last executing test programs: 8.868804568s ago: executing program 2 (id=4840): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0xfc, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xcc, 0x3, 0x0, 0x1, [@nested={0xc5, 0x3, 0x0, 0x1, [@generic="d54f6fe3e9c1d4dfec0c517943b653aeafac11fc6e68fcdef659b390b6608a3443dbc0e12e00a126e9da7725c4082b48404be255d2813b08ff5b0417a5e8e793c415959f3bfd0f978d1695ee9891fbf41d318609c7a029760a36a0befd8f4065909defa9731155de4fbfcd6c7e97ff926b6007400ef14cf36d41484e457eb06706c8a2a5cd792d810ddd37d7de51b84c6c7e31630221703ddbe168cba72a19f5f466126ff74cae16c4ed3c3ebadc018e9cfae6c54ceea62264f144eb6f75b447f0"]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0xfc}, 0x1, 0x0, 0x0, 0x50}, 0xc800) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd2/range\x00', 0x10863, 0x0) write$auto(r4, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="011027bd70000601000000000000000000000000000000a821d8"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x9, 0x0, 0x0, 0x80) r5 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r5, 0x11) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r6, r7, 0x0, 0x1000200) 8.087299948s ago: executing program 3 (id=4845): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x4000000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x29, 0x2, 0x0) setresuid$auto(0x0, 0x2, 0x0) ioctl$auto(r2, 0x8993, 0x24) mmap$auto(0x0, 0x20009, 0x20df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x20200, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x3a) r4 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000200)=@link_update={r4, @new_prog_fd=0x4, 0x8, @old_prog_fd=r4}, 0xa3) bpf$auto(0x1, 0x0, 0x9) socket(0x21, 0x4, 0xffff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x8, 0x5, 0x5, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x11) getsockopt$auto_SO_PASSCRED(r1, 0x2, 0x10, &(0x7f0000000000)=',\x00', &(0x7f0000000040)=0x7) 7.924851889s ago: executing program 2 (id=4846): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0xfffffffffffffff9, 0x0, 0x100000000000, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT(r2, 0xc0205865, &(0x7f00000002c0)={0x0, 0x10001, 0x0, &(0x7f0000000280)=0x2}) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000040)="8365269138f4df1233aaa3736c920e6b07911c3388a9ce5cb62f8593fc7a9f005788b40b8d1646b98bb10d4717fdc2acc10e34b0725f202e2f131c08f09e5012fcc31374e4a782e6eff2c89939012ddc990bfbc5450b2e264c664e22ded4c1bc09031920fcb085cbb703dca4db37ce43d394745a8407d5ac4bea98a376b6f49a434d5b94") r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msync$auto(0x0, 0xe0, 0x6) madvise$auto(0x0, 0x401, 0x15) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x1, 0x0, 0x0, &(0x7f0000000200)={[0xf, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x2, 0x8000000010000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x4, 0xfffffffffffffffe]}, 0x0) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000100), 0x10242, 0x0) read$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffffff, &(0x7f0000000440)=""/242, 0xf2) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x280380, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) 7.498425913s ago: executing program 3 (id=4848): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x109c01, 0x0) r0 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x2100, 0x0) lseek$auto(r0, 0x9, 0x0) 6.433239405s ago: executing program 3 (id=4851): r0 = socket(0x2, 0x1, 0x0) getsockopt$auto_SO_PASSCRED(r0, 0x6, 0x10, &(0x7f0000000000)=',\x00', &(0x7f0000000040)=0x6) (fail_nth: 4) 5.251922311s ago: executing program 3 (id=4853): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, r0, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xa0180, 0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r3, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0xffffffffffffffff, 0xae3d, 0xffffffffffffffff) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) fcntl$auto_F_DUPFD_CLOEXEC(0xffffffffffffffff, 0x406, r4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/firmware/memmap/5/end\x00', 0x1c1540, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x30017, 0x8020000000a, 0x2, 0x5f, 0x20000000000803, 0xffffffffffffffff}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0xc4}, 0x5, 0x0, 0x0, 0x9}, 0x4}, 0x7, 0x0) r5 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), r1) sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x54, r5, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x6}, @GTPA_FLOW={0x6, 0x6, 0x8000}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_VERSION={0x8, 0x2, 0x80000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x8080) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff030}}) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) 4.946277493s ago: executing program 3 (id=4855): mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) nanosleep$auto(&(0x7f0000000180)={0x2, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x7ec}, 0x1, 0x0, 0x0, 0x40040}, 0xc000) write$auto_tty_fops_tty_io(0xffffffffffffffff, &(0x7f0000000580)="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", 0x395) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) ioctl$auto_KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xd5) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:\x06F\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) lseek$auto(r0, 0x7ff, 0x1) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) sendfile$auto(r1, r1, 0x0, 0x7ffff000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x27fff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card2\x00', 0x20300, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000fc0)={0x9, 0x10000, 0x8000000000000000, 0x8, 0xe, 0x6da, 0x1, 0x1, 0x6, 0xb, 0x4, 0x2, 0x8, 0xd3, 0x200000000008, 0xdd2, 0x5, 0xe91, 0xfffffff9, 0x81, 0x0, 0x401, 0x0, 0x0, 0x3, 0x8000000, 0x7, 0x2, 0x4, 0x0, 0x3, [0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x17, 0x0, 0x0, 0x5, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe], "4e20a4b470fc7be2c85849f1acbb899156537ca3bdcfbec40766e0f02078a211ec770bc9105663ee83bfcb2526250ddbf2574b51f63078f5a35a053edbd62e18346fbdc740d64532051a7b3315feb8bd3d60c62e39f921173836286dcb23d388533dab5c73d6cfb6c43106415467a7131e45ff83f9496efb87ae287649830a5fb71a6a6b387a3f62"}, 0x7, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800021d00020000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) 3.005280827s ago: executing program 2 (id=4860): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x804000, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x80000) 2.990941517s ago: executing program 1 (id=4861): set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) msgctl$auto_IPC_INFO(0xfffff7f7, 0x3, &(0x7f0000000600)={{0xb05, 0x0, 0x0, 0x8215, 0xae5, 0x3ff, 0x4}, 0x0, &(0x7f00000005c0)=0xd9, 0x2, 0x3, 0x6, 0x7, 0x101, 0x3, 0xe, 0x2, @raw=0x1, @raw=0x2}) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/perf_event_max_stack\x00', 0x143402, 0x0) writev$auto(r0, &(0x7f00000000c0)={0x0, 0x2}, 0x4) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000000000)={@sival_int=0xe780, @inferred=r0}, &(0x7f0000000040)=0x3) timer_create$auto(0x0, &(0x7f00000002c0)={@sival_int=0xffff, @raw=0x10001, 0x4, @_tid}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) getegid() prctl$auto(0x40, 0x1, 0x0, 0x1, 0x6) close_range$auto(0x2, 0xa, 0x0) socket(0x1a, 0xa, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x11, 0x0, 0x10) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x4, 0x2020009, 0xf, 0x11, 0xfffffffffffffffa, 0x7ffd) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) semget$auto(0xb, 0xe, 0xe0000) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0xffffffffffffffff, 0x10000000009, 0x8000, 0xe238, r2, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) rseq$auto(0x0, 0x6, 0x3, 0xff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 2.823463204s ago: executing program 2 (id=4863): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) socket(0x2, 0x3, 0x6) socket$nl_generic(0x11, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000380)='/dev/video48\x00', 0x8a240, 0x0) epoll_create$auto(0x4) select$auto(0x4a, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x40, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x8000007, 0x6d3f, 0x9, 0x200000008, 0xfffffffffffffffe]}, 0x0) r0 = io_uring_setup$auto(0x1fe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x9, 0x4000000005, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xbe53, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x310bd596c832a4fc, 0x4, 0x800003) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_EVIOCGRAB(r0, 0x40044590, &(0x7f0000000600)=0x10001) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f00000000c0)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0xd, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x9) 2.666873333s ago: executing program 1 (id=4864): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'dvmrp1\x00'}) socket(0x2c, 0x1, 0x0) socket(0x5, 0x6, 0x2) sendmsg$auto_NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="80040000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"/265], 0x480}, 0x1, 0x0, 0x0, 0x4004041}, 0x40100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D1\x00', 0x660040, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x43, 0x6, 0x1ffde, 0x5, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0x3000, 0x200, 0x6, 0x10003, 0x83, 0x4, 0x8bd71, 0x7, 0x1ffc, 0x203, 0x400, 0x84, 0x0, 0x5, 0x0, 0x0, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) madvise$auto(0x8, 0x1, 0x15) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/total_ps_buffered\x00', 0x141482, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r0, 0x0, 0xfffffffffffffdd5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/bdi/7:14/min_bytes\x00', 0x80302, 0x0) write$auto(r1, &(0x7f0000000000)='!h\xf3\xec@\xdbS\xcc\x04', 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000080)="af101b8f8a7d3fb11541234c841ad04ef950bd816b1a4f98cd92c3e2a12357557135aad56ced71a1f0d966c275daa2c99a9c0ad115b322b5d8183b96ab92708cc68cbbdf", 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) 2.645642962s ago: executing program 3 (id=4865): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event2\x00', 0x40402, 0x0) write$auto(r0, &(0x7f0000000040)='\x19de\x8f\xdent1\x00', 0x6) setsockopt$auto_SO_SNDBUF(r0, 0x2, 0x7, &(0x7f0000000000)='\x00', 0xaf0b) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x8600, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x420241, 0x0) prctl$auto(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x9) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x3, 0xe988, 0x4, 0x17, 0x401, 0x4008000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty39\x00', 0x802, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x80085610, r3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) pread64$auto(0xffffffffffffffff, 0x0, 0x40000000f42c, 0x80002) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40007, 0x1000000005, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x20102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(r3, &(0x7f0000000100)={0x0, 0x8}, 0x0) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) socket(0x11, 0x80003, 0x300) 2.323340158s ago: executing program 0 (id=4866): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(r1, 0x50009405, &(0x7f0000001a80)={@raw=0x1000, "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"}) landlock_restrict_self$auto(r0, 0x0) move_mount$auto(0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x77) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) writev$auto(r2, &(0x7f0000001200)={0x0, 0x80000001}, 0xf) close_range$auto(0x2, r1, 0x7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/nfc/nfc1/rfkill1/soft\x00', 0xa3182, 0x0) sendfile$auto(r3, r3, 0x0, 0xffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) listmount$auto(&(0x7f0000000040)={0x1e, @raw=0xf802, 0x80000002, 0xfffffffffffffff7, 0x4}, 0x0, 0x5f, 0x1) r4 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000980)='/proc/kpagecgroup\x00', 0x0, 0x0) read$auto_mon_fops_binary_mon_bin(r4, &(0x7f0000000a80)=""/4096, 0x1000) io_uring_register$auto(0x2, 0x1c, &(0x7f0000000000), 0x1) 2.304409655s ago: executing program 1 (id=4867): r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x400, 0x0) read$auto_proc_pid_attr_operations_base(r0, 0x0, 0x0) 2.070093722s ago: executing program 1 (id=4868): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sched_setaffinity$auto(0x0, 0x9899, &(0x7f00000000c0)=0xf19d) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) connect$auto(0x3, &(0x7f00000000c0), 0x55) write$auto(0x3, 0x0, 0x800) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) 1.890190594s ago: executing program 0 (id=4869): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000200)={0x2b, 0x4, 0xb, 0x56, 0x80, 0xffffffffffffffff}) r1 = set_tid_address$auto(&(0x7f0000000140)=0x151) prctl$auto(0x3e, 0x1000004, r1, 0x8001, 0x1ff) prctl$auto(0x1000005, 0xffff, 0x0, 0x1, 0x1005) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/bus/pci/00/02.0\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/209, 0xd1) socket(0x2, 0x1, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f00000002c0)={&(0x7f00000002c0), 0x1000}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x6, 0x2, 0x6) (async) semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_system\x00', 0x0, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000300)={0x7fffffff, 0x3e, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0xfffffffd, 0x101, 0x17f, 0x2}, {0x2ff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x800, 0x0) (async) write$auto(0x3, 0x0, 0x7) (async, rerun: 64) fcntl$auto(0x2, 0x11, 0x1000000000000000) (async, rerun: 64) socket(0x2b, 0x1, 0x0) 1.089147018s ago: executing program 1 (id=4870): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(r0, &(0x7f0000000080)="c2", 0x1) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x400102, 0x0) r2 = ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop12\x00', 0x8200, 0x0) fadvise64$auto(r4, 0x4a, 0x400000000000006, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0x240000, 0x0) r5 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x0) ioctl$auto_NS_GET_PARENT(r5, 0xb702, 0x0) execveat$auto(r5, 0x0, 0x0, 0x0, 0x11000) ioctl$auto_SNDCTL_DSP_GETIPTR(r5, 0x800c5011, &(0x7f0000000200)="d6ed362b75b48a09425a5a0ed8625279f9d075372dd32fa8ca2a1b7689552703be0272fd6efce39000da1cf23142ac36f3da62496cf3a0112557976d94c1dfb0ac3013dc3ba3cd6eeaf655335de6881902070410c866c73ff82ebda106") mmap$auto(0xfffffffffffffffd, 0xc37, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x18, 0x2, 0x8000) io_uring_setup$auto(0x8, 0x0) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r6, 0x80045518, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty21\x00', 0x0, 0x0) dup2$auto(r2, r3) close_range$auto(r0, 0x8, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x1a5a40, 0x0) socket(0x1e, 0x2, 0xe387) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x400, 0x0) ioctl$auto(r7, 0x921064ad, 0xffffffffffffffff) acct$auto(&(0x7f0000000040)) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) 710.614597ms ago: executing program 1 (id=4871): unshare$auto(0x40000082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) preadv$auto(0x40000000000003, 0x0, 0x6, 0x5ff4, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty36\x00', 0x400201, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, 0x0, 0x4000040) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) syslog$auto(0x4, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) rt_sigqueueinfo$auto(0x0, 0x0, &(0x7f00000002c0)={@_si_pad}) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000000001c, 0x280000000000, 0x63, 0x0, 0xee01, 0x0, 0x1002, 0x4, 0x80000008040000a, 0x40000402, 0x7, 0x8, 0xffffffff80000000, 0x800000000000b, 0x6, 0x240000100105}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r4 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) write$auto_split_huge_pages_fops_huge_memory(r3, &(0x7f0000000340)="8c7f501d8f050494aeeaad77698848c810e5cd81e9fbfe4f4f3fa803de89ff6b1a900d6576dcc709f7785754dcb2916794ca8f18958c1c7da78d62963287794b9c785d5d215030e91f57f60064de64a082cd347433068429d08ca96cf1fb4c9b025cb2264bf91c5e03d660c187b445eab29cfb0de364c66920831b24392974701ecb0ea4c7e1e1be2fdc331aaaca52f20b2df55f00fd0d22106d9190673d92ee833361a9", 0xa4) io_setup$auto(0x401, 0x0) 524.05285ms ago: executing program 0 (id=4872): set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) msgctl$auto_IPC_INFO(0xfffff7f7, 0x3, &(0x7f0000000600)={{0xb05, 0x0, 0x0, 0x8215, 0xae5, 0x3ff, 0x4}, 0x0, &(0x7f00000005c0)=0xd9, 0x2, 0x3, 0x6, 0x7, 0x101, 0x3, 0xe, 0x2, @raw=0x1, @raw=0x2}) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/kernel/perf_event_max_stack\x00', 0x143402, 0x0) writev$auto(r0, &(0x7f00000000c0)={0x0, 0x2}, 0x4) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000000000)={@sival_int=0xe780, @inferred=r0}, &(0x7f0000000040)=0x3) timer_create$auto(0x0, &(0x7f00000002c0)={@sival_int=0xffff, @raw=0x10001, 0x4, @_tid}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/nr0/flags\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) getegid() prctl$auto(0x40, 0x1, 0x0, 0x1, 0x6) close_range$auto(0x2, 0xa, 0x0) socket(0x1a, 0xa, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) modify_ldt$auto(0x11, 0x0, 