last executing test programs: 26.320293375s ago: executing program 4 (id=603): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 26.22966966s ago: executing program 4 (id=607): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="0f", 0x7fd8}], 0x20}, 0x40040) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)='+', 0x1}], 0x1}, 0x8000) 26.164894806s ago: executing program 4 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000000)={0x0, 0x1000000, 0x3900, 0x0, 0x1e9}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x80000001, 0x0, 0x0, 0x10}}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 25.284757718s ago: executing program 4 (id=643): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xa0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f00000003c0)='./file0/../file0\x00') mount$bind(&(0x7f0000000b00)='.\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0xd5848, 0x0) pivot_root(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0/../file0\x00') 25.189660213s ago: executing program 4 (id=651): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000c80)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r0, 0x800454d7, 0xffffffffffffffff) rseq(0x0, 0x0, 0x0, 0x0) 24.804690813s ago: executing program 4 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setresgid(0xee00, 0x0, 0xee00) 24.749529786s ago: executing program 32 (id=664): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setresgid(0xee00, 0x0, 0xee00) 3.208401972s ago: executing program 0 (id=1241): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x66, 0xfe, 0x4, 0x5, 0xa8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/51, 0x33}], 0x1}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)=""/105, 0x69}], 0x1}, 0xb}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x60, 0x0) 2.734880477s ago: executing program 0 (id=1251): ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) r0 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',shortname=mixed,utf8=1,gid=', @ANYRESHEX=0xee01, @ANYBLOB="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"], 0x1, 0x2b4, &(0x7f00000007c0)="$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") r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000b00)='./file0\x00', 0x800) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000ac0)) 2.333266223s ago: executing program 0 (id=1257): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file2\x00', 0x80, &(0x7f0000001940)=ANY=[], 0xfe, 0x122a, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000003240)='./file0\x00', 0x99) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) write$P9_RATTACH(r0, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x0, 0x2, 0x2}}, 0x14) 2.280317765s ago: executing program 1 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) landlock_restrict_self(r0, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 1.937210726s ago: executing program 1 (id=1264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r1, &(0x7f0000000340)}, 0x20) 1.725481698s ago: executing program 1 (id=1267): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xc4}, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1.718989526s ago: executing program 3 (id=1268): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000001040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000001080), 0x2000011a) write(r0, &(0x7f0000001100)="b4", 0x1) recvmmsg$unix(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) 1.370855625s ago: executing program 5 (id=1271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000fc0)={'syzkaller0\x00', 0x5032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001000)={'syzkaller0\x00', 0x1}) writev(r0, &(0x7f0000001040)=[{&(0x7f0000001080)="010000000000140010000900000000010000000000020800450000740001400040063c81", 0x24}, {&(0x7f00000010c0)="00000f0000dba7478481709a", 0xc}], 0x2) 1.209309315s ago: executing program 3 (id=1273): unshare(0x22020680) r0 = syz_open_dev$loop(&(0x7f0000001500), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x1d, 0x1c, "6bf125058e637b44e58c1c72a4c01c47e54a2793c042d4aea496bdbdce2feb94cb576a5d539a0f68412e32c700", "563e7e5b61a321b296a4d887df2f85a1df244fa2aa8ca412c1f9ec49aa05000200842300", "6dd01086736c1613ad1d72b5e9aa72a58f30d74d3a7893dcfc2d1e56224563b3", [0x3, 0x355f]}) 1.139949702s ago: executing program 2 (id=1274): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000480)={[{@noblock_validity}, {@oldalloc}, {@orlov}, {@quota}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xd02, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x12042, 0x0) write$FUSE_INIT(r1, &(0x7f0000004400)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x6, 0x40000, 0xb3, 0xa4, 0x1, 0x2ad, 0x0, 0x0, 0x1, 0x81}}, 0xfdf9) 931.501546ms ago: executing program 5 (id=1275): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000380)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x4}, 0x10}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000400)}], 0x1}}], 0x1, 0x40) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000040)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) 643.23915ms ago: executing program 3 (id=1276): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='proc\x00', 0x1a) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x40, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/rpc/use-gss-proxy\x00', 0x82, 0x184) read$FUSE(r0, &(0x7f0000003d80)={0x2020}, 0x2020) 617.924405ms ago: executing program 5 (id=1277): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') r1 = openat(r0, &(0x7f00000000c0)='volumes\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000100)="3a479911b01ea2bf65d04ceda34261bf23d073860762d8042b52f7a7777324cd05e549f261ac88faa1190d2f2a1462bf64cd8ab9b38c95bf08df0c948235d37199d0f2709fa71836b1029d6e27aa132e4c43cc961663bc80b64907019d882e1042c043290711007acc4e6f5008cb056dbfded7f0060689cc4893906f768146863a24a25a6b8a6d246b0ac1db28460ffb74513d050d5429ad214bbbda374668907ccffb05891aa5d8f095ec08d44d5542607ddc87a61fac512be0a118d039ae06bcf2dc2e553adbef144e5d6393d853c0326084bffd0f7ae2639ad57ab1ce6bf9f1905a209c605bd075a3caa4c8fcc562da4ab6b48a21758f60a1a2e8dc1b359d452c4a18368a5d3ccb45013530dd970e48be6a9d69152e24860b9e20ca46e0c07fe56445670930958868a65ac15c296139288babceaef162a9fff53fcee5c6f2bbd7f2fce873f7b8372c079a9b23692f0cd6037233509fb3e2b567fe1a96c6b7175cf11b4091169d1924b08d4b2b8a3f6a35c534c0988248ec98e244f268971d4c93ac6216a55c247f27df957cb931032c44476d74850ab04491715100e82180ebf9bbe49657462e4da516697e9a39633687480048476fb42f26923fb57dfc6effc67b80068b0e6af657079622ae271797e5348d2f76615ea12f57dc07b1d1eb53c9f1774585f9887bf8beafcd30e653974f31c0eaf917a59a20b9c50dca113849ab3c7af6aadd5ad7c01bd8e7e8be37419557ea746d9c5afbcc1d42424445b0a225cc2c60e554b68a57c6ba7de55d1fda03ee7d7c52a5a7fe757eace05a97ded4ae6546c705936267c010213057df87f31047c5b128291fb387ee5a1a3cb8a476a6e8b491d60f04842fa20a417b56e9878ae2f87d189642ef11cc270170f88f24b42726e149932361f9c70c595427fbebd64c60efab6564048bbc61ca502acbd41fb5e6148dbbbbb3e20098fb14176ec3b88fd24852d7fd7755a7b4f1acaa7c237ab0501149c23b029e769b0abaeabb4cd6b78186905856fe87c67d186935613c39409f179d9acd69630b802317ac453d91cffecc6f331bd336d3f5f636c062229355bbda8fd1073b87288e13630d71b52632e399a2fb093b79d9eb1196ee7b2a1dc4ad24505cb0a9592fb11b9505771026e4c93bdac7b85160d17889e8df4faf34248bddd8231a4ac81a47a9a6bd72298b63f0683d95f40309a9ec3d65f524b33d297d500e64f465b5bd1f37b24a0062e14352c9bffa950f22506c51213cd6cfebcf4901aeae1faa966b8d832ad131b7af60f6d5d3ac3c23563996f11f47e3d3ddd335d3e7649c910c255884347f37a2d791e837b3409e711ae01a2ec1cb2ecab5d3d0645feff02128e3f2df7ceb15b1e9af71e99491aed4e5e36804a2d8364ef939ce26e2b4d77edd1c4237496c61a583a7b425224edf5edab40c684498983ff8766555129d81c0eaa052903099f7e96b939e034943002dcec6dd0b0fd10c3831a6396ea70df160420ffb9a39ad86605fabf32485aefee000363762ed815841029d2a4f356243b00f109fa86f3c769fe1f50e84f57ebd3b038d2812bade061d6605599a46986cb41ee291d5fc9d36ba0b279deaec6960c183f8ff647c62ed262e0da3371d7585edd6ddce52af4016d9be694c9ca755ac9429424be71b09a6e01df628fc683513fc337869edd1a73af31ba3845efd071824806640953dd8f6dd8a8b22be46b8c4ce1325219685ab53b9adae50e8faa1df01ed4fe463d80b10c9d91090ba7cb8f2a89cf13cbd2b9ec30d9b5a297a8c47b8633b3ee693621540815b6abc41e0de01c25f72af2080b25b50cecbbeb72c0f15d6679f92ff3bacbd719abca5e7c585469fa469d198f5ca1ee3efb22cc9c6fe0b7926c02764cf9ae9c0a1fec391bf531761eb81594f0f33beea10006a9a8250367a840506d669d15e0af59ccf9d55fdb9456392a18b1f2c942c50499ffc954fd3e68d09f427c377c7547eb94ced479d13baf135139569f473140bf8497effd5c7e5bf4f66b631fef04bfd494724bfc29f75af71ecf1a58d3332440d5e65915c381da620b5cee3f65b771c98f493c3f26ccee29f9ef3e03e3ad721dd54e1b9dcc7e71e807643d25b7b3f89f7b0ff971a4c756d7ad30f340ac2c02ad0e56366b9db49e132e35c040f71a1e0d12d10de29d8c48893c31a1399b7181243a170827f4f1ba379a171ecaf7d11249f2f1ea71d303db95a7e0eea505ea6210ba5397974592b820d6d73702c18181dbdd90f7d9e7de99569f871d131406d685523e5df9fb2f116f7e99ee7a772b76076567c370411211bd695376f61bbca9d939f19e1562a880c419db05d2c64c6d389b7470987af16f589a42dd44ad826ff72ded19b467d14f029980016c23575b236477ee14386d6f55ef7d6f2a89ed1400bcd3ca37dfda302d883a6d0abab99389da8a4fefe1057ff37f5b16c19b0679fb983e1fd24b3efc6e2031a55cd6568e5c51472573fc99ec5edd22583e8343aa8d593575443af76b8b862ef18dbeae0b652cc4d9879b60fc14a1fb5043e028c45652f2b17f74d582bc92901f2097641a43502e728464d6340c510261d3f692abf75872abf861f1e8d9ebd561afb1a38b6b2c522f26c1cf51dbfcb99113339b472463765563601b8277cfc5a8611b29cd7249704c4e0611164c5186a5142f841821f2d838b4ddb79c0add5d0e32cd35686427b659f27f5cff2ddd9937a7c0f547800527e451500d6d61dee73c8be0b7925c2039d24b3a869954978a734d5ac46761cd0cacf17bd0adcfc3461a751b2936e0fa9233a5dc26135a464a3d365d8fbe2d79a3df4d1e49e61f35eb929336d2f20eba7cb7e10dea524da776d0fc8e170612e4314481e2488ed2ca3042474333183effa5219f4b85ee8a4aa077c4b0d2eed15b85daad1965c30771902ab5fb61e2539f8f31d84c52ff8c9bc093f2de1981ef916bcc4f02d6ce3b708e281987ef2216f741e440cfb8c9961adf260dcbb44089b152cdbcdb5fe27011bcfa983d51a859f57168e2ffb8a4ceb970ff33d2ac5df7994198414fc058b0537041ace531ce0b23dd4a1bc8b95d43ebbc02142d3f4612b7cf4d9f85377dd60514ac093942c12520fd01cc3fe963fce8fbfa5092b73cf49a8e33dd6a4be617fe75f4fa68c0dbccc9807cfe039d8e17233a4c2631b50260e298a7964e5cea3d354c1d0382cab849a1ea3c5a3e7da2805213304015a6ca1febd4212fc25cfcebcdb8e2f443e93a6a9ad2458cff51ae7e50296adc246743d512c9ecf1797bb366b4b7bb327e445cc95bab65cbb2896932629851c5bc656d8a91af517d1738b11fce412d6a496c65d336b6efb8d8ef259b6dd8ccbb6d227c8b4c6c962f382b345fc51c6ce4bbc7297d4e9aea691dd774847b61f0eab101a7fb4ca6f0ddc87265476ec8a196a7fcefae261bd60d2773dca9b2c544483f9139168dcfd5ac0db19339295d6bb3b7a8aa6274e6e61f6ed7036a8fa637df94706734ab766061d7c26123c2915d158a50397664e6cc39ee8088479ea38a247e70f2cea502455aa59f986b74317d196b9a193a273c8b26e34d7ab7c67ce3ee08ca4abd71864b9c67abef71679eaf10f7a802fa59ce2f5ba66ba1847640f63db8bb4af76737c3c15dad2171c47aae86056b584e67466fb9178cd5f9a0f1ee18c23c71d67d3ae884059898af2df52b98a8be7427f749906f67698668969f3dbb815f7f4a048b48c20167c1efdbb0101ffe75617c307e0bd1a526a58ef04ce12dc7aaa87503293803ced0dee624a617fc5c9365377a7e8f3d20c7ff0117f2cb7fa029ec7119f25ad8e3e5af4d37dadedc3751b8205862009564c747ae184f6b277808325bc53293c16f515715277a3e75214cca6ca60469501a8c911aa4c1c53fb1d857c2c80d280c0a4730ebc7e0407f664c7c169bef1e1e03f2d3842776459a48a1bcd0f964dc105e61138fdc62762d30d9ff7bba73527b75cb98d86d51ef31d834ac9d788d9b99a79c73900a7b3b5f0e84880487e425d75eebb444bc00a0d03b07dc3ad71eecbe05f1ba1b35ce0560d38a8613b0b9852701a818fab26e45313f72de5ffc186962bc5455541189838194bbca0a2c5a083823bfd61219468c4487325a74361d6f755d689d6a36bb7f5f721474042068e4ea8d3813317e766bd451ba1df6e6dbfb9675e1e7bd42355d04dc15fd1337f9ab33c819810d1604964bfea3dd049cee9148c0a9171cca753426fe917580f6af9bb198e3e5c2772864ef76d938171396d221d28fc3ffe346687d2ca1867dde9e1a4f7fd6f0e3a10c387000af52f9d6719b1bcf972bfce1833a0d42e30421b7ef844af751cba32614421aad980e9ae22ae53a3dd6ff6b69ca77698201ab117434c78a1a2fe4123394afb9cff1532d16cd4edb76f7472876292a0c7a5441f3776235c00b80b9808829bc0e2b2e47f79a0c45fcc2e1298089518f3ce9426d282e2b741fce5de8db9507c74c3cdfb33141f01b65d545319a8cb7dc91afdf70b1caa5c6870233524e6c14d4319be3fae13f08ecfa8325d741369a1f1482d5e20540774b530ffc4a7e5c7fe0ee644b6001ae80cbbc9b8a096cbd361484c160200d7298c0467f76281759ab92fbc1a71678ba3eb36a9277ca0a789f14b182dc00b29592c402f9d180dbe2aeb608a7092290603966fe352f2428ce8fd86fd1b8cfbb6be7070fe31745344c4cbaa205854ed9645ba0f39c4e76e32d548973577804a49f5b7affb6cef1942d3f0a3941d9c4731eac40c1c14b1babf2840415f64c07ef1c34db42ce4a7b7eaebbc362ae37353b68437294212f0095f30e56ecd81a99f27afc77bbb86bc996e26893577195dfd5b5b9b51bbc41fde346d066c5c0b4e43b1577c77a419989edab2d9817997c0a57d0a763cc88cc4e980c6175a7cc11f7ab9ac43fee92ac1099bf7bdb4e875135de2db9d9f7b755505c07dff1859a2e558c5ba6b8ef6c619c12a3497a9bb71be4561ae21e1daf0ce06ec2d90b051045ab36e19f293092b5b94880e463767ba0d2e79e913949e4d19ec3014fb3821ea42c5a8a1b6d2f07b63c4a3d54cbd713aebd6ca9fd2fd7b8fa240fb97063b9438b064589000d49d77210fe0b8244004c8f8f184b718d5d8f7abed4da85bc36eac857a30128fbb098c23ebca82af414b54935ee60b750aae9ea476cf1e8c91655b268fd2aec8e69f5fcc236aa4528f484e6b58c1d5026b582b7c7236159d215591ca7541a7d43cf4b90543187e68a36c723e20af864433e6198c20006d52a026bdb6f71ba06776f5d324cd6c1c87fa0d6040991b7e0b0f2dfcc3c99fb3eb8c480e48953f9a1c998559020e563cf2c3e554d6f977c770c9e349e0c28ca7fdb1a6b37ddaf0bd1691051014b5c83971a96f90b36ea4fde89bc6679f6ffd29ff8e64c5da6136ed9e439463f5feb42f22e17dd7ea5cadb45c7f8a90122e97041d98d3733bc3ff56a43af4de1017dbb4c7c35505a03b0743c7aafc1917c898d2043c6ec5d4224bb1f84772f0056a173809e53400d58c7dc781720efbcfafd3c809ad5dd7504a1c567c733b23f2e93a9ac8ace9ba48bcd48dbd02ab86cefef9b33b8706c899b54d7985fdd74744bf4626b9313ff2d9fb6005b4f151a573c56c58bfc7072df030e3fd3a70188ed1770cbda47d8499116c7c53caaa88e5dd84fd518a557cb6ff6848e2f9c795e99531f028e862a5a60ca4f1dbebd75da537377c5ca94fcf34988850f43e15e37be8bb74652877496758fae566fadf1dc9fa957bdf94ed6a8e0b6d1be7fbd2c588703a67bbdee7047723bd3dd38c19b8e968b57cb4477c846230b01719435346a4513d632eadd90992b99d7121387e2ac3e4fd456b6518c7b0b90f55fad7d1d557ae9fd7de0a6bf67cf44d0b5e4597948bdd357e13712bcf76c57e2d349a72ee71bf72841f857be849ae1aeaef54f703dd64ed8141d55ce59a1ea14dd5625a79cd96aeb61df44050ffba1d6c654f5df583359268a1e927dec46c0a0eefc1bd7d74913e481b9a0b1c9b8cd73b5807e90fbd04a095984e09d9aa28e41a453a690a5509482850e1d2a3e70fc13d4b4d52f2115ccb478d493ef46f1c4d4bc518e09163e84fb6e4ff16c10d54480e9527252f6f9ce828c7064f35ff5f749b4dddefb3429766b103daa14dab2826eb26f629ce88520fee524826f64c0d6357596d1273bbf7bff26e772dd15a5ba77787e3269d2766dee461e0548c866ca95b88b23d8f3e78ac37b614d4a87a1f5d0c3e959d3874c6abc9d66d6e31d1de2a3aaaa1d9fa898a9265a1f5ee02b9d373338ab4250200a05776a2b759ee230cad718e2a48d513f53fa248052b6285d526e4157f5e7491962e81bb5a6306252205cf65adc14efaed4ccb71871d27b450ead19062cfb94c23640752c9f7e26de5a92db7cc430c01a63f3b5e4538c42267fd71d847e6efd85302fb64d7e89a3d9c5c3bc248259a37d0a3f200bf8831ce6b7c5300b76986052955a876ac0743b23d3745480540b300e7a8a5cc458ae9476cdbc765f865d590c694b83c5857584d137109e5ee8c1364ba4238d7b5edcd02f0fe3e4331cbb7aaf2731c9bbd476169e3ac9cb69dc6a285e3db440dd829bce58152105567cf0789d4f38ccba37f63b3e73a4508115b26a9af2d67a7bd71e6548f1bfdc7c45ac2633f0746ad1d7950336aea8d77defbc9543d0385247bc1eba8c17dcfaa0c540bba113aaa0760cddb1b942b20bbe654b522316d0d8b2651dffa722d6314fc414d2b306c603c9c5694ed327e1f6c03504079bfa8848dcdb1409187cf9981aecf2070ef288010bb2ad2e2c3b4d3d332c1b386860a20f0a428e8545a09c28a1f3da9d0c93844db289e4d9ed87a6b14bd34de174371704281c9a2cf8979904d3215fdb8a17c40f4d61e34122b872002ce02baded8eee5990efb3e670f50bc5638e09e6f2f01d08215aa5de9503cc45623c32ea0faa8581bb27e55b5b1f141c4dbcd363e6e0ca34a5d0d281b591ca0ed451a119eef85f7676df02a8cdad3603c31dfe378b99e80afceb3bef4b8e6756bda3716ba223175bddbeed4acdbe272709d7c23303222646579084858521c0581e89b93846648f1bfdb0947fa79a169b5591fc97ccefa437afa5823bd25add805eef6cbd8bd950d552b9f1068616608d3920551e0d1354a3ce6bcd44c3ff95dc3ca84e316af9170853c1db0a809a8ca5332a75349b408c57b53aa4d0a5a2a6e704c6e38971d94aacbf950529d88aa0bcde47781027c4bc3393964368879b6315c903e17a4f7dcda852c9a419b109d5f68e8beda0ee1d452bc82a938dbc44a13057cd2176f122202900a4779c965a33c7bc0aac857f5a31e0523f53093edf63a47048fcd1de614d9e8d5465595f6218298531baad833a8c14fbec53e3efde3b84ec844449ebaf175369d9bb6aff2f62aa63691e2082e3ecd33053c57b758779810364002060c76303d8f35edc9ab62726d51ef256778f314943e3ebd2f35bea97a107fc979a936a101ece1adb2d822749c60b1590adf04432acf7bd27a53eedde7ce5c598fe4565ac6fed26496ca0ea36a17d63ef5515a99d152183945d32963b0a7e7ca84b7c293eccd32a5bf38be3e6bb19a9a68047dd147228e3d851ba8170e1e25f140aa01d890eb7af5be581238e02cb0ae06cd78ed95b0fe7d0450e37192299b44611802c4f7e46afe93e587d5334326a2e1a857fd2a2e58e55144d1b8fab09fc10bc966e59fcec5c5b90c7d436c5c02476e992708af070a59811c1723509a0dfa83c61841d04bfd2d4d8fba3af02f66b4749f8b748be1fb8506ecb74d4d696532dcb1875a7fb25af208a99a3b74dd6c7e7013afc18d4bb75046e64c50b887638d14ed6f5a818569ca970396fada5af4f782172ae570b5abd565994d8e4ed4766c7b3b55c21e18a428ad5cc65e7b64f28c8cb249bcd3ce462bb6b2d08f8b06aa5aa53d431974db9a13b2e63ddfbdd07163