last executing test programs: 1m4.820131311s ago: executing program 1 (id=24): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a30000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000004000c0014000000110001"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="20000000040a0101"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1m4.714770942s ago: executing program 1 (id=28): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0xbc, &(0x7f00000026c0)}, 0x10) 1m4.637500391s ago: executing program 1 (id=32): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1m4.54706201s ago: executing program 1 (id=38): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440), 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r0, 0xc0504e47, &(0x7f0000000a00)) 1m4.342067282s ago: executing program 1 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) 1m2.63256269s ago: executing program 1 (id=113): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000003640)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000040)="b90103600033f0000000000081001fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m2.605999525s ago: executing program 32 (id=113): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000003640)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000040)="b90103600033f0000000000081001fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m1.782522749s ago: executing program 0 (id=145): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1m1.582346855s ago: executing program 0 (id=150): syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b4b, &(0x7f0000000000)) 1m1.500668435s ago: executing program 0 (id=156): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x4}}}}}}}, 0x0) 1m1.356269217s ago: executing program 0 (id=162): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x5}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) 1m1.164294583s ago: executing program 0 (id=168): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000000), 0x10) dup3(r0, r1, 0x80000) 1m0.724664461s ago: executing program 0 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 1m0.709629229s ago: executing program 33 (id=182): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 39.169328288s ago: executing program 5 (id=756): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x1, @empty}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x4, @rand_addr=0x64010102}}, 0x1e) 39.110083876s ago: executing program 5 (id=757): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) write$binfmt_misc(r0, &(0x7f0000000400)="62226ce753c264e304845d2c480d666fe830e14b29c1eab2edd7d13843a8d87eef1b062fa2904807dfe9a4829f4e0ca7a89fb1c983fb1d10889318c1c7d34bf92965db8a82d5ea3035705d62cbe14ae12c72114817f88bfb4320ce8075cc6244bfc28558cb5a884658f9f91e68f97b2695865cab558a9c3f509530a32e99f6", 0x7f) write$P9_RREADLINK(r0, &(0x7f0000002e00)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 39.076625317s ago: executing program 5 (id=758): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/kernel/ns_last_pid\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='3', 0x1) read$FUSE(r0, &(0x7f0000001100)={0x2020}, 0x2020) 39.058695737s ago: executing program 5 (id=759): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @auto="b2fc991555cf4f1b83cafc8889c21fcf"}}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) 39.002056175s ago: executing program 5 (id=760): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@inlinecrypt}, {@max_batch_time={'max_batch_time', 0x3d, 0x186b}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$eJzs3c1rHGUYAPBnNp+m1UYQbL00Jy2UbtoaWwWh8SSChYKebcNmG2I22ZLdlCbkYBFBEEGLB0Evnv2oN28ievZv8CIiLVXTYsWDrMx+JJtukm7TTdI2vx9M8r4zs/PMs7Pzvu/uDLsB7FpD6Z9MxIGI+CiJ2Fefn0RET7XUHTFaW+/20mIunZKoVN74M6muc2tpMRdNj0ntqVf2R8SP70UczrTGLc0vTI0VCvnZen24PH1huDS/cGRyemwiP5GfOXFsZOT4yRdOnuhcrn//vLD3+sevPvfN6L/vPn31w5+SGI299WXNeXTKUAzVn5Oe9Cms+b7TUR4MyU7vAJuSnppdtbM8DsS+6KqWAIBHWdr/VwCAXSbR/wPALtP4HODW0mKuMe3sJxLb68YrEdFfy79xfbO2pLt+za6/eh104Fay6spIEhGDHYi/PyI+/+6tr9Iptug6JMBa3rkcEecGh1rb/2TlnoVNOtrGOkN31LV/sH1+SMc/L641/sssj39ijfFP3xrn7mYMRfTWN1fVev5nrq0K2nCqA8Hr47+Xa/e2pYk2jf+Wb1ob7KrXHk8rByNispBP27YnIuJQ9PSdnyzkj20Q49DN/26ut2yoafz315W3v0zjp/9X1shc6+5b/ZjxsfLY/eTc7MbliGe6V+7tu93S/jeOeuv498xGGz64Unztpfc/W2+1NP8038bUmv/WqnwR8WysnX9DsuH9icPp4T9a+7t2jG9//XRgvfjNxz+d0viN9wLbIT3+AxvnP5g0369Z6mz8u+e//Ppf3qH09d+bvFkt99bnXRorl2ePRfQmr7fOP76ytUa9sX6af23Di72xKv+V9i9Zo/1L3xOeazPH7ut/fL35/LdWmv/4PR3/ey9cvT3VtV789o7/SLV0qD6nnfav3R28n+cOAAAAAAAAAAAAAAAAAAAAAAAAANqViYi9kWSyy+VMJput/Yb3UzGQKRRL5cPni3Mz41H9rezB6Mk0vupyX62eNL7/dLCpfvyO+vMR8WREfNL3WLWezRUL4zudPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADU7Vnn9/9Tv/ft9N4BAFumv2VOpVKpNNdv5jdcDAA8dFr7fwDgUaf/B4DdR/8PALuP/h8Adh/9PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFvszOnT6VT5Z2kxl9bHL87PTRUvHhnPl6ay03O5bK44eyE7USxOFPLZXHH6btsrFIsXRmJm7tJwOV8qD5fmF85OF+dmymcnp8dOxdl8z7ZkBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3pjS/MDVWKORnH4nCBxHxAOyGQmcLvx35Zf9G61y5y8t4tI1Y/fUT4gFJeecLO9wwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwk/g8AAP//Ez0kyA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @d}}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001f80)=""/4096, 0x1000) 34.629415931s ago: executing program 5 (id=765): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x4, 0x62cf, 0x9}) 34.629310167s ago: executing program 34 (id=765): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000180)={r1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x4, 0x62cf, 0x9}) 17.901961238s ago: executing program 7 (id=1167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x7}}], 0x1, 0x4044044) 17.855601764s ago: executing program 7 (id=1170): timer_create(0x2, 0x0, &(0x7f0000000480)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r0) 17.818020967s ago: executing program 7 (id=1173): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x3, 0x1, 0x2, 0x13, 0x4}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 16.909139619s ago: executing program 7 (id=1192): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000000380)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) lseek(r0, 0x0, 0x3) 16.735194093s ago: executing program 7 (id=1197): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000540)="aa2dfba7a8b5b40bfcc382021403601f2ba0cc8e7fe2b651e172940e5f9b7b5fabd1654431b69b225e0e9e31deceb2fa568ffeadd81322719ebe4216052d86b1f0af2970d9cca7f6235ba8c34441a9a1287aac30072c35ee7848b71ca25fcf7e00e2df1a8b26ec4160e9b19a77461faf9427dc6ce2571d292cbf897b72829024a06a87d7f9c05fe94cdff28fd5e20cf8bc7e08e7c8f9d62eb08abdb2c354ba237304bc6499c0b06a5ad9845ab5d544a08ecfb7e6e6acacc1c1cd491d253186919eeffc7bcc520d0766ea6e", 0xcb}, {&(0x7f0000000640)="ce4dac2a32d2fee69e6a033c8e8329fb61228a828d6123d8d0debf7b868b418f3a571ebf186169301beacb7e4753550b6d24a6a2acf1f944568f684f0dac4e87e90d75271fafb4bb17c3c1d1ce7b1d58b3853f638b19522b3ced479c721d3e0adba5bf571ac71da82ee1b8c054e929489fbe0a3f8186a29b2c36393903be6fcb73c09b812b51d44118c33f2f6c4e81abebd1f38af89e37e0e53c6994c9b762f3cfc9ac8ab39b19bc97489ecb2d760bd316b6af6beccd03d0dc327cd615a746a15eb8d66c643d14", 0xc7}, {&(0x7f0000000740)="41f58b12ecd8a878a6625cf86536418c236e1f5462b0b0070536ae67c1b3278701c5d2ae844dfa1bed3c1c2db5d40d86a85bc79ce65f366ca7a63c12dfbf9c2d4dbe7ae92d9d5bd1e2ae14578447d65e913d8d34a3708d695dc06cf203", 0x5d}, {&(0x7f00000007c0)="65fdaac24722a924d88d1843454db804fb4bffaa5aba6d0b7cc1956584cb4df2a84e42c7d922705ee264296eecee1418e6dab9909c04db4bf6dc887454dec5ba3ad510ea183c0758ae2a61dc252e971469903bdbad44491d563a9d61c85ed3ec3abc1052455e971dee9628d306884d1486c2318151e2ca1772c0187781ee31c7aefea22952de537b9a11", 0x8a}, {&(0x7f0000000880)="b4dff5573cfc0c44bdce6d45ad19c4e125417af1beed1ad5cc524e68ffdc3e0abb7c67b8e9b8cf549679d0f3529363259a25bad5da8bc2b4312eb0e9e4513a8eadf48871b3604af4a4fd8e42caa8ff85d2", 0x51}, {&(0x7f0000000900)="32d7391e7684d6d62e7e35d33ea9e90d404e50cc3995184fea96dd505b7687e94ef051885e93016d1a2506b3b467d464e95760978cc238f49073ffeff20f7ad1446925dce04b", 0x46}], 0x6}}], 0x1, 0x20040000) 15.940661457s ago: executing program 7 (id=1222): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x6a) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4620, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 15.918516191s ago: executing program 35 (id=1222): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x6a) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4620, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2.710101589s ago: executing program 2 (id=1514): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 2.693929568s ago: executing program 2 (id=1515): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0}, 0x4000000) 2.677422165s ago: executing program 2 (id=1516): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000009c52850000008600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.595721579s ago: executing program 2 (id=1518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000380)="e9", 0x1}], 0x1}}], 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 2.49521278s ago: executing program 2 (id=1524): writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b", 0x27}], 0x1) syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) 2.396794741s ago: executing program 2 (id=1529): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mlockall(0x3) write(r0, &(0x7f0000000080)='4', 0x1) 1.840921219s ago: executing program 4 (id=1551): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000002e40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="180000000000000017010000030000009900000000000000b000000000000000170100000200000099000000001548c041a241cf723783346c47248273e65995eb5bede851303834372313f1b3bf3d6783f5d2e7a6abe2669f261074dcfa7602f53eb3631f943510623b3d1c0e63f3f0959f8e965128aa5f38675363901317192820199846dd81686bbd33e4f156cac4879344b4831cce81aca1e770a409ec80a41b3882e5bd632afeabd25be1563171f0414b5b31450227482b19acd4e2e54a422d648de600000018"], 0xe0, 0x11}], 0x1, 0x0) 1.804309499s ago: executing program 4 (id=1554): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0xf4, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x400}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 1.764564506s ago: executing program 4 (id=1556): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000000)) 1.638581517s ago: executing program 4 (id=1558): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x1) 1.499630387s ago: executing program 4 (id=1561): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00)=[{0x4, 0x1, 0xe, 0xa}], 0x10, 0x4}, 0x94) ioctl(r0, 0xc0484e43, &(0x7f0000000a00)) 1.076763722s ago: executing program 3 (id=1579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 945.662798ms ago: executing program 3 (id=1585): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x16, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x8, 0x98ca}, @sack_perm={0x4, 0x2}, @eol, @fastopen={0x22, 0x10, "8f02ae5e182f886a0f7a726fe76f"}, @sack={0x5, 0xe, [0x220, 0x130c, 0xabc]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec81432bcfdfea9"}]}}}}}}}}, 0x0) 911.977655ms ago: executing program 3 (id=1586): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r0, &(0x7f0000000100)=""/9, 0xfffffd87) read$FUSE(r0, 0x0, 0x0) 848.273567ms ago: executing program 3 (id=1589): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x121c088, &(0x7f0000000b00)=ANY=[], 0x4a, 0x2e0, &(0x7f0000000780)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d00000000720007000000ee000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) 794.45018ms ago: executing program 3 (id=1590): bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000a800000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 729.347667ms ago: executing program 3 (id=1594): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x4, 0x0, 0x0) unshare(0x6020400) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 673.411007ms ago: executing program 6 (id=1598): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x2000, 0x8ef98fc165024b44) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x14) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0x0, 0x2) 652.854587ms ago: executing program 6 (id=1599): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, r1, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8, {0x10, 0x4c7, 0x8001, 0xb}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2404c041}, 0x0) 626.249278ms ago: executing program 6 (id=1601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f338ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2c24", 0x5dc}], 0x1}, 0x30008b08) 578.816671ms ago: executing program 6 (id=1602): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e, 0x3}}, 0xe4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 520.739932ms ago: executing program 6 (id=1605): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x0, @loopback}, @in={0x2, 0x4e20, @remote}], 0x20) 506.449958ms ago: executing program 6 (id=1606): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x6}, 0x4) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000900)=[@in6={0xa, 0x4e23, 0x3f, @loopback, 0x5}], 0x1c) 143.43898ms ago: executing program 8 (id=1612): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000040)='7', 0x1) memfd_create(&(0x7f00000008c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03g\xe2bR\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9fU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1126, 0xd) 99.857318ms ago: executing program 8 (id=1613): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f0000000580)='cpu.pressure\x00', 0x2, 0x0) read(r2, &(0x7f0000000140)=""/252, 0xfc) 63.856377ms ago: executing program 8 (id=1614): sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, 0x0, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r2], 0x44}}, 0x2000800) 48.154699ms ago: executing program 8 (id=1615): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x629, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x8, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x10002, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x187], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0xc, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x1000, 0x2, 0x4, 0x9, 0x3, 0x7, 0x9, 0x8, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x3, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x9, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x8, 0x2, 0x59, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x1000]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 23.388575ms ago: executing program 8 (id=1616): chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000010000)={0x20080522}, &(0x7f0000000140)={0x0, 0x20200000, 0x8001, 0x3, 0xfffffff9, 0x200801}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001000)=0x1, 0x4) 22.722335ms ago: executing program 4 (id=1617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 8 (id=1618): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) io_setup(0x7, &(0x7f0000000000)=0x0) syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0) kernel console output (not intermixed with test programs): dium) [ 51.618734][ T50] Bluetooth: hci0: command 0x1407 tx timeout [ 51.672374][ T6832] FAULT_INJECTION: forcing a failure. [ 51.672374][ T6832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.675048][ T6832] CPU: 1 UID: 0 PID: 6832 Comm: syz.6.695 Tainted: G L syzkaller #0 PREEMPT [ 51.675068][ T6832] Tainted: [L]=SOFTLOCKUP [ 51.675072][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 51.675078][ T6832] Call trace: [ 51.675081][ T6832] show_stack+0x2c/0x3c (C) [ 51.675104][ T6832] __dump_stack+0x30/0x40 [ 51.675118][ T6832] dump_stack_lvl+0xd8/0x12c [ 51.675134][ T6832] dump_stack+0x1c/0x28 [ 51.675147][ T6832] should_fail_ex+0x41c/0x590 [ 