0x10) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x4, 0x2020009, 0xf, 0x11, 0xfffffffffffffffa, 0x7ffd) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) semget$auto(0xb, 0xe, 0xe0000) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0xffffffffffffffff, 0x10000000009, 0x8000, 0xe238, r2, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) rseq$auto(0x0, 0x6, 0x3, 0xff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 451.556875ms ago: executing program 2 (id=4873): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1, 0x5, 0x0) socket(0x10, 0x2, 0x4) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x80805, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xc0586300}, 0x55) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x80000000002}, 0x3, 0x4) 413.880953ms ago: executing program 0 (id=4874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0800010048665200080002", @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000080) 278.302548ms ago: executing program 2 (id=4875): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/194, 0xc2) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000300)="0000e3813213b2008949", 0xa) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x7) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, r1, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff, r0}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex, 0x3, 0x40881, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1, 0x4}}, 0x81) r4 = socket(0x2, 0x2, 0x1) getsockopt$auto(r4, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, 0x0) mmap$auto(0x2000000000000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f0000000280)={0x208200700, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000680)=""/92, 0x5c, &(0x7f0000000580)=""/248, 0x0, 0x0, {r2}}, 0x58) 239.833405ms ago: executing program 0 (id=4876): madvise$auto(0x1ff80, 0x1, 0x7) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x2) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) 0s ago: executing program 0 (id=4877): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) (async) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8810) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) (async) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000740)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_HE_CAPABILITY={0x1a, 0x10d, "e2d1b2c3e0f4246df8a3901298f8aa701033e4ad8868"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) sendmsg$auto_NL80211_CMD_DEL_PMK(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="257c0000000e002400df58604e95034a8a85bb0747370800420004000000b3df08dd1d88ade71106fd18a07ec3e60dcb1623077c08ed5e9a4cfcf96a72d1f0e331f4d57f48053981dd5a11f96478580b1f995376cac9e19d7f40d30bd465610f45c6e9d71a740fbd4222eae93f33"], 0x2c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) kernel console output (not intermixed with test programs): _map_type+0x5c/0x280 [ 504.876612][T16190] ? tomoyo_open_control+0x51f/0xa30 [ 504.876678][T16190] ? tomoyo_open_control+0x51f/0xa30 [ 504.876727][T16190] tomoyo_open_control+0x51f/0xa30 [ 504.876785][T16190] do_dentry_open+0x97f/0x1530 [ 504.876833][T16190] ? __pfx_tomoyo_open+0x10/0x10 [ 504.876889][T16190] vfs_open+0x82/0x3f0 [ 504.876949][T16190] path_openat+0x1de4/0x2cb0 [ 504.877003][T16190] ? __pfx_path_openat+0x10/0x10 [ 504.877059][T16190] do_filp_open+0x20b/0x470 [ 504.877103][T16190] ? __pfx_do_filp_open+0x10/0x10 [ 504.877176][T16190] ? alloc_fd+0x471/0x7d0 [ 504.877227][T16190] do_sys_openat2+0x11b/0x1d0 [ 504.877260][T16190] ? __pfx_do_sys_openat2+0x10/0x10 [ 504.877309][T16190] __x64_sys_openat+0x174/0x210 [ 504.877513][T16190] ? __pfx___x64_sys_openat+0x10/0x10 [ 504.877606][T16190] do_syscall_64+0xcd/0x4b0 [ 504.877667][T16190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.877703][T16190] RIP: 0033:0x7ff47cb8eec9 [ 504.877731][T16190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.877765][T16190] RSP: 002b:00007ff47da00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 504.877797][T16190] RAX: ffffffffffffffda RBX: 00007ff47cde5fa0 RCX: 00007ff47cb8eec9 [ 504.877821][T16190] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 504.877843][T16190] RBP: 00007ff47cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 504.877865][T16190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.877885][T16190] R13: 00007ff47cde6038 R14: 00007ff47cde5fa0 R15: 00007fff00c39a08 [ 504.877934][T16190] [ 505.210616][T16198] bond0: option lp_interval: invalid value (0) [ 505.217355][T16198] bond0: option lp_interval: allowed values 1 - 2147483647 [ 505.228637][T16198] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 506.894931][T16242] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 506.951574][T16240] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 506.976963][T16240] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 507.007755][T16244] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 507.396378][T16257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4022'. [ 507.754900][T16267] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 507.783207][T16266] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 509.445661][T16298] netlink: 25 bytes leftover after parsing attributes in process `syz.0.4029'. [ 510.184052][T14755] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:30: bg 5: bad block bitmap checksum [ 510.196702][T14755] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 510.222565][T16316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4034'. [ 510.271037][T14755] EXT4-fs (sda1): This should not happen!! Data will be lost [ 510.271037][T14755] [ 512.273672][T16355] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.4041: iget: checksum invalid [ 512.288427][T16355] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 512.306517][T16355] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.4041: iget: checksum invalid [ 512.350481][T16355] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 512.362580][T16355] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.4041: iget: checksum invalid [ 512.392382][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.399381][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.427582][T16355] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 512.516977][T16355] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.4041: iget: checksum invalid [ 512.532113][T16355] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 512.542455][T16355] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 512.553037][T16355] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 513.321459][T14741] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 513.389404][T14741] EXT4-fs (sda1): This should not happen!! Data will be lost [ 513.389404][T14741] [ 513.394034][T16378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4046'. [ 513.822475][T16388] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4048'. [ 513.883060][T16391] __vm_enough_memory: pid: 16391, comm: syz.3.4047, bytes: 4398046511104 not enough memory for the allocation [ 514.059835][T16392] FAULT_INJECTION: forcing a failure. [ 514.059835][T16392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 514.116670][T16392] CPU: 1 UID: 0 PID: 16392 Comm: syz.1.4049 Not tainted syzkaller #0 PREEMPT(full) [ 514.116714][T16392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 514.116734][T16392] Call Trace: [ 514.116746][T16392] [ 514.116758][T16392] dump_stack_lvl+0x16c/0x1f0 [ 514.116814][T16392] should_fail_ex+0x512/0x640 [ 514.116873][T16392] should_fail_alloc_page+0xe7/0x130 [ 514.116936][T16392] prepare_alloc_pages+0x3c2/0x610 [ 514.116985][T16392] ? rcu_is_watching+0x12/0xc0 [ 514.117031][T16392] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 514.117074][T16392] ? __lock_acquire+0xb97/0x1ce0 [ 514.117143][T16392] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 514.117183][T16392] ? do_raw_spin_lock+0x12c/0x2b0 [ 514.117220][T16392] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 514.117257][T16392] ? find_held_lock+0x2b/0x80 [ 514.117309][T16392] ? __lock_acquire+0xb97/0x1ce0 [ 514.117360][T16392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 514.117401][T16392] ? policy_nodemask+0xea/0x4e0 [ 514.117453][T16392] alloc_pages_mpol+0x1fb/0x550 [ 514.117506][T16392] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 514.117570][T16392] folio_alloc_mpol_noprof+0x36/0x2f0 [ 514.117607][T16392] shmem_alloc_folio+0x135/0x160 [ 514.117663][T16392] shmem_alloc_and_add_folio+0x499/0xc20 [ 514.117713][T16392] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 514.117766][T16392] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 514.117817][T16392] shmem_get_folio_gfp+0x67f/0x1610 [ 514.117867][T16392] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 514.117916][T16392] ? filemap_map_pages+0xe01/0x1b70 [ 514.117962][T16392] shmem_fault+0x1fe/0xa30 [ 514.118005][T16392] ? __pfx_shmem_fault+0x10/0x10 [ 514.118051][T16392] ? __pfx_filemap_map_pages+0x10/0x10 [ 514.118102][T16392] ? __pfx_filemap_map_pages+0x10/0x10 [ 514.118136][T16392] __do_fault+0x10d/0x490 [ 514.118179][T16392] ? __pfx_filemap_map_pages+0x10/0x10 [ 514.118214][T16392] do_pte_missing+0xf4a/0x3ba0 [ 514.118249][T16392] ? find_held_lock+0x2b/0x80 [ 514.118292][T16392] ? __handle_mm_fault+0x1529/0x2aa0 [ 514.118333][T16392] __handle_mm_fault+0x1556/0x2aa0 [ 514.118374][T16392] ? mt_find+0x3e2/0xa20 [ 514.118408][T16392] ? __pfx___handle_mm_fault+0x10/0x10 [ 514.118440][T16392] ? __pfx_mt_find+0x10/0x10 [ 514.118497][T16392] ? find_vma+0xbf/0x140 [ 514.118541][T16392] ? __pfx_find_vma+0x10/0x10 [ 514.118591][T16392] handle_mm_fault+0x589/0xd10 [ 514.118627][T16392] ? __pkru_allows_pkey+0x31/0xb0 [ 514.118666][T16392] do_user_addr_fault+0x7a6/0x1370 [ 514.118710][T16392] ? rcu_is_watching+0x12/0xc0 [ 514.118759][T16392] exc_page_fault+0x5c/0xb0 [ 514.118809][T16392] asm_exc_page_fault+0x26/0x30 [ 514.118842][T16392] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 514.118884][T16392] Code: 23 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 514.118927][T16392] RSP: 0018:ffffc900043efa48 EFLAGS: 00050206 [ 514.118953][T16392] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 514.118974][T16392] RDX: 0000000000000000 RSI: 000000000006b000 RDI: ffff88806964d000 [ 514.118995][T16392] RBP: 000000000006b000 R08: 0000000000000001 R09: ffffed100d2c9bff [ 514.119017][T16392] R10: ffff88806964dfff R11: 0000000000000000 R12: ffffc900043efda0 [ 514.119039][T16392] R13: 000000000006c000 R14: ffff88806964d000 R15: 00007ffffffff000 [ 514.119083][T16392] _copy_from_iter+0x383/0x1720 [ 514.119142][T16392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 514.119187][T16392] ? __pfx__copy_from_iter+0x10/0x10 [ 514.119244][T16392] ? alloc_pages_mpol+0x25a/0x550 [ 514.119297][T16392] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 514.119357][T16392] copy_page_from_iter+0xde/0x180 [ 514.119419][T16392] anon_pipe_write+0xed5/0x1bd0 [ 514.119483][T16392] ? __pfx_anon_pipe_write+0x10/0x10 [ 514.119530][T16392] ? __pfx_autoremove_wake_function+0x10/0x10 [ 514.119582][T16392] ? bpf_lsm_file_permission+0x9/0x10 [ 514.119628][T16392] ? security_file_permission+0x71/0x210 [ 514.119668][T16392] ? rw_verify_area+0xcf/0x6c0 [ 514.119708][T16392] vfs_write+0x7d3/0x11d0 [ 514.119751][T16392] ? __pfx_anon_pipe_write+0x10/0x10 [ 514.119801][T16392] ? __pfx_vfs_write+0x10/0x10 [ 514.119839][T16392] ? find_held_lock+0x2b/0x80 [ 514.119915][T16392] ksys_write+0x1f8/0x250 [ 514.119957][T16392] ? __pfx_ksys_write+0x10/0x10 [ 514.120013][T16392] do_syscall_64+0xcd/0x4b0 [ 514.120072][T16392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.120106][T16392] RIP: 0033:0x7f2fc478eec9 [ 514.120132][T16392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.120165][T16392] RSP: 002b:00007f2fc56ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 514.120195][T16392] RAX: ffffffffffffffda RBX: 00007f2fc49e5fa0 RCX: 00007f2fc478eec9 [ 514.120218][T16392] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 514.120238][T16392] RBP: 00007f2fc4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 514.120259][T16392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.120279][T16392] R13: 00007f2fc49e6038 R14: 00007f2fc49e5fa0 R15: 00007ffea9a4f5c8 [ 514.120323][T16392] [ 514.783892][ T30] audit: type=1806 audit(4294967317.430:20): res=-14 [ 515.239712][T14744] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 515.346233][T14744] EXT4-fs (sda1): This should not happen!! Data will be lost [ 515.346233][T14744] [ 516.036676][T14741] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 516.066434][T14741] EXT4-fs (sda1): This should not happen!! Data will be lost [ 516.066434][T14741] [ 516.113494][T16439] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 516.222742][T16430] zswap: compressor not available [ 516.457551][T16442] HfR: entered promiscuous mode [ 516.771760][T14744] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 516.822789][T14744] EXT4-fs (sda1): This should not happen!! Data will be lost [ 516.822789][T14744] [ 517.797387][T14744] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 517.819885][T14744] EXT4-fs (sda1): This should not happen!! Data will be lost [ 517.819885][T14744] [ 518.700614][T16500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.734868][T16500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4069'. [ 519.184907][T14744] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 519.776316][T16501] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4068'. [ 520.212515][T14744] EXT4-fs (sda1): This should not happen!! Data will be lost [ 520.212515][T14744] [ 520.534008][T16521] FAULT_INJECTION: forcing a failure. [ 520.534008][T16521] name failslab, interval 1, probability 0, space 0, times 0 [ 520.547398][T16521] CPU: 1 UID: 0 PID: 16521 Comm: syz.0.4073 Not tainted syzkaller #0 PREEMPT(full) [ 520.547440][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 520.547460][T16521] Call Trace: [ 520.547471][T16521] [ 520.547483][T16521] dump_stack_lvl+0x16c/0x1f0 [ 520.547540][T16521] should_fail_ex+0x512/0x640 [ 520.547591][T16521] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 520.547640][T16521] should_failslab+0xc2/0x120 [ 520.547689][T16521] __kvmalloc_node_noprof+0x141/0x9c0 [ 520.547738][T16521] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 520.547797][T16521] ? file_tty_write.constprop.0+0x6f3/0x9b0 [ 520.547846][T16521] file_tty_write.constprop.0+0x6f3/0x9b0 [ 520.547907][T16521] redirected_tty_write+0xd4/0x150 [ 520.547959][T16521] vfs_write+0x7d3/0x11d0 [ 520.548000][T16521] ? __pfx_redirected_tty_write+0x10/0x10 [ 520.548057][T16521] ? __pfx_vfs_write+0x10/0x10 [ 520.548094][T16521] ? find_held_lock+0x2b/0x80 [ 520.548161][T16521] ksys_write+0x12a/0x250 [ 520.548200][T16521] ? __pfx_ksys_write+0x10/0x10 [ 520.548251][T16521] do_syscall_64+0xcd/0x4b0 [ 520.548306][T16521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.548334][T16521] RIP: 0033:0x7f0acad8eec9 [ 520.548355][T16521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.548381][T16521] RSP: 002b:00007f0acbcd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 520.548407][T16521] RAX: ffffffffffffffda RBX: 00007f0acafe5fa0 RCX: 00007f0acad8eec9 [ 520.548425][T16521] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000003 [ 520.548441][T16521] RBP: 00007f0acbcd4090 R08: 0000000000000000 R09: 0000000000000000 [ 520.548457][T16521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.548473][T16521] R13: 00007f0acafe6038 R14: 00007f0acafe5fa0 R15: 00007ffcfec7bd38 [ 520.548508][T16521] [ 520.691322][T16525] mmap: syz.0.4075 (16525): VmData 45883392 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 521.891529][T14748] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 521.940828][T14748] EXT4-fs (sda1): This should not happen!! Data will be lost [ 521.940828][T14748] [ 522.093567][T16552] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4077'. [ 522.692776][T14750] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 522.737170][T14750] EXT4-fs (sda1): This should not happen!! Data will be lost [ 522.737170][T14750] [ 522.980757][T16570] FAULT_INJECTION: forcing a failure. [ 522.980757][T16570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.035862][T16570] CPU: 1 UID: 0 PID: 16570 Comm: syz.1.4084 Not tainted syzkaller #0 PREEMPT(full) [ 523.035905][T16570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 523.035925][T16570] Call Trace: [ 523.035940][T16570] [ 523.035951][T16570] dump_stack_lvl+0x16c/0x1f0 [ 523.036004][T16570] should_fail_ex+0x512/0x640 [ 523.036100][T16570] _copy_from_iter+0x29f/0x1720 [ 523.036164][T16570] ? __pfx__copy_from_iter+0x10/0x10 [ 523.036215][T16570] ? trace_kmalloc+0x2b/0xd0 [ 523.036263][T16570] ? rcu_is_watching+0x12/0xc0 [ 523.036305][T16570] ? kfree+0x252/0x6d0 [ 523.036346][T16570] file_tty_write.constprop.0+0x487/0x9b0 [ 523.036409][T16570] redirected_tty_write+0xd4/0x150 [ 523.036462][T16570] vfs_write+0x7d3/0x11d0 [ 523.036503][T16570] ? __pfx_redirected_tty_write+0x10/0x10 [ 523.036561][T16570] ? __pfx_vfs_write+0x10/0x10 [ 523.036598][T16570] ? find_held_lock+0x2b/0x80 [ 523.036665][T16570] ksys_write+0x12a/0x250 [ 523.036705][T16570] ? __pfx_ksys_write+0x10/0x10 [ 523.036758][T16570] do_syscall_64+0xcd/0x4b0 [ 523.036812][T16570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.036845][T16570] RIP: 0033:0x7f2fc478eec9 [ 