. [ 49.478854][ T6097] FAULT_INJECTION: forcing a failure. [ 49.478854][ T6097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.481390][ T6097] CPU: 0 UID: 0 PID: 6097 Comm: syz.4.279 Not tainted syzkaller #0 PREEMPT [ 49.481413][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 49.481423][ T6097] Call trace: [ 49.481428][ T6097] show_stack+0x2c/0x3c (C) [ 49.481449][ T6097] __dump_stack+0x30/0x40 [ 49.481463][ T6097] dump_stack_lvl+0xd8/0x12c [ 49.481475][ T6097] dump_stack+0x1c/0x28 [ 49.481486][ T6097] should_fail_ex+0x41c/0x590 [ 49.481499][ T6097] should_fail+0x14/0x24 [ 49.481510][ T6097] should_fail_usercopy+0x20/0x30 [ 49.481522][ T6097] bpf_verifier_vlog+0x81c/0xbc0 [ 49.481536][ T6097] btf_verifier_log+0x120/0x1a0 [ 49.481544][ T6097] btf_parse_type_sec+0x153c/0x17a8 [ 49.481554][ T6097] btf_new_fd+0x33c/0xa24 [ 49.481565][ T6097] bpf_btf_load+0x144/0x190 [ 49.481575][ T6097] __sys_bpf+0x7f0/0x82c [ 49.481584][ T6097] __arm64_sys_bpf+0xd0/0xec [ 49.481593][ T6097] invoke_syscall+0x98/0x244 [ 49.481605][ T6097] el0_svc_common+0xec/0x23c [ 49.481617][ T6097] do_el0_svc+0x4c/0x5c [ 49.481628][ T6097] el0_svc+0x64/0x260 [ 49.481639][ T6097] el0t_64_sync_handler+0x44/0x104 [ 49.481654][ T6097] el0t_64_sync+0x198/0x19c [ 49.505686][ T4706] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 49.542641][ T5668] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.565013][ T6107] syz.4.281 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.618091][ T5668] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.672939][ T4706] usb 1-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40 [ 49.676429][ T4706] usb 1-1: config 1 interface 0 has no altsetting 0 [ 49.681338][ T4706] usb 1-1: string descriptor 0 read error: -22 [ 49.681410][ T4706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.704988][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 49.804722][ T5668] team0: left allmulticast mode [ 49.806295][ T5668] team_slave_0: left allmulticast mode [ 49.807864][ T5668] team_slave_1: left allmulticast mode [ 49.810251][ T5668] team0: left promiscuous mode [ 49.811498][ T5668] team_slave_0: left promiscuous mode [ 49.813038][ T5668] team_slave_1: left promiscuous mode [ 49.815305][ T5668] bridge0: port 3(team0) entered disabled state [ 49.818212][ T5668] bridge_slave_1: left allmulticast mode [ 49.818239][ T5668] bridge_slave_1: left promiscuous mode [ 49.818318][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.821637][ T5668] bridge_slave_0: left allmulticast mode [ 49.821652][ T5668] bridge_slave_0: left promiscuous mode [ 49.821720][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.898904][ T5668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.940721][ T5668] bond0 (unregistering): Released all slaves [ 49.943418][ T6089] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.943479][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.943566][ T6089] bridge_slave_0: entered allmulticast mode [ 49.944153][ T6089] bridge_slave_0: entered promiscuous mode [ 49.945203][ T6089] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.945250][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.945300][ T6089] bridge_slave_1: entered allmulticast mode [ 49.946738][ T6089] bridge_slave_1: entered promiscuous mode [ 49.959816][ T6089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.963392][ T6089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.978375][ T6089] team0: Port device team_slave_0 added [ 49.979161][ T6089] team0: Port device team_slave_1 added [ 49.998152][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.999568][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.005251][ T6089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.008341][ T6089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.009769][ T6089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.014818][ T6089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.039247][ T6138] netlink: 'syz.4.291': attribute type 39 has an invalid length. [ 50.041053][ T6089] hsr_slave_0: entered promiscuous mode [ 50.042923][ T6089] hsr_slave_1: entered promiscuous mode [ 50.045123][ T6089] debugfs: 'hsr0' already exists in 'hsr' [ 50.045429][ T6089] Cannot create hsr debugfs directory [ 50.233979][ T6153] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 50.234111][ T6153] overlayfs: missing 'lowerdir' [ 50.457222][ T5668] hsr_slave_0: left promiscuous mode [ 50.458654][ T5668] hsr_slave_1: left promiscuous mode [ 50.460326][ T5668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.460343][ T5668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.467496][ T5668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.467520][ T5668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.477641][ T5668] veth1_macvtap: left promiscuous mode [ 50.477704][ T5668] veth0_macvtap: left promiscuous mode [ 50.477766][ T5668] veth1_vlan: left promiscuous mode [ 50.479018][ T5668] veth0_vlan: left promiscuous mode [ 50.591318][ T4706] usbhid 1-1:1.0: can't add hid device: -71 [ 50.591399][ T4706] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 50.598522][ T4706] usb 1-1: USB disconnect, device number 2 [ 50.674715][ T5668] team0 (unregistering): Port device team_slave_1 removed [ 50.693316][ T5668] team0 (unregistering): Port device team_slave_0 removed [ 50.760075][ T4394] 8021q: adding VLAN 0 to HW filter on device eth1 [ 50.808924][ T6089] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.818376][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.818882][ T6089] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 50.823485][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.824475][ T6089] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 50.830583][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.830960][ T6089] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.838896][ T6089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.894371][ T6089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.909467][ T6089] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.912682][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.912730][ T5662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.922292][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.922344][ T5662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.966692][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.966912][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.209779][ T6089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.219598][ T4394] 8021q: adding VLAN 0 to HW filter on device eth0 [ 51.416164][ T6244] FAULT_INJECTION: forcing a failure. [ 51.416164][ T6244] name failslab, interval 1, probability 0, space 0, times 0 [ 51.416201][ T6244] CPU: 1 UID: 0 PID: 6244 Comm: syz.2.313 Not tainted syzkaller #0 PREEMPT [ 51.416215][ T6244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 51.416221][ T6244] Call trace: [ 51.416223][ T6244] show_stack+0x2c/0x3c (C) [ 51.416243][ T6244] __dump_stack+0x30/0x40 [ 51.416259][ T6244] dump_stack_lvl+0xd8/0x12c [ 51.416270][ T6244] dump_stack+0x1c/0x28 [ 51.416281][ T6244] should_fail_ex+0x41c/0x590 [ 51.416294][ T6244] should_failslab+0xc4/0x120 [ 51.416306][ T6244] __kmalloc_noprof+0x108/0x6c8 [ 51.416315][ T6244] tomoyo_encode2+0x10c/0x330 [ 51.416326][ T6244] tomoyo_encode+0x34/0x50 [ 51.416336][ T6244] tomoyo_mount_permission+0x5d0/0x7e4 [ 51.416351][ T6244] tomoyo_sb_mount+0x48/0x60 [ 51.416362][ T6244] security_sb_mount+0xfc/0x308 [ 51.416370][ T6244] path_mount+0xb8/0xa88 [ 51.416381][ T6244] do_mount+0xe8/0x148 [ 51.416391][ T6244] __arm64_sys_mount+0x33c/0x388 [ 51.416402][ T6244] invoke_syscall+0x98/0x244 [ 51.416414][ T6244] el0_svc_common+0xec/0x23c [ 51.416425][ T6244] do_el0_svc+0x4c/0x5c [ 51.416436][ T6244] el0_svc+0x64/0x260 [ 51.416447][ T6244] el0t_64_sync_handler+0x44/0x104 [ 51.416457][ T6244] el0t_64_sync+0x198/0x19c [ 51.463059][ T6246] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 51.485377][ T6089] veth0_vlan: entered promiscuous mode [ 51.487200][ T6089] veth1_vlan: entered promiscuous mode [ 51.504212][ T6089] veth0_macvtap: entered promiscuous mode [ 51.508310][ T6089] veth1_macvtap: entered promiscuous mode [ 51.523378][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.529250][ T6089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.567235][ T5668] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.567738][ T5668] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.567844][ T5668] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.567928][ T5668] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.587295][ T6253] input: syz0 as /devices/virtual/input/input5 [ 51.594622][ T5662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.594666][ T5662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.598518][ T6257] netlink: 32 bytes leftover after parsing attributes in process `syz.1.317'. [ 51.635675][ T5659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.635705][ T5659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.640691][ T6259] loop1: detected capacity change from 0 to 2048 [ 51.661772][ T4712] Bluetooth: hci1: command tx timeout [ 51.679509][ T6259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.753419][ T4394] 8021q: adding VLAN 0 to HW filter on device eth3 [ 51.805756][ T6273] syzkaller0: entered promiscuous mode [ 51.805857][ T6273] syzkaller0: entered allmulticast mode [ 52.233406][ T4394] 8021q: adding VLAN 0 to HW filter on device eth2 [ 52.534332][ T6259] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.539519][ T6259] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 52.542299][ T6259] EXT4-fs (loop1): This should not happen!! Data will be lost [ 52.542299][ T6259] [ 52.544764][ T6259] EXT4-fs (loop1): Total free blocks count 0 [ 52.546060][ T6259] EXT4-fs (loop1): Free/Dirty block details [ 52.547393][ T6259] EXT4-fs (loop1): free_blocks=2415919104 [ 52.556584][ T6259] EXT4-fs (loop1): dirty_blocks=16 [ 52.557838][ T6259] EXT4-fs (loop1): Block reservation details [ 52.559230][ T6259] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 52.585494][ T4703] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.677634][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.331'. [ 52.780744][ T6328] loop1: detected capacity change from 0 to 128 [ 52.913497][ T4706] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.930038][ T4706] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.975700][ T6251] Set syz0 is full, maxelem 65536 reached [ 53.031145][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.033617][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.386312][ T6363] FAULT_INJECTION: forcing a failure. [ 53.386312][ T6363] name fail_futex, interval 1, probability 0, space 0, times 0 [ 53.388851][ T6363] CPU: 1 UID: 0 PID: 6363 Comm: syz.1.348 Not tainted syzkaller #0 PREEMPT [ 53.388867][ T6363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 53.388873][ T6363] Call trace: [ 53.388876][ T6363] show_stack+0x2c/0x3c (C) [ 53.388895][ T6363] __dump_stack+0x30/0x40 [ 53.388908][ T6363] dump_stack_lvl+0xd8/0x12c [ 53.388919][ T6363] dump_stack+0x1c/0x28 [ 53.388930][ T6363] should_fail_ex+0x41c/0x590 [ 53.388943][ T6363] should_fail+0x14/0x24 [ 53.388954][ T6363] get_futex_key+0x1ec/0x12b0 [ 53.388965][ T6363] futex_wait_setup+0x58/0x674 [ 53.388976][ T6363] __futex_wait+0x108/0x25c [ 53.388987][ T6363] futex_wait+0x108/0x2c0 [ 53.388998][ T6363] do_futex+0x320/0x378 [ 53.389008][ T6363] __arm64_sys_futex+0x2e4/0x418 [ 53.389018][ T6363] invoke_syscall+0x98/0x244 [ 53.389030][ T6363] el0_svc_common+0xec/0x23c [ 53.389042][ T6363] do_el0_svc+0x4c/0x5c [ 53.389053][ T6363] el0_svc+0x64/0x260 [ 53.389063][ T6363] el0t_64_sync_handler+0x44/0x104 [ 53.389073][ T6363] el0t_64_sync+0x198/0x19c [ 53.625524][ T6386] loop0: detected capacity change from 0 to 2048 [ 53.647890][ T6386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.673065][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.749907][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 53.753251][ T6401] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.792689][ T6409] gadgetfs: bound to dummy_udc driver [ 53.913389][ T4712] Bluetooth: hci1: command tx timeout [ 53.966472][ T6430] loop1: detected capacity change from 0 to 2048 [ 53.984377][ T6430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.303572][ T6446] netlink: 36 bytes leftover after parsing attributes in process `syz.5.374'. [ 54.374939][ T6451] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 54.735469][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.735692][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.809438][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 54.809475][ T30] audit: type=1326 audit(53.609:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6480 comm="syz.2.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf792a8 code=0x7ffc0000 [ 54.809504][ T30] audit: type=1326 audit(53.609:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6480 comm="syz.2.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf792a8 code=0x7ffc0000 [ 54.822117][ T30] audit: type=1326 audit(53.618:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6480 comm="syz.2.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf792a8 code=0x7ffc0000 [ 54.822165][ T30] audit: type=1326 audit(53.618:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6480 comm="syz.2.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf792a8 code=0x7ffc0000 [ 54.825343][ T6481] FAULT_INJECTION: forcing a failure. [ 54.825343][ T6481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.825356][ T6481] CPU: 1 UID: 0 PID: 6481 Comm: syz.2.385 Not tainted syzkaller #0 PREEMPT [ 54.825366][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 54.825370][ T6481] Call trace: [ 54.825373][ T6481] show_stack+0x2c/0x3c (C) [ 54.825390][ T6481] __dump_stack+0x30/0x40 [ 54.825405][ T6481] dump_stack_lvl+0xd8/0x12c [ 54.825415][ T6481] dump_stack+0x1c/0x28 [ 54.825426][ T6481] should_fail_ex+0x41c/0x590 [ 54.825439][ T6481] should_fail+0x14/0x24 [ 54.825449][ T6481] should_fail_usercopy+0x20/0x30 [ 54.825459][ T6481] __arm64_sys_newuname+0x178/0x630 [ 54.825470][ T6481] invoke_syscall+0x98/0x244 [ 54.825480][ T6481] el0_svc_common+0x19c/0x23c [ 54.825490][ T6481] do_el0_svc+0x4c/0x5c [ 54.825499][ T6481] el0_svc+0x64/0x260 [ 54.825509][ T6481] el0t_64_sync_handler+0x44/0x104 [ 54.825517][ T6481] el0t_64_sync+0x198/0x19c [ 54.826302][ T30] audit: type=1326 audit(53.618:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6480 comm="syz.2.