last executing test programs: 3m40.376804243s ago: executing program 3 (id=3564): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(0x0, 0x3ff) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) write$auto(0x1, 0x0, 0x100) ioctl$auto(r3, 0x4b72, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) 3m37.945196126s ago: executing program 3 (id=3577): mknod$auto(&(0x7f0000000040)='./file0\x00', 0x400, 0x5ec) mmap$auto(0x0, 0x3000c, 0x4000000000df, 0x4000eb1, 0x401, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye4\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) open(0x0, 0x200, 0x1c7) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1, 0x948d, 0x1ff, 0x15f4da07, 0x3, 0x8003, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m37.007264468s ago: executing program 3 (id=3582): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi19\x00', 0x8654092f478cae21, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r0, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r0, 0x0, @_sigev_thread={0x0, 0x0}}) r1 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r1, 0x0, 0x2, 0x6, 0x0) 3m36.721104029s ago: executing program 3 (id=3584): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b70, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x23, 0x5, 0x0) ioctl$auto(0x3, 0x541b, 0x38) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0x2, "0000e100"}, 0x58) prctl$auto(0x45, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_register$auto(0x2, 0x1d, 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) mremap$auto(0x1, 0x4, 0x3, 0x50a, 0x6) socket(0x2, 0x1, 0x0) 3m36.210507952s ago: executing program 3 (id=3585): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x841, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) getsockopt$auto_SO_MAX_PACING_RATE(r2, 0x400, 0x2f, 0x0, &(0x7f0000000140)=0x6) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x3b3642, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) prctl$auto(0x59616d61, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe5) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001c00), 0xffffffffffffffff) close_range$auto(r1, 0xffffffffffffffff, 0x2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x88200, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x4000009, 0x5, 0x100, 0x0) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000180)=@bpf_attr_5={@target_fd=r2, r2, 0x7, 0x3, r3, @relative_fd=r2, 0x6}, 0xffffff61) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x8, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) 3m35.7175692s ago: executing program 3 (id=3586): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x40000000029, 0x6, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(r2, 0x0, 0x5) r4 = socket(0x11, 0xa, 0x9) bind$auto(r4, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x9) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 3m20.590833865s ago: executing program 32 (id=3586): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x40000000029, 0x6, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(r2, 0x0, 0x5) r4 = socket(0x11, 0xa, 0x9) bind$auto(r4, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x9) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 6.410191233s ago: executing program 1 (id=4361): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mincore$auto(0x0, 0x8000000000005a, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r1 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) read$auto_proc_pid_cmdline_ops_base(r1, &(0x7f0000000040)=""/159, 0x9f) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x11, r2, 0xfffffffffffffffd) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r3 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0xffffffffffffffff, 0x6a, 0x5, 0x0, 0x3) move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2) read$auto(0x3, 0x0, 0x7fffffff) pselect6$auto(0x8, &(0x7f0000000080)={[0x8000000000000000, 0xca, 0x7ff, 0xfffffffffffffffb, 0xbc7, 0x20200000000, 0x2, 0x4, 0x7fffffff, 0xfffffffffffffc00, 0xfffffffffffffffa, 0x7, 0x4, 0x2, 0x3, 0x7]}, 0x0, &(0x7f0000000200)={[0x1, 0x4, 0x2, 0x3, 0x1ff, 0xe, 0x5, 0x100, 0x41, 0x0, 0x6, 0x1000, 0x6, 0x7fff, 0x7, 0x7]}, &(0x7f0000000280)={0x4, 0x2}, &(0x7f00000002c0)="a58092ef831b05b41120f3f178665c334c83864c4b042867da5af8fb5095debada1b79f5541d8a117d1f6e52b0b5469d0f607ff21d19234b701407aa832c6c8cf01ec1c21e1303ba23d820ed97a89f94c451d4801b1c0e9c443f5780d5e7") readv$auto(0x3, 0x0, 0x7) setsockopt$auto(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x56b) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x2000000000000000, 0x2000c, 0xdf, 0xeb1, 0xffffffffffffffff, 0xfffffffffffffff8) setfsuid$auto(0x0) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0x40, 0x5, 0xe4, 0xe8, 0x0, 0x2, 0x0, 0x6}) read$auto(r2, &(0x7f0000000000)='.:,}#\xca$#.]+\x00', 0x1ff) 5.935018332s ago: executing program 2 (id=4366): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = socketcall$auto(0xffe, 0x0) ioctl$auto(0x3, 0x4008ae61, r1) r2 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) unshare$auto(0x20000) unlink$auto(&(0x7f0000000040)='./file0\x00') execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r1, 0x0, 0x1) read$auto_proc_pid_attr_operations_base(r1, &(0x7f00000001c0)=""/17, 0x11) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x8, 0x311) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/016/001\x00', 0x2480, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_VERSION={0x8, 0x2, 0x4c}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 4.886797774s ago: executing program 2 (id=4371): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) vmsplice$auto(0x1, 0x0, 0xa, 0x6) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, 0x0, 0x5054c2, 0x0) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) ftruncate$auto(0x3, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) msync$auto(0x0, 0xa, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) prctl$auto(0x41555856, 0x6, 0x0, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) 4.374616457s ago: executing program 0 (id=4372): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/nfc/nfc0/rfkill0/soft\x00', 0xa001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.clone_children\x00', 0xb02, 0x0) sendfile$auto(r0, r1, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000280)=@prog_bind_map={r0, r2, 0x2}, 0xfff) mmap$auto(0x2, 0x840e, 0x24000080000e1, 0x1a, 0xffffffffffffffff, 0x3580000000000000) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x1000000002000c, 0x1000000d, 0x4000000eb1, 0xffffffffffffffff, 0x7fff) close_range$auto(r2, r2, 0x2) r4 = memfd_create$auto(0x0, 0x2) write$auto_proc_pid_attr_operations_base(r4, &(0x7f0000000240)="c837b82802749ee4f24b4e9af6634e3353e6", 0x12) r5 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) fallocate$auto(r1, 0x3, 0x10, 0x200000005) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x1ff) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_MESH_ID={0xc, 0x18, "b835da2dcfd518d2"}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000040) mmap$auto(0x0, 0x2020409, 0x3, 0xeb1, 0xffffffffffffffff, 0x100000000) prctl$auto(0x1, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2000000000000f0, 0xd9, 0xeb4, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) r6 = fsopen$auto(0x0, 0x4000003) fsconfig$auto_SHMEM_HUGE_NEVER(r6, 0x5, &(0x7f0000000180)='+\x00_\xe8\xdb\xff\x0f\\X\xc9#\xa0\xdc\x04\x0f\x99v\xbc\xc3\xf2\x03\xe2T\b\x9c\xe7J\xcd\x00\x00\x00\x00\x00\x00\x00\x00c\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 3.630133756s ago: executing program 0 (id=4373): r0 = socket(0x10, 0x3, 0x6) mbind$auto(0xe0, 0x3, 0x2001, 0x0, 0x80000004, 0x7c) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={{@raw=0x1, 0x650, 0x17, 0x22, "52b0bc1cfa9ed876770f432ff86a41faf50710e1b5c2b055cfd4eb7b77cf456f7ecccdbf6fd1118882104eb6", @raw=0x3}, 0x1, @iec958={"5425e55e797f706ec9ea29e6ae7092a3fa62d7ce6b28e7cc", "3191c3d0ad5b728bd7327a2bf651f4bce765691f794ae6c0de1ab708359a3cec872d2068256e970e25280cb5b465477af11713e19dcbef4f49e4d27d64a85e675154cc951d8214f0269f82d5aa20daacec917440a35b32caeea5ce1209c60902bfa76ef5fd24d0cea92fc5ff59d606f0af7833e3f7da9a14d21f90036bc1f81994037d3646aa9dc5b153a485b02a3d18f53498", 0x0, "c7d11701"}, "8eb598c9a729a1b832f67076197fd450f39c3d9e7b32cad9d57aa44378905e3faef36b04ffd721bfa6e3eb801e28d0e0583d93ca145bde778cf20f70ed5f43daff47759834f30dcebf3ec093b7938476c20c57bf1ed6659b8051e81d07ddf2b97284355e098f34af6106a72e8cca06976760288fdd5cf80a148bf3b1b5ceb881"}) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf25050000000c00010007000000000000000c00010004000000000000000c00010040000000000000000c00010004000000000000000c0001000000000200000000"], 0x50}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000000)="1c", 0x1) 3.512955101s ago: executing program 0 (id=4374): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='./file0\x00') mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_restrict_self$auto(0xffffffffffffffff, 0x0) mknodat$auto(0xffffffffffffffff, 0x0, 0xfff, 0x9) renameat2$auto(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0xfffffffe) mknodat$auto(0xffffffffffffffff, 0x0, 0xfff, 0xfffffff8) socket(0x1e, 0x2, 0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) msgrcv$auto(0x0, 0x0, 0x200, 0x1, 0x2) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/configuration\x00', 0x10b800, 0x0) readv$auto(r0, &(0x7f0000000080)={0x0, 0x5}, 0x2) 3.390974455s ago: executing program 4 (id=4375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) (fail_nth: 17) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x170b, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_STATS_SRC={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40840}, 0x4000840) 3.226410825s ago: executing program 4 (id=4376): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2b, 0x25dddbfd, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0xe00}, @OVS_VPORT_ATTR_NAME={0x8, 0x3, '})[\x00'}, @OVS_VPORT_ATTR_UPCALL_PID={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0xc0) io_uring_register$auto_IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000100)="1750e668d8a594994ee813cd21b1d85708a26889a1375237a154dd87c5c8d61b98a99ec875157702341136ff763c97ea43f3fbfd978107d341128b36f7264e241555be8d6c10e072585ce7ccb3cb75da3222376300af5a12b3ae792ac9f1686cde97b76bb2187e2695ed7c521a1188", 0x1c2) statmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000007, 0x2, 0x6}, 0x0, 0x6553, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video40\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0485619, 0x38) 3.219346398s ago: executing program 2 (id=4377): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram3\x00', 0x660403, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x100) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x20400, 0x0) pread64$auto(r0, 0x0, 0x8, 0x8000) socket(0x2a, 0x2, 0x0) pipe$auto(&(0x7f0000000040)) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) read$auto(r1, &(0x7f0000000040)='\\-\x00', 0x9e38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x17, &(0x7f0000000040)='!\x00', 0x1ff) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r5, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB="230027bd7000fedbdf25090000000c00038008000300", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x4008008}, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef) r6 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r6, 0x0, 0x80000001, 0x0) r7 = getpgid$auto(0x0) timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @raw=0x2, 0x4, @_tid=r7}, &(0x7f0000000040)=0x9) shmctl$auto_SHM_INFO(0x7fff, 0xe, &(0x7f0000000300)={{0x5, 0xee01, 0x0, 0x6, 0xd, 0x2, 0xffb3}, 0x3, 0x6, 0x2400, 0xec5e, @inferred, @inferred=0xffffffffffffffff, 0x5, 0x0, &(0x7f0000001300)="8ef410e2b0b96fba9062a4d373975c87e7005170529950ba2cecc007d545b44b87c8a7fe97ed59e893c2adfb4ba78a63eb373a0630f6b6d3612effc00577e46657d9f3b79297f7a6bbdd70fa3e992b6b1bce84546b5da778b1b2d9f37b7864ca1e36f7a79b35a6f8af8ff55341e6f11be24e65dd3ed49e26774810502e2a6b0693ae1638cefd43f333aaff0ef6850118c193048b12678cd949f88af5de2dc02600827e695e5d431b3ec0e41d600bf76e8e7de5fe54797b3b07b30c2cadc36b387dc0987eeac5aa4579ab9b3bcbfb3ec84e395d431e754c91b36aadd6fca58d1278157dcadb25e9d33745c89bd10036363ba6947b01ed27c398ea87811891ece1ee68f26f46bbc34c6166418d176f9d58cbb206750ab5754e83ba7af6f39b09d6eae7428eb339db73816b99d798dbec14b61651996a36a395c483ec48b9c76c5f077729827989a344754638fb0c7917f26154a88720202d9f801642017e3588dbcee99147ad2091a1b7efeb64ed22b1242bfdf22a4af59970bea4eca6b1012485390363c73088a92ba5d897b691acf27f781b8049f70325dd285e5f5a6fff1d426a997357528d979c9146c7ce0dfae5ee7632e25ef5d6be827e9cce8757033977460c8124dc1634ec7ca67d0df2cd48c79bc86715ee8a899297d11bb07112264b67015dce21d814dd6d39f222a2a3198d7e452ea8ebcbc08426d3469d621342aacb7cf7ddf3e55b02448001b6dabb3fc402658cd2679a36b34ca28fe89a339a8866cc6f2d90f3c9c6d2c1b6b7df43c54fb3b2049e227102fb3efc30914242408c46677523ce2b8ef2d3c0b3a08841c092f7ce5c47c4360a8a777fd357b5b443a5e6723759408fdabd0125eab699dabd70db1f59e3e1fddabd8d78f7c0a9a26d39ecd2fc8917a4dd2d326c9f374d3c6510bd740a93bee65c0a5aa5999c2e761249596cd313e0efaae1ba98589df39a6a3810efeddeb4f906494f6a39424671c404246eda7d949cce6d1274f0106d491e1bc5abe9bff87a3dac358df7ac375ed3dc75b1003612317dbd3c96df1235722be8df6b8c7036aeb25dd5f72fd04f63c91a0ffcae8c062fe7fe440af1a6a95982d127b07b4c576f2063b651acae7a46f3bd859be3779811e0b05ee8de5be4d9fbe8c1c4108ea3dc847c308097b25d6d563d65317cdfc30c443a410698019279787b33dae37710f5ee26dd5b42cb317522aefbe93ea30387836cf0b90cebc6520c0f57ede8410fb6dd5e787b1cdd51a2b0a7571eae0c1dbc715c29274f8f9c95b6244f3e6c67c0bb39a2b11eb459feba9b6d87e6f6841d612bd15092a0a6164568739e02f3f3340e8f2af7fd9ad7d37c763921a1379bfe469abe393acf2765f896ef02179924722d0c8c11fe1ba21291cf581f28731947a1a6e284cc44895829dd4cf7f6fbf83a370ea51c9bf04f1152b4958152c2dffece4a43a39cc63ccb3551404df25ba462c4b2669b139249a9e2d0c9dda8d557628b5c9d09335e9e7bc20d8f85ecb0d10122a477827a984f6d0a2463ea1f933267b7b9f1b523a23a5677fad48393d968ab84906b0d87a3fa15d52344f82ab8d75c6cf833a6de111d86713a251488bca63d3a3ad00e80a1a71e60da73dcc71b7834d87cb01f2e33fc2017f264595cbcd17e1fb8af5959b892d1dc22fd8cc5623a924eae0d6364bf3d9abf4d933ce42ebabb27eba25024e9565a5aeb4fe6d55b34830fcc9150e1b433b190ed52587b851899d904283630fb78c9d23283c2fea0b0c9505a3ff9b13668de78a28ccc29bc3100a4ac00881e6972ff6a7337b8cb0adbe7e418c93d7539e4ea7c8ac4846f3077d8041799aedddf0cae8f3976af276fef403131c4da8c240092c8fd9674c767ced2a037912a01e095fd4f9e83418623c2037edfe00d618ccec198f204cf778fc9e019148fe9e4f4f29e20920ad1321fdf989283d576fe2e4c5498a64af473760f477dcfae84538c8c637a2ebfc0f80054b71dea99b8ecdb85801a499b38ec56be55b954ad31b7e1916977555795d63c80ddc359f9b5f15b4b0b4a5855d76f3d733081758b68a52ff1b2bc6e497c7a8732413e94db5b5d0fafa86769433dce176aea606d440c6cbe05d6623845700688a2d50a362d4f86bf970d80f781c12f65606c02f20b5dad0b35237ae52a73c3aed9922b76fc9328c47fb867de1139acbf3ee9770f10c6d84c0d6060b5ac66bc0a2fbe73c350d47d054405447f3b8d484ce21d4dbd43c3f52e379262201dbfe7e1af707882bc5e6e8a39bfdb9b96793c7e5dfa1224fb7cfdb09e20762e745692568d972b5db82baf21c027f060dffc2cd682a34af91ee90848d82f256183f3cacbd99ba31ad8e2e2f2084e710ab3ac70ca01765c956c13513c4890a57d34bacb1fbd760eab0ad1d3f23709634bd8ea6f3fe7046e2e678159ec70202e8e517f904799df28b41c697ac3b662ede183d13920c56c7b0ea25bfd052d1083db450a58464c4267118c724068df1dc8c691a12dd706c28db98f87081891742f7d83472469f8af1a0f55701deaa5f4700d210ea27d69017ecec7207c7e1fd9a4b6c5e794e0424db5085ff17a0bfd9e4eb20e28ecd5a309c29bf980cff5cf1737c742392ef91532788cb7f5f95e0daf34eeec467b18e1531c780bdac7e189a4321254618317664213db6170b5e19a1bab3bb2e387092e92afc40b960bbbcf4f616710076c1c17b3d50ed3ab0e08daa02cbbd64b5a989d79d33444dac278ef58edf44b3ad032cd80563ca3cea020fde183a94cab4a95ffd78a9d94efc6c690579b6d1d0b0a4ed77a8844a466b0a54009c67983c4f6a08e16aed7396ff606263190aca17bd18dd8e35614c78f378285475a1f143261179b069714424454d2d256721f5c68ddaeb5c91c876f80e35323dbcc8555f384979a7a25a577fb9f0e9d6263b98a9c96d4bfa795592924302c278743e7f393ffffcba3bbf915cbb080e25fd6932315b08eaaad3ff0eb7f406603500eb989719f8f65172584ea64002e8187955e62b0f455ab0dca180c339e4799f083444b0020c201dd5123a13abdc342fbd158a16feeb6c7a155ff99889c50c113cf9cf458534e3a647119d1c9d9469a3dc14a7bbd2c0a0816fc8f92b264fc37cbf4836e87b92e2de0a552b9a17f3f40730ff700de01d82d2a3443c9431086ed81b87b6a49e18cf22273a62eadae88d4666a4a6c4e90d03c313187b91b62ff55973b44591145d3043478c32819cb80132ac58edadf511f8daab1a2e616368cdb35a24b09cba7c5b324f88309c86c5374516a1d04e63a1d77c32e420ef2be56708a44e68bc3bc5b403bb638b5262a5d3daa6289f24cda4c4232b4486c5634909daa26683451edb7513867cf77f397d1da33ce9200addb983f7f277bf4074fa623f294b66d042d5e5729db913989b2be213ea7482ce0e16310b7e6b0151c46ba6190addf808e4491c08a3d4f80687e6b68f8da11d623526981b2f1280ecb28e7f5cf2bae90f7d60e5e248f07695a94eda06add48e5f29f207040bb07c36f831a5aecafc2db87e82f6bdcef40d9d5ffe0d54fe8c882d665f940c83047523cb6892801214095c6e62e4a0f6675617c945257428c877f294412545a711b92c939c96196d41139247551f618484591acdcc7e477a3bf56131a7f403b689ceab96ead5d3acbeee2fb86c834259a67b105f8e5880137e5615d50953f97507dc8eda9afa598ca76bb53647652da47f78cc12806e70fc982d012ffa2816dc0d64f5a47bbada7b824858445751264249f769415ed0886ab1e5204d9ed06ec8305b669b5da4564259bdb2cdfac06cbb1fb7cc59c281a3723d1f4311cee3f007a28cfc0cf82bc76b1638375b2b781a637db8d0ff9aa6e8b2d8e5e854c811b283d9b3b08a22dde23af294806b4a1fec1635d418032c5152b445031c93eb0d1c0db88c87525c0f3a5ebdd21d6259f5db2e102112c8251c6e94b9dfec1d1ef44469ef928c578cc1d4bc6fa0e385771f3f9ad2abd11087a3d708ed4f03afda27c2b5b1288a232ca489cf20d0937a00da1b4e2964a99414313c885373c73cbc2f966ad548314044d7dc34690f7a63155cab85b7997936dbdda6a27a4560d73f121037c2d0ec34d043c895bd34e77d7b3c779f1c99ebcaebb0d18c5bd0abfa2bc3841a6339135eb86784d6c37e10f5f1a29bc25392ce0c7f385a7ee18e8b67822dfbb131e51b1563ad2409f5822e2e96e27a7cff21c6692aab58a09b2115e0ef137a8212ce2dcb51d9c02419a938ce3a3abf7b97724eec6c46c866bdb092969c459e472797a873b9356c30bc5de755bfe3a0f105cf147e18eb9ceb7c200733fa6524edbefcd3a137820f297dc94d5d02f14d34e0853bcb31936fb93abecad58c7b1ae00709a402b6366ec32695bd86a687e6c6b35e887820819316575e46f31e1d5d2fb34d300226a4435081afd23a115d25fdc0fd118665b90094ac5b93cb985b03bd3ed42d05dce53ae7c61c8cb5f6a096a480dd9ea8a317ce049b1e768f717ee2f16dc830c690cf6d806a7b99187d7e2d3a85838891b7387af32cd9432a59fb2793aed26d68f6d8c4f1daa6c4c2dcafc26b39fdf7ab83d4a9cc36f6a22846adbe77d1f4d632240516eaf8e3756d420555c4898c0f8c9bea34821949e6c79e9902ffc6fe1dac90b2991224707e9d6708f0ae0ef3f17af55cb7a9400f7fb649bfeb537df1dc1c99d046b323a38b22bc04d892a68ffc7e481034d80f562e057eb57526e8a11f6ea923ce624dcb1a04f5689150c41f1cc05418fab3d643399883c295af534ab0e4876ad050e864b090e8e94b6d40d605552e95490d207dccf12e55c715905d54ae483a7560359fd10aeac7f5d6691fe4a4a9a3fe1826c9cc56ddb95657cd1b00cb5d3ce6fed52e9887698ccd1c66075c54f7dd47b0f421b8554813d90282c6c3dd79837cd402a73c5886f570df3d181939369d7b3f374b7df3d4ece7854c1632d7ef4c6a56f11e741d54be4ccb11cdbfc1f2f58172cb94dda130d61fc8fd9ceac7e410b0f7f03a4fe87a3a6b568284fa8cd4eb317aa0afe800bb52ca32931a1955181966ad2b7e2e1698b42cda75446af6b7e280e1d439946a462686fb50d45b4e5818345e81482468402e210c99279d8ba5618a8c12d061b65a83bfc8e86c92c5f5c049a711cd98e98c34b39b6e67b8c9c014465c70efa8ab061dd6fa6a24773ce72dceb6d66dcacfe26b9ab7aacc188631b7e3b02f00756d8605b80cd00d12aaeb187724bde45062eec47019a64593214cf0433e4d2c11a694b6ac8059961982f94b2dd960d65bc9a26e11a9ff944d29867a28292fa672d4b38ab2bfa35a2de62e6185414bc3f164947b816862eaced5efbd51056567ade59c47bfba83428450815075fbfe54bd5b1f6e00a54c863e91f06f13edd1436499e391ce0a38efedf155a9ed1c116562b4a07dcdf4309ac59d29c1e5ada3dda664b4572bfecf5b768efbdedd79c549a6d66fabeb10876060f7388c9a5d98780fb301431df80ab6c42e3e3e83aefc917dc8bf5b31bebcd9e78822bd7999a68173d2a97788319d3a7442aa16d779fffc1254afeeb08d8a56a2cf4d1c05ce1cf473498557927358ba3ac1ba001a317b39156ad627568c2bfcdd76b3d5cc4d67e78ce4357473c354573a1a9c2d513ba30dbd0a9fe023fd565efb381832584e473dc78a2f7983a1f7443295640bea6db900b15d9cb9511bcf880ed79a1c89ac1b082adf2dfac35e8363a61c12c6ac3623fdff0772595415b1ef978c2dc9016a1da6a", &(0x7f0000000240)="ef860836c1053b8256d3316951dabeb9f54610b225229249ed0d924579f69479188031a1a6362b4e99428d6cc27fafb2301223dcc8f1d79748d41991ea2eae7ac7f64e8ad62284517f9849a87e86089fd6ca9a07d0543a"}) waitid$auto_P_PID(0x1, r7, &(0x7f0000000380)={@_si_pad}, 