523.036870][T16570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.036901][T16570] RSP: 002b:00007f2fc56ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 523.036932][T16570] RAX: ffffffffffffffda RBX: 00007f2fc49e5fa0 RCX: 00007f2fc478eec9 [ 523.036953][T16570] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000003 [ 523.036973][T16570] RBP: 00007f2fc56ee090 R08: 0000000000000000 R09: 0000000000000000 [ 523.036993][T16570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.037012][T16570] R13: 00007f2fc49e6038 R14: 00007f2fc49e5fa0 R15: 00007ffea9a4f5c8 [ 523.037064][T16570] [ 523.626329][T16576] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 524.135307][T16583] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4086'. [ 524.150677][T14741] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 524.189423][T14741] EXT4-fs (sda1): This should not happen!! Data will be lost [ 524.189423][T14741] [ 524.583456][T16568] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 525.058231][T16575] kexec: Could not allocate control_code_buffer [ 525.397577][T16588] __vm_enough_memory: pid: 16588, comm: syz.1.4087, bytes: 4398046511104 not enough memory for the allocation [ 525.425264][T14747] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 525.476089][T14747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 525.476089][T14747] [ 525.930687][T14747] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.201504][T14748] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 526.214417][T14748] EXT4-fs (sda1): This should not happen!! Data will be lost [ 526.214417][T14748] [ 526.661384][T16604] kafs: addr_prefs: Invalid Command [ 527.666297][T16620] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 528.734459][T16627] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 528.769365][T16627] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 528.801216][T16627] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 528.845441][T16627] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 529.094380][T16652] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4097'. [ 529.850037][T16665] sysfs_service_op_show: Client not running :-5: [ 530.159772][T14750] EXT4-fs: 2 callbacks suppressed [ 530.159794][T14750] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 530.196122][T14750] EXT4-fs (sda1): This should not happen!! Data will be lost [ 530.196122][T14750] [ 530.306208][T12215] Bluetooth: hci0: command 0x0c1a tx timeout [ 530.786848][ T9787] Bluetooth: hci3: command 0x0c1a tx timeout [ 530.793261][T12215] Bluetooth: hci1: command 0x0c1a tx timeout [ 530.866510][T12215] Bluetooth: hci2: command 0x0c1a tx timeout [ 531.909173][T16717] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 532.586787][T16731] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4111'. [ 533.174056][T14741] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 533.236171][T14741] EXT4-fs (sda1): This should not happen!! Data will be lost [ 533.236171][T14741] [ 534.529310][T16751] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4118'. [ 535.791785][T16770] zswap: compressor not available [ 535.833794][T14747] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 535.885989][T14747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 535.885989][T14747] [ 535.938533][T16770] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 537.202957][T16792] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4125'. [ 537.403335][T14741] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 537.427711][T14741] EXT4-fs (sda1): This should not happen!! Data will be lost [ 537.427711][T14741] [ 537.661078][T16781] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 538.344768][T16798] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4127: iget: checksum invalid [ 538.480598][T16798] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 538.496824][T16798] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4127: iget: checksum invalid [ 538.511621][T16798] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 538.535694][T16798] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4127: iget: checksum invalid [ 538.592301][T16798] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 538.677266][T16798] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4127: iget: checksum invalid [ 538.756565][T16798] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 538.907562][T16798] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 538.919400][T14747] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 538.946993][T14747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 538.946993][T14747] [ 538.985729][T16798] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 539.271011][T14747] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 539.305441][T14747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 539.305441][T14747] [ 540.740329][T14748] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 540.795278][T14748] EXT4-fs (sda1): This should not happen!! Data will be lost [ 540.795278][T14748] [ 542.222297][T14750] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 542.296160][T14750] EXT4-fs (sda1): This should not happen!! Data will be lost [ 542.296160][T14750] [ 542.704847][T16878] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4147'. [ 543.496099][T14748] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 543.626007][T14748] EXT4-fs (sda1): This should not happen!! Data will be lost [ 543.626007][T14748] [ 543.883911][T14748] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 543.890580][T16834] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 543.956127][T14748] EXT4-fs (sda1): This should not happen!! Data will be lost [ 543.956127][T14748] [ 544.504680][T16906] random: crng reseeded on system resumption [ 544.520884][T16905] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 544.990571][T16915] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 545.004530][T16915] EXT4-fs (sda1): This should not happen!! Data will be lost [ 545.004530][T16915] [ 545.057655][T16927] CIFS: VFS: Invalid SecurityFlags: [ 545.137003][T16930] usb usb36: usbfs: process 16930 (syz.2.4157) did not claim interface 0 before use [ 545.201311][T16929] FAULT_INJECTION: forcing a failure. [ 545.201311][T16929] name failslab, interval 1, probability 0, space 0, times 0 [ 545.215744][T16929] CPU: 0 UID: 0 PID: 16929 Comm: syz.2.4157 Not tainted syzkaller #0 PREEMPT(full) [ 545.215775][T16929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 545.215790][T16929] Call Trace: [ 545.215797][T16929] [ 545.215805][T16929] dump_stack_lvl+0x16c/0x1f0 [ 545.215846][T16929] should_fail_ex+0x512/0x640 [ 545.215884][T16929] ? __kmalloc_noprof+0xca/0x880 [ 545.215911][T16929] should_failslab+0xc2/0x120 [ 545.215960][T16929] __kmalloc_noprof+0xdd/0x880 [ 545.216004][T16929] ? __register_sysctl_table+0xb3/0x1900 [ 545.216049][T16929] ? __register_sysctl_table+0xb3/0x1900 [ 545.216084][T16929] __register_sysctl_table+0xb3/0x1900 [ 545.216121][T16929] ? is_module_address+0x5f/0xf0 [ 545.216148][T16929] ? __pfx___register_sysctl_table+0x10/0x10 [ 545.216183][T16929] ? is_module_address+0x69/0xf0 [ 545.216203][T16929] ? register_net_sysctl_sz+0x228/0x3e0 [ 545.216232][T16929] ? __asan_memcpy+0x3c/0x60 [ 545.216262][T16929] xfrm4_net_init+0xf0/0x1c0 [ 545.216284][T16929] ? __pfx_xfrm4_net_init+0x10/0x10 [ 545.216305][T16929] ops_init+0x1df/0x5f0 [ 545.216330][T16929] setup_net+0x100/0x390 [ 545.216351][T16929] ? __pfx_setup_net+0x10/0x10 [ 545.216374][T16929] ? debug_mutex_init+0x37/0x70 [ 545.216409][T16929] copy_net_ns+0x2f8/0x690 [ 545.216437][T16929] create_new_namespaces+0x3ea/0xa90 [ 545.216475][T16929] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 545.216509][T16929] ksys_unshare+0x45b/0xa40 [ 545.216545][T16929] ? __pfx_ksys_unshare+0x10/0x10 [ 545.216582][T16929] ? xfd_validate_state+0x61/0x180 [ 545.216612][T16929] __x64_sys_unshare+0x31/0x40 [ 545.216648][T16929] do_syscall_64+0xcd/0x4b0 [ 545.216686][T16929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.216709][T16929] RIP: 0033:0x7f803078eec9 [ 545.216727][T16929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.216750][T16929] RSP: 002b:00007f80316b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 545.216771][T16929] RAX: ffffffffffffffda RBX: 00007f80309e5fa0 RCX: 00007f803078eec9 [ 545.216786][T16929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 545.216800][T16929] RBP: 00007f8030811f91 R08: 0000000000000000 R09: 0000000000000000 [ 545.216813][T16929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.216827][T16929] R13: 00007f80309e6038 R14: 00007f80309e5fa0 R15: 00007ffd56fda428 [ 545.216856][T16929] [ 545.651376][T14750] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 545.663970][T14750] EXT4-fs (sda1): This should not happen!! Data will be lost [ 545.663970][T14750] [ 546.082483][T16936] Invalid ELF header magic: != ELF [ 546.241501][T16953] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4161'. [ 547.538625][T14750] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 547.591931][T16980] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 547.658267][T16981] sd 0:0:1:0: PR command failed: 1026 [ 547.663718][T16981] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 547.688369][T16981] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 547.696442][T14750] EXT4-fs (sda1): This should not happen!! Data will be lost [ 547.696442][T14750] [ 547.876434][T16982] random: crng reseeded on system resumption [ 548.584037][T14747] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 548.656197][T14747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 548.656197][T14747] [ 550.459103][T17025] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4170'. [ 550.613911][T14755] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 550.671440][T14755] EXT4-fs (sda1): This should not happen!! Data will be lost [ 550.671440][T14755] [ 551.390715][T17026] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 551.403634][T17026] EXT4-fs (sda1): This should not happen!! Data will be lost [ 551.403634][T17026] [ 551.453220][T17046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4175'. [ 551.467829][T17035] netlink: 'syz.1.4174': attribute type 19 has an invalid length. [ 551.608910][T17035] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4174'. [ 551.715554][T17040] binder: 17027:17040 ioctl c0306201 200000000000 returned -14 [ 553.281188][T17072] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 553.395565][T17079] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4179'. [ 553.428885][T17079] unsupported nla_type 34273 [ 553.439135][T17077] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4179'. [ 553.479180][T14755] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 553.512857][T14755] EXT4-fs (sda1): This should not happen!! Data will be lost [ 553.512857][T14755] [ 553.885282][T17087] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 554.276552][T14741] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 554.348018][T14741] EXT4-fs (sda1): This should not happen!! Data will be lost [ 554.348018][T14741] [ 554.684449][T17085] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 555.857746][T14750] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 555.895772][T14750] EXT4-fs (sda1): This should not happen!! Data will be lost [ 555.895772][T14750] [ 556.654086][T17158] Invalid ELF header magic: != ELF [ 556.733452][T14754] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 556.736453][T17159] delete_channel: no stack [ 556.831326][T14754] EXT4-fs (sda1): This should not happen!! Data will be lost [ 556.831326][T14754] [ 557.078597][T17164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4194'. [ 557.134186][T17167] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4193'. [ 558.247941][T17182] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 558.554559][T14747] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 558.638380][T14747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 558.638380][T14747] [ 559.396238][T17184] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 559.403513][T17184] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 559.416412][T17184] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 559.436543][T17184] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 559.882411][T14755] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 559.915453][T14755] EXT4-fs (sda1): This should not happen!! Data will be lost [ 559.915453][T14755] [ 560.132787][T17211] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 560.863095][T17209] kexec: Could not allocate control_code_buffer [ 561.006181][T17222] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input47 [ 561.016378][T17215] zswap: compressor not available [ 561.426257][T12215] Bluetooth: hci1: command 0x0c1a tx timeout [ 561.432314][ T9787] Bluetooth: hci3: command 0x0c1a tx timeout [ 561.438279][T17236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4205'. [ 561.448776][T14182] Bluetooth: hci0: command 0x0c1a tx timeout [ 561.469918][T14750] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 561.486119][T14750] EXT4-fs (sda1): This should not happen!! Data will be lost [ 561.486119][T14750] [ 561.507655][T12215] Bluetooth: hci2: command 0x0c1a tx timeout [ 561.691089][T17228] HfR: entered promiscuous mode [ 561.700276][T17229] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4203'. getty: ttyS0: read error: Resource temporarily unavailable [ 562.733357][T14754] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 562.822768][T14754] EXT4-fs (sda1): This should not happen!! Data will be lost [ 562.822768][T14754] [ 563.036644][T17263] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 563.939159][T17287] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 564.359485][T14755] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 564.436021][T14755] EXT4-fs (sda1): This should not happen!! Data will be lost [ 564.436021][T14755] [ 564.790187][T17301] [U] [ 564.793367][T17301] [U] [ 564.796119][T17301] [U] [ 564.798855][T17301] [U] [ 564.836472][T17301] [U] [ 564.839268][T17301] [U] [ 564.842031][T17301] [U] [ 564.844987][T17301] [U] [ 564.877237][T17302] [U] [ 564.925796][T17309] netlink: 'syz.3.4221': attribute type 1 has an invalid length. [ 565.036406][T17309] netlink: 306 bytes leftover after parsing attributes in process `syz.3.4221'. [ 566.264913][T14747] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 566.296133][T14747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 566.296133][T14747] [ 567.072286][T14747] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 567.142236][T14747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 567.142236][T14747] [ 567.812489][T17354] random: crng reseeded on system resumption [ 568.288937][T17361] ERROR: Out of memory at tomoyo_memory_ok. [ 569.116183][T17368] syz.3.4234 (17368) used obsolete PPPIOCDETACH ioctl [ 569.311300][T17382] binder: 17380:17382 ioctl 401870c7 f returned -22 [ 569.323907][T17389] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4232'. [ 569.787767][T14755] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 569.825025][T14755] EXT4-fs (sda1): This should not happen!! Data will be lost [ 569.825025][T14755] [ 570.644278][T17421] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 570.831978][T17428] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4247'. [ 570.893214][T14747] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 570.901069][T17426] Invalid ELF header magic: != ELF [ 570.939338][T14747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 570.939338][T14747] [ 572.661064][T14754] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 572.761349][T14754] EXT4-fs (sda1): This should not happen!! Data will be lost [ 572.761349][T14754] [ 573.283607][T17447] FAULT_INJECTION: forcing a failure. [ 573.283607][T17447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.297982][T17447] CPU: 1 UID: 0 PID: 17447 Comm: syz.2.4252 Not tainted syzkaller #0 PREEMPT(full) [ 573.298024][T17447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 573.298043][T17447] Call Trace: [ 573.298053][T17447] [ 573.298065][T17447] dump_stack_lvl+0x16c/0x1f0 [ 573.298120][T17447] should_fail_ex+0x512/0x640 [ 573.298177][T17447] core_sys_select+0x4c5/0xc20 [ 573.298224][T17447] ? __pfx_core_sys_select+0x10/0x10 [ 573.298270][T17447] ? proc_fail_nth_write+0x9f/0x220 [ 573.298345][T17447] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 573.298408][T17447] kern_select+0x15d/0x1e0 [ 573.298443][T17447] ? __pfx_kern_select+0x10/0x10 [ 573.298505][T17447] ? __pfx_ksys_write+0x10/0x10 [ 573.298553][T17447] __x64_sys_select+0xbd/0x160 [ 573.298587][T17447] ? do_syscall_64+0x91/0x4b0 [ 573.298636][T17447] ? lockdep_hardirqs_on+0x7c/0x110 [ 573.298691][T17447] do_syscall_64+0xcd/0x4b0 [ 573.298745][T17447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.298778][T17447] RIP: 0033:0x7f803078eec9 [ 573.298803][T17447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.298835][T17447] RSP: 002b:00007f80316b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 573.298864][T17447] RAX: ffffffffffffffda RBX: 00007f80309e5fa0 RCX: 00007f803078eec9 [ 573.298885][T17447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 573.298904][T17447] RBP: 00007f80316b4090 R08: 0000000000000000 R09: 0000000000000000 [ 573.298923][T17447] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 