0 PREEMPT [ 401.039347][ T2105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.039353][ T2105] Call trace: [ 401.039356][ T2105] show_stack+0x2c/0x3c (C) [ 401.039372][ T2105] __dump_stack+0x30/0x40 [ 401.039381][ T2105] dump_stack_lvl+0xd8/0x12c [ 401.039388][ T2105] dump_stack+0x1c/0x28 [ 401.039395][ T2105] should_fail_ex+0x3fc/0x570 [ 401.039408][ T2105] should_failslab+0xc4/0x120 [ 401.039417][ T2105] __kmalloc_cache_noprof+0x94/0x5fc [ 401.039425][ T2105] __arm64_sys_timerfd_create+0x150/0x32c [ 401.039435][ T2105] invoke_syscall+0x98/0x244 [ 401.039443][ T2105] el0_svc_common+0xec/0x23c [ 401.039450][ T2105] do_el0_svc+0x4c/0x5c [ 401.039457][ T2105] el0_svc+0x60/0x1d8 [ 401.039467][ T2105] el0t_64_sync_handler+0x44/0x104 [ 401.039475][ T2105] el0t_64_sync+0x198/0x19c [ 401.039733][ T2105] EXT4-fs: can't change dax mount option while remounting [ 401.041678][ T2097] FAULT_INJECTION: forcing a failure. [ 401.041678][ T2097] name fail_futex, interval 1, probability 0, space 0, times 0 [ 401.041695][ T2097] CPU: 0 UID: 0 PID: 2097 Comm: syz.3.4002 Not tainted syzkaller #0 PREEMPT [ 401.041706][ T2097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.041711][ T2097] Call trace: [ 401.041714][ T2097] show_stack+0x2c/0x3c (C) [ 401.041726][ T2097] __dump_stack+0x30/0x40 [ 401.041734][ T2097] dump_stack_lvl+0xd8/0x12c [ 401.041741][ T2097] dump_stack+0x1c/0x28 [ 401.041748][ T2097] should_fail_ex+0x3fc/0x570 [ 401.041760][ T2097] should_fail+0x14/0x24 [ 401.041770][ T2097] get_futex_key+0x1e0/0x118c [ 401.041780][ T2097] futex_wake+0x10c/0x594 [ 401.041790][ T2097] do_futex+0x2c4/0x378 [ 401.041799][ T2097] __arm64_sys_futex+0x2e4/0x418 [ 401.041809][ T2097] invoke_syscall+0x98/0x244 [ 401.041817][ T2097] el0_svc_common+0xec/0x23c [ 401.041824][ T2097] do_el0_svc+0x4c/0x5c [ 401.041831][ T2097] el0_svc+0x60/0x1d8 [ 401.041840][ T2097] el0t_64_sync_handler+0x44/0x104 [ 401.041849][ T2097] el0t_64_sync+0x198/0x19c [ 401.050360][T31652] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 401.051168][T31652] EXT4-fs (loop7): Remounting filesystem read-only [ 401.061815][T17695] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 401.063795][T17695] EXT4-fs (loop3): Remounting filesystem read-only [ 401.112317][ T2110] FAULT_INJECTION: forcing a failure. [ 401.112317][ T2110] name failslab, interval 1, probability 0, space 0, times 0 [ 401.112336][ T2110] CPU: 0 UID: 0 PID: 2110 Comm: syz.9.4003 Not tainted syzkaller #0 PREEMPT [ 401.112346][ T2110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.112352][ T2110] Call trace: [ 401.112355][ T2110] show_stack+0x2c/0x3c (C) [ 401.112370][ T2110] __dump_stack+0x30/0x40 [ 401.112379][ T2110] dump_stack_lvl+0xd8/0x12c [ 401.112386][ T2110] dump_stack+0x1c/0x28 [ 401.112393][ T2110] should_fail_ex+0x3fc/0x570 [ 401.112406][ T2110] should_failslab+0xc4/0x120 [ 401.112415][ T2110] __kmalloc_cache_noprof+0x94/0x5fc [ 401.112423][ T2110] __arm64_sys_timerfd_create+0x150/0x32c [ 401.112434][ T2110] invoke_syscall+0x98/0x244 [ 401.112442][ T2110] el0_svc_common+0xec/0x23c [ 401.112449][ T2110] do_el0_svc+0x4c/0x5c [ 401.112456][ T2110] el0_svc+0x60/0x1d8 [ 401.112466][ T2110] el0t_64_sync_handler+0x44/0x104 [ 401.112474][ T2110] el0t_64_sync+0x198/0x19c [ 401.112627][ T2110] EXT4-fs: can't change dax mount option while remounting [ 401.121933][ T2126] FAULT_INJECTION: forcing a failure. [ 401.121933][ T2126] name failslab, interval 1, probability 0, space 0, times 0 [ 401.121953][ T2126] CPU: 1 UID: 0 PID: 2126 Comm: syz.6.4006 Not tainted syzkaller #0 PREEMPT [ 401.121966][ T2126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.121978][ T2126] Call trace: [ 401.121982][ T2126] show_stack+0x2c/0x3c (C) [ 401.121999][ T2126] __dump_stack+0x30/0x40 [ 401.122010][ T2126] dump_stack_lvl+0xd8/0x12c [ 401.122018][ T2126] dump_stack+0x1c/0x28 [ 401.122026][ T2126] should_fail_ex+0x3fc/0x570 [ 401.122038][ T2126] should_failslab+0xc4/0x120 [ 401.122050][ T2126] __kmalloc_cache_noprof+0x94/0x5fc [ 401.122059][ T2126] __arm64_sys_timerfd_create+0x150/0x32c [ 401.122069][ T2126] invoke_syscall+0x98/0x244 [ 401.122077][ T2126] el0_svc_common+0xec/0x23c [ 401.122084][ T2126] do_el0_svc+0x4c/0x5c [ 401.122091][ T2126] el0_svc+0x60/0x1d8 [ 401.122101][ T2126] el0t_64_sync_handler+0x44/0x104 [ 401.122109][ T2126] el0t_64_sync+0x198/0x19c [ 401.122898][ T2117] FAULT_INJECTION: forcing a failure. [ 401.122898][ T2117] name failslab, interval 1, probability 0, space 0, times 0 [ 401.122913][ T2117] CPU: 1 UID: 0 PID: 2117 Comm: syz.4.4005 Not tainted syzkaller #0 PREEMPT [ 401.122924][ T2117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.122929][ T2117] Call trace: [ 401.122931][ T2117] show_stack+0x2c/0x3c (C) [ 401.122942][ T2117] __dump_stack+0x30/0x40 [ 401.122949][ T2117] dump_stack_lvl+0xd8/0x12c [ 401.122957][ T2117] dump_stack+0x1c/0x28 [ 401.122964][ T2117] should_fail_ex+0x3fc/0x570 [ 401.122981][ T2117] should_failslab+0xc4/0x120 [ 401.122989][ T2117] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 401.122998][ T2117] __d_alloc+0x50/0x654 [ 401.123007][ T2117] d_alloc_pseudo+0x2c/0xd8 [ 401.123016][ T2117] alloc_path_pseudo+0xe8/0x1d4 [ 401.123025][ T2117] alloc_file_pseudo+0xb0/0x198 [ 401.123034][ T2117] __anon_inode_getfile+0x118/0x1c8 [ 401.123042][ T2117] anon_inode_getfile_fmode+0x4c/0xc0 [ 401.123050][ T2117] __arm64_sys_timerfd_create+0x274/0x32c [ 401.123058][ T2117] invoke_syscall+0x98/0x244 [ 401.123066][ T2117] el0_svc_common+0xec/0x23c [ 401.123073][ T2117] do_el0_svc+0x4c/0x5c [ 401.123080][ T2117] el0_svc+0x60/0x1d8 [ 401.123088][ T2117] el0t_64_sync_handler+0x44/0x104 [ 401.123096][ T2117] el0t_64_sync+0x198/0x19c [ 401.123316][ T2126] EXT4-fs: can't change dax mount option while remounting [ 401.133686][ T2117] EXT4-fs: can't change dax mount option while remounting [ 401.147668][T31905] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 401.148067][T31905] EXT4-fs (loop6): Remounting filesystem read-only [ 401.157704][T18942] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 401.158095][T18942] EXT4-fs (loop4): Remounting filesystem read-only [ 401.180110][ T1073] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 401.180849][ T1073] EXT4-fs (loop9): Remounting filesystem read-only [ 401.242092][ T2148] FAULT_INJECTION: forcing a failure. [ 401.242092][ T2148] name failslab, interval 1, probability 0, space 0, times 0 [ 401.242111][ T2148] CPU: 1 UID: 0 PID: 2148 Comm: syz.7.4007 Not tainted syzkaller #0 PREEMPT [ 401.242121][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.242127][ T2148] Call trace: [ 401.242130][ T2148] show_stack+0x2c/0x3c (C) [ 401.242145][ T2148] __dump_stack+0x30/0x40 [ 401.242154][ T2148] dump_stack_lvl+0xd8/0x12c [ 401.242161][ T2148] dump_stack+0x1c/0x28 [ 401.242168][ T2148] should_fail_ex+0x3fc/0x570 [ 401.242181][ T2148] should_failslab+0xc4/0x120 [ 401.242190][ T2148] __kmalloc_cache_noprof+0x94/0x5fc [ 401.242199][ T2148] __arm64_sys_timerfd_create+0x150/0x32c [ 401.242208][ T2148] invoke_syscall+0x98/0x244 [ 401.242217][ T2148] el0_svc_common+0xec/0x23c [ 401.242224][ T2148] do_el0_svc+0x4c/0x5c [ 401.242231][ T2148] el0_svc+0x60/0x1d8 [ 401.242241][ T2148] el0t_64_sync_handler+0x44/0x104 [ 401.242250][ T2148] el0t_64_sync+0x198/0x19c [ 401.242398][ T2148] EXT4-fs: can't change dax mount option while remounting [ 401.350068][ T2148] FAULT_INJECTION: forcing a failure. [ 401.350068][ T2148] name failslab, interval 1, probability 0, space 0, times 0 [ 401.350100][ T2148] CPU: 1 UID: 0 PID: 2148 Comm: syz.7.4007 Not tainted syzkaller #0 PREEMPT [ 401.350110][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.350115][ T2148] Call trace: [ 401.350119][ T2148] show_stack+0x2c/0x3c (C) [ 401.350135][ T2148] __dump_stack+0x30/0x40 [ 401.350145][ T2148] dump_stack_lvl+0xd8/0x12c [ 401.350154][ T2148] dump_stack+0x1c/0x28 [ 401.350162][ T2148] should_fail_ex+0x3fc/0x570 [ 401.350174][ T2148] should_failslab+0xc4/0x120 [ 401.350183][ T2148] __kmalloc_cache_noprof+0x94/0x5fc [ 401.350191][ T2148] __arm64_sys_timerfd_create+0x150/0x32c [ 401.350201][ T2148] invoke_syscall+0x98/0x244 [ 401.350210][ T2148] el0_svc_common+0xec/0x23c [ 401.350217][ T2148] do_el0_svc+0x4c/0x5c [ 401.350224][ T2148] el0_svc+0x60/0x1d8 [ 401.350234][ T2148] el0t_64_sync_handler+0x44/0x104 [ 401.350242][ T2148] el0t_64_sync+0x198/0x19c [ 401.352005][ T2148] EXT4-fs: can't change dax mount option while remounting [ 401.372057][T31652] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 401.372837][T31652] EXT4-fs (loop7): Remounting filesystem read-only [ 401.458801][ T2165] FAULT_INJECTION: forcing a failure. [ 401.458801][ T2165] name failslab, interval 1, probability 0, space 0, times 0 [ 401.458825][ T2165] CPU: 0 UID: 0 PID: 2165 Comm: syz.4.4010 Not tainted syzkaller #0 PREEMPT [ 401.458843][ T2165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.458850][ T2165] Call trace: [ 401.458854][ T2165] show_stack+0x2c/0x3c (C) [ 401.458870][ T2165] __dump_stack+0x30/0x40 [ 401.458879][ T2165] dump_stack_lvl+0xd8/0x12c [ 401.458886][ T2165] dump_stack+0x1c/0x28 [ 401.458894][ T2165] should_fail_ex+0x3fc/0x570 [ 401.458906][ T2165] should_failslab+0xc4/0x120 [ 401.458915][ T2165] __kmalloc_cache_noprof+0x94/0x5fc [ 401.458924][ T2165] __arm64_sys_timerfd_create+0x150/0x32c [ 401.458934][ T2165] invoke_syscall+0x98/0x244 [ 401.458942][ T2165] el0_svc_common+0xec/0x23c [ 401.458949][ T2165] do_el0_svc+0x4c/0x5c [ 401.458960][ T2165] el0_svc+0x60/0x1d8 [ 401.458970][ T2165] el0t_64_sync_handler+0x44/0x104 [ 401.458979][ T2165] el0t_64_sync+0x198/0x19c [ 401.459147][ T2165] EXT4-fs: can't change dax mount option while remounting [ 401.459778][ T2168] FAULT_INJECTION: forcing a failure. [ 401.459778][ T2168] name failslab, interval 1, probability 0, space 0, times 0 [ 401.459788][ T2168] CPU: 0 UID: 0 PID: 2168 Comm: syz.6.4009 Not tainted syzkaller #0 PREEMPT [ 401.459797][ T2168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.459803][ T2168] Call trace: [ 401.459806][ T2168] show_stack+0x2c/0x3c (C) [ 401.459816][ T2168] __dump_stack+0x30/0x40 [ 401.459824][ T2168] dump_stack_lvl+0xd8/0x12c [ 401.459831][ T2168] dump_stack+0x1c/0x28 [ 401.459838][ T2168] should_fail_ex+0x3fc/0x570 [ 401.459849][ T2168] should_failslab+0xc4/0x120 [ 401.459856][ T2168] __kmalloc_cache_noprof+0x94/0x5fc [ 401.459865][ T2168] __arm64_sys_timerfd_create+0x150/0x32c [ 401.459873][ T2168] invoke_syscall+0x98/0x244 [ 401.459881][ T2168] el0_svc_common+0xec/0x23c [ 401.459888][ T2168] do_el0_svc+0x4c/0x5c [ 401.459895][ T2168] el0_svc+0x60/0x1d8 [ 401.459904][ T2168] el0t_64_sync_handler+0x44/0x104 [ 401.459912][ T2168] el0t_64_sync+0x198/0x19c [ 401.460602][ T2170] FAULT_INJECTION: forcing a failure. [ 401.460602][ T2170] name failslab, interval 1, probability 0, space 0, times 0 [ 401.460618][ T2170] CPU: 0 UID: 0 PID: 2170 Comm: syz.9.4011 Not tainted syzkaller #0 PREEMPT [ 401.460628][ T2170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.460633][ T2170] Call trace: [ 401.460636][ T2170] show_stack+0x2c/0x3c (C) [ 401.460645][ T2170] __dump_stack+0x30/0x40 [ 401.460653][ T2170] dump_stack_lvl+0xd8/0x12c [ 401.460660][ T2170] dump_stack+0x1c/0x28 [ 401.460667][ T2170] should_fail_ex+0x3fc/0x570 [ 401.460678][ T2170] should_failslab+0xc4/0x120 [ 401.460685][ T2170] __kmalloc_cache_noprof+0x94/0x5fc [ 401.460694][ T2170] __arm64_sys_timerfd_create+0x150/0x32c [ 401.460703][ T2170] invoke_syscall+0x98/0x244 [ 401.460710][ T2170] el0_svc_common+0xec/0x23c [ 401.460718][ T2170] do_el0_svc+0x4c/0x5c [ 401.460725][ T2170] el0_svc+0x60/0x1d8 [ 401.460733][ T2170] el0t_64_sync_handler+0x44/0x104 [ 401.460742][ T2170] el0t_64_sync+0x198/0x19c [ 401.460800][ T2161] FAULT_INJECTION: forcing a failure. [ 401.460800][ T2161] name failslab, interval 1, probability 0, space 0, times 0 [ 401.460814][ T2161] CPU: 0 UID: 0 PID: 2161 Comm: syz.3.4008 Not tainted syzkaller #0 PREEMPT [ 401.460827][ T2161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.460832][ T2161] Call trace: [ 401.460835][ T2161] show_stack+0x2c/0x3c (C) [ 401.460844][ T2161] __dump_stack+0x30/0x40 [ 401.460852][ T2161] dump_stack_lvl+0xd8/0x12c [ 401.460859][ T2161] dump_stack+0x1c/0x28 [ 401.460866][ T2161] should_fail_ex+0x3fc/0x570 [ 401.460876][ T2161] should_failslab+0xc4/0x120 [ 401.460883][ T2161] __kmalloc_cache_noprof+0x94/0x5fc [ 401.460891][ T2161] __arm64_sys_timerfd_create+0x150/0x32c [ 401.460900][ T2161] invoke_syscall+0x98/0x244 [ 401.460908][ T2161] el0_svc_common+0xec/0x23c [ 401.460915][ T2161] do_el0_svc+0x4c/0x5c [ 401.460922][ T2161] el0_svc+0x60/0x1d8 [ 401.460930][ T2161] el0t_64_sync_handler+0x44/0x104 [ 401.460939][ T2161] el0t_64_sync+0x198/0x19c [ 401.483616][ T2168] EXT4-fs: can't change dax mount option while remounting [ 401.494760][ T2170] EXT4-fs: can't change dax mount option while remounting [ 401.494975][ T2161] EXT4-fs: can't change dax mount option while remounting [ 401.606487][ T2165] FAULT_INJECTION: forcing a failure. [ 401.606487][ T2165] name failslab, interval 1, probability 0, space 0, times 0 [ 401.606506][ T2165] CPU: 0 UID: 0 PID: 2165 Comm: syz.4.4010 Not tainted syzkaller #0 PREEMPT [ 401.606517][ T2165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.606522][ T2165] Call trace: [ 401.606525][ T2165] show_stack+0x2c/0x3c (C) [ 401.606542][ T2165] __dump_stack+0x30/0x40 [ 401.606551][ T2165] dump_stack_lvl+0xd8/0x12c [ 401.606558][ T2165] dump_stack+0x1c/0x28 [ 401.606565][ T2165] should_fail_ex+0x3fc/0x570 [ 401.606578][ T2165] should_failslab+0xc4/0x120 [ 401.606587][ T2165] __kmalloc_cache_noprof+0x94/0x5fc [ 401.606596][ T2165] __arm64_sys_timerfd_create+0x150/0x32c [ 401.606606][ T2165] invoke_syscall+0x98/0x244 [ 401.606614][ T2165] el0_svc_common+0xec/0x23c [ 401.606621][ T2165] do_el0_svc+0x4c/0x5c [ 401.606629][ T2165] el0_svc+0x60/0x1d8 [ 401.606638][ T2165] el0t_64_sync_handler+0x44/0x104 [ 401.606647][ T2165] el0t_64_sync+0x198/0x19c [ 401.610749][ T2165] EXT4-fs: can't change dax mount option while remounting [ 401.617681][ T2168] FAULT_INJECTION: forcing a failure. [ 401.617681][ T2168] name failslab, interval 1, probability 0, space 0, times 0 [ 401.617702][ T2168] CPU: 1 UID: 0 PID: 2168 Comm: syz.6.4009 Not tainted syzkaller #0 PREEMPT [ 401.617714][ T2168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.617719][ T2168] Call trace: [ 401.617722][ T2168] show_stack+0x2c/0x3c (C) [ 401.617738][ T2168] __dump_stack+0x30/0x40 [ 401.617746][ T2168] dump_stack_lvl+0xd8/0x12c [ 401.617753][ T2168] dump_stack+0x1c/0x28 [ 401.617760][ T2168] should_fail_ex+0x3fc/0x570 [ 401.617773][ T2168] should_failslab+0xc4/0x120 [ 401.617781][ T2168] __kmalloc_cache_noprof+0x94/0x5fc [ 401.617789][ T2168] __arm64_sys_timerfd_create+0x150/0x32c [ 401.617799][ T2168] invoke_syscall+0x98/0x244 [ 401.617807][ T2168] el0_svc_common+0xec/0x23c [ 401.617814][ T2168] do_el0_svc+0x4c/0x5c [ 401.617822][ T2168] el0_svc+0x60/0x1d8 [ 401.617831][ T2168] el0t_64_sync_handler+0x44/0x104 [ 401.617840][ T2168] el0t_64_sync+0x198/0x19c [ 401.617945][ T2170] FAULT_INJECTION: forcing a failure. [ 401.617945][ T2170] name failslab, interval 1, probability 0, space 0, times 0 [ 401.617960][ T2170] CPU: 1 UID: 0 PID: 2170 Comm: syz.9.4011 Not tainted syzkaller #0 PREEMPT [ 401.617982][ T2170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.617992][ T2170] Call trace: [ 401.617996][ T2170] show_stack+0x2c/0x3c (C) [ 401.618010][ T2170] __dump_stack+0x30/0x40 [ 401.618018][ T2170] dump_stack_lvl+0xd8/0x12c [ 401.618026][ T2170] dump_stack+0x1c/0x28 [ 401.618033][ T2170] should_fail_ex+0x3fc/0x570 [ 401.618044][ T2170] should_failslab+0xc4/0x120 [ 401.618051][ T2170] __kmalloc_cache_noprof+0x94/0x5fc [ 401.618059][ T2170] __arm64_sys_timerfd_create+0x150/0x32c [ 401.618067][ T2170] invoke_syscall+0x98/0x244 [ 401.618074][ T2170] el0_svc_common+0xec/0x23c [ 401.618081][ T2170] do_el0_svc+0x4c/0x5c [ 401.618088][ T2170] el0_svc+0x60/0x1d8 [ 401.618096][ T2170] el0t_64_sync_handler+0x44/0x104 [ 401.618105][ T2170] el0t_64_sync+0x198/0x19c [ 401.618305][ T2170] EXT4-fs: can't change dax mount option while remounting [ 401.618467][ T2168] EXT4-fs: can't change dax mount option while remounting [ 401.632795][ T2190] FAULT_INJECTION: forcing a failure. [ 401.632795][ T2190] name failslab, interval 1, probability 0, space 0, times 0 [ 401.632812][ T2190] CPU: 1 UID: 0 PID: 2190 Comm: syz.7.4012 Not tainted syzkaller #0 PREEMPT [ 401.632822][ T2190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.632827][ T2190] Call trace: [ 401.632830][ T2190] show_stack+0x2c/0x3c (C) [ 401.632844][ T2190] __dump_stack+0x30/0x40 [ 401.632852][ T2190] dump_stack_lvl+0xd8/0x12c [ 401.632860][ T2190] dump_stack+0x1c/0x28 [ 401.632867][ T2190] should_fail_ex+0x3fc/0x570 [ 401.632879][ T2190] should_failslab+0xc4/0x120 [ 401.632887][ T2190] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 401.632896][ T2190] __d_alloc+0x50/0x654 [ 401.632905][ T2190] d_alloc_pseudo+0x2c/0xd8 [ 401.632914][ T2190] alloc_path_pseudo+0xe8/0x1d4 [ 401.632923][ T2190] alloc_file_pseudo+0xb0/0x198 [ 401.632931][ T2190] __anon_inode_getfile+0x118/0x1c8 [ 401.632940][ T2190] anon_inode_getfile_fmode+0x4c/0xc0 [ 401.632948][ T2190] __arm64_sys_timerfd_create+0x274/0x32c [ 401.632956][ T2190] invoke_syscall+0x98/0x244 [ 401.632964][ T2190] el0_svc_common+0xec/0x23c [ 401.632978][ T2190] do_el0_svc+0x4c/0x5c [ 401.632985][ T2190] el0_svc+0x60/0x1d8 [ 401.632995][ T2190] el0t_64_sync_handler+0x44/0x104 [ 401.633003][ T2190] el0t_64_sync+0x198/0x19c [ 401.633232][ T2161] FAULT_INJECTION: forcing a failure. [ 401.633232][ T2161] name failslab, interval 1, probability 0, space 0, times 0 [ 401.633243][ T2161] CPU: 1 UID: 0 PID: 2161 Comm: syz.3.4008 Not tainted syzkaller #0 PREEMPT [ 401.633254][ T2161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.633258][ T2161] Call trace: [ 401.633261][ T2161] show_stack+0x2c/0x3c (C) [ 401.633270][ T2161] __dump_stack+0x30/0x40 [ 401.633277][ T2161] dump_stack_lvl+0xd8/0x12c [ 401.633284][ T2161] dump_stack+0x1c/0x28 [ 401.633291][ T2161] should_fail_ex+0x3fc/0x570 [ 401.633302][ T2161] should_failslab+0xc4/0x120 [ 401.633308][ T2161] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 401.633316][ T2161] __d_alloc+0x50/0x654 [ 401.633325][ T2161] d_alloc_pseudo+0x2c/0xd8 [ 401.633333][ T2161] alloc_path_pseudo+0xe8/0x1d4 [ 401.633341][ T2161] alloc_file_pseudo+0xb0/0x198 [ 401.633350][ T2161] __anon_inode_getfile+0x118/0x1c8 [ 401.633358][ T2161] anon_inode_getfile_fmode+0x4c/0xc0 [ 401.633366][ T2161] __arm64_sys_timerfd_create+0x274/0x32c [ 401.633374][ T2161] invoke_syscall+0x98/0x244 [ 401.633381][ T2161] el0_svc_common+0xec/0x23c [ 401.633388][ T2161] do_el0_svc+0x4c/0x5c [ 401.633395][ T2161] el0_svc+0x60/0x1d8 [ 401.633403][ T2161] el0t_64_sync_handler+0x44/0x104 [ 401.633412][ T2161] el0t_64_sync+0x198/0x19c [ 401.633565][ T2161] EXT4-fs: can't change dax mount option while remounting [ 