0x2, &(0x7f0000000400)={{0x1000, 0x5445}, {0x3, 0x81e}, 0x9, 0xd, 0x5, 0xffffffffffffff7e, 0xa94, 0x1, 0x400, 0x1001, 0x9, 0x8, 0xfff, 0x7, 0x2, 0x7ff}) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r8, 0x9, 0x7ff) 3.213309234s ago: executing program 1 (id=4378): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x5393, r0) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000040)="65a90950735f7b19172f", 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) bind$auto(0x3, 0x0, 0x6a) sysfs$auto(0x2, 0x10000000000002d, 0x0) fsopen$auto(0x0, 0x1) 3.086153602s ago: executing program 4 (id=4379): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)="30624bf1", 0x4) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x80000, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000440)="9b58b4fccbcd800000100000000000000025000000d1627cc84d61f3d07771b09e2c91eb271fd2f826dcc129e3a136d030996f8769497d9621bcd869c6f014922a060000000000000028a0784539e00ad178298ec54bf55f716653ee64518c92a24409be055f93546773a695c31a9a53ef754e8ca43619e9a71b76f8e8aeb15a4019883dbfd1") openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x0, 0x0) 3.003858838s ago: executing program 0 (id=4380): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(r0, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) r1 = socket(0x18, 0x800, 0x2) getpeername$auto(r1, &(0x7f0000000040)=@llc={0x1a, 0x338, 0x7, 0xc, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000080)=0xa98) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) getsockopt$auto_SO_RCVLOWAT(r3, 0x0, 0x12, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x19a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r4 = socket(0x2b, 0x1, 0x0) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(r3, 0x40789440, &(0x7f00000000c0)={0x6754, 0x5, 0xaf7, 0x8, 0x2, 0x4, 0x5800000000000000, 0xeea, 0x8, "57ef0f1414cd3c1c67b49c20aa95bbbfd2b68fae19263df84167c68a423e889e2cbcb6b41dc07aa2dfffe24c19d2b2c3a50f4133f72a36f28bbcf4c8ec369de0"}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg1\x00', 0x800, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) 2.889860602s ago: executing program 4 (id=4381): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x200, 0x10000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) ustat$auto(0x801, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4038ae7a, r0) socket(0x28, 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x1009644, 0x4000000000df, 0x18, 0x2, 0x2d4a29c0) r2 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r2, &(0x7f0000000180)=""/61, 0xfffffeeb) pivot_root$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) connect$auto(0xffffffffffffffff, 0x0, 0x2) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000600), 0x104800, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bac2c4769", 0x24) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000200), 0x3c1941, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_max_time_ms\x00', 0x40200, 0x0) read$auto(r4, 0x0, 0x20) 2.833740831s ago: executing program 1 (id=4382): symlink$auto(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000001200)='./file0\x00') chmod$auto(&(0x7f00000002c0)='./file0/file0\x00', 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond0\x00'}) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000440), 0x105081, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'tunl0\x00'}) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, 0x0, 0x1fe, 0xd) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x8, 0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00') r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) 2.543666202s ago: executing program 1 (id=4383): socket(0x3, 0xa, 0x40001001) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000640)={0x2c, r1, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@generic, @nested={0x0, 0x10d, 0x0, 0x1, [@generic="430b9d17a8ecfa48c0e17755ecd5d46a8588fcd7cc3ad678edd7dac0aa4f92db17405d344d3202b390afa845d5378143a8f98e1ac2ec2396fa0ef5e35851efee7eec", @generic="d844d437e16a767fd1e4f94ca4e001894820f11f7c08f1a63851783f64a351d8b194575afba6e3d3334aa84448a2a59c5522386d2acf3163ec517e558256747ac80cb9235605d79e304c779ee91c1115172e3012daf3662a479d26c054c0b6f826cab6fc1ee0a0b18419c94b6a5ed58587256cf0a6ed968bedf42e9a70fc66f0a4be7f845d0d39e3fe1471583353d7c2862b523dd589a993e7cfe591a58afe6130b5be028264cc902c792a892246d064c4bcae0f45e40caf8170224200d461364828", @typed={0x0, 0xc4, 0x0, 0x0, @pid}, @nested={0x0, 0x122, 0x0, 0x1, [@generic="da0b0f3687a69245b6f6730a58dec2fcf783f8ec2c6e77d8f3098e3a45b17ad31f3ded4947974900350b7216ee8f68ad096bd66649b48f2edf7458e00363da324a7bff68753b7e37cb89c965ad543cbd44c3ce1b56a569fbf2b766549267fbd63da8f2e1589d4930d8475b09fc460c972ced3c9d554ad5213808e15f3032baf25f54de5e66c28e9be00ec217ab1ecd7f11462bc9201a5aa4f392ece95e11b86871556c6b566d0b63102cafb54e3243b3c38dbf03fc30af1b1b"]}, @generic="57bd5577b095bc0707", @typed={0x0, 0x9b, 0x0, 0x0, @binary="1ccdaff36829caeffe8ca2bec7831839bb8e9bbedfcc7bc9c6f99e6d9873a1af1f8d7d06e20fc6c8c7e2877a7f46735318f474ceb4bd161be52f5716f6f019b1cefa8a526f3a5ac78057b4bd8455"}, @typed={0x0, 0xcb, 0x0, 0x0, @binary="0853f092e07d31f8eb8809564d700de8aa06"}, @nested={0x0, 0xca, 0x0, 0x1, [@nested={0x0, 0x104, 0x0, 0x1, [@generic="be5fc8351fe62be0bc1551fd3e077313b4a95a2d7580a454a57e36d2", @nested={0x0, 0xee}]}, @generic="5009778284e30825f5cade16ca948ca5c396ea01254ca4a0a9390d7b57f915624d33817847cf6182fd92e8eb5c4f883fe75ee2e35c17e4de7becf724583e2b38159a40d8db0d3224811d9668ae91121a15293863e017d310613b1aabb6ce8bafc0973d48738630d6459d4765cf541d610e413cc5c984cb368ac9c5b44bd3e51a8e79c3e14eaf5712ffcffa7c38cd0e"]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40) r2 = socket(0xa, 0x2, 0x3a) getsockopt$auto(r2, 0x0, 0xf, 0xfffffffffffffffe, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1ff) 2.31332423s ago: executing program 2 (id=4384): r0 = socket(0x3, 0xa, 0x40001001) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000640)={0x2c, r2, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_BANDS={0xc, 0x4, 0x0, 0x1, [@generic, @nested={0x0, 0x10d, 0x0, 0x1, [@generic="430b9d17a8ecfa48c0e17755ecd5d46a8588fcd7cc3ad678edd7dac0aa4f92db17405d344d3202b390afa845d5378143a8f98e1ac2ec2396fa0ef5e35851efee7eec", @generic="d844d437e16a767fd1e4f94ca4e001894820f11f7c08f1a63851783f64a351d8b194575afba6e3d3334aa84448a2a59c5522386d2acf3163ec517e558256747ac80cb9235605d79e304c779ee91c1115172e3012daf3662a479d26c054c0b6f826cab6fc1ee0a0b18419c94b6a5ed58587256cf0a6ed968bedf42e9a70fc66f0a4be7f845d0d39e3fe1471583353d7c2862b523dd589a993e7cfe591a58afe6130b5be028264cc902c792a892246d064c4bcae0f45e40caf8170224200d461364828", @typed={0x0, 0xc4, 0x0, 0x0, @pid}, @nested={0x0, 0x122, 0x0, 0x1, [@generic="da0b0f3687a69245b6f6730a58dec2fcf783f8ec2c6e77d8f3098e3a45b17ad31f3ded4947974900350b7216ee8f68ad096bd66649b48f2edf7458e00363da324a7bff68753b7e37cb89c965ad543cbd44c3ce1b56a569fbf2b766549267fbd63da8f2e1589d4930d8475b09fc460c972ced3c9d554ad5213808e15f3032baf25f54de5e66c28e9be00ec217ab1ecd7f11462bc9201a5aa4f392ece95e11b86871556c6b566d0b63102cafb54e3243b3c38dbf03fc30af1b1b"]}, @generic="57bd5577b095bc0707", @typed={0x0, 0x9b, 0x0, 0x0, @binary="1ccdaff36829caeffe8ca2bec7831839bb8e9bbedfcc7bc9c6f99e6d9873a1af1f8d7d06e20fc6c8c7e2877a7f46735318f474ceb4bd161be52f5716f6f019b1cefa8a526f3a5ac78057b4bd8455"}, @typed={0x0, 0xcb, 0x0, 0x0, @binary="0853f092e07d31f8eb8809564d700de8aa06"}, @nested={0x0, 0xca, 0x0, 0x1, [@nested={0x0, 0x104, 0x0, 0x1, [@generic="be5fc8351fe62be0bc1551fd3e077313b4a95a2d7580a454a57e36d2", @nested={0x0, 0xee}]}, @generic="5009778284e30825f5cade16ca948ca5c396ea01254ca4a0a9390d7b57f915624d33817847cf6182fd92e8eb5c4f883fe75ee2e35c17e4de7becf724583e2b38159a40d8db0d3224811d9668ae91121a15293863e017d310613b1aabb6ce8bafc0973d48738630d6459d4765cf541d610e413cc5c984cb368ac9c5b44bd3e51a8e79c3e14eaf5712ffcffa7c38cd0e"]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x40) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x505, 0x70bd2d, 0x25dfdbfb, {}, [@OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x5cf}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x1}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc}, 0x80) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r3 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r3, 0x29, 0x20, 0x0, 0x0) 2.189785723s ago: executing program 4 (id=4385): symlink$auto(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000001200)='./file0\x00') chmod$auto(&(0x7f00000002c0)='./file0/file0\x00', 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_macvtap\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bond0\x00'}) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000440), 0x105081, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'tunl0\x00'}) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, 0x0, 0x1fe, 0xd) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x8, 0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00') r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) 2.050654263s ago: executing program 1 (id=4386): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x9, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x24000000) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2000d, 0x8, 0xeb1, 0x404, 0x80000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) 1.92457404s ago: executing program 2 (id=4387): mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) select$auto(0x8, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xb, 0x7, 0xced80000000000, 0x7, 0x6, 0x10001, 0x1, 0x7fffffff]}, 0x0, 0x0) mmap$auto(0x0, 0x3, 0x1000000000001, 0x8000000008011, 0x3, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x101080, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x5, 0x7fff, 0x19fff, 0x800009487, 0x8, 0x200000000008, 0x7f, 0x100000000003, 0x1000000009, 0x9, 0x3, 0x6, 0x400005, 0x5, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) pipe2$auto(0x0, 0x0) write$auto(0x1, 0x0, 0x80000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000108, 0x400, 0x2}]}) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.319964497s ago: executing program 1 (id=4388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x400, 0x81, 0x0, 0x13, 0xffffffffffffffff, 0x4) write$auto(0xffffffffffffffff, 0x0, 0x40) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) socket(0x2a, 0x2, 0x8001) socket(0x15, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0x990, 0xffffffffffffffff, 0x1, 0x8, 0x4002a1, 0x95f4da0a, 0x8, 0x68ae9338, 0x62, 0x80000041, 0x4, 0x0, 0xc, 0x5, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x7ff, 0x3, 0x15f4da0a, 0x3, 0x3, 0x1, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x301, 0x70bd29, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_IFINDEX={0x8}]}, 0x1c}}, 0x40000) 953.659255ms ago: executing program 4 (id=4390): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram1\x00', 0x6281, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)="b2", 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r4, 0x40044620, 0xffffffffffffffff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/apparmor/parameters/lock_policy\x00', 0x82, 0x0) sendfile$auto(r5, r5, 0x0, 0x5) getsockopt$auto_SO_MAX_PACING_RATE(r4, 0x87, 0x2f, &(0x7f0000000040)='&-\x00', &(0x7f0000000080)=0x1c) 618.019861ms ago: executing program 0 (id=4391): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6tnl0/carrier_down_count\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000500)=""/204, 0xcc) close_range$auto(0x2, 0x8, 0x0) msync$auto(0x0, 0x8000, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) 487.897061ms ago: executing program 2 (id=4392): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000140)="61e35d7d", 0x4}, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r5) sendmsg$auto_NBD_CMD_STATUS(r5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x4008050) sendmsg$auto_NL80211_CMD_SET_CQM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="60120000", @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf253f00000042125e80120157803b38694e6b0fca720453224d88a2393983143415c642e3c360ab48d694e21204e89b4c8ab7d4be6f1bd65055c54d3fedb9b4591e6ee6576b1f011e23c80c6ea478e8f3da21f26ade35148398f2ef3e09640a60c3c91182270b133cd2c31dc32b05b5ee01b088c4974eef13d2e4f95cb2ac0310e4be67d9c413ba544ba9032697b70cfabb60ec8054e108535328bdec1e0b739a64b91ce719be7daf4bef038618c8fccd0944385a98747f2a7268f08864bda87a2213c48acc5e6c42979968e0f3768eb883808e04e10e569b844eaaeaa3189ba059a1cceea2c7c642a436757dd6815ec3f1582f74e9dee4e0f7e472575ed6621d42aeaa18af25da7d3268e408003100", @ANYRES32=0x0, @ANYBLOB="080081000700000000000400058008002600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4], 0x1260}, 0x1, 0x0, 0x0, 0x1}, 0x8000000) bpf$auto_BPF_MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)=@query={@target_ifindex=r4, 0x40, 0x7, 0x46, 0xffffffff, @count=0x40, 0x0, 0x2, 0xca0c, 0x6, 0x1ff}, 0x1) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) rseq$auto(0x0, 0x8000, 0x0, 0x6) io_uring_setup$auto(0x1b, 0x0) close_range$auto(0x2, 0x8, 0x0) poll$auto(0x0, 0x0, 0x9f) socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x7) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000030c0)=""/4087, 0x106a) r6 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) read$auto_urandom_fops_random(r6, 0x0, 0x0) 0s ago: executing program 0 (id=4393): r0 = memfd_secret$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NBD_CMD_STATUS(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="5ebd28bd7000ffdbdf25050000000c00050003000000000000000c00060005000000000000000c00030000010000000000000c0004000000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xac) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x80003, 0x8002fc) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) io_uring_setup$auto(0xc, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x401, r4, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x200ffffffff, 0x9, 0x5, 0x0, 0x7, 0x8}, 0x9) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xffff7ffe, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pnp0/00:05/power/wakeup_expire_count\x00', 0xc0000, 0x0) kernel console output (not intermixed with test programs): ? bpf_ksym_find+0x124/0x1c0 [ 1432.802552][T26447] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1432.802590][T26447] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1432.802627][T26447] ? is_bpf_text_address+0x94/0x1a0 [ 1432.802678][T26447] ? __kernel_text_address+0xd/0x30 [ 1432.802726][T26447] ? unwind_get_return_address+0x59/0xa0 [ 1432.802783][T26447] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1432.802820][T26447] ? policy_nodemask+0xed/0x4f0 [ 1432.802868][T26447] alloc_pages_mpol+0x1fb/0x550 [ 1432.802921][T26447] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1432.802963][T26447] ? kasan_save_stack+0x30/0x50 [ 1432.803000][T26447] ? __kasan_kmalloc+0xaa/0xb0 [ 1432.803035][T26447] ? __get_vm_area_node+0x101/0x330 [ 1432.803079][T26447] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1432.803108][T26447] ? __vmalloc_node_noprof+0xad/0xf0 [ 1432.803135][T26447] ? n_tty_open+0x1a/0x170 [ 1432.803173][T26447] alloc_pages_noprof+0x131/0x390 [ 1432.803230][T26447] get_free_pages_noprof+0x10/0xb0 [ 1432.803272][T26447] __kasan_populate_vmalloc+0xa0/0x210 [ 1432.803321][T26447] alloc_vmap_area+0x935/0x2a00 [ 1432.803382][T26447] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1432.803438][T26447] __get_vm_area_node+0x1ca/0x330 [ 1432.803493][T26447] __vmalloc_node_range_noprof+0x213/0x1530 [ 1432.803526][T26447] ? n_tty_open+0x1a/0x170 [ 1432.803559][T26447] ? look_up_lock_class+0x55/0x120 [ 1432.803603][T26447] ? n_tty_open+0x1a/0x170 [ 1432.803648][T26447] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1432.803681][T26447] ? __ldsem_down_write_nested+0xfd/0x830 [ 1432.803713][T26447] ? __ldsem_down_write_nested+0x10e/0x830 [ 1432.803745][T26447] ? is_console_locked+0x9/0x20 [ 1432.803791][T26447] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1432.803832][T26447] ? n_tty_open+0x1a/0x170 [ 1432.803862][T26447] __vmalloc_node_noprof+0xad/0xf0 [ 1432.803892][T26447] ? n_tty_open+0x1a/0x170 [ 1432.803925][T26447] ? __pfx_n_tty_open+0x10/0x10 [ 1432.803957][T26447] n_tty_open+0x1a/0x170 [ 1432.803990][T26447] tty_ldisc_open+0xa2/0x120 [ 1432.804031][T26447] tty_ldisc_setup+0x40/0xf0 [ 1432.804076][T26447] tty_init_dev.part.0+0x1b5/0x470 [ 1432.804111][T26447] tty_open+0xa63/0xfa0 [ 1432.804146][T26447] ? __pfx_tty_open+0x10/0x10 [ 1432.804173][T26447] ? chrdev_open+0x10b/0x6a0 [ 1432.804226][T26447] ? chrdev_open+0x10b/0x6a0 [ 1432.804272][T26447] ? __pfx_tty_open+0x10/0x10 [ 1432.804301][T26447] chrdev_open+0x234/0x6a0 [ 1432.804339][T26447] ? __pfx_apparmor_file_open+0x10/0x10 [ 1432.804383][T26447] ? __pfx_chrdev_open+0x10/0x10 [ 1432.804425][T26447] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1432.804472][T26447] do_dentry_open+0x73e/0x1570 [ 1432.804509][T26447] ? __pfx_chrdev_open+0x10/0x10 [ 1432.804548][T26447] ? security_inode_permission+0xbf/0x250 [ 1432.804602][T26447] vfs_open+0x82/0x3f0 [ 1432.804654][T26447] path_openat+0x21dc/0x3120 [ 1432.804708][T26447] ? __pfx_path_openat+0x10/0x10 [ 1432.804763][T26447] do_filp_open+0x1f7/0x420 [ 1432.804805][T26447] ? __pfx_do_filp_open+0x10/0x10 [ 1432.804875][T26447] ? _raw_spin_unlock+0x28/0x50 [ 1432.804907][T26447] ? alloc_fd+0x476/0x790 [ 1432.804954][T26447] do_sys_openat2+0x12e/0x220 [ 1432.804998][T26447] ? __pfx_do_sys_openat2+0x10/0x10 [ 1432.805063][T26447] __x64_sys_openat+0x12d/0x210 [ 1432.805113][T26447] ? __pfx___x64_sys_openat+0x10/0x10 [ 1432.805158][T26447] ? xfd_validate_state+0x129/0x190 [ 1432.805234][T26447] do_syscall_64+0xc9/0xf80 [ 1432.805276][T26447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.805308][T26447] RIP: 0033:0x7fafac39aeb9 [ 1432.805337][T26447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1432.805368][T26447] RSP: 002b:00007fafad20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1432.805400][T26447] RAX: ffffffffffffffda RBX: 00007fafac615fa0 RCX: 00007fafac39aeb9 [ 1432.805420][T26447] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1432.805437][T26447] RBP: 00007fafac408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1432.805457][T26447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1432.805476][T26447] R13: 00007fafac616038 R14: 00007fafac615fa0 R15: 00007ffdb630fd98 [ 1432.805520][T26447] [ 1433.347015][T26447] tty tty6: ldisc open failed (-12), clearing slot 5 [ 1435.626849][T26481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4025'. [ 1435.943141][T26484] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1436.043200][T26493] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 1436.521285][T26500] FAULT_INJECTION: forcing a failure. [ 1436.521285][T26500] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1436.548602][T26500] CPU: 0 UID: 0 PID: 26500 Comm: syz.2.4030 Not tainted syzkaller #0 PREEMPT(full) [ 1436.548648][T26500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1436.548667][T26500] Call Trace: [ 1436.548677][T26500] [ 1436.548691][T26500] dump_stack_lvl+0x100/0x190 [ 1436.548741][T26500] should_fail_ex.cold+0x5/0xa [ 1436.548783][T26500] ? prepare_alloc_pages+0x16d/0x5f0 [ 1436.548834][T26500] should_fail_alloc_page+0xeb/0x140 [ 1436.548880][T26500] prepare_alloc_pages+0x1f0/0x5f0 [ 1436.548933][T26500] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1436.548981][T26500] ? find_held_lock+0x2b/0x80 [ 1436.549011][T26500] ? is_bpf_text_address+0x8a/0x1a0 [ 1436.549059][T26500] ? is_bpf_text_address+0x8a/0x1a0 [ 1436.549107][T26500] ? bpf_ksym_find+0x124/0x1c0 [ 1436.549146][T26500] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1436.549184][T26500] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1436.549230][T26500] ? is_bpf_text_address+0x94/0x1a0 [ 1436.549281][T26500] ? __kernel_text_address+0xd/0x30 [ 1436.549328][T26500] ? unwind_get_return_address+0x59/0xa0 [ 1436.549387][T26500] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1436.549424][T26500] ? policy_nodemask+0xed/0x4f0 [ 1436.549471][T26500] alloc_pages_mpol+0x1fb/0x550 [ 1436.549517][T26500] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1436.549556][T26500] ? kasan_save_stack+0x30/0x50 [ 1436.549591][T26500] ? __kasan_kmalloc+0xaa/0xb0 [ 1436.549625][T26500] ? __get_vm_area_node+0x101/0x330 [ 1436.549668][T26500] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1436.549697][T26500] ? __vmalloc_node_noprof+0xad/0xf0 [ 1436.549723][T26500] ? n_tty_open+0x1a/0x170 [ 1436.549760][T26500] alloc_pages_noprof+0x131/0x390 [ 1436.549807][T26500] get_free_pages_noprof+0x10/0xb0 [ 1436.549849][T26500] __kasan_populate_vmalloc+0xa0/0x210 [ 1436.549897][T26500] alloc_vmap_area+0x935/0x2a00 [ 1436.549958][T26500] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1436.550016][T26500] __get_vm_area_node+0x1ca/0x330 [ 1436.550072][T26500] __vmalloc_node_range_noprof+0x213/0x1530 [ 1436.550102][T26500] ? n_tty_open+0x1a/0x170 [ 1436.550134][T26500] ? look_up_lock_class+0x55/0x120 [ 1436.550176][T26500] ? n_tty_open+0x1a/0x170 [ 1436.550229][T26500] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1436.550261][T26500] ? __ldsem_down_write_nested+0xfd/0x830 [ 1436.550293][T26500] ? __ldsem_down_write_nested+0x10e/0x830 [ 1436.550324][T26500] ? is_console_locked+0x9/0x20 [ 1436.550370][T26500] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1436.550410][T26500] ? n_tty_open+0x1a/0x170 [ 1436.550438][T26500] __vmalloc_node_noprof+0xad/0xf0 [ 1436.550467][T26500] ? n_tty_open+0x1a/0x170 [ 1436.550499][T26500] ? __pfx_n_tty_open+0x10/0x10 [ 1436.550531][T26500] n_tty_open+0x1a/0x170 [ 1436.550563][T26500] tty_ldisc_open+0xa2/0x120 [ 1436.550606][T26500] tty_ldisc_setup+0x40/0xf0 [ 1436.550650][T26500] tty_init_dev.part.0+0x1b5/0x470 [ 1436.550684][T26500] tty_open+0xa63/0xfa0 [ 1436.550719][T26500] ? __pfx_tty_open+0x10/0x10 [ 1436.550750][T26500] ? chrdev_open+0x10b/0x6a0 [ 1436.550787][T26500] ? chrdev_open+0x10b/0x6a0 [ 1436.550831][T26500] ? __pfx_tty_open+0x10/0x10 [ 1436.550859][T26500] chrdev_open+0x234/0x6a0 [ 1436.550896][T26500] ? __pfx_apparmor_file_open+0x10/0x10 [ 1436.550937][T26500] ? __pfx_chrdev_open+0x10/0x10 [ 1436.550978][T26500] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1436.551026][T26500] do_dentry_open+0x73e/0x1570 [ 1436.551062][T26500] ? __pfx_chrdev_open+0x10/0x10 [ 1436.551100][T26500] ? security_inode_permission+0xbf/0x250 [ 1436.551155][T26500] vfs_open+0x82/0x3f0 [ 1436.551214][T26500] path_openat+0x21dc/0x3120 [ 1436.551266][T26500] ? __pfx_path_openat+0x10/0x10 [ 1436.551321][T26500] do_filp_open+0x1f7/0x420 [ 1436.551362][T26500] ? __pfx_do_filp_open+0x10/0x10 [ 1436.551431][T26500] ? _raw_spin_unlock+0x28/0x50 [ 1436.551460][T26500] ? alloc_fd+0x476/0x790 [ 1436.551509][T26500] do_sys_openat2+0x12e/0x220 [ 1436.551555][T26500] ? __pfx_do_sys_openat2+0x10/0x10 [ 1436.551620][T26500] __x64_sys_openat+0x12d/0x210 [ 1436.551669][T26500] ? __pfx___x64_sys_openat+0x10/0x10 [ 1436.551735][T26500] do_syscall_64+0xc9/0xf80 [ 1436.551776][T26500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.551808][T26500] RIP: 0033:0x7fafac39aeb9 [ 1436.551835][T26500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.551864][T26500] RSP: 002b:00007fafad20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1436.551895][T26500] RAX: ffffffffffffffda RBX: 00007fafac615fa0 RCX: 00007fafac39aeb9 [ 1436.551916][T26500] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1436.551936][T26500] RBP: 00007fafac408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1436.551955][T26500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1436.551973][T26500] R13: 00007fafac616038 R14: 00007fafac615fa0 R15: 00007ffdb630fd98 [ 1436.552018][T26500] [ 1437.028910][T26501] Line length is too long: Should be less than 4094 [ 1437.059971][T26500] warn_alloc: 1 callbacks suppressed [ 1437.059997][T26500] syz.2.4030: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1437.080901][T26500] CPU: 1 UID: 0 PID: 26500 Comm: syz.2.4030 Not tainted syzkaller #0 PREEMPT(full) [ 1437.080947][T26500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1437.080966][T26500] Call Trace: [ 1437.080978][T26500] [ 1437.080991][T26500] dump_stack_lvl+0x100/0x190 [ 1437.081034][T26500] warn_alloc.cold+0x95/0x1c1 [ 1437.081088][T26500] ? __pfx_warn_alloc+0x10/0x10 [ 1437.081127][T26500] ? kfree+0x1c7/0x690 [ 1437.081159][T26500] ? __get_vm_area_node+0x2c5/0x330 [ 1437.081211][T26500] ? __get_vm_area_node+0x2c5/0x330 [ 1437.081256][T26500] ? __get_vm_area_node+0x1dc/0x330 [ 1437.081300][T26500] ? __get_vm_area_node+0x208/0x330 [ 1437.081356][T26500] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1437.081390][T26500] ? look_up_lock_class+0x55/0x120 [ 1437.081433][T26500] ? n_tty_open+0x1a/0x170 [ 1437.081489][T26500] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1437.081521][T26500] ? __ldsem_down_write_nested+0xfd/0x830 [ 1437.081554][T26500] ? __ldsem_down_write_nested+0x10e/0x830 [ 1437.081586][T26500] ? is_console_locked+0x9/0x20 [ 1437.081632][T26500] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1437.081671][T26500] ? n_tty_open+0x1a/0x170 [ 1437.081701][T26500] __vmalloc_node_noprof+0xad/0xf0 [ 1437.081730][T26500] ? n_tty_open+0x1a/0x170 [ 1437.081764][T26500] ? __pfx_n_tty_open+0x10/0x10 [ 1437.081795][T26500] n_tty_open+0x1a/0x170 [ 1437.081828][T26500] tty_ldisc_open+0xa2/0x120 [ 1437.081869][T26500] tty_ldisc_setup+0x40/0xf0 [ 1437.081919][T26500] tty_init_dev.part.0+0x1b5/0x470 [ 1437.081954][T26500] tty_open+0xa63/0xfa0 [ 1437.081989][T26500] ? __pfx_tty_open+0x10/0x10 [ 1437.082015][T26500] ? chrdev_open+0x10b/0x6a0 [ 1437.082051][T26500] ? chrdev_open+0x10b/0x6a0 [ 1437.082096][T26500] ? __pfx_tty_open+0x10/0x10 [ 1437.082123][T26500] chrdev_open+0x234/0x6a0 [ 1437.082160][T26500] ? __pfx_apparmor_file_open+0x10/0x10 [ 1437.082200][T26500] ? __pfx_chrdev_open+0x10/0x10 [ 1437.082241][T26500] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1437.082287][T26500] do_dentry_open+0x73e/0x1570 [ 1437.082324][T26500] ? __pfx_chrdev_open+0x10/0x10 [ 1437.082362][T26500] ? security_inode_permission+0xbf/0x250 [ 1437.082415][T26500] vfs_open+0x82/0x3f0 [ 1437.082475][T26500] path_openat+0x21dc/0x3120 [ 1437.082529][T26500] ? __pfx_path_openat+0x10/0x10 [ 1437.082585][T26500] do_filp_open+0x1f7/0x420 [ 1437.082628][T26500] ? __pfx_do_filp_open+0x10/0x10 [ 1437.082697][T26500] ? _raw_spin_unlock+0x28/0x50 [ 1437.082729][T26500] ? alloc_fd+0x476/0x790 [ 1437.082778][T26500] do_sys_openat2+0x12e/0x220 [ 1437.082827][T26500] ? __pfx_do_sys_openat2+0x10/0x10 [ 1437.082891][T26500] __x64_sys_openat+0x12d/0x210 [ 1437.082939][T26500] ? __pfx___x64_sys_openat+0x10/0x10 [ 1437.083005][T26500] do_syscall_64+0xc9/0xf80 [ 1437.083050][T26500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.083083][T26500] RIP: 0033:0x7fafac39aeb9 [ 1437.083110][T26500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1437.083139][T26500] RSP: 002b:00007fafad20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1437.083172][T26500] RAX: ffffffffffffffda RBX: 00007fafac615fa0 RCX: 00007fafac39aeb9 [ 1437.083192][T26500] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1437.083210][T26500] RBP: 00007fafac408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1437.083229][T26500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1437.083246][T26500] R13: 00007fafac616038 R14: 00007fafac615fa0 R15: 00007ffdb630fd98 [ 1437.083290][T26500] [ 1437.083403][T26500] Mem-Info: [ 1437.529591][T26500] active_anon:4294 inactive_anon:26709 isolated_anon:0 [ 1437.529591][T26500] active_file:23487 inactive_file:37809 isolated_file:0 [ 1437.529591][T26500] unevictable:768 dirty:787 writeback:0 [ 1437.529591][T26500] slab_reclaimable:13002 slab_unreclaimable:97445 [ 1437.529591][T26500] mapped:36280 shmem:18775 pagetables:1640 [ 1437.529591][T26500] sec_pagetables:0 bounce:0 [ 1437.529591][T26500] kernel_misc_reclaimable:0 [ 1437.529591][T26500] free:1286911 free_pcp:11366 free_cma:0 [ 1437.599705][T26500] Node 0 active_anon:17176kB inactive_anon:106736kB active_file:93932kB inactive_file:151100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123004kB dirty:3148kB writeback:0kB shmem:73564kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11760kB pagetables:6436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1437.688739][T26500] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1437.750145][T26500] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1437.834927][T26500] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1437.854108][T26500] Node 0 DMA32 free:1242836kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17076kB inactive_anon:100936kB active_file:93932kB inactive_file:151100kB unevictable:1536kB writepending:3148kB zspages:28kB present:3129332kB managed:2539572kB mlocked:0kB bounce:0kB free_pcp:37212kB local_pcp:25640kB free_cma:0kB [ 1437.944674][T26500] lowmem_reserve[]: 0 0 1 1 1 [ 1437.961446][T26500] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1438.018296][T26500] lowmem_reserve[]: 0 0 0 0 0 [ 1438.089670][T26500] Node 1 Normal free:3889448kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14580kB local_pcp:752kB free_cma:0kB [ 1438.310816][T26500] lowmem_reserve[]: 0 0 0 0 0 [ 1438.331605][T26500] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1438.398019][T26500] Node 0 DMA32: 5426*4kB (UM) 5386*8kB (UM) 3256*16kB (UME) 403*32kB (UME) 289*64kB (UME) 305*128kB (UME) 282*256kB (UME) 182*512kB (UME) 112*1024kB (UM) 18*2048kB (UE) 188*4096kB (UM) = 1274296kB [ 1438.483707][T26500] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1438.599952][T26500] Node 1 Normal: 7*4kB (UE) 9*8kB (UE) 8*16kB (UE) 200*32kB (UME) 107*64kB (UE) 31*128kB (UME) 8*256kB (UME) 5*512kB (UME) 1*1024kB (U) 2*2048kB (UE) 943*4096kB (M) = 3889700kB [ 1438.679363][T26500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1438.694417][T26500] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1438.705265][T26500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1438.739951][T26500] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1438.749342][T26500] 63458 total pagecache pages [ 1438.790021][T26500] 0 pages in swap cache [ 1438.794754][T26500] Free swap = 124996kB [ 1438.798978][T26500] Total swap = 124996kB [ 1438.830508][T26500] 2097051 pages RAM [ 1438.834391][T26500] 0 pages HighMem/MovableOnly [ 1438.839546][T26500] 430196 pages reserved [ 1438.871758][T26500] 0 pages cma reserved [ 1438.881892][T26500] tty tty6: ldisc open failed (-12), clearing slot 5 [ 1438.946863][T21166] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 586 with max blocks 2 with error 117 [ 1438.962498][T21166] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1438.962498][T21166] [ 1438.981166][T21166] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 952 with max blocks 44 with error 117 [ 1439.016227][T21166] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1439.016227][T21166] [ 1439.033429][T21166] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 5 with max blocks 2 with error 117 [ 1439.046248][T21166] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1439.046248][T21166] [ 1439.161885][T21166] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 982 with max blocks 14 with error 117 [ 1439.187521][T21166] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1439.187521][T21166] [ 1439.199574][T21166] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 592 with max blocks 1 with error 117 [ 1439.214579][T21166] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1439.214579][T21166] [ 1439.578247][T26537] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 1440.410479][T26554] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1440.608773][T26566] FAULT_INJECTION: forcing a failure. [ 1440.608773][T26566] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.636964][T26566] CPU: 1 UID: 0 PID: 26566 Comm: syz.0.4047 Not tainted syzkaller #0 PREEMPT(full) [ 1440.637033][T26566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1440.637051][T26566] Call Trace: [ 1440.637062][T26566] [ 1440.637075][T26566] dump_stack_lvl+0x100/0x190 [ 1440.637118][T26566] should_fail_ex.cold+0x5/0xa [ 1440.637168][T26566] should_failslab+0xc2/0x120 [ 1440.637210][T26566] __kmalloc_cache_noprof+0x80/0x810 [ 1440.637244][T26566] ? proc_thread_self_get_link+0x1a6/0x210 [ 1440.637296][T26566] ? proc_thread_self_get_link+0x1a6/0x210 [ 1440.637339][T26566] proc_thread_self_get_link+0x1a6/0x210 [ 1440.637385][T26566] pick_link+0xac2/0x13c0 [ 1440.637410][T26566] ? link_path_walk+0xf28/0x1cc0 [ 1440.637450][T26566] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1440.637501][T26566] step_into_slowpath+0x6c2/0xf50 [ 1440.637542][T26566] ? __pfx_step_into_slowpath+0x10/0x10 [ 1440.637581][T26566] ? lookup_fast+0x2da/0x600 [ 1440.637606][T26566] ? inode_permission+0x374/0x630 [ 1440.637656][T26566] link_path_walk+0xf28/0x1cc0 [ 1440.637702][T26566] path_openat+0x1be/0x3120 [ 1440.637736][T26566] ? getname_flags+0x93/0xf0 [ 1440.637764][T26566] ? do_sys_openat2+0xc5/0x220 [ 1440.637806][T26566] ? __x64_sys_openat+0x12d/0x210 [ 1440.637846][T26566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.637887][T26566] ? __pfx_path_openat+0x10/0x10 [ 1440.637940][T26566] do_filp_open+0x1f7/0x420 [ 1440.637981][T26566] ? __pfx_do_filp_open+0x10/0x10 [ 1440.638047][T26566] ? _raw_spin_unlock+0x28/0x50 [ 1440.638074][T26566] ? alloc_fd+0x476/0x790 [ 1440.638121][T26566] do_sys_openat2+0x12e/0x220 [ 1440.638165][T26566] ? __pfx_do_sys_openat2+0x10/0x10 [ 1440.638225][T26566] __x64_sys_openat+0x12d/0x210 [ 1440.638272][T26566] ? __pfx___x64_sys_openat+0x10/0x10 [ 1440.638314][T26566] ? xfd_validate_state+0x129/0x190 [ 1440.638374][T26566] do_syscall_64+0xc9/0xf80 [ 1440.638413][T26566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.638452][T26566] RIP: 0033:0x7f624cd9aeb9 [ 1440.638478][T26566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.638508][T26566] RSP: 002b:00007f624dd11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1440.638540][T26566] RAX: ffffffffffffffda RBX: 00007f624d015fa0 RCX: 00007f624cd9aeb9 [ 1440.638561][T26566] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1440.638582][T26566] RBP: 00007f624ce08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1440.638601][T26566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.638620][T26566] R13: 00007f624d016038 R14: 00007f624d015fa0 R15: 00007ffd5b4a8e48 [ 1440.638663][T26566] [ 1442.103480][T26591] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 1442.769455][T26608] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1443.003539][T26614] FAULT_INJECTION: forcing a failure. [ 1443.003539][T26614] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1443.033984][T26614] CPU: 1 UID: 0 PID: 26614 Comm: syz.0.4059 Not tainted syzkaller #0 PREEMPT(full) [ 1443.034012][T26614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1443.034023][T26614] Call Trace: [ 1443.034030][T26614] [ 1443.034038][T26614] dump_stack_lvl+0x100/0x190 [ 1443.034065][T26614] should_fail_ex.cold+0x5/0xa [ 1443.034092][T26614] ? prepare_alloc_pages+0x16d/0x5f0 [ 1443.034122][T26614] should_fail_alloc_page+0xeb/0x140 [ 1443.034154][T26614] prepare_alloc_pages+0x1f0/0x5f0 [ 1443.034186][T26614] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1443.034214][T26614] ? find_held_lock+0x2b/0x80 [ 1443.034232][T26614] ? is_bpf_text_address+0x8a/0x1a0 [ 1443.034261][T26614] ? is_bpf_text_address+0x8a/0x1a0 [ 1443.034290][T26614] ? bpf_ksym_find+0x124/0x1c0 [ 1443.034313][T26614] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1443.034335][T26614] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1443.034356][T26614] ? is_bpf_text_address+0x94/0x1a0 [ 1443.034387][T26614] ? __kernel_text_address+0xd/0x30 [ 1443.034422][T26614] ? unwind_get_return_address+0x59/0xa0 [ 1443.034454][T26614] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1443.034476][T26614] ? policy_nodemask+0xed/0x4f0 [ 1443.034505][T26614] alloc_pages_mpol+0x1fb/0x550 [ 1443.034532][T26614] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1443.034557][T26614] ? kasan_save_stack+0x30/0x50 [ 1443.034579][T26614] ? __kasan_kmalloc+0xaa/0xb0 [ 1443.034599][T26614] ? __get_vm_area_node+0x101/0x330 [ 1443.034625][T26614] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1443.034642][T26614] ? __vmalloc_node_noprof+0xad/0xf0 [ 1443.034657][T26614] ? n_tty_open+0x1a/0x170 [ 1443.034679][T26614] alloc_pages_noprof+0x131/0x390 [ 1443.034707][T26614] get_free_pages_noprof+0x10/0xb0 [ 1443.034745][T26614] __kasan_populate_vmalloc+0xa0/0x210 [ 1443.034774][T26614] alloc_vmap_area+0x935/0x2a00 [ 1443.034813][T26614] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1443.034847][T26614] __get_vm_area_node+0x1ca/0x330 [ 1443.034887][T26614] __vmalloc_node_range_noprof+0x213/0x1530 [ 1443.034906][T26614] ? n_tty_open+0x1a/0x170 [ 1443.034925][T26614] ? look_up_lock_class+0x55/0x120 [ 1443.034958][T26614] ? n_tty_open+0x1a/0x170 [ 1443.034998][T26614] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1443.035027][T26614] ? __ldsem_down_write_nested+0xfd/0x830 [ 1443.035063][T26614] ? __ldsem_down_write_nested+0x10e/0x830 [ 1443.035082][T26614] ? is_console_locked+0x9/0x20 [ 1443.035109][T26614] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1443.035132][T26614] ? n_tty_open+0x1a/0x170 [ 1443.035151][T26614] __vmalloc_node_noprof+0xad/0xf0 [ 1443.035170][T26614] ? n_tty_open+0x1a/0x170 [ 1443.035189][T26614] ? __pfx_n_tty_open+0x10/0x10 [ 1443.035207][T26614] n_tty_open+0x1a/0x170 [ 1443.035225][T26614] tty_ldisc_open+0xa2/0x120 [ 1443.035250][T26614] tty_ldisc_setup+0x40/0xf0 [ 1443.035276][T26614] tty_init_dev.part.0+0x1b5/0x470 [ 1443.035295][T26614] tty_open+0xa63/0xfa0 [ 1443.035315][T26614] ? __pfx_tty_open+0x10/0x10 [ 1443.035330][T26614] ? chrdev_open+0x10b/0x6a0 [ 1443.035352][T26614] ? chrdev_open+0x10b/0x6a0 [ 1443.035377][T26614] ? __pfx_tty_open+0x10/0x10 [ 1443.035393][T26614] chrdev_open+0x234/0x6a0 [ 1443.035423][T26614] ? __pfx_apparmor_file_open+0x10/0x10 [ 1443.035447][T26614] ? __pfx_chrdev_open+0x10/0x10 [ 1443.035471][T26614] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1443.035499][T26614] do_dentry_open+0x73e/0x1570 [ 1443.035522][T26614] ? __pfx_chrdev_open+0x10/0x10 [ 1443.035544][T26614] ? security_inode_permission+0xbf/0x250 [ 1443.035576][T26614] vfs_open+0x82/0x3f0 [ 1443.035606][T26614] path_openat+0x21dc/0x3120 [ 1443.035636][T26614] ? __pfx_path_openat+0x10/0x10 [ 1443.035667][T26614] do_filp_open+0x1f7/0x420 [ 1443.035691][T26614] ? __pfx_do_filp_open+0x10/0x10 [ 1443.035729][T26614] ? _raw_spin_unlock+0x28/0x50 [ 1443.035747][T26614] ? alloc_fd+0x476/0x790 [ 1443.035774][T26614] do_sys_openat2+0x12e/0x220 [ 1443.035803][T26614] ? __pfx_do_sys_openat2+0x10/0x10 [ 1443.035839][T26614] __x64_sys_openat+0x12d/0x210 [ 1443.035868][T26614] ? __pfx___x64_sys_openat+0x10/0x10 [ 1443.035895][T26614] ? xfd_validate_state+0x129/0x190 [ 1443.035934][T26614] do_syscall_64+0xc9/0xf80 [ 1443.035958][T26614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.035977][T26614] RIP: 0033:0x7f624cd9aeb9 [ 1443.035994][T26614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.036012][T26614] RSP: 002b:00007f624dd11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1443.036032][T26614] RAX: ffffffffffffffda RBX: 00007f624d015fa0 RCX: 00007f624cd9aeb9 [ 1443.036044][T26614] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1443.036055][T26614] RBP: 00007f624ce08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1443.036066][T26614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1443.036079][T26614] R13: 00007f624d016038 R14: 00007f624d015fa0 R15: 00007ffd5b4a8e48 [ 1443.036120][T26614] [ 1443.569619][T26614] tty tty6: ldisc open failed (-12), clearing slot 5 [ 1443.576030][T26615] Line length is too long: Should be less than 4094 [ 1443.779556][T26612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4058'. [ 1446.227841][T26658] FAULT_INJECTION: forcing a failure. [ 1446.227841][T26658] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.271353][T26658] CPU: 1 UID: 0 PID: 26658 Comm: syz.4.4071 Not tainted syzkaller #0 PREEMPT(full) [ 1446.271405][T26658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1446.271424][T26658] Call Trace: [ 1446.271436][T26658] [ 1446.271449][T26658] dump_stack_lvl+0x100/0x190 [ 1446.271494][T26658] should_fail_ex.cold+0x5/0xa [ 1446.271547][T26658] should_failslab+0xc2/0x120 [ 1446.271590][T26658] __kmalloc_cache_noprof+0x80/0x810 [ 1446.271624][T26658] ? proc_thread_self_get_link+0x1a6/0x210 [ 1446.271676][T26658] ? proc_thread_self_get_link+0x1a6/0x210 [ 1446.271718][T26658] proc_thread_self_get_link+0x1a6/0x210 [ 1446.271761][T26658] pick_link+0xac2/0x13c0 [ 1446.271787][T26658] ? link_path_walk+0xf28/0x1cc0 [ 1446.271817][T26658] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1446.271867][T26658] step_into_slowpath+0x6c2/0xf50 [ 1446.271906][T26658] ? __pfx_step_into_slowpath+0x10/0x10 [ 1446.271944][T26658] ? lookup_fast+0x2da/0x600 [ 1446.271970][T26658] ? inode_permission+0x374/0x630 [ 1446.272021][T26658] link_path_walk+0xf28/0x1cc0 [ 1446.272068][T26658] path_openat+0x1be/0x3120 [ 1446.272101][T26658] ? getname_flags+0x93/0xf0 [ 1446.272141][T26658] ? do_sys_openat2+0xc5/0x220 [ 1446.272183][T26658] ? __x64_sys_openat+0x12d/0x210 [ 1446.272229][T26658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.272274][T26658] ? __pfx_path_openat+0x10/0x10 [ 1446.272325][T26658] do_filp_open+0x1f7/0x420 [ 1446.272365][T26658] ? __pfx_do_filp_open+0x10/0x10 [ 1446.272432][T26658] ? _raw_spin_unlock+0x28/0x50 [ 1446.272463][T26658] ? alloc_fd+0x476/0x790 [ 1446.272509][T26658] do_sys_openat2+0x12e/0x220 [ 1446.272555][T26658] ? __pfx_do_sys_openat2+0x10/0x10 [ 1446.272617][T26658] __x64_sys_openat+0x12d/0x210 [ 1446.272665][T26658] ? __pfx___x64_sys_openat+0x10/0x10 [ 1446.272704][T26658] ? xfd_validate_state+0x129/0x190 [ 1446.272746][T26658] do_syscall_64+0xc9/0xf80 [ 1446.272770][T26658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.272789][T26658] RIP: 0033:0x7f5f1459aeb9 [ 1446.272805][T26658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.272822][T26658] RSP: 002b:00007f5f1544c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1446.272841][T26658] RAX: ffffffffffffffda RBX: 00007f5f14815fa0 RCX: 00007f5f1459aeb9 [ 1446.272852][T26658] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1446.272863][T26658] RBP: 00007f5f14608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1446.272874][T26658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1446.272884][T26658] R13: 00007f5f14816038 R14: 00007f5f14815fa0 R15: 00007fff730e6c68 [ 1446.272908][T26658] [ 1447.781389][T26681] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 1447.861807][T26684] FAULT_INJECTION: forcing a failure. [ 1447.861807][T26684] name failslab, interval 1, probability 0, space 0, times 0 [ 1447.879057][T26684] CPU: 0 UID: 0 PID: 26684 Comm: syz.4.4077 Tainted: G L syzkaller #0 PREEMPT(full) [ 1447.879105][T26684] Tainted: [L]=SOFTLOCKUP [ 1447.879115][T26684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1447.879142][T26684] Call Trace: [ 1447.879153][T26684] [ 1447.879164][T26684] dump_stack_lvl+0x100/0x190 [ 1447.879206][T26684] should_fail_ex.cold+0x5/0xa [ 1447.879252][T26684] should_failslab+0xc2/0x120 [ 1447.879289][T26684] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1447.879316][T26684] __kmalloc_noprof+0xf6/0x9c0 [ 1447.879356][T26684] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1447.879382][T26684] tomoyo_realpath_from_path+0xb6/0x690 [ 1447.879419][T26684] tomoyo_path_number_perm+0x23c/0x580 [ 1447.879467][T26684] ? tomoyo_path_number_perm+0x22e/0x580 [ 1447.879507][T26684] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1447.879562][T26684] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1447.879617][T26684] ? hook_file_ioctl_common+0x146/0x410 [ 1447.879676][T26684] security_file_ioctl+0xd3/0x230 [ 1447.879717][T26684] __x64_sys_ioctl+0xb7/0x210 [ 1447.879763][T26684] do_syscall_64+0xc9/0xf80 [ 1447.879800][T26684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.879828][T26684] RIP: 0033:0x7f5f1459aeb9 [ 1447.879851][T26684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1447.879877][T26684] RSP: 002b:00007f5f1542b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1447.879905][T26684] RAX: ffffffffffffffda RBX: 00007f5f14816090 RCX: 00007f5f1459aeb9 [ 1447.879923][T26684] RDX: 0000000000000000 RSI: 000000004048aecb RDI: 0000000000000004 [ 1447.879940][T26684] RBP: 00007f5f1542b090 R08: 0000000000000000 R09: 0000000000000000 [ 1447.879956][T26684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1447.879972][T26684] R13: 00007f5f14816128 R14: 00007f5f14816090 R15: 00007fff730e6c68 [ 1447.880012][T26684] [ 1447.880095][T26684] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1448.198389][T26695] : Can't lookup blockdev [ 1448.837957][T26714] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 1450.354395][T26738] FAULT_INJECTION: forcing a failure. [ 1450.354395][T26738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1450.391236][T26738] CPU: 1 UID: 0 PID: 26738 Comm: syz.0.4092 Tainted: G L syzkaller #0 PREEMPT(full) [ 1450.391279][T26738] Tainted: [L]=SOFTLOCKUP [ 1450.391289][T26738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1450.391306][T26738] Call Trace: [ 1450.391315][T26738] [ 1450.391326][T26738] dump_stack_lvl+0x100/0x190 [ 1450.391372][T26738] should_fail_ex.cold+0x5/0xa [ 1450.391417][T26738] _copy_from_user+0x2e/0xd0 [ 1450.391460][T26738] copy_msghdr_from_user+0x9f/0x4f0 [ 1450.391493][T26738] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1450.391531][T26738] ? _kstrtoull+0x13c/0x1f0 [ 1450.391560][T26738] ? __pfx__kstrtoull+0x10/0x10 [ 1450.391596][T26738] ___sys_sendmsg+0x106/0x1e0 [ 1450.391631][T26738] ? __pfx____sys_sendmsg+0x10/0x10 [ 1450.391699][T26738] ? __pfx___might_resched+0x10/0x10 [ 1450.391754][T26738] __sys_sendmmsg+0x205/0x430 [ 1450.391803][T26738] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1450.391857][T26738] ? __fget_files+0x215/0x3d0 [ 1450.391889][T26738] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1450.391944][T26738] ? fput+0x79/0x100 [ 1450.391983][T26738] ? ksys_write+0x1ac/0x250 [ 1450.392015][T26738] ? __pfx_ksys_write+0x10/0x10 [ 1450.392054][T26738] __x64_sys_sendmmsg+0x9c/0x100 [ 1450.392097][T26738] ? lockdep_hardirqs_on+0x78/0x100 [ 1450.392130][T26738] do_syscall_64+0xc9/0xf80 [ 1450.392169][T26738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.392198][T26738] RIP: 0033:0x7f624cd9aeb9 [ 1450.392222][T26738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1450.392254][T26738] RSP: 002b:00007f624dd11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1450.392283][T26738] RAX: ffffffffffffffda RBX: 00007f624d015fa0 RCX: 00007f624cd9aeb9 [ 1450.392302][T26738] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 1450.392319][T26738] RBP: 00007f624dd11090 R08: 0000000000000000 R09: 0000000000000000 [ 1450.392336][T26738] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 1450.392354][T26738] R13: 00007f624d016038 R14: 00007f624d015fa0 R15: 00007ffd5b4a8e48 [ 1450.392403][T26738] [ 1450.810344][T26745] binder: 26744:26745 ioctl c0306201 200000000000 returned -11 [ 1451.719827][T26770] FAULT_INJECTION: forcing a failure. [ 1451.719827][T26770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.733100][T26770] CPU: 0 UID: 0 PID: 26770 Comm: syz.4.4101 Tainted: G L syzkaller #0 PREEMPT(full) [ 1451.733145][T26770] Tainted: [L]=SOFTLOCKUP [ 1451.733155][T26770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1451.733166][T26770] Call Trace: [ 1451.733173][T26770] [ 1451.733180][T26770] dump_stack_lvl+0x100/0x190 [ 1451.733217][T26770] should_fail_ex.cold+0x5/0xa [ 1451.733260][T26770] _copy_from_iter+0x43a/0x1690 [ 1451.733294][T26770] ? __pfx__copy_from_iter+0x10/0x10 [ 1451.733323][T26770] ? rcu_is_watching+0x12/0xc0 [ 1451.733341][T26770] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 1451.733362][T26770] ? trace_kmalloc+0x83/0xb0 [ 1451.733386][T26770] ? __kmalloc_noprof+0x365/0x9c0 [ 1451.733404][T26770] ? __pfx_aa_file_perm+0x10/0x10 [ 1451.733430][T26770] kernfs_fop_write_iter+0x186/0x5f0 [ 1451.733448][T26770] ? copy_iovec_from_user+0x102/0x140 [ 1451.733477][T26770] do_iter_readv_writev+0x6ee/0x920 [ 1451.733499][T26770] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1451.733529][T26770] vfs_writev+0x360/0xe10 [ 1451.733550][T26770] ? trace_contention_end+0xd6/0x110 [ 1451.733580][T26770] ? __pfx_vfs_writev+0x10/0x10 [ 1451.733598][T26770] ? fdget_pos+0x2aa/0x380 [ 1451.733620][T26770] ? find_held_lock+0x2b/0x80 [ 1451.733651][T26770] ? __fget_files+0x21f/0x3d0 [ 1451.733678][T26770] ? do_writev+0x13e/0x340 [ 1451.733695][T26770] do_writev+0x13e/0x340 [ 1451.733715][T26770] ? __pfx_do_writev+0x10/0x10 [ 1451.733741][T26770] do_syscall_64+0xc9/0xf80 [ 1451.733766][T26770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.733786][T26770] RIP: 0033:0x7f5f1459aeb9 [ 1451.733802][T26770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.733821][T26770] RSP: 002b:00007f5f1544c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1451.733840][T26770] RAX: ffffffffffffffda RBX: 00007f5f14815fa0 RCX: 00007f5f1459aeb9 [ 1451.733852][T26770] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1451.733863][T26770] RBP: 00007f5f1544c090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.733874][T26770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.733885][T26770] R13: 00007f5f14816038 R14: 00007f5f14815fa0 R15: 00007fff730e6c68 [ 1451.733909][T26770] [ 1454.066228][T22241] EXT4-fs: 26 callbacks suppressed [ 1454.066247][T22241] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 979 with max blocks 17 with error 117 [ 1454.119802][T22241] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1454.119802][T22241] [ 1454.139131][T26802] futex_wake_op: syz.1.4110 tries to shift op by -2048; fix this program [ 1454.156422][T22241] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 950 with max blocks 46 with error 117 [ 1454.204566][T22241] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1454.204566][T22241] [ 1454.267361][T22241] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 586 with max blocks 1 with error 117 [ 1454.337705][T22241] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1454.337705][T22241] [ 1454.399037][T22241] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 978 with max blocks 2 with error 117 [ 1454.437828][T22241] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1454.437828][T22241] [ 1454.474772][T22241] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 588 with max blocks 3 with error 117 [ 1454.490542][T22241] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1454.490542][T22241] [ 1455.152435][T26816] FAULT_INJECTION: forcing a failure. [ 1455.152435][T26816] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1455.229451][T26816] CPU: 0 UID: 0 PID: 26816 Comm: syz.4.4113 Tainted: G L syzkaller #0 PREEMPT(full) [ 1455.229502][T26816] Tainted: [L]=SOFTLOCKUP [ 1455.229514][T26816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1455.229532][T26816] Call Trace: [ 1455.229543][T26816] [ 1455.229554][T26816] dump_stack_lvl+0x100/0x190 [ 1455.229598][T26816] should_fail_ex.cold+0x5/0xa [ 1455.229640][T26816] ? prepare_alloc_pages+0x16d/0x5f0 [ 1455.229691][T26816] should_fail_alloc_page+0xeb/0x140 [ 1455.229735][T26816] prepare_alloc_pages+0x1f0/0x5f0 [ 1455.229786][T26816] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1455.229828][T26816] ? find_held_lock+0x2b/0x80 [ 1455.229856][T26816] ? is_bpf_text_address+0x8a/0x1a0 [ 1455.229900][T26816] ? is_bpf_text_address+0x8a/0x1a0 [ 1455.229942][T26816] ? bpf_ksym_find+0x124/0x1c0 [ 1455.229975][T26816] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1455.230009][T26816] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1455.230043][T26816] ? is_bpf_text_address+0x94/0x1a0 [ 1455.230091][T26816] ? __kernel_text_address+0xd/0x30 [ 1455.230136][T26816] ? unwind_get_return_address+0x59/0xa0 [ 1455.230186][T26816] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1455.230220][T26816] ? policy_nodemask+0xed/0x4f0 [ 1455.230257][T26816] alloc_pages_mpol+0x1fb/0x550 [ 1455.230285][T26816] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1455.230309][T26816] ? kasan_save_stack+0x30/0x50 [ 1455.230330][T26816] ? __kasan_kmalloc+0xaa/0xb0 [ 1455.230350][T26816] ? __get_vm_area_node+0x101/0x330 [ 1455.230376][T26816] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1455.230392][T26816] ? __vmalloc_node_noprof+0xad/0xf0 [ 1455.230408][T26816] ? n_tty_open+0x1a/0x170 [ 1455.230438][T26816] alloc_pages_noprof+0x131/0x390 [ 1455.230465][T26816] get_free_pages_noprof+0x10/0xb0 [ 1455.230491][T26816] __kasan_populate_vmalloc+0xa0/0x210 [ 1455.230519][T26816] alloc_vmap_area+0x935/0x2a00 [ 1455.230554][T26816] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1455.230588][T26816] __get_vm_area_node+0x1ca/0x330 [ 1455.230621][T26816] __vmalloc_node_range_noprof+0x213/0x1530 [ 1455.230662][T26816] ? n_tty_open+0x1a/0x170 [ 1455.230682][T26816] ? look_up_lock_class+0x55/0x120 [ 1455.230708][T26816] ? n_tty_open+0x1a/0x170 [ 1455.230732][T26816] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1455.230756][T26816] ? __ldsem_down_write_nested+0xfd/0x830 [ 1455.230775][T26816] ? __ldsem_down_write_nested+0x10e/0x830 [ 1455.230794][T26816] ? is_console_locked+0x9/0x20 [ 1455.230820][T26816] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1455.230843][T26816] ? n_tty_open+0x1a/0x170 [ 1455.230860][T26816] __vmalloc_node_noprof+0xad/0xf0 [ 1455.230877][T26816] ? n_tty_open+0x1a/0x170 [ 1455.230896][T26816] ? __pfx_n_tty_open+0x10/0x10 [ 1455.230915][T26816] n_tty_open+0x1a/0x170 [ 1455.230935][T26816] tty_ldisc_open+0xa2/0x120 [ 1455.230959][T26816] tty_ldisc_setup+0x40/0xf0 [ 1455.230985][T26816] tty_init_dev.part.0+0x1b5/0x470 [ 1455.231005][T26816] tty_open+0xa63/0xfa0 [ 1455.231025][T26816] ? __pfx_tty_open+0x10/0x10 [ 1455.231040][T26816] ? chrdev_open+0x10b/0x6a0 [ 1455.231062][T26816] ? chrdev_open+0x10b/0x6a0 [ 1455.231087][T26816] ? __pfx_tty_open+0x10/0x10 [ 1455.231103][T26816] chrdev_open+0x234/0x6a0 [ 1455.231125][T26816] ? __pfx_apparmor_file_open+0x10/0x10 [ 1455.231149][T26816] ? __pfx_chrdev_open+0x10/0x10 [ 1455.231173][T26816] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1455.231201][T26816] do_dentry_open+0x73e/0x1570 [ 1455.231223][T26816] ? __pfx_chrdev_open+0x10/0x10 [ 1455.231246][T26816] ? security_inode_permission+0xbf/0x250 [ 1455.231286][T26816] vfs_open+0x82/0x3f0 [ 1455.231316][T26816] path_openat+0x21dc/0x3120 [ 1455.231346][T26816] ? __pfx_path_openat+0x10/0x10 [ 1455.231376][T26816] do_filp_open+0x1f7/0x420 [ 1455.231400][T26816] ? __pfx_do_filp_open+0x10/0x10 [ 1455.231446][T26816] ? _raw_spin_unlock+0x28/0x50 [ 1455.231464][T26816] ? alloc_fd+0x476/0x790 [ 1455.231491][T26816] do_sys_openat2+0x12e/0x220 [ 1455.231519][T26816] ? __pfx_do_sys_openat2+0x10/0x10 [ 1455.231562][T26816] __x64_sys_openat+0x12d/0x210 [ 1455.231592][T26816] ? __pfx___x64_sys_openat+0x10/0x10 [ 1455.231619][T26816] ? xfd_validate_state+0x129/0x190 [ 1455.231657][T26816] do_syscall_64+0xc9/0xf80 [ 1455.231681][T26816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.231700][T26816] RIP: 0033:0x7f5f1459aeb9 [ 1455.231717][T26816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.231735][T26816] RSP: 002b:00007f5f1544c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1455.231754][T26816] RAX: ffffffffffffffda RBX: 00007f5f14815fa0 RCX: 00007f5f1459aeb9 [ 1455.231766][T26816] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1455.231777][T26816] RBP: 00007f5f14608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1455.231788][T26816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1455.231798][T26816] R13: 00007f5f14816038 R14: 00007f5f14815fa0 R15: 00007fff730e6c68 [ 1455.231822][T26816] [ 1455.231880][T26816] warn_alloc: 1 callbacks suppressed [ 1455.231891][T26816] syz.4.4113: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1455.251189][T26818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4114'. [ 1455.333742][T26816] ,cpuset= [ 1455.472484][T26816] /,mems_allowed=0-1 [ 1455.784081][T26816] CPU: 1 UID: 0 PID: 26816 Comm: syz.4.4113 Tainted: G L syzkaller #0 PREEMPT(full) [ 1455.784125][T26816] Tainted: [L]=SOFTLOCKUP [ 1455.784135][T26816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1455.784153][T26816] Call Trace: [ 1455.784164][T26816] [ 1455.784183][T26816] dump_stack_lvl+0x100/0x190 [ 1455.784223][T26816] warn_alloc.cold+0x95/0x1c1 [ 1455.784272][T26816] ? __pfx_warn_alloc+0x10/0x10 [ 1455.784307][T26816] ? kfree+0x1c7/0x690 [ 1455.784335][T26816] ? __get_vm_area_node+0x2c5/0x330 [ 1455.784386][T26816] ? __get_vm_area_node+0x2c5/0x330 [ 1455.784426][T26816] ? __get_vm_area_node+0x1dc/0x330 [ 1455.784470][T26816] ? __get_vm_area_node+0x208/0x330 [ 1455.784524][T26816] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1455.784557][T26816] ? look_up_lock_class+0x55/0x120 [ 1455.784598][T26816] ? n_tty_open+0x1a/0x170 [ 1455.784641][T26816] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1455.784671][T26816] ? __ldsem_down_write_nested+0xfd/0x830 [ 1455.784702][T26816] ? __ldsem_down_write_nested+0x10e/0x830 [ 1455.784732][T26816] ? is_console_locked+0x9/0x20 [ 1455.784777][T26816] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1455.784814][T26816] ? n_tty_open+0x1a/0x170 [ 1455.784841][T26816] __vmalloc_node_noprof+0xad/0xf0 [ 1455.784869][T26816] ? n_tty_open+0x1a/0x170 [ 1455.784899][T26816] ? __pfx_n_tty_open+0x10/0x10 [ 1455.784929][T26816] n_tty_open+0x1a/0x170 [ 1455.784959][T26816] tty_ldisc_open+0xa2/0x120 [ 1455.784999][T26816] tty_ldisc_setup+0x40/0xf0 [ 1455.785041][T26816] tty_init_dev.part.0+0x1b5/0x470 [ 1455.785073][T26816] tty_open+0xa63/0xfa0 [ 1455.785113][T26816] ? __pfx_tty_open+0x10/0x10 [ 1455.785137][T26816] ? chrdev_open+0x10b/0x6a0 [ 1455.785179][T26816] ? chrdev_open+0x10b/0x6a0 [ 1455.785221][T26816] ? __pfx_tty_open+0x10/0x10 [ 1455.785247][T26816] chrdev_open+0x234/0x6a0 [ 1455.785281][T26816] ? __pfx_apparmor_file_open+0x10/0x10 [ 1455.785320][T26816] ? __pfx_chrdev_open+0x10/0x10 [ 1455.785358][T26816] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1455.785403][T26816] do_dentry_open+0x73e/0x1570 [ 1455.785436][T26816] ? __pfx_chrdev_open+0x10/0x10 [ 1455.785474][T26816] ? security_inode_permission+0xbf/0x250 [ 1455.785527][T26816] vfs_open+0x82/0x3f0 [ 1455.785578][T26816] path_openat+0x21dc/0x3120 [ 1455.785630][T26816] ? __pfx_path_openat+0x10/0x10 [ 1455.785684][T26816] do_filp_open+0x1f7/0x420 [ 1455.785725][T26816] ? __pfx_do_filp_open+0x10/0x10 [ 1455.785793][T26816] ? _raw_spin_unlock+0x28/0x50 [ 1455.785823][T26816] ? alloc_fd+0x476/0x790 [ 1455.785871][T26816] do_sys_openat2+0x12e/0x220 [ 1455.785918][T26816] ? __pfx_do_sys_openat2+0x10/0x10 [ 1455.785979][T26816] __x64_sys_openat+0x12d/0x210 [ 1455.786028][T26816] ? __pfx___x64_sys_openat+0x10/0x10 [ 1455.786072][T26816] ? xfd_validate_state+0x129/0x190 [ 1455.786137][T26816] do_syscall_64+0xc9/0xf80 [ 1455.786185][T26816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.786216][T26816] RIP: 