573.298943][T17447] R13: 00007f80309e6038 R14: 00007f80309e5fa0 R15: 00007ffd56fda428 [ 573.298985][T17447] [ 573.641814][T17478] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 573.831490][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.838696][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.025557][T14754] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 574.061123][T17481] FAULT_INJECTION: forcing a failure. [ 574.061123][T17481] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 574.074776][T17481] CPU: 0 UID: 0 PID: 17481 Comm: syz.0.4256 Not tainted syzkaller #0 PREEMPT(full) [ 574.074823][T17481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 574.074853][T17481] Call Trace: [ 574.074864][T17481] [ 574.074878][T17481] dump_stack_lvl+0x16c/0x1f0 [ 574.074937][T17481] should_fail_ex+0x512/0x640 [ 574.074997][T17481] should_fail_alloc_page+0xe7/0x130 [ 574.075052][T17481] prepare_alloc_pages+0x3c2/0x610 [ 574.075109][T17481] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 574.075159][T17481] ? __up_read+0x1f8/0x750 [ 574.075197][T17481] ? __pfx___up_read+0x10/0x10 [ 574.075233][T17481] ? __rmap_walk_file+0x575/0x620 [ 574.075285][T17481] ? vma_interval_tree_iter_next+0x10c/0x250 [ 574.075324][T17481] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 574.075370][T17481] ? __rmap_walk_file+0x575/0x620 [ 574.075434][T17481] ? rmap_walk_file+0x174/0x1f0 [ 574.075507][T17481] __folio_alloc_noprof+0x11/0x220 [ 574.075546][T17481] alloc_migration_target+0x24a/0x660 [ 574.075607][T17481] migrate_pages_batch+0x3b9/0x3bb0 [ 574.075646][T17481] ? __pfx_alloc_migration_target+0x10/0x10 [ 574.075717][T17481] ? __pfx_migrate_pages_batch+0x10/0x10 [ 574.075759][T17481] ? __pfx_walk_pgd_range+0x10/0x10 [ 574.075805][T17481] migrate_pages_sync+0x12d/0x8a0 [ 574.075847][T17481] ? __pfx_alloc_migration_target+0x10/0x10 [ 574.075914][T17481] ? queue_pages_test_walk+0x279/0x410 [ 574.075969][T17481] ? __pfx_migrate_pages_sync+0x10/0x10 [ 574.076003][T17481] ? walk_page_test+0x9b/0x180 [ 574.076048][T17481] ? walk_page_range_mm+0x235/0xb40 [ 574.076099][T17481] migrate_pages+0x1b5f/0x23a0 [ 574.076138][T17481] ? __pfx_alloc_migration_target+0x10/0x10 [ 574.076207][T17481] ? __pfx_migrate_pages+0x10/0x10 [ 574.076242][T17481] ? queue_pages_range+0x11e/0x180 [ 574.076297][T17481] ? __pfx___up_read+0x10/0x10 [ 574.076334][T17481] ? do_migrate_pages+0x458/0x750 [ 574.076393][T17481] do_migrate_pages+0x48e/0x750 [ 574.076456][T17481] ? __pfx_do_migrate_pages+0x10/0x10 [ 574.076512][T17481] ? rcu_is_watching+0x12/0xc0 [ 574.076562][T17481] ? cap_capable+0xb3/0x250 [ 574.076611][T17481] ? get_task_mm+0xc2/0xf0 [ 574.076656][T17481] ? security_capable+0x250/0x260 [ 574.076714][T17481] kernel_migrate_pages+0x55b/0x700 [ 574.076768][T17481] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 574.076831][T17481] ? __pfx_do_writev+0x10/0x10 [ 574.076880][T17481] __x64_sys_migrate_pages+0x96/0x100 [ 574.076935][T17481] ? lockdep_hardirqs_on+0x7c/0x110 [ 574.076987][T17481] do_syscall_64+0xcd/0x4b0 [ 574.077043][T17481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.077077][T17481] RIP: 0033:0x7f0acad8eec9 [ 574.077105][T17481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.077140][T17481] RSP: 002b:00007f0acbcb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 574.077173][T17481] RAX: ffffffffffffffda RBX: 00007f0acafe6090 RCX: 00007f0acad8eec9 [ 574.077195][T17481] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 574.077216][T17481] RBP: 00007f0acae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 574.077237][T17481] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 574.077255][T17481] R13: 00007f0acafe6128 R14: 00007f0acafe6090 R15: 00007ffcfec7bd38 [ 574.077298][T17481] syzkaller syzkaller login: [ 574.531345][T14754] EXT4-fs (sda1): This should not happen!! Data will be lost [ 574.531345][T14754] [ 575.348983][T14747] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 575.393265][T14747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 575.393265][T14747] [ 575.607811][T17509] vhci_hcd: invalid port number 16 [ 575.615461][T17509] vhci_hcd: invalid port number 16 [ 575.739641][T17512] random: crng reseeded on system resumption [ 575.785014][T14747] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 575.797876][T14747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 575.797876][T14747] [ 575.878553][T17498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4262'. [ 575.892218][T17498] FAULT_INJECTION: forcing a failure. [ 575.892218][T17498] name failslab, interval 1, probability 0, space 0, times 0 [ 575.916459][T17498] CPU: 1 UID: 0 PID: 17498 Comm: syz.3.4262 Not tainted syzkaller #0 PREEMPT(full) [ 575.916505][T17498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 575.916527][T17498] Call Trace: [ 575.916539][T17498] [ 575.916553][T17498] dump_stack_lvl+0x16c/0x1f0 [ 575.916613][T17498] should_fail_ex+0x512/0x640 [ 575.916679][T17498] ? fs_reclaim_acquire+0xae/0x150 [ 575.916734][T17498] should_failslab+0xc2/0x120 [ 575.916786][T17498] __kmalloc_noprof+0xdd/0x880 [ 575.916824][T17498] ? tomoyo_profile+0x47/0x60 [ 575.916869][T17498] ? tomoyo_supervisor+0x45b/0x13b0 [ 575.916923][T17498] ? tomoyo_supervisor+0x45b/0x13b0 [ 575.916970][T17498] tomoyo_supervisor+0x45b/0x13b0 [ 575.917028][T17498] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 575.917076][T17498] ? __pfx_vsnprintf+0x10/0x10 [ 575.917155][T17498] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 575.917205][T17498] tomoyo_path_number_perm+0x448/0x580 [ 575.917245][T17498] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 575.917284][T17498] ? find_held_lock+0x2b/0x80 [ 575.917335][T17498] ? do_raw_spin_unlock+0x172/0x230 [ 575.917397][T17498] ? current_check_access_path+0x33c/0x460 [ 575.917454][T17498] ? lookup_one_qstr_excl+0xb3/0x250 [ 575.917515][T17498] tomoyo_path_mkdir+0x9b/0xe0 [ 575.917568][T17498] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 575.917635][T17498] security_path_mkdir+0x154/0x2f0 [ 575.917673][T17498] do_mkdirat+0x175/0x3e0 [ 575.917717][T17498] ? __pfx_do_mkdirat+0x10/0x10 [ 575.917765][T17498] ? getname_flags.part.0+0x1c5/0x550 [ 575.917826][T17498] __x64_sys_mkdir+0xef/0x140 [ 575.917872][T17498] do_syscall_64+0xcd/0x4b0 [ 575.917930][T17498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.917966][T17498] RIP: 0033:0x7ff47cb8eec9 [ 575.917993][T17498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.918027][T17498] RSP: 002b:00007ff47da00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 575.918059][T17498] RAX: ffffffffffffffda RBX: 00007ff47cde5fa0 RCX: 00007ff47cb8eec9 [ 575.918082][T17498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 575.918103][T17498] RBP: 00007ff47cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.918124][T17498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.918145][T17498] R13: 00007ff47cde6038 R14: 00007ff47cde5fa0 R15: 00007fff00c39a08 [ 575.918189][T17498] [ 576.291141][T17519] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 576.448673][T17519] EXT4-fs (sda1): This should not happen!! Data will be lost [ 576.448673][T17519] [ 576.942923][T17527] netlink: 86 bytes leftover after parsing attributes in process `syz.2.4270'. [ 577.162627][ T9784] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 577.227327][ T9784] EXT4-fs (sda1): This should not happen!! Data will be lost [ 577.227327][ T9784] [ 577.267944][T17537] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 577.689980][T17546] nfs: Unknown parameter 'ީiʟby7J ؀V{ [ 577.689980][T17546] \9-*;#rRcFGL֍*(ܦ)5&yAlj Lp%Zw}GSιk' [ 578.192620][ T9784] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 578.225602][ T9784] EXT4-fs (sda1): This should not happen!! Data will be lost [ 578.225602][ T9784] [ 578.884529][T17578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4280'. [ 578.901103][T17579] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4276'. [ 580.085793][T17605] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 580.722612][T17621] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 581.518476][T17639] EXT4-fs: 2 callbacks suppressed [ 581.518499][T17639] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 581.592975][T17639] EXT4-fs (sda1): This should not happen!! Data will be lost [ 581.592975][T17639] [ 581.668647][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4297'. [ 582.531388][T17668] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 582.665742][T14741] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 582.710503][T14741] EXT4-fs (sda1): This should not happen!! Data will be lost [ 582.710503][T14741] [ 582.959239][T17678] random: crng reseeded on system resumption [ 583.542160][T17676] Invalid ELF header magic: != ELF [ 583.913610][T14747] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 583.926198][T14747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 583.926198][T14747] [ 583.984913][T17692] sctp: [Deprecated]: syz.0.4306 (pid 17692) Use of struct sctp_assoc_value in delayed_ack socket option. [ 583.984913][T17692] Use struct sctp_sack_info instead [ 584.582910][T14747] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 584.619726][T14747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 584.619726][T14747] [ 584.704974][T17728] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 584.721322][T17729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4315'. [ 585.405429][T14748] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 585.485432][T14748] EXT4-fs (sda1): This should not happen!! Data will be lost [ 585.485432][T14748] [ 586.881868][T17775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4323'. [ 587.067312][T14754] EXT4-fs: 2 callbacks suppressed [ 587.067335][T14754] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 587.105366][T14754] EXT4-fs (sda1): This should not happen!! Data will be lost [ 587.105366][T14754] [ 587.609698][T14748] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 587.622672][T14748] EXT4-fs (sda1): This should not happen!! Data will be lost [ 587.622672][T14748] [ 588.296905][ T9784] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 588.317617][ T9784] EXT4-fs (sda1): This should not happen!! Data will be lost [ 588.317617][ T9784] [ 588.736886][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4327'. [ 590.313042][T17826] mkiss: ax0: crc mode is auto. [ 590.410605][T17821] random: crng reseeded on system resumption [ 590.497159][T17831] netlink: 29 bytes leftover after parsing attributes in process `syz.3.4334'. [ 591.009937][T17849] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 591.009937][T17849] The task syz.1.4337 (17849) triggered the difference, watch for misbehavior. [ 592.349197][T17859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 592.403301][T17859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 592.528932][T17859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 592.535416][T17859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 592.598368][T17884] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4341'. [ 593.910477][T12215] Bluetooth: hci0: command 0x0c1a tx timeout [ 593.936501][T17911] random: crng reseeded on system resumption [ 594.469029][T12215] Bluetooth: hci3: command 0x0c1a tx timeout [ 594.546166][T12215] Bluetooth: hci2: command 0x0c1a tx timeout [ 594.552269][ T9787] Bluetooth: hci1: command 0x0c1a tx timeout [ 594.570669][T17919] kexec: Could not allocate control_code_buffer [ 594.889986][T17929] FAULT_INJECTION: forcing a failure. [ 594.889986][T17929] name fail_futex, interval 1, probability 0, space 0, times 0 [ 594.936096][T17929] CPU: 1 UID: 0 PID: 17929 Comm: syz.0.4352 Not tainted syzkaller #0 PREEMPT(full) [ 594.936146][T17929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 594.936167][T17929] Call Trace: [ 594.936177][T17929] [ 594.936191][T17929] dump_stack_lvl+0x16c/0x1f0 [ 594.936252][T17929] should_fail_ex+0x512/0x640 [ 594.936310][T17929] get_futex_key+0x1d0/0x1560 [ 594.936365][T17929] ? __pfx_get_futex_key+0x10/0x10 [ 594.936413][T17929] ? futex_private_hash_put+0x176/0x300 [ 594.936474][T17929] futex_wake+0xea/0x530 [ 594.936505][T17929] ? futex_wait+0x120/0x380 [ 594.936540][T17929] ? __pfx_futex_wait+0x10/0x10 [ 594.936574][T17929] ? __pfx_futex_wake+0x10/0x10 [ 594.936615][T17929] ? __lock_acquire+0x62e/0x1ce0 [ 594.936697][T17929] do_futex+0x1e3/0x350 [ 594.936751][T17929] ? __pfx_do_futex+0x10/0x10 [ 594.936807][T17929] ? find_held_lock+0x2b/0x80 [ 594.936853][T17929] __x64_sys_futex+0x1e0/0x4c0 [ 594.936912][T17929] ? __pfx___x64_sys_futex+0x10/0x10 [ 594.936968][T17929] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 594.937018][T17929] do_syscall_64+0xcd/0x4b0 [ 594.937081][T17929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.937116][T17929] RIP: 0033:0x7f0acad8eec9 [ 594.937144][T17929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.937178][T17929] RSP: 002b:00007f0acbcb30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 594.937211][T17929] RAX: ffffffffffffffda RBX: 00007f0acafe6098 RCX: 00007f0acad8eec9 [ 594.937234][T17929] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0acafe609c [ 594.937271][T17929] RBP: 00007f0acafe6090 R08: 00007f0acbcd5000 R09: 0000000000000000 [ 594.937293][T17929] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 594.937313][T17929] R13: 00007f0acafe6128 R14: 00007ffcfec7bc50 R15: 00007ffcfec7bd38 [ 594.937357][T17929] [ 596.180548][T17944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4356'. [ 596.541752][T17952] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4359'. [ 596.598852][T17952] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 597.044756][T17955] zswap: compressor not available [ 599.147270][T18007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4371'. [ 599.706898][ T30] audit: type=1800 audit(4294967402.340:21): pid=18028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4373" name="features" dev="configfs" ino=66518 res=0 errno=0 [ 599.820077][T18019] tipc: Started in network mode [ 599.860737][T18019] tipc: Node identity fe820562, cluster identity 4711 [ 599.868606][T18019] tipc: Node number set to 4269933922 [ 600.784978][T18041] random: crng reseeded on system resumption [ 601.396651][T18051] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz.1.4377: Error -117 reading block bitmap for 5 [ 602.622747][T18059] netlink: 10420 bytes leftover after parsing attributes in process `syz.0.4380'. [ 602.945558][T18064] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4381: iget: checksum invalid [ 602.966513][T18064] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 602.979311][T18064] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4381: iget: checksum invalid [ 603.009696][T18064] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 603.081455][T18064] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4381: iget: checksum invalid [ 603.160289][T18064] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 603.217391][T18064] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4381: iget: checksum invalid [ 603.276324][T18064] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 603.290880][T18064] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 603.386659][T18064] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 603.642963][T18075] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4382'. [ 606.943734][T18105] kexec: Could not allocate control_code_buffer [ 607.207798][T18132] mtrr: base(0x7961000) is not aligned on a size(0x0000) boundary [ 607.483070][T18145] sg_write: data in/out 29/47 bytes for SCSI command 0x42-- guessing data in; [ 607.483070][T18145] program syz.2.4399 not setting count and/or reply_len properly [ 609.076271][T18168] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4402'. [ 610.607636][T18172] Process accounting resumed [ 611.948441][T18223] vhci_hcd: not connected 4 [ 612.058456][T18228] FAULT_INJECTION: forcing a failure. [ 612.058456][T18228] name failslab, interval 1, probability 0, space 0, times 0 [ 612.096470][T18228] CPU: 0 UID: 0 PID: 18228 Comm: syz.3.4416 Not tainted syzkaller #0 PREEMPT(full) [ 612.096511][T18228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 612.096526][T18228] Call Trace: [ 612.096535][T18228] [ 612.096544][T18228] dump_stack_lvl+0x16c/0x1f0 [ 612.096588][T18228] should_fail_ex+0x512/0x640 [ 612.096626][T18228] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 612.096657][T18228] should_failslab+0xc2/0x120 [ 612.096701][T18228] kmem_cache_alloc_noprof+0x75/0x6e0 [ 612.096728][T18228] ? ptlock_alloc+0x1f/0x70 [ 612.096757][T18228] ? ptlock_alloc+0x1f/0x70 [ 612.096777][T18228] ptlock_alloc+0x1f/0x70 [ 612.096799][T18228] pte_alloc_one+0x84/0x350 [ 612.096832][T18228] __pte_alloc+0x6d/0x380 [ 612.096863][T18228] ? __pfx___pte_alloc+0x10/0x10 [ 612.096895][T18228] ? __pfx___might_resched+0x10/0x10 [ 612.096924][T18228] ? copy_page_range+0x1c69/0x6930 [ 612.096951][T18228] copy_page_range+0x44a1/0x6930 [ 612.097008][T18228] ? __pfx_copy_page_range+0x10/0x10 [ 612.097042][T18228] ? __pfx___might_resched+0x10/0x10 [ 612.097070][T18228] ? __pfx_mas_store+0x10/0x10 [ 612.097092][T18228] ? __vma_enter_locked+0x163/0x3f0 [ 612.097117][T18228] ? dup_mmap+0xe30/0x2280 [ 612.097152][T18228] ? down_write+0x14d/0x200 [ 612.097177][T18228] ? up_write+0x1b2/0x520 [ 612.097204][T18228] dup_mmap+0xe80/0x2280 [ 612.097251][T18228] ? __pfx_dup_mmap+0x10/0x10 [ 