987ffb3d8e44f0efca6d10c42d617c7258fe11d2fce632f79feb247ba9147006c276f53dbf4dbfc634b7b6d5036410c75e983efe29b360a686ac1a36a3397de5f969de7d18a2327459bd54f722a17bbdbf765223f77a80f56efc4f9f9d7231a23e578ca01f03044e3e703ddad3aa73a73e4b74ad344a48a6691e7b800b0f751cdb5719d5c47a84d9f298a2bfb7c347d6c696a11b7fd25ac5ebaa29320ef832bc2780d08c7d75e3ede0ffe3e13f03ab896585ec9896d4a04d476868e4a3d3323bc1bdafbe1847c3a7c87abbe4c31f9e92b2748c60830b6b5bc85cc3f4c4e0b67e9bba0889c75b705c8025f5d695bb66f89802e3864b09bb10d719253de07a2b12d29851d757b398ca48718fb7ef3d99ea0dce21fc296ff2a3c8ede2ad24dfba87525c413ca178b9ad4a8dc80c4a056e00ea19d1bb3b91b15691425a20ecd9a30519b8310f5141eca579b010cbde8b03029cbbfdca4a4b47f2ac17fcbfa9bd3be3c23d47994586b8061116135ebdc264724d3f2f1d8b9af9c3a651a91d0784597a74b738095d33c74df74c900daaa653d634de1c11ba2e7818be796ed602dd66287e1e93cb49d7b7ab09bc6224e2aeba3d868e65705b433b9df95e424f3d424a19238c8e9ba0a12d21695f8bb97fb1cdb501d9ff7f0a1574103682b4ac142ad312313ee818417e9172477fa9115e291293302214883b214e78051a6069b40139d70b48c371d1035a02f62369ddc5430840ff41f3d35dc07e30cdde6c6a12e4351c0237b491b2d545573d167b30819a4b36c2a71e605545a0670a11ec43703c91fab233d6a58982bd680961d1e627973448435cd1a5ebeb549f8cb78fcd9c50ee9c8197f88c0f3b3a125fbddb2a20262f93e2d30f4380787d57f13692bc722ec827e8427dee6b4b612d7a5c26ac82174cb812b2b561bdbdd94efa12833346278c4d40125c34b3eca2d1d6137190787d9b269ed0418b46cacc25a7595bff961450f895132e857460927a0e373816f9b1e989649739c2e6e8489640e5df96c8f4cda90d1bafc3fa8eef66a9d9426b6f5b009aa8d35967ea9b447c1c71b2b80990e63a1301af92fe1f0e2e78e8fca06c5f8b9f5cf8e05a457250a16b5f070cb1f77ecafdae000b1a206847aa89c32f8ab176e7918f97389d1d300db3000a3f113819e7f1cb30e5bbc5a1218c00e881fed7352afc95ba21ae459294812e9fb26153a906e19534285983b69c101b6f7f0b363bfc6ba39422fb01de03ff416bff09dbad82f0240fb1bc3a26c8e5ba43dcc1e02eb340b9fdb8801ca1f26fd57d1386251d667043c206a2a96353fe0add61bf4a2929093edda680fbde4fe9d3d21b4db3615d63e56a8712ffd0de3cbab719c2fb879d38c431ba1f6d2338cbb755409b532b5e409ca197f6ad363fe3d1f28a3d1ccb0288292c69f172a6ade017b04449d5847eb93c9fa33ea1474d387f959466c4ce6cc879710ad639bc078cbb3739e2b779af2cea9380fc7393ba01f61887be7fac80a4fc2e0a218f319ec95f35d7595dc4a82579a7d9b72e90788c5d12686924cc490906546c06093ea63bed699c8338ae4172c0068b25084889b8eb0c64f66a93a848d46891e9d8b3847b7c86816340523d331f3546f740581c197a72ed9a551270290e8465f65ca130dad2fdb31953dae1e7175e873b3d84aa5341bca4aaba6e60c242e9adf2f749ef0a8dd87ab1aee6abc102caece2ba0d3d0dc4fdf3417d4744317229eb008f56c215ce7729488b226fdfb5b29c05809a9e95f163d758e70b3e10f6fe5e54d0fb3051660439b1c9690c15e45ee05594447dc052a828c2e4fb224ffac8e56e0bc7eea6947f2ca9b6bc637ff6ffe66b68b3cb3fc4d131ebcc41dd4666ad7969440ad49fe18ce07c8c29ba9c53c0289910f6da780bcba4335af86d7c7fe19174fbaaace93e151cf94f5ee04bb998528c1537b68e378dd6fc0ed80b39531b4cfe75aab3e8c0f8be5b7534915749e083b2511f5e0e3eac1033da27e3cccb58d364284e0c1c23ba8325b33c043c5af3402a987d2e30c253fc8a4e7ed777a1380dcccdd206d9f3f31df754c14ff5f76b4331a994590b7a0ce3b0ecaa514f5524c5eec1be0c7e78c407cfefff37684023e62526583c7c58aa390a763e6329dd6e32b8a7730a731204eafd754e7c82d3fca108b824f93a2fc8c384dbf3724af28bdedb34e42e50936df6db24425f08ba82dae43fea03a95eae41273054f427b0b11f548ea07f8294056d84172a827ae8fda4279f83eea5916bcafd488eb1e3c9bcb19b40bed7f22850147ab7d9b1aa1b222033bb49e32c7ed37ce0c7bb2659bdc46f8b491dc472c671708e75be04f6cdd317c0922faba90047b63d08f6d88e85540212e3f0e9be4316066ef7834d5d73a50f01f4a0da692f8c23a7f1fd460a90c7fa49693eb91c9a5fd635398ff1987d2d5d1515568af1e657ea878bfc09245e88541be42d0fd691fb7023032ade71849c1c0646ddd787f1655e5ce15f2946eca61a42c757330e7a0bc38ce457267a8864a9703d52c74b30b7afa46bd511be6c80ef9852a82f8713a97a716a86b47414df6d99e871f1f34d86ae74236873d132a5836a3b01ffd12188f6cc4aa034aada4cb6a0ef2c3570e66c5d5590553b787947527423cfd554aacb1d946754a39542a91146dfbd7f299a5112f976d929ac7201912bfbaaf078abaa7d339d2b3b1d59a32fd73f145c8944f75d3ccf53046aa4473d5cca66cf8c36e1c44267c2922b4eaded1309be69f489e849606664ffcc3e05190baca189197f4c867206d148ffa3e2530f8120cdf1a9705be50e44c944b3ca2bd3c0c93e4ae9a4b35fbc1c535304e13ba63b433b4d82a22e4a4be6f6aac95800445453fafb41748a1298e69c843a2cd0b2c0f687f5627796120bbccec7b396317642442cba3f4daf0365bbcb0829b0b1982dabb3a993f659671cbbd50a99dacd2e58f4f069b755559e735bd0b4f518cba9c3787e577c5a926d0badca11180c055e13f9a04875d069d2a30cd80e751a4f0a981c0a041d6e4ff887da9e96212184452a0e0d1296902c373bd5e2e32f4de6d016fe544e27ecd2ad879253ecce78f7bd77be96f08eb17c746751cdec67486edce0b80c60f800df0cd019a65be800482dd2e0b092459e62003a180e1bef5f38d55490cd08ecfb2c4e2e2c2b05c4126e9c2c459294621afed0a3123a9618cb8abd036b733f929fe2bb5695abd9a706f41f9624017f64881026ce98446a4fd959f5e52fbc2988641c7c0fdff02c4b34763af17912225538adcfa2fc544cf511ac47cdcd35121129d53a006fdf29917dcb96c63c8245a404195c91fa2d5aa6b6e0140c2f7ce1ce16b137fd9da1bd5a105b9200f687f86340e777c531285376c17d43b0da44d0ff2475d4a8b4ca448e64b3a1b2c7a41dad97e0ba7f3b4fb2758ebb6cb71b015b984505509fafa71489b2b722d115d075d61eb91c4ebb3c2d398519e6eaad2f7d5ceb060ccaa2c94634b9bd91acb50db72c1594466074afe904f94628ea51094be35897d8da63c4811d818a3380440978b36a2eca796a4a85a9f3e9aeb089cfd6", 0x2000, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r1, &(0x7f00000021c0)=[{&(0x7f0000002200)=""/183, 0xb7}], 0x1, 0x400000e, 0x18000000) read$FUSE(r1, &(0x7f00000022c0)={0x2020}, 0x2020) 609.51627ms ago: executing program 1 (id=1278): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000030e0095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 608.149686ms ago: executing program 2 (id=1279): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000380)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 562.424751ms ago: executing program 0 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000003c0)='./tracing\x00', &(0x7f0000000400)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./tracing/events/sched/filter\x00', 0x1, 0x15d) write(r0, &(0x7f00000004c0)='common_pid > 0', 0xe) write$cgroup_subtree(r0, 0x0, 0x0) 476.990703ms ago: executing program 5 (id=1281): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept(r1, 0x0, 0x0) 442.275702ms ago: executing program 2 (id=1282): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0x20, 0x4, 0x9, 0xfffff038}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x50, 0x0, 0x2}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4000080, 0x0, 0x0) 435.20535ms ago: executing program 1 (id=1283): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 414.884441ms ago: executing program 3 (id=1284): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x20000600) r1 = fsmount(r0, 0x0, 0x80) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0, r1}, 0x18) 378.520612ms ago: executing program 1 (id=1285): r0 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0x3c3b, 0x1000, 0x5, 0x2d2}) r1 = io_uring_setup(0x7627, &(0x7f00000002c0)={0x0, 0x653f, 0x10000, 0x1, 0x1c9, 0x0, r0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x9, 0x3, 0xc4f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffff, r2}, 0x38) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 365.211325ms ago: executing program 5 (id=1286): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000180)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, 0x0) 347.14729ms ago: executing program 2 (id=1287): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /et /passwd ex/c argv[0]/\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 295.870367ms ago: executing program 3 (id=1288): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000fc0)={0x48}) 270.115731ms ago: executing program 5 (id=1289): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000247000/0x2000)=nil) mremap$dontunmap(&(0x7f0000635000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x1000)=nil) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 233.272521ms ago: executing program 3 (id=1290): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='n', 0x1) 213.97073ms ago: executing program 0 (id=1291): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 196.093549ms ago: executing program 2 (id=1292): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000002c0)='./file2\x00', 0x0, &(0x7f0000000100)={[{@noload}, {}, {}, {@nomblk_io_submit}, {@nouid32}, {@usrjquota}, {@data_journal}, {@dax}]}, 0xfe, 0x471, &(0x7f00000004c0)="$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") openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x7a2, @empty, 0x6}}, 0x3ff, 0xffff, 0x80000000, 0xc960, 0x90, 0x101, 0x8}, &(0x7f0000000040)=0x9c) 15.966969ms ago: executing program 2 (id=1293): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x0, &(0x7f0000000600)={0x0, 0x4bc9, 0x200, 0x1, 0x29}, &(0x7f0000c57000), 0x0, 0x0) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000200)={&(0x7f0000967000/0x1000)=nil, &(0x7f0000a30000/0x2000)=nil, 0x1000, 0x2}) 0s ago: executing program 0 (id=1294): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r0, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) kernel console output (not intermixed with test programs): .595947][ T5321] __dump_stack+0x30/0x40 [ 31.595956][ T5321] dump_stack_lvl+0xd8/0x12c [ 31.595965][ T5321] dump_stack+0x1c/0x28 [ 31.595973][ T5321] should_fail_ex+0x418/0x58c [ 31.595984][ T5321] should_fail+0x14/0x24 [ 31.595993][ T5321] should_fail_usercopy+0x20/0x30 [ 31.596003][ T5321] _inline_copy_from_user+0x3c/0x174 [ 31.596015][ T5321] __sys_bpf+0x1b4/0x82c [ 31.596026][ T5321] __arm64_sys_bpf+0xd0/0xec [ 31.596036][ T5321] invoke_syscall+0x98/0x244 [ 31.596045][ T5321] el0_svc_common+0xec/0x23c [ 31.596054][ T5321] do_el0_svc+0x4c/0x5c [ 31.596062][ T5321] el0_svc+0x60/0x1d8 [ 31.596072][ T5321] el0t_64_sync_handler+0x44/0x104 [ 31.596080][ T5321] el0t_64_sync+0x198/0x19c [ 31.613105][ T4744] Bluetooth: hci2: command tx timeout [ 31.613129][ T4744] Bluetooth: hci3: command tx timeout [ 31.613145][ T4744] Bluetooth: hci4: command tx timeout [ 31.745601][ T5340] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.747312][ T5340] FAT-fs (loop0): data area starts beyond volume (274 > 64) [ 31.747330][ T5340] FAT-fs (loop0): Can't find a valid FAT filesystem [ 31.811368][ T5345] EXT4-fs: Ignoring removed bh option [ 31.825079][ T5345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 31.891148][ T4738] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 31.927949][ T5362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.947414][ T5362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.996956][ T5371] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 31.996995][ T5371] System zones: 1-3, 19-19, 35-36 [ 31.997559][ T5371] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 32.010455][ T5371] EXT4-fs (loop4): resizing filesystem from 64 to 1 blocks [ 32.010471][ T5371] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 32.052189][ T4737] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.091197][ T5381] netlink: 'syz.4.173': attribute type 3 has an invalid length. [ 32.091215][ T5381] netlink: 56 bytes leftover after parsing attributes in process `syz.4.173'. [ 32.125529][ T4747] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.128398][ T4747] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 32.142063][ T5387] FAULT_INJECTION: forcing a failure. [ 32.142063][ T5387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.142092][ T5387] CPU: 0 UID: 0 PID: 5387 Comm: syz.3.178 Tainted: G L syzkaller #0 PREEMPT [ 32.142107][ T5387] Tainted: [L]=SOFTLOCKUP [ 32.142112][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 32.142118][ T5387] Call trace: [ 32.142122][ T5387] show_stack+0x2c/0x3c (C) [ 32.142138][ T5387] __dump_stack+0x30/0x40 [ 32.142147][ T5387] dump_stack_lvl+0xd8/0x12c [ 32.142155][ T5387] dump_stack+0x1c/0x28 [ 32.142163][ T5387] should_fail_ex+0x418/0x58c [ 32.142174][ T5387] should_fail+0x14/0x24 [ 32.142183][ T5387] should_fail_usercopy+0x20/0x30 [ 32.142193][ T5387] __arm64_sys_openat2+0x19c/0x404 [ 32.142203][ T5387] invoke_syscall+0x98/0x244 [ 32.142211][ T5387] el0_svc_common+0xec/0x23c [ 32.142219][ T5387] do_el0_svc+0x4c/0x5c [ 32.142227][ T5387] el0_svc+0x60/0x1d8 [ 32.142236][ T5387] el0t_64_sync_handler+0x44/0x104 [ 32.142244][ T5387] el0t_64_sync+0x198/0x19c [ 32.289928][ T5402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 32.311436][ T5405] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 32.489911][ T5426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.505698][ T5426] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c028, mo2=0102] [ 32.505743][ T5426] System zones: 0-1, 3-12 [ 32.506740][ T5426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.546197][ T5436] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 32.546250][ T5436] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.199: corrupted in-inode xattr: e_value size too large [ 32.546265][ T5436] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 32.547244][ T5436] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.199: couldn't read orphan inode 15 (err -117) [ 32.547267][ T5436] loop0: lost filesystem error report for type 5 error -117 [ 32.547829][ T5436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.570943][ T4737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.591533][ T5436] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 32.591549][ T5436] EXT4-fs: old and new quota format mixing [ 32.610201][ T4738] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.624583][ T5439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.631502][ T5445] set_capacity_and_notify: 12 callbacks suppressed [ 32.631515][ T5445] loop0: detected capacity change from 0 to 256 [ 32.632472][ T5445] FAT-fs (loop0): bogus number of FAT sectors [ 32.632490][ T5445] FAT-fs (loop0): Can't find a valid FAT filesystem [ 32.705820][ T4741] hid-generic 0005:0008:0007.0002: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 32.709454][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.760529][ T5453] fido_id[5453]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 32.840620][ T5464] input: syz1 as /devices/virtual/input/input4 [ 32.847362][ T5466] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 32.891715][ T5472] netlink: 256 bytes leftover after parsing attributes in process `syz.1.214'. [ 32.891734][ T5472] netlink: 256 bytes leftover after parsing attributes in process `syz.1.214'. [ 32.957733][ T5477] netlink: 'syz.1.215': attribute type 3 has an invalid length. [ 32.988048][ T5481] loop1: detected capacity change from 0 to 512 [ 33.001674][ T5481] EXT4-fs: Ignoring removed nobh option [ 33.001690][ T5481] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.026596][ T5481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.047760][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.107469][ T5492] ip_tables: iptables: counters copy to user failed while replacing table [ 33.123801][ T5495] loop0: detected capacity change from 0 to 512 [ 33.149636][ T5495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.164420][ T5495] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.223: corrupted xattr block 33: invalid header [ 33.169021][ T5495] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.223: corrupted xattr block 33: invalid header [ 33.169375][ T5495] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.223: corrupted xattr block 33: invalid header [ 33.181207][ T5495] EXT4-fs error (device loop0): ext4_xattr_block_get:608: inode #15: comm syz.0.223: corrupted xattr block 33: invalid header [ 33.232190][ T5495] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 33.233810][ T5495] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 33.233832][ T5495] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.233832][ T5495] [ 33.233841][ T5495] EXT4-fs (loop0): Total free blocks count 0 [ 33.233848][ T5495] EXT4-fs (loop0): Free/Dirty block details [ 33.233863][ T5495] EXT4-fs (loop0): free_blocks=65280 [ 33.233878][ T5495] EXT4-fs (loop0): dirty_blocks=31 [ 33.233885][ T5495] EXT4-fs (loop0): Block reservation details [ 33.233891][ T5495] EXT4-fs (loop0): i_reserved_data_blocks=31 [ 33.239130][ T5495] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 33.288155][ T5510] capability: warning: `syz.1.231' uses deprecated v2 capabilities in a way that may be insecure [ 33.289822][ T30] audit: type=1400 audit(33.260:3): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=5509 comm="syz.1.231" name="40" dev="tmpfs" ino=221 [ 33.335949][ T5520] loop1: detected capacity change from 0 to 512 [ 33.354414][ T5520] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.235: inode has both inline data and extents flags [ 33.354442][ T5520] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.355093][ T5520] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.235: couldn't read orphan inode 15 (err -117) [ 33.355111][ T5520] loop1: lost filesystem error report for type 5 error -117 [ 33.357981][ T5520] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.380787][ T5525] netlink: 20 bytes leftover after parsing attributes in process `syz.2.237'. [ 33.406682][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.577923][ T5546] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.578373][ T5546] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.612633][ T4742] Bluetooth: hci0: command tx timeout [ 33.612643][ T4744] Bluetooth: hci1: command tx timeout [ 33.633867][ T30] audit: type=1400 audit(33.610:4): lsm=SMACK fn=smack_file_fcntl action=denied subject="w" object="_" requested=w pid=5565 comm="syz.2.251" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8720 [ 33.673729][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.675512][ T5546] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.692757][ T4744] Bluetooth: hci4: command tx timeout [ 33.692797][ T4744] Bluetooth: hci3: command tx timeout [ 33.692814][ T4744] Bluetooth: hci2: command tx timeout [ 33.802629][ T5574] loop2: detected capacity change from 0 to 4096 [ 33.815991][ T5574] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.820473][ T5574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.855000][ T4735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.893043][ T3005] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.893194][ T58] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.893222][ T58] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.893243][ T58] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.915561][ T5581] loop1: detected capacity change from 0 to 512 [ 33.950753][ T5581] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.258: iget: bad i_size value: 38620345925642 [ 33.950776][ T5581] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.950921][ T5581] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.258: couldn't read orphan inode 15 (err -117) [ 33.950934][ T5581] loop1: lost filesystem error report for type 5 error -117 [ 33.951479][ T5581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.955501][ T5587] ip_tables: iptables: counters copy to user failed while replacing table [ 33.976922][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'. [ 33.980308][ T5581] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.258: bg 0: block 5: invalid block bitmap [ 33.994019][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.287630][ T5628] loop3: detected capacity change from 0 to 2048 [ 34.306306][ T5628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.310036][ T13] IPVS: starting estimator thread 0... [ 34.348339][ T4734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.367873][ T5637] FAULT_INJECTION: forcing a failure. [ 34.367873][ T5637] name failslab, interval 1, probability 0, space 0, times 0 [ 34.367894][ T5637] CPU: 1 UID: 0 PID: 5637 Comm: syz.3.282 Tainted: G L syzkaller #0 PREEMPT [ 34.367909][ T5637] Tainted: [L]=SOFTLOCKUP [ 34.367913][ T5637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 34.367919][ T5637] Call trace: [ 34.367923][ T5637] show_stack+0x2c/0x3c (C) [ 34.367940][ T5637] __dump_stack+0x30/0x40 [ 34.367949][ T5637] dump_stack_lvl+0xd8/0x12c [ 34.367957][ T5637] dump_stack+0x1c/0x28 [ 34.367965][ T5637] should_fail_ex+0x418/0x58c [ 34.367976][ T5637] should_failslab+0xc4/0x120 [ 34.367987][ T5637] __kmalloc_cache_noprof+0x94/0x5fc [ 34.367998][ T5637] syslog_print_all+0x108/0x51c [ 34.368006][ T5637] do_syslog+0x2b0/0x5b4 [ 34.368014][ T5637] __arm64_sys_syslog+0x88/0xa0 [ 34.368021][ T5637] invoke_syscall+0x98/0x244 [ 34.368031][ T5637] el0_svc_common+0xec/0x23c [ 34.368039][ T5637] do_el0_svc+0x4c/0x5c [ 34.368047][ T5637] el0_svc+0x60/0x1d8 [ 34.368056][ T5637] el0t_64_sync_handler+0x44/0x104 [ 34.368064][ T5637] el0t_64_sync+0x198/0x19c [ 34.392444][ T5633] IPVS: using max 59 ests per chain, 141600 per kthread [ 34.399686][ T5641] loop2: detected capacity change from 0 to 512 [ 34.437309][ T5641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.458276][ T5651] netlink: 36 bytes leftover after parsing attributes in process `syz.0.288'. [ 34.459428][ T5641] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.284: corrupted xattr block 33: invalid header [ 34.460271][ T5641] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.284: corrupted xattr block 33: invalid header [ 34.460444][ T5641] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.284: corrupted xattr block 33: invalid header [ 34.471080][ T5641] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.284: corrupted xattr block 33: invalid header [ 34.537849][ T5641] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 34.538043][ T5641] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 34.538056][ T5641] EXT4-fs (loop2): This should not happen!! Data will be lost [ 34.538056][ T5641] [ 34.538064][ T5641] EXT4-fs (loop2): Total free blocks count 0 [ 34.538071][ T5641] EXT4-fs (loop2): Free/Dirty block details [ 34.538078][ T5641] EXT4-fs (loop2): free_blocks=65280 [ 34.538087][ T5641] EXT4-fs (loop2): dirty_blocks=31 [ 34.538093][ T5641] EXT4-fs (loop2): Block reservation details [ 34.538099][ T5641] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 34.539593][ T5641] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 34.682921][ T5673] FAULT_INJECTION: forcing a failure. [ 34.682921][ T5673] name failslab, interval 1, probability 0, space 0, times 0 [ 34.682943][ T5673] CPU: 0 UID: 0 PID: 5673 Comm: syz.2.296 Tainted: G L syzkaller #0 PREEMPT [ 34.682957][ T5673] Tainted: [L]=SOFTLOCKUP [ 34.682960][ T5673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 34.682965][ T5673] Call trace: [ 34.682968][ T5673] show_stack+0x2c/0x3c (C) [ 34.682985][ T5673] __dump_stack+0x30/0x40 [ 34.682994][ T5673] dump_stack_lvl+0xd8/0x12c [ 34.683002][ T5673] dump_stack+0x1c/0x28 [ 34.683010][ T5673] should_fail_ex+0x418/0x58c [ 34.683021][ T5673] should_failslab+0xc4/0x120 [ 34.683031][ T5673] __kmalloc_cache_noprof+0x94/0x5fc [ 34.683042][ T5673] __v4l2_subdev_state_alloc+0x68/0x2f8 [ 34.683055][ T5673] subdev_open+0xa8/0x318 [ 34.683067][ T5673] v4l2_open+0x198/0x338 [ 34.683075][ T5673] chrdev_open+0x398/0x3e8 [ 34.683088][ T5673] do_dentry_open+0x5c4/0xfbc [ 34.683096][ T5673] vfs_open+0x44/0x2dc [ 34.683104][ T5673] path_openat+0x1084/0x18f0 [ 34.683116][ T5673] do_file_open+0x1c8/0x2e8 [ 34.683127][ T5673] do_sys_openat2+0x114/0x1e8 [ 34.683135][ T5673] do_sys_open+0xb0/0xe0 [ 34.683143][ T5673] __arm64_sys_openat+0xa8/0xc4 [ 34.683152][ T5673] invoke_syscall+0x98/0x244 [ 34.683161][ T5673] el0_svc_common+0xec/0x23c [ 34.683169][ T5673] do_el0_svc+0x4c/0x5c [ 34.683177][ T5673] el0_svc+0x60/0x1d8 [ 34.683186][ T5673] el0t_64_sync_handler+0x44/0x104 [ 34.683194][ T5673] el0t_64_sync+0x198/0x19c [ 34.771499][ T5686] loop0: detected capacity change from 0 to 256 [ 34.830254][ T5696] vxcan0: tx drop: invalid da for name 0x0000000000010000 [ 34.978394][ T5721] loop0: detected capacity change from 0 to 128 [ 34.989281][ T5721] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.998716][ T1100] kernel read not supported for file / (pid: 1100 comm: kworker/1:2) [ 35.023783][ T4738] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.310418][ T5763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.330884][ T5769] FAULT_INJECTION: forcing a failure. [ 35.330884][ T5769] name failslab, interval 1, probability 0, space 0, times 0 [ 35.330905][ T5769] CPU: 0 UID: 0 PID: 5769 Comm: syz.0.339 Tainted: G L syzkaller #0 PREEMPT [ 35.330917][ T5769] Tainted: [L]=SOFTLOCKUP [ 35.330921][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 35.330926][ T5769] Call trace: [ 35.330929][ T5769] show_stack+0x2c/0x3c (C) [ 35.330944][ T5769] __dump_stack+0x30/0x40 [ 35.330953][ T5769] dump_stack_lvl+0xd8/0x12c [ 35.330961][ T5769] dump_stack+0x1c/0x28 [ 35.330969][ T5769] should_fail_ex+0x418/0x58c [ 35.330980][ T5769] should_failslab+0xc4/0x120 [ 35.330990][ T5769] __kmalloc_noprof+0x108/0x6c8 [ 35.331001][ T5769] load_msg+0xbc/0x270 [ 35.331013][ T5769] do_msgsnd+0x15c/0xee4 [ 35.331024][ T5769] ksys_msgsnd+0xfc/0x13c [ 35.331035][ T5769] __arm64_sys_msgsnd+0xa8/0xc0 [ 35.331047][ T5769] invoke_syscall+0x98/0x244 [ 35.331056][ T5769] el0_svc_common+0xec/0x23c [ 35.331064][ T5769] do_el0_svc+0x4c/0x5c [ 35.331072][ T5769] el0_svc+0x60/0x1d8 [ 35.331081][ T5769] el0t_64_sync_handler+0x44/0x104 [ 35.331089][ T5769] el0t_64_sync+0x198/0x19c [ 35.334591][ T4734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.391089][ T5775] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 35.478060][ T5790] binder: 5788:5790 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 35.478080][ T5790] binder: 5790 RLIMIT_NICE not set [ 35.478332][ T5790] binder: 5788:5790 BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 35.478341][ T5790] binder: 5788:5790 ioctl c0306201 20000340 returned -22 [ 35.496694][ T5789] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.496717][ T5789] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 35.499184][ T5789] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.500699][ T5789] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.348: bad orphan inode 15 [ 35.500721][ T5789] loop0: lost filesystem error report for type 5 error -117 [ 35.502386][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 35.502402][ C1] EXT4-fs (loop0): initial error at time 35: ext4_orphan_get:1429 [ 35.502415][ C1] EXT4-fs (loop0): last error at time 35: ext4_orphan_get:1429 [ 35.517453][ T5789] ext4_test_bit(bit=14, block=18) = 1 [ 35.517471][ T5789] is_bad_inode(inode)=0 [ 35.517476][ T5789] NEXT_ORPHAN(inode)=1023 [ 35.517480][ T5789] max_ino=32 [ 35.517484][ T5789] i_nlink=0 [ 35.521223][ T5789] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2933: inode #15: comm syz.0.348: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 35.521257][ T5789] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.531682][ T5789] EXT4-fs warning (device loop0): ext4_evict_inode:288: xattr delete (err -117) [ 35.540605][ T5789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 35.553995][ T5797] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 35.565028][ T4738] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.625255][ T5803] netlink: 60 bytes leftover after parsing attributes in process `syz.0.355'. [ 35.625282][ T5803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 35.625294][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 35.646653][ T5805] ip_tables: iptables: counters copy to user failed while replacing table [ 35.848267][ T5842] FAULT_INJECTION: forcing a failure. [ 35.848267][ T5842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.848291][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz.0.372 Tainted: G L syzkaller #0 PREEMPT [ 35.848304][ T5842] Tainted: [L]=SOFTLOCKUP [ 35.848307][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 35.848313][ T5842] Call trace: [ 35.848315][ T5842] show_stack+0x2c/0x3c (C) [ 35.848330][ T5842] __dump_stack+0x30/0x40 [ 35.848339][ T5842] dump_stack_lvl+0xd8/0x12c [ 35.848348][ T5842] dump_stack+0x1c/0x28 [ 35.848355][ T5842] should_fail_ex+0x418/0x58c [ 35.848366][ T5842] should_fail+0x14/0x24 [ 35.848375][ T5842] should_fail_usercopy+0x20/0x30 [ 35.848385][ T5842] _inline_copy_from_user+0x3c/0x188 [ 35.848398][ T5842] memdup_user+0x78/0xec [ 35.848407][ T5842] strndup_user+0x78/0xe0 [ 35.848417][ T5842] __arm64_sys_request_key+0x210/0x37c [ 35.848431][ T5842] invoke_syscall+0x98/0x244 [ 35.848439][ T5842] el0_svc_common+0xec/0x23c [ 35.848447][ T5842] do_el0_svc+0x4c/0x5c [ 35.848455][ T5842] el0_svc+0x60/0x1d8 [ 35.848464][ T5842] el0t_64_sync_handler+0x44/0x104 [ 35.848472][ T5842] el0t_64_sync+0x198/0x19c [ 36.064454][ T5875] process 'syz.1.387' launched './file0' with NULL argv: empty string added [ 36.085145][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 36.172659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 36.172760][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 36.172820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 36.215998][ T5887] netlink: 'syz.0.392': attribute type 5 has an invalid length. [ 36.216015][ T5887] netlink: 'syz.0.392': attribute type 9 has an invalid length. [ 36.216025][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 36.261863][ T5558] rxe_eth0 speed is unknown, defaulting to 1000 [ 36.267889][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 36.313231][ T5905] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.412831][ T5916] ublk_ctrl_add_dev: queue_id is wrong ff7f [ 36.543473][ T5932] lapbether: lapb_data_request error - 4 [ 36.947220][ T5976] EXT4-fs: Ignoring removed nobh option [ 36.957812][ T5976] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.427: corrupted in-inode xattr: e_name out of bounds [ 36.957843][ T5976] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.958081][ T5976] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.427: couldn't read orphan inode 15 (err -117) [ 36.958107][ T5976] loop1: lost filesystem error report for type 5 error -117 [ 36.958687][ T5976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000800 r/w without journal. Quota mode: writeback. [ 36.990768][ T5976] EXT4-fs error (device loop1): ext4_append:79: inode #2: comm syz.1.427: Logical block already allocated [ 37.018359][ T5984] mmap: syz.0.421 (5984) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.028220][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000800. [ 37.066011][ T5986] binder: 5985:5986 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 37.066030][ T5986] binder: 5986 RLIMIT_NICE not set [ 37.174820][ T5997] FAULT_INJECTION: forcing a failure. [ 37.174820][ T5997] name failslab, interval 1, probability 0, space 0, times 0 [ 37.174844][ T5997] CPU: 0 UID: 0 PID: 5997 Comm: syz.4.435 Tainted: G L syzkaller #0 PREEMPT [ 37.174859][ T5997] Tainted: [L]=SOFTLOCKUP [ 37.174862][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 37.174868][ T5997] Call trace: [ 37.174871][ T5997] show_stack+0x2c/0x3c (C) [ 37.174888][ T5997] __dump_stack+0x30/0x40 [ 37.174898][ T5997] dump_stack_lvl+0xd8/0x12c [ 37.174906][ T5997] dump_stack+0x1c/0x28 [ 37.174914][ T5997] should_fail_ex+0x418/0x58c [ 37.174927][ T5997] should_failslab+0xc4/0x120 [ 37.174939][ T5997] __kmalloc_cache_noprof+0x94/0x5fc [ 37.174952][ T5997] assoc_array_insert+0x2f0/0x1d60 [ 37.174962][ T5997] __key_link_begin+0xc4/0x1c4 [ 37.174975][ T5997] key_link+0x68/0x1cc [ 37.174986][ T5997] call_sbin_request_key+0x390/0x9cc [ 37.174995][ T5997] request_key_and_link+0xfa8/0x1120 [ 37.175003][ T5997] __arm64_sys_request_key+0x2d4/0x37c [ 37.175015][ T5997] invoke_syscall+0x98/0x244 [ 37.175025][ T5997] el0_svc_common+0xec/0x23c [ 37.175033][ T5997] do_el0_svc+0x4c/0x5c [ 37.175042][ T5997] el0_svc+0x60/0x1d8 [ 37.175051][ T5997] el0t_64_sync_handler+0x44/0x104 [ 37.175059][ T5997] el0t_64_sync+0x198/0x19c [ 37.214712][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 37.219813][ T6001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 37.220037][ T6001] block device autoloading is deprecated and will be removed. [ 37.258688][ T6001] md: md0 stopped. [ 37.281727][ T6014] netlink: 84 bytes leftover after parsing attributes in process `syz.2.443'. [ 37.287084][ T6014] vlan1: entered allmulticast mode [ 37.287106][ T6014] veth0_vlan: entered allmulticast mode [ 37.296611][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.297092][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.316686][ T4741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 37.337916][ T30] audit: type=1326 audit(37.310:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6010 comm="syz.1.441" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa397a228 code=0x0 [ 37.542960][ T6059] FAULT_INJECTION: forcing a failure. [ 37.542960][ T6059] name failslab, interval 1, probability 0, space 0, times 0 [ 37.542983][ T6059] CPU: 1 UID: 0 PID: 6059 Comm: syz.0.464 Tainted: G L syzkaller #0 PREEMPT [ 37.542996][ T6059] Tainted: [L]=SOFTLOCKUP [ 37.542999][ T6059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 37.543005][ T6059] Call trace: [ 37.543008][ T6059] show_stack+0x2c/0x3c (C) [ 37.543023][ T6059] __dump_stack+0x30/0x40 [ 37.543032][ T6059] dump_stack_lvl+0xd8/0x12c [ 37.543040][ T6059] dump_stack+0x1c/0x28 [ 37.543048][ T6059] should_fail_ex+0x418/0x58c [ 37.543059][ T6059] should_failslab+0xc4/0x120 [ 37.543069][ T6059] kmem_cache_alloc_noprof+0x94/0x5d4 [ 37.543079][ T6059] do_getname+0x48/0x234 [ 37.543090][ T6059] getname_flags+0x2c/0x3c [ 37.543100][ T6059] vfs_fstatat+0x48/0xd0 [ 37.543107][ T6059] __arm64_sys_newfstatat+0x134/0x1c8 [ 37.543116][ T6059] invoke_syscall+0x98/0x244 [ 37.543125][ T6059] el0_svc_common+0xec/0x23c [ 37.543133][ T6059] do_el0_svc+0x4c/0x5c [ 37.543141][ T6059] el0_svc+0x60/0x1d8 [ 37.543150][ T6059] el0t_64_sync_handler+0x44/0x104 [ 37.543158][ T6059] el0t_64_sync+0x198/0x19c [ 37.613516][ T1100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 