0033:0x7f5f1459aeb9 [ 1455.786241][T26816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.786269][T26816] RSP: 002b:00007f5f1544c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1455.786297][T26816] RAX: ffffffffffffffda RBX: 00007f5f14815fa0 RCX: 00007f5f1459aeb9 [ 1455.786316][T26816] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1455.786335][T26816] RBP: 00007f5f14608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1455.786352][T26816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1455.786370][T26816] R13: 00007f5f14816038 R14: 00007f5f14815fa0 R15: 00007fff730e6c68 [ 1455.786413][T26816] [ 1456.184317][T26816] Mem-Info: [ 1456.187519][T26816] active_anon:4256 inactive_anon:11969 isolated_anon:0 [ 1456.187519][T26816] active_file:23478 inactive_file:37853 isolated_file:0 [ 1456.187519][T26816] unevictable:768 dirty:317 writeback:0 [ 1456.187519][T26816] slab_reclaimable:12938 slab_unreclaimable:98035 [ 1456.187519][T26816] mapped:28922 shmem:1365 pagetables:1601 [ 1456.187519][T26816] sec_pagetables:0 bounce:0 [ 1456.187519][T26816] kernel_misc_reclaimable:0 [ 1456.187519][T26816] free:1291496 free_pcp:19961 free_cma:0 [ 1456.234600][T26816] Node 0 active_anon:17024kB inactive_anon:49972kB active_file:93896kB inactive_file:151276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115688kB dirty:1268kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:14336kB kernel_stack:11900kB pagetables:6280kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1456.267947][T26816] Node 1 active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1456.298938][T26816] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1456.329521][T26816] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1456.335635][T26816] Node 0 DMA32 free:1263256kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17024kB inactive_anon:49972kB active_file:93896kB inactive_file:151276kB unevictable:1536kB writepending:1468kB zspages:0kB present:3129332kB managed:2539572kB mlocked:0kB bounce:0kB free_pcp:61172kB local_pcp:39324kB free_cma:0kB [ 1456.357130][T21176] Bluetooth: hci3: command 0x0406 tx timeout [ 1456.370086][T26816] lowmem_reserve[]: 0 0 1 1 1 [ 1456.381076][T26816] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1456.411686][T26816] lowmem_reserve[]: 0 0 0 0 0 [ 1456.416965][T26816] Node 1 Normal free:3887368kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:16kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16676kB local_pcp:16kB free_cma:0kB [ 1456.449739][T26816] lowmem_reserve[]: 0 0 0 0 0 [ 1456.454534][T26816] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1456.467445][T26816] Node 0 DMA32: 3966*4kB (UME) 4800*8kB (UME) 3319*16kB (UME) 274*32kB (UME) 405*64kB (UME) 370*128kB (UME) 298*256kB (UME) 187*512kB (UME) 115*1024kB (UM) 15*2048kB (UE) 184*4096kB (UM) = 1263592kB [ 1456.487321][T26816] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1456.499015][T26816] Node 1 Normal: 8*4kB (UME) 9*8kB (UE) 32*16kB (UME) 233*32kB (UE) 108*64kB (UE) 31*128kB (UME) 7*256kB (UE) 4*512kB (UE) 2*1024kB (UM) 2*2048kB (UE) 942*4096kB (M) = 3887368kB [ 1456.517395][T26816] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1456.528822][T26816] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1456.538292][T26816] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1456.547995][T26816] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1456.557525][T26816] 62692 total pagecache pages [ 1456.562298][T26816] 0 pages in swap cache [ 1456.566587][T26816] Free swap = 124996kB [ 1456.598604][T26816] Total swap = 124996kB [ 1456.618937][T26816] 2097051 pages RAM [ 1456.622860][T26816] 0 pages HighMem/MovableOnly [ 1456.628134][T26816] 430196 pages reserved [ 1456.648917][T26816] 0 pages cma reserved [ 1456.653056][T26816] tty tty6: ldisc open failed (-12), clearing slot 5 [ 1457.185941][T26843] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4120'. [ 1457.219565][T26852] futex_wake_op: syz.2.4121 tries to shift op by -2048; fix this program [ 1457.423627][T26853] netlink: 'syz.2.4121': attribute type 5 has an invalid length. [ 1457.464589][T26857] FAULT_INJECTION: forcing a failure. [ 1457.464589][T26857] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.550157][T26857] CPU: 1 UID: 0 PID: 26857 Comm: syz.0.4122 Tainted: G L syzkaller #0 PREEMPT(full) [ 1457.550217][T26857] Tainted: [L]=SOFTLOCKUP [ 1457.550228][T26857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1457.550244][T26857] Call Trace: [ 1457.550254][T26857] [ 1457.550266][T26857] dump_stack_lvl+0x100/0x190 [ 1457.550306][T26857] should_fail_ex.cold+0x5/0xa [ 1457.550353][T26857] should_failslab+0xc2/0x120 [ 1457.550395][T26857] kmem_cache_alloc_noprof+0x83/0x780 [ 1457.550442][T26857] ? __pmd_alloc+0xbf/0x9c0 [ 1457.550493][T26857] ? __pmd_alloc+0xbf/0x9c0 [ 1457.550540][T26857] __pmd_alloc+0xbf/0x9c0 [ 1457.550589][T26857] __handle_mm_fault+0xa99/0x2b50 [ 1457.550627][T26857] ? mt_find+0x45e/0x8e0 [ 1457.550665][T26857] ? __pfx___handle_mm_fault+0x10/0x10 [ 1457.550693][T26857] ? __pfx_mt_find+0x10/0x10 [ 1457.550759][T26857] ? find_vma+0xbf/0x140 [ 1457.550796][T26857] ? __pfx_find_vma+0x10/0x10 [ 1457.550839][T26857] handle_mm_fault+0x36d/0xa20 [ 1457.550887][T26857] do_user_addr_fault+0x74c/0x12f0 [ 1457.550934][T26857] exc_page_fault+0x6f/0xd0 [ 1457.550969][T26857] asm_exc_page_fault+0x26/0x30 [ 1457.551004][T26857] RIP: 0010:__put_user_4+0xd/0x20 [ 1457.551036][T26857] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 b9 03 00 0f 1f 80 00 00 00 00 90 90 90 [ 1457.551063][T26857] RSP: 0018:ffffc90004747b90 EFLAGS: 00050206 [ 1457.551087][T26857] RAX: 00000000000000a1 RBX: 0000000000000000 RCX: 0000000000000003 [ 1457.551103][T26857] RDX: ffff888059fb5b80 RSI: ffffffff82526ce1 RDI: ffffffff8bfa3320 [ 1457.551122][T26857] RBP: ffffffffffffffff R08: 0000000000000001 R09: 00000000000001c5 [ 1457.551141][T26857] R10: 0000000000000200 R11: 0000000000000000 R12: 1ffff920008e8f73 [ 1457.551158][T26857] R13: ffffffff8e6abde0 R14: ffffffff8e6abe40 R15: dffffc0000000000 [ 1457.551189][T26857] ? __might_fault+0x111/0x140 [ 1457.551228][T26857] bpf_obj_get_next_id+0x133/0x1b0 [ 1457.551270][T26857] ? __pfx_bpf_obj_get_next_id+0x10/0x10 [ 1457.551323][T26857] __sys_bpf+0x243a/0x5050 [ 1457.551363][T26857] ? __pfx___sys_bpf+0x10/0x10 [ 1457.551393][T26857] ? proc_fail_nth_write+0x9f/0x220 [ 1457.551437][T26857] ? find_held_lock+0x2b/0x80 [ 1457.551476][T26857] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1457.551507][T26857] ? vfs_write+0x15d/0x1070 [ 1457.551542][T26857] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1457.551577][T26857] ? putname+0xf5/0x1a0 [ 1457.551614][T26857] ? __pfx_vfs_write+0x10/0x10 [ 1457.551646][T26857] ? do_sys_openat2+0x186/0x220 [ 1457.551713][T26857] ? ksys_write+0x1ac/0x250 [ 1457.551745][T26857] ? __pfx_ksys_write+0x10/0x10 [ 1457.551785][T26857] __x64_sys_bpf+0x7b/0xc0 [ 1457.551818][T26857] ? lockdep_hardirqs_on+0x78/0x100 [ 1457.551851][T26857] do_syscall_64+0xc9/0xf80 [ 1457.551889][T26857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.551919][T26857] RIP: 0033:0x7f624cd9aeb9 [ 1457.551943][T26857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1457.551971][T26857] RSP: 002b:00007f624dd11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1457.551998][T26857] RAX: ffffffffffffffda RBX: 00007f624d015fa0 RCX: 00007f624cd9aeb9 [ 1457.552017][T26857] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 000000000000000c [ 1457.552034][T26857] RBP: 00007f624dd11090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.552052][T26857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.552069][T26857] R13: 00007f624d016038 R14: 00007f624d015fa0 R15: 00007ffd5b4a8e48 [ 1457.552111][T26857] [ 1459.001733][T26875] futex_wake_op: syz.4.4128 tries to shift op by -2048; fix this program [ 1459.108776][T26880] size and base must be multiples of 4 kiB [ 1459.139547][T26880] CPU: 0 UID: 0 PID: 26880 Comm: syz.4.4128 Tainted: G L syzkaller #0 PREEMPT(full) [ 1459.139584][T26880] Tainted: [L]=SOFTLOCKUP [ 1459.139591][T26880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1459.139603][T26880] Call Trace: [ 1459.139610][T26880] [ 1459.139618][T26880] dump_stack_lvl+0x100/0x190 [ 1459.139647][T26880] mtrr_add.cold+0x74/0x87 [ 1459.139666][T26880] mtrr_ioctl+0x25a/0xcf0 [ 1459.139695][T26880] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1459.139726][T26880] ? find_held_lock+0x2b/0x80 [ 1459.139750][T26880] ? __fget_files+0x21f/0x3d0 [ 1459.139770][T26880] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1459.139798][T26880] proc_reg_unlocked_ioctl+0x229/0x320 [ 1459.139824][T26880] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1459.139853][T26880] __x64_sys_ioctl+0x18e/0x210 [ 1459.139883][T26880] do_syscall_64+0xc9/0xf80 [ 1459.139908][T26880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.139927][T26880] RIP: 0033:0x7f5f1459aeb9 [ 1459.139943][T26880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.139960][T26880] RSP: 002b:00007f5f1542b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1459.139979][T26880] RAX: ffffffffffffffda RBX: 00007f5f14816090 RCX: 00007f5f1459aeb9 [ 1459.139991][T26880] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 1459.140002][T26880] RBP: 00007f5f14608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1459.140013][T26880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1459.140033][T26880] R13: 00007f5f14816128 R14: 00007f5f14816090 R15: 00007fff730e6c68 [ 1459.140071][T26880] [ 1460.222244][T26904] FAULT_INJECTION: forcing a failure. [ 1460.222244][T26904] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.258211][T26904] CPU: 0 UID: 0 PID: 26904 Comm: syz.2.4135 Tainted: G L syzkaller #0 PREEMPT(full) [ 1460.258243][T26904] Tainted: [L]=SOFTLOCKUP [ 1460.258251][T26904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1460.258262][T26904] Call Trace: [ 1460.258269][T26904] [ 1460.258277][T26904] dump_stack_lvl+0x100/0x190 [ 1460.258303][T26904] should_fail_ex.cold+0x5/0xa [ 1460.258334][T26904] should_failslab+0xc2/0x120 [ 1460.258361][T26904] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1460.258387][T26904] __kmalloc_noprof+0xf6/0x9c0 [ 1460.258406][T26904] ? kfree+0x2a9/0x690 [ 1460.258428][T26904] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1460.258446][T26904] tomoyo_realpath_from_path+0xb6/0x690 [ 1460.258470][T26904] tomoyo_check_open_permission+0x2af/0x3c0 [ 1460.258499][T26904] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1460.258548][T26904] ? do_raw_spin_lock+0x128/0x260 [ 1460.258578][T26904] ? path_get+0x61/0x80 [ 1460.258604][T26904] tomoyo_file_open+0x6b/0x90 [ 1460.258627][T26904] security_file_open+0xb5/0x1e0 [ 1460.258644][T26904] do_dentry_open+0x58c/0x1570 [ 1460.258668][T26904] ? security_inode_permission+0xbf/0x250 [ 1460.258698][T26904] vfs_open+0x82/0x3f0 [ 1460.258738][T26904] path_openat+0x21dc/0x3120 [ 1460.258783][T26904] ? __pfx_path_openat+0x10/0x10 [ 1460.258829][T26904] do_filp_open+0x1f7/0x420 [ 1460.258866][T26904] ? __pfx_do_filp_open+0x10/0x10 [ 1460.258913][T26904] ? __pfx_kfree_link+0x10/0x10 [ 1460.258969][T26904] ? _raw_spin_unlock+0x28/0x50 [ 1460.258999][T26904] ? alloc_fd+0x476/0x790 [ 1460.259042][T26904] do_sys_openat2+0x12e/0x220 [ 1460.259087][T26904] ? __pfx_do_sys_openat2+0x10/0x10 [ 1460.259145][T26904] __x64_sys_openat+0x12d/0x210 [ 1460.259191][T26904] ? __pfx___x64_sys_openat+0x10/0x10 [ 1460.259233][T26904] ? xfd_validate_state+0x129/0x190 [ 1460.259293][T26904] do_syscall_64+0xc9/0xf80 [ 1460.259331][T26904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1460.259362][T26904] RIP: 0033:0x7fafac39aeb9 [ 1460.259397][T26904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1460.259422][T26904] RSP: 002b:00007fafad20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1460.259452][T26904] RAX: ffffffffffffffda RBX: 00007fafac615fa0 RCX: 00007fafac39aeb9 [ 1460.259474][T26904] RDX: 0000000000008800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1460.259491][T26904] RBP: 00007fafac408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1460.259507][T26904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1460.259523][T26904] R13: 00007fafac616038 R14: 00007fafac615fa0 R15: 00007ffdb630fd98 [ 1460.259559][T26904] [ 1460.259654][T26904] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1462.675886][T26939] EXT4-fs: 10 callbacks suppressed [ 1462.675922][T26939] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 967 with max blocks 29 with error 117 [ 1462.733220][T26939] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1462.733220][T26939] [ 1462.748138][T26939] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 964 with max blocks 32 with error 117 [ 1462.812386][T26939] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1462.812386][T26939] [ 1462.831722][T26939] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 587 with max blocks 1 with error 117 [ 1462.862258][T26939] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1462.862258][T26939] [ 1462.910743][T26939] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 598 with max blocks 1 with error 117 [ 1462.923431][T26939] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1462.923431][T26939] [ 1462.960474][T26939] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 608 with max blocks 1 with error 117 [ 1462.993181][T26939] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1462.993181][T26939] [ 1463.275996][T26977] FAULT_INJECTION: forcing a failure. [ 1463.275996][T26977] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.372230][T26977] CPU: 0 UID: 0 PID: 26977 Comm: syz.2.4145 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.372281][T26977] Tainted: [L]=SOFTLOCKUP [ 1463.372292][T26977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1463.372309][T26977] Call Trace: [ 1463.372320][T26977] [ 1463.372332][T26977] dump_stack_lvl+0x100/0x190 [ 1463.372371][T26977] should_fail_ex.cold+0x5/0xa [ 1463.372411][T26977] ? is_bpf_text_address+0x8a/0x1a0 [ 1463.372460][T26977] should_failslab+0xc2/0x120 [ 1463.372499][T26977] kmem_cache_alloc_noprof+0x83/0x780 [ 1463.372534][T26977] ? __sk_mem_raise_allocated+0x789/0x1540 [ 1463.372576][T26977] ? skb_clone+0x190/0x400 [ 1463.372623][T26977] ? skb_clone+0x190/0x400 [ 1463.372657][T26977] ? __sk_mem_schedule+0xd0/0x100 [ 1463.372697][T26977] skb_clone+0x190/0x400 [ 1463.372741][T26977] sctp_ulpevent_make_rcvmsg+0x2bd/0xac0 [ 1463.372794][T26977] sctp_ulpq_tail_data+0xc4/0xfe0 [ 1463.372828][T26977] ? sctp_validate_data+0xc7/0x280 [ 1463.372861][T26977] ? sctp_tsnmap_check+0x145/0x180 [ 1463.372895][T26977] ? __pfx_sctp_ulpq_tail_data+0x10/0x10 [ 1463.372942][T26977] ? sctp_sf_eat_data_6_2+0x22c/0xb90 [ 1463.372989][T26977] ? __pfx_sctp_ulpq_tail_data+0x10/0x10 [ 1463.373023][T26977] sctp_do_sm+0x30f2/0x5be0 [ 1463.373068][T26977] ? __pfx_sctp_do_sm+0x10/0x10 [ 1463.373159][T26977] ? ktime_get+0x200/0x300 [ 1463.373192][T26977] ? lockdep_hardirqs_on+0x78/0x100 [ 1463.373234][T26977] sctp_assoc_bh_rcv+0x392/0x6f0 [ 1463.373291][T26977] sctp_inq_push+0x1db/0x280 [ 1463.373321][T26977] sctp_backlog_rcv+0x169/0x590 [ 1463.373358][T26977] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 1463.373388][T26977] __release_sock+0x3a2/0x440 [ 1463.373431][T26977] ? lockdep_hardirqs_on+0x78/0x100 [ 1463.373472][T26977] release_sock+0x5a/0x220 [ 1463.373511][T26977] sctp_wait_for_connect+0x1ed/0x610 [ 1463.373557][T26977] ? __pfx_sctp_wait_for_connect+0x10/0x10 [ 1463.373596][T26977] ? skb_set_owner_w+0x37d/0x780 [ 1463.373631][T26977] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1463.373666][T26977] ? sctp_datamsg_put+0x62/0x5f0 [ 1463.373701][T26977] ? sctp_primitive_SEND+0x9f/0xd0 [ 1463.373735][T26977] sctp_sendmsg_to_asoc+0x188b/0x1c50 [ 1463.373783][T26977] ? sctp_assoc_add_peer+0x252/0x14f0 [ 1463.373819][T26977] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1463.373860][T26977] ? sctp_connect_new_asoc+0x41e/0x770 [ 1463.373894][T26977] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1463.373923][T26977] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 1463.373970][T26977] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 1463.374022][T26977] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1463.374061][T26977] sctp_sendmsg+0x1185/0x22b0 [ 1463.374115][T26977] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1463.374144][T26977] ? __lock_acquire+0x4a5/0x2630 [ 1463.374191][T26977] ? aa_sk_perm+0x2de/0xb40 [ 1463.374241][T26977] ? __pfx_aa_sk_perm+0x10/0x10 [ 1463.374299][T26977] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1463.374331][T26977] inet_sendmsg+0x11c/0x140 [ 1463.374370][T26977] ____sys_sendmsg+0x9ad/0xc30 [ 1463.374408][T26977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1463.374448][T26977] ? futex_unqueue+0x133/0x2c0 [ 1463.374488][T26977] ? futex_unqueue+0x133/0x2c0 [ 1463.374539][T26977] ___sys_sendmsg+0x190/0x1e0 [ 1463.374578][T26977] ? __pfx____sys_sendmsg+0x10/0x10 [ 1463.374613][T26977] ? __pfx___futex_wait+0x10/0x10 [ 1463.374691][T26977] __sys_sendmmsg+0x205/0x430 [ 1463.374742][T26977] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1463.374800][T26977] ? __pfx_do_futex+0x10/0x10 [ 1463.374838][T26977] ? __pfx_do_sys_openat2+0x10/0x10 [ 1463.374901][T26977] ? xfd_validate_state+0x129/0x190 [ 1463.374956][T26977] __x64_sys_sendmmsg+0x9c/0x100 [ 1463.375000][T26977] ? lockdep_hardirqs_on+0x78/0x100 [ 1463.375036][T26977] do_syscall_64+0xc9/0xf80 [ 1463.375084][T26977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.375120][T26977] RIP: 0033:0x7fafac39aeb9 [ 1463.375148][T26977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.375180][T26977] RSP: 002b:00007fafad20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1463.375214][T26977] RAX: ffffffffffffffda RBX: 00007fafac615fa0 RCX: 00007fafac39aeb9 [ 1463.375236][T26977] RDX: 0000000000000008 RSI: 0000200000000140 RDI: 0000000000000003 [ 1463.375255][T26977] RBP: 00007fafac408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1463.375274][T26977] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000000 [ 1463.375294][T26977] R13: 00007fafac616038 R14: 00007fafac615fa0 R15: 00007ffdb630fd98 [ 1463.375337][T26977] [ 1463.586459][T26978] size and base must be multiples of 4 kiB [ 1463.916565][T26978] CPU: 1 UID: 0 PID: 26978 Comm: syz.4.4142 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.916615][T26978] Tainted: [L]=SOFTLOCKUP [ 1463.916627][T26978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1463.916646][T26978] Call Trace: [ 1463.916657][T26978] [ 1463.916669][T26978] dump_stack_lvl+0x100/0x190 [ 1463.916709][T26978] mtrr_add.cold+0x74/0x87 [ 1463.916741][T26978] mtrr_ioctl+0x25a/0xcf0 [ 1463.916786][T26978] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1463.916834][T26978] ? find_held_lock+0x2b/0x80 [ 1463.916873][T26978] ? __fget_files+0x21f/0x3d0 [ 1463.916906][T26978] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1463.916970][T26978] proc_reg_unlocked_ioctl+0x229/0x320 [ 1463.917013][T26978] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1463.917058][T26978] __x64_sys_ioctl+0x18e/0x210 [ 1463.917104][T26978] do_syscall_64+0xc9/0xf80 [ 1463.917141][T26978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.917172][T26978] RIP: 0033:0x7f5f1459aeb9 [ 1463.917198][T26978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.917228][T26978] RSP: 002b:00007f5f153c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1463.917259][T26978] RAX: ffffffffffffffda RBX: 00007f5f14816360 RCX: 00007f5f1459aeb9 [ 1463.917280][T26978] RDX: 0000000000000000 RSI: 0000000040104d01 RDI: 0000000000000000 [ 1463.917299][T26978] RBP: 00007f5f14608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1463.917317][T26978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.917336][T26978] R13: 