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffffbcf5c16c code=0x7ffc0000 [ 54.826318][ T30] audit: type=1326 audit(53.618:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6480 comm="syz.2.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffbcf5c16c code=0x7ffc0000 [ 54.826333][ T30] audit: type=1326 audit(53.618:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6480 comm="syz.2.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=160 compat=0 ip=0xffffbcf792a8 code=0x7ffc0000 [ 54.826348][ T30] audit: type=1326 audit(53.618:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6480 comm="syz.2.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffffbcf5c16c code=0x7ffc0000 [ 54.826362][ T30] audit: type=1326 audit(53.618:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6480 comm="syz.2.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffbcf5c16c code=0x7ffc0000 [ 54.826377][ T30] audit: type=1326 audit(53.618:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6480 comm="syz.2.385" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffffbcf5c16c code=0x7ffc0000 [ 54.875620][ T6484] loop5: detected capacity change from 0 to 8192 [ 54.925728][ T6484] loop5: p1 p2 p4[EZD] [ 54.928216][ T6484] loop5: p4 start 201326592 is beyond EOD, truncated [ 55.109557][ T6511] loop0: detected capacity change from 0 to 1024 [ 55.178730][ T6526] loop2: detected capacity change from 0 to 128 [ 55.209222][ T5373] udevd[5373]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 55.210343][ T4696] udevd[4696]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 55.337541][ T6533] FAULT_INJECTION: forcing a failure. [ 55.337541][ T6533] name failslab, interval 1, probability 0, space 0, times 0 [ 55.337581][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz.2.396 Not tainted syzkaller #0 PREEMPT [ 55.337594][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 55.337599][ T6533] Call trace: [ 55.337603][ T6533] show_stack+0x2c/0x3c (C) [ 55.337622][ T6533] __dump_stack+0x30/0x40 [ 55.337634][ T6533] dump_stack_lvl+0xd8/0x12c [ 55.337646][ T6533] dump_stack+0x1c/0x28 [ 55.337657][ T6533] should_fail_ex+0x41c/0x590 [ 55.337676][ T6533] should_failslab+0xc4/0x120 [ 55.337690][ T6533] __kmalloc_cache_noprof+0x94/0x5fc [ 55.337699][ T6533] resv_map_alloc+0x60/0x284 [ 55.337710][ T6533] hugetlbfs_get_inode+0x70/0x834 [ 55.337723][ T6533] hugetlb_file_setup+0x270/0x574 [ 55.337736][ T6533] newseg+0x3bc/0x904 [ 55.337746][ T6533] ipcget+0x920/0xce4 [ 55.337754][ T6533] __arm64_sys_shmget+0x128/0x17c [ 55.337764][ T6533] invoke_syscall+0x98/0x244 [ 55.337776][ T6533] el0_svc_common+0xec/0x23c [ 55.337787][ T6533] do_el0_svc+0x4c/0x5c [ 55.337798][ T6533] el0_svc+0x64/0x260 [ 55.337809][ T6533] el0t_64_sync_handler+0x44/0x104 [ 55.337819][ T6533] el0t_64_sync+0x198/0x19c [ 56.166832][ T4712] Bluetooth: hci1: command tx timeout [ 56.399541][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.5.422'. [ 56.403302][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.422'. [ 56.985524][ T6621] netlink: 388 bytes leftover after parsing attributes in process `syz.4.433'. [ 57.152871][ T4790] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 57.282442][ T6636] loop4: detected capacity change from 0 to 256 [ 57.317253][ T6638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.319500][ T6638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.338825][ T4790] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 57.339592][ T4790] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 57.339603][ T4790] usb 1-1: config 0 has no interface number 0 [ 57.339615][ T4790] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 57.339626][ T4790] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 57.339642][ T4790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.341985][ T4790] usb 1-1: config 0 descriptor?? [ 57.343840][ T6617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 57.353474][ T4790] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 57.527047][ T6657] bond0: invalid ARP target specified [ 57.529516][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.450'. [ 57.583711][ T4790] usb 1-1: USB disconnect, device number 3 [ 57.660542][ T6668] loop1: detected capacity change from 0 to 512 [ 57.662422][ T6668] EXT4-fs: Ignoring removed orlov option [ 57.892866][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.894914][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.051982][ T6695] loop1: detected capacity change from 0 to 1024 [ 58.053159][ T6695] ext4: Unknown parameter 'fscontext' [ 58.054817][ T6695] netlink: 92 bytes leftover after parsing attributes in process `syz.1.468'. [ 58.181467][ T6703] loop0: detected capacity change from 0 to 512 [ 58.454100][ T4712] Bluetooth: hci1: command tx timeout [ 58.638587][ T6721] loop5: detected capacity change from 0 to 512 [ 58.638950][ T6721] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 58.756875][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.762551][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.777021][ T6735] team0: No ports can be present during mode change [ 60.537712][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 60.966768][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.516'. [ 61.060245][ T6849] FAULT_INJECTION: forcing a failure. [ 61.060245][ T6849] name failslab, interval 1, probability 0, space 0, times 0 [ 61.060285][ T6849] CPU: 0 UID: 0 PID: 6849 Comm: syz.1.521 Not tainted syzkaller #0 PREEMPT [ 61.060301][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.060307][ T6849] Call trace: [ 61.060311][ T6849] show_stack+0x2c/0x3c (C) [ 61.060332][ T6849] __dump_stack+0x30/0x40 [ 61.060345][ T6849] dump_stack_lvl+0xd8/0x12c [ 61.060357][ T6849] dump_stack+0x1c/0x28 [ 61.060368][ T6849] should_fail_ex+0x41c/0x590 [ 61.060381][ T6849] should_failslab+0xc4/0x120 [ 61.060394][ T6849] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 61.060407][ T6849] __d_alloc+0x50/0x690 [ 61.060417][ T6849] d_alloc_pseudo+0x2c/0xd8 [ 61.060425][ T6849] alloc_path_pseudo+0xe8/0x1d4 [ 61.060434][ T6849] alloc_file_pseudo+0xb0/0x198 [ 61.060442][ T6849] sock_alloc_file+0xb4/0x1ac [ 61.060455][ T6849] __sys_socket+0x90/0xec [ 61.060463][ T6849] __arm64_sys_socket+0x84/0x9c [ 61.060472][ T6849] invoke_syscall+0x98/0x244 [ 61.060484][ T6849] el0_svc_common+0xec/0x23c [ 61.060496][ T6849] do_el0_svc+0x4c/0x5c [ 61.060507][ T6849] el0_svc+0x64/0x260 [ 61.060518][ T6849] el0t_64_sync_handler+0x44/0x104 [ 61.060528][ T6849] el0t_64_sync+0x198/0x19c [ 61.113557][ T6846] FAULT_INJECTION: forcing a failure. [ 61.113557][ T6846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 61.116202][ T6846] CPU: 1 UID: 0 PID: 6846 Comm: syz.4.520 Not tainted syzkaller #0 PREEMPT [ 61.116224][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 61.116231][ T6846] Call trace: [ 61.116235][ T6846] show_stack+0x2c/0x3c (C) [ 61.116259][ T6846] __dump_stack+0x30/0x40 [ 61.116273][ T6846] dump_stack_lvl+0xd8/0x12c [ 61.116285][ T6846] dump_stack+0x1c/0x28 [ 61.116297][ T6846] should_fail_ex+0x41c/0x590 [ 61.116309][ T6846] should_fail+0x14/0x24 [ 61.116321][ T6846] should_fail_usercopy+0x20/0x30 [ 61.116333][ T6846] _copy_to_iter+0x424/0x10f8 [ 61.116346][ T6846] copy_page_to_iter+0x248/0x33c [ 61.116359][ T6846] process_vm_rw+0x618/0x944 [ 61.116372][ T6846] __arm64_sys_process_vm_readv+0xf0/0x10c [ 61.116384][ T6846] invoke_syscall+0x98/0x244 [ 