401.648298][ T2190] EXT4-fs: can't change dax mount option while remounting [ 401.667531][ T1073] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 401.671028][T31905] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 401.672981][ T1073] EXT4-fs (loop9): Remounting filesystem read-only [ 401.674185][T31905] EXT4-fs (loop6): Remounting filesystem read-only [ 401.676354][T17695] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 401.693609][T17695] EXT4-fs (loop3): Remounting filesystem read-only [ 401.703085][T18942] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 401.703803][T18942] EXT4-fs (loop4): Remounting filesystem read-only [ 401.766311][ T2190] FAULT_INJECTION: forcing a failure. [ 401.766311][ T2190] name failslab, interval 1, probability 0, space 0, times 0 [ 401.766330][ T2190] CPU: 1 UID: 0 PID: 2190 Comm: syz.7.4012 Not tainted syzkaller #0 PREEMPT [ 401.766340][ T2190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 401.766346][ T2190] Call trace: [ 401.766349][ T2190] show_stack+0x2c/0x3c (C) [ 401.766363][ T2190] __dump_stack+0x30/0x40 [ 401.766371][ T2190] dump_stack_lvl+0xd8/0x12c [ 401.766379][ T2190] dump_stack+0x1c/0x28 [ 401.766386][ T2190] should_fail_ex+0x3fc/0x570 [ 401.766398][ T2190] should_failslab+0xc4/0x120 [ 401.766406][ T2190] __kmalloc_cache_noprof+0x94/0x5fc [ 401.766415][ T2190] __arm64_sys_timerfd_create+0x150/0x32c [ 401.766425][ T2190] invoke_syscall+0x98/0x244 [ 401.766434][ T2190] el0_svc_common+0xec/0x23c [ 401.766441][ T2190] do_el0_svc+0x4c/0x5c [ 401.766448][ T2190] el0_svc+0x60/0x1d8 [ 401.766457][ T2190] el0t_64_sync_handler+0x44/0x104 [ 401.766466][ T2190] el0t_64_sync+0x198/0x19c [ 401.772437][ T2190] EXT4-fs: can't change dax mount option while remounting [ 401.801268][T31652] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 401.806330][T31652] EXT4-fs (loop7): Remounting filesystem read-only [ 401.908006][ T2208] EXT4-fs warning (device loop6): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop6. [ 402.202982][ T3187] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.293461][ T3187] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.361631][ T3187] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.429864][ T3187] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.509617][ T3187] bridge_slave_1: left allmulticast mode [ 402.509639][ T3187] bridge_slave_1: left promiscuous mode [ 402.509719][ T3187] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.510724][ T3187] bridge_slave_0: left allmulticast mode [ 402.510737][ T3187] bridge_slave_0: left promiscuous mode [ 402.510799][ T3187] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.586462][ T3187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.615590][ T3187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.645171][ T3187] bond0 (unregistering): Released all slaves [ 402.921889][ T4409] 8021q: adding VLAN 0 to HW filter on device eth12 [ 402.933581][ T3187] hsr_slave_0: left promiscuous mode [ 402.933883][ T3187] hsr_slave_1: left promiscuous mode [ 402.935469][ T3187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.935486][ T3187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.936652][ T3187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.936665][ T3187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.941071][ T3187] veth1_macvtap: left promiscuous mode [ 402.941100][ T3187] veth0_macvtap: left promiscuous mode [ 402.941149][ T3187] veth1_vlan: left promiscuous mode [ 402.941186][ T3187] veth0_vlan: left promiscuous mode [ 403.036520][ T3187] team0 (unregistering): Port device team_slave_1 removed [ 403.040275][ T3187] team0 (unregistering): Port device team_slave_0 removed [ 403.210917][ T4409] 8021q: adding VLAN 0 to HW filter on device eth13 [ 403.333037][ T3187] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.345755][ T4409] 8021q: adding VLAN 0 to HW filter on device eth14 [ 403.412695][ T3187] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.467845][ T4409] 8021q: adding VLAN 0 to HW filter on device eth15 [ 403.510959][ T3187] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.559050][ T3187] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.683500][ T3187] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.737436][ T3187] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.779868][ T4409] 8021q: adding VLAN 0 to HW filter on device eth16 [ 403.796201][ T3187] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.868719][ T3187] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.929018][ T4409] 8021q: adding VLAN 0 to HW filter on device eth18 [ 404.012732][ T3187] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.062587][ T3187] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.073496][ T4409] 8021q: adding VLAN 0 to HW filter on device eth17 [ 404.123166][ T3187] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.171540][ T3187] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.233873][ T4409] 8021q: adding VLAN 0 to HW filter on device eth19 [ 404.292039][ T3187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.383294][ T3187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.394618][ T4409] 8021q: adding VLAN 0 to HW filter on device eth28 [ 404.459427][ T3187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.521495][ T3187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.535197][ T4409] 8021q: adding VLAN 0 to HW filter on device eth29 [ 404.612805][ T3187] bridge_slave_1: left allmulticast mode [ 404.612826][ T3187] bridge_slave_1: left promiscuous mode [ 404.612901][ T3187] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.624283][ T3187] bridge_slave_0: left allmulticast mode [ 404.624304][ T3187] bridge_slave_0: left promiscuous mode [ 404.624386][ T3187] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.634056][ T3187] bridge_slave_1: left allmulticast mode [ 404.634079][ T3187] bridge_slave_1: left promiscuous mode [ 404.636711][ T3187] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.637738][ T3187] bridge_slave_0: left allmulticast mode [ 404.637752][ T3187] bridge_slave_0: left promiscuous mode [ 404.637806][ T3187] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.651536][ T3187] bridge_slave_1: left allmulticast mode [ 404.651556][ T3187] bridge_slave_1: left promiscuous mode [ 404.651629][ T3187] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.652526][ T3187] bridge_slave_0: left allmulticast mode [ 404.652536][ T3187] bridge_slave_0: left promiscuous mode [ 404.652585][ T3187] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.664825][ T3187] bridge_slave_1: left allmulticast mode [ 404.664844][ T3187] bridge_slave_1: left promiscuous mode [ 404.664902][ T3187] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.667759][ T3187] bridge_slave_0: left allmulticast mode [ 404.667777][ T3187] bridge_slave_0: left promiscuous mode [ 404.667834][ T3187] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.777442][ T3187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.787571][ T3187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.825218][ T3187] bond0 (unregistering): Released all slaves [ 404.863372][ T3187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.867928][ T3187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.905183][ T3187] bond0 (unregistering): Released all slaves [ 404.947012][ T3187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.985359][ T3187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.015017][ T3187] bond0 (unregistering): Released all slaves [ 405.058329][ T3187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.085287][ T3187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.125972][ T3187] bond0 (unregistering): Released all slaves [ 405.128369][ T4409] 8021q: adding VLAN 0 to HW filter on device eth30 [ 405.297963][ T4409] 8021q: adding VLAN 0 to HW filter on device eth31 [ 405.451644][ T4409] 8021q: adding VLAN 0 to HW filter on device eth32 [ 405.762599][ T4409] 8021q: adding VLAN 0 to HW filter on device eth33 Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. [ 406.281997][ T3187] hsr_slave_0: left promiscuous mode [ 406.282678][ T3187] hsr_slave_1: left promiscuous mode [ 406.282951][ T3187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.282963][ T3187] batman_adv: batadv0: Removing interface: batadv_slave_0 [*] Starting reproducer for blk_mq_exit_hctx null-ptr-deref... [ 406.291264][ T3187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.291281][ T3187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.293052][ T3187] hsr_slave_0: left promiscuous mode [+] debugfs mounted at /sys/kernel/debug. [+] Wrote 'N ' to /sys/kernel/debug/failslab/ignore-gfp-wait [+] Wrote 'N ' to /sys/kernel/debug/fail_page_alloc/ignore-gfp-wait [+] Wrote '0 ' to /sys/kernel/debug/fail_page_alloc/min-order [+] Wrote '0 ' to /sys/kernel/debug/failslab/verbose [+] Wrote '0 ' to /sys/kernel/debug/fail_page_alloc/verbose [+] open /dev/mapper/control successful. [+] ioctl DM_VERSION successful: 4.50.0 [+] open /dev/loop-control successful. [+] ioctl LOOP_CTL_ADD 0 successful. [+] Backing device /dev/loop0 ready (7:0). [+] open /tmp/test.img successful. [+] ftruncate backing image to 16MB successful. [+] open /dev/loop0 successful. [ 406.293327][ T3187] hsr_slave_1: left promiscuous mode [ 406.293577][ T3187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.293588][ T3187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.293850][ T3187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.293859][ T3187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.300366][ T2579] set_capacity_and_notify: 43 callbacks suppressed [ 406.300378][ T2579] loop0: detected capacity change from 0 to 32768 [+] Bound /tmp/test.img to /dev/loop0 successfully. [+] open /proc/self/fail-nth successful (fd=7). [+] Tested fail-nth mechanism: armed 12345, read back 12345. [+] Created DM device for probe. [ 406.316933][ T3187] hsr_slave_0: left promiscuous mode [ 406.317177][ T3187] hsr_slave_1: left promiscuous mode [ 406.317422][ T3187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.317433][ T3187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.317805][ T3187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.317815][ T3187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.335889][ T3187] hsr_slave_0: left promiscuous mode [ 406.336523][ T3187] hsr_slave_1: left promiscuous mode [ 406.336776][ T3187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.336787][ T3187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.338292][ T3187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.338302][ T3187] batman_adv: batadv0: Removing interface: batadv_slave_1 [+] Probed DM_TABLE_LOAD: exactly 702 allocations occurred (probe_res=0, rem=99298). [ 406.357298][ T3187] veth1_macvtap: left promiscuous mode [ 406.357334][ T3187] veth0_macvtap: left promiscuous mode [ 406.357395][ T3187] veth1_vlan: left promiscuous mode [ 406.357432][ T3187] veth0_vlan: left promiscuous mode [ 406.358411][ T3187] veth1_macvtap: left promiscuous mode [ 406.358431][ T3187] veth0_macvtap: left promiscuous mode [ 406.358534][ T3187] veth1_vlan: left promiscuous mode [ 406.358574][ T3187] veth0_vlan: left promiscuous mode [ 406.360548][ T3187] veth1_macvtap: left promiscuous mode [ 406.360570][ T3187] veth0_macvtap: left promiscuous mode [ 406.360613][ T3187] veth1_vlan: left promiscuous mode [ 406.360645][ T3187] veth0_vlan: left promiscuous mode [ 406.377533][ T3187] veth1_macvtap: left promiscuous mode [ 406.377564][ T3187] veth0_macvtap: left promiscuous mode [ 406.377625][ T3187] veth1_vlan: left promiscuous mode [ 406.377671][ T3187] veth0_vlan: left promiscuous mode [*] Phase 1: Probed targeted sweep from N=712 down to 602... [*] Testing fail-nth = 712... [ 406.603423][ T3187] team0 (unregistering): Port device team_slave_1 removed [ 406.616270][ T3187] team0 (unregistering): Port device team_slave_0 removed [*] Testing fail-nth = 710... [ 406.746238][ T3187] team0 (unregistering): Port device team_slave_1 removed [ 406.751579][ T3187] team0 (unregistering): Port device team_slave_0 removed [ 406.882438][ T3187] team0 (unregistering): Port device team_slave_1 removed [ 406.888683][ T3187] team0 (unregistering): Port device team_slave_0 removed [ 407.032457][ T3187] team0 (unregistering): Port device team_slave_1 removed [ 407.038003][ T3187] team0 (unregistering): Port device team_slave_0 removed [ 407.092071][ T4409] 8021q: adding VLAN 0 to HW filter on device eth34 [ 407.265729][ T4409] 8021q: adding VLAN 0 to HW filter on device eth35 [ 407.377354][ T2579] FAULT_INJECTION: forcing a failure. [ 407.377354][ T2579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.377372][ T2579] CPU: 0 UID: 0 PID: 2579 Comm: syz.5.600 Not tainted syzkaller #0 PREEMPT [ 407.377382][ T2579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 407.377387][ T2579] Call trace: [ 407.377390][ T2579] show_stack+0x2c/0x3c (C) [ 407.377406][ T2579] __dump_stack+0x30/0x40 [ 407.377415][ T2579] dump_stack_lvl+0xd8/0x12c [ 407.377422][ T2579] dump_stack+0x1c/0x28 [ 407.377430][ T2579] should_fail_ex+0x3fc/0x570 [ 407.377442][ T2579] should_fail+0x14/0x24 [ 407.377452][ T2579] should_fail_usercopy+0x20/0x30 [ 407.377459][ T2579] _inline_copy_from_user+0x3c/0x174 [ 407.377468][ T2579] kstrtouint_from_user+0xcc/0x174 [ 407.377475][ T2579] proc_fail_nth_write+0x9c/0x234 [ 407.377487][ T2579] vfs_write+0x2a4/0xa0c [ 407.377496][ T2579] ksys_pwrite64+0x168/0x21c [ 407.377503][ T2579] __arm64_sys_pwrite64+0xa8/0xc0 [ 407.377511][ T2579] invoke_syscall+0x98/0x244 [ 407.377519][ T2579] el0_svc_common+0xec/0x23c [ 407.377527][ T2579] do_el0_svc+0x4c/0x5c [ 407.377534][ T2579] el0_svc+0x60/0x1d8 [ 407.377543][ T2579] el0t_64_sync_handler+0x44/0x104 [ 407.377552][ T2579] el0t_64_sync+0x198/0x19c [ 407.428765][ T4409] 8021q: adding VLAN 0 to HW filter on device eth36 [ 407.498226][ T2579] FAULT_INJECTION: forcing a failure. [ 407.498226][ T2579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.498247][ T2579] CPU: 0 UID: 0 PID: 2579 Comm: syz.5.600 Not tainted syzkaller #0 PREEMPT [ 407.498258][ T2579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 407.498264][ T2579] Call trace: [ 407.498268][ T2579] show_stack+0x2c/0x3c (C) [ 407.498285][ T2579] __dump_stack+0x30/0x40 [ 407.498293][ T2579] dump_stack_lvl+0xd8/0x12c [ 407.498301][ T2579] dump_stack+0x1c/0x28 [ 407.498308][ T2579] should_fail_ex+0x3fc/0x570 [ 407.498321][ T2579] should_fail+0x14/0x24 [ 407.498331][ T2579] should_fail_usercopy+0x20/0x30 [ 407.498338][ T2579] _inline_copy_from_user+0x3c/0x174 [ 407.498347][ T2579] kstrtouint_from_user+0xcc/0x174 [ 407.498355][ T2579] proc_fail_nth_write+0x9c/0x234 [ 407.498366][ T2579] vfs_write+0x2a4/0xa0c [ 407.498374][ T2579] ksys_pwrite64+0x168/0x21c [ 407.498382][ T2579] __arm64_sys_pwrite64+0xa8/0xc0 [ 407.498390][ T2579] invoke_syscall+0x98/0x244 [ 407.498398][ T2579] el0_svc_common+0xec/0x23c [ 407.498406][ T2579] do_el0_svc+0x4c/0x5c [ 407.498413][ T2579] el0_svc+0x60/0x1d8 [ 407.498422][ T2579] el0t_64_sync_handler+0x44/0x104 [ 407.498431][ T2579] el0t_64_sync+0x198/0x19c [ 407.591785][ T4409] 8021q: adding VLAN 0 to HW filter on device eth37 [*] Testing fail-nth = 700... [ 407.730106][ T4409] 8021q: adding VLAN 0 to HW filter on device eth38 [ 407.878625][ T4409] 8021q: adding VLAN 0 to HW filter on device eth39 [ 408.477768][ T2579] kobject: kobject_add_internal failed for dm (error: -12 parent: dm-9) [ 408.537857][ T2579] device-mapper: ioctl: unable to set up device queue for new table. [ 408.540782][ T2579] Unable to handle kernel paging request at virtual address dfff80000000000f [ 408.540794][ T2579] KASAN: null-ptr-deref in range [0x0000000000000078-0x000000000000007f] [ 408.540801][ T2579] Mem abort info: [ 408.540805][ T2579] ESR = 0x0000000096000005 [ 408.540810][ T2579] EC = 0x25: DABT (current EL), IL = 32 bits [ 408.540815][ T2579] SET = 0, FnV = 0 [ 408.540819][ T2579] EA = 0, S1PTW = 0 [ 408.540823][ T2579] FSC = 0x05: level 1 translation fault [ 408.540828][ T2579] Data abort info: [ 408.540830][ T2579] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 408.540835][ T2579] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 408.540840][ T2579] GCS = 0, Overlay = 0, DirtyBit = 0 [ 408.540845][ T2579] [dfff80000000000f] address between user and kernel address ranges [ 408.540913][ T2579] Internal error: Oops: 0000000096000005 [#1] SMP [ 408.559182][ T2579] Modules linked in: [ 408.559958][ T2579] CPU: 0 UID: 0 PID: 2579 Comm: syz.5.600 Not tainted syzkaller #0 PREEMPT [ 408.561845][ T2579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 408.563961][ T2579] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 408.565568][ T2579] pc : blk_mq_exit_hctx+0x64/0x498 [ 408.566690][ T2579] lr : blk_mq_exit_hctx+0x40/0x498 [ 408.567633][ T2579] sp : ffff800097b275c0 [ 408.568413][ T2579] x29: ffff800097b275d0 x28: 0000000000000000 x27: 1fffe0001ae5652a [ 408.570052][ T2579] x26: dfff800000000000 x25: ffff0000d72b2950 x24: ffff0000e0621480 [ 408.571596][ T2579] x23: 0000000000000078 x22: ffff0000d22e9400 x21: 0000000000000001 [ 408.573116][ T2579] x20: ffff0000d72b2800 x19: ffff0000ca1f5388 x18: ffff800123625000 [ 408.574750][ T2579] x17: ffff0001ace95387 x16: ffff0000d7a11d94 x15: 0000000000000001 [ 408.576400][ T2579] x14: 00000000004bc250 x13: 0000000000000001 x12: 0000000000000003 [ 408.578069][ T2579] x11: 0000000000000000 x10: ffff0000ca1f53bc x9 : 0000000000000000 [ 408.579720][ T2579] x8 : 000000000000000f x7 : ffff800081826454 x6 : 0000000000000000 [ 408.581113][ T2579] x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 [ 408.582815][ T2579] x2 : ffff0000d72b2800 x1 : ffff0000d7a11d80 x0 : 0000000000000000 [ 408.584469][ T2579] Call trace: [ 408.585148][ T2579] blk_mq_exit_hctx+0x64/0x498 (P) [ 408.586206][ T2579] __blk_mq_realloc_hw_ctxs+0x1f0/0x548 [ 408.587369][ T2579] blk_mq_init_allocated_queue+0x2dc/0xe9c [ 408.588631][ T2579] dm_mq_init_request_queue+0x2d8/0x474 [ 408.589856][ T2579] dm_setup_md_queue+0x134/0x434 [ 408.591009][ T2579] table_load+0x3d4/0x764 [ 408.591893][ T2579] dm_ctl_ioctl+0x884/0xbbc [ 408.592894][ T2579] __arm64_sys_ioctl+0x154/0x1cc [ 408.593970][ T2579] invoke_syscall+0x98/0x244 [ 408.594985][ T2579] el0_svc_common+0xec/0x23c [ 408.596026][ T2579] do_el0_svc+0x4c/0x5c [ 408.596973][ T2579] el0_svc+0x60/0x1d8 [ 408.597795][ T2579] el0t_64_sync_handler+0x44/0x104 [ 408.598822][ T2579] el0t_64_sync+0x198/0x19c [ 408.599797][ T2579] Code: 97cf39bd f9400328 9101e117 d343fee8 (387a6908) [ 408.601284][ T2579] ---[ end trace 0000000000000000 ]--- [ 409.130128][ T2579] Kernel panic - not syncing: Oops: Fatal exception [ 409.131432][ T2579] SMP: stopping secondary CPUs [ 409.132441][ T2579] Kernel Offset: disabled [ 409.133269][ T2579] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 409.134603][ T2579] Memory Limit: none [ 409.625223][ T2579] Rebooting in 86400 seconds..