51.675160][ T6832] should_fail+0x14/0x24 [ 51.675171][ T6832] should_fail_usercopy+0x20/0x30 [ 51.675183][ T6832] _inline_copy_from_user+0x3c/0x174 [ 51.675193][ T6832] __arm64_sys_timer_create+0x108/0x1ac [ 51.675202][ T6832] invoke_syscall+0x98/0x244 [ 51.675214][ T6832] el0_svc_common+0xec/0x23c [ 51.675225][ T6832] do_el0_svc+0x4c/0x5c [ 51.675237][ T6832] el0_svc+0x64/0x260 [ 51.675247][ T6832] el0t_64_sync_handler+0x44/0x104 [ 51.675257][ T6832] el0t_64_sync+0x198/0x19c [ 52.252257][ T6887] block2mtd: error: cannot open device / [ 52.307165][ T6898] FAULT_INJECTION: forcing a failure. [ 52.307165][ T6898] name failslab, interval 1, probability 0, space 0, times 0 [ 52.307208][ T6898] CPU: 0 UID: 0 PID: 6898 Comm: syz.5.710 Tainted: G L syzkaller #0 PREEMPT [ 52.307223][ T6898] Tainted: [L]=SOFTLOCKUP [ 52.307228][ T6898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 52.307233][ T6898] Call trace: [ 52.307236][ T6898] show_stack+0x2c/0x3c (C) [ 52.307257][ T6898] __dump_stack+0x30/0x40 [ 52.307272][ T6898] dump_stack_lvl+0xd8/0x12c [ 52.307284][ T6898] dump_stack+0x1c/0x28 [ 52.307295][ T6898] should_fail_ex+0x41c/0x590 [ 52.307307][ T6898] should_failslab+0xc4/0x120 [ 52.307320][ T6898] kmem_cache_alloc_noprof+0x94/0x5d4 [ 52.307333][ T6898] security_inode_alloc+0x40/0x304 [ 52.307343][ T6898] inode_init_always_gfp+0x704/0xbac [ 52.307354][ T6898] alloc_inode+0x9c/0x198 [ 52.307364][ T6898] new_inode+0x20/0x50 [ 52.307375][ T6898] hugetlbfs_get_inode+0x80/0x834 [ 52.307388][ T6898] hugetlb_file_setup+0x20c/0x574 [ 52.307401][ T6898] ksys_mmap_pgoff+0x16c/0x5b4 [ 52.307411][ T6898] __arm64_sys_mmap+0x110/0x12c [ 52.307423][ T6898] invoke_syscall+0x98/0x244 [ 52.307434][ T6898] el0_svc_common+0xec/0x23c [ 52.307446][ T6898] do_el0_svc+0x4c/0x5c [ 52.307457][ T6898] el0_svc+0x64/0x260 [ 52.307468][ T6898] el0t_64_sync_handler+0x44/0x104 [ 52.307478][ T6898] el0t_64_sync+0x198/0x19c [ 52.569414][ T6926] loop6: detected capacity change from 0 to 512 [ 52.573534][ T6926] EXT4-fs: Ignoring removed oldalloc option [ 52.580967][ T6926] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 52.598297][ T6926] EXT4-fs (loop6): 1 truncate cleaned up [ 52.652956][ T6933] netlink: 96 bytes leftover after parsing attributes in process `syz.3.717'. [ 52.816452][ T6947] FAULT_INJECTION: forcing a failure. [ 52.816452][ T6947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.816493][ T6947] CPU: 0 UID: 0 PID: 6947 Comm: syz.2.721 Tainted: G L syzkaller #0 PREEMPT [ 52.816507][ T6947] Tainted: [L]=SOFTLOCKUP [ 52.816511][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 52.816518][ T6947] Call trace: [ 52.816521][ T6947] show_stack+0x2c/0x3c (C) [ 52.816543][ T6947] __dump_stack+0x30/0x40 [ 52.816558][ T6947] dump_stack_lvl+0xd8/0x12c [ 52.816570][ T6947] dump_stack+0x1c/0x28 [ 52.816581][ T6947] should_fail_ex+0x41c/0x590 [ 52.816594][ T6947] should_fail+0x14/0x24 [ 52.816605][ T6947] should_fail_usercopy+0x20/0x30 [ 52.816617][ T6947] set_fd_set+0x48/0xb8 [ 52.816626][ T6947] core_sys_select+0x7ec/0x9e4 [ 52.816638][ T6947] __arm64_sys_pselect6+0x2f0/0x39c [ 52.816647][ T6947] invoke_syscall+0x98/0x244 [ 52.816659][ T6947] el0_svc_common+0xec/0x23c [ 52.816670][ T6947] do_el0_svc+0x4c/0x5c [ 52.816681][ T6947] el0_svc+0x64/0x260 [ 52.816693][ T6947] el0t_64_sync_handler+0x44/0x104 [ 52.816702][ T6947] el0t_64_sync+0x198/0x19c [ 52.854288][ T6950] input: syz0 as /devices/virtual/input/input5 [ 52.968939][ T4894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.226178][ T6996] loop5: detected capacity change from 0 to 512 [ 53.300694][ T6996] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #18: comm syz.5.731: corrupted inode contents [ 53.303473][ T6996] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 53.304241][ T6996] EXT4-fs error (device loop5): ext4_dirty_inode:6731: inode #18: comm syz.5.731: mark_inode_dirty error [ 53.310359][ T6996] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 53.310704][ T6996] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #18: comm syz.5.731: corrupted inode contents [ 53.314846][ T6996] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 53.315010][ T6996] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #18: comm syz.5.731: mark_inode_dirty error [ 53.320690][ T6996] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 53.320827][ T6996] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2965: inode #18: comm syz.5.731: mark inode dirty (error -117) [ 53.325237][ T6996] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 53.325365][ T6996] EXT4-fs warning (device loop5): ext4_evict_inode:288: xattr delete (err -117) [ 53.381769][ T4472] kernel write not supported for file /dummy_udc (pid: 4472 comm: kworker/0:3) [ 53.528906][ T4894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.227719][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000fca32a12: rx timeout, send abort [ 54.568764][ T4894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.728461][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000fca32a12: abort rx timeout. Force session deactivation [ 54.800590][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.5.739'. [ 54.819639][ T7098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.829819][ T7099] evm: overlay not supported [ 54.898248][ T7105] netlink: 4 bytes leftover after parsing attributes in process `syz.5.745'. [ 54.947778][ T7110] netlink: 'syz.5.748': attribute type 1 has an invalid length. [ 54.947812][ T7110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.947821][ T7110] IPv6: NLM_F_CREATE should be set when creating new route [ 54.968196][ T4724] Bluetooth: hci0: command 0x1407 tx timeout [ 54.970070][ T4820] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 54.970084][ T4820] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 55.608963][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.008853][ T4812] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.649126][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.977334][ T7137] loop5: detected capacity change from 0 to 512 [ 56.980439][ T7137] EXT4-fs (loop5): Test dummy encryption mode enabled [ 56.981801][ T7137] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 56.994739][ T7137] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.759: bad orphan inode 131083 [ 56.996785][ T7137] loop5: lost filesystem error report for type 5 error -117 [ 57.003641][ T7137] EXT4-fs (loop5): shut down requested (2) [ 57.007186][ T7137] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only [ 57.009012][ T7137] overlayfs: failed to get uuid (/file0, err=-5); falling back to uuid=null. [ 57.128189][ T4820] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 57.128217][ T4724] Bluetooth: hci2: command 0x0c1a tx timeout [ 57.128220][ T4820] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 57.459175][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.688867][ T4813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.728504][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.730011][ T4813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.048243][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.288181][ T4724] Bluetooth: hci4: command 0x0c1a tx timeout [ 59.289501][ T4820] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 59.291668][ T4820] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 59.371694][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.712826][ T6413] syz_tun (unregistering): left allmulticast mode [ 59.769454][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.886629][ T86] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.962770][ T86] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.002613][ T86] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.062242][ T86] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.177306][ T86] bridge_slave_1: left allmulticast mode [ 60.181106][ T86] bridge_slave_1: left promiscuous mode [ 60.182314][ T86] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.184467][ T86] bridge_slave_0: left allmulticast mode [ 60.184494][ T86] bridge_slave_0: left promiscuous mode [ 60.184597][ T86] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.189808][ T86] pimreg: left allmulticast mode [ 60.248055][ T86] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.254401][ T86] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.268921][ T86] bond0 (unregistering): Released all slaves [ 60.514501][ T86] hsr_slave_0: left promiscuous mode [ 60.515632][ T86] hsr_slave_1: left promiscuous mode [ 60.515879][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.515890][ T86] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.516949][ T86] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.516958][ T86] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.522292][ T86] veth1_macvtap: left promiscuous mode [ 60.522320][ T86] veth0_macvtap: left promiscuous mode [ 60.522371][ T86] veth1_vlan: left promiscuous mode [ 60.522414][ T86] veth0_vlan: left promiscuous mode [ 60.619959][ T86] team0 (unregistering): Port device team_slave_1 removed [ 60.624168][ T86] team0 (unregistering): Port device team_slave_0 removed [ 60.808334][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.374270][ T7144] loop4: detected capacity change from 0 to 1024 [ 61.392306][ T7147] loop3: detected capacity change from 0 to 4096 [ 61.400723][ T7147] EXT4-fs (loop3): Test dummy encryption mode enabled [ 61.465694][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.468840][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.475143][ T7144] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 3: comm syz.4.761: lblock 3 mapped to illegal pblock 3 (length 3) [ 61.489501][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.492184][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.493769][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.500081][ T7144] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 61.500126][ T7144] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.500126][ T7144] [ 61.545014][ T54] EXT4-fs error (device loop4): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 61.546793][ T54] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 61.546813][ T54] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.546813][ T54] [ 61.574840][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.585391][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.585899][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.586529][ T4724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.588554][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.627063][ T7177] loop4: detected capacity change from 0 to 1024 [ 61.635624][ T7181] binder: 7180:7181 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 61.741915][ T7177] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.771: bg 0: block 112: padding at end of block bitmap is not set [ 61.752200][ T4400] 8021q: adding VLAN 0 to HW filter on device eth8 [ 61.754152][ T7177] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 61.754193][ T7177] EXT4-fs (loop4): This should not happen!! Data will be lost [ 61.754193][ T7177] [ 61.754209][ T7177] EXT4-fs (loop4): Total free blocks count 0 [ 61.754224][ T7177] EXT4-fs (loop4): Free/Dirty block details [ 61.754250][ T7177] EXT4-fs (loop4): free_blocks=0 [ 61.754271][ T7177] EXT4-fs (loop4): dirty_blocks=16 [ 61.754283][ T7177] EXT4-fs (loop4): Block reservation details [ 61.754294][ T7177] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 61.787231][ T7199] loop2: detected capacity change from 0 to 1024 [ 61.794132][ T7199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.826045][ T7199] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e042c028, mo2=0102] [ 61.826124][ T7199] System zones: 0-1, 3-12 [ 61.848458][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.877497][ T7205] bcache: register_bcache() error : failed to open device [ 61.930177][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.005488][ T7224] FAULT_INJECTION: forcing a failure. [ 62.005488][ T7224] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 62.005530][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz.4.781 Tainted: G L syzkaller #0 PREEMPT [ 62.005546][ T7224] Tainted: [L]=SOFTLOCKUP [ 62.005550][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 62.005555][ T7224] Call trace: [ 62.005559][ T7224] show_stack+0x2c/0x3c (C) [ 62.005579][ T7224] __dump_stack+0x30/0x40 [ 62.005594][ T7224] dump_stack_lvl+0xd8/0x12c [ 62.005606][ T7224] dump_stack+0x1c/0x28 [ 62.005617][ T7224] should_fail_ex+0x41c/0x590 [ 62.005630][ T7224] should_fail_alloc_page+0xec/0x10c [ 62.005643][ T7224] prepare_alloc_pages+0x194/0x484 [ 62.005652][ T7224] __alloc_frozen_pages_noprof+0x180/0x648 [ 62.005660][ T7224] alloc_pages_mpol+0x1fc/0x3d0 [ 62.005670][ T7224] folio_alloc_mpol_noprof+0x4c/0x248 [ 62.005679][ T7224] vma_alloc_folio_noprof+0x100/0x1dc [ 62.005688][ T7224] vma_alloc_zeroed_movable_folio+0x74/0x88 [ 62.005700][ T7224] folio_prealloc+0x3c/0x1b0 [ 62.005712][ T7224] do_pte_missing+0x1bd0/0x2a28 [ 62.005725][ T7224] handle_mm_fault+0x1534/0x2bec [ 62.005736][ T7224] do_page_fault+0x77c/0xb88 [ 62.005747][ T7224] do_translation_fault+0xc4/0x114 [ 62.005758][ T7224] do_mem_abort+0x70/0x194 [ 62.005769][ T7224] el0_da+0x78/0x254 [ 62.005779][ T7224] el0t_64_sync_handler+0xd8/0x104 [ 62.005789][ T7224] el0t_64_sync+0x198/0x19c [ 62.007072][ T7224] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 62.092238][ T4400] 8021q: adding VLAN 0 to HW filter on device eth9 [ 62.151792][ T7245] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 62.156273][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.156353][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.156412][ T7159] bridge_slave_0: entered allmulticast mode [ 62.162737][ T7159] bridge_slave_0: entered promiscuous mode [ 62.170412][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.170459][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.170519][ T7159] bridge_slave_1: entered allmulticast mode [ 62.170930][ T7159] bridge_slave_1: entered promiscuous mode [ 62.183067][ T7159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.184425][ T7159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.195181][ T7159] team0: Port device team_slave_0 added [ 62.195992][ T7159] team0: Port device team_slave_1 added [ 62.202333][ T7249] FAULT_INJECTION: forcing a failure. [ 62.202333][ T7249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.202369][ T7249] CPU: 0 UID: 0 PID: 7249 Comm: syz.2.786 Tainted: G L syzkaller #0 PREEMPT [ 62.202383][ T7249] Tainted: [L]=SOFTLOCKUP [ 62.202387][ T7249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 62.202392][ T7249] Call trace: [ 62.202395][ T7249] show_stack+0x2c/0x3c (C) [ 62.202413][ T7249] __dump_stack+0x30/0x40 [ 62.202426][ T7249] dump_stack_lvl+0xd8/0x12c [ 62.202437][ T7249] dump_stack+0x1c/0x28 [ 62.202448][ T7249] should_fail_ex+0x41c/0x590 [ 62.202461][ T7249] should_fail+0x14/0x24 [ 62.202471][ T7249] should_fail_usercopy+0x20/0x30 [ 62.202483][ T7249] strncpy_from_user+0x48/0x388 [ 62.202492][ T7249] path_getxattrat+0x12c/0x2cc [ 62.202502][ T7249] __arm64_sys_fgetxattr+0xb0/0xc8 [ 62.202511][ T7249] invoke_syscall+0x98/0x244 [ 62.202523][ T7249] el0_svc_common+0xec/0x23c [ 62.202535][ T7249] do_el0_svc+0x4c/0x5c [ 62.202546][ T7249] el0_svc+0x64/0x260 [ 62.202556][ T7249] el0t_64_sync_handler+0x44/0x104 [ 62.202566][ T7249] el0t_64_sync+0x198/0x19c [ 62.211928][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.211938][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.211952][ T7159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.212463][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.212470][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.212484][ T7159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.224204][ T7159] hsr_slave_0: entered promiscuous mode [ 62.224502][ T7159] hsr_slave_1: entered promiscuous mode [ 62.224696][ T7159] debugfs: 'hsr0' already exists in 'hsr' [ 62.224706][ T7159] Cannot create hsr debugfs directory [ 62.392905][ T4400] 8021q: adding VLAN 0 to HW filter on device eth10 [ 62.412039][ T4472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.416151][ T7159] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 62.430294][ T7159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.432400][ T7159] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 62.470929][ T7159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.472865][ T7159] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 62.488710][ T7159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.492282][ T7159] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 62.497804][ T7159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.516808][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.516849][ T7159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.516949][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.516990][ T7159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.542993][ T86] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.544651][ T86] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.655854][ T7159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.662477][ T7159] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.666598][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.666649][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.667194][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.667216][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.694791][ T7296] loop6: detected capacity change from 0 to 512 [ 62.742174][ T7296] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.798: corrupted xattr block 33: invalid header [ 62.760248][ T7296] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.798: corrupted xattr block 33: invalid header [ 62.767080][ T7296] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.798: corrupted xattr block 33: invalid header [ 62.875694][ T7296] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.798: corrupted xattr block 33: invalid header [ 62.892342][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.910602][ T7159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.912437][ T7328] loop4: detected capacity change from 0 to 256 [ 62.915842][ T4400] 8021q: adding VLAN 0 to HW filter on device eth11 [ 62.927998][ T7331] EXT4-fs error (device loop6): ext4_xattr_block_get:608: inode #15: comm syz.6.798: corrupted xattr block 33: invalid header [ 62.932494][ T7331] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 62.936159][ T7331] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 62.939064][ T7331] EXT4-fs (loop6): This should not happen!! Data will be lost [ 62.939064][ T7331] [ 62.940917][ T7331] EXT4-fs (loop6): Total free blocks count 0 [ 62.942000][ T7331] EXT4-fs (loop6): Free/Dirty block details [ 62.943093][ T7331] EXT4-fs (loop6): free_blocks=65280 [ 62.944066][ T7331] EXT4-fs (loop6): dirty_blocks=8 [ 62.944613][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.802'. [ 62.945910][ T4724] block nbd0: Receive control failed (result -107) [ 62.948015][ T7331] EXT4-fs (loop6): Block reservation details [ 62.949866][ T7331] EXT4-fs (loop6): i_reserved_data_blocks=8 [ 63.031602][ T7159] veth0_vlan: entered promiscuous mode [ 63.035545][ T7159] veth1_vlan: entered promiscuous mode [ 63.044367][ T7159] veth0_macvtap: entered promiscuous mode [ 63.052182][ T7159] veth1_macvtap: entered promiscuous mode [ 63.065413][ T7159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.073380][ T7159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.077193][ T86] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.077247][ T86] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.077276][ T86] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.108240][ T54] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.112448][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.112472][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.147951][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.147992][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.456400][ T7371] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 63.556880][ T7381] FAULT_INJECTION: forcing a failure. [ 63.556880][ T7381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.559822][ T7381] CPU: 1 UID: 0 PID: 7381 Comm: syz.7.819 Tainted: G L syzkaller #0 PREEMPT [ 63.559844][ T7381] Tainted: [L]=SOFTLOCKUP [ 63.559848][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 63.559854][ T7381] Call trace: [ 63.559857][ T7381] show_stack+0x2c/0x3c (C) [ 63.559880][ T7381] __dump_stack+0x30/0x40 [ 63.559894][ T7381] dump_stack_lvl+0xd8/0x12c [ 63.559906][ T7381] dump_stack+0x1c/0x28 [ 63.559917][ T7381] should_fail_ex+0x41c/0x590 [ 63.559930][ T7381] should_fail+0x14/0x24 [ 63.559941][ T7381] should_fail_usercopy+0x20/0x30 [ 63.559953][ T7381] semctl_info+0x248/0x4a8 [ 63.559963][ T7381] __arm64_sys_semctl+0x1f0/0x438 [ 63.559973][ T7381] invoke_syscall+0x98/0x244 [ 63.559985][ T7381] el0_svc_common+0xec/0x23c [ 63.559996][ T7381] do_el0_svc+0x4c/0x5c [ 63.560007][ T7381] el0_svc+0x64/0x260 [ 63.560018][ T7381] el0t_64_sync_handler+0x44/0x104 [ 63.560028][ T7381] el0t_64_sync+0x198/0x19c [ 63.611920][ T4724] Bluetooth: hci1: command tx timeout [ 63.634524][ T7384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.746629][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.825'. [ 63.780243][ T4472] kernel write not supported for file [eventfd] (pid: 4472 comm: kworker/0:3) [ 63.786469][ T7404] loop2: detected capacity change from 0 to 512 [ 63.810732][ T7404] EXT4-fs (loop2): Test dummy encryption mode enabled [ 63.826210][ T7404] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.829: inode has both inline data and extents flags [ 63.826245][ T7404] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.826358][ T7404] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.829: couldn't read orphan inode 15 (err -117) [ 63.826371][ T7404] loop2: lost filesystem error report for type 5 error -117 [ 63.828173][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 63.828190][ C0] EXT4-fs (loop2): initial error at time 63: ext4_orphan_get:1403: inode 15 [ 63.828207][ C0] EXT4-fs (loop2): last error at time 63: ext4_orphan_get:1408 [ 63.830527][ T7404] EXT4-fs mount: 27 callbacks suppressed [ 63.830538][ T7404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.858419][ T7407] loop6: detected capacity change from 0 to 512 [ 63.858771][ T7407] EXT4-fs: Ignoring removed orlov option [ 63.865737][ T7407] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 63.866291][ T7407] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #11: comm syz.6.831: corrupted inode contents [ 63.866320][ T7407] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.869220][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 63.869236][ C1] EXT4-fs (loop6): initial error at time 63: mb_free_blocks:2049: inode 11: block 64 [ 63.869254][ C1] EXT4-fs (loop6): last error at time 63: ext4_do_update_inode:5801: inode 11 [ 63.888430][ T7407] EXT4-fs error (device loop6): ext4_dirty_inode:6731: inode #11: comm syz.6.831: mark_inode_dirty error [ 63.888473][ T7407] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.891514][ T7407] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.831: invalid indirect mapped block 1 (level 1) [ 63.891553][ T7407] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.891974][ T7407] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #11: comm syz.6.831: corrupted inode contents [ 63.892003][ T7407] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.895687][ T7407] EXT4-fs error (device loop6) in ext4_orphan_del:304: Corrupt filesystem [ 63.895709][ T7407] loop6: lost filesystem error report for type 5 error -117 [ 63.895919][ T7407] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #11: comm syz.6.831: corrupted inode contents [ 63.895931][ T7407] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.896055][ T7407] EXT4-fs error (device loop6): ext4_truncate:4721: inode #11: comm syz.6.831: mark_inode_dirty error [ 63.896066][ T7407] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 63.896199][ T7407] EXT4-fs error (device loop6) in ext4_process_orphan:346: Corrupt filesystem [ 63.896208][ T7407] loop6: lost filesystem error report for type 5 error -117 [ 63.896349][ T7407] EXT4-fs (loop6): 1 truncate cleaned up [ 63.896802][ T7407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.907958][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.928376][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 63.965165][ T7410] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.831: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 64.013574][ T7412] loop7: detected capacity change from 0 to 256 [ 64.055470][ T7407] EXT4-fs error (device loop6): ext4_readdir:280: inode #2: block 13: comm syz.6.831: path /100/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0 [ 64.055974][ T7412] FAT-fs (loop7): unable to read block(809802661888) for building NFS inode [ 64.136010][ T5342] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.142288][ T7419] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 64.146741][ T7419] loop2: detected capacity change from 0 to 512 [ 64.182697][ T7419] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a840c018, mo2=0082] [ 64.182780][ T7419] System zones: 2-12, 7-7 [ 64.188322][ T7419] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #17: comm syz.2.835: iget: immutable or append flags not allowed on symlinks [ 64.188360][ T7419] loop2: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 64.196428][ T7419] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.835: couldn't read orphan inode 17 (err -117) [ 64.196470][ T7419] loop2: lost filesystem error report for type 5 error -117 [ 64.198405][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 64.198419][ C1] EXT4-fs (loop2): initial error at time 64: ext4_orphan_get:1403: inode 17 [ 64.198436][ C1] EXT4-fs (loop2): last error at time 64: ext4_orphan_get:1408 [ 64.199581][ T7419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.220189][ T7421] FAULT_INJECTION: forcing a failure. [ 64.220189][ T7421] name failslab, interval 1, probability 0, space 0, times 0 [ 64.220227][ T7421] CPU: 1 UID: 0 PID: 7421 Comm: syz.4.836 Tainted: G L syzkaller #0 PREEMPT [ 64.220245][ T7421] Tainted: [L]=SOFTLOCKUP [ 64.220249][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 64.220255][ T7421] Call trace: [ 64.220258][ T7421] show_stack+0x2c/0x3c (C) [ 64.220280][ T7421] __dump_stack+0x30/0x40 [ 64.220293][ T7421] dump_stack_lvl+0xd8/0x12c [ 64.220305][ T7421] dump_stack+0x1c/0x28 [ 64.220316][ T7421] should_fail_ex+0x41c/0x590 [ 64.220329][ T7421] should_failslab+0xc4/0x120 [ 64.220342][ T7421] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 64.220356][ T7421] sock_alloc_inode+0x30/0x180 [ 64.220367][ T7421] alloc_inode+0x68/0x198 [ 64.220378][ T7421] sock_alloc+0x4c/0x204 [ 64.220386][ T7421] __sock_create+0x108/0x670 [ 64.220394][ T7421] sock_create_kern+0x4c/0x64 [ 64.220403][ T7421] smc_create_clcsk+0x40/0xb8 [ 64.220416][ T7421] smc_create+0xe8/0x47c [ 64.220427][ T7421] __sock_create+0x31c/0x670 [ 64.220436][ T7421] __sys_socket_create+0xc0/0x11c [ 64.220445][ T7421] __sys_socket+0x44/0xec [ 64.220453][ T7421] __arm64_sys_socket+0x84/0x9c [ 64.220462][ T7421] invoke_syscall+0x98/0x244 [ 64.220474][ T7421] el0_svc_common+0xec/0x23c [ 64.220486][ T7421] do_el0_svc+0x4c/0x5c [ 64.220497][ T7421] el0_svc+0x64/0x260 [ 64.220507][ T7421] el0t_64_sync_handler+0x44/0x104 [ 64.220517][ T7421] el0t_64_sync+0x198/0x19c [ 64.220540][ T7421] socket: no more sockets [ 64.253505][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.424099][ T7446] loop2: detected capacity change from 0 to 256 [ 64.452288][ T7449] input: syz0 as /devices/virtual/input/input6 [ 64.490558][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.490614][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.500485][ T9] cfg80211: failed to load regulatory.db [ 64.669008][ T7470] Bluetooth: MGMT ver 1.23 [ 64.805730][ T7479] loop3: detected capacity change from 0 to 8192 [ 64.807852][ T7479] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.888728][ T7483] input input7: cannot allocate more than FF_MAX_EFFECTS effects [ 64.974701][ T4813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.981448][ T7488] loop6: detected capacity change from 0 to 512 [ 65.045378][ T7488] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.098769][ T7488] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 65.105590][ T7488] EXT4-fs (loop6): Delayed block allocation failed for inode 13 at logical offset 1 with max blocks 32 with error 28 [ 65.105629][ T7488] EXT4-fs (loop6): This should not happen!! Data will be lost [ 65.105629][ T7488] [ 65.105639][ T7488] EXT4-fs (loop6): Total free blocks count 0 [ 65.105648][ T7488] EXT4-fs (loop6): Free/Dirty block details [ 65.105657][ T7488] EXT4-fs (loop6): free_blocks=65280 [ 65.105668][ T7488] EXT4-fs (loop6): dirty_blocks=32 [ 65.105676][ T7488] EXT4-fs (loop6): Block reservation details [ 65.105683][ T7488] EXT4-fs (loop6): i_reserved_data_blocks=32 [ 65.175826][ T5342] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.450524][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.510786][ T7530] loop3: detected capacity change from 0 to 128 [ 65.527151][ T7531] Injecting memory failure for pfn 0x13a96e at process virtual address 0x20000000 [ 65.530359][ T7530] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 65.533663][ T7531] Memory failure: 0x13a96e: Sending SIGBUS to syz.6.878:7531 due to hardware memory corruption [ 65.533705][ T7531] Memory failure: 0x13a96e: recovery action for dirty LRU page: Recovered [ 65.533730][ T7531] Injecting memory failure for pfn 0x2190ff at process virtual address 0x20001000 [ 65.533822][ T7531] Memory failure: 0x2190ff: Sending SIGBUS to syz.6.878:7531 due to hardware memory corruption [ 65.533843][ T7531] Memory failure: 0x2190ff: recovery action for already poisoned page: Failed [ 65.624412][ T7540] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 65.628607][ T4717] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.656442][ T7540] EXT4-fs (loop4): shut down requested (1) [ 65.688425][ T4724] Bluetooth: hci1: command tx timeout [ 65.713253][ T4709] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 65.797337][ T7554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.806019][ T7554] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 65.806503][ T7554] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 65.806517][ T7554] EXT4-fs (loop7): This should not happen!! Data will be lost [ 65.806517][ T7554] [ 65.806526][ T7554] EXT4-fs (loop7): Total free blocks count 0 [ 65.806533][ T7554] EXT4-fs (loop7): Free/Dirty block details [ 65.806541][ T7554] EXT4-fs (loop7): free_blocks=2415919504 [ 65.806549][ T7554] EXT4-fs (loop7): dirty_blocks=32 [ 65.806556][ T7554] EXT4-fs (loop7): Block reservation details [ 65.806562][ T7554] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 65.821941][ T86] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 65.826618][ T7562] EXT4-fs: Ignoring removed orlov option [ 65.844369][ T7562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.889737][ T5342] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.922803][ T7572] FAULT_INJECTION: forcing a failure. [ 65.922803][ T7572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 65.925618][ T7572] CPU: 1 UID: 0 PID: 7572 Comm: syz.4.898 Tainted: G L syzkaller #0 PREEMPT [ 65.925645][ T7572] Tainted: [L]=SOFTLOCKUP [ 65.925650][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 65.925659][ T7572] Call trace: [ 65.925663][ T7572] show_stack+0x2c/0x3c (C) [ 65.925683][ T7572] __dump_stack+0x30/0x40 [ 65.925696][ T7572] dump_stack_lvl+0xd8/0x12c [ 65.925708][ T7572] dump_stack+0x1c/0x28 [ 65.925719][ T7572] should_fail_ex+0x41c/0x590 [ 65.925732][ T7572] should_fail+0x14/0x24 [ 65.925743][ T7572] should_fail_usercopy+0x20/0x30 [ 65.925754][ T7572] _inline_copy_from_user+0x3c/0x174 [ 65.925766][ T7572] __arm64_sys_io_uring_register+0x1d0/0x13fc [ 65.925777][ T7572] invoke_syscall+0x98/0x244 [ 65.925789][ T7572] el0_svc_common+0xec/0x23c [ 65.925800][ T7572] do_el0_svc+0x4c/0x5c [ 65.925811][ T7572] el0_svc+0x64/0x260 [ 65.925822][ T7572] el0t_64_sync_handler+0x44/0x104 [ 65.925832][ T7572] el0t_64_sync+0x198/0x19c [ 66.039362][ T7579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 66.070165][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 66.076251][ T7586] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.902: iget: bad i_size value: 38620345925642 [ 66.076294][ T7586] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 66.078151][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 66.078165][ C0] EXT4-fs (loop6): initial error at time 66: ext4_orphan_get:1403: inode 15 [ 66.078185][ C0] EXT4-fs (loop6): last error at time 66: ext4_orphan_get:1403: inode 15 [ 66.080375][ T7586] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.902: couldn't read orphan inode 15 (err -117) [ 66.080393][ T7586] loop6: lost filesystem error report for type 5 error -117 [ 66.082271][ T7586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.126811][ T7586] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.902: bg 0: block 5: invalid block bitmap [ 66.128096][ T7586] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 66.131034][ T7586] EXT4-fs (loop6): This should not happen!! Data will be lost [ 66.131034][ T7586] [ 66.131055][ T7586] EXT4-fs (loop6): Total free blocks count 0 [ 66.131065][ T7586] EXT4-fs (loop6): Free/Dirty block details [ 66.131099][ T7586] EXT4-fs (loop6): free_blocks=0 [ 66.131121][ T7586] EXT4-fs (loop6): dirty_blocks=2 [ 66.131128][ T7586] EXT4-fs (loop6): Block reservation details [ 66.131135][ T7586] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 66.164758][ T7592] netlink: 272 bytes leftover after parsing attributes in process `syz.2.906'. [ 66.191136][ T7595] EXT4-fs: Ignoring removed bh option [ 66.195794][ T7595] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 66.200740][ T5342] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.207232][ T7595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.273912][ T4709] EXT4-fs error (device loop4): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /159/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 66.283143][ T4709] EXT4-fs (loop4): Remounting filesystem read-only [ 66.310502][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.555900][ T7645] TCP: TCP_TX_DELAY enabled [ 66.563295][ T7641] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 66.728339][ T7665] FAULT_INJECTION: forcing a failure. [ 66.728339][ T7665] name failslab, interval 1, probability 0, space 0, times 0 [ 66.728385][ T7665] CPU: 1 UID: 0 PID: 7665 Comm: syz.3.939 Tainted: G L syzkaller #0 PREEMPT [ 66.728409][ T7665] Tainted: [L]=SOFTLOCKUP [ 66.728413][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 66.728419][ T7665] Call trace: [ 66.728422][ T7665] show_stack+0x2c/0x3c (C) [ 66.728445][ T7665] __dump_stack+0x30/0x40 [ 66.728458][ T7665] dump_stack_lvl+0xd8/0x12c [ 66.728470][ T7665] dump_stack+0x1c/0x28 [ 66.728482][ T7665] should_fail_ex+0x41c/0x590 [ 66.728495][ T7665] should_failslab+0xc4/0x120 [ 66.728508][ T7665] kmem_cache_alloc_noprof+0x94/0x5d4 [ 66.728521][ T7665] do_getname+0x48/0x234 [ 66.728530][ T7665] getname_flags+0x2c/0x3c [ 66.728537][ T7665] __arm64_sys_statx+0xd4/0x174 [ 66.728549][ T7665] invoke_syscall+0x98/0x244 [ 66.728561][ T7665] el0_svc_common+0xec/0x23c [ 66.728572][ T7665] do_el0_svc+0x4c/0x5c [ 66.728584][ T7665] el0_svc+0x64/0x260 [ 66.728594][ T7665] el0t_64_sync_handler+0x44/0x104 [ 66.728604][ T7665] el0t_64_sync+0x198/0x19c [ 66.855553][ T7676] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 66.855608][ T7676] System zones: 1-3, 19-19, 35-36 [ 66.856555][ T7676] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 66.862728][ T7676] EXT4-fs warning (device loop3): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 66.871283][ T4717] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.963473][ T7684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.975166][ T7683] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 66.978801][ T7683] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 66.981610][ T7683] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.981610][ T7683] [ 66.983507][ T7683] EXT4-fs (loop3): Total free blocks count 0 [ 66.984778][ T7683] EXT4-fs (loop3): Free/Dirty block details [ 66.986012][ T7683] EXT4-fs (loop3): free_blocks=4096 [ 66.987095][ T7683] EXT4-fs (loop3): dirty_blocks=64 [ 66.988081][ T7683] EXT4-fs (loop3): Block reservation details [ 66.989369][ T7683] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 66.997670][ T3060] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 67.024327][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.947'. [ 67.024361][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.947'. [ 67.024422][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.947'. [ 67.024432][ T7688] netlink: 28 bytes leftover after parsing attributes in process `syz.3.947'. [ 67.049532][ T26] net_ratelimit: 2 callbacks suppressed [ 67.049563][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.315932][ T7702] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.345435][ T7702] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 67.350079][ T7702] EXT4-fs (loop6): mount failed [ 67.480582][ T7719] binder: 7718:7719 ioctl c0306201 200001c0 returned -14 [ 67.620101][ T7736] EXT4-fs: Ignoring removed oldalloc option [ 67.620475][ T7736] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 67.631523][ T7736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.660582][ T7736] EXT4-fs error (device loop2): __ext4_remount:6872: comm syz.2.966: Abort forced by user [ 67.661274][ T7736] EXT4-fs (loop2): Remounting filesystem read-only [ 67.661291][ T7736] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 67.671101][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.768608][ T4724] Bluetooth: hci1: command tx timeout [ 68.028313][ T7759] ip_tables: iptables: counters copy to user failed while replacing table [ 68.031420][ T7759] tipc: Started in network mode [ 68.031435][ T7759] tipc: Node identity ac141441, cluster identity 4711 [ 68.032159][ T7759] tipc: Enabled bearer , priority 10 [ 68.060117][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.060153][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.084773][ T4798] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.085299][ T4798] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.198863][ T7767] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 68.307001][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 68.345259][ T7776] team0: Port device team_slave_0 removed [ 68.751330][ T7822] set_capacity_and_notify: 14 callbacks suppressed [ 68.759068][ T7822] loop6: detected capacity change from 0 to 512 [ 68.774043][ T7822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.892486][ T7830] loop3: detected capacity change from 0 to 256 [ 68.899530][ T7830] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.908343][ T7830] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.913621][ T5342] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.119673][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1016'. [ 69.119706][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1016'. [ 69.143192][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1016'. [ 69.143221][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1016'. [ 69.149918][ T10] tipc: Node number set to 2886997057 [ 69.192487][ T7863] binder: 7862:7863 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000001000000 != 0000000000000000 [ 69.192517][ T7863] binder: 7862:7863 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 69.192530][ T7863] binder: 7863 RLIMIT_NICE not set [ 69.320330][ T7879] loop7: detected capacity change from 0 to 512 [ 69.320658][ T7879] EXT4-fs: Ignoring removed nobh option [ 69.328549][ T7879] fscrypt (loop7, inode 2): Error -61 getting encryption context [ 69.330833][ T7879] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -61 [ 69.333215][ T7879] EXT4-fs error (device loop7): ext4_orphan_get:1403: inode #13: comm syz.7.1027: inode has both inline data and extents flags [ 69.336229][ T7879] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 69.336505][ T7879] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.1027: couldn't read orphan inode 13 (err -117) [ 69.336536][ T7879] loop7: lost filesystem error report for type 5 error -117 [ 69.338533][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 69.338547][ C1] EXT4-fs (loop7): initial error at time 69: ext4_orphan_get:1403: inode 13 [ 69.338565][ C1] EXT4-fs (loop7): last error at time 69: ext4_orphan_get:1408 [ 69.339102][ T7879] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.356851][ T7879] EXT4-fs (loop7): shut down requested (2) [ 69.373059][ T7159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.381561][ T7882] loop4: detected capacity change from 0 to 512 [ 69.384774][ T7882] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.389698][ T7882] EXT4-fs (loop4): 1 truncate cleaned up [ 69.390192][ T7882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.402305][ T7882] EXT4-fs error (device loop4): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.4.1028: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 69.408534][ T7882] EXT4-fs (loop4): Remounting filesystem read-only [ 69.410049][ T7882] EXT4-fs warning (device loop4): ext4_rename_delete:3741: inode #2: comm syz.4.1028: Deleting old file: nlink 5, error=-117 [ 69.440815][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.776153][ T7925] FAULT_INJECTION: forcing a failure. [ 69.776153][ T7925] name failslab, interval 1, probability 0, space 0, times 0 [ 69.776188][ T7925] CPU: 0 UID: 0 PID: 7925 Comm: syz.4.1048 Tainted: G L syzkaller #0 PREEMPT [ 69.776204][ T7925] Tainted: [L]=SOFTLOCKUP [ 69.776209][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 69.776214][ T7925] Call trace: [ 69.776218][ T7925] show_stack+0x2c/0x3c (C) [ 69.776239][ T7925] __dump_stack+0x30/0x40 [ 69.776251][ T7925] dump_stack_lvl+0xd8/0x12c [ 69.776263][ T7925] dump_stack+0x1c/0x28 [ 69.776275][ T7925] should_fail_ex+0x41c/0x590 [ 69.776288][ T7925] should_failslab+0xc4/0x120 [ 69.776301][ T7925] __kmalloc_noprof+0x108/0x6c8 [ 69.776309][ T7925] tomoyo_encode2+0x10c/0x330 [ 69.776320][ T7925] tomoyo_encode+0x34/0x50 [ 69.776331][ T7925] tomoyo_realpath_from_path+0x488/0x4dc [ 69.776341][ T7925] tomoyo_path_number_perm+0x1f0/0x500 [ 69.776351][ T7925] tomoyo_path_mknod+0x13c/0x18c [ 69.776362][ T7925] security_path_mknod+0x16c/0x340 [ 69.776371][ T7925] filename_mknodat+0x284/0x5a0 [ 69.776382][ T7925] __arm64_sys_mknodat+0xc0/0xe8 [ 69.776392][ T7925] invoke_syscall+0x98/0x244 [ 69.776404][ T7925] el0_svc_common+0xec/0x23c [ 69.776416][ T7925] do_el0_svc+0x4c/0x5c [ 69.776428][ T7925] el0_svc+0x64/0x260 [ 69.776439][ T7925] el0t_64_sync_handler+0x44/0x104 [ 69.776449][ T7925] el0t_64_sync+0x198/0x19c [ 69.776463][ T7925] ERROR: Out of memory at tomoyo_realpath_from_path. [ 69.852240][ T4724] Bluetooth: hci1: command tx timeout [ 69.885849][ T7929] FAULT_INJECTION: forcing a failure. [ 69.885849][ T7929] name failslab, interval 1, probability 0, space 0, times 0 [ 69.885880][ T7929] CPU: 1 UID: 0 PID: 7929 Comm: syz.4.1050 Tainted: G L syzkaller #0 PREEMPT [ 69.885893][ T7929] Tainted: [L]=SOFTLOCKUP [ 69.885897][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 69.885902][ T7929] Call trace: [ 69.885905][ T7929] show_stack+0x2c/0x3c (C) [ 69.885925][ T7929] __dump_stack+0x30/0x40 [ 69.885938][ T7929] dump_stack_lvl+0xd8/0x12c [ 69.885950][ T7929] dump_stack+0x1c/0x28 [ 69.885963][ T7929] should_fail_ex+0x41c/0x590 [ 69.885978][ T7929] should_failslab+0xc4/0x120 [ 69.885993][ T7929] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 69.886008][ T7929] __d_alloc+0x50/0x690 [ 69.886018][ T7929] d_alloc_pseudo+0x2c/0xd8 [ 69.886027][ T7929] alloc_path_pseudo+0xe8/0x1d4 [ 69.886036][ T7929] alloc_file_pseudo+0xb0/0x198 [ 69.886044][ T7929] __shmem_file_setup+0x210/0x284 [ 69.886056][ T7929] shmem_zero_setup+0x90/0x130 [ 69.886067][ T7929] mmap_region+0x12f4/0x1c30 [ 69.886080][ T7929] do_mmap+0xb88/0x1104 [ 69.886089][ T7929] vm_mmap_pgoff+0x298/0x46c [ 69.886097][ T7929] ksys_mmap_pgoff+0xd0/0x5b4 [ 69.886106][ T7929] __arm64_sys_mmap+0x110/0x12c [ 69.886118][ T7929] invoke_syscall+0x98/0x244 [ 69.886135][ T7929] el0_svc_common+0xec/0x23c [ 69.886147][ T7929] do_el0_svc+0x4c/0x5c [ 69.886159][ T7929] el0_svc+0x64/0x260 [ 69.886170][ T7929] el0t_64_sync_handler+0x44/0x104 [ 69.886180][ T7929] el0t_64_sync+0x198/0x19c [ 69.920149][ T7931] loop4: detected capacity change from 0 to 512 [ 69.921690][ T7931] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.927485][ T7931] EXT4-fs (loop4): 1 truncate cleaned up [ 69.927963][ T7931] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.938479][ T7931] EXT4-fs error (device loop4): __ext4_expand_extra_isize:6537: inode #12: comm syz.4.1051: bad extra_isize 62 (inode size 256) [ 69.943474][ T7931] EXT4-fs (loop4): Remounting filesystem read-only [ 69.959917][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.983232][ T4796] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 69.989471][ T4796] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.157842][ T7947] loop4: detected capacity change from 0 to 4096 [ 70.159916][ T7947] EXT4-fs: Ignoring removed mblk_io_submit option [ 70.165603][ T7947] EXT4-fs (loop4): Test dummy encryption mode enabled [ 70.180492][ T7947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.200063][ T7950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1057'. [ 70.220380][ T7950] netlink: 34959 bytes leftover after parsing attributes in process `syz.3.1057'. [ 70.220885][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.316435][ T7960] loop4: detected capacity change from 0 to 512 [ 70.330518][ T7960] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #12: comm syz.4.1062: missing EA_INODE flag [ 70.330554][ T7960] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 70.333293][ T7960] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.1062: error while reading EA inode 12 err=-117 [ 70.333330][ T7960] loop4: lost filesystem error report for type 5 error -117 [ 70.335649][ T7960] EXT4-fs (loop4): 1 orphan inode deleted [ 70.336113][ T7960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.421683][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.728385][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.728498][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.824838][ T7999] block nbd7: Cannot add socket to a running device [ 71.048791][ T4813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.252240][ T8010] netlink: 'syz.6.1084': attribute type 1 has an invalid length. [ 71.271755][ T8015] loop6: detected capacity change from 0 to 512 [ 71.272087][ T8015] EXT4-fs: Ignoring removed orlov option [ 71.290854][ T8015] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.293863][ T4724] block nbd2: Receive control failed (result -32) [ 71.299113][ T7971] block nbd2: shutting down sockets [ 71.334771][ T5342] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.605753][ T50] block nbd7: Receive control failed (result -32) [ 71.607283][ T7998] block nbd7: shutting down sockets [ 72.088404][ T4813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.808484][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.808584][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.808672][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.808744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.808813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.808880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.808951][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.809098][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.809172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.505999][ T8049] loop7: detected capacity change from 0 to 2048 [ 76.533033][ T8056] FAULT_INJECTION: forcing a failure. [ 76.533033][ T8056] name failslab, interval 1, probability 0, space 0, times 0 [ 76.535798][ T8056] CPU: 0 UID: 0 PID: 8056 Comm: syz.2.1101 Tainted: G L syzkaller #0 PREEMPT [ 76.535815][ T8056] Tainted: [L]=SOFTLOCKUP [ 76.535819][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 76.535825][ T8056] Call trace: [ 76.535828][ T8056] show_stack+0x2c/0x3c (C) [ 76.535851][ T8056] __dump_stack+0x30/0x40 [ 76.535864][ T8056] dump_stack_lvl+0xd8/0x12c [ 76.535876][ T8056] dump_stack+0x1c/0x28 [ 76.535888][ T8056] should_fail_ex+0x41c/0x590 [ 76.535900][ T8056] should_failslab+0xc4/0x120 [ 76.535913][ T8056] kmem_cache_alloc_noprof+0x94/0x5d4 [ 76.535926][ T8056] ioctx_alloc+0xf4/0x780 [ 76.535935][ T8056] __arm64_sys_io_setup+0x14c/0x2f4 [ 76.535944][ T8056] invoke_syscall+0x98/0x244 [ 76.535955][ T8056] el0_svc_common+0xec/0x23c [ 76.535967][ T8056] do_el0_svc+0x4c/0x5c [ 76.535978][ T8056] el0_svc+0x64/0x260 [ 76.535989][ T8056] el0t_64_sync_handler+0x44/0x104 [ 76.535999][ T8056] el0t_64_sync+0x198/0x19c [ 76.546827][ T8049] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.564293][ T8049] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz.7.1099: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 76.570443][ T8049] EXT4-fs (loop7): Remounting filesystem read-only [ 76.603602][ T7159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.801421][ T8100] loop6: detected capacity change from 0 to 512 [ 76.809355][ T8100] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 76.817841][ T8100] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1115: bad orphan inode 131083 [ 76.817879][ T8100] loop6: lost filesystem error report for type 5 error -117 [ 76.820164][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 76.820176][ C0] EXT4-fs (loop6): initial error at time 76: ext4_orphan_get:1429 [ 76.820190][ C0] EXT4-fs (loop6): last error at time 76: ext4_orphan_get:1429 [ 76.828399][ T8100] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.873826][ T8100] fscrypt (loop6, inode 18): Mutually exclusive encryption flags (0x0c) [ 76.911365][ T5342] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.034012][ T4796] kernel read not supported for file /529/make-it-fail (pid: 4796 comm: kworker/1:3) [ 77.154467][ T8143] loop6: detected capacity change from 0 to 512 [ 77.160631][ T8143] EXT4-fs (loop6): Test dummy encryption mode enabled [ 77.165071][ T8143] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.1128: inode has both inline data and extents flags [ 77.167070][ T8143] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.167614][ T8146] loop2: detected capacity change from 0 to 512 [ 77.168211][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 77.168224][ C1] EXT4-fs (loop6): initial error at time 77: ext4_orphan_get:1403: inode 15 [ 77.168242][ C1] EXT4-fs (loop6): last error at time 77: ext4_orphan_get:1403: inode 15 [ 77.169465][ T8143] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.1128: couldn't read orphan inode 15 (err -117) [ 77.169486][ T8143] loop6: lost filesystem error report for type 5 error -117 [ 77.172165][ T8143] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.192292][ T8146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.211649][ T8146] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 77.214168][ T8146] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 1 with max blocks 32 with error 28 [ 77.214191][ T8146] EXT4-fs (loop2): This should not happen!! Data will be lost [ 77.214191][ T8146] [ 77.214200][ T8146] EXT4-fs (loop2): Total free blocks count 0 [ 77.214207][ T8146] EXT4-fs (loop2): Free/Dirty block details [ 77.214216][ T8146] EXT4-fs (loop2): free_blocks=65280 [ 77.214224][ T8146] EXT4-fs (loop2): dirty_blocks=32 [ 77.214230][ T8146] EXT4-fs (loop2): Block reservation details [ 77.214237][ T8146] EXT4-fs (loop2): i_reserved_data_blocks=32 [ 77.240928][ T8143] EXT4-fs (loop6): shut down requested (2) [ 77.249428][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.275325][ T5342] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.293111][ T4796] net_ratelimit: 47 callbacks suppressed [ 77.293167][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.295924][ T26] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.479570][ T8177] bonding: no command found in bonding_masters - use +ifname or -ifname [ 77.543701][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 77.555550][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.581092][ T8195] loop6: detected capacity change from 0 to 512 [ 77.581454][ T8195] EXT4-fs: Ignoring removed i_version option [ 77.581477][ T8195] EXT4-fs: Ignoring removed bh option [ 77.605272][ T8195] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.1141: inode #13: comm syz.6.1141: iget: illegal inode # [ 77.605316][ T8195] loop6: lost filesystem error report for type 5 error -117 [ 77.605497][ T8195] EXT4-fs (loop6): Remounting filesystem read-only [ 77.605951][ T8195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.628260][ T8195] EXT4-fs (loop6): shut down requested (2) [ 77.655173][ T5342] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.675014][ T8200] syzkaller1: entered promiscuous mode [ 77.675045][ T8200] syzkaller1: entered allmulticast mode [ 77.786446][ T8212] macvlan1: entered promiscuous mode [ 77.792762][ T8212] macvlan1: left promiscuous mode [ 77.805400][ T8215] loop3: detected capacity change from 0 to 1024 [ 77.815800][ T8215] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 77.835210][ T8215] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.1150: lblock 2 mapped to illegal pblock 2 (length 1) [ 77.835252][ T8215] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 77.835659][ T8215] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 77.835679][ T8215] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.1150: lblock 0 mapped to illegal pblock 48 (length 1) [ 77.835693][ T8215] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 77.835755][ T8215] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 77.835763][ T8215] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.1150: Failed to acquire dquot type 0 [ 77.835773][ T8215] loop3: lost filesystem error report for type 5 error -117 [ 77.835904][ T8215] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 77.835914][ T8215] loop3: lost filesystem error report for type 5 error -117 [ 77.835982][ T8215] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.1150: mark_inode_dirty error [ 77.835993][ T8215] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 77.836064][ T8215] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 77.836100][ T8215] EXT4-fs (loop3): 1 orphan inode deleted [ 77.836574][ T8215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.859408][ T1161] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 77.872297][ T1161] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 77.875838][ T1161] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 77.912856][ T8215] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1150'. [ 77.939392][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.939919][ T4717] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 77.939933][ T4717] loop3: lost filesystem error report for type 5 error -117 [ 77.941746][ T4717] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 77.941771][ T4717] loop3: lost filesystem error report for type 5 error -117 [ 77.942460][ T4717] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 77.942479][ T4717] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 77.942968][ T4717] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 77.942984][ T4717] loop3: lost filesystem error report for type 5 error -117 [ 77.959117][ T8231] sock: sock_set_timeout: `syz.7.1157' (pid 8231) tries to set negative timeout [ 78.290334][ T8270] loop2: detected capacity change from 0 to 512 [ 78.310747][ T8270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.315145][ T8270] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.1175: corrupted xattr block 33: invalid header [ 78.315436][ T8270] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.1175: corrupted xattr block 33: invalid header [ 78.315592][ T8270] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.1175: corrupted xattr block 33: invalid header [ 78.329262][ T4813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.346397][ T8270] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 78.346942][ T8270] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 78.346956][ T8270] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.346956][ T8270] [ 78.346964][ T8270] EXT4-fs (loop2): Total free blocks count 0 [ 78.346971][ T8270] EXT4-fs (loop2): Free/Dirty block details [ 78.346979][ T8270] EXT4-fs (loop2): free_blocks=65280 [ 78.346987][ T8270] EXT4-fs (loop2): dirty_blocks=31 [ 78.346994][ T8270] EXT4-fs (loop2): Block reservation details [ 78.347000][ T8270] EXT4-fs (loop2): i_reserved_data_blocks=31 [ 78.366695][ T4711] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.908359][ T8296] FAULT_INJECTION: forcing a failure. [ 78.908359][ T8296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.911160][ T8296] CPU: 0 UID: 0 PID: 8296 Comm: syz.6.1184 Tainted: G L syzkaller #0 PREEMPT [ 78.911181][ T8296] Tainted: [L]=SOFTLOCKUP [ 78.911186][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 78.911192][ T8296] Call trace: [ 78.911197][ T8296] show_stack+0x2c/0x3c (C) [ 78.911218][ T8296] __dump_stack+0x30/0x40 [ 78.911232][ T8296] dump_stack_lvl+0xd8/0x12c [ 78.911244][ T8296] dump_stack+0x1c/0x28 [ 78.911255][ T8296] should_fail_ex+0x41c/0x590 [ 78.911268][ T8296] should_fail+0x14/0x24 [ 78.911279][ T8296] should_fail_usercopy+0x20/0x30 [ 78.911291][ T8296] _inline_copy_from_user+0x3c/0x188 [ 78.911302][ T8296] copy_clone_args_from_user+0x1c8/0x5d0 [ 78.911311][ T8296] __arm64_sys_clone3+0x150/0x390 [ 78.911321][ T8296] invoke_syscall+0x98/0x244 [ 78.911333][ T8296] el0_svc_common+0xec/0x23c [ 78.911344][ T8296] do_el0_svc+0x4c/0x5c [ 78.911356][ T8296] el0_svc+0x64/0x260 [ 78.911366][ T8296] el0t_64_sync_handler+0x44/0x104 [ 78.911376][ T8296] el0t_64_sync+0x198/0x19c [ 79.045685][ T8300] loop6: detected capacity change from 0 to 8192 [ 79.144320][ T8312] loop7: detected capacity change from 0 to 1024 [ 79.216521][ T8312] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.301748][ T8322] netlink: 'syz.6.1196': attribute type 15 has an invalid length. [ 79.306150][ T8322] netlink: 'syz.6.1196': attribute type 15 has an invalid length. [ 79.352580][ T8324] loop6: detected capacity change from 0 to 256 [ 79.366702][ T8324] bio_check_eod: 26573 callbacks suppressed [ 79.366735][ T8324] syz.6.1198: attempt to access beyond end of device [ 79.366735][ T8324] loop6: rw=8388608, sector=1768, nr_sectors = 4 limit=256 [ 79.369008][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.560114][ T7159] EXT4-fs error (device loop7): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 79.565770][ T7159] EXT4-fs error (device loop7): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 79.573540][ T7159] EXT4-fs error (device loop7): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 79.579293][ T7159] EXT4-fs warning (device loop7): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.579442][ T7159] EXT4-fs error (device loop7): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 79.579612][ T7159] EXT4-fs error (device loop7): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 79.579817][ T7159] EXT4-fs error (device loop7): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 79.580176][ T7159] EXT4-fs warning (device loop7): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.580315][ T7159] EXT4-fs error (device loop7): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 79.580501][ T7159] EXT4-fs error (device loop7): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 79.580706][ T7159] EXT4-fs error (device loop7): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 79.580840][ T7159] EXT4-fs warning (device loop7): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.580941][ T7159] EXT4-fs error (device loop7): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /72/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 79.581382][ T7159] EXT4-fs warning (device loop7): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.581899][ T7159] EXT4-fs warning (device loop7): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.582482][ T7159] EXT4-fs warning (device loop7): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.582979][ T7159] EXT4-fs warning (device loop7): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.589702][ T7159] EXT4-fs warning (device loop7): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.590452][ T7159] EXT4-fs warning (device loop7): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.590959][ T7159] EXT4-fs warning (device loop7): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 79.651157][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.651585][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.921822][ T8358] binder: 8356:8358 ioctl c0306201 200001c0 returned -14 [ 79.969262][ T8364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1215'. [ 80.025544][ T7159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.026222][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1218'. [ 80.169177][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.174430][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.176705][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.190691][ T4724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.192622][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.268199][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.268227][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.329807][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.386729][ T8413] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 80.387183][ T8413] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 80.387466][ T8413] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 80.409555][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.505119][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.505213][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.505271][ T8384] bridge_slave_0: entered allmulticast mode [ 80.505672][ T8384] bridge_slave_0: entered promiscuous mode [ 80.506881][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.506939][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.506991][ T8384] bridge_slave_1: entered allmulticast mode [ 80.507411][ T8384] bridge_slave_1: entered promiscuous mode [ 80.514280][ T8384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.515153][ T8384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.522206][ T8384] team0: Port device team_slave_0 added [ 80.522942][ T8384] team0: Port device team_slave_1 added [ 80.529805][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.529828][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.530103][ T8384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.530677][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.530684][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.530698][ T8384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.541169][ T8384] hsr_slave_0: entered promiscuous mode [ 80.541431][ T8384] hsr_slave_1: entered promiscuous mode [ 80.541616][ T8384] debugfs: 'hsr0' already exists in 'hsr' [ 80.541627][ T8384] Cannot create hsr debugfs directory [ 80.576794][ T8427] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 80.618533][ T8432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1241'. [ 80.620546][ T8432] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1241'. [ 80.622551][ T8432] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1241'. [ 80.630487][ T8433] FAULT_INJECTION: forcing a failure. [ 80.630487][ T8433] name failslab, interval 1, probability 0, space 0, times 0 [ 80.630531][ T8433] CPU: 1 UID: 0 PID: 8433 Comm: syz.2.1240 Tainted: G L syzkaller #0 PREEMPT [ 80.630551][ T8433] Tainted: [L]=SOFTLOCKUP [ 80.630555][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 80.630561][ T8433] Call trace: [ 80.630564][ T8433] show_stack+0x2c/0x3c (C) [ 80.630583][ T8433] __dump_stack+0x30/0x40 [ 80.630595][ T8433] dump_stack_lvl+0xd8/0x12c [ 80.630607][ T8433] dump_stack+0x1c/0x28 [ 80.630618][ T8433] should_fail_ex+0x41c/0x590 [ 80.630630][ T8433] should_failslab+0xc4/0x120 [ 80.630643][ T8433] __kmalloc_noprof+0x108/0x6c8 [ 80.630651][ T8433] security_sk_alloc+0x60/0x35c [ 80.630663][ T8433] sk_prot_alloc+0xe0/0x1e8 [ 80.630676][ T8433] sk_alloc+0x44/0x3ac [ 80.630687][ T8433] __netlink_create+0x78/0x23c [ 80.630697][ T8433] netlink_create+0x3b4/0x6a0 [ 80.630706][ T8433] __sock_create+0x31c/0x670 [ 80.630715][ T8433] __sys_socket_create+0xc0/0x11c [ 80.630723][ T8433] __sys_socket+0x44/0xec [ 80.630732][ T8433] __arm64_sys_socket+0x84/0x9c [ 80.630740][ T8433] invoke_syscall+0x98/0x244 [ 80.630752][ T8433] el0_svc_common+0xec/0x23c [ 80.630764][ T8433] do_el0_svc+0x4c/0x5c [ 80.630775][ T8433] el0_svc+0x64/0x260 [ 80.630785][ T8433] el0t_64_sync_handler+0x44/0x104 [ 80.630795][ T8433] el0t_64_sync+0x198/0x19c [ 80.662045][ T8384] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 80.669767][ T8384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.677233][ T8438] TCP: tcp_parse_options: Illegal window scaling value 251 > 14 received [ 80.681860][ T8384] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 80.684146][ T8384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.684445][ T8384] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 80.691147][ T8384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.693201][ T8384] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 80.699466][ T8384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.750142][ T8384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.755569][ T8384] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.761160][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.761202][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.763659][ T8449] EXT4-fs: Ignoring removed oldalloc option [ 80.767577][ T8449] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 80.772387][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.772431][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.803562][ T8449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.830584][ T8449] EXT4-fs error (device loop4): __ext4_remount:6872: comm syz.4.1246: Abort forced by user [ 80.830790][ T8449] EXT4-fs (loop4): Remounting filesystem read-only [ 80.830799][ T8449] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 80.841994][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.984837][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.116421][ T8384] veth0_vlan: entered promiscuous mode [ 81.121757][ T8486] input: syz1 as /devices/virtual/input/input10 [ 81.127970][ T8384] veth1_vlan: entered promiscuous mode [ 81.143571][ T8488] debugfs: 'netdev:nicvf0' already exists in 'phy4' [ 81.147689][ T8384] veth0_macvtap: entered promiscuous mode [ 81.153691][ T8384] veth1_macvtap: entered promiscuous mode [ 81.168468][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.172747][ T8384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.178794][ T179] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.179778][ T1180] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.179808][ T1180] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.179831][ T1180] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.218275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.218645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.281952][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.281990][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.287841][ T8501] FAULT_INJECTION: forcing a failure. [ 81.287841][ T8501] name failslab, interval 1, probability 0, space 0, times 0 [ 81.287894][ T8501] CPU: 1 UID: 0 PID: 8501 Comm: syz.2.1262 Tainted: G L syzkaller #0 PREEMPT [ 81.287914][ T8501] Tainted: [L]=SOFTLOCKUP [ 81.287918][ T8501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 81.287924][ T8501] Call trace: [ 81.287927][ T8501] show_stack+0x2c/0x3c (C) [ 81.287946][ T8501] __dump_stack+0x30/0x40 [ 81.287959][ T8501] dump_stack_lvl+0xd8/0x12c [ 81.287970][ T8501] dump_stack+0x1c/0x28 [ 81.287982][ T8501] should_fail_ex+0x41c/0x590 [ 81.287995][ T8501] should_failslab+0xc4/0x120 [ 81.288008][ T8501] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 81.288021][ T8501] alloc_inode+0x84/0x198 [ 81.288032][ T8501] create_pipe_files+0x60/0x650 [ 81.288045][ T8501] __do_pipe_flags+0x5c/0x204 [ 81.288057][ T8501] do_pipe2+0xa0/0x250 [ 81.288064][ T8501] __arm64_sys_pipe2+0x64/0x7c [ 81.288072][ T8501] invoke_syscall+0x98/0x244 [ 81.288084][ T8501] el0_svc_common+0xec/0x23c [ 81.288096][ T8501] do_el0_svc+0x4c/0x5c [ 81.288107][ T8501] el0_svc+0x64/0x260 [ 81.288126][ T8501] el0t_64_sync_handler+0x44/0x104 [ 81.288137][ T8501] el0t_64_sync+0x198/0x19c [ 81.330804][ T179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.330841][ T179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.332392][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.332405][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.529700][ T8518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.584249][ T8518] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1268: corrupted xattr block 33: invalid header [ 81.587289][ T8518] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1268: corrupted xattr block 33: invalid header [ 81.590779][ T8518] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1268: corrupted xattr block 33: invalid header [ 81.688879][ T8518] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1268: corrupted xattr block 33: invalid header [ 81.736393][ T8518] EXT4-fs error (device loop4): ext4_xattr_block_get:608: inode #15: comm syz.4.1268: corrupted xattr block 33: invalid header [ 81.738738][ T8518] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 81.742710][ T8518] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 8 with error 28 [ 81.742734][ T8518] EXT4-fs (loop4): This should not happen!! Data will be lost [ 81.742734][ T8518] [ 81.742743][ T8518] EXT4-fs (loop4): Total free blocks count 0 [ 81.742751][ T8518] EXT4-fs (loop4): Free/Dirty block details [ 81.742760][ T8518] EXT4-fs (loop4): free_blocks=65280 [ 81.742769][ T8518] EXT4-fs (loop4): dirty_blocks=8 [ 81.742776][ T8518] EXT4-fs (loop4): Block reservation details [ 81.742782][ T8518] EXT4-fs (loop4): i_reserved_data_blocks=8 [ 81.794759][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.823912][ T8536] set_capacity_and_notify: 3 callbacks suppressed [ 81.826116][ T8536] loop8: detected capacity change from 0 to 128 [ 81.868771][ T8536] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.962535][ T8536] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.026727][ T8547] FAULT_INJECTION: forcing a failure. [ 82.026727][ T8547] name failslab, interval 1, probability 0, space 0, times 0 [ 82.026776][ T8547] CPU: 0 UID: 0 PID: 8547 Comm: syz.8.1279 Tainted: G L syzkaller #0 PREEMPT [ 82.026799][ T8547] Tainted: [L]=SOFTLOCKUP [ 82.026803][ T8547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 82.026810][ T8547] Call trace: [ 82.026814][ T8547] show_stack+0x2c/0x3c (C) [ 82.026840][ T8547] __dump_stack+0x30/0x40 [ 82.026856][ T8547] dump_stack_lvl+0xd8/0x12c [ 82.026868][ T8547] dump_stack+0x1c/0x28 [ 82.026880][ T8547] should_fail_ex+0x41c/0x590 [ 82.026893][ T8547] should_failslab+0xc4/0x120 [ 82.026906][ T8547] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 82.026920][ T8547] alloc_inode+0x84/0x198 [ 82.026931][ T8547] alloc_anon_inode+0x28/0x31c [ 82.026942][ T8547] anon_inode_make_secure_inode+0x84/0x18c [ 82.026955][ T8547] __arm64_sys_memfd_secret+0x120/0x370 [ 82.026966][ T8547] invoke_syscall+0x98/0x244 [ 82.026978][ T8547] el0_svc_common+0xec/0x23c [ 82.026990][ T8547] do_el0_svc+0x4c/0x5c [ 82.027001][ T8547] el0_svc+0x64/0x260 [ 82.027012][ T8547] el0t_64_sync_handler+0x44/0x104 [ 82.027022][ T8547] el0t_64_sync+0x198/0x19c [ 82.248246][ T50] Bluetooth: hci1: command tx timeout [ 82.488667][ T55] net_ratelimit: 1 callbacks suppressed [ 82.488700][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.626913][ T8588] loop2: detected capacity change from 0 to 512 [ 82.627384][ T8588] EXT4-fs: Ignoring removed nobh option [ 82.635030][ T8588] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 82.636723][ T8588] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 82.639634][ T8588] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #13: comm syz.2.1295: inode has both inline data and extents flags [ 82.642568][ T8588] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 82.648172][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 82.648201][ C0] EXT4-fs (loop2): initial error at time 82: ext4_orphan_get:1403: inode 13 [ 82.648238][ C0] EXT4-fs (loop2): last error at time 82: ext4_orphan_get:1403: inode 13 [ 82.661972][ T8588] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.1295: couldn't read orphan inode 13 (err -117) [ 82.662013][ T8588] loop2: lost filesystem error report for type 5 error -117 [ 82.702296][ T8588] EXT4-fs (loop2): shut down requested (2) [ 82.778835][ T8595] FAULT_INJECTION: forcing a failure. [ 82.778835][ T8595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.778879][ T8595] CPU: 1 UID: 0 PID: 8595 Comm: syz.2.1298 Tainted: G L syzkaller #0 PREEMPT [ 82.778895][ T8595] Tainted: [L]=SOFTLOCKUP [ 82.778899][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 82.778906][ T8595] Call trace: [ 82.778909][ T8595] show_stack+0x2c/0x3c (C) [ 82.778933][ T8595] __dump_stack+0x30/0x40 [ 82.778949][ T8595] dump_stack_lvl+0xd8/0x12c [ 82.778961][ T8595] dump_stack+0x1c/0x28 [ 82.778973][ T8595] should_fail_ex+0x41c/0x590 [ 82.778986][ T8595] should_fail+0x14/0x24 [ 82.778997][ T8595] should_fail_usercopy+0x20/0x30 [ 82.779009][ T8595] _inline_copy_from_user+0x3c/0x174 [ 82.779022][ T8595] __arm64_sys_prlimit64+0x17c/0xc64 [ 82.779034][ T8595] invoke_syscall+0x98/0x244 [ 82.779046][ T8595] el0_svc_common+0xec/0x23c [ 82.779058][ T8595] do_el0_svc+0x4c/0x5c [ 82.779069][ T8595] el0_svc+0x64/0x260 [ 82.779080][ T8595] el0t_64_sync_handler+0x44/0x104 [ 82.779090][ T8595] el0t_64_sync+0x198/0x19c [ 83.241426][ T8614] loop6: detected capacity change from 0 to 1024 [ 83.308053][ T8614] overlayfs: failed to set uuid (/bus, err=-28); falling back to uuid=null. [ 83.368543][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.418106][ T8628] FAULT_INJECTION: forcing a failure. [ 83.418106][ T8628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.418215][ T8628] CPU: 1 UID: 0 PID: 8628 Comm: syz.6.1309 Tainted: G L syzkaller #0 PREEMPT [ 83.418230][ T8628] Tainted: [L]=SOFTLOCKUP [ 83.418234][ T8628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 83.418240][ T8628] Call trace: [ 83.418243][ T8628] show_stack+0x2c/0x3c (C) [ 83.418264][ T8628] __dump_stack+0x30/0x40 [ 83.418276][ T8628] dump_stack_lvl+0xd8/0x12c [ 83.418288][ T8628] dump_stack+0x1c/0x28 [ 83.418300][ T8628] should_fail_ex+0x41c/0x590 [ 83.418312][ T8628] should_fail+0x14/0x24 [ 83.418323][ T8628] should_fail_usercopy+0x20/0x30 [ 83.418335][ T8628] _inline_copy_from_user+0x3c/0x174 [ 83.418346][ T8628] __sys_bpf+0x1b4/0x82c [ 83.418355][ T8628] __arm64_sys_bpf+0xd0/0xec [ 83.418364][ T8628] invoke_syscall+0x98/0x244 [ 83.418376][ T8628] el0_svc_common+0xec/0x23c [ 83.418388][ T8628] do_el0_svc+0x4c/0x5c [ 83.418399][ T8628] el0_svc+0x64/0x260 [ 83.418410][ T8628] el0t_64_sync_handler+0x44/0x104 [ 83.418420][ T8628] el0t_64_sync+0x198/0x19c [ 83.529137][ T4813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.536340][ T8630] loop3: detected capacity change from 0 to 8192 [ 83.732016][ T8643] loop8: detected capacity change from 0 to 128 [ 83.845363][ T8651] netlink: 1700 bytes leftover after parsing attributes in process `syz.3.1319'. [ 83.845403][ T8651] netlink: 1700 bytes leftover after parsing attributes in process `syz.3.1319'. [ 83.901788][ T8657] loop8: detected capacity change from 0 to 1024 [ 83.940768][ T8657] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 83.966648][ T8657] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 2: comm syz.8.1321: lblock 2 mapped to illegal pblock 2 (length 1) [ 83.966704][ T8657] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.967196][ T8657] Quota error (device loop8): qtree_write_dquot: dquota write failed [ 83.967226][ T8657] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 48: comm syz.8.1321: lblock 0 mapped to illegal pblock 48 (length 1) [ 83.967247][ T8657] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 83.967340][ T8657] Quota error (device loop8): v2_write_file_info: Can't write info structure [ 83.967349][ T8657] EXT4-fs error (device loop8): ext4_acquire_dquot:7069: comm syz.8.1321: Failed to acquire dquot type 0 [ 83.967359][ T8657] loop8: lost filesystem error report for type 5 error -117 [ 83.967469][ T8657] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 83.967478][ T8657] loop8: lost filesystem error report for type 5 error -117 [ 83.967607][ T8657] EXT4-fs error (device loop8): ext4_evict_inode:269: inode #11: comm syz.8.1321: mark_inode_dirty error [ 83.967619][ T8657] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.967688][ T8657] EXT4-fs warning (device loop8): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 83.967725][ T8657] EXT4-fs (loop8): 1 orphan inode deleted [ 83.985707][ T8657] netlink: 244 bytes leftover after parsing attributes in process `syz.8.1321'. [ 83.991089][ T86] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 83.991545][ T86] Quota error (device loop8): remove_tree: Can't read quota data block 1 [ 83.991566][ T86] EXT4-fs error (device loop8): ext4_release_dquot:7105: comm kworker/u8:4: Failed to release dquot type 0 [ 84.012924][ T8384] EXT4-fs error (device loop8): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 84.012963][ T8384] loop8: lost filesystem error report for type 5 error -117 [ 84.013094][ T8384] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 