61.116396][ T6846] el0_svc_common+0xec/0x23c [ 61.116407][ T6846] do_el0_svc+0x4c/0x5c [ 61.116419][ T6846] el0_svc+0x64/0x260 [ 61.116429][ T6846] el0t_64_sync_handler+0x44/0x104 [ 61.116439][ T6846] el0t_64_sync+0x198/0x19c [ 61.321977][ T6878] loop1: detected capacity change from 0 to 2048 [ 61.326085][ T6878] ext4: Unknown parameter 'dont_hash' [ 61.405610][ T6882] loop4: detected capacity change from 0 to 128 [ 62.415832][ T6890] loop5: detected capacity change from 0 to 512 [ 62.419725][ T6890] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 62.477327][ T6890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 62.604368][ T6890] System zones: 1-2, 4-12, 8-8 [ 62.639920][ T6890] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.537: iget: bad i_size value: 38620345925642 [ 62.639978][ T6890] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 62.640222][ T6890] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.537: couldn't read orphan inode 15 (err -117) [ 62.640236][ T6890] loop5: lost filesystem error report for type 5 error -117 [ 62.761962][ T6905] netlink: 44 bytes leftover after parsing attributes in process `syz.2.545'. [ 62.935194][ T4712] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 63.384382][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 63.384416][ T30] audit: type=1326 audit(61.517:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.4.555" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff917792a8 code=0x7ffc0000 [ 63.384445][ T30] audit: type=1326 audit(61.517:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.4.555" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff917792a8 code=0x7ffc0000 [ 63.384466][ T30] audit: type=1326 audit(61.517:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.4.555" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff917792a8 code=0x7ffc0000 [ 63.384486][ T30] audit: type=1326 audit(61.517:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.4.555" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff917792a8 code=0x7ffc0000 [ 63.386702][ T30] audit: type=1326 audit(61.526:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.4.555" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=437 compat=0 ip=0xffff917792a8 code=0x7ffc0000 [ 63.386731][ T30] audit: type=1326 audit(61.526:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.4.555" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff917792a8 code=0x7ffc0000 [ 63.386762][ T30] audit: type=1326 audit(61.526:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.4.555" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff917792a8 code=0x7ffc0000 [ 63.389202][ T30] audit: type=1326 audit(61.526:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.4.555" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff917792a8 code=0x7ffc0000 [ 63.390143][ T30] audit: type=1326 audit(61.526:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6937 comm="syz.4.555" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff917792a8 code=0x7ffc0000 [ 63.523898][ T6946] netlink: 'syz.0.560': attribute type 12 has an invalid length. [ 63.595336][ T6949] FAULT_INJECTION: forcing a failure. [ 63.595336][ T6949] name failslab, interval 1, probability 0, space 0, times 0 [ 63.595373][ T6949] CPU: 1 UID: 0 PID: 6949 Comm: syz.1.561 Not tainted syzkaller #0 PREEMPT [ 63.595390][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 63.595397][ T6949] Call trace: [ 63.595400][ T6949] show_stack+0x2c/0x3c (C) [ 63.595421][ T6949] __dump_stack+0x30/0x40 [ 63.595437][ T6949] dump_stack_lvl+0xd8/0x12c [ 63.595449][ T6949] dump_stack+0x1c/0x28 [ 63.595460][ T6949] should_fail_ex+0x41c/0x590 [ 63.595473][ T6949] should_failslab+0xc4/0x120 [ 63.595485][ T6949] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 63.595499][ T6949] __d_alloc+0x50/0x690 [ 63.595508][ T6949] d_alloc_pseudo+0x2c/0xd8 [ 63.595517][ T6949] alloc_path_pseudo+0xe8/0x1d4 [ 63.595526][ T6949] alloc_file_pseudo+0xb0/0x198 [ 63.595534][ T6949] sock_alloc_file+0xb4/0x1ac [ 63.595544][ T6949] __sys_socket+0x90/0xec [ 63.595553][ T6949] __arm64_sys_socket+0x84/0x9c [ 63.595562][ T6949] invoke_syscall+0x98/0x244 [ 63.595574][ T6949] el0_svc_common+0xec/0x23c [ 63.595585][ T6949] do_el0_svc+0x4c/0x5c [ 63.595597][ T6949] el0_svc+0x64/0x260 [ 63.595608][ T6949] el0t_64_sync_handler+0x44/0x104 [ 63.595618][ T6949] el0t_64_sync+0x198/0x19c [ 63.705980][ T30] audit: type=1326 audit(61.813:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6960 comm="syz.2.567" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbcf792a8 code=0x7ffc0000 [ 64.513738][ T6989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.514590][ T6989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.559583][ T6996] loop0: detected capacity change from 0 to 512 [ 64.561316][ T6996] EXT4-fs: Ignoring removed bh option [ 64.563601][ T6996] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.722737][ T7020] loop4: detected capacity change from 0 to 1024 [ 64.723593][ T7019] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 64.731406][ T7020] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.731449][ T7020] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 64.731501][ T7020] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 64.732092][ T7020] EXT4-fs (loop4): invalid journal inode [ 64.799994][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 64.871347][ T7038] loop4: detected capacity change from 0 to 256 [ 64.871720][ T7038] vfat: Bad value for 'fmask' [ 65.733398][ T7062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.736080][ T7062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.823318][ T7077] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 65.889262][ T7077] md: loop1 has zero or unknown size, marking faulty! [ 65.952302][ T7094] FAULT_INJECTION: forcing a failure. [ 65.952302][ T7094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.952338][ T7094] CPU: 0 UID: 0 PID: 7094 Comm: syz.1.599 Not tainted syzkaller #0 PREEMPT [ 65.952350][ T7094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 65.952356][ T7094] Call trace: [ 65.952361][ T7094] show_stack+0x2c/0x3c (C) [ 65.952384][ T7094] __dump_stack+0x30/0x40 [ 65.952399][ T7094] dump_stack_lvl+0xd8/0x12c [ 65.952410][ T7094] dump_stack+0x1c/0x28 [ 65.952421][ T7094] should_fail_ex+0x41c/0x590 [ 65.952434][ T7094] should_fail+0x14/0x24 [ 65.952445][ T7094] should_fail_usercopy+0x20/0x30 [ 65.952457][ T7094] bpf_verifier_vlog+0x478/0xbc0 [ 65.952470][ T7094] __btf_verifier_log+0xe8/0x13c [ 65.952479][ T7094] btf_verifier_log_vsi+0x1c4/0x36c [ 65.952487][ T7094] btf_datasec_check_meta+0x4bc/0x71c [ 65.952497][ T7094] btf_parse_type_sec+0x36c/0x17a8 [ 65.952506][ T7094] btf_new_fd+0x33c/0xa24 [ 65.952517][ T7094] bpf_btf_load+0x144/0x190 [ 65.952527][ T7094] __sys_bpf+0x7f0/0x82c [ 65.952536][ T7094] __arm64_sys_bpf+0xd0/0xec [ 65.952545][ T7094] invoke_syscall+0x98/0x244 [ 65.952556][ T7094] el0_svc_common+0xec/0x23c [ 65.952568][ T7094] do_el0_svc+0x4c/0x5c [ 65.952579][ T7094] el0_svc+0x64/0x260 [ 65.952590][ T7094] el0t_64_sync_handler+0x44/0x104 [ 65.952599][ T7094] el0t_64_sync+0x198/0x19c [ 66.003640][ T7099] syzkaller0: entered promiscuous mode [ 66.003687][ T7099] syzkaller0: entered allmulticast mode [ 66.155171][ T7110] FAULT_INJECTION: forcing a failure. [ 66.155171][ T7110] name