612.097307][T18228] copy_process+0x3f0c/0x76a0 [ 612.097342][T18228] ? __pfx___futex_wait+0x10/0x10 [ 612.097379][T18228] ? __pfx_copy_process+0x10/0x10 [ 612.097413][T18228] ? futex_private_hash_put+0x176/0x300 [ 612.097454][T18228] ? futex_private_hash_put+0x18a/0x300 [ 612.097493][T18228] kernel_clone+0xfc/0x930 [ 612.097530][T18228] ? __pfx_kernel_clone+0x10/0x10 [ 612.097581][T18228] __do_sys_clone+0xce/0x120 [ 612.097616][T18228] ? __pfx___do_sys_clone+0x10/0x10 [ 612.097690][T18228] ? xfd_validate_state+0x61/0x180 [ 612.097718][T18228] ? __pfx_do_writev+0x10/0x10 [ 612.097769][T18228] do_syscall_64+0xcd/0x4b0 [ 612.097810][T18228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.097834][T18228] RIP: 0033:0x7ff47cb8eec9 [ 612.097853][T18228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.097876][T18228] RSP: 002b:00007ff47d9fffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 612.097898][T18228] RAX: ffffffffffffffda RBX: 00007ff47cde5fa0 RCX: 00007ff47cb8eec9 [ 612.097914][T18228] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000009800000 [ 612.097928][T18228] RBP: 00007ff47cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 612.097942][T18228] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 612.097956][T18228] R13: 00007ff47cde6038 R14: 00007ff47cde5fa0 R15: 00007fff00c39a08 [ 612.097987][T18228] [ 612.382075][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.248941][T18293] Invalid ELF header magic: != ELF [ 617.038027][T18305] netlink: 'syz.0.4432': attribute type 11 has an invalid length. [ 617.057625][T18305] vhci_hcd: invalid port number 16 [ 617.064674][T18305] vhci_hcd: invalid port number 16 [ 617.230624][T18309] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4427'. [ 617.807089][T18314] FAULT_INJECTION: forcing a failure. [ 617.807089][T18314] name failslab, interval 1, probability 0, space 0, times 0 [ 617.821388][T18314] CPU: 0 UID: 0 PID: 18314 Comm: syz.1.4434 Not tainted syzkaller #0 PREEMPT(full) [ 617.821429][T18314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 617.821449][T18314] Call Trace: [ 617.821458][T18314] [ 617.821470][T18314] dump_stack_lvl+0x16c/0x1f0 [ 617.821523][T18314] should_fail_ex+0x512/0x640 [ 617.821572][T18314] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 617.821616][T18314] should_failslab+0xc2/0x120 [ 617.821663][T18314] kmem_cache_alloc_noprof+0x75/0x6e0 [ 617.821698][T18314] ? security_file_alloc+0x34/0x2b0 [ 617.821741][T18314] ? security_file_alloc+0x34/0x2b0 [ 617.821778][T18314] security_file_alloc+0x34/0x2b0 [ 617.821817][T18314] init_file+0x93/0x4c0 [ 617.821866][T18314] alloc_empty_file+0x73/0x1e0 [ 617.821916][T18314] alloc_file_pseudo+0x13a/0x230 [ 617.821962][T18314] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 617.822005][T18314] ? alloc_fd+0x471/0x7d0 [ 617.822041][T18314] sock_alloc_file+0x50/0x210 [ 617.822068][T18314] __sys_socket+0x1c0/0x260 [ 617.822103][T18314] ? __pfx___sys_socket+0x10/0x10 [ 617.822137][T18314] ? xfd_validate_state+0x61/0x180 [ 617.822172][T18314] ? __pfx___do_sys_close_range+0x10/0x10 [ 617.822213][T18314] __x64_sys_socket+0x72/0xb0 [ 617.822246][T18314] ? lockdep_hardirqs_on+0x7c/0x110 [ 617.822287][T18314] do_syscall_64+0xcd/0x4b0 [ 617.822331][T18314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.822358][T18314] RIP: 0033:0x7f2fc478eec9 [ 617.822379][T18314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.822406][T18314] RSP: 002b:00007f2fc56ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 617.822432][T18314] RAX: ffffffffffffffda RBX: 00007f2fc49e5fa0 RCX: 00007f2fc478eec9 [ 617.822450][T18314] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 617.822467][T18314] RBP: 00007f2fc4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 617.822483][T18314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.822500][T18314] R13: 00007f2fc49e6038 R14: 00007f2fc49e5fa0 R15: 00007ffea9a4f5c8 [ 617.822534][T18314] [ 618.181480][T18320] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 618.485702][T18337] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 620.827411][T18401] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 620.974128][T18407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4453'. [ 621.151443][T18407] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 621.831686][T18412] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4454: iget: checksum invalid [ 621.862472][T18412] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 621.874974][T18412] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4454: iget: checksum invalid [ 621.954266][T18412] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 621.966565][T18412] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4454: iget: checksum invalid [ 621.979027][T18412] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 621.991829][T18412] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.4454: iget: checksum invalid [ 622.064498][T18412] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 622.316073][T18412] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 622.366036][T18412] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 622.632834][ T30] audit: type=1800 audit(4294967425.280:22): pid=18436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4459" name="lu_gp_id" dev="configfs" ino=68486 res=0 errno=0 [ 623.370166][T18448] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 624.489157][T18477] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input50 [ 624.608560][T18480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4469'. [ 624.647292][T18480] netlink: 93 bytes leftover after parsing attributes in process `syz.0.4469'. [ 626.227836][T18520] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 626.966765][T18520] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4479: iget: checksum invalid [ 626.978569][T18520] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 627.027372][T18520] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4479: iget: checksum invalid [ 627.057344][T18520] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 627.076413][T18520] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4479: iget: checksum invalid [ 627.143984][T18520] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 627.155735][T18520] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4479: iget: checksum invalid [ 627.169115][T18520] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 627.297042][T18520] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 627.327308][T18520] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 628.091104][T18538] vhci_hcd: invalid port number 21 [ 628.971278][T18542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4485'. [ 629.035063][T18542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4485'. [ 631.193489][T18608] FAULT_INJECTION: forcing a failure. [ 631.193489][T18608] name failslab, interval 1, probability 0, space 0, times 0 [ 631.260915][T18608] CPU: 1 UID: 0 PID: 18608 Comm: syz.0.4498 Not tainted syzkaller #0 PREEMPT(full) [ 631.260962][T18608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 631.260984][T18608] Call Trace: [ 631.260995][T18608] [ 631.261008][T18608] dump_stack_lvl+0x16c/0x1f0 [ 631.261068][T18608] should_fail_ex+0x512/0x640 [ 631.261123][T18608] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 631.261169][T18608] should_failslab+0xc2/0x120 [ 631.261221][T18608] kmem_cache_alloc_noprof+0x75/0x6e0 [ 631.261261][T18608] ? prepare_creds+0x2c/0x7d0 [ 631.261305][T18608] ? prepare_creds+0x2c/0x7d0 [ 631.261338][T18608] prepare_creds+0x2c/0x7d0 [ 631.261376][T18608] __sys_setfsuid+0xda/0x350 [ 631.261421][T18608] ? rcu_is_watching+0x12/0xc0 [ 631.261468][T18608] do_syscall_64+0xcd/0x4b0 [ 631.261526][T18608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.261561][T18608] RIP: 0033:0x7f0acad8eec9 [ 631.261588][T18608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.261623][T18608] RSP: 002b:00007f0acbcb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 631.261655][T18608] RAX: ffffffffffffffda RBX: 00007f0acafe6090 RCX: 00007f0acad8eec9 [ 631.261679][T18608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 631.261699][T18608] RBP: 00007f0acae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 631.261721][T18608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.261749][T18608] R13: 00007f0acafe6128 R14: 00007f0acafe6090 R15: 00007ffcfec7bd38 [ 631.261795][T18608] [ 631.433440][T18608] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4498: iget: checksum invalid [ 631.444997][T18608] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 631.457832][T18608] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4498: iget: checksum invalid [ 631.469172][T18608] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 631.479940][T18608] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4498: iget: checksum invalid [ 631.492766][T18608] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 631.503603][T18608] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.4498: iget: checksum invalid [ 631.514966][T18608] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 631.524524][T18608] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 631.534376][T18608] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 632.166327][T18625] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4500'. [ 632.674156][T18629] FAULT_INJECTION: forcing a failure. [ 632.674156][T18629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.689055][T18629] CPU: 0 UID: 0 PID: 18629 Comm: syz.0.4504 Not tainted syzkaller #0 PREEMPT(full) [ 632.689097][T18629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 632.689118][T18629] Call Trace: [ 632.689128][T18629] [ 632.689141][T18629] dump_stack_lvl+0x16c/0x1f0 [ 632.689198][T18629] should_fail_ex+0x512/0x640 [ 632.689252][T18629] _copy_to_user+0x32/0xd0 [ 632.689285][T18629] simple_read_from_buffer+0xcb/0x170 [ 632.689324][T18629] proc_fail_nth_read+0x197/0x240 [ 632.689364][T18629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.689408][T18629] ? rw_verify_area+0xcf/0x6c0 [ 632.689441][T18629] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 632.689480][T18629] vfs_read+0x1e1/0xcf0 [ 632.689525][T18629] ? __pfx___mutex_lock+0x10/0x10 [ 632.689576][T18629] ? __pfx_vfs_read+0x10/0x10 [ 632.689628][T18629] ? __fget_files+0x20e/0x3c0 [ 632.689684][T18629] ksys_read+0x12a/0x250 [ 632.689723][T18629] ? __pfx_ksys_read+0x10/0x10 [ 632.689774][T18629] do_syscall_64+0xcd/0x4b0 [ 632.689828][T18629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.689861][T18629] RIP: 0033:0x7f0acad8d8dc [ 632.689886][T18629] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 632.689917][T18629] RSP: 002b:00007f0acbcd4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.689946][T18629] RAX: ffffffffffffffda RBX: 00007f0acafe5fa0 RCX: 00007f0acad8d8dc [ 632.689968][T18629] RDX: 000000000000000f RSI: 00007f0acbcd40a0 RDI: 0000000000000004 [ 632.689987][T18629] RBP: 00007f0acbcd4090 R08: 0000000000000000 R09: 0000000000000000 [ 632.690007][T18629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.690026][T18629] R13: 00007f0acafe6038 R14: 00007f0acafe5fa0 R15: 00007ffcfec7bd38 [ 632.690068][T18629] [ 633.387912][T18637] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 634.132804][T18645] sg_write: data in/out 808464396/50 bytes for SCSI command 0x0-- guessing data in; [ 634.132804][T18645] program syz.0.4507 not setting count and/or reply_len properly [ 634.716128][T18650] FAULT_INJECTION: forcing a failure. [ 634.716128][T18650] name failslab, interval 1, probability 0, space 0, times 0 [ 634.746668][T18650] CPU: 1 UID: 0 PID: 18650 Comm: syz.2.4509 Not tainted syzkaller #0 PREEMPT(full) [ 634.746717][T18650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 634.746737][T18650] Call Trace: [ 634.746748][T18650] [ 634.746761][T18650] dump_stack_lvl+0x16c/0x1f0 [ 634.746820][T18650] should_fail_ex+0x512/0x640 [ 634.746872][T18650] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 634.746916][T18650] should_failslab+0xc2/0x120 [ 634.746968][T18650] kmem_cache_alloc_noprof+0x75/0x6e0 [ 634.747007][T18650] ? __proc_create+0x2ce/0x8e0 [ 634.747046][T18650] ? __proc_create+0x2ce/0x8e0 [ 634.747072][T18650] __proc_create+0x2ce/0x8e0 [ 634.747103][T18650] ? __pfx___proc_create+0x10/0x10 [ 634.747139][T18650] ? _raw_write_unlock+0x28/0x50 [ 634.747185][T18650] ? proc_register+0x559/0x8b0 [ 634.747220][T18650] proc_create_reg+0x7d/0x180 [ 634.747257][T18650] proc_create_data+0x86/0x110 [ 634.747290][T18650] ? __pfx_proc_create_data+0x10/0x10 [ 634.747326][T18650] ? cache_register_net+0x137/0x5e0 [ 634.747366][T18650] cache_register_net+0x2d6/0x5e0 [ 634.747402][T18650] nfsd_export_init+0xb6/0x250 [ 634.747436][T18650] ? __pfx_nfsd_net_init+0x10/0x10 [ 634.747466][T18650] nfsd_net_init+0x33/0x3d0 [ 634.747501][T18650] ? __pfx_nfsd_net_init+0x10/0x10 [ 634.747533][T18650] ops_init+0x1df/0x5f0 [ 634.747567][T18650] setup_net+0x100/0x390 [ 634.747605][T18650] ? __pfx_setup_net+0x10/0x10 [ 634.747637][T18650] ? debug_mutex_init+0x37/0x70 [ 634.747690][T18650] copy_net_ns+0x2f8/0x690 [ 634.747731][T18650] create_new_namespaces+0x3ea/0xa90 [ 634.747786][T18650] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 634.747833][T18650] ksys_unshare+0x45b/0xa40 [ 634.747882][T18650] ? native_tss_update_io_bitmap+0x3e1/0x770 [ 634.747919][T18650] ? __pfx_ksys_unshare+0x10/0x10 [ 634.747972][T18650] ? xfd_validate_state+0x61/0x180 [ 634.748018][T18650] __x64_sys_unshare+0x31/0x40 [ 634.748070][T18650] do_syscall_64+0xcd/0x4b0 [ 634.748125][T18650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.748159][T18650] RIP: 0033:0x7f803078eec9 [ 634.748187][T18650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.748221][T18650] RSP: 002b:00007f80316b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 634.748254][T18650] RAX: ffffffffffffffda RBX: 00007f80309e5fa0 RCX: 00007f803078eec9 [ 634.748276][T18650] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 634.748298][T18650] RBP: 00007f8030811f91 R08: 0000000000000000 R09: 0000000000000000 [ 634.748327][T18650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.748348][T18650] R13: 00007f80309e6038 R14: 00007f80309e5fa0 R15: 00007ffd56fda428 [ 634.748393][T18650] [ 635.288001][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.294532][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.088023][T18681] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4513'. [ 636.310628][T18682] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4512'. [ 636.886390][T18686] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4517'. [ 637.029551][T18694] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3.4.0), cmd(1) [ 638.111781][T18716] vhci_hcd: invalid port number 12 [ 638.117146][T18716] vhci_hcd: invalid port number 12 [ 638.584990][T18723] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4525'. [ 638.783857][T18723] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 639.411005][T18739] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4527'. [ 639.708616][T18744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4529'. [ 640.505420][T18726] random: crng reseeded on system resumption [ 640.610490][T18754] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4533'. [ 640.636455][T18754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4533'. [ 642.121921][T18783] ICMPv6: process `syz.0.4539' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 642.171799][T18785] usbip-vudc usbip-vudc.0: gadget not bound [ 642.282076][T18785] sd 0:0:1:0: PR command failed: 1026 [ 642.287858][T18785] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 642.294737][T18785] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 642.308178][T18785] sg_write: process 1021 (syz.2.4540) changed security contexts after opening file descriptor, this is not allowed. [ 642.324095][T18778] ptp ptp0: guarantee physical clock free running [ 642.378071][T18782] delete_channel: no stack [ 642.932225][T18807] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4544'. [ 644.027627][T18847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4553'. [ 644.420672][T18808] FAULT_INJECTION: forcing a failure. [ 644.420672][T18808] name failslab, interval 1, probability 0, space 0, times 0 [ 644.500949][T18808] CPU: 0 UID: 0 PID: 18808 Comm: syz.3.4530 Not tainted syzkaller #0 PREEMPT(full) [ 644.500990][T18808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 644.501009][T18808] Call Trace: [ 644.501019][T18808] [ 644.501029][T18808] dump_stack_lvl+0x16c/0x1f0 [ 644.501079][T18808] should_fail_ex+0x512/0x640 [ 644.501122][T18808] ? __kmalloc_cache_noprof+0x5f/0x780 [ 644.501158][T18808] should_failslab+0xc2/0x120 [ 644.501200][T18808] __kmalloc_cache_noprof+0x72/0x780 [ 644.501232][T18808] ? fqdir_init+0x4f/0x1f0 [ 644.501267][T18808] ? fqdir_init+0x4f/0x1f0 [ 644.501296][T18808] fqdir_init+0x4f/0x1f0 [ 644.501328][T18808] nf_ct_net_init+0x3d/0x370 [ 644.501371][T18808] ? __pfx_nf_ct_net_init+0x10/0x10 [ 644.501413][T18808] ops_init+0x1df/0x5f0 [ 644.501442][T18808] setup_net+0x100/0x390 [ 644.501468][T18808] ? __pfx_setup_net+0x10/0x10 [ 644.501496][T18808] ? debug_mutex_init+0x37/0x70 [ 644.501534][T18808] copy_net_ns+0x2f8/0x690 [ 644.501566][T18808] create_new_namespaces+0x3ea/0xa90 [ 644.501621][T18808] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 644.501665][T18808] ksys_unshare+0x45b/0xa40 [ 644.501721][T18808] ? __pfx_ksys_unshare+0x10/0x10 [ 644.501765][T18808] ? xfd_validate_state+0x61/0x180 [ 644.501803][T18808] __x64_sys_unshare+0x31/0x40 [ 644.501847][T18808] do_syscall_64+0xcd/0x4b0 [ 644.501893][T18808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.501922][T18808] RIP: 0033:0x7ff47cb8eec9 [ 644.501949][T18808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.501984][T18808] RSP: 002b:00007ff47da00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 644.502014][T18808] RAX: ffffffffffffffda RBX: 00007ff47cde5fa0 RCX: 00007ff47cb8eec9 [ 644.502036][T18808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 644.502057][T18808] RBP: 00007ff47cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 644.502077][T18808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.502098][T18808] R13: 00007ff47cde6038 R14: 00007ff47cde5fa0 R15: 00007fff00c39a08 [ 644.502142][T18808] [ 644.564540][T18853] Invalid ELF header magic: != ELF [ 644.565735][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.731599][ C0] vkms_vblank_simulate: vblank timer overrun [ 644.737828][ C0] hrtimer: interrupt took 231936067 ns [ 644.837840][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.254600][T18861] HfR: entered promiscuous mode [ 645.309257][T18354] Process accounting paused [ 646.311258][ T9787] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 646.311344][ T9787] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 646.318401][ T9787] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 646.325419][ T9787] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 646.333726][ T9787] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 646.343149][ T9787] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 646.350343][ T9787] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 646.357377][ T9787] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 646.364338][ T9787] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 646.371407][ T9787] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 647.251151][T18353] syz.3.4442 (18353) used greatest stack depth: 19384 bytes left [ 648.010768][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4567'. [ 649.001214][T18354] syz.3.4442 (18354) used greatest stack depth: 18200 bytes left [ 649.594558][T18952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4573'. [ 649.929230][T18956] Falling back ldisc for ttyS2. [ 650.532502][T18987] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 651.618764][T19006] sd 0:0:1:0: PR command failed: 1026 [ 651.637234][ T30] audit: type=1800 audit(4294967454.290:23): pid=18999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4585" name="dbroot" dev="configfs" ino=72328 res=0 errno=0 [ 651.637323][T19006] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 651.678645][T19006] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 654.014350][T19067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4599'. [ 656.662888][T19135] ubi0: attaching mtd0 [ 656.668714][T19135] ubi0: scanning is finished [ 656.673515][T19135] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 656.688620][T19132] can: request_module (can-proto-0) failed. [ 657.105373][T19135] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 657.241981][T19151] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4614'. [ 658.356605][T19171] random: crng reseeded on system resumption [ 658.560020][T19169] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 658.734054][T19179] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 659.227801][T19179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4624'. [ 659.283083][T19179] ipvlan0: entered promiscuous mode [ 659.328870][T19179] ipvlan0: entered allmulticast mode [ 659.342834][T19179] veth0_vlan: entered allmulticast mode [ 660.313842][T19196] zswap: compressor 000 not available [ 660.895235][T19208] zswap: compressor @ not available [ 661.583436][T19223] netlink: 186 bytes leftover after parsing attributes in process `syz.2.4627'. [ 661.740917][T19225] FAULT_INJECTION: forcing a failure. [ 661.740917][T19225] name failslab, interval 1, probability 0, space 0, times 0 [ 661.753890][T19225] CPU: 1 UID: 0 PID: 19225 Comm: syz.3.4632 Not tainted syzkaller #0 PREEMPT(full) [ 661.753932][T19225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 661.753952][T19225] Call Trace: [ 661.753962][T19225] [ 661.753974][T19225] dump_stack_lvl+0x16c/0x1f0 [ 661.754030][T19225] should_fail_ex+0x512/0x640 [ 661.754080][T19225] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 661.754123][T19225] should_failslab+0xc2/0x120 [ 661.754171][T19225] kmem_cache_alloc_noprof+0x75/0x6e0 [ 661.754210][T19225] ? ptlock_alloc+0x1f/0x70 [ 661.754249][T19225] ? ptlock_alloc+0x1f/0x70 [ 661.754278][T19225] ptlock_alloc+0x1f/0x70 [ 661.754310][T19225] pte_alloc_one+0x84/0x350 [ 661.754355][T19225] __pte_alloc+0x6d/0x380 [ 661.754399][T19225] ? __pfx___pte_alloc+0x10/0x10 [ 661.754444][T19225] ? _raw_spin_unlock+0x28/0x50 [ 661.754485][T19225] ? __pmd_alloc+0x64f/0x8b0 [ 661.754546][T19225] move_page_tables+0x2372/0x4230 [ 661.754594][T19225] ? __pfx_copy_vma+0x10/0x10 [ 661.754639][T19225] ? __pfx_move_page_tables+0x10/0x10 [ 661.754700][T19225] ? finish_task_switch.isra.0+0x21c/0xc10 [ 661.754749][T19225] copy_vma_and_data+0x24e/0x790 [ 661.754791][T19225] ? __pfx_copy_vma_and_data+0x10/0x10 [ 661.754839][T19225] ? __vma_enter_locked+0x163/0x3f0 [ 661.754879][T19225] ? find_held_lock+0x2b/0x80 [ 661.754920][T19225] ? move_vma+0x52e/0x1770 [ 661.754953][T19225] ? __vm_enough_memory+0x184/0x3f0 [ 661.755008][T19225] move_vma+0x540/0x1770 [ 661.755052][T19225] ? __pfx_move_vma+0x10/0x10 [ 661.755095][T19225] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 661.755145][T19225] ? cap_mmap_addr+0x4b/0x120 [ 661.755192][T19225] ? bpf_lsm_mmap_addr+0x9/0x10 [ 661.755233][T19225] ? security_mmap_addr+0x6c/0x1e0 [ 661.755270][T19225] ? __get_unmapped_area+0x267/0x440 [ 661.755322][T19225] ? vrm_set_new_addr+0x208/0x290 [ 661.755362][T19225] mremap_to+0x1b7/0x450 [ 661.755400][T19225] do_mremap+0x13a8/0x2020 [ 661.755439][T19225] ? futex_private_hash_put+0xf0/0x300 [ 661.755497][T19225] ? __pfx_do_mremap+0x10/0x10 [ 661.755538][T19225] ? __pfx_futex_wake+0x10/0x10 [ 661.755581][T19225] ? ksys_write+0x190/0x250 [ 661.755632][T19225] __do_sys_mremap+0x119/0x170 [ 661.755668][T19225] ? __pfx___do_sys_mremap+0x10/0x10 [ 661.755719][T19225] ? __x64_sys_futex+0x1e0/0x4c0 [ 661.755794][T19225] do_syscall_64+0xcd/0x4b0 [ 661.755847][T19225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.755880][T19225] RIP: 0033:0x7ff47cb8eec9 [ 661.755903][T19225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.755933][T19225] RSP: 002b:00007ff47da00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 661.755964][T19225] RAX: ffffffffffffffda RBX: 00007ff47cde5fa0 RCX: 00007ff47cb8eec9 [ 661.755985][T19225] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 661.756005][T19225] RBP: 00007ff47cc11f91 R08: 0000000100000000 R09: 0000000000000000 [ 661.756024][T19225] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 661.756041][T19225] R13: 00007ff47cde6038 R14: 00007ff47cde5fa0 R15: 00007fff00c39a08 [ 661.756083][T19225] [ 662.570017][T19229] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4631'. [ 662.578162][T19236] FAULT_INJECTION: forcing a failure. [ 662.578162][T19236] name failslab, interval 1, probability 0, space 0, times 0 [ 662.592000][T19236] CPU: 1 UID: 0 PID: 19236 Comm: syz.3.4634 Not tainted syzkaller #0 PREEMPT(full) [ 662.592047][T19236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 662.592069][T19236] Call Trace: [ 662.592081][T19236] [ 662.592094][T19236] dump_stack_lvl+0x16c/0x1f0 [ 662.592156][T19236] should_fail_ex+0x512/0x640 [ 662.592220][T19236] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 662.592275][T19236] should_failslab+0xc2/0x120 [ 662.592326][T19236] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 662.592376][T19236] ? kstrdup_const+0x63/0x80 [ 662.592426][T19236] ? kstrdup+0x53/0x100 [ 662.592462][T19236] kstrdup+0x53/0x100 [ 662.592504][T19236] kstrdup_const+0x63/0x80 [ 662.592545][T19236] kvasprintf_const+0x10f/0x1a0 [ 662.592582][T19236] kobject_set_name_vargs+0x5a/0x140 [ 662.592621][T19236] dev_set_name+0xc7/0x100 [ 662.592669][T19236] ? __pfx_dev_set_name+0x10/0x10 [ 662.592722][T19236] ? lockdep_init_map_type+0x5c/0x280 [ 662.592757][T19236] ? __init_waitqueue_head+0xca/0x150 [ 662.592805][T19236] netdev_register_kobject+0xc5/0x3d0 [ 662.592851][T19236] register_netdevice+0x13dc/0x2270 [ 662.592894][T19236] ? __pfx_register_netdevice+0x10/0x10 [ 662.592943][T19236] internal_dev_create+0x2d3/0x520 [ 662.592981][T19236] ovs_vport_add+0x144/0x4d0 [ 662.593037][T19236] new_vport+0x16/0x1d0 [ 662.593080][T19236] ovs_dp_cmd_new+0x6ba/0xe60 [ 662.593139][T19236] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 662.593206][T19236] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 662.593250][T19236] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 662.593303][T19236] genl_family_rcv_msg_doit+0x206/0x2f0 [ 662.593347][T19236] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 662.593402][T19236] ? bpf_lsm_capable+0x9/0x10 [ 662.593452][T19236] ? security_capable+0x7e/0x260 [ 662.593505][T19236] ? ns_capable+0xd7/0x110 [ 662.593551][T19236] genl_rcv_msg+0x55c/0x800 [ 662.593592][T19236] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.593632][T19236] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 662.593696][T19236] netlink_rcv_skb+0x158/0x420 [ 662.593729][T19236] ? __pfx_genl_rcv_msg+0x10/0x10 [ 662.593772][T19236] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 662.593825][T19236] ? netlink_deliver_tap+0x1ae/0xd30 [ 662.593886][T19236] genl_rcv+0x28/0x40 [ 662.593919][T19236] netlink_unicast+0x5a7/0x870 [ 662.593958][T19236] ? __pfx_netlink_unicast+0x10/0x10 [ 662.593993][T19236] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 662.594047][T19236] ? __lock_acquire+0xb97/0x1ce0 [ 662.594115][T19236] netlink_sendmsg+0x8c8/0xdd0 [ 662.594155][T19236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 662.594205][T19236] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 662.594266][T19236] ____sys_sendmsg+0xa98/0xc70 [ 662.594308][T19236] ? copy_msghdr_from_user+0x10a/0x160 [ 662.594360][T19236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 662.594421][T19236] ___sys_sendmsg+0x134/0x1d0 [ 662.594476][T19236] ? __pfx____sys_sendmsg+0x10/0x10 [ 662.594584][T19236] __sys_sendmsg+0x16d/0x220 [ 662.594640][T19236] ? __pfx___sys_sendmsg+0x10/0x10 [ 662.594692][T19236] ? __x64_sys_futex+0x1e0/0x4c0 [ 662.594771][T19236] do_syscall_64+0xcd/0x4b0 [ 662.594828][T19236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.594864][T19236] RIP: 0033:0x7ff47cb8eec9 [ 662.594892][T19236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.594925][T19236] RSP: 002b:00007ff47d9df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 662.594958][T19236] RAX: ffffffffffffffda RBX: 00007ff47cde6090 RCX: 00007ff47cb8eec9 [ 662.594982][T19236] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000006 [ 662.595003][T19236] RBP: 00007ff47cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 662.595023][T19236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.595044][T19236] R13: 00007ff47cde6128 R14: 00007ff47cde6090 R15: 00007fff00c39a08 [ 662.595089][T19236] [ 663.047342][T19229] veth0_macvtap: left promiscuous mode [ 663.704817][ T9787] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 663.980825][T19254] ptrace attach of "./syz-executor exec"[13048] was attempted by "./syz-executor exec"[19254] [ 665.071351][T19281] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 665.071351][T19281] program syz.2.4646 not setting count and/or reply_len properly [ 665.746108][T12215] Bluetooth: hci1: command 0x0c1a tx timeout [ 668.525604][T19350] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 669.391990][T19362] ICMPv6: process `syz.0.4659' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 669.785838][T19364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4660'. [ 669.848064][T19368] hub 8-0:1.0: USB hub found [ 669.893041][T19368] hub 8-0:1.0: 1 port detected [ 670.108902][T19374] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 670.230282][T19374] FAULT_INJECTION: forcing a failure. [ 670.230282][T19374] name fail_futex, interval 1, probability 0, space 0, times 0 [ 670.293596][T19374] CPU: 0 UID: 0 PID: 19374 Comm: syz.2.4661 Not tainted syzkaller #0 PREEMPT(full) [ 670.293645][T19374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 670.293664][T19374] Call Trace: [ 670.293676][T19374] [ 670.293690][T19374] dump_stack_lvl+0x16c/0x1f0 [ 670.293750][T19374] should_fail_ex+0x512/0x640 [ 670.293812][T19374] get_futex_key+0x1d0/0x1560 [ 670.293877][T19374] ? __pfx_get_futex_key+0x10/0x10 [ 670.293942][T19374] futex_wake+0xea/0x530 [ 670.293983][T19374] ? __pfx_futex_wake+0x10/0x10 [ 670.294039][T19374] do_futex+0x1e3/0x350 [ 670.294093][T19374] ? __pfx_do_futex+0x10/0x10 [ 670.294159][T19374] __x64_sys_futex+0x1e0/0x4c0 [ 670.294215][T19374] ? fd_install+0x225/0x750 [ 670.294255][T19374] ? __pfx___x64_sys_futex+0x10/0x10 [ 670.294326][T19374] do_syscall_64+0xcd/0x4b0 [ 670.294384][T19374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.294420][T19374] RIP: 0033:0x7f803078eec9 [ 670.294448][T19374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.294481][T19374] RSP: 002b:00007f80316930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 670.294514][T19374] RAX: ffffffffffffffda RBX: 00007f80309e6098 RCX: 00007f803078eec9 [ 670.294537][T19374] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f80309e609c [ 670.294558][T19374] RBP: 00007f80309e6090 R08: 00007f80316b5000 R09: 0000000000000000 [ 670.294588][T19374] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 670.294609][T19374] R13: 00007f80309e6128 R14: 00007ffd56fda340 R15: 00007ffd56fda428 [ 670.294653][T19374] [ 670.865798][T19384] FAULT_INJECTION: forcing a failure. [ 670.865798][T19384] name fail_futex, interval 1, probability 0, space 0, times 0 [ 670.882802][T19384] CPU: 1 UID: 0 PID: 19384 Comm: syz.0.4664 Not tainted syzkaller #0 PREEMPT(full) [ 670.882849][T19384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 670.882870][T19384] Call Trace: [ 670.882881][T19384] [ 670.882894][T19384] dump_stack_lvl+0x16c/0x1f0 [ 670.882953][T19384] should_fail_ex+0x512/0x640 [ 670.883012][T19384] get_futex_key+0x1d0/0x1560 [ 670.883066][T19384] ? __pfx_get_futex_key+0x10/0x10 [ 670.883128][T19384] futex_wake+0xea/0x530 [ 670.883159][T19384] ? reacquire_held_locks+0xcd/0x1f0 [ 670.883216][T19384] ? __pfx_futex_wake+0x10/0x10 [ 670.883259][T19384] ? sctp_bind+0xb3/0x110 [ 670.883295][T19384] ? rcu_is_watching+0x12/0xc0 [ 670.883338][T19384] ? __local_bh_enable_ip+0xa4/0x120 [ 670.883393][T19384] do_futex+0x1e3/0x350 [ 670.883447][T19384] ? __pfx_do_futex+0x10/0x10 [ 670.883497][T19384] ? __sys_bind+0x1c5/0x260 [ 670.883549][T19384] __x64_sys_futex+0x1e0/0x4c0 [ 670.883608][T19384] ? __pfx___x64_sys_futex+0x10/0x10 [ 670.883672][T19384] ? xfd_validate_state+0x61/0x180 [ 670.883700][T19384] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 670.883770][T19384] do_syscall_64+0xcd/0x4b0 [ 670.883826][T19384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.883859][T19384] RIP: 0033:0x7f0acad8eec9 [ 670.883882][T19384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.883911][T19384] RSP: 002b:00007f0acbcd40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 670.883938][T19384] RAX: ffffffffffffffda RBX: 00007f0acafe5fa8 RCX: 00007f0acad8eec9 [ 670.883957][T19384] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0acafe5fac [ 670.883974][T19384] RBP: 00007f0acafe5fa0 R08: 00007f0acbcd5000 R09: 0000000000000000 [ 670.883991][T19384] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 670.884007][T19384] R13: 00007f0acafe6038 R14: 00007ffcfec7bc50 R15: 00007ffcfec7bd38 [ 670.884043][T19384] [ 673.137685][T19436] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4675'. [ 674.088229][T19449] mkiss: ax0: crc mode is auto. [ 674.286637][T19455] netlink: set zone limit has 8 unknown bytes [ 674.759977][T19469] FAULT_INJECTION: forcing a failure. [ 674.759977][T19469] name failslab, interval 1, probability 0, space 0, times 0 [ 674.772978][T19469] CPU: 1 UID: 0 PID: 19469 Comm: syz.1.4684 Not tainted syzkaller #0 PREEMPT(full) [ 674.773024][T19469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 674.773046][T19469] Call Trace: [ 674.773058][T19469] [ 674.773070][T19469] dump_stack_lvl+0x16c/0x1f0 [ 674.773132][T19469] should_fail_ex+0x512/0x640 [ 674.773186][T19469] ? __kmalloc_cache_noprof+0x5f/0x780 [ 674.773229][T19469] should_failslab+0xc2/0x120 [ 674.773282][T19469] __kmalloc_cache_noprof+0x72/0x780 [ 674.773322][T19469] ? getname_flags.part.0+0x292/0x550 [ 674.773395][T19469] ? getname_flags.part.0+0x292/0x550 [ 674.773450][T19469] getname_flags.part.0+0x292/0x550 [ 674.773512][T19469] getname_flags+0x93/0xf0 [ 674.773553][T19469] __x64_sys_symlink+0x65/0x90 [ 674.773601][T19469] do_syscall_64+0xcd/0x4b0 [ 674.773658][T19469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.773693][T19469] RIP: 0033:0x7f2fc478eec9 [ 674.773720][T19469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.773754][T19469] RSP: 002b:00007f2fc56ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 674.773788][T19469] RAX: ffffffffffffffda RBX: 00007f2fc49e5fa0 RCX: 00007f2fc478eec9 [ 