00007f5f148163f8 R14: 00007f5f14816360 R15: 00007fff730e6c68 [ 1463.917387][T26978] [ 1465.061859][T26991] futex_wake_op: syz.1.4148 tries to shift op by -2048; fix this program [ 1465.184251][T26997] netlink: 'syz.1.4148': attribute type 5 has an invalid length. [ 1466.184656][T27010] futex_wake_op: syz.2.4152 tries to shift op by -2048; fix this program [ 1467.603534][T27030] Line length is too long: Should be less than 4094 [ 1467.649899][T27035] binder: 27032:27035 ioctl c0306201 0 returned -14 [ 1467.775554][T27034] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 1468.745403][T27050] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1468.775710][T27050] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1468.952829][T27050] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1469.046629][T27050] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1469.133768][T27050] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1469.288287][T27050] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1469.821406][T27075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4168'. [ 1470.757389][T21446] Bluetooth: hci4: command 0x0406 tx timeout [ 1470.832967][T27093] FAULT_INJECTION: forcing a failure. [ 1470.832967][T27093] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.836117][T21446] Bluetooth: hci0: command 0x0406 tx timeout [ 1470.876223][T27093] CPU: 0 UID: 0 PID: 27093 Comm: syz.4.4172 Tainted: G L syzkaller #0 PREEMPT(full) [ 1470.876269][T27093] Tainted: [L]=SOFTLOCKUP [ 1470.876281][T27093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1470.876298][T27093] Call Trace: [ 1470.876309][T27093] [ 1470.876330][T27093] dump_stack_lvl+0x100/0x190 [ 1470.876375][T27093] should_fail_ex.cold+0x5/0xa [ 1470.876424][T27093] should_failslab+0xc2/0x120 [ 1470.876465][T27093] kmem_cache_alloc_noprof+0x83/0x780 [ 1470.876505][T27093] ? __pfx_map_id_range_down+0x10/0x10 [ 1470.876534][T27093] ? security_inode_alloc+0x3b/0x2c0 [ 1470.876583][T27093] ? security_inode_alloc+0x3b/0x2c0 [ 1470.876624][T27093] security_inode_alloc+0x3b/0x2c0 [ 1470.876667][T27093] inode_init_always_gfp+0xced/0x1040 [ 1470.876709][T27093] alloc_inode+0x8e/0x250 [ 1470.876750][T27093] alloc_anon_inode+0x2a/0x3e0 [ 1470.876788][T27093] anon_inode_make_secure_inode+0x2f/0x140 [ 1470.876833][T27093] __anon_inode_getfile+0x1cf/0x280 [ 1470.876876][T27093] new_userfaultfd+0x255/0x400 [ 1470.876931][T27093] __x64_sys_userfaultfd+0x4b/0xb0 [ 1470.876964][T27093] do_syscall_64+0xc9/0xf80 [ 1470.877006][T27093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.877035][T27093] RIP: 0033:0x7f5f1459aeb9 [ 1470.877060][T27093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1470.877086][T27093] RSP: 002b:00007f5f1544c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 1470.877115][T27093] RAX: ffffffffffffffda RBX: 00007f5f14815fa0 RCX: 00007f5f1459aeb9 [ 1470.877134][T27093] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1470.877151][T27093] RBP: 00007f5f14608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1470.877168][T27093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1470.877184][T27093] R13: 00007f5f14816038 R14: 00007f5f14815fa0 R15: 00007fff730e6c68 [ 1470.877225][T27093] [ 1471.121504][T21446] Bluetooth: hci2: command 0x0406 tx timeout [ 1471.127652][T21446] Bluetooth: hci3: command 0x0406 tx timeout [ 1471.290015][T27095] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4172'. [ 1471.826340][T27103] nbd: must specify a size in bytes for the device [ 1472.576285][T26932] EXT4-fs: 18 callbacks suppressed [ 1472.576311][T26932] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 994 with max blocks 2 with error 117 [ 1472.608817][T26932] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1472.608817][T26932] [ 1472.621225][T27124] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1472.640348][T26932] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 586 with max blocks 1 with error 117 [ 1472.658060][T26932] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1472.658060][T26932] [ 1472.679857][T26932] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 979 with max blocks 17 with error 117 [ 1472.697094][T26932] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1472.697094][T26932] [ 1472.797808][T26932] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 994 with max blocks 1 with error 117 [ 1472.813664][T26932] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1472.813664][T26932] [ 1472.834949][T26932] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 589 with max blocks 1 with error 117 [ 1472.867112][T26932] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1472.867112][T26932] [ 1472.917181][T21176] Bluetooth: hci0: command 0x0406 tx timeout [ 1473.157268][T21176] Bluetooth: hci3: command 0x0406 tx timeout [ 1481.232711][T27240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4202'. [ 1481.669827][T27255] futex_wake_op: syz.4.4206 tries to shift op by -2048; fix this program [ 1481.810198][T27259] netlink: 'syz.4.4206': attribute type 5 has an invalid length. [ 1483.799137][T27303] futex_wake_op: syz.0.4219 tries to shift op by -2048; fix this program [ 1483.984971][T27305] netlink: 'syz.0.4219': attribute type 5 has an invalid length. [ 1485.505681][T21176] block nbd0: Receive control failed (result -32) [ 1485.745903][T27332] FAULT_INJECTION: forcing a failure. [ 1485.745903][T27332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1485.791017][T27332] CPU: 1 UID: 0 PID: 27332 Comm: syz.0.4227 Tainted: G L syzkaller #0 PREEMPT(full) [ 1485.791064][T27332] Tainted: [L]=SOFTLOCKUP [ 1485.791085][T27332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1485.791102][T27332] Call Trace: [ 1485.791112][T27332] [ 1485.791124][T27332] dump_stack_lvl+0x100/0x190 [ 1485.791165][T27332] should_fail_ex.cold+0x5/0xa [ 1485.791211][T27332] _copy_to_user+0x32/0xd0 [ 1485.791257][T27332] simple_read_from_buffer+0xcb/0x170 [ 1485.791290][T27332] proc_fail_nth_read+0x1af/0x230 [ 1485.791325][T27332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1485.791362][T27332] ? rw_verify_area+0xce/0x6d0 [ 1485.791391][T27332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1485.791424][T27332] vfs_read+0x1e4/0xb30 [ 1485.791460][T27332] ? __pfx_vfs_read+0x10/0x10 [ 1485.791488][T27332] ? find_held_lock+0x2b/0x80 [ 1485.791517][T27332] ? __fget_files+0x215/0x3d0 [ 1485.791557][T27332] ? __fget_files+0x21f/0x3d0 [ 1485.791599][T27332] ksys_read+0x12a/0x250 [ 1485.791631][T27332] ? __pfx_ksys_read+0x10/0x10 [ 1485.791663][T27332] ? fput+0x79/0x100 [ 1485.791708][T27332] do_syscall_64+0xc9/0xf80 [ 1485.791748][T27332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.791777][T27332] RIP: 0033:0x7f624cd5b78e [ 1485.791801][T27332] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1485.791829][T27332] RSP: 002b:00007f624dd10fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1485.791858][T27332] RAX: ffffffffffffffda RBX: 00007f624dd116c0 RCX: 00007f624cd5b78e [ 1485.791877][T27332] RDX: 000000000000000f RSI: 00007f624dd110a0 RDI: 0000000000000004 [ 1485.791895][T27332] RBP: 00007f624dd11090 R08: 0000000000000000 R09: 0000000000000000 [ 1485.791913][T27332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1485.791930][T27332] R13: 00007f624d016038 R14: 00007f624d015fa0 R15: 00007ffd5b4a8e48 [ 1485.791970][T27332] [ 1487.190102][T27351] futex_wake_op: syz.2.4231 tries to shift op by -2048; fix this program [ 1488.022284][T27363] ptrace attach of "./syz-executor exec"[20148] was attempted by "                                                                                                                                                                                                                                                [ 1489.045202][T27392] futex_wake_op: syz.0.4241 tries to shift op by -2048; fix this program [ 1490.130478][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.140104][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.901397][T26932] EXT4-fs: 6 callbacks suppressed [ 1490.901560][T26932] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 977 with max blocks 19 with error 117 [ 1490.920628][T26932] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1490.920628][T26932] [ 1490.934799][T26932] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 586 with max blocks 4 with error 117 [ 1490.960644][T26932] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1490.960644][T26932] [ 1490.983682][T26932] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 963 with max blocks 33 with error 117 [ 1490.998929][T26932] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1490.998929][T26932] [ 1491.100228][T26932] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 592 with max blocks 3 with error 117 [ 1491.118922][T26932] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1491.118922][T26932] [ 1491.131416][T26932] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1380 with max blocks 32 with error 117 [ 1491.166207][T26932] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1491.166207][T26932] [ 1491.833388][T27421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4249'. [ 1492.334793][T27431] net_ratelimit: 5 callbacks suppressed [ 1492.334819][T27431] openvswitch: netlink: IP tunnel dst address not specified [ 1494.574083][T27477] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1495.675889][T27503] futex_wake_op: syz.1.4272 tries to shift op by -2048; fix this program [ 1496.102189][T27511] EXT4-fs error (device sda1): ext4_discard_preallocations:5703: comm syz.2.4274: Error -117 reading block bitmap for 2 [ 1496.758644][T27521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4276'. [ 1496.767866][T27521] openvswitch: netlink: Flow key attr not present in new flow. [ 1500.231279][T27552] FAULT_INJECTION: forcing a failure. [ 1500.231279][T27552] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1500.381046][T27552] CPU: 1 UID: 0 PID: 27552 Comm: syz.2.4284 Tainted: G L syzkaller #0 PREEMPT(full) [ 1500.381106][T27552] Tainted: [L]=SOFTLOCKUP [ 1500.381116][T27552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1500.381131][T27552] Call Trace: [ 1500.381142][T27552] [ 1500.381153][T27552] dump_stack_lvl+0x100/0x190 [ 1500.381192][T27552] should_fail_ex.cold+0x5/0xa [ 1500.381237][T27552] get_futex_key+0x1d2/0x1620 [ 1500.381277][T27552] ? __pfx_get_futex_key+0x10/0x10 [ 1500.381307][T27552] ? do_mremap+0xa96/0x2130 [ 1500.381337][T27552] futex_wake+0xea/0x530 [ 1500.381368][T27552] ? __pfx_futex_wake+0x10/0x10 [ 1500.381399][T27552] ? ksys_write+0x190/0x250 [ 1500.381424][T27552] do_futex+0x32b/0x350 [ 1500.381450][T27552] ? __pfx_do_futex+0x10/0x10 [ 1500.381473][T27552] ? __pfx___do_sys_mremap+0x10/0x10 [ 1500.381500][T27552] __x64_sys_futex+0x34f/0x4d0 [ 1500.381527][T27552] ? __pfx___x64_sys_futex+0x10/0x10 [ 1500.381551][T27552] ? xfd_validate_state+0x129/0x190 [ 1500.381587][T27552] do_syscall_64+0xc9/0xf80 [ 1500.381611][T27552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.381630][T27552] RIP: 0033:0x7fafac39aeb9 [ 1500.381646][T27552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1500.381663][T27552] RSP: 002b:00007fafad1ed0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1500.381681][T27552] RAX: ffffffffffffffda RBX: 00007fafac616098 RCX: 00007fafac39aeb9 [ 1500.381694][T27552] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fafac61609c [ 1500.381704][T27552] RBP: 00007fafac616090 R08: 0000000000000000 R09: 0000000000000000 [ 1500.381715][T27552] R10: 0000000100000000 R11: 0000000000000246 R12: 0000000000000000 [ 1500.381725][T27552] R13: 00007fafac616128 R14: 00007ffdb630fcb0 R15: 00007ffdb630fd98 [ 1500.381748][T27552] [ 1502.467325][T27596] FAULT_INJECTION: forcing a failure. [ 1502.467325][T27596] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.537557][T27596] CPU: 0 UID: 0 PID: 27596 Comm: syz.0.4295 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.537591][T27596] Tainted: [L]=SOFTLOCKUP [ 1502.537599][T27596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1502.537609][T27596] Call Trace: [ 1502.537617][T27596] [ 1502.537624][T27596] dump_stack_lvl+0x100/0x190 [ 1502.537651][T27596] should_fail_ex.cold+0x5/0xa [ 1502.537681][T27596] should_failslab+0xc2/0x120 [ 1502.537708][T27596] kmem_cache_alloc_noprof+0x83/0x780 [ 1502.537733][T27596] ? kmem_cache_alloc_noprof+0x2e1/0x780 [ 1502.537755][T27596] ? anon_vma_fork+0x202/0x620 [ 1502.537778][T27596] ? anon_vma_fork+0x202/0x620 [ 1502.537796][T27596] anon_vma_fork+0x202/0x620 [ 1502.537817][T27596] dup_mmap+0x1182/0x1e20 [ 1502.537842][T27596] ? __pfx_dup_mmap+0x10/0x10 [ 1502.537873][T27596] copy_process+0x7451/0x7890 [ 1502.537908][T27596] ? __pfx_copy_process+0x10/0x10 [ 1502.537933][T27596] ? find_held_lock+0x2b/0x80 [ 1502.537960][T27596] kernel_clone+0xfc/0x930 [ 1502.537982][T27596] ? __pfx_futex_wait+0x10/0x10 [ 1502.538001][T27596] ? __pfx_kernel_clone+0x10/0x10 [ 1502.538047][T27596] __do_sys_clone+0xd9/0x120 [ 1502.538072][T27596] ? __pfx___do_sys_clone+0x10/0x10 [ 1502.538096][T27596] ? __fget_files+0x21f/0x3d0 [ 1502.538123][T27596] ? xfd_validate_state+0x129/0x190 [ 1502.538160][T27596] do_syscall_64+0xc9/0xf80 [ 1502.538185][T27596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1502.538203][T27596] RIP: 0033:0x7f624cd9aeb9 [ 1502.538219][T27596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1502.538237][T27596] RSP: 002b:00007f624dd10fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1502.538255][T27596] RAX: ffffffffffffffda RBX: 00007f624d015fa0 RCX: 00007f624cd9aeb9 [ 1502.538271][T27596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1502.538285][T27596] RBP: 00007f624ce08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1502.538299][T27596] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1502.538314][T27596] R13: 00007f624d016038 R14: 00007f624d015fa0 R15: 00007ffd5b4a8e48 [ 1502.538337][T27596] [ 1502.805369][T26928] EXT4-fs: 10 callbacks suppressed [ 1502.805387][T26928] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 966 with max blocks 30 with error 117 [ 1502.823234][T26928] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1502.823234][T26928] [ 1502.835174][T26928] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 934 with max blocks 62 with error 117 [ 1502.848576][T26928] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1502.848576][T26928] [ 1502.918206][T27597] futex_wake_op: syz.0.4295 tries to shift op by -2048; fix this program [ 1502.981616][T27597] futex_wake_op: syz.0.4295 tries to shift op by -2048; fix this program [ 1504.424448][ T30] audit: type=1804 audit(4294968686.528:150): pid=27630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4303" name="nullb0" dev="tmpfs" ino=397 res=1 errno=0 [ 1506.649509][T27664] FAULT_INJECTION: forcing a failure. [ 1506.649509][T27664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1506.693271][T27664] CPU: 1 UID: 0 PID: 27664 Comm: syz.2.4312 Tainted: G L syzkaller #0 PREEMPT(full) [ 1506.693320][T27664] Tainted: [L]=SOFTLOCKUP [ 1506.693331][T27664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1506.693348][T27664] Call Trace: [ 1506.693359][T27664] [ 1506.693370][T27664] dump_stack_lvl+0x100/0x190 [ 1506.693412][T27664] should_fail_ex.cold+0x5/0xa [ 1506.693461][T27664] _copy_to_user+0x32/0xd0 [ 1506.693507][T27664] simple_read_from_buffer+0xcb/0x170 [ 1506.693541][T27664] proc_fail_nth_read+0x1af/0x230 [ 1506.693578][T27664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1506.693616][T27664] ? rw_verify_area+0xce/0x6d0 [ 1506.693644][T27664] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1506.693679][T27664] vfs_read+0x1e4/0xb30 [ 1506.693717][T27664] ? __pfx_vfs_read+0x10/0x10 [ 1506.693746][T27664] ? find_held_lock+0x2b/0x80 [ 1506.693781][T27664] ? __fget_files+0x215/0x3d0 [ 1506.693819][T27664] ? __fget_files+0x21f/0x3d0 [ 1506.693861][T27664] ksys_read+0x12a/0x250 [ 1506.693893][T27664] ? __pfx_ksys_read+0x10/0x10 [ 1506.693921][T27664] ? __pfx___x64_sys_sched_setaffinity+0x10/0x10 [ 1506.693964][T27664] do_syscall_64+0xc9/0xf80 [ 1506.694003][T27664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.694042][T27664] RIP: 0033:0x7fafac35b78e [ 1506.694066][T27664] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1506.694096][T27664] RSP: 002b:00007fafad20dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1506.694125][T27664] RAX: ffffffffffffffda RBX: 00007fafad20e6c0 RCX: 00007fafac35b78e [ 1506.694145][T27664] RDX: 000000000000000f RSI: 00007fafad20e0a0 RDI: 0000000000000003 [ 1506.694163][T27664] RBP: 00007fafad20e090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.694181][T27664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1506.694198][T27664] R13: 00007fafac616038 R14: 00007fafac615fa0 R15: 00007ffdb630fd98 [ 1506.694240][T27664] [ 1510.127680][T27733] FAULT_INJECTION: forcing a failure. [ 1510.127680][T27733] name failslab, interval 1, probability 0, space 0, times 0 [ 1510.205428][T27733] CPU: 1 UID: 0 PID: 27733 Comm: syz.2.4329 Tainted: G L syzkaller #0 PREEMPT(full) [ 1510.205481][T27733] Tainted: [L]=SOFTLOCKUP [ 1510.205493][T27733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1510.205511][T27733] Call Trace: [ 1510.205522][T27733] [ 1510.205540][T27733] dump_stack_lvl+0x100/0x190 [ 1510.205582][T27733] should_fail_ex.cold+0x5/0xa [ 1510.205628][T27733] should_failslab+0xc2/0x120 [ 1510.205668][T27733] __kmalloc_cache_noprof+0x80/0x810 [ 1510.205702][T27733] ? sctp_add_bind_addr+0xae/0x3e0 [ 1510.205748][T27733] ? sctp_add_bind_addr+0xae/0x3e0 [ 1510.205785][T27733] sctp_add_bind_addr+0xae/0x3e0 [ 1510.205827][T27733] sctp_copy_local_addr_list+0x349/0x550 [ 1510.205877][T27733] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1510.205926][T27733] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 1510.205972][T27733] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1510.206087][T27733] sctp_bind_addr_copy+0xe0/0x530 [ 1510.206144][T27733] sctp_connect_new_asoc+0x1c9/0x770 [ 1510.206177][T27733] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1510.206219][T27733] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1510.206256][T27733] sctp_sendmsg+0x171a/0x22b0 [ 1510.206295][T27733] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1510.206327][T27733] ? __lock_acquire+0x4a5/0x2630 [ 1510.206371][T27733] ? aa_sk_perm+0x2de/0xb40 [ 1510.206421][T27733] ? __pfx_aa_sk_perm+0x10/0x10 [ 1510.206476][T27733] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1510.206510][T27733] inet_sendmsg+0x11c/0x140 [ 1510.206547][T27733] ____sys_sendmsg+0x9ad/0xc30 [ 1510.206586][T27733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1510.206625][T27733] ? futex_unqueue+0x133/0x2c0 [ 1510.206664][T27733] ? futex_unqueue+0x133/0x2c0 [ 1510.206712][T27733] ___sys_sendmsg+0x190/0x1e0 [ 1510.206751][T27733] ? __pfx____sys_sendmsg+0x10/0x10 [ 1510.206787][T27733] ? __pfx___futex_wait+0x10/0x10 [ 1510.206862][T27733] __sys_sendmmsg+0x205/0x430 [ 1510.206916][T27733] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1510.206975][T27733] ? __pfx_do_futex+0x10/0x10 [ 1510.207055][T27733] ? __pfx_do_sys_openat2+0x10/0x10 [ 1510.207125][T27733] ? xfd_validate_state+0x129/0x190 [ 1510.207181][T27733] __x64_sys_sendmmsg+0x9c/0x100 [ 1510.207224][T27733] ? lockdep_hardirqs_on+0x78/0x100 [ 1510.207259][T27733] do_syscall_64+0xc9/0xf80 [ 1510.207297][T27733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.207327][T27733] RIP: 0033:0x7fafac39aeb9 [ 1510.207353][T27733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1510.207380][T27733] RSP: 002b:00007fafad20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1510.207407][T27733] RAX: ffffffffffffffda RBX: 00007fafac615fa0 RCX: 00007fafac39aeb9 [ 1510.207428][T27733] RDX: 0000000000000008 RSI: 0000200000000140 RDI: 0000000000000004 [ 1510.207446][T27733] RBP: 