last executing test programs: 1m55.269064756s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000900)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) pivot_root(&(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='./proc/fs/cifs/Stats\x00') connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) io_uring_setup(0x1b7c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40804}, 0x4004004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f00000003c0)=0x4, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000100000000000000d04000000000000000000000400000000040000000000000803000000000000006100"], 0x0, 0x52}, 0x28) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) 1m54.360599342s ago: executing program 1 (id=9): sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000b40)={0x0, [[0x9ef8, 0x7, 0x0, 0x4, 0x5d11, 0x9, 0x0, 0xe], [0x80010000, 0x80000000, 0x0, 0x0, 0x3a3, 0x0, 0x0, 0x4], [0x7, 0x0, 0x0, 0xfffffffc, 0xc6df]], '\x00', [{}, {0x3, 0x8}, {0x80}, {0x0, 0x80000000}, {0x3, 0x4, 0x0, 0x1, 0x1}, {0x18, 0x5f}, {0xfffffffc}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0xfffffffe}, {0x2, 0xbd0}, {0x8000000, 0x3}], '\x00', 0x1000}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) recvmsg(r1, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) close_range(r3, 0xffffffffffffffff, 0x600000000000000) 1m51.343379128s ago: executing program 1 (id=46): setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000040)="0118269db93bda7b297893dbebf7", 0xe) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, 0x0, 0x4004880) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1m51.24158031s ago: executing program 32 (id=46): setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000040)="0118269db93bda7b297893dbebf7", 0xe) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, 0x0, 0x4004880) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 1m39.935095482s ago: executing program 3 (id=170): syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x8}]}) open_tree(0xffffffffffffff9c, 0x0, 0x81001) close_range(r0, 0xffffffffffffffff, 0x0) 1m39.089350585s ago: executing program 3 (id=203): r0 = socket$inet6(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(r0, 0x0, 0x0, 0x40cc084, &(0x7f0000000080)={0xa, 0x4e28, 0x0, @private1}, 0xffffffffffffff41) 1m38.970931889s ago: executing program 3 (id=207): unshare(0x22020600) timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff3]}, 0x8, 0x80000) ppoll(&(0x7f0000000180)=[{r1, 0x2005}], 0x1, 0x0, 0x0, 0x0) 1m38.527481729s ago: executing program 3 (id=221): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000040)='./file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) unshare(0x22020600) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 1m38.149918237s ago: executing program 3 (id=225): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x2c2, &(0x7f00000006c0)="$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") syz_read_part_table(0x59d, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) 1m37.659000547s ago: executing program 3 (id=240): setuid(0xee00) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001340)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x1, @mcast2, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000001280)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}, 0x8000) 1m37.617607316s ago: executing program 33 (id=240): setuid(0xee00) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000001340)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x1, @mcast2, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000001280)=[@mark={{0x14, 0x1, 0x24, 0x6}}], 0x18}, 0x8000) 3.66989541s ago: executing program 4 (id=1590): io_uring_setup(0x10008, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x200480c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x106) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00', 0x20) 3.574485209s ago: executing program 4 (id=1595): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) write(r1, &(0x7f0000000000), 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f"], 0x57) 3.460670653s ago: executing program 4 (id=1601): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x8, 0x0, 0x8000100000001000, 0x8, 0x6, 0x400000001, 0x5, 0xf64, 0x3}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x9858d3, 0x0, 0x1, 0x0, &(0x7f00000000c0)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff}) fchown(0xffffffffffffffff, 0xee00, 0xee01) fchown(0xffffffffffffffff, 0x0, 0x0) 1.869997988s ago: executing program 0 (id=1611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0xf7fe762b6997dac4, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_TO={0x8, 0x2, 0x76}]}}]}, 0x40}}, 0x0) 1.843897833s ago: executing program 4 (id=1613): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80201) unshare(0x26020480) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x1, 0xfffffffffffffffc, 0x802, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x4000000002, 0x15e, 0x6, 0x40004, 0xfffffffffffffffe, 0x6a6}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xff, 0x52, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 1.802498682s ago: executing program 0 (id=1615): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.702615402s ago: executing program 0 (id=1618): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) waitid(0x2, r1, 0x0, 0x6, 0x0) 1.586027836s ago: executing program 2 (id=1621): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) sendto$packet(r0, &(0x7f00000005c0)="68695693fbdd93d9c8eabea2223ec0879f76007982a78708dd6653864139c546a4459363a02922e8", 0x28, 0x4, 0x0, 0x0) 1.559409392s ago: executing program 2 (id=1622): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xfffffffffffffffb, 0x48b01) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0) 1.534631887s ago: executing program 2 (id=1623): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x8, 0x0, 0x8000100000001000, 0x8, 0x6, 0x400000001, 0x5, 0xf64, 0x3}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x9858d3, 0x0, 0x1, 0x0, &(0x7f00000000c0)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff}) fchown(0xffffffffffffffff, 0xee00, 0xee01) fchown(0xffffffffffffffff, 0x0, 0x0) 1.46853141s ago: executing program 0 (id=1626): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]}) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0) fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x3) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r4, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0xb, 0x0, 0x4, {0xa, 0x4e24, 0x2f2, @rand_addr=' \x01\x00', 0x6}}}, 0x80) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, &(0x7f0000000780)) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0x2, 0x3, 0x106) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) dup(r7) 998.540746ms ago: executing program 6 (id=1630): r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip_vti0\x00', 0x0, 0x10, 0x8, 0x8, 0x0, {{0x5, 0x4, 0x1, 0x9, 0x14, 0x65, 0x0, 0x0, 0x29, 0x0, @multicast1, @private=0xa010100}}}}) 978.114051ms ago: executing program 5 (id=1631): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 933.05564ms ago: executing program 4 (id=1632): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) 922.728682ms ago: executing program 6 (id=1633): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) sendto$packet(r0, &(0x7f00000005c0)="68695693fbdd93d9c8eabea2223ec0879f76007982a78708dd6653864139c546a4459363a02922e8", 0x28, 0x4, 0x0, 0x0) 911.551474ms ago: executing program 2 (id=1634): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x154, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x20, 0xa0, 0x3a}, {@in=@multicast2, 0xffffbffe, 0x32}, @in=@remote, {0x2000000000001, 0xffffffffffffffff, 0x9, 0x0, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x9, 0x0, 0x5f, 0xa}, {0x6, 0xc0000000}, 0x100, 0x0, 0xa, 0x1, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e22, @in=@loopback}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20040}, 0x80) 894.796697ms ago: executing program 5 (id=1635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x37, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0xfdef) 867.637623ms ago: executing program 2 (id=1636): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]}) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0) fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x3) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r4, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0xb, 0x0, 0x4, {0xa, 0x4e24, 0x2f2, @rand_addr=' \x01\x00', 0x6}}}, 0x80) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, &(0x7f0000000780)) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x106) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7, 0xfffffffc, 0x0, 0x1f, "0062ba7d820700000000000000000000096304"}) 840.190078ms ago: executing program 6 (id=1637): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x6, 0x0, 0x0, 0x41000}, 0x94) write(r1, &(0x7f0000000000)='7', 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x57) 829.550591ms ago: executing program 4 (id=1638): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, 0x9}, &(0x7f0000000180)=0x8) 461.221836ms ago: executing program 0 (id=1639): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0xf7fe762b6997dac4, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x10, 0x2, [@TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_TO={0x8, 0x2, 0x76}]}}]}, 0x40}}, 0x0) 440.77841ms ago: executing program 6 (id=1640): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd27, 0x0, {{@in6=@loopback, @in6=@private2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0xcdab, 0x2f, 0x5, 0x800000000000002}, 0x1, 0x0, 0x1, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x0, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x6, 0x4, 0x1, 0x0, 0x4, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4c020}, 0x4048050) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x5c, r2, 0x1, 0x170bd2b, 0x0, {0x3, 0x0, 0x12}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}]}]}, 0x5c}, 0x1, 0x300}, 0x8000) 413.725926ms ago: executing program 5 (id=1641): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 396.570329ms ago: executing program 6 (id=1642): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0xc041) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x300, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') 353.307678ms ago: executing program 0 (id=1643): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80201) unshare(0x26020480) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0x1, 0xfffffffffffffffc, 0x802, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x4000000002, 0x15e, 0x6, 0x40004, 0xfffffffffffffffe, 0x6a6}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xff, 0x52, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 325.633164ms ago: executing program 5 (id=1644): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x8, 0x0, 0x8000100000001000, 0x8, 0x6, 0x400000001, 0x5, 0xf64, 0x3}) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x9858d3, 0x0, 0x1, 0x0, &(0x7f00000000c0)) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff}) fchown(0xffffffffffffffff, 0xee00, 0xee01) fchown(0xffffffffffffffff, 0x0, 0x0) 324.414594ms ago: executing program 6 (id=1645): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) signalfd4(r1, &(0x7f0000000000)={[0xa5]}, 0x8, 0x0) 149.78936ms ago: executing program 5 (id=1646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 22.175236ms ago: executing program 5 (id=1647): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg2\x00'}) sendto$packet(r0, &(0x7f00000005c0)="68695693fbdd93d9c8eabea2223ec0879f76007982a78708dd6653864139c546a4459363a02922e8", 0x28, 0x4, 0x0, 0x0) 0s ago: executing program 2 (id=1648): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r0, 0x0, 0xfffffffb) kernel console output (not intermixed with test programs): for 'mpol' [ 104.635741][ T6869] netlink: 16 bytes leftover after parsing attributes in process `syz.5.758'. [ 104.678625][ T6876] loop6: detected capacity change from 0 to 512 [ 104.682877][ T6876] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 104.708298][ T6876] EXT4-fs (loop6): 1 truncate cleaned up [ 104.709523][ T6876] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 104.714087][ T6876] EXT4-fs (loop6): shut down requested (0) [ 104.796349][ T6889] FAULT_INJECTION: forcing a failure. [ 104.796349][ T6889] name failslab, interval 1, probability 0, space 0, times 0 [ 104.798483][ T6893] loop5: detected capacity change from 0 to 164 [ 104.803848][ T6893] isofs_fill_super: root inode is not a directory. Corrupted media? [ 104.810387][ T6889] CPU: 1 PID: 6889 Comm: syz.0.765 Not tainted syzkaller #0 [ 104.811744][ T6889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 104.813535][ T6889] Call trace: [ 104.814128][ T6889] dump_backtrace+0x1c4/0x1f0 [ 104.815024][ T6889] show_stack+0x2c/0x3c [ 104.815786][ T6889] __dump_stack+0x30/0x40 [ 104.816635][ T6889] dump_stack_lvl+0xf4/0x15c [ 104.817507][ T6889] dump_stack+0x1c/0x5c [ 104.818320][ T6889] should_fail_ex+0x3cc/0x524 [ 104.819252][ T6889] __should_failslab+0xc0/0x11c [ 104.820201][ T6889] should_failslab+0x10/0x28 [ 104.821041][ T6889] slab_pre_alloc_hook+0x6c/0x31c [ 104.821988][ T6889] kmem_cache_alloc_lru+0x60/0x284 [ 104.822920][ T6889] sock_alloc_inode+0x2c/0xcc [ 104.823792][ T6889] new_inode_pseudo+0x68/0x1cc [ 104.824826][ T6889] __sock_create+0x138/0x8a8 [ 104.825737][ T6889] sock_create_kern+0x4c/0x64 [ 104.826702][ T6889] smc_create+0x144/0x534 [ 104.827593][ T6889] __sock_create+0x448/0x8a8 [ 104.828507][ T6889] __sys_socket+0xc0/0x1b0 [ 104.829369][ T6889] __arm64_sys_socket+0x7c/0x94 [ 104.830324][ T6889] invoke_syscall+0x98/0x290 [ 104.831232][ T6889] el0_svc_common+0x13c/0x258 [ 104.832175][ T6889] do_el0_svc+0x5c/0x134 [ 104.832972][ T6889] el0_svc+0x58/0x128 [ 104.833755][ T6889] el0t_64_sync_handler+0x84/0xf0 [ 104.834734][ T6889] el0t_64_sync+0x18c/0x190 [ 104.837906][ T6889] socket: no more sockets [ 104.859203][ T6865] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.879720][ T6895] loop4: detected capacity change from 0 to 512 [ 104.882910][ T6895] EXT4-fs: Ignoring removed nobh option [ 104.885791][ T6895] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 104.888018][ T6895] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 104.889950][ T6895] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #13: comm syz.4.768: inode has both inline data and extents flags [ 104.896095][ T6895] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.768: couldn't read orphan inode 13 (err -117) [ 104.901275][ T6895] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 104.910463][ T5219] EXT4-fs (loop6): unmounting filesystem. [ 104.932986][ T6895] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 104.996276][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 105.115349][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.775'. [ 105.129284][ T6915] loop2: detected capacity change from 0 to 256 [ 105.141373][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.775'. [ 105.405501][ T6944] ip_tables: iptables: counters copy to user failed while replacing table [ 105.523247][ T6951] loop0: detected capacity change from 0 to 512 [ 105.531628][ T6951] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 105.533112][ T6951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 105.534760][ T6951] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.542891][ T6951] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.788: iget: bad i_size value: 12154761577498 [ 105.547230][ T6951] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.788: couldn't read orphan inode 13 (err -117) [ 105.549398][ T6951] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 105.575232][ T6951] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.788: dx entry: limit 65535 != root limit 120 [ 105.577483][ T6951] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.788: Corrupt directory, running e2fsck is recommended [ 105.636260][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 105.720344][ T6960] device veth0 entered promiscuous mode [ 105.726708][ T6957] device veth0 left promiscuous mode [ 105.784232][ T6970] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 106.376641][ T7028] loop0: detected capacity change from 0 to 164 [ 106.398163][ T7028] isofs_fill_super: root inode is not a directory. Corrupted media? [ 106.425855][ T7032] loop4: detected capacity change from 0 to 1024 [ 106.454889][ T7032] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 106.485725][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 106.605581][ T7053] FAULT_INJECTION: forcing a failure. [ 106.605581][ T7053] name failslab, interval 1, probability 0, space 0, times 0 [ 106.616113][ T7053] CPU: 1 PID: 7053 Comm: syz.6.832 Not tainted syzkaller #0 [ 106.617426][ T7053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 106.619318][ T7053] Call trace: [ 106.619936][ T7053] dump_backtrace+0x1c4/0x1f0 [ 106.620834][ T7053] show_stack+0x2c/0x3c [ 106.621657][ T7053] __dump_stack+0x30/0x40 [ 106.622485][ T7053] dump_stack_lvl+0xf4/0x15c [ 106.623395][ T7053] dump_stack+0x1c/0x5c [ 106.624188][ T7053] should_fail_ex+0x3cc/0x524 [ 106.625145][ T7053] __should_failslab+0xc0/0x11c [ 106.626109][ T7053] should_failslab+0x10/0x28 [ 106.626982][ T7053] __kmem_cache_alloc_node+0x7c/0x318 [ 106.628051][ T7053] kmalloc_trace+0x48/0x94 [ 106.628883][ T7053] snd_seq_pool_new+0x58/0x194 [ 106.629744][ T7053] seq_create_client1+0x78/0x4dc [ 106.630656][ T7053] snd_seq_open+0x64/0x484 [ 106.631468][ T7053] snd_open+0x294/0x348 [ 106.632261][ T7053] chrdev_open+0x3d0/0x51c [ 106.633094][ T7053] do_dentry_open+0x738/0xf8c [ 106.633958][ T7053] vfs_open+0x7c/0x90 [ 106.634700][ T7053] path_openat+0x1fc0/0x27a0 [ 106.635554][ T7053] do_filp_open+0x198/0x38c [ 106.636434][ T7053] do_sys_openat2+0x134/0x3fc [ 106.637334][ T7053] __arm64_sys_openat+0x11c/0x150 [ 106.638263][ T7053] invoke_syscall+0x98/0x290 [ 106.639183][ T7053] el0_svc_common+0x13c/0x258 [ 106.640113][ T7053] do_el0_svc+0x5c/0x134 [ 106.640914][ T7053] el0_svc+0x58/0x128 [ 106.641686][ T7053] el0t_64_sync_handler+0x84/0xf0 [ 106.642623][ T7053] el0t_64_sync+0x18c/0x190 [ 106.856986][ T7073] loop5: detected capacity change from 0 to 512 [ 106.880724][ T7073] EXT4-fs: Ignoring removed nobh option [ 106.892088][ T7073] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 106.893592][ T7073] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 106.895924][ T7073] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #13: comm syz.5.838: inode has both inline data and extents flags [ 106.904168][ T7073] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.838: couldn't read orphan inode 13 (err -117) [ 106.908021][ T7073] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 106.948128][ T4588] EXT4-fs (loop5): unmounting filesystem. [ 106.987889][ T7087] loop5: detected capacity change from 0 to 256 [ 107.127656][ T7098] loop6: detected capacity change from 0 to 164 [ 107.135833][ T7098] isofs_fill_super: root inode is not a directory. Corrupted media? [ 107.147101][ T7101] FAULT_INJECTION: forcing a failure. [ 107.147101][ T7101] name failslab, interval 1, probability 0, space 0, times 0 [ 107.149492][ T7101] CPU: 1 PID: 7101 Comm: syz.2.849 Not tainted syzkaller #0 [ 107.150799][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 107.152650][ T7101] Call trace: [ 107.153247][ T7101] dump_backtrace+0x1c4/0x1f0 [ 107.154104][ T7101] show_stack+0x2c/0x3c [ 107.154893][ T7101] __dump_stack+0x30/0x40 [ 107.155702][ T7101] dump_stack_lvl+0xf4/0x15c [ 107.156569][ T7101] dump_stack+0x1c/0x5c [ 107.157376][ T7101] should_fail_ex+0x3cc/0x524 [ 107.158297][ T7101] __should_failslab+0xc0/0x11c [ 107.159260][ T7101] should_failslab+0x10/0x28 [ 107.160134][ T7101] kmem_cache_alloc+0x88/0x310 [ 107.161045][ T7101] key_alloc+0x284/0xdec [ 107.161851][ T7101] key_create_or_update+0x714/0x868 [ 107.162817][ T7101] __arm64_sys_add_key+0x40c/0x520 [ 107.163769][ T7101] invoke_syscall+0x98/0x290 [ 107.164666][ T7101] el0_svc_common+0x13c/0x258 [ 107.165589][ T7101] do_el0_svc+0x5c/0x134 [ 107.166417][ T7101] el0_svc+0x58/0x128 [ 107.167172][ T7101] el0t_64_sync_handler+0x84/0xf0 [ 107.168149][ T7101] el0t_64_sync+0x18c/0x190 [ 107.203777][ T6888] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.294584][ T7114] EXT4-fs: Ignoring removed nobh option [ 107.304850][ T7114] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 107.306524][ T7114] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 107.317024][ T7114] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.853: inode has both inline data and extents flags [ 107.319541][ T7114] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.853: couldn't read orphan inode 13 (err -117) [ 107.326281][ T7114] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 107.425551][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 107.449527][ T7133] support for the xor transformation has been removed. [ 107.640104][ T7154] netlink: 80 bytes leftover after parsing attributes in process `syz.4.865'. [ 107.803248][ T7171] EXT4-fs: Ignoring removed nobh option [ 107.846727][ T7163] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 107.850595][ T7171] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 107.851888][ T7171] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 107.853445][ T7171] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #13: comm syz.5.868: inode has both inline data and extents flags [ 107.872027][ T7171] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.868: couldn't read orphan inode 13 (err -117) [ 107.882563][ T7171] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 108.005286][ T4588] EXT4-fs (loop5): unmounting filesystem. [ 108.007052][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 108.125464][ T7203] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 108.155274][ T7215] device syz_tun entered promiscuous mode [ 108.311969][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 108.314887][ T7219] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 108.442867][ T4588] EXT4-fs (loop5): unmounting filesystem. [ 108.493342][ T7240] isofs_fill_super: root inode is not a directory. Corrupted media? [ 108.517079][ T7245] netlink: 104 bytes leftover after parsing attributes in process `syz.2.898'. [ 108.569999][ T7254] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.900: missing EA_INODE flag [ 108.573172][ T7254] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.900: error while reading EA inode 2 err=-117 [ 108.575802][ T7254] EXT4-fs (loop0): 1 orphan inode deleted [ 108.576813][ T7254] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 108.613780][ T7252] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 108.668645][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 108.669085][ T5219] EXT4-fs (loop6): unmounting filesystem. [ 108.694028][ T7261] tipc: Started in network mode [ 108.695109][ T7261] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 108.697416][ T7261] tipc: Enabled bearer , priority 10 [ 108.758375][ T7271] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 108.788531][ T7274] isofs_fill_super: root inode is not a directory. Corrupted media? [ 108.906254][ T7293] netlink: 165 bytes leftover after parsing attributes in process `syz.5.916'. [ 108.934076][ T7297] tipc: Enabled bearer , priority 10 [ 109.010464][ T7307] isofs_fill_super: root inode is not a directory. Corrupted media? [ 109.050353][ T7311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'. [ 109.065179][ T6884] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 109.070996][ T7311] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'. [ 109.072532][ T7311] netlink: 24 bytes leftover after parsing attributes in process `syz.0.927'. [ 109.084242][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 109.084250][ T27] audit: type=1326 audit(109.070:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.2.928" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 109.105655][ T27] audit: type=1326 audit(109.090:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.2.928" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 109.118510][ T27] audit: type=1326 audit(109.090:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.2.928" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 109.138968][ T27] audit: type=1326 audit(109.090:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.2.928" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 109.143825][ T27] audit: type=1326 audit(109.090:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.2.928" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=285 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 109.155641][ T27] audit: type=1326 audit(109.090:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.2.928" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 109.172897][ T27] audit: type=1326 audit(109.090:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.2.928" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 109.197404][ T27] audit: type=1326 audit(109.090:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.2.928" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 109.212727][ T27] audit: type=1326 audit(109.090:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7312 comm="syz.2.928" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 109.299657][ T7338] FAULT_INJECTION: forcing a failure. [ 109.299657][ T7338] name failslab, interval 1, probability 0, space 0, times 0 [ 109.302123][ T7340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.304247][ T7338] CPU: 0 PID: 7338 Comm: syz.0.939 Not tainted syzkaller #0 [ 109.305638][ T7338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.307087][ T7340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.307657][ T7338] Call trace: [ 109.309832][ T7338] dump_backtrace+0x1c4/0x1f0 [ 109.310764][ T7338] show_stack+0x2c/0x3c [ 109.311579][ T7338] __dump_stack+0x30/0x40 [ 109.312443][ T7338] dump_stack_lvl+0xf4/0x15c [ 109.313308][ T7338] dump_stack+0x1c/0x5c [ 109.314105][ T7338] should_fail_ex+0x3cc/0x524 [ 109.314991][ T7338] __should_failslab+0xc0/0x11c [ 109.315883][ T7338] should_failslab+0x10/0x28 [ 109.316825][ T7338] __kmem_cache_alloc_node+0x7c/0x318 [ 109.317864][ T7338] __kmalloc_node_track_caller+0xb8/0x174 [ 109.318981][ T7338] kstrdup+0x68/0xb0 [ 109.319747][ T7338] xprt_create_transport+0x368/0x698 [ 109.320767][ T7338] rpc_create+0x35c/0x680 [ 109.321635][ T7338] nfs_mount+0x370/0x624 [ 109.322463][ T7338] nfs_try_get_tree+0x50c/0xc58 [ 109.323407][ T7338] nfs_get_tree+0xc9c/0x1024 [ 109.324285][ T7338] vfs_get_tree+0x90/0x278 [ 109.325131][ T7338] vfs_fsconfig_locked+0x1e0/0x374 [ 109.326113][ T7338] __arm64_sys_fsconfig+0x640/0x790 [ 109.327101][ T7338] invoke_syscall+0x98/0x290 [ 109.327985][ T7338] el0_svc_common+0x13c/0x258 [ 109.328890][ T7338] do_el0_svc+0x5c/0x134 [ 109.329684][ T7338] el0_svc+0x58/0x128 [ 109.330447][ T7338] el0t_64_sync_handler+0x84/0xf0 [ 109.331384][ T7338] el0t_64_sync+0x18c/0x190 [ 109.388443][ T7346] isofs_fill_super: root inode is not a directory. Corrupted media? [ 109.543670][ T7360] netlink: 64 bytes leftover after parsing attributes in process `syz.2.949'. [ 109.545457][ T7360] netlink: 64 bytes leftover after parsing attributes in process `syz.2.949'. [ 109.551685][ T7360] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 109.636678][ T7366] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 109.659259][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 109.681701][ T7372] isofs_fill_super: root inode is not a directory. Corrupted media? [ 109.699137][ T7374] FAULT_INJECTION: forcing a failure. [ 109.699137][ T7374] name failslab, interval 1, probability 0, space 0, times 0 [ 109.705085][ T7374] CPU: 1 PID: 7374 Comm: syz.0.954 Not tainted syzkaller #0 [ 109.706333][ T7374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.708261][ T7374] Call trace: [ 109.708869][ T7374] dump_backtrace+0x1c4/0x1f0 [ 109.709777][ T7374] show_stack+0x2c/0x3c [ 109.710680][ T7374] __dump_stack+0x30/0x40 [ 109.711617][ T7374] dump_stack_lvl+0xf4/0x15c [ 109.712560][ T7374] dump_stack+0x1c/0x5c [ 109.713418][ T7374] should_fail_ex+0x3cc/0x524 [ 109.714380][ T7374] __should_failslab+0xc0/0x11c [ 109.715358][ T7374] should_failslab+0x10/0x28 [ 109.716261][ T7374] __kmem_cache_alloc_node+0x7c/0x318 [ 109.717220][ T7374] kmalloc_trace+0x48/0x94 [ 109.718026][ T7374] sctp_add_bind_addr+0x9c/0x2e8 [ 109.718905][ T7374] sctp_do_bind+0x4f0/0x828 [ 109.719740][ T7374] sctp_connect_new_asoc+0x218/0x5f4 [ 109.720742][ T7374] sctp_sendmsg+0x10f4/0x20f4 [ 109.721647][ T7374] inet_sendmsg+0x154/0x27c [ 109.722455][ T7374] ____sys_sendmsg+0x588/0x90c [ 109.723334][ T7374] __sys_sendmmsg+0x320/0x7ec [ 109.724209][ T7374] __arm64_sys_sendmmsg+0xa4/0xc0 [ 109.725120][ T7374] invoke_syscall+0x98/0x290 [ 109.725959][ T7374] el0_svc_common+0x13c/0x258 [ 109.726834][ T7374] do_el0_svc+0x5c/0x134 [ 109.727610][ T7374] el0_svc+0x58/0x128 [ 109.728372][ T7374] el0t_64_sync_handler+0x84/0xf0 [ 109.729338][ T7374] el0t_64_sync+0x18c/0x190 [ 109.766591][ T7380] set_capacity_and_notify: 14 callbacks suppressed [ 109.766602][ T7380] loop0: detected capacity change from 0 to 512 [ 109.811470][ T1968] tipc: Node number set to 4269801488 [ 109.837692][ T7387] FAULT_INJECTION: forcing a failure. [ 109.837692][ T7387] name failslab, interval 1, probability 0, space 0, times 0 [ 109.846287][ T7387] CPU: 1 PID: 7387 Comm: syz.0.961 Not tainted syzkaller #0 [ 109.847718][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 109.849597][ T7387] Call trace: [ 109.850213][ T7387] dump_backtrace+0x1c4/0x1f0 [ 109.851117][ T7387] show_stack+0x2c/0x3c [ 109.851936][ T7387] __dump_stack+0x30/0x40 [ 109.852884][ T7387] dump_stack_lvl+0xf4/0x15c [ 109.853885][ T7387] dump_stack+0x1c/0x5c [ 109.854780][ T7387] should_fail_ex+0x3cc/0x524 [ 109.855752][ T7387] __should_failslab+0xc0/0x11c [ 109.856792][ T7387] should_failslab+0x10/0x28 [ 109.857691][ T7387] slab_pre_alloc_hook+0x6c/0x31c [ 109.858682][ T7387] kmem_cache_alloc_lru+0x60/0x284 [ 109.859618][ T7387] __d_alloc+0x40/0x68c [ 109.860435][ T7387] d_alloc_pseudo+0x28/0x8c [ 109.861322][ T7387] alloc_file_pseudo+0xd8/0x1f4 [ 109.862207][ T7387] sock_alloc_file+0xb4/0x234 [ 109.863058][ T7387] __sys_socket+0x138/0x1b0 [ 109.863905][ T7387] __arm64_sys_socket+0x7c/0x94 [ 109.864832][ T7387] invoke_syscall+0x98/0x290 [ 109.865759][ T7387] el0_svc_common+0x13c/0x258 [ 109.866650][ T7387] do_el0_svc+0x5c/0x134 [ 109.867458][ T7387] el0_svc+0x58/0x128 [ 109.868203][ T7387] el0t_64_sync_handler+0x84/0xf0 [ 109.869109][ T7387] el0t_64_sync+0x18c/0x190 [ 109.900368][ T7392] loop4: detected capacity change from 0 to 512 [ 109.901912][ T7392] EXT4-fs: Ignoring removed nobh option [ 109.928812][ T7392] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 109.937181][ T7392] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 109.941201][ T7392] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #13: comm syz.4.963: inode has both inline data and extents flags [ 109.948210][ T7392] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.963: couldn't read orphan inode 13 (err -117) [ 109.970402][ T7392] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.974822][ T7399] loop0: detected capacity change from 0 to 164 [ 110.001230][ T7399] isofs_fill_super: root inode is not a directory. Corrupted media? [ 110.009514][ T7392] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 110.040855][ T6865] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.050524][ T1968] tipc: Node number set to 1200062951 [ 110.070976][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 110.151016][ T7418] loop0: detected capacity change from 0 to 512 [ 110.152509][ T7418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.164572][ T7418] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 110.166166][ T7418] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.175420][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.978'. [ 110.196665][ T7427] loop4: detected capacity change from 0 to 764 [ 110.207956][ T7418] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.977: Allocating blocks 41-42 which overlap fs metadata [ 110.214929][ T7418] EXT4-fs (loop0): Remounting filesystem read-only [ 110.218099][ T7418] Quota error (device loop0): write_blk: dquota write failed [ 110.219600][ T7418] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3861: comm syz.0.977: Allocating blocks 41-42 which overlap fs metadata [ 110.223015][ T24] kernel write not supported for file /321/attr/keycreate (pid: 24 comm: kworker/1:1) [ 110.228909][ T7418] EXT4-fs (loop0): Remounting filesystem read-only [ 110.230126][ T7418] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.977: Failed to acquire dquot type 1 [ 110.233809][ T7418] EXT4-fs (loop0): Remounting filesystem read-only [ 110.235058][ T7418] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 110.248617][ T7418] EXT4-fs (loop0): Remounting filesystem read-only [ 110.250093][ T7418] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.977: corrupted inode contents [ 110.266337][ T7418] EXT4-fs (loop0): Remounting filesystem read-only [ 110.267558][ T7418] EXT4-fs error (device loop0): ext4_dirty_inode:6166: inode #12: comm syz.0.977: mark_inode_dirty error [ 110.269813][ T7418] EXT4-fs (loop0): Remounting filesystem read-only [ 110.271682][ T7418] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.977: corrupted inode contents [ 110.280490][ T7418] EXT4-fs (loop0): Remounting filesystem read-only [ 110.281757][ T7418] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #12: comm syz.0.977: mark_inode_dirty error [ 110.283891][ T7418] EXT4-fs (loop0): Remounting filesystem read-only [ 110.285313][ T7418] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.977: corrupted inode contents [ 110.294280][ T7418] EXT4-fs (loop0): Remounting filesystem read-only [ 110.295985][ T7418] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 110.297798][ T7418] EXT4-fs (loop0): Remounting filesystem read-only [ 110.300128][ T7418] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #12: comm syz.0.977: corrupted inode contents [ 110.307095][ T7418] EXT4-fs (loop0): Remounting filesystem read-only [ 110.308299][ T7418] EXT4-fs error (device loop0): ext4_truncate:4325: inode #12: comm syz.0.977: mark_inode_dirty error [ 110.313148][ T7418] EXT4-fs (loop0): Remounting filesystem read-only [ 110.314381][ T7418] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 110.320838][ T7418] EXT4-fs (loop0): Remounting filesystem read-only [ 110.322800][ T7418] EXT4-fs (loop0): 1 truncate cleaned up [ 110.323724][ T7418] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 110.355754][ T7438] loop5: detected capacity change from 0 to 512 [ 110.377556][ T7438] EXT4-fs: Ignoring removed nobh option [ 110.382924][ T7438] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 110.384219][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 110.384329][ T7438] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 110.389222][ T7438] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #13: comm syz.5.983: inode has both inline data and extents flags [ 110.392814][ T7438] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.983: couldn't read orphan inode 13 (err -117) [ 110.398077][ T7438] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 110.404782][ T7438] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 110.433515][ T4588] EXT4-fs (loop5): unmounting filesystem. [ 110.444073][ T7447] loop0: detected capacity change from 0 to 1764 [ 110.561996][ T7459] FAULT_INJECTION: forcing a failure. [ 110.561996][ T7459] name failslab, interval 1, probability 0, space 0, times 0 [ 110.574934][ T7460] loop5: detected capacity change from 0 to 2048 [ 110.576843][ T7459] CPU: 1 PID: 7459 Comm: syz.0.995 Not tainted syzkaller #0 [ 110.578137][ T7459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 110.579732][ T7459] Call trace: [ 110.580442][ T7459] dump_backtrace+0x1c4/0x1f0 [ 110.581429][ T7459] show_stack+0x2c/0x3c [ 110.582278][ T7459] __dump_stack+0x30/0x40 [ 110.583112][ T7459] dump_stack_lvl+0xf4/0x15c [ 110.584014][ T7459] dump_stack+0x1c/0x5c [ 110.584856][ T7459] should_fail_ex+0x3cc/0x524 [ 110.585763][ T7459] __should_failslab+0xc0/0x11c [ 110.586721][ T7459] should_failslab+0x10/0x28 [ 110.587576][ T7459] kmem_cache_alloc_node+0x8c/0x344 [ 110.588568][ T7459] __alloc_skb+0x128/0x728 [ 110.589392][ T7459] tcp_stream_alloc_skb+0x48/0x2d8 [ 110.590501][ T7459] tcp_connect+0x1194/0x3c88 [ 110.591470][ T7459] tcp_v6_connect+0xcdc/0x12ac [ 110.592393][ T7459] __inet_stream_connect+0x1f8/0xc48 [ 110.593415][ T7459] tcp_sendmsg_fastopen+0x314/0x564 [ 110.594425][ T7459] tcp_sendmsg_locked+0x2c50/0x3164 [ 110.595464][ T7459] tcp_sendmsg+0x40/0x64 [ 110.596331][ T7459] inet6_sendmsg+0xb4/0xd8 [ 110.597223][ T7459] __sys_sendto+0x324/0x440 [ 110.598149][ T7459] __arm64_sys_sendto+0xe4/0x104 [ 110.599050][ T7459] invoke_syscall+0x98/0x290 [ 110.599950][ T7459] el0_svc_common+0x13c/0x258 [ 110.600845][ T7459] do_el0_svc+0x5c/0x134 [ 110.601710][ T7459] el0_svc+0x58/0x128 [ 110.602508][ T7459] el0t_64_sync_handler+0x84/0xf0 [ 110.603514][ T7459] el0t_64_sync+0x18c/0x190 [ 110.658343][ T7460] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 110.686789][ T7460] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.994: bg 0: block 345: padding at end of block bitmap is not set [ 110.703377][ T7460] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 12 with error 117 [ 110.715410][ T7460] EXT4-fs (loop5): This should not happen!! Data will be lost [ 110.715410][ T7460] [ 110.787213][ T4588] EXT4-fs (loop5): unmounting filesystem. [ 110.825706][ T7471] netlink: 'syz.0.999': attribute type 1 has an invalid length. [ 110.843005][ T7471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.865894][ T7471] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 110.877006][ T7471] bond1: (slave batadv1): making interface the new active one [ 110.882827][ T7471] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 110.884449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 111.012439][ T7483] loop0: detected capacity change from 0 to 512 [ 111.014014][ T7483] EXT4-fs: Ignoring removed nobh option [ 111.028001][ T7483] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 111.030308][ T7483] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 111.032512][ T7483] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.1004: inode has both inline data and extents flags [ 111.036302][ T7483] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1004: couldn't read orphan inode 13 (err -117) [ 111.047470][ T7483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.064016][ T7483] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 111.075524][ T7487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.077107][ T7487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.111100][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 111.402110][ T7494] FAULT_INJECTION: forcing a failure. [ 111.402110][ T7494] name failslab, interval 1, probability 0, space 0, times 0 [ 111.404880][ T7494] CPU: 1 PID: 7494 Comm: syz.6.1007 Not tainted syzkaller #0 [ 111.406363][ T7494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 111.408420][ T7494] Call trace: [ 111.409092][ T7494] dump_backtrace+0x1c4/0x1f0 [ 111.409994][ T7494] show_stack+0x2c/0x3c [ 111.410840][ T7494] __dump_stack+0x30/0x40 [ 111.411728][ T7494] dump_stack_lvl+0xf4/0x15c [ 111.412654][ T7494] dump_stack+0x1c/0x5c [ 111.413458][ T7494] should_fail_ex+0x3cc/0x524 [ 111.414340][ T7494] __should_failslab+0xc0/0x11c [ 111.415253][ T7494] should_failslab+0x10/0x28 [ 111.416132][ T7494] kmem_cache_alloc+0x88/0x310 [ 111.417044][ T7494] __kernfs_new_node+0xec/0x5fc [ 111.418031][ T7494] kernfs_new_node+0x120/0x230 [ 111.419007][ T7494] __kernfs_create_file+0x60/0x2e0 [ 111.419945][ T7494] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 111.421101][ T7494] internal_create_group+0x3e8/0xb24 [ 111.422265][ T7494] sysfs_create_groups+0x60/0x134 [ 111.423387][ T7494] kobject_add_internal+0x5e4/0xb18 [ 111.424539][ T7494] kobject_init_and_add+0x128/0x194 [ 111.425645][ T7494] rpc_sysfs_xprt_setup+0x12c/0x234 [ 111.426798][ T7494] xprt_switch_alloc+0x378/0x4c0 [ 111.427889][ T7494] rpc_create_xprt+0x17c/0x7b8 [ 111.428865][ T7494] rpc_create+0x434/0x680 [ 111.429704][ T7494] nfs_mount+0x370/0x624 [ 111.430503][ T7494] nfs_try_get_tree+0x50c/0xc58 [ 111.431445][ T7494] nfs_get_tree+0xc9c/0x1024 [ 111.432292][ T7494] vfs_get_tree+0x90/0x278 [ 111.433166][ T7494] vfs_fsconfig_locked+0x1e0/0x374 [ 111.434159][ T7494] __arm64_sys_fsconfig+0x640/0x790 [ 111.435115][ T7494] invoke_syscall+0x98/0x290 [ 111.435905][ T7494] el0_svc_common+0x13c/0x258 [ 111.436799][ T7494] do_el0_svc+0x5c/0x134 [ 111.437607][ T7494] el0_svc+0x58/0x128 [ 111.438397][ T7494] el0t_64_sync_handler+0x84/0xf0 [ 111.439355][ T7494] el0t_64_sync+0x18c/0x190 [ 111.444258][ T7494] kobject_add_internal failed for xprt-0-tcp (error: -12 parent: switch-0) [ 111.525896][ T7496] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1008'. [ 111.530962][ T7498] loop0: detected capacity change from 0 to 512 [ 111.574389][ T7498] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 111.681417][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 112.046011][ T7516] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1013'. [ 112.179358][ T7520] EXT4-fs: Ignoring removed nobh option [ 112.186768][ T7523] Cannot find add_set index 4 as target [ 112.208492][ T7520] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 112.210238][ T7520] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 112.212088][ T7520] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.1017: inode has both inline data and extents flags [ 112.215171][ T7520] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1017: couldn't read orphan inode 13 (err -117) [ 112.219843][ T7520] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 112.229679][ T7520] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 112.257990][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 112.325275][ T7532] FAULT_INJECTION: forcing a failure. [ 112.325275][ T7532] name failslab, interval 1, probability 0, space 0, times 0 [ 112.328935][ T7532] CPU: 0 PID: 7532 Comm: syz.5.1020 Not tainted syzkaller #0 [ 112.330338][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 112.332180][ T7532] Call trace: [ 112.332801][ T7532] dump_backtrace+0x1c4/0x1f0 [ 112.333680][ T7532] show_stack+0x2c/0x3c [ 112.334520][ T7532] __dump_stack+0x30/0x40 [ 112.335342][ T7532] dump_stack_lvl+0xf4/0x15c [ 112.336260][ T7532] dump_stack+0x1c/0x5c [ 112.337111][ T7532] should_fail_ex+0x3cc/0x524 [ 112.338010][ T7532] __should_failslab+0xc0/0x11c [ 112.338946][ T7532] should_failslab+0x10/0x28 [ 112.339808][ T7532] kmem_cache_alloc+0x88/0x310 [ 112.340728][ T7532] __kernfs_new_node+0xec/0x5fc [ 112.341693][ T7532] kernfs_new_node+0x120/0x230 [ 112.342635][ T7532] kernfs_create_dir_ns+0x58/0x138 [ 112.343671][ T7532] sysfs_create_dir_ns+0x120/0x264 [ 112.344647][ T7532] kobject_add_internal+0x5a8/0xb18 [ 112.345652][ T7532] kobject_init_and_add+0x128/0x194 [ 112.346692][ T7532] rpc_sysfs_xprt_setup+0x12c/0x234 [ 112.347731][ T7532] xprt_switch_alloc+0x378/0x4c0 [ 112.348715][ T7532] rpc_create_xprt+0x17c/0x7b8 [ 112.349611][ T7532] rpc_create+0x434/0x680 [ 112.350413][ T7532] nfs_mount+0x370/0x624 [ 112.351188][ T7532] nfs_try_get_tree+0x50c/0xc58 [ 112.352080][ T7532] nfs_get_tree+0xc9c/0x1024 [ 112.352953][ T7532] vfs_get_tree+0x90/0x278 [ 112.353784][ T7532] vfs_fsconfig_locked+0x1e0/0x374 [ 112.354749][ T7532] __arm64_sys_fsconfig+0x640/0x790 [ 112.355708][ T7532] invoke_syscall+0x98/0x290 [ 112.356610][ T7532] el0_svc_common+0x13c/0x258 [ 112.357540][ T7532] do_el0_svc+0x5c/0x134 [ 112.358330][ T7532] el0_svc+0x58/0x128 [ 112.359111][ T7532] el0t_64_sync_handler+0x84/0xf0 [ 112.360132][ T7532] el0t_64_sync+0x18c/0x190 [ 112.361104][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.371308][ T7532] kobject_add_internal failed for xprt-0-tcp (error: -12 parent: switch-0) [ 112.482082][ T4339] Bluetooth: hci5: command 0x1003 tx timeout [ 112.483878][ T4345] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 112.531129][ T7549] FAULT_INJECTION: forcing a failure. [ 112.531129][ T7549] name failslab, interval 1, probability 0, space 0, times 0 [ 112.537638][ T7549] CPU: 0 PID: 7549 Comm: syz.0.1028 Not tainted syzkaller #0 [ 112.539081][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 112.541026][ T7549] Call trace: [ 112.541680][ T7549] dump_backtrace+0x1c4/0x1f0 [ 112.542596][ T7549] show_stack+0x2c/0x3c [ 112.543429][ T7549] __dump_stack+0x30/0x40 [ 112.544262][ T7549] dump_stack_lvl+0xf4/0x15c [ 112.545107][ T7549] dump_stack+0x1c/0x5c [ 112.545908][ T7549] should_fail_ex+0x3cc/0x524 [ 112.546839][ T7549] __should_failslab+0xc0/0x11c [ 112.547789][ T7549] should_failslab+0x10/0x28 [ 112.548698][ T7549] slab_pre_alloc_hook+0x6c/0x31c [ 112.549722][ T7549] kmem_cache_alloc_lru+0x60/0x284 [ 112.550749][ T7549] proc_alloc_inode+0x2c/0xb8 [ 112.551658][ T7549] new_inode_pseudo+0x68/0x1cc [ 112.552577][ T7549] new_inode+0x38/0x174 [ 112.553364][ T7549] proc_get_inode+0x30/0x624 [ 112.554262][ T7549] proc_lookup_de+0x23c/0x2e8 [ 112.555132][ T7549] proc_tgid_net_lookup+0x60/0x11c [ 112.556069][ T7549] path_openat+0xc74/0x27a0 [ 112.556939][ T7549] do_filp_open+0x198/0x38c [ 112.557760][ T7549] do_sys_openat2+0x134/0x3fc [ 112.558622][ T7549] __arm64_sys_openat+0x11c/0x150 [ 112.559605][ T7549] invoke_syscall+0x98/0x290 [ 112.560499][ T7549] el0_svc_common+0x13c/0x258 [ 112.561388][ T7549] do_el0_svc+0x5c/0x134 [ 112.562160][ T7549] el0_svc+0x58/0x128 [ 112.562875][ T7549] el0t_64_sync_handler+0x84/0xf0 [ 112.563819][ T7549] el0t_64_sync+0x18c/0x190 [ 112.611684][ T7543] loop5: unable to read partition table [ 112.612849][ T7543] loop5: partition table beyond EOD, truncated [ 112.616392][ T7543] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 112.637419][ T3939] loop5: unable to read partition table [ 112.638516][ T3939] loop5: partition table beyond EOD, truncated [ 112.652881][ T7551] FAULT_INJECTION: forcing a failure. [ 112.652881][ T7551] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 112.655177][ T7551] CPU: 0 PID: 7551 Comm: syz.4.1031 Not tainted syzkaller #0 [ 112.656519][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 112.658264][ T7551] Call trace: [ 112.658855][ T7551] dump_backtrace+0x1c4/0x1f0 [ 112.659667][ T7551] show_stack+0x2c/0x3c [ 112.660420][ T7551] __dump_stack+0x30/0x40 [ 112.661254][ T7551] dump_stack_lvl+0xf4/0x15c [ 112.662111][ T7551] dump_stack+0x1c/0x5c [ 112.662928][ T7551] should_fail_ex+0x3cc/0x524 [ 112.663786][ T7551] should_fail_alloc_page+0x74/0xb8 [ 112.664822][ T7551] prepare_alloc_pages+0x1b8/0x4f0 [ 112.665815][ T7551] __alloc_pages+0x134/0x544 [ 112.666696][ T7551] __folio_alloc+0x1c/0x44 [ 112.667596][ T7551] vma_alloc_folio+0x37c/0x8ac [ 112.668520][ T7551] alloc_zeroed_user_highpage_movable+0x78/0x8c [ 112.669024][ T7558] FAULT_INJECTION: forcing a failure. [ 112.669024][ T7558] name failslab, interval 1, probability 0, space 0, times 0 [ 112.669702][ T7551] wp_page_copy+0x1a8/0x1774 [ 112.673066][ T7551] do_wp_page+0xaf8/0xed4 [ 112.673928][ T7551] handle_mm_fault+0x1520/0x3018 [ 112.674903][ T7551] do_page_fault+0x310/0x99c [ 112.675853][ T7551] do_mem_abort+0x70/0x198 [ 112.676751][ T7551] el1_abort+0x3c/0x5c [ 112.677595][ T7551] el1h_64_sync_handler+0x50/0xac [ 112.678580][ T7551] el1h_64_sync+0x64/0x68 [ 112.679417][ T7551] __arch_copy_to_user+0x1c4/0x234 [ 112.680395][ T7551] _copy_to_iter+0x418/0xeac [ 112.681253][ T7551] simple_copy_to_iter+0x5c/0x80 [ 112.682128][ T7551] __skb_datagram_iter+0xd8/0x680 [ 112.683016][ T7551] skb_copy_datagram_iter+0x124/0x338 [ 112.684034][ T7551] tipc_recvstream+0x2c8/0xc4c [ 112.684932][ T7551] ____sys_recvmsg+0x270/0x754 [ 112.685829][ T7551] __sys_recvmsg+0x250/0x33c [ 112.686759][ T7551] __arm64_sys_recvmsg+0x80/0x94 [ 112.687712][ T7551] invoke_syscall+0x98/0x290 [ 112.688593][ T7551] el0_svc_common+0x13c/0x258 [ 112.689460][ T7551] do_el0_svc+0x5c/0x134 [ 112.690229][ T7551] el0_svc+0x58/0x128 [ 112.690955][ T7551] el0t_64_sync_handler+0x84/0xf0 [ 112.691923][ T7551] el0t_64_sync+0x18c/0x190 [ 112.692795][ T7558] CPU: 1 PID: 7558 Comm: syz.0.1033 Not tainted syzkaller #0 [ 112.694126][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 112.696072][ T7558] Call trace: [ 112.696709][ T7558] dump_backtrace+0x1c4/0x1f0 [ 112.697626][ T7558] show_stack+0x2c/0x3c [ 112.698461][ T7558] __dump_stack+0x30/0x40 [ 112.699361][ T7558] dump_stack_lvl+0xf4/0x15c [ 112.700265][ T7558] dump_stack+0x1c/0x5c [ 112.701053][ T7558] should_fail_ex+0x3cc/0x524 [ 112.701946][ T7558] __should_failslab+0xc0/0x11c [ 112.702880][ T7558] should_failslab+0x10/0x28 [ 112.703781][ T7558] __kmem_cache_alloc_node+0x7c/0x318 [ 112.704810][ T7558] kmalloc_trace+0x48/0x94 [ 112.705661][ T7558] ip_mc_add_src+0x79c/0xd84 [ 112.706566][ T7558] ip_mc_msfilter+0x4ac/0x954 [ 112.707440][ T7558] do_ip_setsockopt+0x1e04/0x2464 [ 112.708391][ T7558] ip_setsockopt+0x68/0x134 [ 112.709239][ T7558] udp_setsockopt+0xa4/0xbc [ 112.710112][ T7558] sock_common_setsockopt+0xb0/0xcc [ 112.711198][ T7558] __sys_setsockopt+0x2fc/0x50c [ 112.712163][ T7558] __arm64_sys_setsockopt+0xc0/0xdc [ 112.713175][ T7558] invoke_syscall+0x98/0x290 [ 112.714046][ T7558] el0_svc_common+0x13c/0x258 [ 112.714942][ T7558] do_el0_svc+0x5c/0x134 [ 112.715736][ T7558] el0_svc+0x58/0x128 [ 112.716456][ T7558] el0t_64_sync_handler+0x84/0xf0 [ 112.717395][ T7558] el0t_64_sync+0x18c/0x190 [ 112.826623][ T7562] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 112.840484][ T7564] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 113.252095][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 113.268920][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 113.824306][ T7591] tap0: tun_chr_ioctl cmd 35108 [ 113.914427][ T7595] EXT4-fs: Ignoring removed bh option [ 113.945820][ T7595] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 114.688608][ T7618] FAULT_INJECTION: forcing a failure. [ 114.688608][ T7618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 114.694145][ T7618] CPU: 1 PID: 7618 Comm: syz.0.1064 Not tainted syzkaller #0 [ 114.695596][ T7618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 114.697645][ T7618] Call trace: [ 114.698318][ T7618] dump_backtrace+0x1c4/0x1f0 [ 114.699265][ T7618] show_stack+0x2c/0x3c [ 114.700120][ T7618] __dump_stack+0x30/0x40 [ 114.701003][ T7618] dump_stack_lvl+0xf4/0x15c [ 114.701980][ T7618] dump_stack+0x1c/0x5c [ 114.702851][ T7618] should_fail_ex+0x3cc/0x524 [ 114.703847][ T7618] should_fail_alloc_page+0x74/0xb8 [ 114.704889][ T7618] prepare_alloc_pages+0x1b8/0x4f0 [ 114.706027][ T7618] __alloc_pages+0x134/0x544 [ 114.706977][ T7618] __folio_alloc+0x1c/0x44 [ 114.707872][ T7618] vma_alloc_folio+0x37c/0x8ac [ 114.708817][ T7618] alloc_zeroed_user_highpage_movable+0x78/0x8c [ 114.710023][ T7618] wp_page_copy+0x1a8/0x1774 [ 114.710870][ T7618] do_wp_page+0xaf8/0xed4 [ 114.711691][ T7618] handle_mm_fault+0x1520/0x3018 [ 114.712620][ T7618] do_page_fault+0x310/0x99c [ 114.713523][ T7618] do_mem_abort+0x70/0x198 [ 114.714353][ T7618] el1_abort+0x3c/0x5c [ 114.715121][ T7618] el1h_64_sync_handler+0x50/0xac [ 114.716074][ T7618] el1h_64_sync+0x64/0x68 [ 114.716876][ T7618] __arch_copy_to_user+0x1c4/0x234 [ 114.717888][ T7618] _copy_to_iter+0x418/0xeac [ 114.718830][ T7618] simple_copy_to_iter+0x5c/0x80 [ 114.719793][ T7618] __skb_datagram_iter+0xd8/0x680 [ 114.720751][ T7618] skb_copy_datagram_iter+0x124/0x338 [ 114.721803][ T7618] tipc_recvstream+0x2c8/0xc4c [ 114.722732][ T7618] ____sys_recvmsg+0x270/0x754 [ 114.723661][ T7618] __sys_recvmsg+0x250/0x33c [ 114.724569][ T7618] __arm64_sys_recvmsg+0x80/0x94 [ 114.725464][ T7618] invoke_syscall+0x98/0x290 [ 114.726335][ T7618] el0_svc_common+0x13c/0x258 [ 114.727238][ T7618] do_el0_svc+0x5c/0x134 [ 114.728071][ T7618] el0_svc+0x58/0x128 [ 114.728866][ T7618] el0t_64_sync_handler+0x84/0xf0 [ 114.729845][ T7618] el0t_64_sync+0x18c/0x190 [ 114.747197][ T4588] EXT4-fs (loop5): unmounting filesystem. [ 115.226480][ T7629] tipc: Started in network mode [ 115.227403][ T7629] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 115.229699][ T7629] tipc: Enabled bearer , priority 10 [ 115.263233][ T7632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1058'. [ 115.352715][ T7634] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1058'. [ 115.506022][ T7638] FAULT_INJECTION: forcing a failure. [ 115.506022][ T7638] name failslab, interval 1, probability 0, space 0, times 0 [ 115.508397][ T7638] CPU: 0 PID: 7638 Comm: syz.0.1060 Not tainted syzkaller #0 [ 115.509627][ T7638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 115.511507][ T7638] Call trace: [ 115.512131][ T7638] dump_backtrace+0x1c4/0x1f0 [ 115.513123][ T7638] show_stack+0x2c/0x3c [ 115.513963][ T7638] __dump_stack+0x30/0x40 [ 115.514841][ T7638] dump_stack_lvl+0xf4/0x15c [ 115.515760][ T7638] dump_stack+0x1c/0x5c [ 115.516588][ T7638] should_fail_ex+0x3cc/0x524 [ 115.517477][ T7638] __should_failslab+0xc0/0x11c [ 115.518364][ T7638] should_failslab+0x10/0x28 [ 115.519215][ T7638] __kmem_cache_alloc_node+0x7c/0x318 [ 115.520206][ T7638] kmalloc_trace+0x48/0x94 [ 115.521049][ T7638] proc_self_get_link+0xe4/0x17c [ 115.521979][ T7638] pick_link+0x5e0/0xbc8 [ 115.522832][ T7638] step_into+0x954/0xbc4 [ 115.523664][ T7638] link_path_walk+0x5f4/0xcd8 [ 115.524621][ T7638] path_openat+0x1c0/0x27a0 [ 115.525525][ T7638] do_filp_open+0x198/0x38c [ 115.526388][ T7638] do_sys_openat2+0x134/0x3fc [ 115.527343][ T7638] __arm64_sys_openat+0x11c/0x150 [ 115.528376][ T7638] invoke_syscall+0x98/0x290 [ 115.529321][ T7638] el0_svc_common+0x13c/0x258 [ 115.530266][ T7638] do_el0_svc+0x5c/0x134 [ 115.531100][ T7638] el0_svc+0x58/0x128 [ 115.531968][ T7638] el0t_64_sync_handler+0x84/0xf0 [ 115.532917][ T7638] el0t_64_sync+0x18c/0x190 [ 115.676425][ T4378] kernel write not supported for file /520/net/snmp (pid: 4378 comm: kworker/0:4) [ 116.207328][ T7662] tipc: Enabling of bearer rejected, already enabled [ 116.263409][ T7665] FAULT_INJECTION: forcing a failure. [ 116.263409][ T7665] name failslab, interval 1, probability 0, space 0, times 0 [ 116.265784][ T7665] CPU: 0 PID: 7665 Comm: syz.2.1072 Not tainted syzkaller #0 [ 116.266971][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 116.268709][ T7665] Call trace: [ 116.269357][ T7665] dump_backtrace+0x1c4/0x1f0 [ 116.270226][ T7665] show_stack+0x2c/0x3c [ 116.270456][ T4572] tipc: Node number set to 4269801488 [ 116.270981][ T7665] __dump_stack+0x30/0x40 [ 116.272792][ T7665] dump_stack_lvl+0xf4/0x15c [ 116.273691][ T7665] dump_stack+0x1c/0x5c [ 116.274493][ T7665] should_fail_ex+0x3cc/0x524 [ 116.275400][ T7665] __should_failslab+0xc0/0x11c [ 116.276330][ T7665] should_failslab+0x10/0x28 [ 116.277205][ T7665] __kmem_cache_alloc_node+0x7c/0x318 [ 116.278287][ T7665] kmalloc_trace+0x48/0x94 [ 116.279122][ T7665] proc_self_get_link+0xe4/0x17c [ 116.280025][ T7665] pick_link+0x5e0/0xbc8 [ 116.280810][ T7665] step_into+0x954/0xbc4 [ 116.281649][ T7665] link_path_walk+0x5f4/0xcd8 [ 116.282539][ T7665] path_openat+0x1c0/0x27a0 [ 116.283379][ T7665] do_filp_open+0x198/0x38c [ 116.284250][ T7665] do_sys_openat2+0x134/0x3fc [ 116.285120][ T7665] __arm64_sys_openat+0x11c/0x150 [ 116.286083][ T7665] invoke_syscall+0x98/0x290 [ 116.286988][ T7665] el0_svc_common+0x13c/0x258 [ 116.287862][ T7665] do_el0_svc+0x5c/0x134 [ 116.288694][ T7665] el0_svc+0x58/0x128 [ 116.289448][ T7665] el0t_64_sync_handler+0x84/0xf0 [ 116.290400][ T7665] el0t_64_sync+0x18c/0x190 [ 116.447135][ T7678] set_capacity_and_notify: 6 callbacks suppressed [ 116.447145][ T7678] loop2: detected capacity change from 0 to 1024 [ 116.571126][ T7689] loop2: detected capacity change from 0 to 512 [ 116.575058][ T7689] EXT4-fs: Ignoring removed nobh option [ 116.578104][ T7689] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 116.580939][ T7689] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 116.589134][ T5797] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x4 [ 116.621129][ T7689] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.1081: inode has both inline data and extents flags [ 116.625025][ T7689] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1081: couldn't read orphan inode 13 (err -117) [ 116.627892][ T7689] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.641800][ T7689] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 116.655557][ T7695] tipc: Enabled bearer , priority 10 [ 116.674850][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 116.731466][ T7698] loop2: detected capacity change from 0 to 1024 [ 116.734192][ T7698] EXT4-fs: Ignoring removed bh option [ 116.756955][ T7698] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.912972][ T7705] loop6: detected capacity change from 0 to 128 [ 116.921235][ T7705] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 116.988021][ T5219] EXT4-fs (loop6): unmounting filesystem. [ 117.282707][ T7714] loop5: detected capacity change from 0 to 1024 [ 117.318694][ T7714] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 117.377415][ T4588] EXT4-fs (loop5): unmounting filesystem. [ 117.609416][ T7727] loop5: detected capacity change from 0 to 512 [ 117.614189][ T7727] EXT4-fs: Ignoring removed nobh option [ 118.004006][ T1968] tipc: Node number set to 879077066 [ 118.011765][ T7727] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 118.017458][ T7727] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 118.020463][ T7727] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #13: comm syz.5.1095: inode has both inline data and extents flags [ 118.028715][ T7727] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1095: couldn't read orphan inode 13 (err -117) [ 118.041081][ T7727] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 118.044733][ T7732] FAULT_INJECTION: forcing a failure. [ 118.044733][ T7732] name failslab, interval 1, probability 0, space 0, times 0 [ 118.059859][ T7732] CPU: 0 PID: 7732 Comm: syz.4.1091 Not tainted syzkaller #0 [ 118.061353][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 118.063193][ T7732] Call trace: [ 118.063772][ T7732] dump_backtrace+0x1c4/0x1f0 [ 118.064652][ T7732] show_stack+0x2c/0x3c [ 118.064841][ T7727] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, [ 118.065435][ T7732] __dump_stack+0x30/0x40 [ 118.066934][ T7727] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 118.067693][ T7732] dump_stack_lvl+0xf4/0x15c [ 118.069992][ T7732] dump_stack+0x1c/0x5c [ 118.070815][ T7732] should_fail_ex+0x3cc/0x524 [ 118.071721][ T7732] __should_failslab+0xc0/0x11c [ 118.072672][ T7732] should_failslab+0x10/0x28 [ 118.073563][ T7732] __kmem_cache_alloc_node+0x7c/0x318 [ 118.074605][ T7732] __kmalloc+0xc4/0x180 [ 118.075379][ T7732] tomoyo_encode+0x260/0x484 [ 118.076204][ T7732] tomoyo_realpath_from_path+0x4b4/0x508 [ 118.077219][ T7732] tomoyo_check_open_permission+0x19c/0x35c [ 118.078295][ T7732] tomoyo_file_open+0x128/0x198 [ 118.079243][ T7732] security_file_open+0x6c/0xac [ 118.079892][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 118.080264][ T7732] do_dentry_open+0x294/0xf8c [ 118.080283][ T7732] vfs_open+0x7c/0x90 [ 118.080299][ T7732] path_openat+0x1fc0/0x27a0 [ 118.080307][ T7732] do_filp_open+0x198/0x38c [ 118.080313][ T7732] do_sys_openat2+0x134/0x3fc [ 118.080319][ T7732] __arm64_sys_openat+0x11c/0x150 [ 118.080323][ T7732] invoke_syscall+0x98/0x290 [ 118.080331][ T7732] el0_svc_common+0x13c/0x258 [ 118.080337][ T7732] do_el0_svc+0x5c/0x134 [ 118.089156][ T7732] el0_svc+0x58/0x128 [ 118.089881][ T7732] el0t_64_sync_handler+0x84/0xf0 [ 118.090847][ T7732] el0t_64_sync+0x18c/0x190 [ 118.092828][ T7732] ERROR: Out of memory at tomoyo_realpath_from_path. [ 118.164466][ T4588] EXT4-fs (loop5): unmounting filesystem. [ 118.216406][ T7746] loop5: detected capacity change from 0 to 1024 [ 118.266498][ T7746] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 118.292488][ T4588] EXT4-fs (loop5): unmounting filesystem. [ 118.466201][ T7767] tipc: Enabling of bearer rejected, already enabled [ 118.478836][ T7769] FAULT_INJECTION: forcing a failure. [ 118.478836][ T7769] name failslab, interval 1, probability 0, space 0, times 0 [ 118.487875][ T7769] CPU: 0 PID: 7769 Comm: syz.4.1111 Not tainted syzkaller #0 [ 118.489220][ T7769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 118.491051][ T7769] Call trace: [ 118.491657][ T7769] dump_backtrace+0x1c4/0x1f0 [ 118.492611][ T7769] show_stack+0x2c/0x3c [ 118.493433][ T7769] __dump_stack+0x30/0x40 [ 118.494277][ T7769] dump_stack_lvl+0xf4/0x15c [ 118.495185][ T7769] dump_stack+0x1c/0x5c [ 118.496025][ T7769] should_fail_ex+0x3cc/0x524 [ 118.496939][ T7769] __should_failslab+0xc0/0x11c [ 118.497889][ T7769] should_failslab+0x10/0x28 [ 118.498786][ T7769] __kmem_cache_alloc_node+0x7c/0x318 [ 118.499835][ T7769] __kmalloc+0xc4/0x180 [ 118.500622][ T7769] tomoyo_realpath_from_path+0xc4/0x508 [ 118.501678][ T7769] tomoyo_check_open_permission+0x19c/0x35c [ 118.502808][ T7769] tomoyo_file_open+0x128/0x198 [ 118.503754][ T7769] security_file_open+0x6c/0xac [ 118.504695][ T7769] do_dentry_open+0x294/0xf8c [ 118.505612][ T7769] vfs_open+0x7c/0x90 [ 118.506376][ T7769] path_openat+0x1fc0/0x27a0 [ 118.507241][ T7769] do_filp_open+0x198/0x38c [ 118.508078][ T7769] do_sys_openat2+0x134/0x3fc [ 118.508962][ T7769] __arm64_sys_openat+0x11c/0x150 [ 118.510015][ T7769] invoke_syscall+0x98/0x290 [ 118.510936][ T7769] el0_svc_common+0x13c/0x258 [ 118.511858][ T7769] do_el0_svc+0x5c/0x134 [ 118.512731][ T7769] el0_svc+0x58/0x128 [ 118.513495][ T7769] el0t_64_sync_handler+0x84/0xf0 [ 118.514454][ T7769] el0t_64_sync+0x18c/0x190 [ 118.526894][ T7769] ERROR: Out of memory at tomoyo_realpath_from_path. [ 118.648936][ T7777] loop4: detected capacity change from 0 to 1024 [ 118.684943][ T7777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 118.723900][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 118.894245][ T7797] tipc: Enabling of bearer rejected, already enabled [ 118.982858][ T7805] loop6: detected capacity change from 0 to 1024 [ 119.029655][ T7805] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 119.043694][ T7808] device syzkaller1 entered promiscuous mode [ 119.052109][ T5219] EXT4-fs (loop6): unmounting filesystem. [ 119.083504][ T7813] loop6: detected capacity change from 0 to 512 [ 119.085876][ T7813] EXT4-fs: Ignoring removed nobh option [ 119.090292][ T7813] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 119.091796][ T7813] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 119.093766][ T7813] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #13: comm syz.6.1131: inode has both inline data and extents flags [ 119.104318][ T7813] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1131: couldn't read orphan inode 13 (err -117) [ 119.109145][ T7813] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 119.135969][ T7813] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 119.195216][ T5219] EXT4-fs (loop6): unmounting filesystem. [ 119.288020][ T7823] FAULT_INJECTION: forcing a failure. [ 119.288020][ T7823] name failslab, interval 1, probability 0, space 0, times 0 [ 119.299874][ T7823] CPU: 0 PID: 7823 Comm: syz.4.1135 Not tainted syzkaller #0 [ 119.301391][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 119.303264][ T7823] Call trace: [ 119.303860][ T7823] dump_backtrace+0x1c4/0x1f0 [ 119.304755][ T7823] show_stack+0x2c/0x3c [ 119.305525][ T7823] __dump_stack+0x30/0x40 [ 119.306401][ T7823] dump_stack_lvl+0xf4/0x15c [ 119.307296][ T7823] dump_stack+0x1c/0x5c [ 119.308076][ T7823] should_fail_ex+0x3cc/0x524 [ 119.309014][ T7823] __should_failslab+0xc0/0x11c [ 119.309954][ T7823] should_failslab+0x10/0x28 [ 119.310837][ T7823] slab_pre_alloc_hook+0x6c/0x31c [ 119.311801][ T7823] kmem_cache_alloc_lru+0x60/0x284 [ 119.312789][ T7823] __d_alloc+0x40/0x68c [ 119.313588][ T7823] d_alloc_pseudo+0x28/0x8c [ 119.314428][ T7823] alloc_file_pseudo+0xd8/0x1f4 [ 119.315342][ T7823] sock_alloc_file+0xb4/0x234 [ 119.316242][ T7823] __sys_socket+0x138/0x1b0 [ 119.317124][ T7823] __arm64_sys_socket+0x7c/0x94 [ 119.318101][ T7823] invoke_syscall+0x98/0x290 [ 119.318971][ T7823] el0_svc_common+0x13c/0x258 [ 119.319845][ T7823] do_el0_svc+0x5c/0x134 [ 119.320635][ T7823] el0_svc+0x58/0x128 [ 119.321427][ T7823] el0t_64_sync_handler+0x84/0xf0 [ 119.322406][ T7823] el0t_64_sync+0x18c/0x190 [ 119.337640][ T7829] tipc: Enabling of bearer rejected, already enabled [ 119.421208][ T7833] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 119.439637][ T5219] EXT4-fs (loop6): unmounting filesystem. [ 120.007059][ T7875] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 120.069521][ T4588] EXT4-fs (loop5): unmounting filesystem. [ 120.105650][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 120.105660][ T27] audit: type=1326 audit(120.090:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.1154" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99179368 code=0x7ffc0000 [ 120.115889][ T27] audit: type=1326 audit(120.090:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.1154" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99179368 code=0x7ffc0000 [ 120.120009][ T27] audit: type=1326 audit(120.100:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.1154" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff9915c22c code=0x7ffc0000 [ 120.153269][ T27] audit: type=1326 audit(120.100:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.1154" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99179368 code=0x7ffc0000 [ 120.162157][ T27] audit: type=1326 audit(120.100:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.1154" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99179368 code=0x7ffc0000 [ 120.250066][ T7888] ip_tables: iptables: counters copy to user failed while replacing table [ 120.501488][ T27] audit: type=1326 audit(120.100:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.1154" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=16 compat=0 ip=0xffff99179368 code=0x7ffc0000 [ 120.530324][ T27] audit: type=1326 audit(120.100:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.1154" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99179368 code=0x7ffc0000 [ 120.534341][ T27] audit: type=1326 audit(120.100:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.1154" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99179368 code=0x7ffc0000 [ 120.550225][ T27] audit: type=1326 audit(120.100:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.1154" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff99179368 code=0x7ffc0000 [ 120.558968][ T27] audit: type=1326 audit(120.100:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.1154" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99179368 code=0x7ffc0000 [ 121.400583][ T7941] FAULT_INJECTION: forcing a failure. [ 121.400583][ T7941] name failslab, interval 1, probability 0, space 0, times 0 [ 121.404155][ T7941] CPU: 0 PID: 7941 Comm: syz.5.1170 Not tainted syzkaller #0 [ 121.405482][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 121.407406][ T7941] Call trace: [ 121.408038][ T7941] dump_backtrace+0x1c4/0x1f0 [ 121.408954][ T7941] show_stack+0x2c/0x3c [ 121.409788][ T7941] __dump_stack+0x30/0x40 [ 121.410644][ T7941] dump_stack_lvl+0xf4/0x15c [ 121.411527][ T7941] dump_stack+0x1c/0x5c [ 121.412346][ T7941] should_fail_ex+0x3cc/0x524 [ 121.413259][ T7941] __should_failslab+0xc0/0x11c [ 121.414230][ T7941] should_failslab+0x10/0x28 [ 121.415143][ T7941] __kmem_cache_alloc_node+0x7c/0x318 [ 121.416214][ T7941] kmalloc_trace+0x48/0x94 [ 121.417089][ T7941] assoc_array_insert+0x90/0x257c [ 121.418082][ T7941] key_link+0x130/0x424 [ 121.418893][ T7941] call_sbin_request_key+0x3e0/0xa84 [ 121.419894][ T7941] request_key_and_link+0xf74/0x1194 [ 121.420921][ T7941] __arm64_sys_request_key+0x288/0x384 [ 121.422071][ T7941] invoke_syscall+0x98/0x290 [ 121.422949][ T7941] el0_svc_common+0x13c/0x258 [ 121.423842][ T7941] do_el0_svc+0x5c/0x134 [ 121.424662][ T7941] el0_svc+0x58/0x128 [ 121.425436][ T7941] el0t_64_sync_handler+0x84/0xf0 [ 121.426342][ T7941] el0t_64_sync+0x18c/0x190 [ 121.805063][ T7980] FAULT_INJECTION: forcing a failure. [ 121.805063][ T7980] name failslab, interval 1, probability 0, space 0, times 0 [ 121.809144][ T7980] CPU: 1 PID: 7980 Comm: syz.5.1184 Not tainted syzkaller #0 [ 121.810418][ T7980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 121.812335][ T7980] Call trace: [ 121.812958][ T7980] dump_backtrace+0x1c4/0x1f0 [ 121.813824][ T7980] show_stack+0x2c/0x3c [ 121.814609][ T7980] __dump_stack+0x30/0x40 [ 121.815438][ T7980] dump_stack_lvl+0xf4/0x15c [ 121.816358][ T7980] dump_stack+0x1c/0x5c [ 121.817194][ T7980] should_fail_ex+0x3cc/0x524 [ 121.818137][ T7980] __should_failslab+0xc0/0x11c [ 121.819146][ T7980] should_failslab+0x10/0x28 [ 121.819969][ T7980] __kmem_cache_alloc_node+0x7c/0x318 [ 121.820988][ T7980] __kmalloc+0xc4/0x180 [ 121.821806][ T7980] tomoyo_realpath_from_path+0xc4/0x508 [ 121.822875][ T7980] tomoyo_check_open_permission+0x19c/0x35c [ 121.823979][ T7980] tomoyo_file_open+0x128/0x198 [ 121.824915][ T7980] security_file_open+0x6c/0xac [ 121.825862][ T7980] do_dentry_open+0x294/0xf8c [ 121.826715][ T7980] vfs_open+0x7c/0x90 [ 121.827497][ T7980] path_openat+0x1fc0/0x27a0 [ 121.828357][ T7980] do_filp_open+0x198/0x38c [ 121.829207][ T7980] do_sys_openat2+0x134/0x3fc [ 121.830082][ T7980] __arm64_sys_openat+0x11c/0x150 [ 121.831004][ T7980] invoke_syscall+0x98/0x290 [ 121.831827][ T7980] el0_svc_common+0x13c/0x258 [ 121.832731][ T7980] do_el0_svc+0x5c/0x134 [ 121.833521][ T7980] el0_svc+0x58/0x128 [ 121.834286][ T7980] el0t_64_sync_handler+0x84/0xf0 [ 121.835273][ T7980] el0t_64_sync+0x18c/0x190 [ 121.850863][ T7980] ERROR: Out of memory at tomoyo_realpath_from_path. [ 121.920007][ T7989] set_capacity_and_notify: 5 callbacks suppressed [ 121.920018][ T7989] loop5: detected capacity change from 0 to 512 [ 121.931380][ T7989] EXT4-fs: Ignoring removed nobh option [ 121.943910][ T7989] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 121.945411][ T7989] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 121.947109][ T7989] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #13: comm syz.5.1187: inode has both inline data and extents flags [ 122.000603][ T7989] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1187: couldn't read orphan inode 13 (err -117) [ 122.027867][ T7989] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 122.738321][ T8032] FAULT_INJECTION: forcing a failure. [ 122.738321][ T8032] name failslab, interval 1, probability 0, space 0, times 0 [ 122.752905][ T8032] CPU: 0 PID: 8032 Comm: syz.4.1199 Not tainted syzkaller #0 [ 122.754325][ T8032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 122.756364][ T8032] Call trace: [ 122.756983][ T8032] dump_backtrace+0x1c4/0x1f0 [ 122.757873][ T8032] show_stack+0x2c/0x3c [ 122.758655][ T8032] __dump_stack+0x30/0x40 [ 122.759478][ T8032] dump_stack_lvl+0xf4/0x15c [ 122.760343][ T8032] dump_stack+0x1c/0x5c [ 122.761108][ T8032] should_fail_ex+0x3cc/0x524 [ 122.762039][ T8032] __should_failslab+0xc0/0x11c [ 122.762953][ T8032] should_failslab+0x10/0x28 [ 122.763882][ T8032] __kmem_cache_alloc_node+0x7c/0x318 [ 122.764906][ T8032] __kmalloc+0xc4/0x180 [ 122.765689][ T8032] tomoyo_encode+0x260/0x484 [ 122.766546][ T8032] tomoyo_realpath_from_path+0x4b4/0x508 [ 122.767599][ T8032] tomoyo_check_open_permission+0x19c/0x35c [ 122.768655][ T8032] tomoyo_file_open+0x128/0x198 [ 122.769550][ T8032] security_file_open+0x6c/0xac [ 122.770493][ T8032] do_dentry_open+0x294/0xf8c [ 122.771397][ T8032] vfs_open+0x7c/0x90 [ 122.772174][ T8032] path_openat+0x1fc0/0x27a0 [ 122.773018][ T8032] do_filp_open+0x198/0x38c [ 122.773874][ T8032] do_sys_openat2+0x134/0x3fc [ 122.774702][ T8032] __arm64_sys_openat+0x11c/0x150 [ 122.775620][ T8032] invoke_syscall+0x98/0x290 [ 122.776498][ T8032] el0_svc_common+0x13c/0x258 [ 122.777379][ T8032] do_el0_svc+0x5c/0x134 [ 122.778195][ T8032] el0_svc+0x58/0x128 [ 122.778961][ T8032] el0t_64_sync_handler+0x84/0xf0 [ 122.779929][ T8032] el0t_64_sync+0x18c/0x190 [ 122.784772][ T8032] ERROR: Out of memory at tomoyo_realpath_from_path. [ 122.967830][ T8050] tipc: Enabling of bearer rejected, already enabled [ 123.003497][ T8053] loop5: detected capacity change from 0 to 1024 [ 123.005094][ T8053] EXT4-fs: Ignoring removed bh option [ 123.127910][ T8063] FAULT_INJECTION: forcing a failure. [ 123.127910][ T8063] name failslab, interval 1, probability 0, space 0, times 0 [ 123.132850][ T8063] CPU: 0 PID: 8063 Comm: syz.2.1212 Not tainted syzkaller #0 [ 123.134150][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 123.135993][ T8063] Call trace: [ 123.136618][ T8063] dump_backtrace+0x1c4/0x1f0 [ 123.137570][ T8063] show_stack+0x2c/0x3c [ 123.138378][ T8063] __dump_stack+0x30/0x40 [ 123.139197][ T8063] dump_stack_lvl+0xf4/0x15c [ 123.140093][ T8063] dump_stack+0x1c/0x5c [ 123.140949][ T8063] should_fail_ex+0x3cc/0x524 [ 123.141853][ T8063] __should_failslab+0xc0/0x11c [ 123.142776][ T8063] should_failslab+0x10/0x28 [ 123.143671][ T8063] __kmem_cache_alloc_node+0x7c/0x318 [ 123.144696][ T8063] __kmalloc+0xc4/0x180 [ 123.145504][ T8063] tomoyo_encode+0x260/0x484 [ 123.146380][ T8063] tomoyo_realpath_from_path+0x4b4/0x508 [ 123.147468][ T8063] tomoyo_check_open_permission+0x19c/0x35c [ 123.148564][ T8063] tomoyo_file_open+0x128/0x198 [ 123.149479][ T8063] security_file_open+0x6c/0xac [ 123.150391][ T8063] do_dentry_open+0x294/0xf8c [ 123.151236][ T8063] vfs_open+0x7c/0x90 [ 123.151982][ T8063] path_openat+0x1fc0/0x27a0 [ 123.152836][ T8063] do_filp_open+0x198/0x38c [ 123.153640][ T8063] do_sys_openat2+0x134/0x3fc [ 123.154509][ T8063] __arm64_sys_openat+0x11c/0x150 [ 123.155454][ T8063] invoke_syscall+0x98/0x290 [ 123.156317][ T8063] el0_svc_common+0x13c/0x258 [ 123.157182][ T8063] do_el0_svc+0x5c/0x134 [ 123.157991][ T8063] el0_svc+0x58/0x128 [ 123.158722][ T8063] el0t_64_sync_handler+0x84/0xf0 [ 123.159668][ T8063] el0t_64_sync+0x18c/0x190 [ 123.189729][ T8063] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.654965][ T8075] loop4: detected capacity change from 0 to 1024 [ 123.821707][ T8088] tipc: Enabled bearer , priority 10 [ 123.926620][ T8099] loop2: detected capacity change from 0 to 128 [ 123.944737][ T8090] loop6: detected capacity change from 0 to 8192 [ 123.964338][ T8090] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.081386][ T5219] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 124.082813][ T5219] FAT-fs (loop6): Filesystem has been set read-only [ 124.138072][ T8112] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 124.139820][ T8112] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 124.480100][ T8143] loop4: detected capacity change from 0 to 128 [ 124.591454][ T8154] FAULT_INJECTION: forcing a failure. [ 124.591454][ T8154] name failslab, interval 1, probability 0, space 0, times 0 [ 124.593777][ T8154] CPU: 0 PID: 8154 Comm: syz.4.1235 Not tainted syzkaller #0 [ 124.595033][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 124.596956][ T8154] Call trace: [ 124.597571][ T8154] dump_backtrace+0x1c4/0x1f0 [ 124.598476][ T8154] show_stack+0x2c/0x3c [ 124.599287][ T8154] __dump_stack+0x30/0x40 [ 124.600145][ T8154] dump_stack_lvl+0xf4/0x15c [ 124.601039][ T8154] dump_stack+0x1c/0x5c [ 124.601889][ T8154] should_fail_ex+0x3cc/0x524 [ 124.602791][ T8154] __should_failslab+0xc0/0x11c [ 124.603819][ T8154] should_failslab+0x10/0x28 [ 124.604768][ T8154] kmem_cache_alloc+0x88/0x310 [ 124.605724][ T8154] __alloc_file+0x30/0x234 [ 124.606612][ T8154] alloc_empty_file+0xa0/0x184 [ 124.607533][ T8154] path_openat+0xe0/0x27a0 [ 124.608343][ T8154] do_filp_open+0x198/0x38c [ 124.609199][ T8154] do_sys_openat2+0x134/0x3fc [ 124.610100][ T8154] __arm64_sys_openat+0x11c/0x150 [ 124.611113][ T8154] invoke_syscall+0x98/0x290 [ 124.612001][ T8154] el0_svc_common+0x13c/0x258 [ 124.612918][ T8154] do_el0_svc+0x5c/0x134 [ 124.613772][ T8154] el0_svc+0x58/0x128 [ 124.614565][ T8154] el0t_64_sync_handler+0x84/0xf0 [ 124.615550][ T8154] el0t_64_sync+0x18c/0x190 [ 124.755493][ T8159] loop5: detected capacity change from 0 to 8192 [ 125.096744][ T8159] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.145280][ T4588] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 125.146724][ T4588] FAT-fs (loop5): Filesystem has been set read-only [ 125.205113][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 125.205122][ T27] audit: type=1326 audit(125.190:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.2.1240" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 125.218493][ T27] audit: type=1326 audit(125.190:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.2.1240" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 125.234611][ T27] audit: type=1326 audit(125.210:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.2.1240" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8dd5c22c code=0x7ffc0000 [ 125.247683][ T27] audit: type=1326 audit(125.210:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.2.1240" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 125.262176][ T27] audit: type=1326 audit(125.210:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.2.1240" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 125.266938][ T27] audit: type=1326 audit(125.210:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.2.1240" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=16 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 125.272845][ T27] audit: type=1326 audit(125.210:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.2.1240" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 125.277385][ T27] audit: type=1326 audit(125.210:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.2.1240" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 125.283027][ T27] audit: type=1326 audit(125.210:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.2.1240" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 125.287933][ T27] audit: type=1326 audit(125.210:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8168 comm="syz.2.1240" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 125.726460][ T8181] loop6: detected capacity change from 0 to 512 [ 125.731280][ T8181] EXT4-fs: Ignoring removed nobh option [ 125.744315][ T8181] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 125.747126][ T8181] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 125.754015][ T8181] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #13: comm syz.6.1245: inode has both inline data and extents flags [ 125.759954][ T8181] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1245: couldn't read orphan inode 13 (err -117) [ 125.770026][ T8181] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 125.819497][ T8188] Illegal XDP return value 4294967294 on prog (id 28) dev syz_tun, expect packet loss! [ 125.879047][ T8192] loop6: detected capacity change from 0 to 8192 [ 125.884351][ T8192] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.910934][ T5219] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 125.914461][ T5219] FAT-fs (loop6): Filesystem has been set read-only [ 125.920739][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.921882][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.948524][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1252'. [ 125.951318][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1252'. [ 126.037171][ T8211] loop0: detected capacity change from 0 to 512 [ 126.057138][ T8211] EXT4-fs: Ignoring removed nobh option [ 126.072201][ T8211] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 126.073642][ T8211] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 126.085436][ T8211] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.1258: inode has both inline data and extents flags [ 126.092028][ T8211] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1258: couldn't read orphan inode 13 (err -117) [ 126.107038][ T8211] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 126.129740][ T8220] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.131281][ T8220] EXT4-fs: Ignoring removed oldalloc option [ 126.176521][ T8220] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 3: comm syz.6.1261: lblock 3 mapped to illegal pblock 3 (length 3) [ 126.190005][ T8220] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 126.206131][ T8220] EXT4-fs (loop6): This should not happen!! Data will be lost [ 126.206131][ T8220] [ 126.215087][ T8220] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1261: bg 0: block 112: padding at end of block bitmap is not set [ 126.227435][ T8220] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 60 with max blocks 68 with error 28 [ 126.235538][ T8220] EXT4-fs (loop6): This should not happen!! Data will be lost [ 126.235538][ T8220] [ 126.258248][ T8220] EXT4-fs (loop6): Total free blocks count 0 [ 126.259348][ T8220] EXT4-fs (loop6): Free/Dirty block details [ 126.260487][ T8220] EXT4-fs (loop6): free_blocks=0 [ 126.261413][ T8220] EXT4-fs (loop6): dirty_blocks=112 [ 126.262344][ T8220] EXT4-fs (loop6): Block reservation details [ 126.263392][ T8220] EXT4-fs (loop6): i_reserved_data_blocks=7 [ 126.289854][ T39] EXT4-fs error (device loop6): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 5) [ 126.304881][ T8229] loop0: p1 < > p4 [ 126.306634][ T8229] loop0: p4 size 8388608 extends beyond EOD, truncated [ 126.443135][ T6888] udevd[6888]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 126.447277][ T6865] udevd[6865]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 126.827352][ T8258] EXT4-fs: Ignoring removed nobh option [ 126.832073][ T8258] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 126.833794][ T8258] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 126.835629][ T8258] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #13: comm syz.2.1275: inode has both inline data and extents flags [ 126.838833][ T8258] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1275: couldn't read orphan inode 13 (err -117) [ 126.844023][ T8258] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 127.463252][ T8303] set_capacity_and_notify: 3 callbacks suppressed [ 127.463262][ T8303] loop0: detected capacity change from 0 to 512 [ 127.466813][ T8303] EXT4-fs: Ignoring removed nobh option [ 127.480847][ T8303] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 127.482521][ T8303] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 127.488086][ T8303] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.1294: inode has both inline data and extents flags [ 127.492119][ T8303] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1294: couldn't read orphan inode 13 (err -117) [ 127.571609][ T8313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1295'. [ 127.724604][ T8332] loop0: detected capacity change from 0 to 512 [ 127.726668][ T8332] EXT4-fs: Ignoring removed nobh option [ 127.744403][ T8332] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 127.745976][ T8332] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 127.748251][ T8332] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.1305: inode has both inline data and extents flags [ 127.763165][ T8332] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1305: couldn't read orphan inode 13 (err -117) [ 128.211350][ T8359] loop0: detected capacity change from 0 to 512 [ 128.219465][ T8359] EXT4-fs: Ignoring removed nobh option [ 128.248649][ T8359] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 128.250612][ T8359] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 128.253648][ T8359] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.1317: inode has both inline data and extents flags [ 128.256585][ T8359] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1317: couldn't read orphan inode 13 (err -117) [ 128.277030][ T8362] loop6: detected capacity change from 0 to 8192 [ 128.287387][ T8362] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.333425][ T8364] loop0: detected capacity change from 0 to 512 [ 128.345817][ T8364] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 128.350608][ T8364] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.1320: bad orphan inode 131083 [ 128.591574][ T8387] loop0: detected capacity change from 0 to 512 [ 128.593183][ T8387] EXT4-fs: Ignoring removed bh option [ 128.599195][ T8387] EXT4-fs: inline encryption not supported [ 128.608517][ T8387] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.1330: inode #1: comm syz.0.1330: iget: illegal inode # [ 128.612801][ T8387] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1330: error while reading EA inode 1 err=-117 [ 128.615294][ T8387] EXT4-fs (loop0): 1 orphan inode deleted [ 128.630911][ T8391] loop5: detected capacity change from 0 to 512 [ 128.634622][ T8391] EXT4-fs: Ignoring removed nobh option [ 128.638692][ T8384] loop4: detected capacity change from 0 to 8192 [ 128.649220][ T8384] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.659327][ T8391] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 128.663993][ T8391] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 128.665843][ T8391] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #13: comm syz.5.1331: inode has both inline data and extents flags [ 128.669920][ T8391] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.1331: couldn't read orphan inode 13 (err -117) [ 129.546132][ T8419] loop2: detected capacity change from 0 to 8192 [ 129.556240][ T8419] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.651542][ T8427] loop0: detected capacity change from 0 to 512 [ 129.653409][ T8427] EXT4-fs: Ignoring removed nobh option [ 129.665001][ T8427] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 129.666558][ T8427] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 129.674400][ T8427] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.1346: inode has both inline data and extents flags [ 129.677445][ T8427] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1346: couldn't read orphan inode 13 (err -117) [ 129.778646][ T8433] loop5: p1 < > p4 [ 129.779883][ T8433] loop5: p4 size 8388608 extends beyond EOD, truncated [ 129.833337][ T8448] FAULT_INJECTION: forcing a failure. [ 129.833337][ T8448] name failslab, interval 1, probability 0, space 0, times 0 [ 129.836010][ T8448] CPU: 1 PID: 8448 Comm: syz.5.1355 Not tainted syzkaller #0 [ 129.837457][ T8448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 129.839474][ T8448] Call trace: [ 129.840098][ T8448] dump_backtrace+0x1c4/0x1f0 [ 129.841021][ T8448] show_stack+0x2c/0x3c [ 129.841869][ T8448] __dump_stack+0x30/0x40 [ 129.842758][ T8448] dump_stack_lvl+0xf4/0x15c [ 129.843650][ T8448] dump_stack+0x1c/0x5c [ 129.844467][ T8448] should_fail_ex+0x3cc/0x524 [ 129.845367][ T8448] __should_failslab+0xc0/0x11c [ 129.846312][ T8448] should_failslab+0x10/0x28 [ 129.847178][ T8448] __kmem_cache_alloc_node+0x7c/0x318 [ 129.848150][ T8448] __kmalloc+0xc4/0x180 [ 129.848908][ T8448] tomoyo_encode+0x260/0x484 [ 129.849740][ T8448] tomoyo_realpath_from_path+0x4b4/0x508 [ 129.850781][ T8448] tomoyo_mkdev_perm+0x1c4/0x470 [ 129.851721][ T8448] tomoyo_path_mknod+0xf0/0x18c [ 129.852702][ T8448] security_path_mknod+0xf8/0x14c [ 129.853688][ T8448] do_mknodat+0x218/0x558 [ 129.854542][ T8448] __arm64_sys_mknodat+0xb4/0xd0 [ 129.855539][ T8448] invoke_syscall+0x98/0x290 [ 129.856427][ T8448] el0_svc_common+0x13c/0x258 [ 129.857313][ T8448] do_el0_svc+0x5c/0x134 [ 129.858113][ T8448] el0_svc+0x58/0x128 [ 129.858864][ T8448] el0t_64_sync_handler+0x84/0xf0 [ 129.859860][ T8448] el0t_64_sync+0x18c/0x190 [ 129.861914][ T8444] ip_tables: iptables: counters copy to user failed while replacing table [ 129.864821][ T8448] ERROR: Out of memory at tomoyo_realpath_from_path. [ 129.895110][ T6888] udevd[6888]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 129.895391][ T6865] udevd[6865]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 129.933244][ T8455] EXT4-fs: Ignoring removed nobh option [ 129.936395][ T8455] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 129.938520][ T8455] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 129.940901][ T8455] EXT4-fs error (device loop6): ext4_orphan_get:1409: inode #13: comm syz.6.1358: inode has both inline data and extents flags [ 129.943708][ T8455] EXT4-fs error (device loop6): ext4_orphan_get:1414: comm syz.6.1358: couldn't read orphan inode 13 (err -117) [ 129.949463][ T8455] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 130.034642][ T8463] FAULT_INJECTION: forcing a failure. [ 130.034642][ T8463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.037511][ T8463] CPU: 1 PID: 8463 Comm: syz.6.1361 Not tainted syzkaller #0 [ 130.038848][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 130.040862][ T8463] Call trace: [ 130.041540][ T8463] dump_backtrace+0x1c4/0x1f0 [ 130.042488][ T8463] show_stack+0x2c/0x3c [ 130.043339][ T8463] __dump_stack+0x30/0x40 [ 130.044228][ T8463] dump_stack_lvl+0xf4/0x15c [ 130.045188][ T8463] dump_stack+0x1c/0x5c [ 130.045981][ T8463] should_fail_ex+0x3cc/0x524 [ 130.046899][ T8463] should_fail+0x14/0x24 [ 130.047770][ T8463] should_fail_usercopy+0x20/0x30 [ 130.048793][ T8463] strncpy_from_user+0x48/0x59c [ 130.049783][ T8463] __arm64_sys_add_key+0x14c/0x520 [ 130.050757][ T8463] invoke_syscall+0x98/0x290 [ 130.051667][ T8463] el0_svc_common+0x13c/0x258 [ 130.052610][ T8463] do_el0_svc+0x5c/0x134 [ 130.053477][ T8463] el0_svc+0x58/0x128 [ 130.054274][ T8463] el0t_64_sync_handler+0x84/0xf0 [ 130.055246][ T8463] el0t_64_sync+0x18c/0x190 [ 130.292679][ T8475] ip_tables: iptables: counters copy to user failed while replacing table [ 130.536796][ T27] kauditd_printk_skb: 30 callbacks suppressed [ 130.536810][ T27] audit: type=1326 audit(130.520:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.6.1372" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 130.542776][ T27] audit: type=1326 audit(130.520:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.6.1372" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 130.547882][ T27] audit: type=1326 audit(130.520:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.6.1372" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8f95c22c code=0x7ffc0000 [ 130.552620][ T27] audit: type=1326 audit(130.520:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.6.1372" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 130.557517][ T27] audit: type=1326 audit(130.520:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.6.1372" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 130.563041][ T27] audit: type=1326 audit(130.520:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.6.1372" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=16 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 130.568025][ T27] audit: type=1326 audit(130.520:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.6.1372" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 130.573520][ T27] audit: type=1326 audit(130.520:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.6.1372" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 130.577810][ T27] audit: type=1326 audit(130.520:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.6.1372" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 130.582739][ T27] audit: type=1326 audit(130.520:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8483 comm="syz.6.1372" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 130.943379][ T8492] FAULT_INJECTION: forcing a failure. [ 130.943379][ T8492] name fail_futex, interval 1, probability 0, space 0, times 0 [ 130.945601][ T8492] CPU: 0 PID: 8492 Comm: syz.2.1374 Not tainted syzkaller #0 [ 130.946858][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 130.948629][ T8492] Call trace: [ 130.949281][ T8492] dump_backtrace+0x1c4/0x1f0 [ 130.950149][ T8492] show_stack+0x2c/0x3c [ 130.950944][ T8492] __dump_stack+0x30/0x40 [ 130.951804][ T8492] dump_stack_lvl+0xf4/0x15c [ 130.952716][ T8492] dump_stack+0x1c/0x5c [ 130.953565][ T8492] should_fail_ex+0x3cc/0x524 [ 130.954436][ T8492] should_fail+0x14/0x24 [ 130.955267][ T8492] get_futex_key+0x904/0xfb0 [ 130.956144][ T8492] futex_wake+0x10c/0x458 [ 130.956956][ T8492] do_futex+0x2c4/0x340 [ 130.957722][ T8492] __arm64_sys_futex+0x390/0x414 [ 130.958643][ T8492] invoke_syscall+0x98/0x290 [ 130.959534][ T8492] el0_svc_common+0x13c/0x258 [ 130.960433][ T8492] do_el0_svc+0x5c/0x134 [ 130.961238][ T8492] el0_svc+0x58/0x128 [ 130.962004][ T8492] el0t_64_sync_handler+0x84/0xf0 [ 130.962955][ T8492] el0t_64_sync+0x18c/0x190 [ 131.099188][ T8502] ip_tables: iptables: counters copy to user failed while replacing table [ 131.393585][ T8507] ip_tables: iptables: counters copy to user failed while replacing table [ 131.467296][ T1968] wiimote 0005:057E:0330.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 131.471604][ T1968] wiimote 0005:057E:0330.0001: New device registered [ 131.475931][ T8508] wiimote 0005:057E:0330.0001: Device removed [ 131.555358][ T8515] fido_id[8515]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 132.075253][ T8531] EXT4-fs: Ignoring removed nobh option [ 132.096962][ T8531] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 132.098537][ T8531] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 132.119918][ T8531] EXT4-fs error (device loop0): ext4_orphan_get:1409: inode #13: comm syz.0.1390: inode has both inline data and extents flags [ 132.136646][ T8531] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.1390: couldn't read orphan inode 13 (err -117) [ 132.159443][ T8531] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 132.746821][ T8553] ip_tables: iptables: counters copy to user failed while replacing table [ 133.054398][ T8557] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 133.129211][ T8565] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1401'. [ 133.247992][ T8574] ip_tables: iptables: counters copy to user failed while replacing table [ 133.599268][ T8586] set_capacity_and_notify: 3 callbacks suppressed [ 133.599278][ T8586] loop0: detected capacity change from 0 to 512 [ 134.063052][ T8604] loop5: detected capacity change from 0 to 512 [ 134.262490][ T8622] loop0: detected capacity change from 0 to 1024 [ 134.303330][ T6865] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.508616][ T8637] ip_tables: iptables: counters copy to user failed while replacing table [ 134.746654][ T8640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1428'. [ 134.748329][ T8640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1428'. [ 135.472157][ T8675] ip_tables: iptables: counters copy to user failed while replacing table [ 135.725795][ T8690] loop4: detected capacity change from 0 to 512 [ 135.742897][ T8690] EXT4-fs mount: 46 callbacks suppressed [ 135.742908][ T8690] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.837787][ T27] kauditd_printk_skb: 167 callbacks suppressed [ 135.837801][ T27] audit: type=1326 audit(135.800:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.6.1439" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 135.864535][ T27] audit: type=1326 audit(135.800:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8669 comm="syz.6.1439" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 135.869046][ T27] audit: type=1326 audit(135.800:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.5.1438" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8979368 code=0x7ffc0000 [ 135.895627][ T27] audit: type=1326 audit(135.800:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8670 