674.773812][T19469] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 674.773834][T19469] RBP: 00007f2fc4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 674.773855][T19469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.773876][T19469] R13: 00007f2fc49e6038 R14: 00007f2fc49e5fa0 R15: 00007ffea9a4f5c8 [ 674.773927][T19469] [ 675.178744][T12215] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 675.214593][T19469] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 675.726036][T19486] futex_wake_op: syz.2.4689 tries to shift op by -2048; fix this program [ 675.757286][T19486] futex_wake_op: syz.2.4689 tries to shift op by -2048; fix this program [ 676.001685][T19462] Process accounting resumed [ 676.687140][T19510] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4694'. [ 676.740193][T19508] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4693'. [ 677.611124][T19521] random: crng reseeded on system resumption [ 679.385070][T19547] FAULT_INJECTION: forcing a failure. [ 679.385070][T19547] name failslab, interval 1, probability 0, space 0, times 0 [ 679.426806][T19547] CPU: 0 UID: 0 PID: 19547 Comm: syz.0.4703 Not tainted syzkaller #0 PREEMPT(full) [ 679.426850][T19547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 679.426869][T19547] Call Trace: [ 679.426880][T19547] [ 679.426893][T19547] dump_stack_lvl+0x16c/0x1f0 [ 679.426949][T19547] should_fail_ex+0x512/0x640 [ 679.427007][T19547] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 679.427056][T19547] should_failslab+0xc2/0x120 [ 679.427105][T19547] __kvmalloc_node_noprof+0x141/0x9c0 [ 679.427152][T19547] ? seq_read_iter+0x830/0x12d0 [ 679.427195][T19547] ? seq_read_iter+0x830/0x12d0 [ 679.427225][T19547] seq_read_iter+0x830/0x12d0 [ 679.427278][T19547] seq_read+0x3a3/0x570 [ 679.427311][T19547] ? __pfx_seq_read+0x10/0x10 [ 679.427370][T19547] ? __pfx_seq_read+0x10/0x10 [ 679.427403][T19547] proc_reg_read+0x240/0x330 [ 679.427452][T19547] ? __pfx_proc_reg_read+0x10/0x10 [ 679.427504][T19547] vfs_read+0x1e1/0xcf0 [ 679.427549][T19547] ? __pfx___mutex_lock+0x10/0x10 [ 679.427601][T19547] ? __pfx_vfs_read+0x10/0x10 [ 679.427654][T19547] ? __fget_files+0x20e/0x3c0 [ 679.427704][T19547] ksys_read+0x12a/0x250 [ 679.427744][T19547] ? __pfx_ksys_read+0x10/0x10 [ 679.427798][T19547] do_syscall_64+0xcd/0x4b0 [ 679.427853][T19547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.427887][T19547] RIP: 0033:0x7f0acad8eec9 [ 679.427913][T19547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.427944][T19547] RSP: 002b:00007f0acbcb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 679.427974][T19547] RAX: ffffffffffffffda RBX: 00007f0acafe6090 RCX: 00007f0acad8eec9 [ 679.428003][T19547] RDX: 00000000fffffe36 RSI: 0000000000000000 RDI: 0000000000000004 [ 679.428023][T19547] RBP: 00007f0acbcb3090 R08: 0000000000000000 R09: 0000000000000000 [ 679.428043][T19547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 679.428063][T19547] R13: 00007f0acafe6128 R14: 00007f0acafe6090 R15: 00007ffcfec7bd38 [ 679.428107][T19547] [ 679.429427][T19531] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.4698: iget: checksum invalid [ 679.665376][T19531] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 679.682205][T19531] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.4698: iget: checksum invalid [ 679.694299][T19531] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 679.705093][T19531] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.4698: iget: checksum invalid [ 679.716867][T19531] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 679.734895][T19531] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.4698: iget: checksum invalid [ 679.748832][T19531] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 679.765160][T19531] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 679.778467][T19531] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 680.704809][T19564] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input52 [ 682.538402][T19596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4712'. [ 683.301404][T19609] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 683.356114][T19610] openvswitch: netlink: IP tunnel dst address not specified [ 683.806168][T19623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4719'. [ 684.519100][T19649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4723'. [ 684.686390][T19650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4724'. [ 686.554406][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4732'. [ 687.654121][T19700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4735'. [ 689.524188][T19738] zswap: compressor not available [ 689.886713][T19754] netlink: 'syz.1.4745': attribute type 1 has an invalid length. [ 690.516333][T19765] : Can't lookup blockdev [ 690.698249][ T30] audit: type=1800 audit(4294967493.350:24): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4747" name="features" dev="configfs" ino=75482 res=0 errno=0 [ 691.945044][T19793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4754'. [ 692.081017][T19795] __vm_enough_memory: pid: 19795, comm: syz.0.4754, bytes: 4398046511104 not enough memory for the allocation [ 692.479205][T19793] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4754'. [ 692.652779][T19812] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4759'. [ 692.916216][T19823] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4761'. [ 693.657610][T19841] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4764'. [ 694.339809][T19853] FAULT_INJECTION: forcing a failure. [ 694.339809][T19853] name fail_futex, interval 1, probability 0, space 0, times 0 [ 694.373708][T19853] CPU: 0 UID: 0 PID: 19853 Comm: syz.1.4769 Not tainted syzkaller #0 PREEMPT(full) [ 694.373758][T19853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 694.373780][T19853] Call Trace: [ 694.373795][T19853] [ 694.373809][T19853] dump_stack_lvl+0x16c/0x1f0 [ 694.373870][T19853] should_fail_ex+0x512/0x640 [ 694.373930][T19853] get_futex_key+0x1d0/0x1560 [ 694.373985][T19853] ? __pfx_get_futex_key+0x10/0x10 [ 694.374037][T19853] ? __lock_acquire+0x62e/0x1ce0 [ 694.374099][T19853] futex_wake+0xea/0x530 [ 694.374130][T19853] ? futex_wait+0x120/0x380 [ 694.374170][T19853] ? __pfx_futex_wake+0x10/0x10 [ 694.374211][T19853] ? __fget_files+0x204/0x3c0 [ 694.374259][T19853] do_futex+0x1e3/0x350 [ 694.374311][T19853] ? __pfx_do_futex+0x10/0x10 [ 694.374363][T19853] ? fdget+0x187/0x210 [ 694.374400][T19853] ? __sys_sendmsg+0x18c/0x220 [ 694.374458][T19853] __x64_sys_futex+0x1e0/0x4c0 [ 694.374526][T19853] ? __pfx___x64_sys_futex+0x10/0x10 [ 694.374597][T19853] do_syscall_64+0xcd/0x4b0 [ 694.374655][T19853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.374689][T19853] RIP: 0033:0x7f2fc478eec9 [ 694.374715][T19853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.374750][T19853] RSP: 002b:00007f2fc56ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 694.374782][T19853] RAX: ffffffffffffffda RBX: 00007f2fc49e5fa8 RCX: 00007f2fc478eec9 [ 694.374806][T19853] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2fc49e5fac [ 694.374827][T19853] RBP: 00007f2fc49e5fa0 R08: 00007f2fc56ef000 R09: 0000000000000000 [ 694.374848][T19853] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 694.374870][T19853] R13: 00007f2fc49e6038 R14: 00007ffea9a4f4e0 R15: 00007ffea9a4f5c8 [ 694.374913][T19853] [ 694.558801][ C0] vkms_vblank_simulate: vblank timer overrun [ 694.697966][T19858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4771'. [ 694.709179][T19858] bridge_slave_1: left allmulticast mode [ 694.714902][T19858] bridge_slave_1: left promiscuous mode [ 694.721507][T19858] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.848371][T19858] bridge_slave_0: left allmulticast mode [ 694.854227][T19858] bridge_slave_0: left promiscuous mode [ 694.947281][T19858] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.068498][T19863] input: jJǸ-9%v as /devices/virtual/input/input53 [ 696.086536][T19892] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4777'. [ 696.191441][T19894] sp0: Synchronizing with TNC [ 696.716359][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.722988][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.000358][T19913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4782'. [ 697.096273][T19917] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 697.153002][T19917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4784'. [ 698.378282][T19950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4793'. [ 698.798791][T19955] netlink: 186 bytes leftover after parsing attributes in process `syz.3.4794'. [ 699.074600][T19963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4796'. [ 700.945509][T19999] FAULT_INJECTION: forcing a failure. [ 700.945509][T19999] name failslab, interval 1, probability 0, space 0, times 0 [ 700.986523][T19999] CPU: 1 UID: 0 PID: 19999 Comm: syz.0.4802 Not tainted syzkaller #0 PREEMPT(full) [ 700.986572][T19999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 700.986594][T19999] Call Trace: [ 700.986608][T19999] [ 700.986622][T19999] dump_stack_lvl+0x16c/0x1f0 [ 700.986683][T19999] should_fail_ex+0x512/0x640 [ 700.986737][T19999] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 700.986783][T19999] should_failslab+0xc2/0x120 [ 700.986835][T19999] kmem_cache_alloc_noprof+0x75/0x6e0 [ 700.986875][T19999] ? __might_fault+0xe3/0x190 [ 700.986913][T19999] ? getname_flags.part.0+0x4c/0x550 [ 700.986978][T19999] ? getname_flags.part.0+0x4c/0x550 [ 700.987026][T19999] getname_flags.part.0+0x4c/0x550 [ 700.987088][T19999] getname_flags+0x93/0xf0 [ 700.987128][T19999] user_path_at+0x24/0x60 [ 700.987170][T19999] __x64_sys_mount+0x1fb/0x310 [ 700.987216][T19999] ? __pfx___x64_sys_mount+0x10/0x10 [ 700.987286][T19999] do_syscall_64+0xcd/0x4b0 [ 700.987350][T19999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.987386][T19999] RIP: 0033:0x7f0acad8eec9 [ 700.987413][T19999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.987448][T19999] RSP: 002b:00007f0acbcd4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 700.987480][T19999] RAX: ffffffffffffffda RBX: 00007f0acafe5fa0 RCX: 00007f0acad8eec9 [ 700.987504][T19999] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 700.987526][T19999] RBP: 00007f0acae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 700.987547][T19999] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 700.987568][T19999] R13: 00007f0acafe6038 R14: 00007f0acafe5fa0 R15: 00007ffcfec7bd38 [ 700.987612][T19999] [ 702.313408][T20034] : Can't lookup blockdev [ 702.473156][ T30] audit: type=1800 audit(32769.970:25): pid=20038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4812" name="features" dev="configfs" ino=76843 res=0 errno=0 [ 703.847752][T20052] FAULT_INJECTION: forcing a failure. [ 703.847752][T20052] name failslab, interval 1, probability 0, space 0, times 0 [ 703.869826][T20052] CPU: 0 UID: 0 PID: 20052 Comm: syz.3.4815 Not tainted syzkaller #0 PREEMPT(full) [ 703.869858][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 703.869873][T20052] Call Trace: [ 703.869881][T20052] [ 703.869890][T20052] dump_stack_lvl+0x16c/0x1f0 [ 703.869932][T20052] should_fail_ex+0x512/0x640 [ 703.869970][T20052] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 703.870002][T20052] should_failslab+0xc2/0x120 [ 703.870038][T20052] kmem_cache_alloc_noprof+0x75/0x6e0 [ 703.870067][T20052] ? posix_lock_inode+0x342/0x2280 [ 703.870097][T20052] ? posix_lock_inode+0x342/0x2280 [ 703.870121][T20052] posix_lock_inode+0x342/0x2280 [ 703.870157][T20052] ? __pfx_posix_lock_inode+0x10/0x10 [ 703.870190][T20052] vfs_lock_file+0xfb/0x150 [ 703.870215][T20052] fcntl_setlk+0x3ff/0xe20 [ 703.870244][T20052] ? __pfx_fcntl_setlk+0x10/0x10 [ 703.870274][T20052] ? __might_fault+0xe3/0x190 [ 703.870300][T20052] ? __might_fault+0xe3/0x190 [ 703.870325][T20052] ? __might_fault+0x13b/0x190 [ 703.870363][T20052] do_fcntl+0xbce/0x15a0 [ 703.870399][T20052] ? __pfx_do_fcntl+0x10/0x10 [ 703.870442][T20052] ? tomoyo_file_fcntl+0x6c/0xc0 [ 703.870482][T20052] __x64_sys_fcntl+0x163/0x200 [ 703.870521][T20052] do_syscall_64+0xcd/0x4b0 [ 703.870560][T20052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.870584][T20052] RIP: 0033:0x7ff47cb8eec9 [ 703.870602][T20052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 703.870625][T20052] RSP: 002b:00007ff47d9be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 703.870647][T20052] RAX: ffffffffffffffda RBX: 00007ff47cde6180 RCX: 00007ff47cb8eec9 [ 703.870663][T20052] RDX: 00000000000000ff RSI: 0000000000000025 RDI: 0000000000000004 [ 703.870677][T20052] RBP: 00007ff47cc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 703.870692][T20052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 703.870705][T20052] R13: 00007ff47cde6218 R14: 00007ff47cde6180 R15: 00007fff00c39a08 [ 703.870746][T20052] [ 705.485805][T20076] FAULT_INJECTION: forcing a failure. [ 705.485805][T20076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.546065][T20076] CPU: 1 UID: 0 PID: 20076 Comm: syz.0.4821 Not tainted syzkaller #0 PREEMPT(full) [ 705.546113][T20076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 705.546132][T20076] Call Trace: [ 705.546143][T20076] [ 705.546155][T20076] dump_stack_lvl+0x16c/0x1f0 [ 705.546211][T20076] should_fail_ex+0x512/0x640 [ 705.546265][T20076] _copy_from_user+0x2e/0xd0 [ 705.546315][T20076] do_sock_getsockopt+0x3ca/0x440 [ 705.546352][T20076] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 705.546386][T20076] ? __fget_files+0x204/0x3c0 [ 705.546443][T20076] __sys_getsockopt+0x123/0x1b0 [ 705.546510][T20076] __x64_sys_getsockopt+0xbd/0x160 [ 705.546558][T20076] ? do_syscall_64+0x91/0x4b0 [ 705.546607][T20076] ? lockdep_hardirqs_on+0x7c/0x110 [ 705.546660][T20076] do_syscall_64+0xcd/0x4b0 [ 705.546711][T20076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.546743][T20076] RIP: 0033:0x7f0acad8eec9 [ 705.546768][T20076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 705.546799][T20076] RSP: 002b:00007f0acbcd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 705.546829][T20076] RAX: ffffffffffffffda RBX: 00007f0acafe5fa0 RCX: 00007f0acad8eec9 [ 705.546850][T20076] RDX: 0000000000000010 RSI: 0000000000000006 RDI: 0000000000000003 [ 705.546870][T20076] RBP: 00007f0acbcd4090 R08: 0000200000000040 R09: 0000000000000000 [ 705.546891][T20076] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.546910][T20076] R13: 00007f0acafe6038 R14: 00007f0acafe5fa0 R15: 00007ffcfec7bd38 [ 705.546953][T20076] [ 705.748758][T20079] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 706.026135][T20092] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4824'. [ 706.383872][T20093] Process accounting paused [ 706.788619][ T5172] Trying to write to read-only block-device sda1 [ 706.818580][T20103] FAULT_INJECTION: forcing a failure. [ 706.818580][T20103] name failslab, interval 1, probability 0, space 0, times 0 [ 706.832661][T20103] CPU: 1 UID: 0 PID: 20103 Comm: syz.1.4828 Not tainted syzkaller #0 PREEMPT(full) [ 706.832706][T20103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 706.832720][T20103] Call Trace: [ 706.832728][T20103] [ 706.832738][T20103] dump_stack_lvl+0x16c/0x1f0 [ 706.832786][T20103] should_fail_ex+0x512/0x640 [ 706.832824][T20103] ? __kmalloc_cache_noprof+0x5f/0x780 [ 706.832854][T20103] should_failslab+0xc2/0x120 [ 706.832890][T20103] __kmalloc_cache_noprof+0x72/0x780 [ 706.832915][T20103] ? acpi_ut_allocate_owner_id+0x2d6/0x3a0 [ 706.832943][T20103] ? acpi_ds_create_walk_state+0x78/0x250 [ 706.832985][T20103] ? acpi_ds_create_walk_state+0x78/0x250 [ 706.833020][T20103] ? acpi_ut_create_thread_state+0x63/0x170 [ 706.833049][T20103] acpi_ds_create_walk_state+0x78/0x250 [ 706.833089][T20103] acpi_ds_call_control_method+0x168/0x5e0 [ 706.833124][T20103] acpi_ps_parse_aml+0x845/0xcb0 [ 706.833164][T20103] acpi_ps_execute_method+0x55a/0xb30 [ 706.833204][T20103] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 706.833231][T20103] acpi_ns_evaluate+0x76c/0xca0 [ 706.833272][T20103] ? kasan_save_track+0x14/0x30 [ 706.833306][T20103] acpi_evaluate_object+0x1fa/0xa90 [ 706.833343][T20103] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 706.833374][T20103] ? __mutex_trylock_common+0xe9/0x250 [ 706.833420][T20103] acpi_evaluate_integer+0xdd/0x200 [ 706.833448][T20103] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 706.833489][T20103] ? __pfx_status_show+0x10/0x10 [ 706.833521][T20103] status_show+0xa0/0x120 [ 706.833553][T20103] ? __pfx_status_show+0x10/0x10 [ 706.833594][T20103] dev_attr_show+0x56/0xe0 [ 706.833625][T20103] ? __pfx_dev_attr_show+0x10/0x10 [ 706.833652][T20103] sysfs_kf_seq_show+0x216/0x3e0 [ 706.833695][T20103] seq_read_iter+0x50b/0x12d0 [ 706.833733][T20103] kernfs_fop_read_iter+0x46c/0x610 [ 706.833760][T20103] ? rw_verify_area+0xcf/0x6c0 [ 706.833796][T20103] vfs_read+0x8bf/0xcf0 [ 706.833829][T20103] ? __pfx___mutex_lock+0x10/0x10 [ 706.833868][T20103] ? __pfx_vfs_read+0x10/0x10 [ 706.833917][T20103] ksys_read+0x12a/0x250 [ 706.833945][T20103] ? __pfx_ksys_read+0x10/0x10 [ 706.833984][T20103] do_syscall_64+0xcd/0x4b0 [ 706.834024][T20103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.834049][T20103] RIP: 0033:0x7f2fc478eec9 [ 706.834069][T20103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.834092][T20103] RSP: 002b:00007f2fc56ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 706.834115][T20103] RAX: ffffffffffffffda RBX: 00007f2fc49e5fa0 RCX: 00007f2fc478eec9 [ 706.834130][T20103] RDX: 000000000000007a RSI: 0000200000000140 RDI: 000000000000000a [ 706.834145][T20103] RBP: 00007f2fc4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 706.834159][T20103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.834173][T20103] R13: 00007f2fc49e6038 R14: 00007f2fc49e5fa0 R15: 00007ffea9a4f5c8 [ 706.834204][T20103] [ 706.834387][T20103] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 707.787511][T20125] FAULT_INJECTION: forcing a failure. [ 707.787511][T20125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.807177][T20125] CPU: 1 UID: 0 PID: 20125 Comm: syz.0.4832 Not tainted syzkaller #0 PREEMPT(full) [ 707.807217][T20125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 707.807253][T20125] Call Trace: [ 707.807262][T20125] [ 707.807272][T20125] dump_stack_lvl+0x16c/0x1f0 [ 707.807319][T20125] should_fail_ex+0x512/0x640 [ 707.807373][T20125] _copy_from_user+0x2e/0xd0 [ 707.807419][T20125] copy_from_sockptr_offset+0x15c/0x1b0 [ 707.807453][T20125] ? __pfx_copy_from_sockptr_offset+0x10/0x10 [ 707.807495][T20125] do_tcp_getsockopt+0x161/0x2620 [ 707.807541][T20125] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 707.807581][T20125] ? __lock_acquire+0xb97/0x1ce0 [ 707.807632][T20125] ? __lock_acquire+0x62e/0x1ce0 [ 707.807678][T20125] ? __lock_acquire+0xb97/0x1ce0 [ 707.807717][T20125] ? _parse_integer_limit+0x17f/0x1d0 [ 707.807755][T20125] ? aa_label_sk_perm+0x195/0x600 [ 707.807782][T20125] ? _kstrtoull+0x145/0x200 [ 707.807813][T20125] ? __pfx__kstrtoull+0x10/0x10 [ 707.807848][T20125] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 707.807878][T20125] ? find_held_lock+0x2b/0x80 [ 707.807914][T20125] ? __lock_acquire+0x62e/0x1ce0 [ 707.807973][T20125] ? __lock_acquire+0xb97/0x1ce0 [ 707.808031][T20125] ? find_held_lock+0x2b/0x80 [ 707.808061][T20125] ? __might_fault+0xe3/0x190 [ 707.808091][T20125] ? __might_fault+0xe3/0x190 [ 707.808119][T20125] ? __might_fault+0x13b/0x190 [ 707.808158][T20125] tcp_getsockopt+0xdf/0x100 [ 707.808201][T20125] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 707.808232][T20125] do_sock_getsockopt+0x34d/0x440 [ 707.808265][T20125] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 707.808293][T20125] ? __fget_files+0x204/0x3c0 [ 707.808339][T20125] __sys_getsockopt+0x123/0x1b0 [ 707.808392][T20125] __x64_sys_getsockopt+0xbd/0x160 [ 707.808433][T20125] ? do_syscall_64+0x91/0x4b0 [ 707.808474][T20125] ? lockdep_hardirqs_on+0x7c/0x110 [ 707.808514][T20125] do_syscall_64+0xcd/0x4b0 [ 707.808558][T20125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.808585][T20125] RIP: 0033:0x7f0acad8eec9 [ 707.808606][T20125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.808633][T20125] RSP: 002b:00007f0acbcd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 707.808659][T20125] RAX: ffffffffffffffda RBX: 00007f0acafe5fa0 RCX: 00007f0acad8eec9 [ 707.808677][T20125] RDX: 0000000000000010 RSI: 0000000000000006 RDI: 0000000000000003 [ 707.808693][T20125] RBP: 00007f0acbcd4090 R08: 0000200000000040 R09: 0000000000000000 [ 707.808710][T20125] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.808727][T20125] R13: 00007f0acafe6038 R14: 00007f0acafe5fa0 R15: 00007ffcfec7bd38 [ 707.808761][T20125] [ 708.082583][ C1] vkms_vblank_simulate: vblank timer overrun [ 708.230394][T20128] kAFS: Invalid Command on /proc/fs/afs/cells file [ 708.534488][T20139] : Can't lookup blockdev [ 708.574190][T20143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4837'. [ 708.783475][ T30] audit: type=1800 audit(32776.280:26): pid=20147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4836" name="features" dev="configfs" ino=78168 res=0 errno=0 [ 709.783498][T20167] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 710.072515][T20171] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4843'. [ 710.596507][T20182] FAULT_INJECTION: forcing a failure. [ 710.596507][T20182] name failslab, interval 1, probability 0, space 0, times 0 [ 710.698686][T20182] CPU: 0 UID: 0 PID: 20182 Comm: syz.1.4847 Not tainted syzkaller #0 PREEMPT(full) [ 710.698719][T20182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 710.698734][T20182] Call Trace: [ 710.698742][T20182] [ 710.698750][T20182] dump_stack_lvl+0x16c/0x1f0 [ 710.698793][T20182] should_fail_ex+0x512/0x640 [ 710.698831][T20182] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 710.698862][T20182] should_failslab+0xc2/0x120 [ 710.698898][T20182] kmem_cache_alloc_noprof+0x75/0x6e0 [ 710.698926][T20182] ? ptlock_alloc+0x1f/0x70 [ 710.698954][T20182] ? ptlock_alloc+0x1f/0x70 [ 710.698975][T20182] ptlock_alloc+0x1f/0x70 [ 710.698997][T20182] pte_alloc_one+0x84/0x350 [ 710.699030][T20182] __pte_alloc+0x6d/0x380 [ 710.699062][T20182] ? __pfx___pte_alloc+0x10/0x10 [ 710.699097][T20182] ? do_raw_spin_lock+0x12c/0x2b0 [ 710.699127][T20182] do_pte_missing+0x282c/0x3ba0 [ 710.699152][T20182] ? do_raw_spin_unlock+0x172/0x230 [ 710.699179][T20182] ? _raw_spin_unlock+0x28/0x50 [ 710.699209][T20182] ? __pmd_alloc+0x64f/0x8b0 [ 710.699256][T20182] __handle_mm_fault+0x1556/0x2aa0 [ 710.699284][T20182] ? mt_find+0x3e2/0xa20 [ 710.699308][T20182] ? __pfx___handle_mm_fault+0x10/0x10 [ 710.699330][T20182] ? __pfx_mt_find+0x10/0x10 [ 710.699368][T20182] ? find_vma+0xbf/0x140 [ 710.699399][T20182] ? __pfx_find_vma+0x10/0x10 [ 710.699434][T20182] handle_mm_fault+0x589/0xd10 [ 710.699459][T20182] ? __pkru_allows_pkey+0x31/0xb0 [ 710.699488][T20182] do_user_addr_fault+0x7a6/0x1370 [ 710.699517][T20182] ? rcu_is_watching+0x12/0xc0 [ 710.699551][T20182] exc_page_fault+0x5c/0xb0 [ 710.699585][T20182] asm_exc_page_fault+0x26/0x30 [ 710.699608][T20182] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 710.699637][T20182] Code: c4 10 e9 04 24 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 23 04 00 66 66 [ 710.699660][T20182] RSP: 0018:ffffc9000e35fe20 EFLAGS: 00050202 [ 710.699679][T20182] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000001 [ 710.699693][T20182] RDX: fffff52001c6bfcf RSI: 0000000000000000 RDI: ffffc9000e35fe70 [ 710.699708][T20182] RBP: 0000000000000001 R08: 0000000000000001 R09: fffff52001c6bfce [ 710.699722][T20182] R10: ffffc9000e35fe70 R11: 0000000000000000 R12: 0000000000000000 [ 710.699736][T20182] R13: ffffc9000e35fe70 R14: 0000000000000000 R15: dffffc0000000000 [ 710.699766][T20182] _copy_from_user+0x98/0xd0 [ 710.699806][T20182] __do_sys_sethostname+0x14d/0x2e0 [ 710.699834][T20182] ? __pfx___do_sys_sethostname+0x10/0x10 [ 710.699876][T20182] do_syscall_64+0xcd/0x4b0 [ 710.699915][T20182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.699937][T20182] RIP: 0033:0x7f2fc478eec9 [ 710.699955][T20182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.699977][T20182] RSP: 002b:00007f2fc56cd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000aa [ 710.699998][T20182] RAX: ffffffffffffffda RBX: 00007f2fc49e6090 RCX: 00007f2fc478eec9 [ 710.700013][T20182] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 710.700027][T20182] RBP: 00007f2fc4811f91 R08: 0000000000000000 R09: 0000000000000000 [ 710.700041][T20182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.700055][T20182] R13: 00007f2fc49e6128 R14: 00007f2fc49e6090 R15: 00007ffea9a4f5c8 [ 710.700084][T20182] [ 711.777622][T20194] FAULT_INJECTION: forcing a failure. [ 711.777622][T20194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.875991][T20194] CPU: 1 UID: 0 PID: 20194 Comm: syz.3.4851 Not tainted syzkaller #0 PREEMPT(full) [ 711.876048][T20194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 711.876067][T20194] Call Trace: [ 711.876077][T20194] [ 711.876088][T20194] dump_stack_lvl+0x16c/0x1f0 [ 711.876145][T20194] should_fail_ex+0x512/0x640 [ 711.876200][T20194] _copy_to_user+0x32/0xd0 [ 711.876233][T20194] copy_to_sockptr_offset.constprop.0+0x153/0x1a0 [ 711.876276][T20194] ? __pfx_copy_to_sockptr_offset.constprop.0+0x10/0x10 [ 711.876350][T20194] do_tcp_getsockopt+0xa35/0x2620 [ 711.876405][T20194] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 711.876451][T20194] ? page_table_check_set+0x627/0x750 [ 711.876505][T20194] ? __lock_acquire+0x62e/0x1ce0 [ 711.876560][T20194] ? __lock_acquire+0xb97/0x1ce0 [ 711.876608][T20194] ? _parse_integer_limit+0x17f/0x1d0 [ 711.876655][T20194] ? aa_label_sk_perm+0x195/0x600 [ 711.876689][T20194] ? _kstrtoull+0x145/0x200 [ 711.876727][T20194] ? __pfx__kstrtoull+0x10/0x10 [ 711.876769][T20194] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 711.876808][T20194] ? find_held_lock+0x2b/0x80 [ 711.876852][T20194] ? __lock_acquire+0x62e/0x1ce0 [ 711.876927][T20194] ? __lock_acquire+0xb97/0x1ce0 [ 711.876999][T20194] ? find_held_lock+0x2b/0x80 [ 711.877045][T20194] ? __might_fault+0xe3/0x190 [ 711.877083][T20194] ? __might_fault+0xe3/0x190 [ 711.877117][T20194] ? __might_fault+0x13b/0x190 [ 711.877159][T20194] tcp_getsockopt+0xdf/0x100 [ 711.877211][T20194] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 711.877249][T20194] do_sock_getsockopt+0x34d/0x440 [ 711.877290][T20194] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 711.877325][T20194] ? __fget_files+0x204/0x3c0 [ 711.877382][T20194] __sys_getsockopt+0x123/0x1b0 [ 711.877441][T20194] __x64_sys_getsockopt+0xbd/0x160 [ 711.877489][T20194] ? do_syscall_64+0x91/0x4b0 [ 711.877540][T20194] ? lockdep_hardirqs_on+0x7c/0x110 [ 711.877588][T20194] do_syscall_64+0xcd/0x4b0 [ 711.877643][T20194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.877677][T20194] RIP: 0033:0x7ff47cb8eec9 [ 711.877703][T20194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.877736][T20194] RSP: 002b:00007ff47da00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 711.877767][T20194] RAX: ffffffffffffffda RBX: 00007ff47cde5fa0 RCX: 00007ff47cb8eec9 [ 711.877788][T20194] RDX: 0000000000000010 RSI: 0000000000000006 RDI: 0000000000000003 [ 711.877808][T20194] RBP: 00007ff47da00090 R08: 0000200000000040 R09: 0000000000000000 [ 711.877830][T20194] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.877850][T20194] R13: 00007ff47cde6038 R14: 00007ff47cde5fa0 R15: 00007fff00c39a08 [ 711.877893][T20194] [ 712.652112][T20197] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4852'. [ 713.744899][T12215] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 714.532655][T20224] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 714.601699][T20218] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4855'. [ 715.577677][T20244] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4864'. [ 715.835976][ T9787] Bluetooth: hci0: command 0x0c1a tx timeout [ 717.102416][T20271] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 718.113683][T20294] netlink: 186 bytes leftover after parsing attributes in process `syz.1.4871'. [ 718.563009][T20202] ------------[ cut here ]------------ [ 718.568970][T20202] WARNING: CPU: 1 PID: 20202 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 718.579532][T20202] Modules linked in: [ 718.583762][T20202] CPU: 1 UID: 0 PID: 20202 Comm: syz.3.4853 Not tainted syzkaller #0 PREEMPT(full) [ 718.593532][T20202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 718.603674][T20202] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 718.610263][T20202] Code: 75 46 48 8b 7b 08 e8 e2 96 ff ff 31 ff 89 c3 89 c6 e8 07 4d fb ff 85 db 75 0a 48 83 c4 08 5b e9 b9 51 fb ff e8 b4 51 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 a6 51 fb ff e8 91 cf 62 00 eb 87 e8 ba [ 718.630396][T20202] RSP: 0018:ffffc9000e4f79c0 EFLAGS: 00010293 [ 718.636708][T20202] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bf5299 [ 718.644721][T20202] RDX: ffff8880760fdac0 RSI: ffffffff81bf52ac RDI: 0000000000000005 [ 718.652819][T20202] RBP: ffffffff81bf51d0 R08: 0000000000000005 R09: 0000000000000000 [ 718.660897][T20202] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff888062f0fa48 [ 718.669011][T20202] R13: dffffc0000000000 R14: ffffc9000e4f7a48 R15: 0000000000000000 [ 718.677054][T20202] FS: 0000000000000000(0000) GS:ffff888124f7e000(0000) knlGS:0000000000000000 [ 718.686053][T20202] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 718.692663][T20202] CR2: 000020000060a000 CR3: 0000000027e50000 CR4: 00000000003526f0 [ 718.701178][T20202] Call Trace: [ 718.704472][T20202] [ 718.707808][T20202] remove_vma+0x85/0x160 [ 718.712115][T20202] exit_mmap+0x50a/0xb90 [ 718.716465][T20202] ? __pfx_exit_mmap+0x10/0x10 [ 718.721323][T20202] ? __lock_acquire+0xb97/0x1ce0 [ 718.726456][T20202] ? arch_uprobe_clear_state+0x16/0x150 [ 718.732178][T20202] __mmput+0x12a/0x410 [ 718.736465][T20202] mmput+0x62/0x70 [ 718.740268][T20202] do_exit+0x7c7/0x2bf0 [ 718.744528][T20202] ? proc_coredump_connector+0x2d1/0x4f0 [ 718.750461][T20202] ? __pfx_do_exit+0x10/0x10 [ 718.755094][T20202] do_group_exit+0xd3/0x2a0 [ 718.759656][T20202] get_signal+0x2671/0x26d0 [ 718.764199][T20202] ? force_sig_fault+0xc4/0x100 [ 718.769298][T20202] ? __pfx_get_signal+0x10/0x10 [ 718.774189][T20202] arch_do_signal_or_restart+0x8f/0x790 [ 718.779841][T20202] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 718.786219][T20202] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 718.792525][T20202] irqentry_exit_to_user_mode+0x141/0x2b0 [ 718.798386][T20202] asm_exc_page_fault+0x26/0x30 [ 718.803301][T20202] RIP: 0033:0x40fff [ 718.807234][T20202] Code: Unable to access opcode bytes at 0x40fd5. [ 718.813767][T20202] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 718.819903][T20202] RAX: 0000000000000000 RBX: 00007ff47cde5fa0 RCX: 00007ff47cb8eec9 [ 718.827976][T20202] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 718.836039][T20202] RBP: 00007ff47cc11f91 R08: 0000000000000002 R09: 0000000000000000 [ 718.844064][T20202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.852235][T20202] R13: 00007ff47cde6038 R14: 00007ff47cde5fa0 R15: 00007fff00c39a08 [ 718.860307][T20202] [ 718.863347][T20202] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 718.870646][T20202] CPU: 1 UID: 0 PID: 20202 Comm: syz.3.4853 Not tainted syzkaller #0 PREEMPT(full) [ 718.880068][T20202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 718.890177][T20202] Call Trace: [ 718.893469][T20202] [ 718.896414][T20202] dump_stack_lvl+0x3d/0x1f0 [ 718.901044][T20202] vpanic+0x640/0x6f0 [ 718.905044][T20202] ? tracing_buffers_mmap_close+0xdd/0x130 [ 718.910875][T20202] panic+0xca/0xd0 [ 718.914619][T20202] ? __pfx_panic+0x10/0x10 [ 718.919066][T20202] ? check_panic_on_warn+0x1f/0xb0 [ 718.924200][T20202] check_panic_on_warn+0xab/0xb0 [ 718.929167][T20202] __warn+0xf6/0x3c0 [ 718.933083][T20202] ? tracing_buffers_mmap_close+0xdd/0x130 [ 718.939020][T20202] report_bug+0x3c3/0x580 [ 718.943412][T20202] ? tracing_buffers_mmap_close+0xdd/0x130 [ 718.949350][T20202] handle_bug+0x184/0x210 [ 718.953724][T20202] exc_invalid_op+0x17/0x50 [ 718.958622][T20202] asm_exc_invalid_op+0x1a/0x20 [ 718.963500][T20202] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 718.969962][T20202] Code: 75 46 48 8b 7b 08 e8 e2 96 ff ff 31 ff 89 c3 89 c6 e8 07 4d fb ff 85 db 75 0a 48 83 c4 08 5b e9 b9 51 fb ff e8 b4 51 fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 a6 51 fb ff e8 91 cf 62 00 eb 87 e8 ba [ 718.989695][T20202] RSP: 0018:ffffc9000e4f79c0 EFLAGS: 00010293 [ 718.995798][T20202] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bf5299 [ 719.003812][T20202] RDX: ffff8880760fdac0 RSI: ffffffff81bf52ac RDI: 0000000000000005 [ 719.011804][T20202] RBP: ffffffff81bf51d0 R08: 0000000000000005 R09: 0000000000000000 [ 719.019802][T20202] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff888062f0fa48 [ 719.027893][T20202] R13: dffffc0000000000 R14: ffffc9000e4f7a48 R15: 0000000000000000 [ 719.035906][T20202] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 719.042206][T20202] ? tracing_buffers_mmap_close+0xc9/0x130 [ 719.048074][T20202] ? tracing_buffers_mmap_close+0xdc/0x130 [ 719.053973][T20202] remove_vma+0x85/0x160 [ 719.058256][T20202] exit_mmap+0x50a/0xb90 [ 719.062548][T20202] ? __pfx_exit_mmap+0x10/0x10 [ 719.067369][T20202] ? __lock_acquire+0xb97/0x1ce0 [ 719.072383][T20202] ? arch_uprobe_clear_state+0x16/0x150 [ 719.077995][T20202] __mmput+0x12a/0x410 [ 719.082099][T20202] mmput+0x62/0x70 [ 719.085854][T20202] do_exit+0x7c7/0x2bf0 [ 719.090045][T20202] ? proc_coredump_connector+0x2d1/0x4f0 [ 719.095715][T20202] ? __pfx_do_exit+0x10/0x10 [ 719.100450][T20202] do_group_exit+0xd3/0x2a0 [ 719.105013][T20202] get_signal+0x2671/0x26d0 [ 719.109591][T20202] ? force_sig_fault+0xc4/0x100 [ 719.114541][T20202] ? __pfx_get_signal+0x10/0x10 [ 719.119435][T20202] arch_do_signal_or_restart+0x8f/0x790 [ 719.125022][T20202] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 719.131120][T20202] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 719.137333][T20202] irqentry_exit_to_user_mode+0x141/0x2b0 [ 719.143110][T20202] asm_exc_page_fault+0x26/0x30 [ 719.148011][T20202] RIP: 0033:0x40fff [ 719.151838][T20202] Code: Unable to access opcode bytes at 0x40fd5. [ 719.158258][T20202] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 719.164439][T20202] RAX: 0000000000000000 RBX: 00007ff47cde5fa0 RCX: 00007ff47cb8eec9 [ 719.172443][T20202] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 719.180432][T20202] RBP: 00007ff47cc11f91 R08: 0000000000000002 R09: 0000000000000000 [ 719.188441][T20202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.196430][T20202] R13: 00007ff47cde6038 R14: 00007ff47cde5fa0 R15: 00007fff00c39a08 [ 719.204483][T20202] [ 719.207825][T20202] Kernel Offset: disabled [ 719.212165][T20202] Rebooting in 86400 seconds..