00007fafac408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1510.207462][T27733] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000000 [ 1510.207480][T27733] R13: 00007fafac616038 R14: 00007fafac615fa0 R15: 00007ffdb630fd98 [ 1510.207517][T27733] [ 1511.042829][T27744] futex_wake_op: syz.0.4333 tries to shift op by -2048; fix this program [ 1511.118218][T27746] FAULT_INJECTION: forcing a failure. [ 1511.118218][T27746] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.180362][T27746] CPU: 0 UID: 0 PID: 27746 Comm: syz.2.4334 Tainted: G L syzkaller #0 PREEMPT(full) [ 1511.180396][T27746] Tainted: [L]=SOFTLOCKUP [ 1511.180403][T27746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1511.180414][T27746] Call Trace: [ 1511.180421][T27746] [ 1511.180429][T27746] dump_stack_lvl+0x100/0x190 [ 1511.180456][T27746] should_fail_ex.cold+0x5/0xa [ 1511.180488][T27746] should_failslab+0xc2/0x120 [ 1511.180515][T27746] __kmalloc_node_noprof+0xfb/0x9e0 [ 1511.180539][T27746] ? __get_vm_area_node+0x1dc/0x330 [ 1511.180567][T27746] ? __vmalloc_node_range_noprof+0x3dc/0x1530 [ 1511.180589][T27746] ? __vmalloc_node_range_noprof+0x3dc/0x1530 [ 1511.180607][T27746] __vmalloc_node_range_noprof+0x3dc/0x1530 [ 1511.180631][T27746] ? n_tty_open+0x1a/0x170 [ 1511.180657][T27746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1511.180676][T27746] ? __ldsem_down_write_nested+0xfd/0x830 [ 1511.180695][T27746] ? __ldsem_down_write_nested+0x10e/0x830 [ 1511.180713][T27746] ? is_console_locked+0x9/0x20 [ 1511.180739][T27746] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1511.180762][T27746] ? n_tty_open+0x1a/0x170 [ 1511.180783][T27746] __vmalloc_node_noprof+0xad/0xf0 [ 1511.180801][T27746] ? n_tty_open+0x1a/0x170 [ 1511.180820][T27746] ? __pfx_n_tty_open+0x10/0x10 [ 1511.180839][T27746] n_tty_open+0x1a/0x170 [ 1511.180858][T27746] tty_ldisc_open+0xa2/0x120 [ 1511.180882][T27746] tty_ldisc_setup+0x40/0xf0 [ 1511.180908][T27746] tty_init_dev.part.0+0x1b5/0x470 [ 1511.180930][T27746] tty_open+0xa63/0xfa0 [ 1511.180950][T27746] ? __pfx_tty_open+0x10/0x10 [ 1511.180965][T27746] ? chrdev_open+0x10b/0x6a0 [ 1511.180987][T27746] ? chrdev_open+0x10b/0x6a0 [ 1511.181012][T27746] ? __pfx_tty_open+0x10/0x10 [ 1511.181028][T27746] chrdev_open+0x234/0x6a0 [ 1511.181052][T27746] ? __pfx_apparmor_file_open+0x10/0x10 [ 1511.181077][T27746] ? __pfx_chrdev_open+0x10/0x10 [ 1511.181102][T27746] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1511.181131][T27746] do_dentry_open+0x73e/0x1570 [ 1511.181152][T27746] ? __pfx_chrdev_open+0x10/0x10 [ 1511.181185][T27746] ? security_inode_permission+0xbf/0x250 [ 1511.181216][T27746] vfs_open+0x82/0x3f0 [ 1511.181246][T27746] path_openat+0x21dc/0x3120 [ 1511.181276][T27746] ? __pfx_path_openat+0x10/0x10 [ 1511.181311][T27746] do_filp_open+0x1f7/0x420 [ 1511.181334][T27746] ? __pfx_do_filp_open+0x10/0x10 [ 1511.181372][T27746] ? _raw_spin_unlock+0x28/0x50 [ 1511.181391][T27746] ? alloc_fd+0x476/0x790 [ 1511.181418][T27746] do_sys_openat2+0x12e/0x220 [ 1511.181445][T27746] ? __pfx_do_sys_openat2+0x10/0x10 [ 1511.181481][T27746] __x64_sys_openat+0x12d/0x210 [ 1511.181510][T27746] ? __pfx___x64_sys_openat+0x10/0x10 [ 1511.181537][T27746] ? xfd_validate_state+0x129/0x190 [ 1511.181575][T27746] do_syscall_64+0xc9/0xf80 [ 1511.181599][T27746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.181619][T27746] RIP: 0033:0x7fafac39aeb9 [ 1511.181635][T27746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.181653][T27746] RSP: 002b:00007fafad20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1511.181672][T27746] RAX: ffffffffffffffda RBX: 00007fafac615fa0 RCX: 00007fafac39aeb9 [ 1511.181684][T27746] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1511.181695][T27746] RBP: 00007fafac408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1511.181706][T27746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.181717][T27746] R13: 00007fafac616038 R14: 00007fafac615fa0 R15: 00007ffdb630fd98 [ 1511.181740][T27746] [ 1511.181941][T27746] syz.2.4334: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset= [ 1511.575957][T27750] Line length is too long: Should be less than 4094 [ 1511.626362][T27746] /,mems_allowed=0-1 [ 1511.630429][T27746] CPU: 0 UID: 0 PID: 27746 Comm: syz.2.4334 Tainted: G L syzkaller #0 PREEMPT(full) [ 1511.630473][T27746] Tainted: [L]=SOFTLOCKUP [ 1511.630483][T27746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1511.630500][T27746] Call Trace: [ 1511.630510][T27746] [ 1511.630521][T27746] dump_stack_lvl+0x100/0x190 [ 1511.630560][T27746] warn_alloc.cold+0x95/0x1c1 [ 1511.630608][T27746] ? __pfx_warn_alloc+0x10/0x10 [ 1511.630643][T27746] ? kasan_quarantine_reduce+0x1c9/0x1f0 [ 1511.630684][T27746] ? rcu_is_watching+0x12/0xc0 [ 1511.630712][T27746] ? trace_kmalloc+0x83/0xb0 [ 1511.630748][T27746] ? __kmalloc_node_noprof+0x375/0x9e0 [ 1511.630784][T27746] ? __get_vm_area_node+0x1dc/0x330 [ 1511.630840][T27746] ? __vmalloc_node_range_noprof+0x3dc/0x1530 [ 1511.630879][T27746] __vmalloc_node_range_noprof+0x1275/0x1530 [ 1511.630920][T27746] ? n_tty_open+0x1a/0x170 [ 1511.630962][T27746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1511.630993][T27746] ? __ldsem_down_write_nested+0xfd/0x830 [ 1511.631022][T27746] ? __ldsem_down_write_nested+0x10e/0x830 [ 1511.631050][T27746] ? is_console_locked+0x9/0x20 [ 1511.631090][T27746] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1511.631124][T27746] ? n_tty_open+0x1a/0x170 [ 1511.631151][T27746] __vmalloc_node_noprof+0xad/0xf0 [ 1511.631178][T27746] ? n_tty_open+0x1a/0x170 [ 1511.631215][T27746] ? __pfx_n_tty_open+0x10/0x10 [ 1511.631243][T27746] n_tty_open+0x1a/0x170 [ 1511.631273][T27746] tty_ldisc_open+0xa2/0x120 [ 1511.631313][T27746] tty_ldisc_setup+0x40/0xf0 [ 1511.631355][T27746] tty_init_dev.part.0+0x1b5/0x470 [ 1511.631385][T27746] tty_open+0xa63/0xfa0 [ 1511.631418][T27746] ? __pfx_tty_open+0x10/0x10 [ 1511.631444][T27746] ? chrdev_open+0x10b/0x6a0 [ 1511.631480][T27746] ? chrdev_open+0x10b/0x6a0 [ 1511.631530][T27746] ? __pfx_tty_open+0x10/0x10 [ 1511.631556][T27746] chrdev_open+0x234/0x6a0 [ 1511.631588][T27746] ? __pfx_apparmor_file_open+0x10/0x10 [ 1511.631626][T27746] ? __pfx_chrdev_open+0x10/0x10 [ 1511.631672][T27746] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1511.631716][T27746] do_dentry_open+0x73e/0x1570 [ 1511.631750][T27746] ? __pfx_chrdev_open+0x10/0x10 [ 1511.631787][T27746] ? security_inode_permission+0xbf/0x250 [ 1511.631839][T27746] vfs_open+0x82/0x3f0 [ 1511.631888][T27746] path_openat+0x21dc/0x3120 [ 1511.631937][T27746] ? __pfx_path_openat+0x10/0x10 [ 1511.631987][T27746] do_filp_open+0x1f7/0x420 [ 1511.632023][T27746] ? __pfx_do_filp_open+0x10/0x10 [ 1511.632076][T27746] ? _raw_spin_unlock+0x28/0x50 [ 1511.632100][T27746] ? alloc_fd+0x476/0x790 [ 1511.632140][T27746] do_sys_openat2+0x12e/0x220 [ 1511.632178][T27746] ? __pfx_do_sys_openat2+0x10/0x10 [ 1511.632235][T27746] __x64_sys_openat+0x12d/0x210 [ 1511.632272][T27746] ? __pfx___x64_sys_openat+0x10/0x10 [ 1511.632313][T27746] ? xfd_validate_state+0x129/0x190 [ 1511.632362][T27746] do_syscall_64+0xc9/0xf80 [ 1511.632394][T27746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.632418][T27746] RIP: 0033:0x7fafac39aeb9 [ 1511.632439][T27746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.632463][T27746] RSP: 002b:00007fafad20e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1511.632487][T27746] RAX: ffffffffffffffda RBX: 00007fafac615fa0 RCX: 00007fafac39aeb9 [ 1511.632504][T27746] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1511.632519][T27746] RBP: 00007fafac408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1511.632534][T27746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.632548][T27746] R13: 00007fafac616038 R14: 00007fafac615fa0 R15: 00007ffdb630fd98 [ 1511.632581][T27746] [ 1511.632597][T27746] Mem-Info: [ 1512.066152][T27746] active_anon:4589 inactive_anon:24203 isolated_anon:0 [ 1512.066152][T27746] active_file:21751 inactive_file:39648 isolated_file:0 [ 1512.066152][T27746] unevictable:769 dirty:786 writeback:0 [ 1512.066152][T27746] slab_reclaimable:12961 slab_unreclaimable:98429 [ 1512.066152][T27746] mapped:37365 shmem:9465 pagetables:1820 [ 1512.066152][T27746] sec_pagetables:0 bounce:0 [ 1512.066152][T27746] kernel_misc_reclaimable:0 [ 1512.066152][T27746] free:1287852 free_pcp:10061 free_cma:0 [ 1512.160614][T27746] Node 0 active_anon:18356kB inactive_anon:97712kB active_file:87004kB inactive_file:158456kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:150360kB dirty:3144kB writeback:0kB shmem:37524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:43008kB kernel_stack:12784kB pagetables:7156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1512.245836][T27746] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1512.325675][T27746] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1512.508480][T27746] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1512.514309][T27746] Node 0 DMA32 free:1244032kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15932kB inactive_anon:102936kB active_file:87072kB inactive_file:158388kB unevictable:1536kB writepending:3284kB zspages:0kB present:3129332kB managed:2539572kB mlocked:0kB bounce:0kB free_pcp:26956kB local_pcp:16344kB free_cma:0kB [ 1512.625101][T27746] lowmem_reserve[]: 0 0 1 1 1 [ 1512.648751][T27746] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1512.726985][T27746] lowmem_reserve[]: 0 0 0 0 0 [ 1512.732340][T27746] Node 1 Normal free:3891132kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12908kB local_pcp:0kB free_cma:0kB [ 1512.837245][T27746] lowmem_reserve[]: 0 0 0 0 0 [ 1512.856739][T27746] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1512.923410][T27746] Node 0 DMA32: 3513*4kB (UE) 4752*8kB (UME) 3993*16kB (UME) 1052*32kB (UME) 493*64kB (UME) 365*128kB (UM) 221*256kB (UME) 188*512kB (UME) 118*1024kB (UM) 19*2048kB (UME) 169*4096kB (UM) = 1232692kB [ 1513.007233][T27746] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1513.089979][T27746] Node 1 Normal: 161*4kB (UME) 21*8kB (UME) 21*16kB (UME) 238*32kB (UME) 108*64kB (UE) 33*128kB (UME) 8*256kB (UME) 5*512kB (UME) 4*1024kB (UM) 2*2048kB (UE) 942*4096kB (M) = 3891132kB [ 1513.137127][T27758] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4335: iget: checksum invalid [ 1513.149611][T27758] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1513.187139][T27746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1513.203545][T27746] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1513.234075][T27746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1513.267531][T27746] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1513.328476][T27746] 75133 total pagecache pages [ 1513.333202][T27746] 0 pages in swap cache [ 1513.361958][T27758] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4335: iget: checksum invalid [ 1513.373151][T27746] Free swap = 124996kB [ 1513.424456][T27746] Total swap = 124996kB [ 1513.432443][T27746] 2097051 pages RAM [ 1513.459649][T27746] 0 pages HighMem/MovableOnly [ 1513.464405][T27746] 430196 pages reserved [ 1513.487611][T27746] 0 pages cma reserved [ 1513.492154][T27746] tty tty6: ldisc open failed (-12), clearing slot 5 [ 1513.497804][T27758] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1513.626453][T27758] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4335: iget: checksum invalid [ 1513.667035][T27758] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1513.712101][T27764] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(137.0.4294967293), cmd(3) [ 1513.730636][T27758] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.4335: iget: checksum invalid [ 1513.758428][T27758] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1513.970241][T27758] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1514.000654][T27758] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1518.173597][T27806] futex_wake_op: syz.1.4347 tries to shift op by -2048; fix this program [ 1519.067134][T27811] FAULT_INJECTION: forcing a failure. [ 1519.067134][T27811] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.100087][T27811] CPU: 0 UID: 0 PID: 27811 Comm: syz.2.4349 Tainted: G L syzkaller #0 PREEMPT(full) [ 1519.100135][T27811] Tainted: [L]=SOFTLOCKUP [ 1519.100145][T27811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1519.100172][T27811] Call Trace: [ 1519.100182][T27811] [ 1519.100192][T27811] dump_stack_lvl+0x100/0x190 [ 1519.100234][T27811] should_fail_ex.cold+0x5/0xa [ 1519.100278][T27811] should_failslab+0xc2/0x120 [ 1519.100317][T27811] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 1519.100350][T27811] __kmalloc_noprof+0xf6/0x9c0 [ 1519.100379][T27811] ? kasan_quarantine_put+0x104/0x240 [ 1519.100408][T27811] ? lockdep_hardirqs_on+0x78/0x100 [ 1519.100447][T27811] ? genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 1519.100480][T27811] genl_family_rcv_msg_attrs_parse.isra.0+0xc8/0x290 [ 1519.100522][T27811] genl_family_rcv_msg_doit+0xc7/0x300 [ 1519.100556][T27811] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1519.100583][T27811] ? genl_get_cmd+0x3ef/0x720 [ 1519.100606][T27811] ? bpf_lsm_capable+0x9/0x10 [ 1519.100623][T27811] ? security_capable+0x80/0x260 [ 1519.100647][T27811] ? ns_capable+0xd2/0xf0 [ 1519.100670][T27811] genl_rcv_msg+0x560/0x800 [ 1519.100692][T27811] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1519.100713][T27811] ? __pfx_ethnl_act_module_fw_flash+0x10/0x10 [ 1519.100744][T27811] netlink_rcv_skb+0x159/0x420 [ 1519.100775][T27811] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1519.100799][T27811] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1519.100838][T27811] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1519.100870][T27811] genl_rcv+0x28/0x40 [ 1519.100887][T27811] netlink_unicast+0x5aa/0x870 [ 1519.100919][T27811] ? __pfx_netlink_unicast+0x10/0x10 [ 1519.100957][T27811] netlink_sendmsg+0x8b0/0xda0 [ 1519.100990][T27811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1519.101018][T27811] ? __import_iovec+0x1d2/0x640 [ 1519.101049][T27811] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1519.101077][T27811] ____sys_sendmsg+0xa54/0xc30 [ 1519.101102][T27811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1519.101133][T27811] ___sys_sendmsg+0x190/0x1e0 [ 1519.101164][T27811] ? __pfx____sys_sendmsg+0x10/0x10 [ 1519.101197][T27811] ? find_held_lock+0x2b/0x80 [ 1519.101229][T27811] __sys_sendmsg+0x170/0x220 [ 1519.101258][T27811] ? __pfx___sys_sendmsg+0x10/0x10 [ 1519.101300][T27811] do_syscall_64+0xc9/0xf80 [ 1519.101324][T27811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.101343][T27811] RIP: 0033:0x7fafac39aeb9 [ 1519.101359][T27811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1519.101378][T27811] RSP: 002b:00007fafad20e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1519.101397][T27811] RAX: ffffffffffffffda RBX: 00007fafac615fa0 RCX: 00007fafac39aeb9 [ 1519.101409][T27811] RDX: 0000000004000810 RSI: 0000200000000200 RDI: 0000000000000003 [ 1519.101420][T27811] RBP: 00007fafad20e090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.101432][T27811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1519.101443][T27811] R13: 00007fafac616038 R14: 00007fafac615fa0 R15: 00007ffdb630fd98 [ 1519.101466][T27811] [ 1521.252990][T27826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4352'. [ 1521.357176][T27827] NFSD: Failed to start, no listeners configured. [ 1522.057550][T26928] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 964 with max blocks 32 with error 117 [ 1522.083196][T26928] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1522.083196][T26928] [ 1522.107712][T26928] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 973 with max blocks 23 with error 117 [ 1522.204657][T26928] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1522.204657][T26928] [ 1522.367187][T26932] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1383 with max blocks 29 with error 117 [ 1522.396411][T26932] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1522.396411][T26932] [ 1522.430292][T26932] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1388 with max blocks 10 with error 117 [ 1522.453516][T26932] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1522.453516][T26932] [ 1522.577257][T27838] FAULT_INJECTION: forcing a failure. [ 1522.577257][T27838] name failslab, interval 1, probability 0, space 0, times 0 [ 1522.590550][T27838] CPU: 1 UID: 0 PID: 27838 Comm: syz.0.4355 Tainted: G L syzkaller #0 PREEMPT(full) [ 1522.590599][T27838] Tainted: [L]=SOFTLOCKUP [ 1522.590611][T27838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1522.590630][T27838] Call Trace: [ 1522.590641][T27838] [ 1522.590654][T27838] dump_stack_lvl+0x100/0x190 [ 1522.590699][T27838] should_fail_ex.cold+0x5/0xa [ 1522.590751][T27838] should_failslab+0xc2/0x120 [ 1522.590792][T27838] __kmalloc_node_noprof+0xfb/0x9e0 [ 1522.590832][T27838] ? __get_vm_area_node+0x1dc/0x330 [ 1522.590881][T27838] ? __vmalloc_node_range_noprof+0x3dc/0x1530 [ 1522.590920][T27838] ? __vmalloc_node_range_noprof+0x3dc/0x1530 [ 1522.590953][T27838] __vmalloc_node_range_noprof+0x3dc/0x1530 [ 1522.590994][T27838] ? n_tty_open+0x1a/0x170 [ 1522.591039][T27838] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1522.591071][T27838] ? __ldsem_down_write_nested+0xfd/0x830 [ 1522.591102][T27838] ? __ldsem_down_write_nested+0x10e/0x830 [ 1522.591133][T27838] ? is_console_locked+0x9/0x20 [ 1522.591179][T27838] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1522.591228][T27838] ? n_tty_open+0x1a/0x170 [ 1522.591257][T27838] __vmalloc_node_noprof+0xad/0xf0 [ 1522.591287][T27838] ? n_tty_open+0x1a/0x170 [ 1522.591318][T27838] ? __pfx_n_tty_open+0x10/0x10 [ 1522.591350][T27838] n_tty_open+0x1a/0x170 [ 1522.591382][T27838] tty_ldisc_open+0xa2/0x120 [ 1522.591424][T27838] tty_ldisc_setup+0x40/0xf0 [ 1522.591467][T27838] tty_init_dev.part.0+0x1b5/0x470 [ 1522.591501][T27838] tty_open+0xa63/0xfa0 [ 1522.591537][T27838] ? __pfx_tty_open+0x10/0x10 [ 1522.591561][T27838] ? chrdev_open+0x10b/0x6a0 [ 1522.591597][T27838] ? chrdev_open+0x10b/0x6a0 [ 1522.591640][T27838] ? __pfx_tty_open+0x10/0x10 [ 1522.591670][T27838] chrdev_open+0x234/0x6a0 [ 1522.591707][T27838] ? __pfx_apparmor_file_open+0x10/0x10 [ 1522.591752][T27838] ? __pfx_chrdev_open+0x10/0x10 [ 1522.591791][T27838] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1522.591836][T27838] do_dentry_open+0x73e/0x1570 [ 1522.591873][T27838] ? __pfx_chrdev_open+0x10/0x10 [ 1522.591913][T27838] ? security_inode_permission+0xbf/0x250 [ 1522.591964][T27838] vfs_open+0x82/0x3f0 [ 1522.592015][T27838] path_openat+0x21dc/0x3120 [ 1522.592067][T27838] ? __pfx_path_openat+0x10/0x10 [ 1522.592121][T27838] do_filp_open+0x1f7/0x420 [ 1522.592163][T27838] ? __pfx_do_filp_open+0x10/0x10 [ 1522.592239][T27838] ? _raw_spin_unlock+0x28/0x50 [ 1522.592271][T27838] ? alloc_fd+0x476/0x790 [ 1522.592321][T27838] do_sys_openat2+0x12e/0x220 [ 1522.592368][T27838] ? __pfx_do_sys_openat2+0x10/0x10 [ 1522.592432][T27838] __x64_sys_openat+0x12d/0x210 [ 1522.592480][T27838] ? __pfx___x64_sys_openat+0x10/0x10 [ 1522.592523][T27838] ? xfd_validate_state+0x129/0x190 [ 1522.592587][T27838] do_syscall_64+0xc9/0xf80 [ 1522.592628][T27838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.592660][T27838] RIP: 0033:0x7f624cd9aeb9 [ 1522.592686][T27838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.592715][T27838] RSP: 002b:00007f624dd11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1522.592747][T27838] RAX: ffffffffffffffda RBX: 00007f624d015fa0 RCX: 00007f624cd9aeb9 [ 1522.592768][T27838] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1522.592787][T27838] RBP: 00007f624ce08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1522.592806][T27838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1522.592824][T27838] R13: 00007f624d016038 R14: 00007f624d015fa0 R15: 00007ffd5b4a8e48 [ 1522.592868][T27838] [ 1522.984185][T27841] Line length is too long: Should be less than 4094 [ 1523.019853][T27842] futex_wake_op: syz.4.4356 tries to shift op by -2048; fix this program [ 1523.032372][T27840] size and base must be multiples of 4 kiB [ 1523.038299][T27840] CPU: 1 UID: 0 PID: 27840 Comm: syz.4.4356 Tainted: G L syzkaller #0 PREEMPT(full) [ 1523.038329][T27840] Tainted: [L]=SOFTLOCKUP [ 1523.038336][T27840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1523.038346][T27840] Call Trace: [ 1523.038353][T27840] [ 1523.038361][T27840] dump_stack_lvl+0x100/0x190 [ 1523.038387][T27840] mtrr_del.cold+0x72/0x85 [ 1523.038406][T27840] mtrr_ioctl+0xbc8/0xcf0 [ 1523.038435][T27840] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1523.038466][T27840] ? find_held_lock+0x2b/0x80 [ 1523.038490][T27840] ? __fget_files+0x21f/0x3d0 [ 1523.038511][T27840] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1523.038538][T27840] proc_reg_unlocked_ioctl+0x229/0x320 [ 1523.038565][T27840] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1523.038594][T27840] __x64_sys_ioctl+0x18e/0x210 [ 1523.038625][T27840] do_syscall_64+0xc9/0xf80 [ 1523.038649][T27840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.038667][T27840] RIP: 0033:0x7f5f1459aeb9 [ 1523.038682][T27840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.038700][T27840] RSP: 002b:00007f5f1544c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1523.038718][T27840] RAX: ffffffffffffffda RBX: 00007f5f14815fa0 RCX: 00007f5f1459aeb9 [ 1523.038730][T27840] RDX: 0000000000000000 RSI: 0000000040104d04 RDI: 0000000000000000 [ 1523.038741][T27840] RBP: 00007f5f14608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1523.038751][T27840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1523.038762][T27840] R13: 00007f5f14816038 R14: 00007f5f14815fa0 R15: 00007fff730e6c68 [ 1523.038786][T27840] [ 1523.505150][T27838] syz.0.4355: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1523.553946][T27838] CPU: 0 UID: 0 PID: 27838 Comm: syz.0.4355 Tainted: G L syzkaller #0 PREEMPT(full) [ 1523.553998][T27838] Tainted: [L]=SOFTLOCKUP [ 1523.554010][T27838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1523.554029][T27838] Call Trace: [ 1523.554041][T27838] [ 1523.554054][T27838] dump_stack_lvl+0x100/0x190 [ 1523.554103][T27838] warn_alloc.cold+0x95/0x1c1 [ 1523.554154][T27838] ? __pfx_warn_alloc+0x10/0x10 [ 1523.554209][T27838] ? rcu_is_watching+0x12/0xc0 [ 1523.554240][T27838] ? trace_kmalloc+0x83/0xb0 [ 1523.554282][T27838] ? __kmalloc_node_noprof+0x375/0x9e0 [ 1523.554323][T27838] ? __get_vm_area_node+0x1dc/0x330 [ 1523.554370][T27838] ? __vmalloc_node_range_noprof+0x3dc/0x1530 [ 1523.554411][T27838] __vmalloc_node_range_noprof+0x1275/0x1530 [ 1523.554454][T27838] ? n_tty_open+0x1a/0x170 [ 1523.554499][T27838] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1523.554531][T27838] ? __ldsem_down_write_nested+0xfd/0x830 [ 1523.554563][T27838] ? __ldsem_down_write_nested+0x10e/0x830 [ 1523.554594][T27838] ? is_console_locked+0x9/0x20 [ 1523.554639][T27838] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1523.554678][T27838] ? n_tty_open+0x1a/0x170 [ 1523.554708][T27838] __vmalloc_node_noprof+0xad/0xf0 [ 1523.554737][T27838] ? n_tty_open+0x1a/0x170 [ 1523.554769][T27838] ? __pfx_n_tty_open+0x10/0x10 [ 1523.554800][T27838] n_tty_open+0x1a/0x170 [ 1523.554833][T27838] tty_ldisc_open+0xa2/0x120 [ 1523.554874][T27838] tty_ldisc_setup+0x40/0xf0 [ 1523.554918][T27838] tty_init_dev.part.0+0x1b5/0x470 [ 1523.554950][T27838] tty_open+0xa63/0xfa0 [ 1523.554986][T27838] ? __pfx_tty_open+0x10/0x10 [ 1523.555011][T27838] ? chrdev_open+0x10b/0x6a0 [ 1523.555047][T27838] ? chrdev_open+0x10b/0x6a0 [ 1523.555089][T27838] ? __pfx_tty_open+0x10/0x10 [ 1523.555116][T27838] chrdev_open+0x234/0x6a0 [ 1523.555153][T27838] ? __pfx_apparmor_file_open+0x10/0x10 [ 1523.555216][T27838] ? __pfx_chrdev_open+0x10/0x10 [ 1523.555258][T27838] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1523.555304][T27838] do_dentry_open+0x73e/0x1570 [ 1523.555342][T27838] ? __pfx_chrdev_open+0x10/0x10 [ 1523.555381][T27838] ? security_inode_permission+0xbf/0x250 [ 1523.555434][T27838] vfs_open+0x82/0x3f0 [ 1523.555481][T27838] path_openat+0x21dc/0x3120 [ 1523.555533][T27838] ? __pfx_path_openat+0x10/0x10 [ 1523.555588][T27838] do_filp_open+0x1f7/0x420 [ 1523.555629][T27838] ? __pfx_do_filp_open+0x10/0x10 [ 1523.555698][T27838] ? _raw_spin_unlock+0x28/0x50 [ 1523.555730][T27838] ? alloc_fd+0x476/0x790 [ 1523.555779][T27838] do_sys_openat2+0x12e/0x220 [ 1523.555827][T27838] ? __pfx_do_sys_openat2+0x10/0x10 [ 1523.555891][T27838] __x64_sys_openat+0x12d/0x210 [ 1523.555938][T27838] ? __pfx___x64_sys_openat+0x10/0x10 [ 1523.555984][T27838] ? xfd_validate_state+0x129/0x190 [ 1523.556049][T27838] do_syscall_64+0xc9/0xf80 [ 1523.556090][T27838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.556122][T27838] RIP: 0033:0x7f624cd9aeb9 [ 1523.556149][T27838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.556189][T27838] RSP: 002b:00007f624dd11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1523.556221][T27838] RAX: ffffffffffffffda RBX: 00007f624d015fa0 RCX: 00007f624cd9aeb9 [ 1523.556242][T27838] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1523.556262][T27838] RBP: 00007f624ce08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1523.556282][T27838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1523.556302][T27838] R13: 00007f624d016038 R14: 00007f624d015fa0 R15: 00007ffd5b4a8e48 [ 1523.556348][T27838] [ 1523.562132][T27838] Mem-Info: [ 1523.948150][T27838] active_anon:3972 inactive_anon:54819 isolated_anon:0 [ 1523.948150][T27838] active_file:23499 inactive_file:37888 isolated_file:0 [ 1523.948150][T27838] unevictable:768 dirty:434 writeback:0 [ 1523.948150][T27838] slab_reclaimable:12930 slab_unreclaimable:99133 [ 1523.948150][T27838] mapped:47946 shmem:37392 pagetables:1901 [ 1523.948150][T27838] sec_pagetables:0 bounce:0 [ 1523.948150][T27838] kernel_misc_reclaimable:0 [ 1523.948150][T27838] free:1235282 free_pcp:32240 free_cma:0 [ 1524.216441][T27838] Node 0 active_anon:15888kB inactive_anon:219404kB active_file:93996kB inactive_file:151416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:195784kB dirty:1768kB writeback:0kB shmem:146232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:53248kB kernel_stack:12748kB pagetables:7380kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1524.437589][T27838] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1524.532894][T27838] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.582901][T27838] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1524.600717][T27838] Node 0 DMA32 free:1035100kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15888kB inactive_anon:213332kB active_file:93996kB inactive_file:151320kB unevictable:1536kB writepending:1792kB zspages:0kB present:3129332kB managed:2539572kB mlocked:0kB bounce:0kB free_pcp:121380kB local_pcp:59480kB free_cma:0kB [ 1524.636483][T27838] lowmem_reserve[]: 0 0 1 1 1 [ 1524.673336][T27838] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1524.704318][T27838] lowmem_reserve[]: 0 0 0 0 0 [ 1524.713881][T27838] Node 1 Normal free:3892140kB boost:0kB min:55560kB low:69448kB high:83336kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:11900kB local_pcp:0kB free_cma:0kB [ 1524.746828][T27838] lowmem_reserve[]: 0 0 0 0 0 [ 1524.754337][T27838] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1524.774437][T27838] Node 0 DMA32: 4361*4kB (UME) 4880*8kB (UME) 3993*16kB (UME) 336*32kB (UME) 188*64kB (UME) 252*128kB (UM) 162*256kB (UME) 145*512kB (UME) 84*1024kB (UM) 17*2048kB (UME) 153*4096kB (UM) = 1038644kB [ 1524.805185][T27838] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1524.820802][T27838] Node 1 Normal: 161*4kB (UME) 21*8kB (UME) 22*16kB (UME) 237*32kB (UME) 108*64kB (UE) 33*128kB (UME) 8*256kB (UME) 5*512kB (UME) 3*1024kB (UM) 3*2048kB (UME) 942*4096kB (M) = 3892140kB [ 1524.866710][T27838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1524.913023][T27838] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1524.927597][T27838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1524.961116][T27838] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1524.981735][T27838] 95718 total pagecache pages [ 1524.991607][T27838] 0 pages in swap cache [ 1525.009593][T27838] Free swap = 124996kB [ 1525.021144][T27838] Total swap = 124996kB [ 1525.034956][T27838] 2097051 pages RAM [ 1525.048474][T27838] 0 pages HighMem/MovableOnly [ 1525.060732][T27838] 430196 pages reserved [ 1525.072348][T27838] 0 pages cma reserved [ 1525.114664][T27838] tty tty6: ldisc open failed (-12), clearing slot 5 [ 1525.684433][T27869] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 1525.707226][T26939] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1388 with max blocks 1 with error 117 [ 1525.720449][T26939] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1525.720449][T26939] [ 1526.729731][T27899] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4370'. [ 1526.955831][ T30] audit: type=1800 audit(4294968709.057:151): pid=27900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4371" name="file0" dev="tmpfs" ino=2230 res=0 errno=0 [ 1529.503022][T27949] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1752458614.1634557744.1635022435), cmd(3) [ 1530.886746][T26928] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 978 with max blocks 18 with error 117 [ 1530.931280][T26928] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1530.931280][T26928] [ 1530.952681][T26928] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 973 with max blocks 23 with error 117 [ 1530.984047][T26928] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1530.984047][T26928] [ 1531.036605][T27970] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1531.060088][T27970] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1531.075142][T27970] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1531.087438][T27970] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1531.109165][T21446] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1531.181200][T27973] futex_wake_op: syz.2.4392 tries to shift op by -2048; fix this program [ 1531.328254][T27975] netlink: 'syz.2.4392': attribute type 5 has an invalid length. [ 1531.478628][T25374] ------------[ cut here ]------------ [ 1531.484158][T25374] ODEBUG: free active (active state 0) object: ffff88804c5e1460 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 1531.498037][T25374] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#0: syz.1.3755/25374 [ 1531.508405][T25374] Modules linked in: [ 1531.513423][T25374] CPU: 0 UID: 0 PID: 25374 Comm: syz.1.3755 Tainted: G L syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1531.525415][T25374] Tainted: [L]=SOFTLOCKUP [ 1531.531148][T25374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1531.542410][T25374] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1531.548421][T25374] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 52 ca d4 0b 41 56 48 8b 14 dd e0 44 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 5c 8c ca 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1531.569026][T25374] RSP: 0000:ffffc900041c7708 EFLAGS: 00010246 [ 1531.575160][T25374] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1531.583283][T25374] RDX: ffffffff8bfa4420 RSI: ffffffff8bfa4040 RDI: ffffffff90c1e0a0 [ 1531.592128][T25374] RBP: 0000000000000001 R08: ffff88804c5e1460 R09: ffffffff8b92b820 [ 1531.600428][T25374] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa4040 [ 1531.608607][T25374] R13: ffffffff8b92b860 R14: ffffffff8a806580 R15: ffffc900041c7808 [ 1531.618162][T25374] FS: 0000000000000000(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000 [ 1531.628866][T25374] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1531.635685][T25374] CR2: 00007f624dcefff8 CR3: 000000000e392000 CR4: 00000000003526f0 [ 1531.644538][T25374] Call Trace: [ 1531.648068][T25374] [ 1531.651030][T25374] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1531.656631][T25374] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1531.662497][T25374] debug_check_no_obj_freed+0x4da/0x630 [ 1531.668258][T25374] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1531.674374][T25374] ? __page_table_check_zero+0x333/0x410 [ 1531.680415][T25374] ? __page_table_check_zero+0x333/0x410 [ 1531.688219][T25374] ? __page_table_check_zero+0x338/0x410 [ 1531.695236][T25374] __free_frozen_pages+0x358/0x1130 [ 1531.700699][T25374] hci_release_dev+0x4ef/0x630 [ 1531.705534][T25374] ? __pfx_hci_release_dev+0x10/0x10 [ 1531.711116][T25374] ? rcu_is_watching+0x12/0xc0 [ 1531.717151][T25374] ? kfree+0x2a9/0x690 [ 1531.721374][T25374] bt_host_release+0x6a/0xb0 [ 1531.726020][T25374] ? __pfx_bt_host_release+0x10/0x10 [ 1531.733620][T25374] device_release+0xa4/0x240 [ 1531.739252][T25374] kobject_put+0x1f7/0x640 [ 1531.743742][T25374] put_device+0x1f/0x30 [ 1531.748287][T25374] vhci_release+0x185/0x230 [ 1531.752851][T25374] ? __pfx_vhci_release+0x10/0x10 [ 1531.757991][T25374] __fput+0x3ff/0xb40 [ 1531.762035][T25374] task_work_run+0x150/0x240 [ 1531.766721][T25374] ? __pfx_task_work_run+0x10/0x10 [ 1531.771908][T25374] do_exit+0x829/0x2a30 [ 1531.776227][T25374] ? __pfx_do_exit+0x10/0x10 [ 1531.781200][T25374] ? cgroup_update_frozen_flag+0x107/0x210 [ 1531.787229][T25374] ? find_held_lock+0x2b/0x80 [ 1531.792109][T25374] ? get_signal+0x184f/0x21e0 [ 1531.796954][T25374] do_group_exit+0xd5/0x2a0 [ 1531.801605][T25374] get_signal+0x1ec7/0x21e0 [ 1531.806150][T25374] ? __asan_memset+0x23/0x50 [ 1531.810895][T25374] ? __pfx_get_signal+0x10/0x10 [ 1531.815970][T25374] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1531.822385][T25374] arch_do_signal_or_restart+0x91/0x770 [ 1531.829042][T25374] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1531.835435][T25374] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 1531.842195][T25374] exit_to_user_mode_loop+0x86/0x4b0 [ 1531.848248][T25374] ? rcu_is_watching+0x12/0xc0 [ 1531.853074][T25374] do_syscall_64+0x4ea/0xf80 [ 1531.857816][T25374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.864278][T25374] RIP: 0033:0x7f46a4f5b78e [ 1531.868822][T25374] Code: Unable to access opcode bytes at 0x7f46a4f5b764. [ 1531.876047][T25374] RSP: 002b:00007f46a5e2df58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1531.884760][T25374] RAX: fffffffffffffdfc RBX: 00007f46a5e2e6c0 RCX: 00007f46a4f5b78e [ 1531.893136][T25374] RDX: 00007f46a5e2dfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1531.901571][T25374] RBP: 00007f46a5008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1531.909694][T25374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1531.917897][T25374] R13: 00007f46a5216038 R14: 00007f46a5215fa0 R15: 00007fffe7a78698 [ 1531.927989][T25374] [ 1531.931141][T25374] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1531.938548][T25374] CPU: 0 UID: 0 PID: 25374 Comm: syz.1.3755 Tainted: G L syzkaller #0 PREEMPT(full) [ 1531.949619][T25374] Tainted: [L]=SOFTLOCKUP [ 1531.953974][T25374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1531.964241][T25374] Call Trace: [ 1531.967628][T25374] [ 1531.970670][T25374] dump_stack_lvl+0x100/0x190 [ 1531.975413][T25374] vpanic+0x20d/0x630 [ 1531.979416][T25374] panic+0xd1/0xd1 [ 1531.983156][T25374] ? __pfx_panic+0x10/0x10 [ 1531.987606][T25374] ? check_panic_on_warn+0x1f/0x90 [ 1531.992783][T25374] check_panic_on_warn.cold+0x19/0x34 [ 1531.998258][T25374] ? debug_print_object+0x18e/0x2a0 [ 1532.003475][T25374] __warn.cold+0x191/0x2f8 [ 1532.007913][T25374] __report_bug+0x296/0x3d0 [ 1532.012444][T25374] ? debug_print_object+0x18e/0x2a0 [ 1532.017752][T25374] ? __pfx___report_bug+0x10/0x10 [ 1532.022996][T25374] ? unwind_next_frame+0x3c8/0x1ea0 [ 1532.028246][T25374] report_bug_entry+0xe1/0x290 [ 1532.033044][T25374] ? debug_print_object+0x19b/0x2a0 [ 1532.038282][T25374] handle_bug+0x1c9/0x2a0 [ 1532.042664][T25374] exc_invalid_op+0x17/0x50 [ 1532.047209][T25374] asm_exc_invalid_op+0x1a/0x20 [ 1532.052095][T25374] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1532.057939][T25374] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 52 ca d4 0b 41 56 48 8b 14 dd e0 44 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 5c 8c ca 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1532.077759][T25374] RSP: 0000:ffffc900041c7708 EFLAGS: 00010246 [ 1532.083851][T25374] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1532.091841][T25374] RDX: ffffffff8bfa4420 RSI: ffffffff8bfa4040 RDI: ffffffff90c1e0a0 [ 1532.099916][T25374] RBP: 0000000000000001 R08: ffff88804c5e1460 R09: ffffffff8b92b820 [ 1532.108163][T25374] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa4040 [ 1532.116151][T25374] R13: ffffffff8b92b860 R14: ffffffff8a806580 R15: ffffc900041c7808 [ 1532.124235][T25374] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1532.129736][T25374] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1532.135216][T25374] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1532.141051][T25374] debug_check_no_obj_freed+0x4da/0x630 [ 1532.146640][T25374] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1532.152819][T25374] ? __page_table_check_zero+0x333/0x410 [ 1532.158657][T25374] ? __page_table_check_zero+0x333/0x410 [ 1532.164410][T25374] ? __page_table_check_zero+0x338/0x410 [ 1532.170083][T25374] __free_frozen_pages+0x358/0x1130 [ 1532.175402][T25374] hci_release_dev+0x4ef/0x630 [ 1532.180189][T25374] ? __pfx_hci_release_dev+0x10/0x10 [ 1532.185500][T25374] ? rcu_is_watching+0x12/0xc0 [ 1532.190369][T25374] ? kfree+0x2a9/0x690 [ 1532.194463][T25374] bt_host_release+0x6a/0xb0 [ 1532.199168][T25374] ? __pfx_bt_host_release+0x10/0x10 [ 1532.204481][T25374] device_release+0xa4/0x240 [ 1532.209104][T25374] kobject_put+0x1f7/0x640 [ 1532.213649][T25374] put_device+0x1f/0x30 [ 1532.217822][T25374] vhci_release+0x185/0x230 [ 1532.222360][T25374] ? __pfx_vhci_release+0x10/0x10 [ 1532.227445][T25374] __fput+0x3ff/0xb40 [ 1532.231475][T25374] task_work_run+0x150/0x240 [ 1532.236182][T25374] ? __pfx_task_work_run+0x10/0x10 [ 1532.241357][T25374] do_exit+0x829/0x2a30 [ 1532.245547][T25374] ? __pfx_do_exit+0x10/0x10 [ 1532.250255][T25374] ? cgroup_update_frozen_flag+0x107/0x210 [ 1532.256182][T25374] ? find_held_lock+0x2b/0x80 [ 1532.260875][T25374] ? get_signal+0x184f/0x21e0 [ 1532.265579][T25374] do_group_exit+0xd5/0x2a0 [ 1532.270138][T25374] get_signal+0x1ec7/0x21e0 [ 1532.274664][T25374] ? __asan_memset+0x23/0x50 [ 1532.279285][T25374] ? __pfx_get_signal+0x10/0x10 [ 1532.284161][T25374] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1532.289397][T25374] arch_do_signal_or_restart+0x91/0x770 [ 1532.295146][T25374] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1532.301430][T25374] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 1532.307268][T25374] exit_to_user_mode_loop+0x86/0x4b0 [ 1532.312579][T25374] ? rcu_is_watching+0x12/0xc0 [ 1532.317621][T25374] do_syscall_64+0x4ea/0xf80 [ 1532.322235][T25374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.328142][T25374] RIP: 0033:0x7f46a4f5b78e [ 1532.332575][T25374] Code: Unable to access opcode bytes at 0x7f46a4f5b764. [ 1532.339603][T25374] RSP: 002b:00007f46a5e2df58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1532.348036][T25374] RAX: fffffffffffffdfc RBX: 00007f46a5e2e6c0 RCX: 00007f46a4f5b78e [ 1532.356024][T25374] RDX: 00007f46a5e2dfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1532.364617][T25374] RBP: 00007f46a5008c1f R08: 0000000000000000 R09: 0000000000000000 [ 1532.372601][T25374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1532.380583][T25374] R13: 00007f46a5216038 R14: 00007f46a5215fa0 R15: 00007fffe7a78698 [ 1532.388842][T25374] [ 1532.392478][T25374] Kernel Offset: disabled [ 1532.396811][T25374] Rebooting in 86400 seconds..