37.659232][ T6075] set_capacity_and_notify: 6 callbacks suppressed [ 37.659246][ T6075] loop2: detected capacity change from 0 to 512 [ 37.659754][ T6075] EXT4-fs: Ignoring removed nobh option [ 37.668739][ T6075] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.470: corrupted in-inode xattr: e_name out of bounds [ 37.668762][ T6075] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.668967][ T6075] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.470: couldn't read orphan inode 15 (err -117) [ 37.668979][ T6075] loop2: lost filesystem error report for type 5 error -117 [ 37.669655][ T6075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000800 r/w without journal. Quota mode: writeback. [ 37.697853][ T6075] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.470: Logical block already allocated [ 37.714219][ T6080] FAULT_INJECTION: forcing a failure. [ 37.714219][ T6080] name failslab, interval 1, probability 0, space 0, times 0 [ 37.714240][ T6080] CPU: 1 UID: 0 PID: 6080 Comm: syz.3.472 Tainted: G L syzkaller #0 PREEMPT [ 37.714252][ T6080] Tainted: [L]=SOFTLOCKUP [ 37.714255][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 37.714260][ T6080] Call trace: [ 37.714263][ T6080] show_stack+0x2c/0x3c (C) [ 37.714278][ T6080] __dump_stack+0x30/0x40 [ 37.714287][ T6080] dump_stack_lvl+0xd8/0x12c [ 37.714295][ T6080] dump_stack+0x1c/0x28 [ 37.714303][ T6080] should_fail_ex+0x418/0x58c [ 37.714314][ T6080] should_failslab+0xc4/0x120 [ 37.714324][ T6080] kmem_cache_alloc_noprof+0x94/0x5d4 [ 37.714334][ T6080] create_new_namespaces+0x48/0x50c [ 37.714347][ T6080] unshare_nsproxy_namespaces+0x120/0x170 [ 37.714359][ T6080] ksys_unshare+0x438/0x6e0 [ 37.714370][ T6080] __arm64_sys_unshare+0x40/0x54 [ 37.714380][ T6080] invoke_syscall+0x98/0x244 [ 37.714389][ T6080] el0_svc_common+0xec/0x23c [ 37.714398][ T6080] do_el0_svc+0x4c/0x5c [ 37.714406][ T6080] el0_svc+0x60/0x1d8 [ 37.714414][ T6080] el0t_64_sync_handler+0x44/0x104 [ 37.714422][ T6080] el0t_64_sync+0x198/0x19c [ 37.722179][ T4735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000800. [ 37.771362][ T6084] netlink: 44 bytes leftover after parsing attributes in process `syz.2.473'. [ 37.811390][ T6091] loop2: detected capacity change from 0 to 1024 [ 37.815028][ T6091] EXT4-fs: Ignoring removed oldalloc option [ 37.815040][ T6091] EXT4-fs: Ignoring removed orlov option [ 37.830096][ T6091] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.836463][ T6095] input: syz1 as /devices/virtual/input/input6 [ 37.851940][ T4735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.912249][ T6109] FAULT_INJECTION: forcing a failure. [ 37.912249][ T6109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 37.912270][ T6109] CPU: 1 UID: 0 PID: 6109 Comm: syz.0.486 Tainted: G L syzkaller #0 PREEMPT [ 37.912282][ T6109] Tainted: [L]=SOFTLOCKUP [ 37.912285][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 37.912290][ T6109] Call trace: [ 37.912293][ T6109] show_stack+0x2c/0x3c (C) [ 37.912308][ T6109] __dump_stack+0x30/0x40 [ 37.912321][ T6109] dump_stack_lvl+0xd8/0x12c [ 37.912329][ T6109] dump_stack+0x1c/0x28 [ 37.912337][ T6109] should_fail_ex+0x418/0x58c [ 37.912348][ T6109] should_fail+0x14/0x24 [ 37.912357][ T6109] should_fail_usercopy+0x20/0x30 [ 37.912367][ T6109] bpf_verifier_vlog+0x81c/0xbc0 [ 37.912377][ T6109] btf_verifier_log+0x120/0x1a0 [ 37.912387][ T6109] btf_func_proto_log+0x84/0x7a0 [ 37.912397][ T6109] __btf_verifier_log_type+0x3bc/0x5e4 [ 37.912407][ T6109] btf_func_proto_check_meta+0x118/0x154 [ 37.912419][ T6109] btf_check_all_metas+0x294/0x84c [ 37.912428][ T6109] btf_parse_type_sec+0x104/0x1004 [ 37.912439][ T6109] btf_new_fd+0x33c/0x7a8 [ 37.912448][ T6109] bpf_btf_load+0x144/0x190 [ 37.912460][ T6109] __sys_bpf+0x7f0/0x82c [ 37.912470][ T6109] __arm64_sys_bpf+0xd0/0xec [ 37.912481][ T6109] invoke_syscall+0x98/0x244 [ 37.912490][ T6109] el0_svc_common+0xec/0x23c [ 37.912498][ T6109] do_el0_svc+0x4c/0x5c [ 37.912506][ T6109] el0_svc+0x60/0x1d8 [ 37.912515][ T6109] el0t_64_sync_handler+0x44/0x104 [ 37.912523][ T6109] el0t_64_sync+0x198/0x19c [ 37.977551][ T6117] input: syz1 as /devices/virtual/input/input7 [ 37.999380][ T6121] binder: 6120:6121 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 37.999398][ T6121] binder: 6121 RLIMIT_NICE not set [ 38.072233][ T6133] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 38.072251][ T6133] block device autoloading is deprecated and will be removed. [ 38.124586][ T6133] md: md2 stopped. [ 38.255027][ T6155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.255135][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.336962][ T1100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.500209][ T6180] FAULT_INJECTION: forcing a failure. [ 38.500209][ T6180] name failslab, interval 1, probability 0, space 0, times 0 [ 38.500232][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: syz.3.517 Tainted: G L syzkaller #0 PREEMPT [ 38.500244][ T6180] Tainted: [L]=SOFTLOCKUP [ 38.500248][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 38.500253][ T6180] Call trace: [ 38.500256][ T6180] show_stack+0x2c/0x3c (C) [ 38.500272][ T6180] __dump_stack+0x30/0x40 [ 38.500282][ T6180] dump_stack_lvl+0xd8/0x12c [ 38.500290][ T6180] dump_stack+0x1c/0x28 [ 38.500298][ T6180] should_fail_ex+0x418/0x58c [ 38.500310][ T6180] should_failslab+0xc4/0x120 [ 38.500320][ T6180] kmem_cache_alloc_noprof+0x94/0x5d4 [ 38.500332][ T6180] do_getname+0x48/0x234 [ 38.500343][ T6180] getname_flags+0x2c/0x3c [ 38.500352][ T6180] vfs_fstatat+0x48/0xd0 [ 38.500361][ T6180] __arm64_sys_newfstatat+0x134/0x1c8 [ 38.500369][ T6180] invoke_syscall+0x98/0x244 [ 38.500378][ T6180] el0_svc_common+0xec/0x23c [ 38.500387][ T6180] do_el0_svc+0x4c/0x5c [ 38.500395][ T6180] el0_svc+0x60/0x1d8 [ 38.500404][ T6180] el0t_64_sync_handler+0x44/0x104 [ 38.500412][ T6180] el0t_64_sync+0x198/0x19c [ 38.518359][ T6183] loop4: detected capacity change from 0 to 512 [ 38.521219][ T6183] FAT-fs (loop4): Invalid FSINFO signature: 0x00000852, 0x61417272 (sector = 1) [ 38.672960][ T6205] input: syz1 as /devices/virtual/input/input8 [ 38.706157][ T6209] loop4: detected capacity change from 0 to 512 [ 38.733658][ T6209] EXT4-fs (loop4): 1 truncate cleaned up [ 38.734719][ T6209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.749880][ T6209] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.532: bg 0: block 465: padding at end of block bitmap is not set [ 38.750752][ T6209] EXT4-fs (loop4): Remounting filesystem read-only [ 38.763874][ T4737] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.839406][ T6218] loop3: detected capacity change from 0 to 1024 [ 38.880975][ T6218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.904804][ T4734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.178622][ T6250] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 39.342927][ T6275] loop3: detected capacity change from 0 to 512 [ 39.347332][ T6275] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 39.347356][ T6275] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.349686][ T6275] EXT4-fs (loop3): 1 truncate cleaned up [ 39.350130][ T6275] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.381049][ T4734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.557982][ T6304] loop3: detected capacity change from 0 to 1024 [ 39.565006][ T6304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.652145][ T4734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.811516][ T6337] loop3: detected capacity change from 0 to 512 [ 39.825233][ T6337] EXT4-fs (loop3): 1 truncate cleaned up [ 39.825750][ T6337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.844650][ T6337] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.587: bg 0: block 465: padding at end of block bitmap is not set [ 39.844968][ T6337] EXT4-fs (loop3): Remounting filesystem read-only [ 39.856950][ T4734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.911644][ T6350] loop2: detected capacity change from 0 to 256 [ 39.921613][ T6350] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.977823][ T6356] loop0: detected capacity change from 0 to 512 [ 39.986832][ T6359] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779264) [ 39.986851][ T6359] FAT-fs (loop2): Filesystem has been set read-only [ 39.988714][ T6359] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 39.988746][ T6359] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 39.990096][ T6359] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 39.990124][ T6359] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 39.990152][ T6359] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 39.990167][ T6359] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 39.990193][ T6359] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 39.990209][ T6359] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 40.019605][ T6356] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 40.046539][ T6356] EXT4-fs (loop0): 1 truncate cleaned up [ 40.047033][ T6356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.078965][ T6356] __nla_validate_parse: 5 callbacks suppressed [ 40.078983][ T6356] netlink: 204 bytes leftover after parsing attributes in process `syz.0.596'. [ 40.115065][ T4738] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.127207][ T6371] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 40.318079][ T6403] tmpfs: Too small a size for current use [ 40.406495][ T6410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.423802][ T6410] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 40.424874][ T6410] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 40.424892][ T6410] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.424892][ T6410] [ 40.424900][ T6410] EXT4-fs (loop0): Total free blocks count 0 [ 40.424907][ T6410] EXT4-fs (loop0): Free/Dirty block details [ 40.424928][ T6410] EXT4-fs (loop0): free_blocks=4096 [ 40.424943][ T6410] EXT4-fs (loop0): dirty_blocks=32 [ 40.424949][ T6410] EXT4-fs (loop0): Block reservation details [ 40.424955][ T6410] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 40.448026][ T1197] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.555184][ T6428] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 40.555197][ T6428] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.559418][ T6428] EXT4-fs (loop0): 1 truncate cleaned up [ 40.567987][ T6428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.629552][ T6433] FAULT_INJECTION: forcing a failure. [ 40.629552][ T6433] name failslab, interval 1, probability 0, space 0, times 0 [ 40.629696][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: syz.2.630 Tainted: G L syzkaller #0 PREEMPT [ 40.629716][ T6433] Tainted: [L]=SOFTLOCKUP [ 40.629719][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 40.629725][ T6433] Call trace: [ 40.629729][ T6433] show_stack+0x2c/0x3c (C) [ 40.629745][ T6433] __dump_stack+0x30/0x40 [ 40.629755][ T6433] dump_stack_lvl+0xd8/0x12c [ 40.629763][ T6433] dump_stack+0x1c/0x28 [ 40.629771][ T6433] should_fail_ex+0x418/0x58c [ 40.629782][ T6433] should_failslab+0xc4/0x120 [ 40.629792][ T6433] kmem_cache_alloc_noprof+0x94/0x5d4 [ 40.629802][ T6433] prepare_creds+0x34/0x7d0 [ 40.629811][ T6433] __sys_setresgid+0x414/0x7ac [ 40.629824][ T6433] __arm64_sys_setresgid+0x84/0x98 [ 40.629836][ T6433] invoke_syscall+0x98/0x244 [ 40.629845][ T6433] el0_svc_common+0xec/0x23c [ 40.629854][ T6433] do_el0_svc+0x4c/0x5c [ 40.629862][ T6433] el0_svc+0x60/0x1d8 [ 40.629871][ T6433] el0t_64_sync_handler+0x44/0x104 [ 40.629879][ T6433] el0t_64_sync+0x198/0x19c [ 40.665193][ T4738] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.812826][ C0] net_ratelimit: 27 callbacks suppressed [ 40.812844][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 40.817427][ T4879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 41.035835][ T6455] ip_tables: iptables: counters copy to user failed while replacing table [ 41.046433][ T6453] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 41.048858][ T6453] EXT4-fs (loop3): 1 truncate cleaned up [ 41.049330][ T6453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.078774][ T6453] netlink: 204 bytes leftover after parsing attributes in process `syz.3.639'. [ 41.097997][ T4734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.353803][ T6494] tmpfs: Too small a size for current use [ 41.390684][ T6493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.457648][ T6493] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 41.458090][ T6493] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 41.458112][ T6493] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.458112][ T6493] [ 41.458120][ T6493] EXT4-fs (loop1): Total free blocks count 0 [ 41.458128][ T6493] EXT4-fs (loop1): Free/Dirty block details [ 41.458137][ T6493] EXT4-fs (loop1): free_blocks=4096 [ 41.458219][ T6493] EXT4-fs (loop1): dirty_blocks=32 [ 41.458227][ T6493] EXT4-fs (loop1): Block reservation details [ 41.458234][ T6493] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 41.468301][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 41.485334][ T1197] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.557574][ T6513] netlink: 'syz.3.660': attribute type 3 has an invalid length. [ 41.636520][ T1428] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.678076][ T6524] misc userio: Begin command sent, but we're already running [ 41.679831][ T6521] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.724844][ T4744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 41.725567][ T1428] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.727835][ T4744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 41.728154][ T4744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 41.728661][ T4744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 41.729617][ T4744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 41.756761][ T6531] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 41.756782][ T6531] FAT-fs (loop1): Filesystem has been set read-only [ 41.756875][ T6531] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 41.756892][ T6531] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 41.756927][ T6531] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 41.756942][ T6531] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 41.756963][ T6531] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 41.757008][ T6531] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 41.757031][ T6531] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 41.757046][ T6531] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 41.806269][ T1428] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.859724][ T6526] rxe_eth0 speed is unknown, defaulting to 1000 [ 41.904642][ T1428] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.953708][ T6544] bond0: invalid NS target :: specified for addition [ 41.954813][ T6544] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 42.060104][ T1428] bridge_slave_1: left allmulticast mode [ 42.060130][ T1428] bridge_slave_1: left promiscuous mode [ 42.060629][ T1428] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.076264][ T1428] bridge_slave_0: left allmulticast mode [ 42.076288][ T1428] bridge_slave_0: left promiscuous mode [ 42.076396][ T1428] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.112663][ T6558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.163432][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. 