84.013104][ T8384] loop8: lost filesystem error report for type 5 error -117 [ 84.013186][ T8384] EXT4-fs error (device loop8): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 84.013197][ T8384] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.013269][ T8384] EXT4-fs error (device loop8): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 84.013280][ T8384] loop8: lost filesystem error report for type 5 error -117 [ 84.045061][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 84.045163][ T8666] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 84.166344][ T8673] FAULT_INJECTION: forcing a failure. [ 84.166344][ T8673] name failslab, interval 1, probability 0, space 0, times 0 [ 84.166391][ T8673] CPU: 1 UID: 0 PID: 8673 Comm: syz.3.1329 Tainted: G L syzkaller #0 PREEMPT [ 84.166411][ T8673] Tainted: [L]=SOFTLOCKUP [ 84.166415][ T8673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 84.166420][ T8673] Call trace: [ 84.166424][ T8673] show_stack+0x2c/0x3c (C) [ 84.166445][ T8673] __dump_stack+0x30/0x40 [ 84.166458][ T8673] dump_stack_lvl+0xd8/0x12c [ 84.166469][ T8673] dump_stack+0x1c/0x28 [ 84.166481][ T8673] should_fail_ex+0x41c/0x590 [ 84.166494][ T8673] should_failslab+0xc4/0x120 [ 84.166507][ T8673] __kmalloc_noprof+0x108/0x6c8 [ 84.166515][ T8673] security_sk_alloc+0x60/0x35c [ 84.166527][ T8673] sk_prot_alloc+0xe0/0x1e8 [ 84.166540][ T8673] sk_alloc+0x44/0x3ac [ 84.166551][ T8673] __netlink_create+0x78/0x23c [ 84.166561][ T8673] netlink_create+0x3b4/0x6a0 [ 84.166571][ T8673] __sock_create+0x31c/0x670 [ 84.166579][ T8673] __sys_socket_create+0xc0/0x11c [ 84.166588][ T8673] __sys_socket+0x44/0xec [ 84.166597][ T8673] __arm64_sys_socket+0x84/0x9c [ 84.166606][ T8673] invoke_syscall+0x98/0x244 [ 84.166618][ T8673] el0_svc_common+0xec/0x23c [ 84.166629][ T8673] do_el0_svc+0x4c/0x5c [ 84.166641][ T8673] el0_svc+0x64/0x260 [ 84.166651][ T8673] el0t_64_sync_handler+0x44/0x104 [ 84.166661][ T8673] el0t_64_sync+0x198/0x19c [ 84.282643][ T8682] loop2: detected capacity change from 0 to 1024 [ 84.293027][ T8682] EXT4-fs: Ignoring removed nobh option [ 84.293093][ T8682] EXT4-fs: Ignoring removed bh option [ 84.305962][ T8682] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 84.317534][ T8682] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 84.317589][ T8682] System zones: 0-1, 3-12 [ 84.328504][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.330276][ T50] Bluetooth: hci1: command tx timeout [ 84.365113][ T8682] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #12: block 7: comm syz.2.1334: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 84.368940][ T8682] EXT4-fs (loop2): Remounting filesystem read-only [ 84.369719][ T8690] loop3: detected capacity change from 0 to 1024 [ 84.421050][ T8690] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.1337: Freeing blocks not in datazone - block = 0, count = 16 [ 84.578060][ T4813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.597942][ T8704] ip_tables: iptables: counters copy to user failed while replacing table [ 84.696904][ T8714] FAULT_INJECTION: forcing a failure. [ 84.696904][ T8714] name failslab, interval 1, probability 0, space 0, times 0 [ 84.696941][ T8714] CPU: 1 UID: 0 PID: 8714 Comm: syz.3.1349 Tainted: G L syzkaller #0 PREEMPT [ 84.696959][ T8714] Tainted: [L]=SOFTLOCKUP [ 84.696964][ T8714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 84.696971][ T8714] Call trace: [ 84.696974][ T8714] show_stack+0x2c/0x3c (C) [ 84.696995][ T8714] __dump_stack+0x30/0x40 [ 84.697009][ T8714] dump_stack_lvl+0xd8/0x12c [ 84.697021][ T8714] dump_stack+0x1c/0x28 [ 84.697032][ T8714] should_fail_ex+0x41c/0x590 [ 84.697045][ T8714] should_failslab+0xc4/0x120 [ 84.697058][ T8714] kmem_cache_alloc_noprof+0x94/0x5d4 [ 84.697071][ T8714] prepare_creds+0x34/0x7d0 [ 84.697084][ T8714] __sys_setresuid+0x414/0x848 [ 84.697095][ T8714] __arm64_sys_setresuid+0x84/0x98 [ 84.697106][ T8714] invoke_syscall+0x98/0x244 [ 84.697118][ T8714] el0_svc_common+0xec/0x23c [ 84.697136][ T8714] do_el0_svc+0x4c/0x5c [ 84.697148][ T8714] el0_svc+0x64/0x260 [ 84.697159][ T8714] el0t_64_sync_handler+0x44/0x104 [ 84.697169][ T8714] el0t_64_sync+0x198/0x19c [ 84.880665][ T8724] loop6: detected capacity change from 0 to 8192 [ 84.888606][ T8724] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 84.974428][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.045809][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1358'. [ 85.109577][ T8746] loop6: detected capacity change from 0 to 512 [ 85.155014][ T8746] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 85.164802][ T8746] EXT4-fs (loop6): 1 truncate cleaned up [ 85.176110][ T8746] EXT4-fs error (device loop6): ext4_generic_delete_entry:2675: inode #2: block 13: comm syz.6.1362: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 85.182877][ T8746] EXT4-fs (loop6): Remounting filesystem read-only [ 85.182897][ T8746] EXT4-fs warning (device loop6): ext4_rename_delete:3741: inode #2: comm syz.6.1362: Deleting old file: nlink 5, error=-117 [ 85.287908][ T8762] Injecting memory failure for pfn 0x1603de at process virtual address 0x20ffe000 [ 85.337173][ T8758] IPVS: persistence engine module ip_vs_pe_ not found [ 85.373005][ T8762] Memory failure: 0x1603de: keeping poisoned page in swap cache [ 85.374740][ T8762] Memory failure: 0x1603de: failed to unmap page (folio mapcount=1) [ 85.374962][ T8762] Memory failure: 0x1603de: Sending SIGBUS to syz.6.1367:8762 due to hardware memory corruption [ 85.375001][ T8762] Memory failure: 0x1603de: recovery action for unmapping failed page: Failed [ 85.436451][ T8777] FAT-fs (loop8): Directory bread(block 1285) failed [ 85.437891][ T8777] FAT-fs (loop8): Directory bread(block 1286) failed [ 85.439987][ T8777] FAT-fs (loop8): Directory bread(block 1287) failed [ 85.441490][ T8777] FAT-fs (loop8): Directory bread(block 1288) failed [ 85.456676][ T8777] FAT-fs (loop8): Directory bread(block 1285) failed [ 85.456715][ T8777] FAT-fs (loop8): Directory bread(block 1286) failed [ 85.456741][ T8777] FAT-fs (loop8): Directory bread(block 1287) failed [ 85.456765][ T8777] FAT-fs (loop8): Directory bread(block 1288) failed [ 85.456789][ T8777] FAT-fs (loop8): Directory bread(block 1285) failed [ 85.456801][ T8777] FAT-fs (loop8): Directory bread(block 1286) failed [ 85.546288][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1389'. [ 85.608676][ T4813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.632366][ T8795] FAULT_INJECTION: forcing a failure. [ 85.632366][ T8795] name failslab, interval 1, probability 0, space 0, times 0 [ 85.632406][ T8795] CPU: 0 UID: 0 PID: 8795 Comm: syz.6.1392 Tainted: G L syzkaller #0 PREEMPT [ 85.632422][ T8795] Tainted: [L]=SOFTLOCKUP [ 85.632427][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 85.632433][ T8795] Call trace: [ 85.632437][ T8795] show_stack+0x2c/0x3c (C) [ 85.632458][ T8795] __dump_stack+0x30/0x40 [ 85.632474][ T8795] dump_stack_lvl+0xd8/0x12c [ 85.632485][ T8795] dump_stack+0x1c/0x28 [ 85.632497][ T8795] should_fail_ex+0x41c/0x590 [ 85.632510][ T8795] should_failslab+0xc4/0x120 [ 85.632523][ T8795] __kmalloc_noprof+0x108/0x6c8 [ 85.632532][ T8795] tomoyo_encode2+0x10c/0x330 [ 85.632544][ T8795] tomoyo_encode+0x34/0x50 [ 85.632554][ T8795] tomoyo_realpath_from_path+0x488/0x4dc [ 85.632565][ T8795] tomoyo_mkdev_perm+0x1f0/0x4b4 [ 85.632574][ T8795] tomoyo_path_mknod+0xf0/0x18c [ 85.632585][ T8795] security_path_mknod+0x16c/0x340 [ 85.632595][ T8795] filename_mknodat+0x284/0x5a0 [ 85.632606][ T8795] __arm64_sys_mknodat+0xc0/0xe8 [ 85.632616][ T8795] invoke_syscall+0x98/0x244 [ 85.632629][ T8795] el0_svc_common+0xec/0x23c [ 85.632640][ T8795] do_el0_svc+0x4c/0x5c [ 85.632651][ T8795] el0_svc+0x64/0x260 [ 85.632662][ T8795] el0t_64_sync_handler+0x44/0x104 [ 85.632672][ T8795] el0t_64_sync+0x198/0x19c [ 85.632687][ T8795] ERROR: Out of memory at tomoyo_realpath_from_path. [ 85.705239][ T8809] netlink: 'syz.3.1384': attribute type 1 has an invalid length. [ 85.734811][ T8806] bridge0: port 3(syz_tun) entered blocking state [ 85.734862][ T8806] bridge0: port 3(syz_tun) entered disabled state [ 85.734963][ T8806] syz_tun: entered allmulticast mode [ 85.735475][ T8806] syz_tun: entered promiscuous mode [ 85.735674][ T8806] bridge0: port 3(syz_tun) entered blocking state [ 85.735697][ T8806] bridge0: port 3(syz_tun) entered forwarding state [ 85.740763][ T8806] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 85.792248][ T8813] gtp0: entered allmulticast mode [ 85.970518][ T8837] EXT4-fs: Ignoring removed bh option [ 85.977345][ T8837] EXT4-fs: Ignoring removed bh option [ 85.980526][ T8837] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 85.982228][ T8839] FAULT_INJECTION: forcing a failure. [ 85.982228][ T8839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.982246][ T8839] CPU: 0 UID: 0 PID: 8839 Comm: syz.8.1402 Tainted: G L syzkaller #0 PREEMPT [ 85.982258][ T8839] Tainted: [L]=SOFTLOCKUP [ 85.982262][ T8839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 85.982267][ T8839] Call trace: [ 85.982270][ T8839] show_stack+0x2c/0x3c (C) [ 85.982289][ T8839] __dump_stack+0x30/0x40 [ 85.982302][ T8839] dump_stack_lvl+0xd8/0x12c [ 85.982313][ T8839] dump_stack+0x1c/0x28 [ 85.982324][ T8839] should_fail_ex+0x41c/0x590 [ 85.982337][ T8839] should_fail+0x14/0x24 [ 85.982348][ T8839] should_fail_usercopy+0x20/0x30 [ 85.982361][ T8839] strncpy_from_user+0x48/0x388 [ 85.982370][ T8839] __arm64_sys_request_key+0x114/0x37c [ 85.982380][ T8839] invoke_syscall+0x98/0x244 [ 85.982392][ T8839] el0_svc_common+0xec/0x23c [ 85.982403][ T8839] do_el0_svc+0x4c/0x5c [ 85.982415][ T8839] el0_svc+0x64/0x260 [ 85.982426][ T8839] el0t_64_sync_handler+0x44/0x104 [ 85.982436][ T8839] el0t_64_sync+0x198/0x19c [ 86.093140][ T8837] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 86.144237][ T4711] EXT4-fs error (device loop2): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /320/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 86.150527][ T4711] EXT4-fs (loop2): Remounting filesystem read-only [ 86.257473][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1411'. [ 86.386832][ T8870] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.1416: corrupted in-inode xattr: invalid ea_ino [ 86.386873][ T8870] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 86.387917][ T8870] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.1416: couldn't read orphan inode 15 (err -117) [ 86.387934][ T8870] loop3: lost filesystem error report for type 5 error -117 [ 86.408384][ T50] Bluetooth: hci1: command tx timeout [ 86.408714][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.688264][ T4796] net_ratelimit: 1 callbacks suppressed [ 87.688304][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.488224][ T50] Bluetooth: hci1: command tx timeout [ 88.728591][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.449570][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.774607][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.729201][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.731506][ T4472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.731670][ T4472] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.808317][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.414846][ T8880] netlink: 'syz.6.1419': attribute type 3 has an invalid length. [ 91.414886][ T8880] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1419'. [ 91.461796][ T8886] input: syz0 as /devices/virtual/input/input11 [ 91.634866][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 91.730940][ T8916] FAULT_INJECTION: forcing a failure. [ 91.730940][ T8916] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 91.731092][ T8912] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1435'. [ 91.735358][ T8916] CPU: 0 UID: 0 PID: 8916 Comm: syz.6.1437 Tainted: G L syzkaller #0 PREEMPT [ 91.735381][ T8916] Tainted: [L]=SOFTLOCKUP [ 91.735385][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 91.735392][ T8916] Call trace: [ 91.735396][ T8916] show_stack+0x2c/0x3c (C) [ 91.735421][ T8916] __dump_stack+0x30/0x40 [ 91.735434][ T8916] dump_stack_lvl+0xd8/0x12c [ 91.735447][ T8916] dump_stack+0x1c/0x28 [ 91.735458][ T8916] should_fail_ex+0x41c/0x590 [ 91.735471][ T8916] should_fail_alloc_page+0xec/0x10c [ 91.735484][ T8916] prepare_alloc_pages+0x194/0x484 [ 91.735493][ T8916] __alloc_frozen_pages_noprof+0x180/0x648 [ 91.735501][ T8916] __alloc_pages_noprof+0x18/0x100 [ 91.735510][ T8916] alloc_pages_bulk_noprof+0x610/0x7d8 [ 91.735518][ T8916] __kasan_populate_vmalloc+0xc0/0x1d0 [ 91.735529][ T8916] alloc_vmap_area+0xdf4/0x13e8 [ 91.735538][ T8916] __get_vm_area_node+0x210/0x32c [ 91.735547][ T8916] __vmalloc_node_range_noprof+0x2a0/0xe9c [ 91.735557][ T8916] __vmalloc_node_noprof+0xec/0x14c [ 91.735567][ T8916] __vmalloc_noprof+0x64/0x8c [ 91.735576][ T8916] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 91.735586][ T8916] bpf_prog_alloc+0x48/0x110 [ 91.735596][ T8916] bpf_prog_create_from_user+0xa0/0x26c [ 91.735607][ T8916] do_seccomp+0x6fc/0xbfc [ 91.735618][ T8916] __arm64_sys_seccomp+0x84/0x98 [ 91.735628][ T8916] invoke_syscall+0x98/0x244 [ 91.735640][ T8916] el0_svc_common+0xec/0x23c [ 91.735652][ T8916] do_el0_svc+0x4c/0x5c [ 91.735663][ T8916] el0_svc+0x64/0x260 [ 91.735674][ T8916] el0t_64_sync_handler+0x44/0x104 [ 91.735683][ T8916] el0t_64_sync+0x198/0x19c [ 91.768636][ T8916] syz.6.1437: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 91.768776][ T8916] CPU: 0 UID: 0 PID: 8916 Comm: syz.6.1437 Tainted: G L syzkaller #0 PREEMPT [ 91.768791][ T8916] Tainted: [L]=SOFTLOCKUP [ 91.768794][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 91.768800][ T8916] Call trace: [ 91.768803][ T8916] show_stack+0x2c/0x3c (C) [ 91.768818][ T8916] __dump_stack+0x30/0x40 [ 91.768833][ T8916] dump_stack_lvl+0xd8/0x12c [ 91.768844][ T8916] dump_stack+0x1c/0x28 [ 91.768856][ T8916] warn_alloc+0x1c4/0x1d8 [ 91.768870][ T8916] __vmalloc_node_range_noprof+0x2c4/0xe9c [ 91.768880][ T8916] __vmalloc_node_noprof+0xec/0x14c [ 91.768890][ T8916] __vmalloc_noprof+0x64/0x8c [ 91.768899][ T8916] bpf_prog_alloc_no_stats+0x60/0x4e8 [ 91.768910][ T8916] bpf_prog_alloc+0x48/0x110 [ 91.768919][ T8916] bpf_prog_create_from_user+0xa0/0x26c [ 91.768931][ T8916] do_seccomp+0x6fc/0xbfc [ 91.768942][ T8916] __arm64_sys_seccomp+0x84/0x98 [ 91.768952][ T8916] invoke_syscall+0x98/0x244 [ 91.768965][ T8916] el0_svc_common+0xec/0x23c [ 91.768977][ T8916] do_el0_svc+0x4c/0x5c [ 91.768988][ T8916] el0_svc+0x64/0x260 [ 91.768998][ T8916] el0t_64_sync_handler+0x44/0x104 [ 91.769008][ T8916] el0t_64_sync+0x198/0x19c [ 91.769022][ T8916] Mem-Info: [ 91.769032][ T8916] active_anon:2988 inactive_anon:9173 isolated_anon:0 [ 91.769032][ T8916] active_file:4061 inactive_file:6231 isolated_file:0 [ 91.769032][ T8916] unevictable:768 dirty:381 writeback:0 [ 91.769032][ T8916] slab_reclaimable:9596 slab_unreclaimable:95246 [ 91.769032][ T8916] mapped:31994 shmem:6998 pagetables:3862 [ 91.769032][ T8916] sec_pagetables:0 bounce:0 [ 91.769032][ T8916] kernel_misc_reclaimable:0 [ 91.769032][ T8916] free:1469029 free_pcp:6399 free_cma:7616 [ 91.769058][ T8916] Node 0 active_anon:11952kB inactive_anon:36692kB active_file:16244kB inactive_file:24924kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:127976kB dirty:1524kB writeback:0kB shmem:27992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10212kB pagetables:15448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 91.769086][ T8916] Node 0 DMA free:3077888kB boost:0kB min:20360kB low:25448kB high:30536kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:30464kB [ 91.769126][ T8916] lowmem_reserve[]: 0 0 3650 3650 3650 [ 91.769176][ T8916] Node 0 Normal free:2798228kB boost:0kB min:24692kB low:30864kB high:37036kB reserved_highatomic:0kB free_highatomic:0kB active_anon:11952kB inactive_anon:36692kB active_file:16244kB inactive_file:24924kB unevictable:3072kB writepending:1524kB zspages:524kB present:5242880kB managed:3738144kB mlocked:0kB bounce:0kB free_pcp:25596kB local_pcp:8592kB free_cma:0kB [ 91.769209][ T8916] lowmem_reserve[]: 0 0 0 0 0 [ 91.769253][ T8916] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 1*1024kB (C) 0*2048kB 751*4096kB (MC) = 3077888kB [ 91.769381][ T8916] Node 0 Normal: 28*4kB (E) 635*8kB (UME) 863*16kB (ME) 793*32kB (UME) 600*64kB (UME) 334*128kB (UME) 330*256kB (UM) 293*512kB (UM) 265*1024kB (UME) 14*2048kB (UM) 522*4096kB (UM) = 2798168kB [ 91.769555][ T8916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.769566][ T8916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 91.769577][ T8916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 91.769587][ T8916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 91.769598][ T8916] 17282 total pagecache pages [ 91.769605][ T8916] 10 pages in swap cache [ 91.769612][ T8916] Free swap = 124812kB [ 91.769619][ T8916] Total swap = 124996kB [ 91.769627][ T8916] 2097152 pages RAM [ 91.769634][ T8916] 0 pages HighMem/MovableOnly [ 91.769641][ T8916] 392568 pages reserved [ 91.769648][ T8916] 8192 pages cma reserved [ 91.769655][ T8916] 7 pages hwpoisoned [ 91.848335][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.893443][ T8926] set_capacity_and_notify: 5 callbacks suppressed [ 91.893489][ T8926] loop4: detected capacity change from 0 to 128 [ 91.909954][ T8928] syzkaller1: entered promiscuous mode [ 91.911071][ T8928] syzkaller1: entered allmulticast mode [ 92.061944][ T8943] vhci_hcd vhci_hcd.0: failed to lookup sock [ 92.103509][ T8947] gadgetfs: bound to dummy_udc driver [ 92.177740][ T8960] loop4: detected capacity change from 0 to 256 [ 92.253803][ T30] audit: type=1400 audit(92.240:5): lsm=SMACK fn=smack_inode_rename action=denied subject="_" object="l" requested=rw pid=8961 comm="syz.6.1460" name="file1" dev="tmpfs" ino=1196 [ 92.495824][ T9003] bridge_slave_0: left allmulticast mode [ 92.498776][ T9003] bridge_slave_0: left promiscuous mode [ 92.500020][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.501341][ T9000] loop8: detected capacity change from 0 to 1024 [ 92.531425][ T9003] bridge_slave_1: left allmulticast mode [ 92.531467][ T9003] bridge_slave_1: left promiscuous mode [ 92.531574][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.539672][ T9010] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 92.550856][ T9003] bond0: (slave bond_slave_0): Releasing backup interface [ 92.610884][ T9003] bond0: (slave bond_slave_1): Releasing backup interface [ 92.616016][ T9015] loop3: detected capacity change from 0 to 2048 [ 92.627089][ T9015] ext4: Unknown parameter 'nouser_xattr' [ 92.641639][ T9021] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1484'. [ 92.646318][ T9003] team0: Port device team_slave_0 removed [ 92.651514][ T9003] team0: Port device team_slave_1 removed [ 92.653307][ T9003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.654963][ T9003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.657456][ T9003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.657751][ T9003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.664543][ T9003] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 92.719781][ T9026] loop4: detected capacity change from 0 to 2048 [ 92.754397][ T9031] loop6: detected capacity change from 0 to 512 [ 92.758961][ T9026] loop4: p2 < > p4 [ 92.761315][ T9031] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 92.767967][ T9031] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.1487: bad orphan inode 131083 [ 92.768006][ T9031] loop6: lost filesystem error report for type 5 error -117 [ 92.768147][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 92.768159][ C1] EXT4-fs (loop6): initial error at time 92: ext4_orphan_get:1429 [ 92.768173][ C1] EXT4-fs (loop6): last error at time 92: ext4_orphan_get:1429 [ 92.775714][ T9026] loop4: p4 size 8192 extends beyond EOD, truncated [ 92.791668][ T4343] loop4: p2 < > p4 [ 92.792762][ T4343] loop4: p4 size 8192 extends beyond EOD, truncated [ 92.869542][ T9043] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 92.894475][ T4796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.421430][ T9099] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1517'. [ 93.507080][ T9107] syzkaller1: entered promiscuous mode [ 93.507127][ T9107] syzkaller1: entered allmulticast mode [ 93.661301][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1531'. [ 93.782645][ T4798] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.928877][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.935004][ T4813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.965265][ T3060] IPVS: starting estimator thread 0... [ 94.048321][ T9152] IPVS: using max 58 ests per chain, 139200 per kthread [ 94.276508][ T9178] can0: slcan on ptm0. [ 94.312024][ T9184] loop4: detected capacity change from 0 to 2048 [ 94.324967][ T9184] EXT4-fs mount: 24 callbacks suppressed [ 94.326345][ T9184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.369100][ T9177] can0 (unregistered): slcan off ptm0. [ 94.393559][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.549456][ T9196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1560'. [ 94.602263][ T9198] nvme nvme0: using deprecated NVME_IOCTL_IO_CMD ioctl on the char device! [ 94.635296][ T9204] Injecting memory failure for pfn 0x16ae00 at process virtual address 0x20000000 [ 94.657962][ T9208] FAULT_INJECTION: forcing a failure. [ 94.657962][ T9208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.657995][ T9208] CPU: 1 UID: 0 PID: 9208 Comm: syz.8.1565 Tainted: G L syzkaller #0 PREEMPT [ 94.658013][ T9208] Tainted: [L]=SOFTLOCKUP [ 94.658017][ T9208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.658025][ T9208] Call trace: [ 94.658028][ T9208] show_stack+0x2c/0x3c (C) [ 94.658049][ T9208] __dump_stack+0x30/0x40 [ 94.658062][ T9208] dump_stack_lvl+0xd8/0x12c [ 94.658073][ T9208] dump_stack+0x1c/0x28 [ 94.658084][ T9208] should_fail_ex+0x41c/0x590 [ 94.658097][ T9208] should_fail+0x14/0x24 [ 94.658108][ T9208] should_fail_usercopy+0x20/0x30 [ 94.658128][ T9208] set_fd_set+0x48/0xb8 [ 94.658137][ T9208] core_sys_select+0x824/0x9e4 [ 94.658150][ T9208] __arm64_sys_pselect6+0x2f0/0x39c [ 94.658159][ T9208] invoke_syscall+0x98/0x244 [ 94.658171][ T9208] el0_svc_common+0xec/0x23c [ 94.658182][ T9208] do_el0_svc+0x4c/0x5c [ 94.658193][ T9208] el0_svc+0x64/0x260 [ 94.658204][ T9208] el0t_64_sync_handler+0x44/0x104 [ 94.658214][ T9208] el0t_64_sync+0x198/0x19c [ 94.669792][ T9204] Memory failure: 0x16ae00: Sending SIGBUS to syz.6.1564:9204 due to hardware memory corruption [ 94.669835][ T9204] Memory failure: 0x16ae00: recovery action for dirty LRU page: Recovered [ 94.722815][ T9210] syzkaller1: entered promiscuous mode [ 94.722849][ T9210] syzkaller1: entered allmulticast mode [ 94.755793][ T9214] gre0: entered promiscuous mode [ 94.756906][ T9214] gre0: entered allmulticast mode [ 94.846751][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'. [ 94.866946][ T9228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1575'. [ 94.900184][ T9229] FAULT_INJECTION: forcing a failure. [ 94.900184][ T9229] name failslab, interval 1, probability 0, space 0, times 0 [ 94.900224][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.6.1574 Tainted: G L syzkaller #0 PREEMPT [ 94.900240][ T9229] Tainted: [L]=SOFTLOCKUP [ 94.900244][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.900251][ T9229] Call trace: [ 94.900254][ T9229] show_stack+0x2c/0x3c (C) [ 94.900275][ T9229] __dump_stack+0x30/0x40 [ 94.900290][ T9229] dump_stack_lvl+0xd8/0x12c [ 94.900302][ T9229] dump_stack+0x1c/0x28 [ 94.900313][ T9229] should_fail_ex+0x41c/0x590 [ 94.900327][ T9229] should_failslab+0xc4/0x120 [ 94.900341][ T9229] kmem_cache_alloc_noprof+0x94/0x5d4 [ 94.900354][ T9229] vm_area_dup+0x34/0x5c8 [ 94.900364][ T9229] __split_vma+0x1a8/0x83c [ 94.900375][ T9229] vma_modify+0x1290/0x18f0 [ 94.900386][ T9229] vma_modify_flags+0x228/0x33c [ 94.900397][ T9229] mlock_fixup+0x290/0x624 [ 94.900406][ T9229] apply_vma_lock_flags+0x2e4/0x404 [ 94.900414][ T9229] do_mlock+0x464/0x638 [ 94.900423][ T9229] __arm64_sys_mlock+0x80/0xb4 [ 94.900431][ T9229] invoke_syscall+0x98/0x244 [ 94.900443][ T9229] el0_svc_common+0xec/0x23c [ 94.900455][ T9229] do_el0_svc+0x4c/0x5c [ 94.900466][ T9229] el0_svc+0x64/0x260 [ 94.900477][ T9229] el0t_64_sync_handler+0x44/0x104 [ 94.900487][ T9229] el0t_64_sync+0x198/0x19c [ 94.968376][ T4813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.980688][ T9239] FAULT_INJECTION: forcing a failure. [ 94.980688][ T9239] name failslab, interval 1, probability 0, space 0, times 0 [ 94.980725][ T9239] CPU: 1 UID: 0 PID: 9239 Comm: syz.8.1580 Tainted: G L syzkaller #0 PREEMPT [ 94.980741][ T9239] Tainted: [L]=SOFTLOCKUP [ 94.980745][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 94.980751][ T9239] Call trace: [ 94.980754][ T9239] show_stack+0x2c/0x3c (C) [ 94.980774][ T9239] __dump_stack+0x30/0x40 [ 94.980787][ T9239] dump_stack_lvl+0xd8/0x12c [ 94.980798][ T9239] dump_stack+0x1c/0x28 [ 94.980809][ T9239] should_fail_ex+0x41c/0x590 [ 94.980822][ T9239] should_failslab+0xc4/0x120 [ 94.980835][ T9239] kmem_cache_alloc_noprof+0x94/0x5d4 [ 94.980848][ T9239] anon_vma_clone+0x360/0x8c0 [ 94.980860][ T9239] __split_vma+0x35c/0x83c [ 94.980871][ T9239] vma_modify+0x11ac/0x18f0 [ 94.980882][ T9239] vma_modify_policy+0x210/0x2b8 [ 94.980892][ T9239] mbind_range+0x160/0x3e4 [ 94.980902][ T9239] __arm64_sys_mbind+0x5c8/0x994 [ 94.980911][ T9239] invoke_syscall+0x98/0x244 [ 94.980923][ T9239] el0_svc_common+0xec/0x23c [ 94.980934][ T9239] do_el0_svc+0x4c/0x5c [ 94.980945][ T9239] el0_svc+0x64/0x260 [ 94.980956][ T9239] el0t_64_sync_handler+0x44/0x104 [ 94.980966][ T9239] el0t_64_sync+0x198/0x19c [ 95.176477][ T9257] loop8: detected capacity change from 0 to 256 [ 95.181469][ T9257] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.194464][ T9259] loop3: detected capacity change from 0 to 256 [ 95.199908][ T9257] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.521790][ T9292] loop8: detected capacity change from 0 to 1024 [ 95.566955][ T9292] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 95.573032][ T9292] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: block 3: comm syz.8.1604: lblock 3 mapped to illegal pblock 3 (length 1) [ 95.573364][ T9292] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 95.573378][ T9292] EXT4-fs (loop8): This should not happen!! Data will be lost [ 95.573378][ T9292] [ 95.582563][ T8384] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 95.890216][ T9309] FAULT_INJECTION: forcing a failure. [ 95.890216][ T9309] name failslab, interval 1, probability 0, space 0, times 0 [ 95.890253][ T9309] CPU: 0 UID: 0 PID: 9309 Comm: syz.8.1612 Tainted: G L syzkaller #0 PREEMPT [ 95.890273][ T9309] Tainted: [L]=SOFTLOCKUP [ 95.890276][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 95.890283][ T9309] Call trace: [ 95.890286][ T9309] show_stack+0x2c/0x3c (C) [ 95.890306][ T9309] __dump_stack+0x30/0x40 [ 95.890321][ T9309] dump_stack_lvl+0xd8/0x12c [ 95.890333][ T9309] dump_stack+0x1c/0x28 [ 95.890344][ T9309] should_fail_ex+0x41c/0x590 [ 95.890359][ T9309] should_failslab+0xc4/0x120 [ 95.890374][ T9309] kmem_cache_alloc_lru_noprof+0x98/0x5d8 [ 95.890388][ T9309] hugetlbfs_alloc_inode+0xdc/0x128 [ 95.890398][ T9309] alloc_inode+0x68/0x198 [ 95.890409][ T9309] new_inode+0x20/0x50 [ 95.890420][ T9309] hugetlbfs_get_inode+0x80/0x834 [ 95.890433][ T9309] hugetlb_file_setup+0x20c/0x574 [ 95.890446][ T9309] memfd_alloc_file+0xbc/0x2f0 [ 95.890457][ T9309] __arm64_sys_memfd_create+0x318/0x3ec [ 95.890467][ T9309] invoke_syscall+0x98/0x244 [ 95.890480][ T9309] el0_svc_common+0xec/0x23c [ 95.890491][ T9309] do_el0_svc+0x4c/0x5c [ 95.890502][ T9309] el0_svc+0x64/0x260 [ 95.890513][ T9309] el0t_64_sync_handler+0x44/0x104 [ 95.890523][ T9309] el0t_64_sync+0x198/0x19c [ 95.949358][ T4358] nvme nvme0: controller is down; will reset: CSTS=0xffffffff, PCI_STATUS=0x10 [ 95.949399][ T4358] nvme nvme0: Does your device have a faulty power saving mode enabled? [ 95.949423][ T4358] nvme nvme0: Try "nvme_core.default_ps_max_latency_us=0 pcie_aspm=off pcie_port_pm=off" and report a bug [ 96.009520][ T4813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.041706][ T3060] nvme nvme0: Disabling device after reset failure: -19 [ 96.090284][ T3060] Unable to handle kernel paging request at virtual address dfff800000000031 [ 96.090313][ T3060] KASAN: null-ptr-deref in range [0x0000000000000188-0x000000000000018f] [ 96.090338][ T3060] Mem abort info: [ 96.090346][ T3060] ESR = 0x0000000096000005 [ 96.090356][ T3060] EC = 0x25: DABT (current EL), IL = 32 bits [ 96.090366][ T3060] SET = 0, FnV = 0 [ 96.090374][ T3060] EA = 0, S1PTW = 0 [ 96.090382][ T3060] FSC = 0x05: level 1 translation fault [ 96.090391][ T3060] Data abort info: [ 96.090397][ T3060] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 96.090406][ T3060] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 96.090415][ T3060] GCS = 0, Overlay = 0, DirtyBit = 0 [ 96.090423][ T3060] [dfff800000000031] address between user and kernel address ranges [ 96.090499][ T3060] Internal error: Oops: 0000000096000005 [#1] SMP [ 96.104561][ T3060] Modules linked in: [ 96.105226][ T3060] CPU: 0 UID: 0 PID: 3060 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT [ 96.107096][ T3060] Tainted: [L]=SOFTLOCKUP [ 96.107874][ T3060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 96.109634][ T3060] Workqueue: nvme-reset-wq nvme_reset_work [ 96.110684][ T3060] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 96.112078][ T3060] pc : blk_mq_complete_request_remote+0xc4/0x858 [ 96.113238][ T3060] lr : blk_mq_complete_request_remote+0x88/0x858 [ 96.114431][ T3060] sp : ffff8000988b7920 [ 96.115206][ T3060] x29: ffff8000988b79a0 x28: ffff8000988b7920 x27: 1fffe00018b9747c [ 96.116738][ T3060] x26: 0000000000000003 x25: ffff0000c5cba3ee x24: dfff800000000000 [ 96.118257][ T3060] x23: ffff700013116f24 x22: 1fffe000190b5a24 x21: ffff0000c85ad124 [ 96.119791][ T3060] x20: 000000000000018e x19: ffff0000c85ad000 x18: 00000000ffffffff [ 96.121266][ T3060] x17: 0000000000000000 x16: 0000000000000000 x15: ffff80008285f1f0 [ 96.122738][ T3060] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000003 [ 96.124285][ T3060] x11: ffff80008a6a6e28 x10: ffff8000885721a6 x9 : 1fffe000190b5a02 [ 96.125789][ T3060] x8 : 0000000000000031 x7 : 0000000000000000 x6 : 0000000000000000 [ 96.127267][ T3060] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff80008285f010 [ 96.128789][ T3060] x2 : 0000000000000000 x1 : ffff0000cdf78000 x0 : 0000000000000000 [ 96.130229][ T3060] Call trace: [ 96.130813][ T3060] blk_mq_complete_request_remote+0xc4/0x858 (P) [ 96.131973][ T3060] nvme_poll_cq+0x544/0x1128 [ 96.132801][ T3060] nvme_dev_disable+0x384/0x540 [ 96.133681][ T3060] nvme_reset_work+0x510/0x69c [ 96.134515][ T3060] process_scheduled_works+0x91c/0x1250 [ 96.135508][ T3060] worker_thread+0x798/0xbd0 [ 96.136374][ T3060] kthread+0x304/0x3d4 [ 96.137134][ T3060] ret_from_fork+0x10/0x20 [ 96.137965][ T3060] Code: 97cf5d15 f9400288 91063914 d343fe88 (38f86908) [ 96.139231][ T3060] ---[ end trace 0000000000000000 ]--- [ 96.478690][ T3060] Kernel panic - not syncing: Oops: Fatal exception [ 96.479885][ T3060] SMP: stopping secondary CPUs [ 96.480781][ T3060] Kernel Offset: disabled [ 96.481551][ T3060] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 96.482775][ T3060] Memory Limit: none [ 96.803018][ T3060] Rebooting in 86400 seconds..