fail_futex, interval 1, probability 0, space 0, times 0 [ 66.155207][ T7110] CPU: 0 UID: 0 PID: 7110 Comm: syz.1.603 Not tainted syzkaller #0 PREEMPT [ 66.155219][ T7110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 66.155225][ T7110] Call trace: [ 66.155228][ T7110] show_stack+0x2c/0x3c (C) [ 66.155247][ T7110] __dump_stack+0x30/0x40 [ 66.155261][ T7110] dump_stack_lvl+0xd8/0x12c [ 66.155272][ T7110] dump_stack+0x1c/0x28 [ 66.155283][ T7110] should_fail_ex+0x41c/0x590 [ 66.155296][ T7110] should_fail+0x14/0x24 [ 66.155307][ T7110] get_futex_key+0x1ec/0x12b0 [ 66.155318][ T7110] futex_wait_setup+0x58/0x674 [ 66.155330][ T7110] __futex_wait+0x108/0x25c [ 66.155341][ T7110] futex_wait+0x108/0x2c0 [ 66.155352][ T7110] do_futex+0x320/0x378 [ 66.155362][ T7110] __arm64_sys_futex+0x2e4/0x418 [ 66.155372][ T7110] invoke_syscall+0x98/0x244 [ 66.155384][ T7110] el0_svc_common+0xec/0x23c [ 66.155396][ T7110] do_el0_svc+0x4c/0x5c [ 66.155407][ T7110] el0_svc+0x64/0x260 [ 66.155418][ T7110] el0t_64_sync_handler+0x44/0x104 [ 66.155428][ T7110] el0t_64_sync+0x198/0x19c [ 66.359978][ T7124] random: crng reseeded on system resumption [ 66.614334][ T1593] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.614411][ T1593] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.645366][ T9] cfg80211: failed to load regulatory.db [ 66.687111][ T7133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 66.689563][ T7133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 66.689609][ T7133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 66.689642][ T7133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 66.689679][ T7133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 66.689710][ T7133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 66.689739][ T7133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 66.689767][ T7133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 66.689801][ T7133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 66.689841][ T7133] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 66.748415][ T7134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.748609][ T7134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.043935][ T7147] overlayfs: failed lookup in lower (newroot/96, name='file0', err=-40): overlapping layers [ 67.163134][ T7155] loop0: detected capacity change from 0 to 1024 [ 67.167001][ T7155] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 67.167082][ T7155] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 67.168640][ T7155] EXT4-fs error (device loop0): ext4_get_journal_inode:5927: inode #32: comm syz.0.623: iget: special inode unallocated [ 67.168665][ T7155] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 67.168788][ T7155] EXT4-fs (loop0): Remounting filesystem read-only [ 67.168823][ T7155] EXT4-fs (loop0): no journal found [ 67.168830][ T7155] EXT4-fs (loop0): can't get journal size [ 67.169642][ T7155] EXT4-fs (loop0): filesystem is read-only [ 67.170170][ T7155] EXT4-fs mount: 11 callbacks suppressed [ 67.170178][ T7155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 67.184117][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.277030][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.279392][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.533577][ T7177] netlink: 'syz.2.633': attribute type 13 has an invalid length. [ 67.594837][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.595030][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.551946][ T7200] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.669993][ T7210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.672588][ T7210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.703877][ T7200] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.773002][ T7200] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.845327][ T7200] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.011811][ T5663] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.019555][ T5663] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.077785][ T58] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.078636][ T5663] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.111103][ T7223] FAULT_INJECTION: forcing a failure. [ 69.111103][ T7223] name failslab, interval 1, probability 0, space 0, times 0 [ 69.113518][ T7223] CPU: 0 UID: 0 PID: 7223 Comm: syz.1.652 Not tainted syzkaller #0 PREEMPT [ 69.113540][ T7223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 69.113549][ T7223] Call trace: [ 69.113554][ T7223] show_stack+0x2c/0x3c (C) [ 69.113578][ T7223] __dump_stack+0x30/0x40 [ 69.113591][ T7223] dump_stack_lvl+0xd8/0x12c [ 69.113603][ T7223] dump_stack+0x1c/0x28 [ 69.113614][ T7223] should_fail_ex+0x41c/0x590 [ 69.113627][ T7223] should_failslab+0xc4/0x120 [ 69.113639][ T7223] kmem_cache_alloc_noprof+0x94/0x5d4 [ 69.113655][ T7223] alloc_vfsmnt+0x38/0x474 [ 69.113667][ T7223] vfs_create_mount+0x68/0x140 [ 69.113676][ T7223] fc_mount+0x98/0xac [ 69.113685][ T7223] fc_mount_longterm+0x20/0x74 [ 69.113695][ T7223] mq_init_ns+0x3c8/0x638 [ 69.113707][ T7223] copy_ipcs+0x3c8/0x63c [ 69.113718][ T7223] create_new_namespaces+0x1a8/0x50c [ 69.113729][ T7223] unshare_nsproxy_namespaces+0x120/0x170 [ 69.113739][ T7223] ksys_unshare+0x438/0x6cc [ 69.113749][ T7223] __arm64_sys_unshare+0x40/0x54 [ 69.113758][ T7223] invoke_syscall+0x98/0x244 [ 69.113770][ T7223] el0_svc_common+0xec/0x23c [ 69.113781][ T7223] do_el0_svc+0x4c/0x5c [ 69.113792][ T7223] el0_svc+0x64/0x260 [ 69.113803][ T7223] el0t_64_sync_handler+0x44/0x104 [ 69.113813][ T7223] el0t_64_sync+0x198/0x19c [ 69.145972][ T7225] batadv_slave_0: Caught tx_queue_len zero misconfig [ 69.236878][ T7231] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 69.549893][ T7256] loop0: detected capacity change from 0 to 512 [ 69.552635][ T7256] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.615297][ T7256] EXT4-fs (loop0): 1 truncate cleaned up [ 69.618089][ T7256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.755668][ T4719] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.867289][ T7270] loop0: detected capacity change from 0 to 4096 [ 69.869111][ T7270] EXT4-fs: Ignoring removed mblk_io_submit option [ 69.870774][ T7270] ext4: Unknown parameter 'in' [ 70.301496][ T7278] loop1: detected capacity change from 0 to 8 [ 70.306625][ T7278] Filesystem uses "lzo" compression. This is not supported [ 70.337980][ T7280] netlink: 27 bytes leftover after parsing attributes in process `syz.1.672'. [ 70.422901][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.427782][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.435201][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.437186][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.315356][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 71.315392][ T30] audit: type=1326 audit(68.834:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.0.690" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 71.321612][ T30] audit: type=1326 audit(68.834:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.0.690" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 71.321637][ T30] audit: type=1326 audit(68.834:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.0.690" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 71.321659][ T30] audit: type=1326 audit(68.834:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.0.690" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 71.321678][ T30] audit: type=1326 audit(68.834:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.0.690" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 71.321694][ T30] audit: type=1326 audit(68.834:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.0.690" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 71.321710][ T30] audit: type=1326 audit(68.834:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.0.690" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 71.321725][ T30] audit: type=1326 audit(68.834:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.0.690" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 71.321740][ T30] audit: type=1326 audit(68.834:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.0.690" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=218 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 71.321755][ T30] audit: type=1326 audit(68.834:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7324 comm="syz.0.690" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa91792a8 code=0x7ffc0000 [ 71.416711][ T7333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.416914][ T7333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.421253][ T7332] netlink: 40 bytes leftover after parsing attributes in process `syz.0.695'. [ 71.477705][ T7336] loop1: detected capacity change from 0 to 512 [ 71.486692][ T7336] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.494859][ T7336] EXT4-fs (loop1): 1 truncate cleaned up [ 71.495345][ T7336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.506996][ T7336] FAULT_INJECTION: forcing a failure. [ 71.506996][ T7336] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 71.507032][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.1.696 Not tainted syzkaller #0 PREEMPT [ 71.507044][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 71.507051][ T7336] Call trace: [ 71.507054][ T7336] show_stack+0x2c/0x3c (C) [ 71.507075][ T7336] __dump_stack+0x30/0x40 [ 71.507087][ T7336] dump_stack_lvl+0xd8/0x12c [ 71.507099][ T7336] dump_stack+0x1c/0x28 [ 71.507110][ T7336] should_fail_ex+0x41c/0x590 [ 71.507123][ T7336] should_fail_alloc_page+0xec/0x10c [ 71.507136][ T7336] prepare_alloc_pages+0x194/0x484 [ 71.507145][ T7336] __alloc_frozen_pages_noprof+0x180/0x648 [ 71.507153][ T7336] alloc_pages_mpol+0x1fc/0x3d0 [ 71.507162][ T7336] alloc_frozen_pages_noprof+0xc4/0x10c [ 71.507172][ T7336] alloc_pages_noprof+0x30/0x148 [ 71.507184][ T7336] folio_alloc_noprof+0x2c/0x148 [ 71.507194][ T7336] filemap_alloc_folio_noprof+0x108/0x424 [ 71.507206][ T7336] __filemap_get_folio_mpol+0x444/0x1054 [ 71.507217][ T7336] ext4_mb_init_group+0x108/0xb48 [ 71.507230][ T7336] ext4_mb_scan_group+0x79c/0x150c [ 71.507242][ T7336] ext4_mb_scan_groups_linear+0xec/0x330 [ 71.507255][ T7336] ext4_mb_regular_allocator+0x664/0x2538 [ 71.507268][ T7336] ext4_mb_new_blocks+0xb80/0x41c0 [ 71.507280][ T7336] ext4_ind_map_blocks+0xccc/0x1f78 [ 71.507292][ T7336] ext4_map_create_blocks+0xc0/0x4a0 [ 71.507301][ T7336] ext4_map_blocks+0x520/0xc88 [ 71.507310][ T7336] _ext4_get_block+0x194/0x3e8 [ 71.507318][ T7336] ext4_get_block+0x4c/0x60 [ 71.507327][ T7336] ext4_block_write_begin+0x680/0xd1c [ 71.507336][ T7336] ext4_convert_inline_data_to_extent+0x50c/0xc34 [ 71.507345][ T7336] ext4_try_to_write_inline_data+0x68/0xa8 [ 71.507353][ T7336] ext4_write_begin+0x314/0x14bc [ 71.507364][ T7336] generic_perform_write+0x23c/0x7a4 [ 71.507376][ T7336] ext4_buffered_write_iter+0xd8/0x2f4 [ 71.507387][ T7336] ext4_file_write_iter+0x1f4/0x1478 [ 71.507399][ T7336] vfs_write+0x51c/0xa0c [ 71.507411][ T7336] ksys_pwrite64+0x118/0x1ac [ 71.507423][ T7336] __arm64_sys_pwrite64+0xa8/0xc0 [ 71.507436][ T7336] invoke_syscall+0x98/0x244 [ 71.507447][ T7336] el0_svc_common+0xec/0x23c [ 71.507459][ T7336] do_el0_svc+0x4c/0x5c [ 71.507470][ T7336] el0_svc+0x64/0x260 [ 71.507480][ T7336] el0t_64_sync_handler+0x44/0x104 [ 71.507490][ T7336] el0t_64_sync+0x198/0x19c [ 71.583535][ T4703] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 72.055714][ T6574] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.072382][ T7362] FAULT_INJECTION: forcing a failure. [ 72.072382][ T7362] name failslab, interval 1, probability 0, space 0, times 0 [ 72.072418][ T7362] CPU: 0 UID: 0 PID: 7362 Comm: syz.2.708 Not tainted syzkaller #0 PREEMPT [ 72.072435][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 72.072441][ T7362] Call trace: [ 72.072444][ T7362] show_stack+0x2c/0x3c (C) [ 72.072465][ T7362] __dump_stack+0x30/0x40 [ 72.072478][ T7362] dump_stack_lvl+0xd8/0x12c [ 72.072489][ T7362] dump_stack+0x1c/0x28 [ 72.072500][ T7362] should_fail_ex+0x41c/0x590 [ 72.072513][ T7362] should_failslab+0xc4/0x120 [ 72.072526][ T7362] kmem_cache_alloc_noprof+0x94/0x5d4 [ 72.072539][ T7362] dst_alloc+0xf4/0x15c [ 72.072549][ T7362] ip6_dst_alloc+0x38/0xc8 [ 72.072558][ T7362] ip6_pol_route+0x79c/0xf50 [ 72.072567][ T7362] ip6_pol_route_input+0x74/0x98 [ 72.072575][ T7362] fib6_rule_lookup+0x284/0x478 [ 72.072585][ T7362] ip6_route_input_lookup+0xa8/0xdc [ 72.072594][ T7362] ip6_route_input+0x56c/0x854 [ 72.072602][ T7362] ip6_rcv_finish_core+0x200/0x3a4 [ 72.072612][ T7362] ip6_rcv_finish+0x120/0x204 [ 72.072621][ T7362] NF_HOOK+0x308/0x398 [ 72.072630][ T7362] ipv6_rcv+0x9c/0xbc [ 72.072639][ T7362] __netif_receive_skb_one_core+0xc8/0x110 [ 72.072654][ T7362] __netif_receive_skb+0x34/0x128 [ 72.072668][ T7362] netif_receive_skb+0x1e0/0xad0 [ 72.072677][ T7362] tun_rx_batched+0x180/0x620 [ 72.072688][ T7362] tun_get_user+0x2330/0x36d0 [ 72.072697][ T7362] tun_chr_write_iter+0xfc/0x168 [ 72.072706][ T7362] vfs_write+0x51c/0xa0c [ 72.072718][ T7362] ksys_write+0x12c/0x228 [ 72.072730][ T7362] __arm64_sys_write+0x84/0x98 [ 72.072742][ T7362] invoke_syscall+0x98/0x244 [ 72.072754][ T7362] el0_svc_common+0xec/0x23c [ 72.072765][ T7362] do_el0_svc+0x4c/0x5c [ 72.072777][ T7362] el0_svc+0x64/0x260 [ 72.072787][ T7362] el0t_64_sync_handler+0x44/0x104 [ 72.072797][ T7362] el0t_64_sync+0x198/0x19c [ 72.150016][ T5663] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.189931][ T4707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.192121][ T4707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.194333][ T4707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.196980][ T4707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.198612][ T4707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.241822][ T7376] loop4: detected capacity change from 0 to 512 [ 72.271743][ T7373] loop2: detected capacity change from 0 to 1024 [ 72.277476][ T5663] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.299767][ T7373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.358166][ T7373] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.416711][ T7393] trusted_key: encrypted_key: insufficient parameters specified [ 72.441114][ T5663] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.764312][ T5663] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.890646][ T7368] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.893337][ T7368] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.894843][ T7368] bridge_slave_0: entered allmulticast mode [ 72.896533][ T7368] bridge_slave_0: entered promiscuous mode [ 72.911656][ T7368] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.911704][ T7368] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.911799][ T7368] bridge_slave_1: entered allmulticast mode [ 72.916573][ T7368] bridge_slave_1: entered promiscuous mode [ 72.933226][ T7368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.944172][ T7368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.961655][ T5663] bridge_slave_1: left allmulticast mode [ 72.961692][ T5663] bridge_slave_1: left promiscuous mode [ 72.963335][ T5663] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.968484][ T5663] bridge_slave_0: left allmulticast mode [ 72.968512][ T5663] bridge_slave_0: left promiscuous mode [ 72.968609][ T5663] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.990480][ T7416] loop2: detected capacity change from 0 to 32768 [ 73.012639][ T7416] loop2: p1 p3 < > [ 73.124693][ T4695] udevd[4695]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 73.127847][ T4696] udevd[4696]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 73.147879][ T5663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.186399][ T5663] bond_slave_0: left allmulticast mode [ 73.192158][ T5663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.313768][ T5663] bond_slave_1: left allmulticast mode [ 73.319249][ T5663] bond0 (unregistering): Released all slaves [ 73.479133][ T7368] team0: Port device team_slave_0 added [ 73.481280][ T7368] team0: Port device team_slave_1 added [ 73.512411][ T7430] loop4: detected capacity change from 0 to 512 [ 73.512818][ T7430] EXT4-fs: Ignoring removed bh option [ 73.512829][ T7430] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.525075][ T7368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.525099][ T7368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.525450][ T7368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.525710][ T5663] tipc: Left network mode [ 73.528495][ T7368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.528502][ T7368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.528514][ T7368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.546783][ T7430] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.556575][ T7368] hsr_slave_0: entered promiscuous mode [ 73.557122][ T7368] hsr_slave_1: entered promiscuous mode [ 73.557297][ T7368] debugfs: 'hsr0' already exists in 'hsr' [ 73.557306][ T7368] Cannot create hsr debugfs directory [ 73.573874][ T7430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.575839][ T7430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.594976][ T7430] netlink: 'syz.4.730': attribute type 6 has an invalid length. [ 73.715682][ T7368] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 73.719778][ T7368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.721561][ T7368] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 73.737245][ T7368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.737675][ T7368] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 73.740873][ T7368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.757990][ T7368] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 73.760239][ T7368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.767133][ T4394] 8021q: adding VLAN 0 to HW filter on device eth4 [ 74.513965][ T4707] Bluetooth: hci0: command tx timeout [ 74.542892][ T5663] hsr_slave_0: left promiscuous mode [ 74.546470][ T5663] hsr_slave_1: left promiscuous mode [ 74.548516][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.548529][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.554684][ T5663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.554886][ T5663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.562955][ T5663] veth1_macvtap: left promiscuous mode [ 74.563008][ T5663] veth0_macvtap: left promiscuous mode [ 74.563070][ T5663] veth1_vlan: left promiscuous mode [ 74.563147][ T5663] veth0_vlan: left promiscuous mode [ 74.704245][ T5663] team0 (unregistering): Port device team_slave_1 removed [ 74.711250][ T5663] team0 (unregistering): Port device team_slave_0 removed [ 74.755572][ T4711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.840005][ T7368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.849928][ T4394] 8021q: adding VLAN 0 to HW filter on device eth5 [ 74.871526][ T7368] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.876872][ T5659] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.876915][ T5659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.892843][ T644] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.892895][ T644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.920347][ T7368] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.963757][ T7509] loop2: detected capacity change from 0 to 1024 [ 74.994994][ T7509] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 74.995562][ T7509] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 74.996011][ T7509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.083691][ T7527] syz.4.751: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 75.084581][ T7527] CPU: 0 UID: 0 PID: 7527 Comm: syz.4.751 Not tainted syzkaller #0 PREEMPT [ 75.084604][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 75.084610][ T7527] Call trace: [ 75.084614][ T7527] show_stack+0x2c/0x3c (C) [ 75.084639][ T7527] __dump_stack+0x30/0x40 [ 75.084659][ T7527] dump_stack_lvl+0xd8/0x12c [ 75.084672][ T7527] dump_stack+0x1c/0x28 [ 75.084684][ T7527] warn_alloc+0x1c4/0x1d8 [ 75.084698][ T7527] __vmalloc_node_range_noprof+0x110/0xe9c [ 75.084709][ T7527] xskq_create+0x178/0x278 [ 75.084723][ T7527] xsk_init_queue+0x9c/0xf8 [ 75.084735][ T7527] xsk_setsockopt+0x45c/0x6c4 [ 75.084746][ T7527] do_sock_setsockopt+0x1f0/0x330 [ 75.084757][ T7527] __sys_setsockopt+0x104/0x170 [ 75.084767][ T7527] __arm64_sys_setsockopt+0xc8/0xe4 [ 75.084776][ T7527] invoke_syscall+0x98/0x244 [ 75.084789][ T7527] el0_svc_common+0xec/0x23c [ 75.084800][ T7527] do_el0_svc+0x4c/0x5c [ 75.084811][ T7527] el0_svc+0x64/0x260 [ 75.084821][ T7527] el0t_64_sync_handler+0x44/0x104 [ 75.084831][ T7527] el0t_64_sync+0x198/0x19c [ 75.084848][ T7527] Mem-Info: [ 75.084861][ T7527] active_anon:42 inactive_anon:6178 isolated_anon:0 [ 75.084861][ T7527] active_file:3210 inactive_file:15620 isolated_file:0 [ 75.084861][ T7527] unevictable:768 dirty:17 writeback:0 [ 75.084861][ T7527] slab_reclaimable:9169 slab_unreclaimable:89877 [ 75.084861][ T7527] mapped:29382 shmem:1071 pagetables:1235 [ 75.084861][ T7527] sec_pagetables:0 bounce:0 [ 75.084861][ T7527] kernel_misc_reclaimable:0 [ 75.084861][ T7527] free:1471504 free_pcp:7603 free_cma:7616 [ 75.084890][ T7527] Node 0 active_anon:168kB inactive_anon:24712kB active_file:12840kB inactive_file:62480kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:117528kB dirty:68kB writeback:0kB shmem:4284kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9588kB pagetables:4940kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 75.084917][ T7527] Node 0 DMA free:3077888kB boost:0kB min:4692kB low:7772kB high:10852kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 75.084950][ T7527] lowmem_reserve[]: 0 0 3650 3650 3650 [ 75.084996][ T7527] Node 0 Normal free:2808128kB boost:0kB min:5696kB low:9432kB high:13168kB reserved_highatomic:0kB free_highatomic:0kB active_anon:168kB inactive_anon:24712kB active_file:12840kB inactive_file:62480kB unevictable:3072kB writepending:68kB zspages:0kB present:5242880kB managed:3738144kB mlocked:0kB bounce:0kB free_pcp:30404kB local_pcp:26588kB free_cma:0kB [ 75.085028][ T7527] lowmem_reserve[]: 0 0 0 0 0 [ 75.085073][ T7527] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 75.085213][ T7527] Node 0 Normal: 1722*4kB (UME) 1262*8kB (UME) 616*16kB (UME) 688*32kB (UME) 294*64kB (UME) 108*128kB (UME) 75*256kB (UME) 40*512kB (UM) 20*1024kB (UM) 10*2048kB (UME) 646*4096kB (UM) = 2808152kB [ 75.085386][ T7527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 75.085397][ T7527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 75.085407][ T7527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 75.085418][ T7527] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 75.085428][ T7527] 19897 total pagecache pages [ 75.085435][ T7527] 0 pages in swap cache [ 75.085443][ T7527] Free swap = 124996kB [ 75.085450][ T7527] Total swap = 124996kB [ 75.085457][ T7527] 2097152 pages RAM [ 75.085464][ T7527] 0 pages HighMem/MovableOnly [ 75.085471][ T7527] 392568 pages reserved [ 75.085478][ T7527] 8192 pages cma reserved [ 75.085486][ T7527] 0 pages hwpoisoned [ 75.097566][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.197124][ T7537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.197367][ T7537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.258040][ T7546] net_ratelimit: 3321 callbacks suppressed [ 75.258245][ T7546] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 75.329716][ T7368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.331042][ T7559] loop5: detected capacity change from 0 to 512 [ 75.331553][ T7559] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.346320][ T7559] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 75.461130][ T7573] FAULT_INJECTION: forcing a failure. [ 75.461130][ T7573] name fail_futex, interval 1, probability 0, space 0, times 0 [ 75.461174][ T7573] CPU: 0 UID: 0 PID: 7573 Comm: syz.0.764 Not tainted syzkaller #0 PREEMPT [ 75.461192][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 75.461198][ T7573] Call trace: [ 75.461202][ T7573] show_stack+0x2c/0x3c (C) [ 75.461223][ T7573] __dump_stack+0x30/0x40 [ 75.461238][ T7573] dump_stack_lvl+0xd8/0x12c [ 75.461249][ T7573] dump_stack+0x1c/0x28 [ 75.461260][ T7573] should_fail_ex+0x41c/0x590 [ 75.461273][ T7573] should_fail+0x14/0x24 [ 75.461284][ T7573] get_futex_key+0x1ec/0x12b0 [ 75.461295][ T7573] futex_wake+0x10c/0x594 [ 75.461306][ T7573] do_futex+0x2c4/0x378 [ 75.461316][ T7573] __arm64_sys_futex+0x2e4/0x418 [ 75.461327][ T7573] invoke_syscall+0x98/0x244 [ 75.461339][ T7573] el0_svc_common+0xec/0x23c [ 75.461350][ T7573] do_el0_svc+0x4c/0x5c [ 75.461361][ T7573] el0_svc+0x64/0x260 [ 75.461372][ T7573] el0t_64_sync_handler+0x44/0x104 [ 75.461382][ T7573] el0t_64_sync+0x198/0x19c [ 75.465081][ T4394] 8021q: adding VLAN 0 to HW filter on device eth6 [ 75.487703][ T7368] veth0_vlan: entered promiscuous mode [ 75.495568][ T7368] veth1_vlan: entered promiscuous mode [ 75.504835][ T7368] veth0_macvtap: entered promiscuous mode [ 75.512731][ T7368] veth1_macvtap: entered promiscuous mode [ 75.519568][ T7368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.523102][ T7368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.528172][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.528272][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.528334][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.583764][ T5663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.583798][ T5663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.587776][ T4854] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.603774][ T5668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.603811][ T5668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.627984][ T7592] netlink: 144 bytes leftover after parsing attributes in process `syz.5.769'. [ 75.694560][ T7603] nvmet: adding nsid 1 to subsystem testsubsys [ 75.697583][ T7603] Unable to handle kernel paging request at virtual address dfff800000000000 [ 75.699703][ T7603] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 75.701563][ T7603] Mem abort info: [ 75.702542][ T7603] ESR = 0x0000000096000005 [ 75.702568][ T7603] EC = 0x25: DABT (current EL), IL = 32 bits [ 75.702586][ T7603] SET = 0, FnV = 0 [ 75.702601][ T7603] EA = 0, S1PTW = 0 [ 75.702616][ T7603] FSC = 0x05: level 1 translation fault [ 75.702630][ T7603] Data abort info: [ 75.702639][ T7603] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 75.702651][ T7603] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 75.702667][ T7603] GCS = 0, Overlay = 0, DirtyBit = 0 [ 75.702678][ T7603] [dfff800000000000] address between user and kernel address ranges [ 75.702762][ T7603] Internal error: Oops: 0000000096000005 [#1] SMP [ 75.713422][ T7603] Modules linked in: [ 75.714130][ T7603] CPU: 1 UID: 0 PID: 7603 Comm: syz.5.773 Not tainted syzkaller #0 PREEMPT [ 75.715747][ T7603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 75.717888][ T7603] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 75.719278][ T7603] pc : strlen+0x28/0x84 [ 75.720040][ T7603] lr : do_getname_kernel+0x2c/0x1f4 [ 75.721009][ T7603] sp : ffff8000970a7860 [ 75.721754][ T7603] x29: ffff8000970a7880 x28: ffff0000d51e9cc0 x27: ffff8000828a798c [ 75.723258][ T7603] x26: ffff0000c4922200 x25: 1fffe0001aa3d382 x24: dfff800000000000 [ 75.724723][ T7603] x23: 1fffe0001a56950e x22: 00000000fffffff1 x21: 0000000000000000 [ 75.726222][ T7603] x20: 0000000000000000 x19: 0000000000000000 x18: 00000000ffffffff [ 75.727648][ T7603] x17: 0000000000000000 x16: 0000000000000000 x15: 00000000200004c0 [ 75.729129][ T7603] x14: ffff80008b0df2b0 x13: 0000000000000001 x12: 0000000000000000 [ 75.730649][ T7603] x11: 0000000000000000 x10: dfff800000000000 x9 : 0000000000000000 [ 75.732145][ T7603] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 75.733576][ T7603] x5 : ffff80008abaf5c8 x4 : 0000000000000008 x3 : ffff80008289b5f4 [ 75.734965][ T7603] x2 : 0000000000000000 x1 : ffff0000c9809d80 x0 : 0000000000000000 [ 75.736400][ T7603] Call trace: [ 75.736968][ T7603] strlen+0x28/0x84 (P) [ 75.737716][ T7603] do_getname_kernel+0x2c/0x1f4 [ 75.738578][ T7603] getname_kernel+0x24/0x34 [ 75.739379][ T7603] filp_open+0x2c/0x60 [ 75.740122][ T7603] nvmet_file_ns_enable+0x88/0x30c [ 75.741001][ T7603] nvmet_ns_enable+0xac/0x4ec [ 75.741851][ T7603] nvmet_ns_enable_store+0xd4/0x170 [ 75.742796][ T7603] configfs_write_iter+0x27c/0x354 [ 75.743739][ T7603] vfs_write+0x51c/0xa0c [ 75.744501][ T7603] ksys_write+0x12c/0x228 [ 75.745285][ T7603] __arm64_sys_write+0x84/0x98 [ 75.746112][ T7603] invoke_syscall+0x98/0x244 [ 75.746939][ T7603] el0_svc_common+0xec/0x23c [ 75.747785][ T7603] do_el0_svc+0x4c/0x5c [ 75.748535][ T7603] el0_svc+0x64/0x260 [ 75.749258][ T7603] el0t_64_sync_handler+0x44/0x104 [ 75.750142][ T7603] el0t_64_sync+0x198/0x19c [ 75.750962][ T7603] Code: aa0003e8 f2fbffea d343fd0b 1200090c (38ea696b) [ 75.752214][ T7603] ---[ end trace 0000000000000000 ]--- [ 76.078755][ T7603] Kernel panic - not syncing: Oops: Fatal exception [ 76.079968][ T7603] SMP: stopping secondary CPUs [ 76.080819][ T7603] Kernel Offset: disabled [ 76.081571][ T7603] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 76.082810][ T7603] Memory Limit: none [ 76.401830][ T7603] Rebooting in 86400 seconds..