8[ 42.229798][ T1428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.264002][ T1428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.274848][ T1428] bond0 (unregistering): Released all slaves [ 42.280979][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.281046][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.281098][ T6526] bridge_slave_0: entered allmulticast mode [ 42.281527][ T6526] bridge_slave_0: entered promiscuous mode [ 42.283959][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.283984][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.284039][ T6526] bridge_slave_1: entered allmulticast mode [ 42.284531][ T6526] bridge_slave_1: entered promiscuous mode [ 42.295291][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 42.306293][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.306968][ T6570] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.308763][ T6570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.336869][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.337560][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.339162][ T6570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.339176][ T6570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.340938][ T6570] veth1_vlan: left promiscuous mode [ 42.341262][ T6570] veth0_vlan: left promiscuous mode [ 42.341885][ T6570] veth0_vlan: entered promiscuous mode [ 42.343447][ T6570] veth1_vlan: entered promiscuous mode [ 42.346261][ T6570] veth1_macvtap: left promiscuous mode [ 42.346803][ T6570] veth0_macvtap: left promiscuous mode [ 42.347182][ T6570] veth0_macvtap: entered promiscuous mode [ 42.347483][ T6570] veth1_macvtap: entered promiscuous mode [ 42.349170][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.349686][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.350168][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.350639][ T6570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.371408][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.371438][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.374482][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.374510][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.413935][ T374] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.413963][ T374] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.415409][ T374] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.415429][ T374] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.415452][ T374] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.415462][ T374] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.415480][ T374] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 42.415489][ T374] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.427720][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 42.552565][ T6575] syzkaller1: entered promiscuous mode [ 42.553544][ T6575] syzkaller1: entered allmulticast mode [ 42.559376][ T6526] team0: Port device team_slave_0 added [ 42.560241][ T6526] team0: Port device team_slave_1 added [ 42.572018][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 42.572030][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.572043][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 42.625631][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 42.625645][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 42.625658][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 42.632004][ T4427] 8021q: adding VLAN 0 to HW filter on device eth0 [ 42.673410][ T6526] hsr_slave_0: entered promiscuous mode [ 42.673728][ T6526] hsr_slave_1: entered promiscuous mode [ 42.673920][ T6526] debugfs: 'hsr0' already exists in 'hsr' [ 42.673930][ T6526] Cannot create hsr debugfs directory [ 42.732556][ T4879] atkbd serio1: keyboard reset failed on [ 42.805160][ T6526] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.808240][ T6526] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 42.808973][ T6526] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.823414][ T6526] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 42.824575][ T6526] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.831900][ T6526] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 42.832274][ T6526] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.842180][ T6526] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 42.850997][ T1428] hsr_slave_0: left promiscuous mode [ 42.851303][ T1428] hsr_slave_1: left promiscuous mode [ 42.851608][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.851630][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.851994][ T1428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.852003][ T1428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.860428][ T1428] veth1_macvtap: left promiscuous mode [ 42.860466][ T1428] veth0_macvtap: left promiscuous mode [ 42.860527][ T1428] veth1_vlan: left promiscuous mode [ 42.860574][ T1428] veth0_vlan: left promiscuous mode [ 42.958208][ T1428] team0 (unregistering): Port device team_slave_1 removed [ 42.962147][ T1428] team0 (unregistering): Port device team_slave_0 removed [ 43.011698][ T4427] 8021q: adding VLAN 0 to HW filter on device eth1 [ 43.050869][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.063904][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.067881][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.067913][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.071359][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.071385][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.093901][ T6526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.093919][ T6526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.225713][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.229487][ T4427] 8021q: adding VLAN 0 to HW filter on device eth2 [ 43.296830][ T6526] veth0_vlan: entered promiscuous mode [ 43.298917][ T6526] veth1_vlan: entered promiscuous mode [ 43.312046][ T6526] veth0_macvtap: entered promiscuous mode [ 43.316713][ T6526] veth1_macvtap: entered promiscuous mode [ 43.321416][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 syzkaller syzkaller login: [ 43.329380][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.332883][ T3005] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.333551][ T3005] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.333587][ T3005] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.333624][ T3005] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.380267][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.380284][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.408145][ T1197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.408159][ T1197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.428985][ T4427] 8021q: adding VLAN 0 to HW filter on device eth3 [ 43.464550][ T6669] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 43.548403][ T6683] bond0: invalid NS target ff00:: specified for addition [ 43.549376][ T6683] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 43.706420][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 43.747930][ T6707] FAULT_INJECTION: forcing a failure. [ 43.747930][ T6707] name failslab, interval 1, probability 0, space 0, times 0 [ 43.747955][ T6707] CPU: 0 UID: 0 PID: 6707 Comm: syz.3.702 Tainted: G L syzkaller #0 PREEMPT [ 43.747968][ T6707] Tainted: [L]=SOFTLOCKUP [ 43.747972][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 43.747977][ T6707] Call trace: [ 43.747980][ T6707] show_stack+0x2c/0x3c (C) [ 43.747996][ T6707] __dump_stack+0x30/0x40 [ 43.748005][ T6707] dump_stack_lvl+0xd8/0x12c [ 43.748013][ T6707] dump_stack+0x1c/0x28 [ 43.748021][ T6707] should_fail_ex+0x418/0x58c [ 43.748032][ T6707] should_failslab+0xc4/0x120 [ 43.748042][ T6707] __kmalloc_cache_noprof+0x94/0x5fc [ 43.748052][ T6707] alloc_vfsmnt+0x84/0x48c [ 43.748065][ T6707] clone_mnt+0x5c/0x6c0 [ 43.748076][ T6707] copy_mnt_ns+0x36c/0xb14 [ 43.748084][ T6707] create_new_namespaces+0xbc/0x50c [ 43.748096][ T6707] unshare_nsproxy_namespaces+0x120/0x170 [ 43.748112][ T6707] ksys_unshare+0x438/0x6e0 [ 43.748123][ T6707] __arm64_sys_unshare+0x40/0x54 [ 43.748134][ T6707] invoke_syscall+0x98/0x244 [ 43.748143][ T6707] el0_svc_common+0xec/0x23c [ 43.748152][ T6707] do_el0_svc+0x4c/0x5c [ 43.748160][ T6707] el0_svc+0x60/0x1d8 [ 43.748169][ T6707] el0t_64_sync_handler+0x44/0x104 [ 43.748177][ T6707] el0t_64_sync+0x198/0x19c [ 43.772654][ T4744] Bluetooth: hci3: command tx timeout [ 43.939983][ T6731] syzkaller1: entered promiscuous mode [ 43.940002][ T6731] syzkaller1: entered allmulticast mode [ 44.324938][ T6733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 44.360133][ T6737] set_capacity_and_notify: 7 callbacks suppressed [ 44.360148][ T6737] loop3: detected capacity change from 0 to 512 [ 44.369028][ T6737] EXT4-fs (loop3): 1 truncate cleaned up [ 44.369502][ T6737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.496969][ T6744] netlink: 28 bytes leftover after parsing attributes in process `syz.5.719'. [ 44.496986][ T6744] netlink: 36 bytes leftover after parsing attributes in process `syz.5.719'. [ 44.497265][ T6744] vlan0: entered promiscuous mode [ 44.540688][ T4734] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.607705][ T6757] random: crng reseeded on system resumption [ 44.611740][ T6757] FAULT_INJECTION: forcing a failure. [ 44.611740][ T6757] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 44.611765][ T6757] CPU: 1 UID: 0 PID: 6757 Comm: syz.2.725 Tainted: G L syzkaller #0 PREEMPT [ 44.611778][ T6757] Tainted: [L]=SOFTLOCKUP [ 44.611782][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.611787][ T6757] Call trace: [ 44.611790][ T6757] show_stack+0x2c/0x3c (C) [ 44.611805][ T6757] __dump_stack+0x30/0x40 [ 44.611814][ T6757] dump_stack_lvl+0xd8/0x12c [ 44.611822][ T6757] dump_stack+0x1c/0x28 [ 44.611830][ T6757] should_fail_ex+0x418/0x58c [ 44.611841][ T6757] should_fail_alloc_page+0xec/0x10c [ 44.611851][ T6757] prepare_alloc_pages+0x194/0x484 [ 44.611861][ T6757] __alloc_frozen_pages_noprof+0x180/0x578 [ 44.611872][ T6757] alloc_pages_mpol+0x1fc/0x3d0 [ 44.611883][ T6757] alloc_frozen_pages_noprof+0xc4/0x10c [ 44.611894][ T6757] alloc_pages_noprof+0x30/0x148 [ 44.611905][ T6757] get_free_pages_noprof+0x1c/0xbc [ 44.611915][ T6757] get_zeroed_page_noprof+0x18/0x24 [ 44.611926][ T6757] get_image_page+0x30/0x1f8 [ 44.611936][ T6757] alloc_rtree_node+0x48/0xac [ 44.611946][ T6757] memory_bm_create+0x3ec/0x60c [ 44.611956][ T6757] create_basic_memory_bitmaps+0xd0/0x34c [ 44.611966][ T6757] snapshot_open+0x18c/0x270 [ 44.611977][ T6757] misc_open+0x2dc/0x338 [ 44.611988][ T6757] chrdev_open+0x398/0x3e8 [ 44.612001][ T6757] do_dentry_open+0x5c4/0xfbc [ 44.612009][ T6757] vfs_open+0x44/0x2dc [ 44.612017][ T6757] path_openat+0x1084/0x18f0 [ 44.612028][ T6757] do_file_open+0x1c8/0x2e8 [ 44.612040][ T6757] do_sys_openat2+0x114/0x1e8 [ 44.612048][ T6757] do_sys_open+0xb0/0xe0 [ 44.612056][ T6757] __arm64_sys_openat+0xa8/0xc4 [ 44.612065][ T6757] invoke_syscall+0x98/0x244 [ 44.612074][ T6757] el0_svc_common+0xec/0x23c [ 44.612082][ T6757] do_el0_svc+0x4c/0x5c [ 44.612090][ T6757] el0_svc+0x60/0x1d8 [ 44.612099][ T6757] el0t_64_sync_handler+0x44/0x104 [ 44.612107][ T6757] el0t_64_sync+0x198/0x19c [ 44.714238][ T6765] binder: 6763:6765 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 44.714258][ T6765] binder: 6765 RLIMIT_NICE not set [ 44.715438][ T6765] binder: 6763:6765 BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 44.715452][ T6765] binder: 6763:6765 ioctl c0306201 20000340 returned -22 [ 44.863565][ T6786] FAULT_INJECTION: forcing a failure. [ 44.863565][ T6786] name failslab, interval 1, probability 0, space 0, times 0 [ 44.863593][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.1.736 Tainted: G L syzkaller #0 PREEMPT [ 44.863609][ T6786] Tainted: [L]=SOFTLOCKUP [ 44.863618][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 44.863625][ T6786] Call trace: [ 44.863629][ T6786] show_stack+0x2c/0x3c (C) [ 44.863647][ T6786] __dump_stack+0x30/0x40 [ 44.863658][ T6786] dump_stack_lvl+0xd8/0x12c [ 44.863667][ T6786] dump_stack+0x1c/0x28 [ 44.863675][ T6786] should_fail_ex+0x418/0x58c [ 44.863687][ T6786] should_failslab+0xc4/0x120 [ 44.863697][ T6786] __kmalloc_noprof+0x108/0x6c8 [ 44.863708][ T6786] load_msg+0xbc/0x270 [ 44.863720][ T6786] do_msgsnd+0x15c/0xee4 [ 44.863731][ T6786] ksys_msgsnd+0xfc/0x13c [ 44.863742][ T6786] __arm64_sys_msgsnd+0xa8/0xc0 [ 44.863754][ T6786] invoke_syscall+0x98/0x244 [ 44.863763][ T6786] el0_svc_common+0xec/0x23c [ 44.863771][ T6786] do_el0_svc+0x4c/0x5c [ 44.863779][ T6786] el0_svc+0x60/0x1d8 [ 44.863789][ T6786] el0t_64_sync_handler+0x44/0x104 [ 44.863797][ T6786] el0t_64_sync+0x198/0x19c [ 44.960756][ T30] audit: type=1400 audit(44.930:6): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=w pid=6791 comm="syz.1.740" dev="tmpfs" ino=51 [ 45.044580][ T6807] loop5: detected capacity change from 0 to 2048 [ 45.059697][ T6807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.094191][ T6806] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 45.096174][ T6806] EXT4-fs (loop5): Remounting filesystem read-only [ 45.108278][ T6526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.137206][ T6818] netlink: 60 bytes leftover after parsing attributes in process `syz.5.750'. [ 45.137231][ T6818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.750'. [ 45.137242][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.750'. [ 45.179092][ T30] audit: type=1400 audit(45.150:7): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=w pid=6823 comm="syz.0.754" dev="tmpfs" ino=52 [ 45.230942][ T6832] FAULT_INJECTION: forcing a failure. [ 45.230942][ T6832] name failslab, interval 1, probability 0, space 0, times 0 [ 45.230963][ T6832] CPU: 0 UID: 0 PID: 6832 Comm: syz.5.758 Tainted: G L syzkaller #0 PREEMPT [ 45.230976][ T6832] Tainted: [L]=SOFTLOCKUP [ 45.230980][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.230985][ T6832] Call trace: [ 45.230988][ T6832] show_stack+0x2c/0x3c (C) [ 45.231005][ T6832] __dump_stack+0x30/0x40 [ 45.231014][ T6832] dump_stack_lvl+0xd8/0x12c [ 45.231022][ T6832] dump_stack+0x1c/0x28 [ 45.231031][ T6832] should_fail_ex+0x418/0x58c [ 45.231041][ T6832] should_failslab+0xc4/0x120 [ 45.231052][ T6832] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 45.231063][ T6832] kvasprintf+0x110/0x1e4 [ 45.231072][ T6832] diag_vprint_indented+0xd8/0x19c [ 45.231084][ T6832] bpf_diag_program_structure+0x148/0x250 [ 45.231095][ T6832] check_subprogs+0x5c4/0x674 [ 45.231105][ T6832] bpf_check+0x1a04/0x2414 [ 45.231113][ T6832] bpf_prog_load+0xf4c/0x1554 [ 45.231124][ T6832] __sys_bpf+0x7d4/0x82c [ 45.231135][ T6832] __arm64_sys_bpf+0xd0/0xec [ 45.231145][ T6832] invoke_syscall+0x98/0x244 [ 45.231154][ T6832] el0_svc_common+0xec/0x23c [ 45.231162][ T6832] do_el0_svc+0x4c/0x5c [ 45.231170][ T6832] el0_svc+0x60/0x1d8 [ 45.231178][ T6832] el0t_64_sync_handler+0x44/0x104 [ 45.231186][ T6832] el0t_64_sync+0x198/0x19c [ 45.438301][ T6863] FAULT_INJECTION: forcing a failure. [ 45.438301][ T6863] name failslab, interval 1, probability 0, space 0, times 0 [ 45.438323][ T6863] CPU: 1 UID: 0 PID: 6863 Comm: syz.3.774 Tainted: G L syzkaller #0 PREEMPT [ 45.438336][ T6863] Tainted: [L]=SOFTLOCKUP [ 45.438339][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 45.438345][ T6863] Call trace: [ 45.438348][ T6863] show_stack+0x2c/0x3c (C) [ 45.438364][ T6863] __dump_stack+0x30/0x40 [ 45.438373][ T6863] dump_stack_lvl+0xd8/0x12c [ 45.438382][ T6863] dump_stack+0x1c/0x28 [ 45.438389][ T6863] should_fail_ex+0x418/0x58c [ 45.438400][ T6863] should_failslab+0xc4/0x120 [ 45.438410][ T6863] kmem_cache_alloc_noprof+0x94/0x5d4 [ 45.438421][ T6863] prepare_creds+0x34/0x7d0 [ 45.438430][ T6863] lookup_user_key+0x1a4/0xd4c [ 45.438439][ T6863] __arm64_sys_request_key+0x264/0x37c [ 45.438451][ T6863] invoke_syscall+0x98/0x244 [ 45.438460][ T6863] el0_svc_common+0xec/0x23c [ 45.438468][ T6863] do_el0_svc+0x4c/0x5c [ 45.438476][ T6863] el0_svc+0x60/0x1d8 [ 45.438485][ T6863] el0t_64_sync_handler+0x44/0x104 [ 45.438493][ T6863] el0t_64_sync+0x198/0x19c [ 45.592218][ T6878] vxcan0: tx drop: invalid da for name 0x0000000000010000 [ 45.852542][ T4744] Bluetooth: hci3: command tx timeout [ 46.134519][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.254413][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.794'. [ 46.293060][ T6917] loop3: detected capacity change from 0 to 256 [ 46.393162][ T6933] ublk_ctrl_add_dev: queue_id is wrong ff7f [ 46.396244][ T6932] loop2: detected capacity change from 0 to 512 [ 46.420278][ T6927] Injecting memory failure for pfn 0x138201 at process virtual address 0x20001000 [ 46.432217][ T6932] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.453362][ T6927] Memory failure: 0x138201: recovery action for dirty LRU page: Recovered [ 46.454504][ T6939] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 46.465903][ T4735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.514794][ T6941] loop2: detected capacity change from 0 to 2048 [ 46.525732][ T6947] loop0: detected capacity change from 0 to 512 [ 46.531579][ T6941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.568572][ T6940] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 46.570168][ T6940] EXT4-fs (loop2): Remounting filesystem read-only [ 46.603006][ T6947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.609524][ T4735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.677204][ T4738] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.702452][ T6965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.702708][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.740325][ T6972] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 46.761265][ T6974] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 46.797654][ T6980] loop1: detected capacity change from 0 to 256 [ 46.892697][ T5562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 46.894375][ T6992] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 46.931284][ T6997] netlink: 168 bytes leftover after parsing attributes in process `syz.0.831'. [ 46.965534][ T7002] loop0: detected capacity change from 0 to 128 [ 47.069575][ T7007] loop0: detected capacity change from 0 to 512 [ 47.071191][ T7007] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 47.071203][ T7007] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.086568][ T7007] EXT4-fs (loop0): 1 truncate cleaned up [ 47.087043][ T7007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.087818][ T7010] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 47.115006][ T7007] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 47.117466][ T7007] EXT4-fs (loop0): Remounting filesystem read-only [ 47.133122][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 47.155012][ T4738] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.175542][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'. [ 47.203944][ T7023] rxe_eth0 speed is unknown, defaulting to 1000 [ 47.298800][ T7037] syzkaller1: entered promiscuous mode [ 47.298820][ T7037] syzkaller1: entered allmulticast mode [ 47.453339][ T5554] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 47.459489][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.852'. [ 47.602521][ T5554] usb 1-1: Using ep0 maxpacket: 8 [ 47.604356][ T5554] usb 1-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 47.605754][ T5554] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 47.605767][ T5554] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 47.607201][ T5554] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.607211][ T5554] usb 1-1: Product: syz [ 47.607218][ T5554] usb 1-1: Manufacturer: syz [ 47.607225][ T5554] usb 1-1: SerialNumber: syz [ 47.644021][ T7065] FAULT_INJECTION: forcing a failure. [ 47.644021][ T7065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.644046][ T7065] CPU: 0 UID: 0 PID: 7065 Comm: syz.5.861 Tainted: G L syzkaller #0 PREEMPT [ 47.644059][ T7065] Tainted: [L]=SOFTLOCKUP [ 47.644063][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 47.644069][ T7065] Call trace: [ 47.644072][ T7065] show_stack+0x2c/0x3c (C) [ 47.644091][ T7065] __dump_stack+0x30/0x40 [ 47.644100][ T7065] dump_stack_lvl+0xd8/0x12c [ 47.644109][ T7065] dump_stack+0x1c/0x28 [ 47.644118][ T7065] should_fail_ex+0x418/0x58c [ 47.644130][ T7065] should_fail+0x14/0x24 [ 47.644139][ T7065] should_fail_usercopy+0x20/0x30 [ 47.644150][ T7065] _inline_copy_from_user+0x3c/0x174 [ 47.644161][ T7065] __arm64_sys_clock_adjtime+0xf8/0x2b0 [ 47.644172][ T7065] invoke_syscall+0x98/0x244 [ 47.644181][ T7065] el0_svc_common+0xec/0x23c [ 47.644189][ T7065] do_el0_svc+0x4c/0x5c [ 47.644197][ T7065] el0_svc+0x60/0x1d8 [ 47.644206][ T7065] el0t_64_sync_handler+0x44/0x104 [ 47.644214][ T7065] el0t_64_sync+0x198/0x19c [ 47.711981][ T7072] netlink: 1700 bytes leftover after parsing attributes in process `syz.5.864'. [ 47.712001][ T7072] netlink: 1700 bytes leftover after parsing attributes in process `syz.5.864'. [ 47.756561][ T30] audit: type=1400 audit(47.730:8): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="l" requested=r pid=7078 comm="syz.5.869" path="/49/file1" dev="tmpfs" ino=274 [ 47.776158][ T7081] loop2: detected capacity change from 0 to 4096 [ 47.800432][ T7081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.829295][ T7081] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.868: corrupted inode contents [ 47.829583][ T7081] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #15: comm syz.2.868: mark_inode_dirty error [ 47.829954][ T7081] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.868: corrupted inode contents [ 47.830137][ T7081] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.868: mark_inode_dirty error [ 47.831623][ T7081] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.868: corrupted inode contents [ 47.836708][ T7081] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.868: mark_inode_dirty error [ 47.836942][ T7081] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.868: corrupted inode contents [ 47.837684][ T7081] EXT4-fs error (device loop2): ext4_truncate:4721: inode #15: comm syz.2.868: mark_inode_dirty error [ 47.837836][ T7081] EXT4-fs error (device loop2) in ext4_setattr:6247: Corrupt filesystem [ 47.844377][ T7081] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #15: comm syz.2.868: corrupted inode contents [ 47.871098][ T4735] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.880261][ T5554] usb 1-1: USB disconnect, device number 2 [ 47.932632][ T4744] Bluetooth: hci3: command tx timeout [ 48.028972][ T7097] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 48.047652][ T7099] tipc: Started in network mode [ 48.047674][ T7099] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 48.047778][ T7099] tipc: Enabled bearer , priority 0 [ 48.048687][ T7099] tipc: Disabling bearer [ 48.103025][ T3005] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.158175][ T7107] FAULT_INJECTION: forcing a failure. [ 48.158175][ T7107] name failslab, interval 1, probability 0, space 0, times 0 [ 48.158197][ T7107] CPU: 0 UID: 0 PID: 7107 Comm: syz.5.880 Tainted: G L syzkaller #0 PREEMPT [ 48.158210][ T7107] Tainted: [L]=SOFTLOCKUP [ 48.158214][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 48.158220][ T7107] Call trace: [ 48.158223][ T7107] show_stack+0x2c/0x3c (C) [ 48.158240][ T7107] __dump_stack+0x30/0x40 [ 48.158250][ T7107] dump_stack_lvl+0xd8/0x12c [ 48.158259][ T7107] dump_stack+0x1c/0x28 [ 48.158267][ T7107] should_fail_ex+0x418/0x58c [ 48.158278][ T7107] should_failslab+0xc4/0x120 [ 48.158288][ T7107] kmem_cache_alloc_noprof+0x94/0x5d4 [ 48.158299][ T7107] locks_get_lock_context+0x88/0x5b8 [ 48.158309][ T7107] flock_lock_inode+0xd8/0xa0c [ 48.158318][ T7107] locks_lock_inode_wait+0xfc/0x400 [ 48.158326][ T7107] __arm64_sys_flock+0x32c/0x470 [ 48.158335][ T7107] invoke_syscall+0x98/0x244 [ 48.158343][ T7107] el0_svc_common+0xec/0x23c [ 48.158352][ T7107] do_el0_svc+0x4c/0x5c [ 48.158360][ T7107] el0_svc+0x60/0x1d8 [ 48.158368][ T7107] el0t_64_sync_handler+0x44/0x104 [ 48.158376][ T7107] el0t_64_sync+0x198/0x19c [ 48.179384][ T7108] ima: policy update failed [ 48.179897][ T30] audit: type=1802 audit(48.150:9): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.5.881" res=0 errno=0 [ 48.183724][ T1100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.252699][ T7117] netlink: 168 bytes leftover after parsing attributes in process `syz.5.884'. [ 48.331081][ T7125] EXT4-fs: Ignoring removed bh option [ 48.336070][ T7125] EXT4-fs (loop5): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 48.349816][ T7125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.375561][ T6526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.493161][ T5562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.587529][ T30] audit: type=1400 audit(48.560:10): lsm=SMACK fn=smack_inode_getattr action=denied subject="_" object="l" requested=r pid=7149 comm="syz.3.899" path="/220/file1" dev="tmpfs" ino=1196 [ 48.641403][ T7157] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.659518][ T7157] EXT4-fs warning (device loop5): ext4_enable_quotas:7305: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 48.659729][ T7158] FAULT_INJECTION: forcing a failure. [ 48.659729][ T7158] name failslab, interval 1, probability 0, space 0, times 0 [ 48.659750][ T7158] CPU: 0 UID: 0 PID: 7158 Comm: syz.1.903 Tainted: G L syzkaller #0 PREEMPT [ 48.659764][ T7158] Tainted: [L]=SOFTLOCKUP [ 48.659768][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 48.659774][ T7158] Call trace: [ 48.659776][ T7158] show_stack+0x2c/0x3c (C) [ 48.659793][ T7158] __dump_stack+0x30/0x40 [ 48.659802][ T7158] dump_stack_lvl+0xd8/0x12c [ 48.659810][ T7158] dump_stack+0x1c/0x28 [ 48.659818][ T7158] should_fail_ex+0x418/0x58c [ 48.659828][ T7158] should_failslab+0xc4/0x120 [ 48.659838][ T7158] __kmalloc_noprof+0x108/0x6c8 [ 48.659849][ T7158] udpv6_init_sock+0x15c/0x398 [ 48.659861][ T7158] inet6_create+0xb4c/0xfc8 [ 48.659872][ T7158] __sock_create+0x31c/0x670 [ 48.659883][ T7158] __sys_socket_create+0xc0/0x11c [ 48.659894][ T7158] __sys_socket+0x44/0xec [ 48.659904][ T7158] __arm64_sys_socket+0x84/0x9c [ 48.659915][ T7158] invoke_syscall+0x98/0x244 [ 48.659924][ T7158] el0_svc_common+0xec/0x23c [ 48.659932][ T7158] do_el0_svc+0x4c/0x5c [ 48.659940][ T7158] el0_svc+0x60/0x1d8 [ 48.659949][ T7158] el0t_64_sync_handler+0x44/0x104 [ 48.659957][ T7158] el0t_64_sync+0x198/0x19c [ 48.662012][ T7157] EXT4-fs (loop5): mount failed [ 48.733995][ T7164] FAULT_INJECTION: forcing a failure. [ 48.733995][ T7164] name failslab, interval 1, probability 0, space 0, times 0 [ 48.734276][ T7164] CPU: 1 UID: 0 PID: 7164 Comm: syz.0.904 Tainted: G L syzkaller #0 PREEMPT [ 48.734299][ T7164] Tainted: [L]=SOFTLOCKUP [ 48.734303][ T7164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 48.734310][ T7164] Call trace: [ 48.734313][ T7164] show_stack+0x2c/0x3c (C) [ 48.734330][ T7164] __dump_stack+0x30/0x40 [ 48.734342][ T7164] dump_stack_lvl+0xd8/0x12c [ 48.734350][ T7164] dump_stack+0x1c/0x28 [ 48.734358][ T7164] should_fail_ex+0x418/0x58c [ 48.734371][ T7164] should_failslab+0xc4/0x120 [ 48.734382][ T7164] kmem_cache_alloc_noprof+0x94/0x5d4 [ 48.734393][ T7164] alloc_empty_file+0x6c/0x1cc [ 48.734405][ T7164] alloc_file+0x58/0x98 [ 48.734415][ T7164] alloc_file_pseudo+0xe0/0x198 [ 48.734426][ T7164] __shmem_file_setup+0x210/0x284 [ 48.734435][ T7164] shmem_file_setup+0x40/0x54 [ 48.734443][ T7164] memfd_alloc_file+0x9c/0x2f0 [ 48.734456][ T7164] __arm64_sys_memfd_create+0x318/0x3ec [ 48.734468][ T7164] invoke_syscall+0x98/0x244 [ 48.734477][ T7164] el0_svc_common+0xec/0x23c [ 48.734486][ T7164] do_el0_svc+0x4c/0x5c [ 48.734494][ T7164] el0_svc+0x60/0x1d8 [ 48.734503][ T7164] el0t_64_sync_handler+0x44/0x104 [ 48.734511][ T7164] el0t_64_sync+0x198/0x19c [ 48.788358][ T7166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.828839][ T7174] ima: policy update failed [ 48.833564][ T30] audit: type=1802 audit(48.800:11): pid=7174 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.2.907" res=0 errno=0 [ 48.866919][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.874327][ T7183] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 48.874341][ T7183] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 48.881293][ T7183] EXT4-fs (loop5): 1 truncate cleaned up [ 48.881777][ T7183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.895285][ T7185] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.920750][ T6526] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.063118][ T7199] tipc: Started in network mode [ 49.063140][ T7199] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 49.063211][ T7199] tipc: Enabled bearer , priority 0 [ 49.065048][ T7199] tipc: Disabling bearer [ 49.127428][ T7205] EXT4-fs: Ignoring removed bh option [ 49.131804][ T7205] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 49.136095][ T5562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.160896][ T7205] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.196702][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.226384][ T7215] ima: policy update failed [ 49.227610][ T30] audit: type=1802 audit(49.200:12): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.925" res=0 errno=0 [ 49.352299][ T7222] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.928: corrupted inode contents [ 49.372418][ T7222] EXT4-fs error (device loop1): ext4_dirty_inode:6736: inode #15: comm syz.1.928: mark_inode_dirty error [ 49.375097][ T7222] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.928: corrupted inode contents [ 49.375317][ T7222] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.928: mark_inode_dirty error [ 49.380636][ T7222] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.928: corrupted inode contents [ 49.386368][ T7222] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.928: mark_inode_dirty error [ 49.390107][ T7222] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.928: corrupted inode contents [ 49.392810][ T7222] EXT4-fs error (device loop1): ext4_truncate:4721: inode #15: comm syz.1.928: mark_inode_dirty error [ 49.392986][ T7222] EXT4-fs error (device loop1) in ext4_setattr:6247: Corrupt filesystem [ 49.395725][ T7222] EXT4-fs error (device loop1): ext4_do_update_inode:5801: inode #15: comm syz.1.928: corrupted inode contents [ 49.425562][ T7230] FAULT_INJECTION: forcing a failure. [ 49.425562][ T7230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.425589][ T7230] CPU: 0 UID: 0 PID: 7230 Comm: syz.3.929 Tainted: G L syzkaller #0 PREEMPT [ 49.425603][ T7230] Tainted: [L]=SOFTLOCKUP [ 49.425607][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.425619][ T7230] Call trace: [ 49.425622][ T7230] show_stack+0x2c/0x3c (C) [ 49.425639][ T7230] __dump_stack+0x30/0x40 [ 49.425650][ T7230] dump_stack_lvl+0xd8/0x12c [ 49.425659][ T7230] dump_stack+0x1c/0x28 [ 49.425667][ T7230] should_fail_ex+0x418/0x58c [ 49.425678][ T7230] should_fail+0x14/0x24 [ 49.425687][ T7230] should_fail_usercopy+0x20/0x30 [ 49.425698][ T7230] _inline_copy_from_user+0x3c/0x174 [ 49.425709][ T7230] __arm64_sys_clock_adjtime+0xf8/0x2b0 [ 49.425720][ T7230] invoke_syscall+0x98/0x244 [ 49.425729][ T7230] el0_svc_common+0xec/0x23c [ 49.425737][ T7230] do_el0_svc+0x4c/0x5c [ 49.425745][ T7230] el0_svc+0x60/0x1d8 [ 49.425754][ T7230] el0t_64_sync_handler+0x44/0x104 [ 49.425762][ T7230] el0t_64_sync+0x198/0x19c [ 49.527578][ T7240] FAULT_INJECTION: forcing a failure. [ 49.527578][ T7240] name failslab, interval 1, probability 0, space 0, times 0 [ 49.527605][ T7240] CPU: 1 UID: 0 PID: 7240 Comm: syz.2.935 Tainted: G L syzkaller #0 PREEMPT [ 49.527618][ T7240] Tainted: [L]=SOFTLOCKUP [ 49.527622][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.527632][ T7240] Call trace: [ 49.527636][ T7240] show_stack+0x2c/0x3c (C) [ 49.527653][ T7240] __dump_stack+0x30/0x40 [ 49.527664][ T7240] dump_stack_lvl+0xd8/0x12c [ 49.527674][ T7240] dump_stack+0x1c/0x28 [ 49.527683][ T7240] should_fail_ex+0x418/0x58c [ 49.527695][ T7240] should_failslab+0xc4/0x120 [ 49.527706][ T7240] __kmalloc_noprof+0x108/0x6c8 [ 49.527717][ T7240] udpv6_init_sock+0x15c/0x398 [ 49.527731][ T7240] inet6_create+0xb4c/0xfc8 [ 49.527742][ T7240] __sock_create+0x31c/0x670 [ 49.527753][ T7240] __sys_socket_create+0xc0/0x11c [ 49.527764][ T7240] __sys_socket+0x44/0xec [ 49.527775][ T7240] __arm64_sys_socket+0x84/0x9c [ 49.527785][ T7240] invoke_syscall+0x98/0x244 [ 49.527794][ T7240] el0_svc_common+0xec/0x23c [ 49.527803][ T7240] do_el0_svc+0x4c/0x5c [ 49.527811][ T7240] el0_svc+0x60/0x1d8 [ 49.527820][ T7240] el0t_64_sync_handler+0x44/0x104 [ 49.527829][ T7240] el0t_64_sync+0x198/0x19c [ 49.557307][ T7241] ima: policy update failed [ 49.557526][ T30] audit: type=1802 audit(49.530:13): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.3.937" res=0 errno=0 [ 49.723350][ T7262] FAULT_INJECTION: forcing a failure. [ 49.723350][ T7262] name failslab, interval 1, probability 0, space 0, times 0 [ 49.723375][ T7262] CPU: 1 UID: 0 PID: 7262 Comm: syz.3.944 Tainted: G L syzkaller #0 PREEMPT [ 49.723388][ T7262] Tainted: [L]=SOFTLOCKUP [ 49.723392][ T7262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 49.723398][ T7262] Call trace: [ 49.723401][ T7262] show_stack+0x2c/0x3c (C) [ 49.723416][ T7262] __dump_stack+0x30/0x40 [ 49.723425][ T7262] dump_stack_lvl+0xd8/0x12c [ 49.723433][ T7262] dump_stack+0x1c/0x28 [ 49.723441][ T7262] should_fail_ex+0x418/0x58c [ 49.723452][ T7262] should_failslab+0xc4/0x120 [ 49.723462][ T7262] kmem_cache_alloc_noprof+0x94/0x5d4 [ 49.723472][ T7262] locks_get_lock_context+0x88/0x5b8 [ 49.723482][ T7262] flock_lock_inode+0xd8/0xa0c [ 49.723491][ T7262] locks_lock_inode_wait+0xfc/0x400 [ 49.723499][ T7262] __arm64_sys_flock+0x32c/0x470 [ 49.723508][ T7262] invoke_syscall+0x98/0x244 [ 49.723516][ T7262] el0_svc_common+0xec/0x23c [ 49.723524][ T7262] do_el0_svc+0x4c/0x5c [ 49.723533][ T7262] el0_svc+0x60/0x1d8 [ 49.723541][ T7262] el0t_64_sync_handler+0x44/0x104 [ 49.723549][ T7262] el0t_64_sync+0x198/0x19c [ 49.775204][ T7267] set_capacity_and_notify: 7 callbacks suppressed [ 49.775218][ T7267] loop0: detected capacity change from 0 to 2048 [ 49.937006][ T7291] loop0: detected capacity change from 0 to 512 [ 49.974860][ T7295] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 50.016351][ T4744] Bluetooth: hci3: command tx timeout [ 50.039327][ T7305] loop5: detected capacity change from 0 to 512 [ 50.046013][ T7305] EXT4-fs: Mount option(s) incompatible with ext2 [ 50.147573][ T7320] loop1: detected capacity change from 0 to 512 [ 50.157085][ T7320] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.970: bg 0: block 5: invalid block bitmap [ 50.157110][ T7320] loop1: lost filesystem error report for type 5 error -117 [ 50.161189][ T7320] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 50.161210][ T7320] loop1: lost filesystem error report for type 5 error -117 [ 50.161434][ T7320] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.970: invalid indirect mapped block 3 (level 2) [ 50.161460][ T7320] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.161661][ T7320] EXT4-fs (loop1): 1 orphan inode deleted [ 50.161673][ T7320] EXT4-fs (loop1): 