comm="syz.5.1438" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa8979368 code=0x7ffc0000 [ 135.921726][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 136.053617][ T8713] FAULT_INJECTION: forcing a failure. [ 136.053617][ T8713] name failslab, interval 1, probability 0, space 0, times 0 [ 136.056594][ T8713] CPU: 1 PID: 8713 Comm: syz.6.1451 Not tainted syzkaller #0 [ 136.057857][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 136.059786][ T8713] Call trace: [ 136.060413][ T8713] dump_backtrace+0x1c4/0x1f0 [ 136.061309][ T8713] show_stack+0x2c/0x3c [ 136.062100][ T8713] __dump_stack+0x30/0x40 [ 136.062907][ T8713] dump_stack_lvl+0xf4/0x15c [ 136.063761][ T8713] dump_stack+0x1c/0x5c [ 136.064567][ T8713] should_fail_ex+0x3cc/0x524 [ 136.065473][ T8713] __should_failslab+0xc0/0x11c [ 136.066405][ T8713] should_failslab+0x10/0x28 [ 136.067268][ T8713] __kmem_cache_alloc_node+0x7c/0x318 [ 136.068262][ T8713] __kmalloc+0xc4/0x180 [ 136.069061][ T8713] tomoyo_encode+0x260/0x484 [ 136.069961][ T8713] tomoyo_realpath_from_path+0x4b4/0x508 [ 136.071072][ T8713] tomoyo_path_number_perm+0x1c4/0x540 [ 136.072103][ T8713] tomoyo_file_ioctl+0x2c/0x3c [ 136.073043][ T8713] security_file_ioctl+0x80/0xbc [ 136.073970][ T8713] __arm64_sys_ioctl+0xa8/0x1c8 [ 136.074878][ T8713] invoke_syscall+0x98/0x290 [ 136.075754][ T8713] el0_svc_common+0x13c/0x258 [ 136.076636][ T8713] do_el0_svc+0x5c/0x134 [ 136.077432][ T8713] el0_svc+0x58/0x128 [ 136.078182][ T8713] el0t_64_sync_handler+0x84/0xf0 [ 136.079119][ T8713] el0t_64_sync+0x18c/0x190 [ 136.084161][ T8713] ERROR: Out of memory at tomoyo_realpath_from_path. [ 136.138354][ T27] audit: type=1326 audit(136.120:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.1456" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 136.144188][ T27] audit: type=1326 audit(136.120:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.1456" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 136.156432][ T27] audit: type=1326 audit(136.120:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.1456" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8f95c22c code=0x7ffc0000 [ 136.162866][ T27] audit: type=1326 audit(136.120:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.1456" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 136.179500][ T27] audit: type=1326 audit(136.120:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.1456" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 136.192963][ T27] audit: type=1326 audit(136.120:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.6.1456" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=16 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 136.669645][ T8750] FAULT_INJECTION: forcing a failure. [ 136.669645][ T8750] name failslab, interval 1, probability 0, space 0, times 0 [ 136.674190][ T8750] CPU: 0 PID: 8750 Comm: syz.4.1466 Not tainted syzkaller #0 [ 136.675514][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 136.677430][ T8750] Call trace: [ 136.678046][ T8750] dump_backtrace+0x1c4/0x1f0 [ 136.678909][ T8750] show_stack+0x2c/0x3c [ 136.679635][ T8750] __dump_stack+0x30/0x40 [ 136.680459][ T8750] dump_stack_lvl+0xf4/0x15c [ 136.681350][ T8750] dump_stack+0x1c/0x5c [ 136.682158][ T8750] should_fail_ex+0x3cc/0x524 [ 136.683090][ T8750] __should_failslab+0xc0/0x11c [ 136.684038][ T8750] should_failslab+0x10/0x28 [ 136.684934][ T8750] __kmem_cache_alloc_node+0x7c/0x318 [ 136.685938][ T8750] kmalloc_trace+0x48/0x94 [ 136.686823][ T8750] snd_seq_timer_new+0x60/0x62c [ 136.687734][ T8750] snd_seq_queue_alloc+0x150/0x4cc [ 136.688725][ T8750] snd_seq_ioctl_create_queue+0x84/0x37c [ 136.689855][ T8750] snd_seq_ioctl+0x2e8/0x570 [ 136.690726][ T8750] __arm64_sys_ioctl+0x14c/0x1c8 [ 136.691624][ T8750] invoke_syscall+0x98/0x290 [ 136.692468][ T8750] el0_svc_common+0x13c/0x258 [ 136.693348][ T8750] do_el0_svc+0x5c/0x134 [ 136.694173][ T8750] el0_svc+0x58/0x128 [ 136.694960][ T8750] el0t_64_sync_handler+0x84/0xf0 [ 136.695917][ T8750] el0t_64_sync+0x18c/0x190 [ 136.736466][ T8756] loop2: detected capacity change from 0 to 512 [ 136.738167][ T8756] EXT4-fs: Ignoring removed bh option [ 136.739349][ T8756] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.741686][ T8756] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 136.744336][ T8756] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 136.746363][ T8756] EXT4-fs (loop2): orphan cleanup on readonly fs [ 136.748122][ T8756] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.752026][ T8756] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 136.753867][ T8756] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1468: Invalid block bitmap block 0 in block_group 0 [ 136.758932][ T8756] EXT4-fs (loop2): Remounting filesystem read-only [ 136.760768][ T8756] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 136.762701][ T8756] EXT4-fs (loop2): Remounting filesystem read-only [ 136.764194][ T8756] EXT4-fs (loop2): 1 orphan inode deleted [ 136.765320][ T8756] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 136.770008][ T8756] EXT4-fs error (device loop2): ext4_lookup:1864: inode #2: comm syz.2.1468: deleted inode referenced: 12 [ 136.784747][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 137.061888][ T8767] loop6: detected capacity change from 0 to 8192 [ 137.071915][ T8767] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 137.678992][ T8783] FAULT_INJECTION: forcing a failure. [ 137.678992][ T8783] name failslab, interval 1, probability 0, space 0, times 0 [ 137.681727][ T8783] CPU: 1 PID: 8783 Comm: syz.2.1480 Not tainted syzkaller #0 [ 137.683087][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 137.685045][ T8783] Call trace: [ 137.685667][ T8783] dump_backtrace+0x1c4/0x1f0 [ 137.686551][ T8783] show_stack+0x2c/0x3c [ 137.687330][ T8783] __dump_stack+0x30/0x40 [ 137.688100][ T8783] dump_stack_lvl+0xf4/0x15c [ 137.688998][ T8783] dump_stack+0x1c/0x5c [ 137.689873][ T8783] should_fail_ex+0x3cc/0x524 [ 137.690800][ T8783] __should_failslab+0xc0/0x11c [ 137.691723][ T8783] should_failslab+0x10/0x28 [ 137.692626][ T8783] __kmem_cache_alloc_node+0x7c/0x318 [ 137.693649][ T8783] kmalloc_trace+0x48/0x94 [ 137.694502][ T8783] snd_timer_instance_new+0x58/0x1e0 [ 137.695515][ T8783] snd_seq_timer_open+0x1e4/0x504 [ 137.696490][ T8783] queue_use+0x174/0x20c [ 137.697295][ T8783] snd_seq_queue_alloc+0x220/0x4cc [ 137.698253][ T8783] snd_seq_ioctl_create_queue+0x84/0x37c [ 137.699351][ T8783] snd_seq_ioctl+0x2e8/0x570 [ 137.700227][ T8783] __arm64_sys_ioctl+0x14c/0x1c8 [ 137.701159][ T8783] invoke_syscall+0x98/0x290 [ 137.702007][ T8783] el0_svc_common+0x13c/0x258 [ 137.702893][ T8783] do_el0_svc+0x5c/0x134 [ 137.703688][ T8783] el0_svc+0x58/0x128 [ 137.704445][ T8783] el0t_64_sync_handler+0x84/0xf0 [ 137.705389][ T8783] el0t_64_sync+0x18c/0x190 [ 137.718753][ T8785] xt_hashlimit: size too large, truncated to 1048576 [ 138.281844][ T8798] loop6: detected capacity change from 0 to 8192 [ 138.295478][ T8798] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.613852][ T8812] loop2: detected capacity change from 0 to 512 [ 138.623208][ T8812] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.1488: iget: bad i_size value: 38620345925642 [ 138.625768][ T8812] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1488: couldn't read orphan inode 15 (err -117) [ 138.628178][ T8812] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 138.689590][ T8683] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.701277][ T8812] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.1488: bg 0: block 5: invalid block bitmap [ 138.721969][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1489'. [ 138.725996][ T8817] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1489'. [ 138.729554][ T8817] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1489'. [ 138.731473][ T8812] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 138.733697][ T8812] EXT4-fs (loop2): This should not happen!! Data will be lost [ 138.733697][ T8812] [ 138.733924][ T8817] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1489'. [ 138.735473][ T8812] EXT4-fs (loop2): Total free blocks count 0 [ 138.737929][ T8812] EXT4-fs (loop2): Free/Dirty block details [ 138.738942][ T8812] EXT4-fs (loop2): free_blocks=0 [ 138.749525][ T8812] EXT4-fs (loop2): dirty_blocks=2108 [ 138.756601][ T8812] EXT4-fs (loop2): Block reservation details [ 138.757748][ T8812] EXT4-fs (loop2): i_reserved_data_blocks=2108 [ 138.777875][ T6653] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 52 with error 28 [ 138.829667][ T8823] FAULT_INJECTION: forcing a failure. [ 138.829667][ T8823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.834986][ T8823] CPU: 1 PID: 8823 Comm: syz.0.1493 Not tainted syzkaller #0 [ 138.836333][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 138.838252][ T8823] Call trace: [ 138.838890][ T8823] dump_backtrace+0x1c4/0x1f0 [ 138.839838][ T8823] show_stack+0x2c/0x3c [ 138.840624][ T8823] __dump_stack+0x30/0x40 [ 138.841477][ T8823] dump_stack_lvl+0xf4/0x15c [ 138.842396][ T8823] dump_stack+0x1c/0x5c [ 138.843171][ T8823] should_fail_ex+0x3cc/0x524 [ 138.844044][ T8823] should_fail+0x14/0x24 [ 138.844911][ T8823] should_fail_usercopy+0x20/0x30 [ 138.845841][ T8823] strncpy_from_user+0x48/0x59c [ 138.846767][ T8823] getname_flags+0xec/0x458 [ 138.847591][ T8823] getname+0x28/0x38 [ 138.848339][ T8823] do_mq_open+0x160/0x614 [ 138.849156][ T8823] __arm64_sys_mq_open+0x210/0x2a4 [ 138.850096][ T8823] invoke_syscall+0x98/0x290 [ 138.850958][ T8823] el0_svc_common+0x13c/0x258 [ 138.851814][ T8823] do_el0_svc+0x5c/0x134 [ 138.852627][ T8823] el0_svc+0x58/0x128 [ 138.853389][ T8823] el0t_64_sync_handler+0x84/0xf0 [ 138.854343][ T8823] el0t_64_sync+0x18c/0x190 [ 139.759279][ T8857] ip_tables: iptables: counters copy to user failed while replacing table [ 140.374359][ T8887] loop4: detected capacity change from 0 to 1024 [ 140.381840][ T8887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 140.400009][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 140.999266][ T8903] loop0: detected capacity change from 0 to 512 [ 141.034547][ T8903] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 141.080737][ T27] kauditd_printk_skb: 55 callbacks suppressed [ 141.080751][ T27] audit: type=1326 audit(141.070:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.2.1524" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 141.087608][ T27] audit: type=1326 audit(141.070:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.2.1524" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 141.102232][ T27] audit: type=1326 audit(141.070:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.2.1524" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8dd5c22c code=0x7ffc0000 [ 141.111220][ T27] audit: type=1326 audit(141.070:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.2.1524" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 141.119660][ T27] audit: type=1326 audit(141.070:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.2.1524" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 141.128292][ T27] audit: type=1326 audit(141.070:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.2.1524" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=16 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 141.133019][ T27] audit: type=1326 audit(141.070:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.2.1524" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 141.138210][ T27] audit: type=1326 audit(141.070:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.2.1524" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 141.273092][ T27] audit: type=1326 audit(141.070:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.2.1524" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 141.483864][ T27] audit: type=1326 audit(141.070:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.2.1524" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8dd79368 code=0x7ffc0000 [ 141.695331][ T8930] ip_tables: iptables: counters copy to user failed while replacing table [ 141.984661][ T4335] EXT4-fs (loop0): unmounting filesystem. [ 141.996467][ T8928] loop6: detected capacity change from 0 to 8192 [ 141.998948][ T8928] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.013988][ T5219] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 142.015485][ T5219] FAT-fs (loop6): Filesystem has been set read-only [ 142.069009][ T8938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1536'. [ 142.178018][ T8952] loop2: detected capacity change from 0 to 512 [ 142.211425][ T8952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 142.326226][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 142.361498][ T8959] loop4: detected capacity change from 0 to 8192 [ 142.369944][ T8959] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.758659][ T4338] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 142.760645][ T4338] FAT-fs (loop4): Filesystem has been set read-only [ 142.916865][ T8987] netlink: 'syz.5.1552': attribute type 10 has an invalid length. [ 143.403228][ T9031] loop5: detected capacity change from 0 to 512 [ 143.441357][ T9031] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 143.580705][ T4588] EXT4-fs (loop5): unmounting filesystem. [ 144.216474][ T9076] loop4: detected capacity change from 0 to 512 [ 144.260688][ T9066] loop2: detected capacity change from 0 to 1024 [ 144.266069][ T9076] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.275160][ T9083] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1584'. [ 144.277831][ T9083] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1584'. [ 144.314336][ T9066] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 144.316621][ T9066] EXT4-fs (loop2): unmounting filesystem. [ 144.326477][ T9066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 144.328324][ T9066] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1577'. [ 144.362112][ T9088] FAULT_INJECTION: forcing a failure. [ 144.362112][ T9088] name fail_futex, interval 1, probability 0, space 0, times 0 [ 144.364450][ T9088] CPU: 0 PID: 9088 Comm: syz.6.1585 Not tainted syzkaller #0 [ 144.365657][ T9088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 144.367348][ T9088] Call trace: [ 144.367899][ T9088] dump_backtrace+0x1c4/0x1f0 [ 144.368683][ T9088] show_stack+0x2c/0x3c [ 144.369377][ T9088] __dump_stack+0x30/0x40 [ 144.370084][ T9088] dump_stack_lvl+0xf4/0x15c [ 144.371005][ T9088] dump_stack+0x1c/0x5c [ 144.371809][ T9088] should_fail_ex+0x3cc/0x524 [ 144.372813][ T9088] should_fail+0x14/0x24 [ 144.373629][ T9088] get_futex_key+0x904/0xfb0 [ 144.374503][ T9088] futex_wake+0x10c/0x458 [ 144.375333][ T9088] do_futex+0x2c4/0x340 [ 144.376105][ T9088] __arm64_sys_futex+0x390/0x414 [ 144.377071][ T9088] invoke_syscall+0x98/0x290 [ 144.378038][ T9088] el0_svc_common+0x13c/0x258 [ 144.378998][ T9088] do_el0_svc+0x5c/0x134 [ 144.379845][ T9088] el0_svc+0x58/0x128 [ 144.380665][ T9088] el0t_64_sync_handler+0x84/0xf0 [ 144.381666][ T9088] el0t_64_sync+0x18c/0x190 [ 144.504845][ T9099] FAULT_INJECTION: forcing a failure. [ 144.504845][ T9099] name failslab, interval 1, probability 0, space 0, times 0 [ 144.507260][ T9099] CPU: 1 PID: 9099 Comm: syz.6.1587 Not tainted syzkaller #0 [ 144.508601][ T9099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 144.510404][ T9099] Call trace: [ 144.511063][ T9099] dump_backtrace+0x1c4/0x1f0 [ 144.512010][ T9099] show_stack+0x2c/0x3c [ 144.512841][ T9099] __dump_stack+0x30/0x40 [ 144.513711][ T9099] dump_stack_lvl+0xf4/0x15c [ 144.514622][ T9099] dump_stack+0x1c/0x5c [ 144.515478][ T9099] should_fail_ex+0x3cc/0x524 [ 144.516513][ T9099] __should_failslab+0xc0/0x11c [ 144.517459][ T9099] should_failslab+0x10/0x28 [ 144.518328][ T9099] slab_pre_alloc_hook+0x6c/0x31c [ 144.519304][ T9099] kmem_cache_alloc_lru+0x60/0x284 [ 144.520293][ T9099] sock_alloc_inode+0x2c/0xcc [ 144.521198][ T9099] new_inode_pseudo+0x68/0x1cc [ 144.522053][ T9099] __sock_create+0x138/0x8a8 [ 144.522948][ T9099] __sys_socketpair+0x2ec/0x6d8 [ 144.523828][ T9099] __arm64_sys_socketpair+0xa0/0xbc [ 144.524797][ T9099] invoke_syscall+0x98/0x290 [ 144.525659][ T9099] el0_svc_common+0x13c/0x258 [ 144.526592][ T9099] do_el0_svc+0x5c/0x134 [ 144.527446][ T9099] el0_svc+0x58/0x128 [ 144.528203][ T9099] el0t_64_sync_handler+0x84/0xf0 [ 144.529174][ T9099] el0t_64_sync+0x18c/0x190 [ 144.532631][ T9099] socket: no more sockets [ 144.535976][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 144.563330][ T9097] loop5: detected capacity change from 0 to 8192 [ 144.578546][ T9097] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.625843][ T4588] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 144.627298][ T4588] FAT-fs (loop5): Filesystem has been set read-only [ 144.674748][ T9115] FAULT_INJECTION: forcing a failure. [ 144.674748][ T9115] name fail_futex, interval 1, probability 0, space 0, times 0 [ 144.677186][ T9115] CPU: 0 PID: 9115 Comm: syz.5.1597 Not tainted syzkaller #0 [ 144.678377][ T9115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 144.680101][ T9115] Call trace: [ 144.680768][ T9115] dump_backtrace+0x1c4/0x1f0 [ 144.681714][ T9115] show_stack+0x2c/0x3c [ 144.682539][ T9115] __dump_stack+0x30/0x40 [ 144.683413][ T9115] dump_stack_lvl+0xf4/0x15c [ 144.684319][ T9115] dump_stack+0x1c/0x5c [ 144.685112][ T9115] should_fail_ex+0x3cc/0x524 [ 144.686017][ T9115] should_fail+0x14/0x24 [ 144.686808][ T9115] get_futex_key+0x904/0xfb0 [ 144.687678][ T9115] futex_wake+0x10c/0x458 [ 144.688521][ T9115] do_futex+0x2c4/0x340 [ 144.689354][ T9115] __arm64_sys_futex+0x390/0x414 [ 144.690256][ T9115] invoke_syscall+0x98/0x290 [ 144.691145][ T9115] el0_svc_common+0x13c/0x258 [ 144.692060][ T9115] do_el0_svc+0x5c/0x134 [ 144.692901][ T9115] el0_svc+0x58/0x128 [ 144.693685][ T9115] el0t_64_sync_handler+0x84/0xf0 [ 144.694639][ T9115] el0t_64_sync+0x18c/0x190 [ 144.736445][ T9124] loop4: detected capacity change from 0 to 512 [ 145.740837][ T9124] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 145.776252][ T9137] FAULT_INJECTION: forcing a failure. [ 145.776252][ T9137] name failslab, interval 1, probability 0, space 0, times 0 [ 145.778544][ T9137] CPU: 1 PID: 9137 Comm: syz.5.1603 Not tainted syzkaller #0 [ 145.779792][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 145.781599][ T9137] Call trace: [ 145.782207][ T9137] dump_backtrace+0x1c4/0x1f0 [ 145.783150][ T9137] show_stack+0x2c/0x3c [ 145.783947][ T9137] __dump_stack+0x30/0x40 [ 145.784782][ T9137] dump_stack_lvl+0xf4/0x15c [ 145.785683][ T9137] dump_stack+0x1c/0x5c [ 145.786475][ T9137] should_fail_ex+0x3cc/0x524 [ 145.787353][ T9137] __should_failslab+0xc0/0x11c [ 145.788224][ T9137] should_failslab+0x10/0x28 [ 145.789147][ T9137] slab_pre_alloc_hook+0x6c/0x31c [ 145.790083][ T9137] kmem_cache_alloc_lru+0x60/0x284 [ 145.791370][ T9137] sock_alloc_inode+0x2c/0xcc [ 145.792281][ T9137] new_inode_pseudo+0x68/0x1cc [ 145.793187][ T9137] __sock_create+0x138/0x8a8 [ 145.794072][ T9137] __sys_socketpair+0x2ec/0x6d8 [ 145.794950][ T9137] __arm64_sys_socketpair+0xa0/0xbc [ 145.795937][ T9137] invoke_syscall+0x98/0x290 [ 145.796838][ T9137] el0_svc_common+0x13c/0x258 [ 145.797762][ T9137] do_el0_svc+0x5c/0x134 [ 145.798605][ T9137] el0_svc+0x58/0x128 [ 145.799400][ T9137] el0t_64_sync_handler+0x84/0xf0 [ 145.800355][ T9137] el0t_64_sync+0x18c/0x190 [ 145.823552][ T9137] socket: no more sockets [ 145.937242][ T9141] ip_tables: iptables: counters copy to user failed while replacing table [ 146.327168][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 146.368851][ T9164] FAULT_INJECTION: forcing a failure. [ 146.368851][ T9164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.371757][ T9164] CPU: 1 PID: 9164 Comm: syz.2.1614 Not tainted syzkaller #0 [ 146.373232][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 146.375394][ T9164] Call trace: [ 146.376022][ T9164] dump_backtrace+0x1c4/0x1f0 [ 146.376928][ T9164] show_stack+0x2c/0x3c [ 146.377746][ T9164] __dump_stack+0x30/0x40 [ 146.378593][ T9164] dump_stack_lvl+0xf4/0x15c [ 146.379485][ T9164] dump_stack+0x1c/0x5c [ 146.380317][ T9164] should_fail_ex+0x3cc/0x524 [ 146.381211][ T9164] should_fail+0x14/0x24 [ 146.382024][ T9164] should_fail_usercopy+0x20/0x30 [ 146.382964][ T9164] strncpy_from_user+0x48/0x59c [ 146.383858][ T9164] __arm64_sys_add_key+0x14c/0x520 [ 146.384796][ T9164] invoke_syscall+0x98/0x290 [ 146.385663][ T9164] el0_svc_common+0x13c/0x258 [ 146.386592][ T9164] do_el0_svc+0x5c/0x134 [ 146.387451][ T9164] el0_svc+0x58/0x128 [ 146.388235][ T9164] el0t_64_sync_handler+0x84/0xf0 [ 146.389258][ T9164] el0t_64_sync+0x18c/0x190 [ 146.394758][ T9166] FAULT_INJECTION: forcing a failure. [ 146.394758][ T9166] name failslab, interval 1, probability 0, space 0, times 0 [ 146.396994][ T9166] CPU: 0 PID: 9166 Comm: syz.0.1615 Not tainted syzkaller #0 [ 146.398230][ T9166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 146.399876][ T9166] Call trace: [ 146.400499][ T9166] dump_backtrace+0x1c4/0x1f0 [ 146.401412][ T9166] show_stack+0x2c/0x3c [ 146.402229][ T9166] __dump_stack+0x30/0x40 [ 146.403082][ T9166] dump_stack_lvl+0xf4/0x15c [ 146.403982][ T9166] dump_stack+0x1c/0x5c [ 146.404778][ T9166] should_fail_ex+0x3cc/0x524 [ 146.405670][ T9166] __should_failslab+0xc0/0x11c [ 146.406614][ T9166] should_failslab+0x10/0x28 [ 146.407495][ T9166] kmem_cache_alloc+0x88/0x310 [ 146.408393][ T9166] security_inode_alloc+0x38/0x11c [ 146.409494][ T9166] inode_init_always+0x6c8/0xb28 [ 146.410485][ T9166] new_inode_pseudo+0x7c/0x1cc [ 146.411493][ T9166] __sock_create+0x138/0x8a8 [ 146.412455][ T9166] __sys_socketpair+0x2ec/0x6d8 [ 146.413448][ T9166] __arm64_sys_socketpair+0xa0/0xbc [ 146.414498][ T9166] invoke_syscall+0x98/0x290 [ 146.415440][ T9166] el0_svc_common+0x13c/0x258 [ 146.416366][ T9166] do_el0_svc+0x5c/0x134 [ 146.417255][ T9166] el0_svc+0x58/0x128 [ 146.417995][ T9166] el0t_64_sync_handler+0x84/0xf0 [ 146.418940][ T9166] el0t_64_sync+0x18c/0x190 [ 146.425280][ T9166] socket: no more sockets [ 146.657932][ T9186] loop2: detected capacity change from 0 to 512 [ 146.658752][ T27] kauditd_printk_skb: 106 callbacks suppressed [ 146.658760][ T27] audit: type=1326 audit(146.640:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.6.1604" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 146.665335][ T27] audit: type=1326 audit(146.640:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.6.1604" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8f979368 code=0x7ffc0000 [ 146.718083][ T27] audit: type=1326 audit(146.700:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d79368 code=0x7ffc0000 [ 146.724898][ T27] audit: type=1326 audit(146.700:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d79368 code=0x7ffc0000 [ 146.731629][ T27] audit: type=1326 audit(146.710:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff85d5c22c code=0x7ffc0000 [ 146.735742][ T9186] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.736199][ T27] audit: type=1326 audit(146.710:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d79368 code=0x7ffc0000 [ 146.742238][ T27] audit: type=1326 audit(146.710:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d79368 code=0x7ffc0000 [ 146.747060][ T27] audit: type=1326 audit(146.710:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=16 compat=0 ip=0xffff85d79368 code=0x7ffc0000 [ 146.752283][ T27] audit: type=1326 audit(146.710:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d79368 code=0x7ffc0000 [ 146.757354][ T27] audit: type=1326 audit(146.710:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.0.1626" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff85d79368 code=0x7ffc0000 [ 146.777329][ T9197] FAULT_INJECTION: forcing a failure. [ 146.777329][ T9197] name fail_futex, interval 1, probability 0, space 0, times 0 [ 146.779548][ T9197] CPU: 0 PID: 9197 Comm: syz.6.1627 Not tainted syzkaller #0 [ 146.781033][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 146.782922][ T9197] Call trace: [ 146.783544][ T9197] dump_backtrace+0x1c4/0x1f0 [ 146.784403][ T9197] show_stack+0x2c/0x3c [ 146.785195][ T9197] __dump_stack+0x30/0x40 [ 146.786018][ T9197] dump_stack_lvl+0xf4/0x15c [ 146.786877][ T9197] dump_stack+0x1c/0x5c [ 146.787648][ T9197] should_fail_ex+0x3cc/0x524 [ 146.788503][ T9197] should_fail+0x14/0x24 [ 146.789283][ T9197] get_futex_key+0x904/0xfb0 [ 146.790120][ T9197] futex_wake+0x10c/0x458 [ 146.790945][ T9197] do_futex+0x2c4/0x340 [ 146.791752][ T9197] __arm64_sys_futex+0x390/0x414 [ 146.792674][ T9197] invoke_syscall+0x98/0x290 [ 146.793540][ T9197] el0_svc_common+0x13c/0x258 [ 146.794580][ T9197] do_el0_svc+0x5c/0x134 [ 146.795531][ T9197] el0_svc+0x58/0x128 [ 146.796361][ T9197] el0t_64_sync_handler+0x84/0xf0 [ 146.797411][ T9197] el0t_64_sync+0x18c/0x190 [ 146.859247][ T9199] ip_tables: iptables: counters copy to user failed while replacing table [ 147.138965][ T9202] FAULT_INJECTION: forcing a failure. [ 147.138965][ T9202] name failslab, interval 1, probability 0, space 0, times 0 [ 147.145934][ T9202] CPU: 1 PID: 9202 Comm: syz.5.1628 Not tainted syzkaller #0 [ 147.147285][ T9202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 147.149236][ T9202] Call trace: [ 147.149868][ T9202] dump_backtrace+0x1c4/0x1f0 [ 147.150819][ T9202] show_stack+0x2c/0x3c [ 147.151633][ T9202] __dump_stack+0x30/0x40 [ 147.152443][ T9202] dump_stack_lvl+0xf4/0x15c [ 147.153294][ T9202] dump_stack+0x1c/0x5c [ 147.154044][ T9202] should_fail_ex+0x3cc/0x524 [ 147.154915][ T9202] __should_failslab+0xc0/0x11c [ 147.155857][ T9202] should_failslab+0x10/0x28 [ 147.156817][ T9202] slab_pre_alloc_hook+0x6c/0x31c [ 147.157839][ T9202] kmem_cache_alloc_lru+0x60/0x284 [ 147.158887][ T9202] sock_alloc_inode+0x2c/0xcc [ 147.159787][ T9202] new_inode_pseudo+0x68/0x1cc [ 147.160661][ T9202] __sock_create+0x138/0x8a8 [ 147.161620][ T9202] __sys_socketpair+0x2ec/0x6d8 [ 147.162640][ T9202] __arm64_sys_socketpair+0xa0/0xbc [ 147.163690][ T9202] invoke_syscall+0x98/0x290 [ 147.164706][ T9202] el0_svc_common+0x13c/0x258 [ 147.165663][ T9202] do_el0_svc+0x5c/0x134 [ 147.166531][ T9202] el0_svc+0x58/0x128 [ 147.167357][ T9202] el0t_64_sync_handler+0x84/0xf0 [ 147.168268][ T9202] el0t_64_sync+0x18c/0x190 [ 147.174336][ T9202] socket: no more sockets [ 147.258269][ T4342] EXT4-fs (loop2): unmounting filesystem. [ 147.445190][ T9227] ip_tables: iptables: counters copy to user failed while replacing table [ 147.776579][ T9235] FAULT_INJECTION: forcing a failure. [ 147.776579][ T9235] name failslab, interval 1, probability 0, space 0, times 0 [ 147.779110][ T9235] CPU: 1 PID: 9235 Comm: syz.5.1641 Not tainted syzkaller #0 [ 147.780342][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 147.782222][ T9235] Call trace: [ 147.782840][ T9235] dump_backtrace+0x1c4/0x1f0 [ 147.783727][ T9235] show_stack+0x2c/0x3c [ 147.784565][ T9235] __dump_stack+0x30/0x40 [ 147.785427][ T9235] dump_stack_lvl+0xf4/0x15c [ 147.786368][ T9235] dump_stack+0x1c/0x5c [ 147.786721][ T9237] FAULT_INJECTION: forcing a failure. [ 147.786721][ T9237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.787235][ T9235] should_fail_ex+0x3cc/0x524 [ 147.790719][ T9235] __should_failslab+0xc0/0x11c [ 147.791773][ T9235] should_failslab+0x10/0x28 [ 147.792757][ T9235] kmem_cache_alloc+0x88/0x310 [ 147.793768][ T9235] security_inode_alloc+0x38/0x11c [ 147.794757][ T9235] inode_init_always+0x6c8/0xb28 [ 147.795689][ T9235] new_inode_pseudo+0x7c/0x1cc [ 147.796636][ T9235] __sock_create+0x138/0x8a8 [ 147.797544][ T9235] __sys_socketpair+0x2ec/0x6d8 [ 147.798510][ T9235] __arm64_sys_socketpair+0xa0/0xbc [ 147.799540][ T9235] invoke_syscall+0x98/0x290 [ 147.800453][ T9235] el0_svc_common+0x13c/0x258 [ 147.801381][ T9235] do_el0_svc+0x5c/0x134 [ 147.802183][ T9235] el0_svc+0x58/0x128 [ 147.802948][ T9235] el0t_64_sync_handler+0x84/0xf0 [ 147.803936][ T9235] el0t_64_sync+0x18c/0x190 [ 147.804841][ T9237] CPU: 0 PID: 9237 Comm: syz.6.1642 Not tainted syzkaller #0 [ 147.806231][ T9237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 147.808215][ T9237] Call trace: [ 147.808835][ T9237] dump_backtrace+0x1c4/0x1f0 [ 147.809709][ T9237] show_stack+0x2c/0x3c [ 147.810505][ T9237] __dump_stack+0x30/0x40 [ 147.811350][ T9237] dump_stack_lvl+0xf4/0x15c [ 147.812292][ T9237] dump_stack+0x1c/0x5c [ 147.813154][ T9237] should_fail_ex+0x3cc/0x524 [ 147.814078][ T9237] should_fail+0x14/0x24 [ 147.814953][ T9237] should_fail_usercopy+0x20/0x30 [ 147.815863][ T9237] strncpy_from_user+0x48/0x59c [ 147.816806][ T9237] __arm64_sys_add_key+0x14c/0x520 [ 147.817809][ T9237] invoke_syscall+0x98/0x290 [ 147.818731][ T9237] el0_svc_common+0x13c/0x258 [ 147.819628][ T9237] do_el0_svc+0x5c/0x134 [ 147.820439][ T9237] el0_svc+0x58/0x128 [ 147.820853][ T9235] socket: no more sockets [ 147.821180][ T9237] el0t_64_sync_handler+0x84/0xf0 [ 147.822837][ T9237] el0t_64_sync+0x18c/0x190 [ 147.870880][ T9243] loop5: detected capacity change from 0 to 512 [ 147.893531][ T9243] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 148.023678][ T4588] EXT4-fs (loop5): unmounting filesystem. [ 148.175717][ T9253] ------------[ cut here ]------------ [ 148.177114][ T9253] WARNING: CPU: 0 PID: 9253 at mm/page_alloc.c:5634 __alloc_pages+0xd0/0x544 [ 148.178748][ T9253] Modules linked in: [ 148.179505][ T9253] CPU: 0 PID: 9253 Comm: syz.2.1648 Not tainted syzkaller #0 [ 148.180835][ T9253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 148.182685][ T9253] pstate: 22400005 (nzCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 148.184112][ T9253] pc : __alloc_pages+0xd0/0x544 [ 148.185000][ T9253] lr : __alloc_pages+0xac/0x544 [ 148.185889][ T9253] sp : ffff8000219f77c0 [ 148.186672][ T9253] x29: ffff8000219f7880 x28: ffff8000153bd000 x27: 1ffff00002a77a68 [ 148.188223][ T9253] x26: ffff8000219f77e0 x25: dfff800000000000 x24: ffff70000433eefc [ 148.189757][ T9253] x23: 0000000000000002 x22: 0000000000000000 x21: 0000000000040cc0 [ 148.191302][ T9253] x20: 0000000000000000 x19: 0000000000000013 x18: 0000000000000000 [ 148.192796][ T9253] x17: 0000000000000000 x16: ffff8000082dbd78 x15: 0000000000000000 [ 148.194325][ T9253] x14: 0000000000000005 x13: 1ffff0000433ef00 x12: 0000000000000000 [ 148.195831][ T9253] x11: 0000000000000000 x10: ffff70000433ef05 x9 : 0000000000000001 [ 148.197364][ T9253] x8 : ffff800017d98000 x7 : 0000000000000000 x6 : 0000000000000000 [ 148.198952][ T9253] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020 [ 148.200534][ T9253] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 148.202067][ T9253] Call trace: [ 148.202703][ T9253] __alloc_pages+0xd0/0x544 [ 148.203543][ T9253] __kmalloc_large_node+0x9c/0x1dc [ 148.204482][ T9253] __kmalloc_node_track_caller+0x120/0x174 [ 148.205602][ T9253] memdup_user_nul+0x5c/0x228 [ 148.206509][ T9253] bitmap_parse_user+0x34/0x88 [ 148.207432][ T9253] write_irq_affinity+0x1a0/0x2f4 [ 148.208384][ T9253] irq_affinity_proc_write+0x38/0x4c [ 148.209389][ T9253] proc_reg_write+0x184/0x2d4 [ 148.210292][ T9253] vfs_write+0x2a8/0x7c8 [ 148.211107][ T9253] ksys_write+0x12c/0x228 [ 148.211960][ T9253] __arm64_sys_write+0x7c/0x90 [ 148.212868][ T9253] invoke_syscall+0x98/0x290 [ 148.213763][ T9253] el0_svc_common+0x13c/0x258 [ 148.214677][ T9253] do_el0_svc+0x5c/0x134 [ 148.215473][ T9253] el0_svc+0x58/0x128 [ 148.216241][ T9253] el0t_64_sync_handler+0x84/0xf0 [ 148.217209][ T9253] el0t_64_sync+0x18c/0x190 [ 148.218011][ T9253] irq event stamp: 496 [ 148.218754][ T9253] hardirqs last enabled at (495): [] el0_svc_common+0xa0/0x258 [ 148.220540][ T9253] hardirqs last disabled at (496): [] el1_dbg+0x24/0x80 [ 148.222203][ T9253] softirqs last enabled at (490): [] local_bh_enable+0x10/0x34 [ 148.223873][ T9253] softirqs last disabled at (488): [] local_bh_disable+0x10/0x34 [ 148.225631][ T9253] ---[ end trace 0000000000000000 ]--- [ 153.600214][ T4339] Bluetooth: hci3: command 0x0406 tx timeout [ 153.600265][ T4345] Bluetooth: hci4: command 0x0406 tx timeout [ 153.601564][ T4339] Bluetooth: hci2: command 0x0406 tx timeout