1 truncate cleaned up [ 50.216940][ T7326] FAULT_INJECTION: forcing a failure. [ 50.216940][ T7326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.216963][ T7326] CPU: 0 UID: 0 PID: 7326 Comm: syz.5.974 Tainted: G L syzkaller #0 PREEMPT [ 50.216975][ T7326] Tainted: [L]=SOFTLOCKUP [ 50.216978][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 50.216984][ T7326] Call trace: [ 50.216987][ T7326] show_stack+0x2c/0x3c (C) [ 50.217003][ T7326] __dump_stack+0x30/0x40 [ 50.217012][ T7326] dump_stack_lvl+0xd8/0x12c [ 50.217021][ T7326] dump_stack+0x1c/0x28 [ 50.217030][ T7326] should_fail_ex+0x418/0x58c [ 50.217040][ T7326] should_fail+0x14/0x24 [ 50.217050][ T7326] should_fail_usercopy+0x20/0x30 [ 50.217060][ T7326] _inline_copy_from_user+0x3c/0x174 [ 50.217071][ T7326] bpf_vlog_reverse_ubuf+0xe0/0x578 [ 50.217080][ T7326] bpf_vlog_finalize+0x11c/0x36c [ 50.217089][ T7326] bpf_log_attr_finalize+0x90/0x28c [ 50.217099][ T7326] btf_new_fd+0x56c/0x7a8 [ 50.217107][ T7326] bpf_btf_load+0x144/0x190 [ 50.217120][ T7326] __sys_bpf+0x7f0/0x82c [ 50.217130][ T7326] __arm64_sys_bpf+0xd0/0xec [ 50.217141][ T7326] invoke_syscall+0x98/0x244 [ 50.217151][ T7326] el0_svc_common+0xec/0x23c [ 50.217159][ T7326] do_el0_svc+0x4c/0x5c [ 50.217167][ T7326] el0_svc+0x60/0x1d8 [ 50.217176][ T7326] el0t_64_sync_handler+0x44/0x104 [ 50.217184][ T7326] el0t_64_sync+0x198/0x19c [ 50.269971][ T7332] loop5: detected capacity change from 0 to 512 [ 50.295782][ T7336] loop1: detected capacity change from 0 to 512 [ 50.309531][ T7336] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 50.309556][ T7336] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.314414][ T7336] EXT4-fs (loop1): 1 truncate cleaned up [ 50.624900][ T7358] loop1: detected capacity change from 0 to 128 [ 50.631208][ T7358] EXT4-fs (loop1): Test dummy encryption mode enabled [ 51.002266][ T7376] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 51.160004][ T7383] __nla_validate_parse: 3 callbacks suppressed [ 51.160020][ T7383] netlink: 36 bytes leftover after parsing attributes in process `syz.3.998'. [ 51.172987][ T4839] net_ratelimit: 5 callbacks suppressed [ 51.173003][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.303277][ T1100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.564132][ T7405] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1008'. [ 51.771418][ T7418] FAULT_INJECTION: forcing a failure. [ 51.771418][ T7418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.771446][ T7418] CPU: 0 UID: 0 PID: 7418 Comm: syz.0.1025 Tainted: G L syzkaller #0 PREEMPT [ 51.771460][ T7418] Tainted: [L]=SOFTLOCKUP [ 51.771464][ T7418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 51.771469][ T7418] Call trace: [ 51.771472][ T7418] show_stack+0x2c/0x3c (C) [ 51.771488][ T7418] __dump_stack+0x30/0x40 [ 51.771497][ T7418] dump_stack_lvl+0xd8/0x12c [ 51.771505][ T7418] dump_stack+0x1c/0x28 [ 51.771513][ T7418] should_fail_ex+0x418/0x58c [ 51.771524][ T7418] should_fail+0x14/0x24 [ 51.771533][ T7418] should_fail_usercopy+0x20/0x30 [ 51.771543][ T7418] _inline_copy_from_user+0x3c/0x188 [ 51.771553][ T7418] __arm64_sys_semctl+0x25c/0x438 [ 51.771565][ T7418] invoke_syscall+0x98/0x244 [ 51.771574][ T7418] el0_svc_common+0xec/0x23c [ 51.771582][ T7418] do_el0_svc+0x4c/0x5c [ 51.771591][ T7418] el0_svc+0x60/0x1d8 [ 51.771599][ T7418] el0t_64_sync_handler+0x44/0x104 [ 51.771607][ T7418] el0t_64_sync+0x198/0x19c [ 51.849156][ T7423] loop5: detected capacity change from 0 to 512 [ 52.172924][ T4742] Bluetooth: hci5: command 0x1003 tx timeout [ 52.174289][ T4744] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 52.316821][ T7460] loop1: detected capacity change from 0 to 4096 [ 52.324800][ T7460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.324816][ T7460] EXT4-fs (loop1): Test dummy encryption mode enabled [ 52.327553][ T7460] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 52.327599][ T7460] System zones: 0-5 [ 52.344504][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.346536][ T374] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.346567][ T374] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.346586][ T374] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.373130][ T1100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.414988][ T7460] fscrypt: AES-256-XTS using blk-crypto-fallback [ 52.924806][ T7482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.402883][ T4839] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.409510][ T7495] loop1: detected capacity change from 0 to 4096 [ 53.425757][ T7495] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.428001][ T7495] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ee1a8, mo2=0002] [ 53.428043][ T7495] System zones: 0-5 [ 53.653654][ T5554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.948328][ T7517] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 54.047654][ T7513] loop5: p1 p4 [ 54.047654][ T7513] p1: [ 54.047670][ T7513] loop5: partition table partially beyond EOD, truncated [ 54.048554][ T7513] loop5: p4 start 184549376 is beyond EOD, truncated [ 54.048919][ T7513] loop5: p6 start 184549376 is beyond EOD, truncated [ 54.176961][ T7528] EXT4-fs: Ignoring removed orlov option [ 54.284344][ T5558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.352164][ T7540] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1062'. [ 54.352203][ T7540] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1062'. [ 54.419262][ T7543] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.453359][ T7543] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 54.453382][ T7543] FAT-fs (loop3): Filesystem has been set read-only [ 54.533848][ T1100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.925456][ T5558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.056759][ T7592] set_capacity_and_notify: 4 callbacks suppressed [ 55.056773][ T7592] loop2: detected capacity change from 0 to 128 [ 55.066342][ T7592] EXT4-fs: Ignoring removed nobh option [ 55.107486][ T7592] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.398397][ T7617] warning: `syz.1.1085' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 55.593538][ T7635] loop0: detected capacity change from 0 to 512 [ 55.671723][ T7635] EXT4-fs error (device loop0): ext4_get_first_dir_block:3550: inode #12: comm syz.0.1090: directory missing '.' [ 55.687618][ T7635] EXT4-fs (loop0): Remounting filesystem read-only [ 55.951210][ T7667] pim6reg: entered allmulticast mode [ 55.978011][ T7666] pim6reg: left allmulticast mode [ 56.261780][ T7679] loop3: detected capacity change from 0 to 7 [ 56.268592][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.268658][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 56.271585][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.271620][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 56.271702][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.271721][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 56.271773][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.271791][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 56.271844][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.271862][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 56.271913][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.271931][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 56.271992][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.272010][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 56.272027][ T7679] ldm_validate_partition_table(): Disk read failed. [ 56.272074][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.272091][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 56.272156][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.272173][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 56.272228][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 56.272245][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 56.276935][ T7679] Dev loop3: unable to read RDB block 0 [ 56.318848][ T7679] loop3: unable to read partition table [ 56.318922][ T7679] loop3: partition table beyond EOD, truncated [ 56.318942][ T7679] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 56.498197][ T7693] sit1: entered allmulticast mode [ 56.565246][ T7697] loop5: detected capacity change from 0 to 1024 [ 56.565725][ T7697] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.744209][ T7706] af_packet: tpacket_rcv: packet too big, clamped from 2906 to 4294967272. macoff=96 [ 56.783889][ T26] net_ratelimit: 3 callbacks suppressed [ 56.783905][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.957636][ T7718] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1114'. [ 57.047121][ T7724] loop1: detected capacity change from 0 to 128 [ 57.101996][ T5562] team_slave_0: entered promiscuous mode [ 57.102018][ T5562] team_slave_1: entered promiscuous mode [ 57.107904][ T5562] team_slave_0: left promiscuous mode [ 57.107983][ T5562] team_slave_1: left promiscuous mode [ 57.110967][ T7724] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 57.110980][ T7724] FAT-fs (loop1): Filesystem has been set read-only [ 57.176127][ T5562] kernel write not supported for file /input/mice (pid: 5562 comm: kworker/0:15) [ 57.311873][ T7743] loop5: detected capacity change from 0 to 2048 [ 57.313897][ T5558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.318904][ T7743] EXT4-fs: Ignoring removed i_version option [ 57.498375][ T7749] syz.3.1129 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 57.498407][ T7749] CPU: 0 UID: 0 PID: 7749 Comm: syz.3.1129 Tainted: G L syzkaller #0 PREEMPT [ 57.498422][ T7749] Tainted: [L]=SOFTLOCKUP [ 57.498426][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 57.498432][ T7749] Call trace: [ 57.498435][ T7749] show_stack+0x2c/0x3c (C) [ 57.498451][ T7749] __dump_stack+0x30/0x40 [ 57.498461][ T7749] dump_stack_lvl+0xd8/0x12c [ 57.498469][ T7749] dump_stack+0x1c/0x28 [ 57.498477][ T7749] dump_header+0xbc/0x3f0 [ 57.498487][ T7749] out_of_memory+0xda0/0x1064 [ 57.498500][ T7749] mem_cgroup_out_of_memory+0xe8/0x170 [ 57.498514][ T7749] try_charge_memcg+0x9bc/0xd38 [ 57.498524][ T7749] obj_cgroup_charge_pages+0x44/0xc8 [ 57.498533][ T7749] __memcg_slab_post_alloc_hook+0x498/0x824 [ 57.498543][ T7749] __kmalloc_cache_noprof+0x348/0x5fc [ 57.498554][ T7749] mem_cgroup_css_alloc+0x1ac/0x12e8 [ 57.498567][ T7749] cgroup_apply_control_enable+0x4ac/0xae8 [ 57.498578][ T7749] cgroup_mkdir+0x768/0xbac [ 57.498587][ T7749] kernfs_iop_mkdir+0xe0/0x128 [ 57.498596][ T7749] vfs_mkdir+0x2e4/0x46c [ 57.498609][ T7749] filename_mkdirat+0x228/0x3f4 [ 57.498631][ T7749] __arm64_sys_mkdirat+0x9c/0xc0 [ 57.498643][ T7749] invoke_syscall+0x98/0x244 [ 57.498653][ T7749] el0_svc_common+0xec/0x23c [ 57.498661][ T7749] do_el0_svc+0x4c/0x5c [ 57.498669][ T7749] el0_svc+0x60/0x1d8 [ 57.498677][ T7749] el0t_64_sync_handler+0x44/0x104 [ 57.498686][ T7749] el0t_64_sync+0x198/0x19c [ 57.498696][ T7749] memory: usage 0kB, limit 0kB, failcnt 19 [ 57.498702][ T7749] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.498709][ T7749] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 57.498715][ T7749] Memory cgroup stats for /syz3/test: [ 57.499893][ T7749] cache 0 [ 57.499899][ T7749] rss 0 [ 57.499903][ T7749] rss_huge 0 [ 57.499906][ T7749] shmem 0 [ 57.499910][ T7749] mapped_file 0 [ 57.499913][ T7749] dirty 0 [ 57.499916][ T7749] writeback 0 [ 57.499920][ T7749] workingset_refault_anon 0 [ 57.499923][ T7749] workingset_refault_file 0 [ 57.499927][ T7749] swap 0 [ 57.499930][ T7749] swapcached 0 [ 57.499934][ T7749] pgpgin 0 [ 57.499937][ T7749] pgpgout 0 [ 57.499940][ T7749] pgfault 0 [ 57.499943][ T7749] pgmajfault 0 [ 57.499947][ T7749] inactive_anon 0 [ 57.499950][ T7749] active_anon 0 [ 57.499953][ T7749] inactive_file 0 [ 57.499957][ T7749] active_file 0 [ 57.499960][ T7749] unevictable 0 [ 57.499964][ T7749] hierarchical_memory_limit 0 [ 57.499967][ T7749] hierarchical_memsw_limit 9223372036854771712 [ 57.499971][ T7749] total_cache 0 [ 57.499975][ T7749] total_rss 0 [ 57.499978][ T7749] total_rss_huge 0 [ 57.499981][ T7749] total_shmem 0 [ 57.499985][ T7749] total_mapped_file 0 [ 57.499988][ T7749] total_dirty 0 [ 57.499991][ T7749] total_writeback 0 [ 57.499995][ T7749] total_workingset_refault_anon 0 [ 57.499999][ T7749] total_workingset_refault_file 0 [ 57.500002][ T7749] total_swap 0 [ 57.500006][ T7749] total_swapcached 0 [ 57.500009][ T7749] total_pgpgin 0 [ 57.500012][ T7749] total_pgpgout 0 [ 57.500016][ T7749] total_pgfault 0 [ 57.500019][ T7749] total_pgmajfault 0 [ 57.500022][ T7749] total_inactive_anon 0 [ 57.500026][ T7749] total_active_anon 0 [ 57.500029][ T7749] total_inactive_file 0 [ 57.500033][ T7749] total_active_file 0 [ 57.500036][ T7749] total_unevictable 0 [ 57.500040][ T7749] anon_cost 0 [ 57.500043][ T7749] file_cost 0 [ 57.500047][ T7749] Out of memory and no killable processes... [ 57.804474][ T30] audit: type=1400 audit(57.770:14): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=7759 comm="syz.1.1132" name="/" dev="mqueue" ino=3567 [ 57.859954][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 57.862424][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.931156][ T30] audit: type=1326 audit(57.900:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7771 comm="syz.5.1139" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffaa37a228 code=0x0 [ 57.966550][ T7774] hsr0: entered promiscuous mode [ 57.967242][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1140'. [ 58.010239][ T7774] hsr_slave_0: left promiscuous mode [ 58.057278][ T7778] FAULT_INJECTION: forcing a failure. [ 58.057278][ T7778] name failslab, interval 1, probability 0, space 0, times 0 [ 58.057303][ T7778] CPU: 0 UID: 0 PID: 7778 Comm: syz.1.1143 Tainted: G L syzkaller #0 PREEMPT [ 58.057318][ T7778] Tainted: [L]=SOFTLOCKUP [ 58.057321][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 58.057327][ T7778] Call trace: [ 58.057330][ T7778] show_stack+0x2c/0x3c (C) [ 58.057346][ T7778] __dump_stack+0x30/0x40 [ 58.057355][ T7778] dump_stack_lvl+0xd8/0x12c [ 58.057364][ T7778] dump_stack+0x1c/0x28 [ 58.057371][ T7778] should_fail_ex+0x418/0x58c [ 58.057382][ T7778] should_failslab+0xc4/0x120 [ 58.057392][ T7778] __kmalloc_noprof+0x108/0x6c8 [ 58.057403][ T7778] security_prepare_creds+0x60/0x35c [ 58.057417][ T7778] prepare_creds+0x500/0x7d0 [ 58.057426][ T7778] lookup_user_key+0x1a4/0xd4c [ 58.057434][ T7778] __arm64_sys_add_key+0x34c/0x43c [ 58.057446][ T7778] invoke_syscall+0x98/0x244 [ 58.057455][ T7778] el0_svc_common+0xec/0x23c [ 58.057463][ T7778] do_el0_svc+0x4c/0x5c [ 58.057471][ T7778] el0_svc+0x60/0x1d8 [ 58.057480][ T7778] el0t_64_sync_handler+0x44/0x104 [ 58.057488][ T7778] el0t_64_sync+0x198/0x19c [ 58.098356][ T7781] loop3: detected capacity change from 0 to 512 [ 58.125143][ T7774] hsr_slave_1: left promiscuous mode [ 58.135249][ T7774] hsr0 (unregistering): left promiscuous mode [ 58.157184][ T7781] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1144: corrupted xattr block 33: invalid header [ 58.157643][ T7781] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1144: corrupted xattr block 33: invalid header [ 58.157815][ T7781] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1144: corrupted xattr block 33: invalid header [ 58.172860][ T5562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.197213][ T7781] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1144: corrupted xattr block 33: invalid header [ 58.224823][ T7781] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.1144: corrupted xattr block 33: invalid header [ 58.226795][ T7781] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 58.228374][ T7781] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 58.228392][ T7781] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.228392][ T7781] [ 58.228402][ T7781] EXT4-fs (loop3): Total free blocks count 0 [ 58.228410][ T7781] EXT4-fs (loop3): Free/Dirty block details [ 58.228426][ T7781] EXT4-fs (loop3): free_blocks=65280 [ 58.228442][ T7781] EXT4-fs (loop3): dirty_blocks=8 [ 58.228449][ T7781] EXT4-fs (loop3): Block reservation details [ 58.228455][ T7781] EXT4-fs (loop3): i_reserved_data_blocks=8 [ 58.484446][ T7799] loop3: detected capacity change from 0 to 4096 [ 58.496961][ T7799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.500452][ T7799] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003] [ 58.812441][ T4742] Bluetooth: hci3: command 0x0405 tx timeout [ 58.855026][ T7825] input: syz0 as /devices/virtual/input/input11 [ 58.856215][ T7823] FAULT_INJECTION: forcing a failure. [ 58.856215][ T7823] name failslab, interval 1, probability 0, space 0, times 0 [ 58.856235][ T7823] CPU: 0 UID: 0 PID: 7823 Comm: syz.5.1160 Tainted: G L syzkaller #0 PREEMPT [ 58.856248][ T7823] Tainted: [L]=SOFTLOCKUP [ 58.856252][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 58.856257][ T7823] Call trace: [ 58.856260][ T7823] show_stack+0x2c/0x3c (C) [ 58.856276][ T7823] __dump_stack+0x30/0x40 [ 58.856285][ T7823] dump_stack_lvl+0xd8/0x12c [ 58.856293][ T7823] dump_stack+0x1c/0x28 [ 58.856301][ T7823] should_fail_ex+0x418/0x58c [ 58.856312][ T7823] should_failslab+0xc4/0x120 [ 58.856322][ T7823] __kmalloc_cache_noprof+0x94/0x5fc [ 58.856333][ T7823] autofs_init_fs_context+0x60/0x4c8 [ 58.856345][ T7823] alloc_fs_context+0x7d8/0xba4 [ 58.856357][ T7823] fs_context_for_mount+0x34/0x44 [ 58.856367][ T7823] __arm64_sys_fsopen+0xe8/0x1a4 [ 58.856378][ T7823] invoke_syscall+0x98/0x244 [ 58.856387][ T7823] el0_svc_common+0xec/0x23c [ 58.856395][ T7823] do_el0_svc+0x4c/0x5c [ 58.856404][ T7823] el0_svc+0x60/0x1d8 [ 58.856412][ T7823] el0t_64_sync_handler+0x44/0x104 [ 58.856420][ T7823] el0t_64_sync+0x198/0x19c [ 58.903141][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.026589][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1165'. [ 59.026609][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1165'. [ 59.077056][ T7838] FAULT_INJECTION: forcing a failure. [ 59.077056][ T7838] name failslab, interval 1, probability 0, space 0, times 0 [ 59.077083][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz.2.1168 Tainted: G L syzkaller #0 PREEMPT [ 59.077096][ T7838] Tainted: [L]=SOFTLOCKUP [ 59.077099][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 59.077105][ T7838] Call trace: [ 59.077108][ T7838] show_stack+0x2c/0x3c (C) [ 59.077124][ T7838] __dump_stack+0x30/0x40 [ 59.077134][ T7838] dump_stack_lvl+0xd8/0x12c [ 59.077142][ T7838] dump_stack+0x1c/0x28 [ 59.077150][ T7838] should_fail_ex+0x418/0x58c [ 59.077160][ T7838] should_failslab+0xc4/0x120 [ 59.077170][ T7838] __kmalloc_noprof+0x108/0x6c8 [ 59.077181][ T7838] tomoyo_encode2+0x10c/0x330 [ 59.077190][ T7838] tomoyo_encode+0x34/0x50 [ 59.077198][ T7838] tomoyo_realpath_from_path+0x488/0x4dc [ 59.077207][ T7838] tomoyo_mkdev_perm+0x1f0/0x4b4 [ 59.077219][ T7838] tomoyo_path_mknod+0xf0/0x18c [ 59.077228][ T7838] security_path_mknod+0x16c/0x340 [ 59.077240][ T7838] filename_mknodat+0x284/0x5a0 [ 59.077252][ T7838] __arm64_sys_mknodat+0xc0/0xe8 [ 59.077264][ T7838] invoke_syscall+0x98/0x244 [ 59.077273][ T7838] el0_svc_common+0xec/0x23c [ 59.077281][ T7838] do_el0_svc+0x4c/0x5c [ 59.077289][ T7838] el0_svc+0x60/0x1d8 [ 59.077298][ T7838] el0t_64_sync_handler+0x44/0x104 [ 59.077306][ T7838] el0t_64_sync+0x198/0x19c [ 59.077321][ T7838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 59.413036][ T7852] loop3: detected capacity change from 0 to 512 [ 59.413462][ T7852] EXT4-fs: Ignoring removed bh option [ 59.437581][ T7852] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 59.453750][ T7852] EXT4-fs (loop3): 1 truncate cleaned up [ 59.506393][ T7852] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.1172: bg 0: block 465: padding at end of block bitmap is not set [ 59.512167][ T7852] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 59.512189][ T7852] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.512189][ T7852] [ 59.512197][ T7852] EXT4-fs (loop3): Total free blocks count 0 [ 59.512204][ T7852] EXT4-fs (loop3): Free/Dirty block details [ 59.512223][ T7852] EXT4-fs (loop3): free_blocks=0 [ 59.512239][ T7852] EXT4-fs (loop3): dirty_blocks=34 [ 59.512245][ T7852] EXT4-fs (loop3): Block reservation details [ 59.512251][ T7852] EXT4-fs (loop3): i_reserved_data_blocks=34 [ 59.556157][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 59.556175][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 59.557661][ T7858] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1174'. [ 59.557674][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 59.605109][ T7862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.780364][ T7876] loop2: detected capacity change from 0 to 128 [ 59.812616][ T7863] FAULT_INJECTION: forcing a failure. [ 59.812616][ T7863] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 59.812642][ T7863] CPU: 0 UID: 0 PID: 7863 Comm: syz.5.1176 Tainted: G L syzkaller #0 PREEMPT [ 59.812660][ T7863] Tainted: [L]=SOFTLOCKUP [ 59.812665][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 59.812670][ T7863] Call trace: [ 59.812673][ T7863] show_stack+0x2c/0x3c (C) [ 59.812690][ T7863] __dump_stack+0x30/0x40 [ 59.812699][ T7863] dump_stack_lvl+0xd8/0x12c [ 59.812707][ T7863] dump_stack+0x1c/0x28 [ 59.812715][ T7863] should_fail_ex+0x418/0x58c [ 59.812726][ T7863] should_fail_alloc_page+0xec/0x10c [ 59.812736][ T7863] prepare_alloc_pages+0x194/0x484 [ 59.812749][ T7863] __alloc_frozen_pages_noprof+0x180/0x578 [ 59.812760][ T7863] alloc_pages_mpol+0x1fc/0x3d0 [ 59.812772][ T7863] folio_alloc_mpol_noprof+0x4c/0x248 [ 59.812783][ T7863] vma_alloc_folio_noprof+0x100/0x1dc [ 59.812795][ T7863] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 59.812808][ T7863] folio_prealloc+0x3c/0x1b0 [ 59.812818][ T7863] do_pte_missing+0x1bd0/0x28bc [ 59.812827][ T7863] handle_mm_fault+0x14d0/0x2b58 [ 59.812836][ T7863] __get_user_pages+0x82c/0x13b0 [ 59.812847][ T7863] faultin_page_range+0x1f0/0x6d8 [ 59.812858][ T7863] madvise_do_behavior+0x558/0x7c0 [ 59.812867][ T7863] do_madvise+0x28c/0x2f0 [ 59.812874][ T7863] __arm64_sys_madvise+0xac/0xc8 [ 59.812883][ T7863] invoke_syscall+0x98/0x244 [ 59.812891][ T7863] el0_svc_common+0xec/0x23c [ 59.812899][ T7863] do_el0_svc+0x4c/0x5c [ 59.812907][ T7863] el0_svc+0x60/0x1d8 [ 59.812916][ T7863] el0t_64_sync_handler+0x44/0x104 [ 59.812923][ T7863] el0t_64_sync+0x198/0x19c [ 59.813180][ T7867] FAULT_INJECTION: forcing a failure. [ 59.813180][ T7867] name failslab, interval 1, probability 0, space 0, times 0 [ 59.813192][ T7867] CPU: 0 UID: 0 PID: 7867 Comm: syz.0.1178 Tainted: G L syzkaller #0 PREEMPT [ 59.813204][ T7867] Tainted: [L]=SOFTLOCKUP [ 59.813207][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 59.813211][ T7867] Call trace: [ 59.813214][ T7867] show_stack+0x2c/0x3c (C) [ 59.813223][ T7867] __dump_stack+0x30/0x40 [ 59.813232][ T7867] dump_stack_lvl+0xd8/0x12c [ 59.813240][ T7867] dump_stack+0x1c/0x28 [ 59.813248][ T7867] should_fail_ex+0x418/0x58c [ 59.813257][ T7867] should_failslab+0xc4/0x120 [ 59.813267][ T7867] kmem_cache_alloc_noprof+0x94/0x5d4 [ 59.813277][ T7867] do_getname+0x48/0x234 [ 59.813287][ T7867] __arm64_sys_unlinkat+0xa8/0x108 [ 59.813299][ T7867] invoke_syscall+0x98/0x244 [ 59.813308][ T7867] el0_svc_common+0xec/0x23c [ 59.813316][ T7867] do_el0_svc+0x4c/0x5c [ 59.813324][ T7867] el0_svc+0x60/0x1d8 [ 59.813331][ T7867] el0t_64_sync_handler+0x44/0x104 [ 59.813339][ T7867] el0t_64_sync+0x198/0x19c [ 59.993024][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.125960][ T7892] loop3: detected capacity change from 0 to 512 [ 60.239978][ T7897] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 60.240028][ T7897] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 60.240060][ T7897] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 60.466236][ T7914] FAULT_INJECTION: forcing a failure. [ 60.466236][ T7914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.466258][ T7914] CPU: 0 UID: 0 PID: 7914 Comm: syz.3.1195 Tainted: G L syzkaller #0 PREEMPT [ 60.466271][ T7914] Tainted: [L]=SOFTLOCKUP [ 60.466275][ T7914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.466280][ T7914] Call trace: [ 60.466283][ T7914] show_stack+0x2c/0x3c (C) [ 60.466298][ T7914] __dump_stack+0x30/0x40 [ 60.466306][ T7914] dump_stack_lvl+0xd8/0x12c [ 60.466315][ T7914] dump_stack+0x1c/0x28 [ 60.466322][ T7914] should_fail_ex+0x418/0x58c [ 60.466333][ T7914] should_fail+0x14/0x24 [ 60.466343][ T7914] should_fail_usercopy+0x20/0x30 [ 60.466353][ T7914] keyctl_pkey_params_get_2+0x118/0x54c [ 60.466363][ T7914] keyctl_pkey_verify+0xb8/0x248 [ 60.466372][ T7914] __arm64_sys_keyctl+0x374/0x3e8 [ 60.466385][ T7914] invoke_syscall+0x98/0x244 [ 60.466394][ T7914] el0_svc_common+0xec/0x23c [ 60.466402][ T7914] do_el0_svc+0x4c/0x5c [ 60.466410][ T7914] el0_svc+0x60/0x1d8 [ 60.466419][ T7914] el0t_64_sync_handler+0x44/0x104 [ 60.466427][ T7914] el0t_64_sync+0x198/0x19c [ 60.592592][ T7922] FAULT_INJECTION: forcing a failure. [ 60.592592][ T7922] name failslab, interval 1, probability 0, space 0, times 0 [ 60.592631][ T7922] CPU: 0 UID: 0 PID: 7922 Comm: syz.5.1204 Tainted: G L syzkaller #0 PREEMPT [ 60.592651][ T7922] Tainted: [L]=SOFTLOCKUP [ 60.592655][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 60.592661][ T7922] Call trace: [ 60.592665][ T7922] show_stack+0x2c/0x3c (C) [ 60.592683][ T7922] __dump_stack+0x30/0x40 [ 60.592693][ T7922] dump_stack_lvl+0xd8/0x12c [ 60.592701][ T7922] dump_stack+0x1c/0x28 [ 60.592709][ T7922] should_fail_ex+0x418/0x58c [ 60.592720][ T7922] should_failslab+0xc4/0x120 [ 60.592731][ T7922] __kmalloc_cache_noprof+0x94/0x5fc [ 60.592742][ T7922] shmem_init_fs_context+0x5c/0x260 [ 60.592752][ T7922] devtmpfs_init_fs_context+0x20/0x80 [ 60.592764][ T7922] alloc_fs_context+0x7d8/0xba4 [ 60.592776][ T7922] fs_context_for_mount+0x34/0x44 [ 60.592787][ T7922] __arm64_sys_fsopen+0xe8/0x1a4 [ 60.592798][ T7922] invoke_syscall+0x98/0x244 [ 60.592807][ T7922] el0_svc_common+0xec/0x23c [ 60.592815][ T7922] do_el0_svc+0x4c/0x5c [ 60.592824][ T7922] el0_svc+0x60/0x1d8 [ 60.592833][ T7922] el0t_64_sync_handler+0x44/0x104 [ 60.592841][ T7922] el0t_64_sync+0x198/0x19c [ 60.693956][ T7930] loop5: detected capacity change from 0 to 512 [ 60.711336][ T7930] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.1207: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 60.711360][ T7930] loop5: lost filesystem error report for type 5 error -117 [ 60.712410][ C0] EXT4-fs (loop5): initial error at time 60: ext4_xattr_inode_iget:473 [ 60.712428][ C0] EXT4-fs (loop5): last error at time 60: ext4_xattr_inode_iget:473 [ 60.724056][ T7930] EXT4-fs (loop5): 1 orphan inode deleted [ 61.712592][ T7965] loop3: detected capacity change from 0 to 256 [ 61.960554][ T7970] loop3: detected capacity change from 0 to 512 [ 62.242935][ T4846] net_ratelimit: 55 callbacks suppressed [ 62.242951][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.286916][ T7980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.287539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.703501][ T7995] macsec0: entered promiscuous mode [ 62.802197][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 62.827130][ T7995] veth1_macvtap: left promiscuous mode [ 62.869530][ T7995] macsec0 (unregistering): left promiscuous mode [ 62.974980][ T7997] macvtap1: entered promiscuous mode [ 62.975194][ T7997] vlan0: entered promiscuous mode [ 62.975871][ T7997] team0: Device macvtap1 failed to register rx_handler [ 62.999449][ T7997] vlan0: left promiscuous mode [ 63.433908][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.738803][ T8032] binder: 8030:8032 ioctl 40046205 0 returned -22 [ 63.748336][ T8032] binder: 8030:8032 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 63.748356][ T8032] binder: 8032 RLIMIT_NICE not set [ 63.778296][ T8033] loop0: detected capacity change from 0 to 128 [ 64.222500][ T8046] FAULT_INJECTION: forcing a failure. [ 64.222500][ T8046] name failslab, interval 1, probability 0, space 0, times 0 [ 64.222522][ T8046] CPU: 0 UID: 0 PID: 8046 Comm: syz.3.1259 Tainted: G L syzkaller #0 PREEMPT [ 64.222535][ T8046] Tainted: [L]=SOFTLOCKUP [ 64.222538][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 64.222544][ T8046] Call trace: [ 64.222546][ T8046] show_stack+0x2c/0x3c (C) [ 64.222562][ T8046] __dump_stack+0x30/0x40 [ 64.222571][ T8046] dump_stack_lvl+0xd8/0x12c [ 64.222579][ T8046] dump_stack+0x1c/0x28 [ 64.222587][ T8046] should_fail_ex+0x418/0x58c [ 64.222598][ T8046] should_failslab+0xc4/0x120 [ 64.222608][ T8046] __kmalloc_cache_noprof+0x94/0x5fc [ 64.222624][ T8046] proc_init_fs_context+0x64/0x4ac [ 64.222636][ T8046] alloc_fs_context+0x7d8/0xba4 [ 64.222647][ T8046] fs_context_for_reconfigure+0xac/0xd0 [ 64.222659][ T8046] path_mount+0x618/0xa88 [ 64.222667][ T8046] do_mount+0xe8/0x148 [ 64.222674][ T8046] __arm64_sys_mount+0x33c/0x388 [ 64.222682][ T8046] invoke_syscall+0x98/0x244 [ 64.222691][ T8046] el0_svc_common+0xec/0x23c [ 64.222699][ T8046] do_el0_svc+0x4c/0x5c [ 64.222707][ T8046] el0_svc+0x60/0x1d8 [ 64.222718][ T8046] el0t_64_sync_handler+0x44/0x104 [ 64.222727][ T8046] el0t_64_sync+0x198/0x19c [ 64.288739][ T8049] loop5: detected capacity change from 0 to 512 [ 64.332765][ T875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.502739][ T1612] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.502773][ T1612] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.504684][ T10] cfg80211: failed to load regulatory.db [ 64.612487][ T875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.643249][ T4846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.703922][ T8063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.704468][ T8063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.704639][ T8063] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.770007][ T8058] loop0: detected capacity change from 0 to 8192 [ 65.402257][ T8082] loop2: detected capacity change from 0 to 1024 [ 65.443300][ T8082] EXT4-fs: Ignoring removed oldalloc option [ 65.443317][ T8082] EXT4-fs: Ignoring removed orlov option [ 65.491728][ T8082] EXT4-fs mount: 46 callbacks suppressed [ 65.491745][ T8082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.588130][ T8082] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.1274: lblock 0 mapped to illegal pblock 0 (length 6) [ 65.623965][ T8082] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 65.623998][ T8082] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.623998][ T8082] [ 65.624828][ T8082] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.1274: lblock 0 mapped to illegal pblock 0 (length 6) [ 65.702576][ T8082] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 65.702611][ T8082] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.702611][ T8082] [ 65.819872][ T374] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 65.821004][ T374] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 65.821019][ T374] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.821019][ T374] [ 65.821026][ T374] EXT4-fs (loop2): Total free blocks count 0 [ 65.821033][ T374] EXT4-fs (loop2): Free/Dirty block details [ 65.821040][ T374] EXT4-fs (loop2): free_blocks=0 [ 66.265226][ T8125] loop2: detected capacity change from 0 to 512 [ 66.277582][ T8125] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.308926][ T8125] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 66.308945][ T8125] EXT4-fs (loop2): can't mount with both data=journal and dax [ 66.430241][ T8122] psci: CPU1 killed (polled 0 ms) [ 67.464120][ T5562] net_ratelimit: 7 callbacks suppressed [ 67.464137][ T5562] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.442765][ T5561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.703428][ T5561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.844267][ T5559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.832361][ C0] sched: DL replenish lagged too much [ 71.924243][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.583321][ T5561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.132719][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.324138][ T5559] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.124034][ T5561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.722987][ T5561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.003870][ T4879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.973386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.144267][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.173299][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.662484][ T5561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.693544][ T5561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.722976][ T5561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.983106][ T5561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.014327][ T5561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.043718][ T5561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.343941][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.423988][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.452971][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.484339][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.324343][ T5173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.353441][ T5173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.382785][ T5173] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.003257][ T5561] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.103726][ T1612] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.114127][ T1612] ieee802154 phy1 wpan1: encryption failed: -22 [ 146.413316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.894359][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 34s! [ 150.894405][ C0] Showing busy workqueues and worker pools: