last executing test programs: 1m3.629054537s ago: executing program 3 (id=2170): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x2b}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={0x0, 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x40000) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) 1m1.365702675s ago: executing program 3 (id=2172): mmap$auto(0x0, 0xc, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) write$auto_mousedev_fops_mousedev(r1, &(0x7f0000001380)="22d2", 0x2) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_nvram_misc_fops_nvram(r2, &(0x7f0000000280)=""/210, 0xd2) ioctl$auto_NVRAM_INIT(r2, 0x7040, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0880, 0x0) read$auto(r3, &(0x7f0000000040)='/proc/self/net/icmp\x00', 0x80000001) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x44, r5, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) capget$auto(0x0, 0xfffffffffffffffe) write$auto(0xca, &(0x7f0000000180)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2', 0x2d9) prctl$auto(0x43, 0x0, 0xffffffffffffffff, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x1, 0x4d, &(0x7f0000000180)='\x00\x10\\.\x87\xf8Bw\x9bJx\amt\n\xfe\x9c', 0x0) setgroups$auto(0xe32, 0x0) 59.913225649s ago: executing program 3 (id=2175): socket(0x10, 0x4, 0xffffffc0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x110, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0x3, 0x13, 0xffffffffffffffff, 0x8000) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) mmap$auto(0x8, 0x400008, 0x9, 0x9b72, 0xffffffffffffffff, 0x8002) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x20000000) setsockopt$auto(0x3, 0x8000000000000006, 0x22, 0x0, 0x7ffffc) fallocate$auto(0xffffffffffffffff, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x60840, 0x0) bind$auto(0x3, 0x0, 0x6b) ioctl$auto(0x3, 0x40045532, r0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x140, 0x300) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) r2 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/tracing_on\x00', 0xc2182, 0x0) write$auto(r2, 0x0, 0x1) 58.554716506s ago: executing program 3 (id=2179): sethostname$auto(0xfffffffffffffffe, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, r1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x81) readv$auto(0x3, 0x0, 0x100000007) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x948c3, 0x0) r2 = io_uring_setup$auto(0x2, &(0x7f0000000140)={0x0, 0xd61d, 0x7fff, 0xffffe000, 0x709, 0x8, r0, [0xaa, 0x3, 0x6], {0x8, 0x7ff, 0x5, 0x9, 0x2, 0x0, 0x0, 0x7ff}, {0x1000, 0x477, 0xe, 0x5, 0x6, 0x3, 0x80000000, 0x4, 0x8}}) io_uring_register$auto_IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000240)="04adc501000000000000005f1e9700000000dcd6a66989d861ccca7c5e0304ed909d2bc75fe953b9b8444347263ee49c1928f0d0cca2db6e3e005cca026656145ad1d96a5d194e79075d6a30f618bcc016bc198062be95e52cccfa32d6e2771aa6dd653b37370bf4dcf121d59e48a7", 0x7fffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_open_procfs$namespace(0x0, 0x0) close_range$auto(r2, 0xa, 0x2000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0xa8441, 0x0) unshare$auto(0x40000080) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) pwritev$auto(0x3, 0x0, 0x5, 0x3, 0x9) r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000002c0), r2) sendmsg$auto_IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6ab57f00", @ANYRES16=r5, @ANYBLOB="000125bd7000fedbdf252d000000050021006b0000000c000900040000000000000006000e00a70000000c000500010000000000000008002c00020000001f001600f63fd46cb8312327d5c9d3194b66543d492e02693125b02a0d952d00050033000c00000008002c00030000"], 0x74}, 0x1, 0x0, 0x0, 0x8800}, 0x4000004) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 54.433916988s ago: executing program 3 (id=2187): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0x10804) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) brk$auto(0xffffffffffffff66) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x840, 0xc) pread64$auto(r3, 0x0, 0x800003, 0x270) mlockall$auto(0x7) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) setitimer$auto(0x2, &(0x7f0000000200)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x40000000f42c, 0x2) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) 50.559203185s ago: executing program 0 (id=2193): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) socket(0xf, 0x3, 0x2) madvise$auto_MADV_PAGEOUT(0xd, 0x8000, 0x15) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/id/version\x00', 0xa000, 0x0) fchdir$auto(0xffffffffffffffff) mount$auto(0x0, 0x0, 0x0, 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) umount2$auto(0x0, 0x4) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0x4, 0x13fd7, 0x3, 0xfffff000) syz_clone(0x81020400, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/irq/4/type\x00', 0x2000, 0x0) write$auto(r2, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xf, 0x1, 0x948b, 0x4, 0x3, 0x3, 0x3, 0x80c, 0x8000001f, 0x2, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 50.558656527s ago: executing program 2 (id=2194): openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x81) ppoll$auto(0x0, 0xf3, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) syslog$auto(0x2, &(0x7f0000000380)=']^^/W#\'\x00', 0x3) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0xfffffc01, 0x4, &(0x7f00000002c0)="9cb0e925b6c933c1e84975dc16630bb8b0f266d7793d8229a9d6a5dfa1591faeb97caa277628e870ede4c8395f417b1d493e45805b63a07812b75f6cd4492fdea991c15d4023d9c188cadd85207071510b6e83adfd4a4c3357c9090be67ea8", 0x9) sendfile$auto(0x1, 0x3, 0x0, 0xd551) socket(0x2c, 0x6, 0x2) 49.181680181s ago: executing program 2 (id=2195): openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x81) ppoll$auto(0x0, 0xf3, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) syslog$auto(0x2, &(0x7f0000000380)=']^^/W#\'\x00', 0x3) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0xfffffc01, 0x4, &(0x7f00000002c0)="9cb0e925b6c933c1e84975dc16630bb8b0f266d7793d8229a9d6a5dfa1591faeb97caa277628e870ede4c8395f417b1d493e45805b63a07812b75f6cd4492fdea991c15d4023d9c188cadd85207071510b6e83adfd4a4c3357c9090be67ea8", 0x9) sendfile$auto(0x1, 0x3, 0x0, 0xd551) socket(0x2c, 0x6, 0x2) 48.668828879s ago: executing program 3 (id=2196): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001940), 0x80643, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/firmware/timeout\x00', 0x1a1942, 0x0) write$auto(r0, &(0x7f0000000000)='-\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_OSS_GETVERSION2(r1, 0x80044d76, &(0x7f00000001c0)) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop12\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffff2900", 0x3ff, 0x402, 0xffc, 0x401004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1fb, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x9, 0xfffffffffffffffb, 0x3, 0x7, 0x63, 0x80000021, 0x4, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='` b\x00', @ANYRES16=r6, @ANYBLOB="00032bbd7000fddbdf255a0000000800a400000000800400ec00080023018300000005000800040000000400ff0022000700b5eca65802ca55d157f421506ad810546d21f1cae6424aa3a46404ecaa6700000800020028292d00"], 0x60}}, 0x0) write$auto(r5, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) madvise$auto(0x110c230000, 0x8031ca, 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r7, &(0x7f000000be80)='batadv0\x00', 0xf) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r7, &(0x7f000000ca40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400d5c1baf9c52082bc1382a4010000", @ANYRES16=r8, @ANYBLOB="e3db28bd7000fcdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) 48.031205495s ago: executing program 0 (id=2197): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x1000000000007fff, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, &(0x7f00000002c0)={0x0, 0xc6}, 0x0, 0x0, 0x0, 0xb}, 0x6}, 0x3, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16bd00, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffe000) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) read$auto(0xffffffffffffffff, &(0x7f00000001c0)='\x80\b\xea\x01\xdeAk*\t\xb8\x01\x00', 0x461e) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xfffffffeffffffff) fanotify_init$auto(0x8, 0x2000000000002) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/geneve0/mldv2_unsolicited_report_interval\x00', 0x202, 0x0) 33.550413808s ago: executing program 32 (id=2196): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001940), 0x80643, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/firmware/timeout\x00', 0x1a1942, 0x0) write$auto(r0, &(0x7f0000000000)='-\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_OSS_GETVERSION2(r1, 0x80044d76, &(0x7f00000001c0)) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop12\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffff2900", 0x3ff, 0x402, 0xffc, 0x401004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1fb, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x9, 0xfffffffffffffffb, 0x3, 0x7, 0x63, 0x80000021, 0x4, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='` b\x00', @ANYRES16=r6, @ANYBLOB="00032bbd7000fddbdf255a0000000800a400000000800400ec00080023018300000005000800040000000400ff0022000700b5eca65802ca55d157f421506ad810546d21f1cae6424aa3a46404ecaa6700000800020028292d00"], 0x60}}, 0x0) write$auto(r5, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) madvise$auto(0x110c230000, 0x8031ca, 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r7, &(0x7f000000be80)='batadv0\x00', 0xf) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r7, &(0x7f000000ca40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400d5c1baf9c52082bc1382a4010000", @ANYRES16=r8, @ANYBLOB="e3db28bd7000fcdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) 33.46049099s ago: executing program 0 (id=2199): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r1 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r1, 0x11) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) socketpair$auto(0x3, 0x5, 0x4, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, 0x0) 33.45985002s ago: executing program 2 (id=2201): pkey_free$auto(0x17) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x402e00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) symlink$auto(0x0, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r2, 0x84, 0x6d, 0x0, 0x0) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) semctl$auto_GETPID(0xfffffffa, 0x3ff, 0xb, 0xbfff) recvmmsg$auto(0x3, 0x0, 0x10400, 0x3, 0x0) listen$auto(0x3, 0x3) 32.305174645s ago: executing program 2 (id=2202): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x669400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/pcm0p/sub3/xrun_injection\x00', 0x8a180, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_DISCSIGNAL32(r0, 0x8008550e, &(0x7f0000000000)={0x3503, 0x8}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0xd1) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r1) 32.191200483s ago: executing program 2 (id=2203): syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1fc, 0x7, 0x7, 0x6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0xd, 0x8, 0xfffffffffffffffd, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x8, 0x2a, 0xdb, 0x1000009b71, r0, 0xfffffffffffffff8) setrlimit$auto(0xb, 0x0) unshare$auto(0x2a) socket(0x2, 0x1, 0x100) mmap$auto(0x40, 0x1, 0x6ae, 0x15, 0xffffffffffffffff, 0x7ffb) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) socket(0x2, 0x801, 0x100) mmap$auto(0x1, 0x32, 0x5, 0x41e, r1, 0x6) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) pwrite64$auto(r3, &(0x7f0000000340)='/dev/vcsa\x00\x84\xbd\xe3\xa8\xaf\xd0E>0Q!\x8dIY\x1cPw+\x85\xdf\xa2\xfd\xf1\x80\xc6\xde>KC\x931\xf7vvjlm\xae\xf8\xc3\xa8\xbe\xdc9|\xfe}\xaf\x9e\'\xef\x84\xa8\xd3eX\x8f\xf8\x82\xe9\x8d\x86\x15\xa4B\xd3\x1e\xbd\x81\x00q\xca\xfe\xa8<\'~\xec\x0f\xc9\x91\x86\x19\x97}\xba\x1f\x1a\xf8\x15\x8a?\xe0\xeb\xfaOS\x11\x964\xd58\xf9q\xdc\xce\t\f\xa3\xc7\x84j\x15\x81\x16\xbb\x8d\xa9\x04\xc4\x03W(\xbc\x03N\x95\xb8\x1b&,\xeb\x94\xc2p}u#\xd22[\xfe@\xfap\x8c\xa8&\xb3\xbe\x12R\xd1V\xd0\xd4\xb1\x8b\xf3\x86\xd2\xba\r\x8a~]\\wg=\raRc\xb8\xf0\x9e\xc7D\xde\xa6;\x7f\x90\xf8\xf3\xc8f\xa1\n\x8b\xd6\xd5\xc6-\xf6X\x8cS\x10\x98)xo\xa3\x92\xa0=?\xde@\xb1\b8\xe1D\xb7\xf2\b\xfa\xad\xa43\x9dI9d\x152\x96\xd7\x9f\x9e\t^\x827\xfe\xb1!Z\x12\xf9\x1e\x9b\xef\xd5\xb7\x17\x8f\xc8]\x9f\x1b\xfaD\xa7\x1f\x8a\xaf\x919\x8ee\xb4\x13\x05\xf1\x04>\r\x80*j&\x99e\v\xfd\x9b\xd0\xb8y\xa2\xa7\x85\x87*\x00\xea\xe1c\xda\x11\xbcF\xc5\xe0T\x9c\xe9\xd2\xc9\xea\f\x9bt\x18\xc5\xa0o\xae\x91X\t\x8a\x91', 0x7b05, 0x3) sendfile$auto(r2, r2, 0x0, 0x10000800000003) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x1714d15f) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmmsg$auto(r4, 0x0, 0x7, 0x4008) mmap$auto(0xfffffffffffffffd, 0x200009, 0xfffffffffffffc00, 0x110, 0xd, 0x2) 31.19304077s ago: executing program 2 (id=2204): close_range$auto(0x2, 0x8, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/dbroot\x00', 0xc2183, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd41, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xa, 0x5, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ff0b00fbf2ffff0000b401", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x981, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x40902, 0x0) utimensat$auto(0x2, &(0x7f0000000100)='\x00', 0x0, 0x1000) 30.921244488s ago: executing program 0 (id=2205): pkey_free$auto(0x17) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x402e00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) symlink$auto(0x0, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r1, 0x84, 0x6d, 0x0, 0x0) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) semctl$auto_GETPID(0xfffffffa, 0x3ff, 0xb, 0xbfff) recvmmsg$auto(0x3, 0x0, 0x10400, 0x3, 0x0) listen$auto(0x3, 0x3) 29.441851816s ago: executing program 0 (id=2207): r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r3, 0x13, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100028bd7000fbdbdf257500000008009e7e81fb00fdffffff040073000400cf00080037000200000006006d000000000004003b010400e2000c002c8008000100ffff000004002101"], 0x4c}, 0x1, 0x0, 0x0, 0x44805}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000600)={0x38, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}]}, @NET_SHAPER_A_LEAVES={0x10, 0xa, 0x0, 0x1, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x2}]}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r8}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/hw_random/rng_available\x00', 0x22000, 0x0) sendmsg$auto_TIPC_NL_BEARER_SET(r9, 0x0, 0x40044) read$auto(0x3, 0x0, 0x80) ioctl$auto(0x3, 0x541b, 0x38) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x402, 0x0) r10 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r10, 0x301, 0x70b52c, 0x25dfdbfb, {0xa, 0x0, 0x3f}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getdents64$auto(r0, 0x0, 0x400) ioctl$auto_SNDRV_PCM_IOCTL_USER_PVERSION2(r0, 0x40044104, &(0x7f0000000000)) ioctl$auto(0xc8, 0x401054d5, 0x0) 29.003100998s ago: executing program 0 (id=2209): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) close_range$auto(0x2, 0x8, 0x3) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0xf0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x149181, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f0000002100)=""/4099, 0x1003) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000028, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto(0x3, 0x4020aeb2, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x541a, r0) 26.209963837s ago: executing program 1 (id=2212): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64$auto(r0, &(0x7f0000000400)='/proc/Nes\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x88<\xf7\xc2\xed}\xd2kM\x1f\x15\x03ZN$\'\xf4\"\x13g|\x8f\xe1Svo\xfe\xb1\xf8#]\x85\xc2\x82e\xc6#z\xeb\x14\xd3\x96\xff\xb4\xa2\xac\xc5\xd8\x8d\xce\x01B\xd4\xea\x85\xa5', 0x100000001, 0x100) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) madvise$auto(0x0, 0x2003ed, 0x19) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/name\x00', 0xc8882, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x3}, 0x3) syz_genetlink_get_family_id$auto_nfc(0x0, r1) fanotify_init$auto(0xba, 0x0) mprotect$auto(0x2000000000001000, 0x401000, 0x4) prctl$auto(0x4d, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x23, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) prctl$auto(0x21, 0x3, 0x2, 0x0, 0x0) mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x8000000) setresuid$auto(0x2, 0x7, 0x0) 25.696148078s ago: executing program 1 (id=2213): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x4c0000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) sendmmsg$auto(r1, &(0x7f0000000580)={{&(0x7f00000001c0)="e41c35972f843a6eaf4ff53d7b6e0a26f26a2a610c6b1347c924aac954f84934b58bd05168437031a53539c09d40aeec06d0275236e254e4c910deba69dde85a55ab2a663fd45b86041475c0f3d9e2df671c4d8281bd18201a2de3", 0x0, &(0x7f0000000040)={&(0x7f00000002c0)="dc783bd1e299f2d51d2796060d8c64d9dcbbc134519957cba426d26ea339160f25e2cb63db6d00d0246966c55ec307d0cf8944b8d8c5cf57eb616efc3935d087a36f6cffaf352a2f9f14fee1b94aead1ee881cb453708dd72cc611c2f3901f092d741ad218a0e495e6ead022a8343b796e756e9e79e16b9901b6a78b37bf4180fad4255787ffb708ca699542555aec97df1517f59826b4ceaf13ad05dd2030667eb5368663a9a309c904097725541c5ce5dba0657dbbba5032", 0x5}, 0x1, 0x0, 0x0, 0x1}, 0xffffff63}, 0x5, 0x40) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0) ioctl$auto_CEC_RECEIVE(r2, 0xc0386106, 0x0) mmap$auto(0xf4, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/pagemap\x00', 0x400800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1b3b40, 0x0) read$auto(0x3, 0x0, 0x7f) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) 24.776794063s ago: executing program 1 (id=2214): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40007, 0x1000000005, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x23, 0xa, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000002, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x40201, 0x0) r1 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x20004010) pread64$auto(r1, &(0x7f0000000140)=')\x00', 0xb8, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) sendfile$auto(r5, r4, 0x0, 0x1000202) 23.777703417s ago: executing program 1 (id=2215): pkey_free$auto(0x17) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x402e00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) symlink$auto(0x0, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) getsockopt$auto(r1, 0x84, 0x6d, 0x0, 0x0) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) semctl$auto_GETPID(0xfffffffa, 0x3ff, 0xb, 0xbfff) recvmmsg$auto(0x3, 0x0, 0x10400, 0x3, 0x0) listen$auto(0x3, 0x3) 16.024177402s ago: executing program 33 (id=2204): close_range$auto(0x2, 0x8, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/config/target/dbroot\x00', 0xc2183, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd41, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xa, 0x5, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ff0b00fbf2ffff0000b401", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x981, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x40902, 0x0) utimensat$auto(0x2, &(0x7f0000000100)='\x00', 0x0, 0x1000) 15.552970683s ago: executing program 1 (id=2217): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2302, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x7) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f00000003c0)='./file0\x00', 0x9, 0x9) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x83b5a3da03b67f5b}, 0x404c040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x703, 0x70bd27, 0x25dfd9fc}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x1f, 0xa, 0x7) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f0000000100), 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r9 = socket(0x2b, 0x1, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r9, 0x89a0, 0x4) unshare$auto(0x40000080) 15.292816543s ago: executing program 1 (id=2218): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x9, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x4, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, 0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x1, 0x40}, 0x8, 0x801f) socket(0xa, 0x1, 0x100) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) read$auto(0xffffffffffffffff, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy15/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x6) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$auto_RTC_IRQP_READ(r4, 0x5452, &(0x7f0000000200)=0x9) getsockopt$auto_SO_TYPE(r4, 0x5, 0x3, 0x0, &(0x7f0000000200)=0x8fff) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa0c82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) socketpair$auto(0x1e, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 13.515339988s ago: executing program 34 (id=2209): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) close_range$auto(0x2, 0x8, 0x3) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0xf0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x149181, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r3, &(0x7f0000002100)=""/4099, 0x1003) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x100000000000028, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto(0x3, 0x4020aeb2, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x541a, r0) 0s ago: executing program 35 (id=2218): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x9, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x4, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, 0x0) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x1, 0x40}, 0x8, 0x801f) socket(0xa, 0x1, 0x100) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) read$auto(0xffffffffffffffff, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy15/netdev:wlan1/stations/08:02:11:00:00:00/driver_buffered_tids\x00', 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x6) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$auto_RTC_IRQP_READ(r4, 0x5452, &(0x7f0000000200)=0x9) getsockopt$auto_SO_TYPE(r4, 0x5, 0x3, 0x0, &(0x7f0000000200)=0x8fff) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa0c82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) socketpair$auto(0x1e, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): rame+0x77/0x7f [ 671.658745][T12322] RIP: 0033:0x7f722ad8eec9 [ 671.658764][T12322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.658788][T12322] RSP: 002b:00007f722bc8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 671.658809][T12322] RAX: ffffffffffffffda RBX: 00007f722afe5fa0 RCX: 00007f722ad8eec9 [ 671.658825][T12322] RDX: 000000000000001a RSI: 0000000000000000 RDI: 0000000000000009 [ 671.658839][T12322] RBP: 00007f722ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 671.658854][T12322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.658868][T12322] R13: 00007f722afe6038 R14: 00007f722afe5fa0 R15: 00007ffe7c4db128 [ 671.658898][T12322] [ 671.662349][ T30] audit: type=1806 audit(4294967540.070:18): res=-12 [ 678.292206][T12254] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 678.338128][T12345] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 679.063338][T12366] delete_channel: no stack [ 680.322182][T12382] delete_channel: no stack [ 681.193386][T12391] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 954 with max blocks 8 with error 117 [ 681.403415][ T6740] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 978 with max blocks 46 with error 117 [ 681.510412][T12391] EXT4-fs (sda1): This should not happen!! Data will be lost [ 681.510412][T12391] [ 681.580140][ T6740] EXT4-fs (sda1): This should not happen!! Data will be lost [ 681.580140][ T6740] [ 681.733480][ T6740] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1408 with max blocks 6 with error 117 [ 681.908668][ T6740] EXT4-fs (sda1): This should not happen!! Data will be lost [ 681.908668][ T6740] [ 682.103750][ T6740] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1 with max blocks 1 with error 117 [ 682.282276][ T6740] EXT4-fs (sda1): This should not happen!! Data will be lost [ 682.282276][ T6740] [ 682.407298][T12410] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1256'. [ 682.432368][ T6740] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1 with max blocks 3 with error 117 [ 682.603875][ T6740] EXT4-fs (sda1): This should not happen!! Data will be lost [ 682.603875][ T6740] [ 682.898575][T12408] sd 0:0:1:0: PR command failed: 1026 [ 682.904045][T12408] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 683.091175][T12408] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 683.496812][T12429] delete_channel: no stack [ 683.956060][T12435] delete_channel: no stack [ 684.527582][T12451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1260'. [ 688.183597][T12499] program syz.1.1271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.222144][T12501] FAULT_INJECTION: forcing a failure. [ 688.222144][T12501] name failslab, interval 1, probability 0, space 0, times 0 [ 688.279834][T12501] CPU: 1 UID: 0 PID: 12501 Comm: syz.2.1273 Not tainted syzkaller #0 PREEMPT(full) [ 688.279866][T12501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 688.279880][T12501] Call Trace: [ 688.279887][T12501] [ 688.279896][T12501] dump_stack_lvl+0x16c/0x1f0 [ 688.279936][T12501] should_fail_ex+0x512/0x640 [ 688.279972][T12501] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 688.280003][T12501] should_failslab+0xc2/0x120 [ 688.280035][T12501] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 688.280064][T12501] ? mqueue_alloc_inode+0x25/0x50 [ 688.280090][T12501] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 688.280111][T12501] mqueue_alloc_inode+0x25/0x50 [ 688.280132][T12501] alloc_inode+0x61/0x240 [ 688.280166][T12501] new_inode+0x22/0x1c0 [ 688.280202][T12501] mqueue_get_inode+0x2e/0xdd0 [ 688.280228][T12501] mqueue_create_attr+0x261/0x440 [ 688.280256][T12501] vfs_mkobj+0x3db/0x620 [ 688.280276][T12501] ? __pfx_mqueue_create_attr+0x10/0x10 [ 688.280302][T12501] do_mq_open+0x71e/0x8c0 [ 688.280328][T12501] ? __pfx_do_mq_open+0x10/0x10 [ 688.280358][T12501] __x64_sys_mq_open+0x155/0x1e0 [ 688.280382][T12501] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 688.280421][T12501] do_syscall_64+0xcd/0x4c0 [ 688.280459][T12501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.280483][T12501] RIP: 0033:0x7f35b558eec9 [ 688.280501][T12501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 688.280539][T12501] RSP: 002b:00007f35b37b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 688.280560][T12501] RAX: ffffffffffffffda RBX: 00007f35b57e6180 RCX: 00007f35b558eec9 [ 688.280576][T12501] RDX: 000000000000b9fb RSI: 00000000000061df RDI: 0000200000000040 [ 688.280590][T12501] RBP: 00007f35b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 688.280623][T12501] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 688.280637][T12501] R13: 00007f35b57e6218 R14: 00007f35b57e6180 R15: 00007ffc6e9c2a58 [ 688.280672][T12501] [ 688.560416][T12506] delete_channel: no stack [ 689.619216][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.626526][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.653566][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.660517][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.705621][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.714834][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.736905][T12522] delete_channel: no stack [ 689.767013][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.773356][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.089654][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.102454][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.611909][T12582] program syz.3.1286 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.445677][T12593] FAULT_INJECTION: forcing a failure. [ 695.445677][T12593] name failslab, interval 1, probability 0, space 0, times 0 [ 695.481884][T12593] CPU: 1 UID: 0 PID: 12593 Comm: syz.2.1289 Not tainted syzkaller #0 PREEMPT(full) [ 695.481916][T12593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 695.481930][T12593] Call Trace: [ 695.481938][T12593] [ 695.481946][T12593] dump_stack_lvl+0x16c/0x1f0 [ 695.481986][T12593] should_fail_ex+0x512/0x640 [ 695.482028][T12593] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 695.482056][T12593] should_failslab+0xc2/0x120 [ 695.482087][T12593] __kmalloc_cache_noprof+0x6a/0x3e0 [ 695.482109][T12593] ? trace_kmem_cache_alloc+0x28/0xc0 [ 695.482144][T12593] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 695.482172][T12593] ? blk_alloc_queue_stats+0x3f/0x110 [ 695.482199][T12593] blk_alloc_queue_stats+0x3f/0x110 [ 695.482222][T12593] blk_alloc_queue+0xda/0x760 [ 695.482252][T12593] __blk_alloc_disk+0x9e/0x160 [ 695.482288][T12593] ? __pfx___blk_alloc_disk+0x10/0x10 [ 695.482341][T12593] ? lockdep_init_map_type+0x5c/0x280 [ 695.482375][T12593] ? lockdep_init_map_type+0x5c/0x280 [ 695.482411][T12593] dm_create+0x4bf/0x1160 [ 695.482450][T12593] dev_create+0x121/0x290 [ 695.482475][T12593] ? __pfx_dev_create+0x10/0x10 [ 695.482498][T12593] ? __might_fault+0x13b/0x190 [ 695.482533][T12593] ctl_ioctl+0x798/0xd60 [ 695.482557][T12593] ? __pfx_dev_create+0x10/0x10 [ 695.482582][T12593] ? __pfx_ctl_ioctl+0x10/0x10 [ 695.482633][T12593] ? __fget_files+0x20e/0x3c0 [ 695.482664][T12593] dm_ctl_ioctl+0x22/0x30 [ 695.482685][T12593] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 695.482709][T12593] __x64_sys_ioctl+0x18b/0x210 [ 695.482748][T12593] do_syscall_64+0xcd/0x4c0 [ 695.482786][T12593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.482810][T12593] RIP: 0033:0x7f35b558eec9 [ 695.482828][T12593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.482850][T12593] RSP: 002b:00007f35b37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.482872][T12593] RAX: ffffffffffffffda RBX: 00007f35b57e5fa0 RCX: 00007f35b558eec9 [ 695.482886][T12593] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000004 [ 695.482900][T12593] RBP: 00007f35b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 695.482914][T12593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.482927][T12593] R13: 00007f35b57e6038 R14: 00007f35b57e5fa0 R15: 00007ffc6e9c2a58 [ 695.482955][T12593] [ 696.471971][T12612] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1 with max blocks 1 with error 117 [ 696.504948][T12612] EXT4-fs (sda1): This should not happen!! Data will be lost [ 696.504948][T12612] [ 696.722089][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.794581][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.822929][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.829418][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.883089][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.895487][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.948042][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.954545][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 syzkaller syzkaller login: [ 698.740620][T12649] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 699.601160][T12650] HfR: entered promiscuous mode [ 700.769583][T12668] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 700.812508][T12666] delete_channel: no stack [ 700.840121][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1301'. [ 700.967477][T12669] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 953 with max blocks 71 with error 117 [ 701.015862][T12672] futex_wake_op: syz.2.1301 tries to shift op by -9; fix this program [ 701.040032][T12669] EXT4-fs (sda1): This should not happen!! Data will be lost [ 701.040032][T12669] [ 702.549728][T12687] program syz.0.1304 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 704.912798][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 704.919270][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 704.934061][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 704.949214][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 704.968526][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 704.974838][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 705.000003][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 705.011750][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 707.178214][T12749] futex_wake_op: syz.2.1316 tries to shift op by -9; fix this program [ 707.223199][T12747] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1 with max blocks 1 with error 117 [ 707.258823][T12747] EXT4-fs (sda1): This should not happen!! Data will be lost [ 707.258823][T12747] [ 708.177416][T12760] delete_channel: no stack [ 711.595716][T12818] delete_channel: no stack [ 712.186360][T12827] random: crng reseeded on system resumption [ 712.198436][T12829] delete_channel: no stack [ 712.204824][ T6563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: checksum invalid [ 712.233201][T12831] delete_channel: no stack [ 712.253055][ T6563] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 712.265888][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 712.413941][ T6558] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 712.425834][ T6563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: checksum invalid [ 712.550612][ T6563] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 712.567830][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 712.757874][ T6558] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 712.768960][ T6563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: checksum invalid [ 712.821324][ T6563] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 712.832611][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 712.909397][ T6558] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 712.923701][ T6563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: checksum invalid [ 712.989546][ T6563] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 712.999718][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 713.052487][ T6563] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 713.065943][ T6558] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 713.103297][ T6563] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 713.118074][ T6558] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 713.218369][ T6558] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 713.236742][ T8548] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 978 with max blocks 46 with error 117 [ 713.321227][ T8548] EXT4-fs (sda1): This should not happen!! Data will be lost [ 713.321227][ T8548] [ 713.441084][ T8548] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1412 with max blocks 2 with error 117 [ 713.585833][ T8548] EXT4-fs (sda1): This should not happen!! Data will be lost [ 713.585833][ T8548] [ 713.684020][T12851] delete_channel: no stack [ 717.061328][T12891] delete_channel: no stack [ 723.776261][T12902] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 723.911927][T12912] delete_channel: no stack [ 725.069178][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1347'. [ 725.728060][T10536] Bluetooth: hci1: unexpected event 0x18 length: 440 > 23 [ 727.691775][T12980] delete_channel: no stack [ 734.511225][T13058] delete_channel: no stack [ 737.446589][T13116] delete_channel: no stack [ 737.766735][T13123] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1382'. [ 738.895764][ T6563] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 978 with max blocks 46 with error 117 [ 739.119094][ T6563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 739.119094][ T6563] [ 739.267356][ T6563] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1412 with max blocks 2 with error 117 [ 739.337751][T13133] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.512335][ T6563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 739.512335][ T6563] [ 739.652696][ T6563] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1 with max blocks 2 with error 117 [ 739.814914][ T6563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 739.814914][ T6563] [ 739.903986][ T6563] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 951 with max blocks 11 with error 117 [ 740.066632][ T6563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 740.066632][ T6563] [ 740.428010][T13138] delete_channel: no stack [ 740.577185][ T6563] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1009 with max blocks 15 with error 117 [ 740.811057][ T6563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 740.811057][ T6563] [ 741.135555][T13154] delete_channel: no stack [ 742.741286][T13182] delete_channel: no stack [ 744.443139][T10536] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 744.443176][T10536] Bluetooth: hci0: unexpected subevent 0x0c length: 727 > 5 [ 744.492149][T13209] FAULT_INJECTION: forcing a failure. [ 744.492149][T13209] name failslab, interval 1, probability 0, space 0, times 0 [ 744.516267][T13209] CPU: 1 UID: 0 PID: 13209 Comm: syz.2.1401 Not tainted syzkaller #0 PREEMPT(full) [ 744.516295][T13209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 744.516308][T13209] Call Trace: [ 744.516315][T13209] [ 744.516323][T13209] dump_stack_lvl+0x16c/0x1f0 [ 744.516363][T13209] should_fail_ex+0x512/0x640 [ 744.516398][T13209] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 744.516432][T13209] should_failslab+0xc2/0x120 [ 744.516461][T13209] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 744.516488][T13209] ? __lock_acquire+0xb97/0x1ce0 [ 744.516515][T13209] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 744.516549][T13209] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 744.516583][T13209] idr_get_free+0x528/0xa30 [ 744.516623][T13209] idr_alloc_u32+0x190/0x2f0 [ 744.516655][T13209] ? __pfx_idr_alloc_u32+0x10/0x10 [ 744.516688][T13209] ? __pfx___mutex_lock+0x10/0x10 [ 744.516728][T13209] idr_alloc+0xc0/0x130 [ 744.516756][T13209] ? __pfx_idr_alloc+0x10/0x10 [ 744.516786][T13209] ? __radix_tree_lookup+0x21f/0x2c0 [ 744.516821][T13209] ppp_dev_configure+0x989/0xd40 [ 744.516862][T13209] ppp_ioctl+0x17e0/0x2670 [ 744.516897][T13209] ? find_held_lock+0x2b/0x80 [ 744.516917][T13209] ? __pfx_ppp_ioctl+0x10/0x10 [ 744.516956][T13209] ? __fget_files+0x20e/0x3c0 [ 744.516983][T13209] ? __pfx_ppp_ioctl+0x10/0x10 [ 744.517018][T13209] __x64_sys_ioctl+0x18b/0x210 [ 744.517054][T13209] do_syscall_64+0xcd/0x4c0 [ 744.517090][T13209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.517113][T13209] RIP: 0033:0x7f35b558eec9 [ 744.517129][T13209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.517151][T13209] RSP: 002b:00007f35b37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.517171][T13209] RAX: ffffffffffffffda RBX: 00007f35b57e5fa0 RCX: 00007f35b558eec9 [ 744.517192][T13209] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000008 [ 744.517205][T13209] RBP: 00007f35b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 744.517217][T13209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.517230][T13209] R13: 00007f35b57e6038 R14: 00007f35b57e5fa0 R15: 00007ffc6e9c2a58 [ 744.517258][T13209] [ 744.841874][T13210] delete_channel: no stack [ 745.252371][T13220] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 746.089801][T13222] ICMPv6: process `syz.3.1403' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 747.619069][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1410'. [ 750.537377][T13294] delete_channel: no stack [ 751.797815][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1423'. [ 752.518125][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.525570][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.407255][T13351] delete_channel: no stack [ 756.876841][T13382] delete_channel: no stack [ 757.948357][T13401] delete_channel: no stack [ 761.209783][T13443] delete_channel: no stack [ 765.487256][T13507] delete_channel: no stack [ 767.082761][T13531] delete_channel: no stack [ 768.761043][T13558] delete_channel: no stack [ 769.445614][T13571] delete_channel: no stack [ 770.046658][T13585] delete_channel: no stack [ 771.265208][T13606] deleting an unspecified loop device is not supported. [ 771.590215][ T6560] EXT4-fs: 2 callbacks suppressed [ 771.590231][ T6560] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1009 with max blocks 15 with error 117 [ 771.723104][ T6560] EXT4-fs (sda1): This should not happen!! Data will be lost [ 771.723104][ T6560] [ 771.801437][ T6560] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 956 with max blocks 68 with error 117 [ 771.887976][ T6560] EXT4-fs (sda1): This should not happen!! Data will be lost [ 771.887976][ T6560] [ 772.049945][ T6560] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1 with max blocks 1 with error 117 [ 772.203022][ T6560] EXT4-fs (sda1): This should not happen!! Data will be lost [ 772.203022][ T6560] [ 772.332714][ T6560] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 956 with max blocks 6 with error 117 [ 772.459420][ T6560] EXT4-fs (sda1): This should not happen!! Data will be lost [ 772.459420][ T6560] [ 772.869759][T13626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1475'. [ 774.646474][T13662] __vm_enough_memory: pid: 13662, comm: syz.2.1483, bytes: 4398046511104 not enough memory for the allocation [ 774.661787][T13660] delete_channel: no stack [ 777.661336][T13715] delete_channel: no stack [ 778.849784][T13733] delete_channel: no stack [ 780.636461][T13743] delete_channel: no stack [ 781.065642][T13765] random: crng reseeded on system resumption [ 781.161980][ T8235] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:7: iget: checksum invalid [ 781.306678][ T8235] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 781.317489][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 781.438964][ T6558] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 781.474673][ T8235] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:7: iget: checksum invalid [ 781.651168][ T8235] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 781.661189][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 781.816128][ T6558] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 781.826164][ T8235] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:7: iget: checksum invalid [ 781.997663][ T8235] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 782.007708][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 782.223894][ T6558] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 782.242763][ T8235] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:7: iget: checksum invalid [ 782.370443][ T8235] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 782.423286][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 782.530847][ T8235] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 782.575264][ T6558] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 782.648891][T13782] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 977 with max blocks 47 with error 117 [ 782.675972][ T8235] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 782.712338][ T6558] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 782.798024][ T6558] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 782.893140][T13786] delete_channel: no stack [ 782.975527][T13782] EXT4-fs (sda1): This should not happen!! Data will be lost [ 782.975527][T13782] [ 785.138853][T13809] delete_channel: no stack [ 787.367952][T13844] netlink: zone id is out of range [ 787.389513][T13844] netlink: zone id is out of range [ 787.458881][T13844] netlink: set zone limit has 8 unknown bytes [ 788.801563][T13853] ptrace attach of "./syz-executor exec"[13854] was attempted by "./syz-executor exec"[13853] [ 793.486055][T13825] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 796.894030][T13920] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1530'. [ 796.961108][T13922] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1530'. [ 797.131397][T13930] input: f as /devices/virtual/input/input22 [ 799.124397][T13946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 799.136040][T13959] delete_channel: no stack [ 801.116874][ T6558] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 945 with max blocks 79 with error 117 [ 801.198731][ T6558] EXT4-fs (sda1): This should not happen!! Data will be lost [ 801.198731][ T6558] [ 801.273641][ T6558] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 968 with max blocks 56 with error 117 [ 801.317490][ T6558] EXT4-fs (sda1): This should not happen!! Data will be lost [ 801.317490][ T6558] [ 801.365321][T13991] FAULT_INJECTION: forcing a failure. [ 801.365321][T13991] name failslab, interval 1, probability 0, space 0, times 0 [ 801.390183][ T6558] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1 with max blocks 1 with error 117 [ 801.433115][T13991] CPU: 1 UID: 0 PID: 13991 Comm: syz.1.1540 Not tainted syzkaller #0 PREEMPT(full) [ 801.433146][T13991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 801.433160][T13991] Call Trace: [ 801.433167][T13991] [ 801.433176][T13991] dump_stack_lvl+0x16c/0x1f0 [ 801.433217][T13991] should_fail_ex+0x512/0x640 [ 801.433252][T13991] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 801.433280][T13991] should_failslab+0xc2/0x120 [ 801.433311][T13991] __kmalloc_cache_noprof+0x6a/0x3e0 [ 801.433336][T13991] ? ovs_dp_cmd_new+0x1af/0xe60 [ 801.433372][T13991] ovs_dp_cmd_new+0x1af/0xe60 [ 801.433411][T13991] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 801.433449][T13991] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 801.433477][T13991] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 801.433509][T13991] genl_family_rcv_msg_doit+0x206/0x2f0 [ 801.433536][T13991] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 801.433571][T13991] ? bpf_lsm_capable+0x9/0x10 [ 801.433592][T13991] ? security_capable+0x7e/0x260 [ 801.433617][T13991] ? ns_capable+0xd7/0x110 [ 801.433645][T13991] genl_rcv_msg+0x55c/0x800 [ 801.433678][T13991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.433703][T13991] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 801.433745][T13991] netlink_rcv_skb+0x158/0x420 [ 801.433781][T13991] ? __pfx_genl_rcv_msg+0x10/0x10 [ 801.433807][T13991] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 801.433856][T13991] ? netlink_deliver_tap+0x1ae/0xd30 [ 801.433894][T13991] genl_rcv+0x28/0x40 [ 801.433914][T13991] netlink_unicast+0x5a7/0x870 [ 801.433954][T13991] ? __pfx_netlink_unicast+0x10/0x10 [ 801.433991][T13991] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 801.434026][T13991] ? __lock_acquire+0xb97/0x1ce0 [ 801.434064][T13991] netlink_sendmsg+0x8d1/0xdd0 [ 801.434105][T13991] ? __pfx_netlink_sendmsg+0x10/0x10 [ 801.434149][T13991] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 801.434179][T13991] ____sys_sendmsg+0xa98/0xc70 [ 801.434206][T13991] ? copy_msghdr_from_user+0x10a/0x160 [ 801.434241][T13991] ? __pfx_____sys_sendmsg+0x10/0x10 [ 801.434284][T13991] ___sys_sendmsg+0x134/0x1d0 [ 801.434339][T13991] ? __pfx____sys_sendmsg+0x10/0x10 [ 801.434412][T13991] __sys_sendmsg+0x16d/0x220 [ 801.434449][T13991] ? __pfx___sys_sendmsg+0x10/0x10 [ 801.434484][T13991] ? __x64_sys_futex+0x1e0/0x4c0 [ 801.434533][T13991] do_syscall_64+0xcd/0x4c0 [ 801.434573][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.434597][T13991] RIP: 0033:0x7f152e78eec9 [ 801.434615][T13991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.434639][T13991] RSP: 002b:00007f152c9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 801.434665][T13991] RAX: ffffffffffffffda RBX: 00007f152e9e6090 RCX: 00007f152e78eec9 [ 801.434680][T13991] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000009 [ 801.434695][T13991] RBP: 00007f152e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 801.434709][T13991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.434723][T13991] R13: 00007f152e9e6128 R14: 00007f152e9e6090 R15: 00007ffed882a868 [ 801.434753][T13991] [ 801.434835][ T6558] EXT4-fs (sda1): This should not happen!! Data will be lost [ 801.434835][ T6558] [ 802.687554][ T6558] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 953 with max blocks 9 with error 117 [ 802.714622][ T6558] EXT4-fs (sda1): This should not happen!! Data will be lost [ 802.714622][ T6558] [ 802.762793][ T6558] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1373 with max blocks 41 with error 117 [ 802.787776][ T6558] EXT4-fs (sda1): This should not happen!! Data will be lost [ 802.787776][ T6558] [ 803.556979][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1546'. [ 804.334867][T14039] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1550'. [ 805.283326][T14056] netlink: zone id is out of range [ 805.299308][T14056] netlink: zone id is out of range [ 805.390253][T14056] netlink: set zone limit has 8 unknown bytes [ 807.365434][T14070] delete_channel: no stack [ 808.380059][ T8235] EXT4-fs: 6 callbacks suppressed [ 808.380075][ T8235] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 964 with max blocks 60 with error 117 [ 808.447777][ T8235] EXT4-fs (sda1): This should not happen!! Data will be lost [ 808.447777][ T8235] [ 808.504288][ T8235] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 955 with max blocks 8 with error 117 [ 808.576171][ T8235] EXT4-fs (sda1): This should not happen!! Data will be lost [ 808.576171][ T8235] [ 808.611900][ T8235] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 954 with max blocks 8 with error 117 [ 808.685755][ T8235] EXT4-fs (sda1): This should not happen!! Data will be lost [ 808.685755][ T8235] [ 808.757951][ T8235] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 983 with max blocks 41 with error 117 [ 808.863308][ T8235] EXT4-fs (sda1): This should not happen!! Data will be lost [ 808.863308][ T8235] [ 808.980467][ T8235] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 990 with max blocks 1 with error 117 [ 809.201045][ T8235] EXT4-fs (sda1): This should not happen!! Data will be lost [ 809.201045][ T8235] [ 813.966133][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.972497][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.685863][T14160] delete_channel: no stack [ 816.070061][T14181] delete_channel: no stack [ 816.122400][T14171] delete_channel: no stack [ 817.450030][T14207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1579'. [ 817.501990][T14209] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1579'. [ 818.863964][ T6563] EXT4-fs: 2 callbacks suppressed [ 818.863980][ T6563] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 970 with max blocks 54 with error 117 [ 819.116878][T14235] delete_channel: no stack [ 819.128647][ T6563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 819.128647][ T6563] [ 819.239731][ T6563] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 934 with max blocks 28 with error 117 [ 819.427066][ T6563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 819.427066][ T6563] [ 819.666070][ T6563] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 962 with max blocks 62 with error 117 [ 819.835800][ T6563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 819.835800][ T6563] [ 820.016136][ T6563] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 993 with max blocks 9 with error 117 [ 820.137780][ T6563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 820.137780][ T6563] [ 820.280489][ T6563] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1007 with max blocks 17 with error 117 [ 820.525082][ T6563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 820.525082][ T6563] [ 821.358615][T14260] delete_channel: no stack [ 821.498786][T14266] random: crng reseeded on system resumption [ 821.556668][ T6563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: checksum invalid [ 821.685371][ T6563] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 821.696040][T12856] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 821.810042][T12856] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 821.826847][ T6563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: checksum invalid [ 821.965491][ T6563] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 821.977991][T12856] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 822.070665][T14274] delete_channel: no stack [ 822.096836][T12856] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 822.111039][ T6563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: checksum invalid [ 822.244414][ T6563] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 822.261214][T12856] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 822.403545][T12856] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 822.417574][ T6563] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:5: iget: checksum invalid [ 822.482317][ T6563] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 822.492216][T12856] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 822.534428][ T6563] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 822.555499][T12856] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 822.590804][ T6563] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 822.601884][T12856] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 822.659050][T12856] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 823.065668][T14292] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1590'. [ 823.137596][T14294] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1590'. [ 833.236070][T14337] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 834.105765][ T30] audit: type=1804 audit(4294967702.550:19): pid=14367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1602" name="/newroot/361/file0" dev="tmpfs" ino=1904 res=1 errno=0 [ 834.395424][ T30] audit: type=1804 audit(4294967702.770:20): pid=14370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1602" name="/newroot/361/file0" dev="tmpfs" ino=1904 res=1 errno=0 [ 835.465925][T14385] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 835.747276][T14393] FAULT_INJECTION: forcing a failure. [ 835.747276][T14393] name failslab, interval 1, probability 0, space 0, times 0 [ 835.774372][T14393] CPU: 1 UID: 0 PID: 14393 Comm: syz.2.1607 Not tainted syzkaller #0 PREEMPT(full) [ 835.774405][T14393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 835.774420][T14393] Call Trace: [ 835.774428][T14393] [ 835.774436][T14393] dump_stack_lvl+0x16c/0x1f0 [ 835.774478][T14393] should_fail_ex+0x512/0x640 [ 835.774516][T14393] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 835.774544][T14393] should_failslab+0xc2/0x120 [ 835.774576][T14393] __kmalloc_cache_noprof+0x6a/0x3e0 [ 835.774602][T14393] ? ovs_flow_tbl_init+0x8b/0x600 [ 835.774637][T14393] ovs_flow_tbl_init+0x8b/0x600 [ 835.774672][T14393] ovs_dp_cmd_new+0x251/0xe60 [ 835.774712][T14393] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 835.774752][T14393] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 835.774781][T14393] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 835.774815][T14393] genl_family_rcv_msg_doit+0x206/0x2f0 [ 835.774843][T14393] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 835.774879][T14393] ? bpf_lsm_capable+0x9/0x10 [ 835.774900][T14393] ? security_capable+0x7e/0x260 [ 835.774926][T14393] ? ns_capable+0xd7/0x110 [ 835.774955][T14393] genl_rcv_msg+0x55c/0x800 [ 835.774983][T14393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 835.775010][T14393] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 835.775046][T14393] ? __lock_acquire+0x62e/0x1ce0 [ 835.775084][T14393] netlink_rcv_skb+0x158/0x420 [ 835.775123][T14393] ? __pfx_genl_rcv_msg+0x10/0x10 [ 835.775150][T14393] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 835.775200][T14393] ? netlink_deliver_tap+0x1ae/0xd30 [ 835.775236][T14393] ? is_vmalloc_addr+0x86/0xa0 [ 835.775267][T14393] genl_rcv+0x28/0x40 [ 835.775288][T14393] netlink_unicast+0x5a7/0x870 [ 835.775336][T14393] ? __pfx_netlink_unicast+0x10/0x10 [ 835.775375][T14393] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 835.775411][T14393] ? __lock_acquire+0xb97/0x1ce0 [ 835.775450][T14393] netlink_sendmsg+0x8d1/0xdd0 [ 835.775505][T14393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.775545][T14393] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 835.775575][T14393] ____sys_sendmsg+0xa98/0xc70 [ 835.775602][T14393] ? copy_msghdr_from_user+0x10a/0x160 [ 835.775636][T14393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 835.775669][T14393] ? __pfx_futex_wake_mark+0x10/0x10 [ 835.775712][T14393] ___sys_sendmsg+0x134/0x1d0 [ 835.775750][T14393] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.775820][T14393] __sys_sendmsg+0x16d/0x220 [ 835.775856][T14393] ? __pfx___sys_sendmsg+0x10/0x10 [ 835.775890][T14393] ? __x64_sys_futex+0x1e0/0x4c0 [ 835.775937][T14393] do_syscall_64+0xcd/0x4c0 [ 835.775976][T14393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.775999][T14393] RIP: 0033:0x7f35b558eec9 [ 835.776018][T14393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.776040][T14393] RSP: 002b:00007f35b37d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.776062][T14393] RAX: ffffffffffffffda RBX: 00007f35b57e6090 RCX: 00007f35b558eec9 [ 835.776077][T14393] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000009 [ 835.776092][T14393] RBP: 00007f35b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 835.776106][T14393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.776120][T14393] R13: 00007f35b57e6128 R14: 00007f35b57e6090 R15: 00007ffc6e9c2a58 [ 835.776149][T14393] [ 836.805298][T14409] delete_channel: no stack [ 839.833331][T14448] zswap: compressor not available [ 839.846695][T14451] Setting dangerous option i915.mitigations - tainting kernel [ 840.693278][T10536] Bluetooth: hci3: unexpected event 0x01 length: 5 > 1 [ 841.228309][T14467] FAULT_INJECTION: forcing a failure. [ 841.228309][T14467] name failslab, interval 1, probability 0, space 0, times 0 [ 841.259489][T14467] CPU: 1 UID: 0 PID: 14467 Comm: syz.2.1617 Tainted: G U syzkaller #0 PREEMPT(full) [ 841.259521][T14467] Tainted: [U]=USER [ 841.259528][T14467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 841.259541][T14467] Call Trace: [ 841.259547][T14467] [ 841.259555][T14467] dump_stack_lvl+0x16c/0x1f0 [ 841.259589][T14467] should_fail_ex+0x512/0x640 [ 841.259620][T14467] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 841.259647][T14467] should_failslab+0xc2/0x120 [ 841.259674][T14467] __kmalloc_cache_node_noprof+0x6d/0x420 [ 841.259697][T14467] ? blk_alloc_queue+0x630/0x760 [ 841.259720][T14467] ? __alloc_disk_node+0x5a/0x640 [ 841.259761][T14467] __alloc_disk_node+0x5a/0x640 [ 841.259791][T14467] ? blk_alloc_queue+0x1a3/0x760 [ 841.259818][T14467] __blk_alloc_disk+0xd0/0x160 [ 841.259849][T14467] ? __pfx___blk_alloc_disk+0x10/0x10 [ 841.259895][T14467] ? lockdep_init_map_type+0x5c/0x280 [ 841.259926][T14467] ? lockdep_init_map_type+0x5c/0x280 [ 841.259958][T14467] dm_create+0x4bf/0x1160 [ 841.260010][T14467] dev_create+0x121/0x290 [ 841.260034][T14467] ? __pfx_dev_create+0x10/0x10 [ 841.260056][T14467] ? __might_fault+0x13b/0x190 [ 841.260087][T14467] ctl_ioctl+0x798/0xd60 [ 841.260109][T14467] ? __pfx_dev_create+0x10/0x10 [ 841.260132][T14467] ? __pfx_ctl_ioctl+0x10/0x10 [ 841.260180][T14467] ? __fget_files+0x20e/0x3c0 [ 841.260208][T14467] dm_ctl_ioctl+0x22/0x30 [ 841.260228][T14467] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 841.260250][T14467] __x64_sys_ioctl+0x18b/0x210 [ 841.260286][T14467] do_syscall_64+0xcd/0x4c0 [ 841.260322][T14467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.260344][T14467] RIP: 0033:0x7f35b558eec9 [ 841.260360][T14467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.260382][T14467] RSP: 002b:00007f35b37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 841.260402][T14467] RAX: ffffffffffffffda RBX: 00007f35b57e5fa0 RCX: 00007f35b558eec9 [ 841.260416][T14467] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000004 [ 841.260430][T14467] RBP: 00007f35b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 841.260443][T14467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.260456][T14467] R13: 00007f35b57e6038 R14: 00007f35b57e5fa0 R15: 00007ffc6e9c2a58 [ 841.260482][T14467] syzkaller syzkaller login: [ 845.655093][T14507] random: crng reseeded on system resumption [ 845.716400][ T6740] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 845.865967][ T6740] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 845.877040][T12856] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 846.003205][T12856] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 846.016984][ T6740] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 846.150117][ T6740] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 846.160004][T12856] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 846.309165][T12856] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 846.325950][ T6740] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 846.425939][ T6740] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 846.435899][T12856] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 846.547742][T12856] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 846.562434][ T6740] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 846.698395][ T6740] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 846.708433][T12856] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 846.809559][ T6740] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 846.849407][T12856] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 846.927254][ T6740] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 847.014702][T12856] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 847.129635][T12856] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 847.556421][T14518] EXT4-fs: 4 callbacks suppressed [ 847.556438][T14518] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 949 with max blocks 13 with error 117 [ 848.212141][T14518] EXT4-fs (sda1): This should not happen!! Data will be lost [ 848.212141][T14518] [ 848.693294][T14533] Process accounting resumed [ 849.909917][T14535] binder: 14534:14535 ioctl 40046210 0 returned -14 [ 851.236395][ T6558] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 984 with max blocks 40 with error 117 [ 851.265102][ T6558] EXT4-fs (sda1): This should not happen!! Data will be lost [ 851.265102][ T6558] [ 851.299139][ T6558] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 961 with max blocks 63 with error 117 [ 851.337182][ T6558] EXT4-fs (sda1): This should not happen!! Data will be lost [ 851.337182][ T6558] [ 851.446047][ T6558] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1387 with max blocks 27 with error 117 [ 851.465612][ T6558] EXT4-fs (sda1): This should not happen!! Data will be lost [ 851.465612][ T6558] [ 851.495625][ T6558] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 993 with max blocks 6 with error 117 [ 851.533338][ T6558] EXT4-fs (sda1): This should not happen!! Data will be lost [ 851.533338][ T6558] [ 856.600608][ T8235] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 941 with max blocks 43 with error 117 [ 856.615772][ T8235] EXT4-fs (sda1): This should not happen!! Data will be lost [ 856.615772][ T8235] [ 856.628269][ T8235] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 993 with max blocks 31 with error 117 [ 856.642690][ T8235] EXT4-fs (sda1): This should not happen!! Data will be lost [ 856.642690][ T8235] [ 857.516085][T14583] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 858.015559][T14599] delete_channel: no stack [ 861.122041][T14640] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 865.175334][T14673] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1658'. [ 865.193732][T14673] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1658: iget: checksum invalid [ 865.241461][T14673] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 865.306023][T14673] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1658: iget: checksum invalid [ 865.346548][T14673] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 865.396408][T14673] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1658: iget: checksum invalid [ 865.465157][T14673] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 865.555334][T14673] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1658: iget: checksum invalid [ 865.636014][T14673] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 865.698632][T14673] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 865.739809][T14673] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 866.067674][ T30] audit: type=1804 audit(4294967734.520:21): pid=14694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1660" name="/newroot/613/file0" dev="tmpfs" ino=3222 res=1 errno=0 [ 866.335791][ T30] audit: type=1804 audit(4294967734.550:22): pid=14694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1660" name="/newroot/613/file0" dev="tmpfs" ino=3222 res=1 errno=0 [ 868.016288][T14727] random: crng reseeded on system resumption [ 868.023883][ T6560] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 868.084415][ T6560] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 868.094998][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 868.212005][ T6558] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 868.223015][ T6560] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 868.351262][ T6560] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 868.361066][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 868.415040][T14738] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 971 with max blocks 53 with error 117 [ 868.447455][T14738] EXT4-fs (sda1): This should not happen!! Data will be lost [ 868.447455][T14738] [ 868.507316][ T6558] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 868.519960][ T6560] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:3: iget: checksum invalid [ 868.628340][ T6560] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 868.655828][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 868.775616][ T6558] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 868.786769][ T6560] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 868.906645][ T6560] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 868.942361][ T6558] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 868.977523][ T6560] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 869.015859][ T6558] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 869.045083][ T6558] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 875.401281][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.407674][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.266322][T14787] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 881.187499][T14861] delete_channel: no stack [ 883.025473][T14889] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input24 [ 883.182722][T14900] Process accounting resumed [ 883.772196][T14907] random: crng reseeded on system resumption [ 883.833847][ T6740] EXT4-fs error: 2 callbacks suppressed [ 883.833863][ T6740] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 884.049873][ T6740] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 884.060470][ T8235] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:7: iget: checksum invalid [ 884.212786][ T8235] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 884.224045][ T6740] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 884.348622][ T6740] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 884.358467][ T8235] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:7: iget: checksum invalid [ 884.412330][ T8235] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 884.423557][ T6740] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 884.569890][ T6740] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 884.583505][ T8235] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:7: iget: checksum invalid [ 884.706902][ T8235] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 884.720903][ T6740] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:6: iget: checksum invalid [ 884.857864][ T6740] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 884.875894][ T8235] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:7: iget: checksum invalid [ 884.996044][ T6740] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 885.029753][ T8235] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 885.133189][ T6740] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 885.170021][ T8235] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 885.298866][ T8235] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 885.924050][T14948] delete_channel: no stack [ 886.819693][T14957] delete_channel: no stack [ 886.917768][T12856] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 967 with max blocks 57 with error 117 [ 887.060784][T12856] EXT4-fs (sda1): This should not happen!! Data will be lost [ 887.060784][T12856] [ 887.184771][T12856] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 993 with max blocks 31 with error 117 [ 887.342711][T12856] EXT4-fs (sda1): This should not happen!! Data will be lost [ 887.342711][T12856] [ 887.447825][T12856] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1 with max blocks 3 with error 117 [ 887.587253][T12856] EXT4-fs (sda1): This should not happen!! Data will be lost [ 887.587253][T12856] [ 889.621294][T14986] FAULT_INJECTION: forcing a failure. [ 889.621294][T14986] name failslab, interval 1, probability 0, space 0, times 0 [ 889.852112][T14986] CPU: 1 UID: 0 PID: 14986 Comm: syz.1.1707 Tainted: G U syzkaller #0 PREEMPT(full) [ 889.852148][T14986] Tainted: [U]=USER [ 889.852155][T14986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 889.852168][T14986] Call Trace: [ 889.852175][T14986] [ 889.852183][T14986] dump_stack_lvl+0x16c/0x1f0 [ 889.852221][T14986] should_fail_ex+0x512/0x640 [ 889.852261][T14986] ? __kmalloc_noprof+0xbf/0x510 [ 889.852288][T14986] ? __register_sysctl_table+0xb3/0x1900 [ 889.852321][T14986] should_failslab+0xc2/0x120 [ 889.852349][T14986] __kmalloc_noprof+0xd2/0x510 [ 889.852382][T14986] __register_sysctl_table+0xb3/0x1900 [ 889.852419][T14986] ? is_module_address+0x5f/0xf0 [ 889.852454][T14986] ? __pfx___register_sysctl_table+0x10/0x10 [ 889.852486][T14986] ? is_module_address+0x69/0xf0 [ 889.852515][T14986] ? register_net_sysctl_sz+0x228/0x3e0 [ 889.852538][T14986] ? __asan_memcpy+0x3c/0x60 [ 889.852564][T14986] xfrm4_net_init+0xf0/0x1c0 [ 889.852597][T14986] ? __pfx_xfrm4_net_init+0x10/0x10 [ 889.852628][T14986] ops_init+0x1e2/0x5f0 [ 889.852666][T14986] setup_net+0x10f/0x380 [ 889.852683][T14986] ? lockdep_init_map_type+0x5c/0x280 [ 889.852713][T14986] ? __pfx_setup_net+0x10/0x10 [ 889.852734][T14986] ? debug_mutex_init+0x37/0x70 [ 889.852758][T14986] copy_net_ns+0x2a6/0x5f0 [ 889.852783][T14986] create_new_namespaces+0x3ea/0xa90 [ 889.852818][T14986] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 889.852846][T14986] ksys_unshare+0x45b/0xa40 [ 889.852895][T14986] ? __pfx_ksys_unshare+0x10/0x10 [ 889.852929][T14986] ? xfd_validate_state+0x61/0x180 [ 889.852973][T14986] __x64_sys_unshare+0x31/0x40 [ 889.853005][T14986] do_syscall_64+0xcd/0x4c0 [ 889.853050][T14986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.853075][T14986] RIP: 0033:0x7f152e78eec9 [ 889.853093][T14986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 889.853116][T14986] RSP: 002b:00007f152c9b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 889.853138][T14986] RAX: ffffffffffffffda RBX: 00007f152e9e6180 RCX: 00007f152e78eec9 [ 889.853153][T14986] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 889.853167][T14986] RBP: 00007f152e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 889.853181][T14986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.853195][T14986] R13: 00007f152e9e6218 R14: 00007f152e9e6180 R15: 00007ffed882a868 [ 889.853225][T14986] [ 892.635933][T15016] could not allocate digest TFM handle [ 892.701437][T15016] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1713'. [ 893.753893][T15032] delete_channel: no stack [ 894.231139][T15036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1716'. [ 894.241205][T15036] bridge_slave_1: left allmulticast mode [ 894.249354][T15036] bridge_slave_1: left promiscuous mode [ 894.255227][T15036] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.266005][T15036] bridge_slave_0: left allmulticast mode [ 894.271679][T15036] bridge_slave_0: left promiscuous mode [ 894.277960][T15036] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.699094][T15048] FAULT_INJECTION: forcing a failure. [ 895.699094][T15048] name failslab, interval 1, probability 0, space 0, times 0 [ 895.711903][T15048] CPU: 1 UID: 0 PID: 15048 Comm: syz.1.1718 Tainted: G U syzkaller #0 PREEMPT(full) [ 895.711936][T15048] Tainted: [U]=USER [ 895.711943][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 895.711956][T15048] Call Trace: [ 895.711963][T15048] [ 895.711971][T15048] dump_stack_lvl+0x16c/0x1f0 [ 895.712009][T15048] should_fail_ex+0x512/0x640 [ 895.712043][T15048] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 895.712072][T15048] should_failslab+0xc2/0x120 [ 895.712102][T15048] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 895.712128][T15048] ? __proc_create+0xc3/0x8e0 [ 895.712159][T15048] ? __proc_create+0x2ce/0x8e0 [ 895.712193][T15048] __proc_create+0x2ce/0x8e0 [ 895.712226][T15048] ? __pfx___proc_create+0x10/0x10 [ 895.712268][T15048] proc_mkdir+0x81/0x170 [ 895.712300][T15048] ? __pfx_proc_mkdir+0x10/0x10 [ 895.712335][T15048] ? __pfx_sunrpc_init_net+0x10/0x10 [ 895.712363][T15048] ? __pfx_sunrpc_init_net+0x10/0x10 [ 895.712388][T15048] rpc_proc_init+0x7e/0xe0 [ 895.712415][T15048] sunrpc_init_net+0x29/0x190 [ 895.712441][T15048] ops_init+0x1e2/0x5f0 [ 895.712479][T15048] setup_net+0x10f/0x380 [ 895.712496][T15048] ? lockdep_init_map_type+0x5c/0x280 [ 895.712527][T15048] ? __pfx_setup_net+0x10/0x10 [ 895.712547][T15048] ? debug_mutex_init+0x37/0x70 [ 895.712571][T15048] copy_net_ns+0x2a6/0x5f0 [ 895.712596][T15048] create_new_namespaces+0x3ea/0xa90 [ 895.712628][T15048] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 895.712656][T15048] ksys_unshare+0x45b/0xa40 [ 895.712684][T15048] ? native_tss_update_io_bitmap+0x3e1/0x770 [ 895.712721][T15048] ? __pfx_ksys_unshare+0x10/0x10 [ 895.712772][T15048] ? xfd_validate_state+0x61/0x180 [ 895.712822][T15048] __x64_sys_unshare+0x31/0x40 [ 895.712853][T15048] do_syscall_64+0xcd/0x4c0 [ 895.712892][T15048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.712916][T15048] RIP: 0033:0x7f152e78eec9 [ 895.712934][T15048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 895.712958][T15048] RSP: 002b:00007f152c9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 895.712979][T15048] RAX: ffffffffffffffda RBX: 00007f152e9e5fa0 RCX: 00007f152e78eec9 [ 895.712994][T15048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 895.713008][T15048] RBP: 00007f152e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 895.713022][T15048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.713036][T15048] R13: 00007f152e9e6038 R14: 00007f152e9e5fa0 R15: 00007ffed882a868 [ 895.713065][T15048] [ 896.027845][T14912] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 896.343213][T15057] misc userio: No port type given on /dev/userio [ 896.761957][T15057] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 896.962545][T15057] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 901.116151][T15149] delete_channel: no stack [ 903.210272][T15183] delete_channel: no stack [ 904.199925][T15197] delete_channel: no stack [ 904.592709][T15200] vivid-003: ================= START STATUS ================= [ 904.985421][T15200] vivid-003: Radio HW Seek Mode: Bounded [ 905.105744][T15200] vivid-003: Radio Programmable HW Seek: false [ 905.255915][T15200] vivid-003: RDS Rx I/O Mode: Block I/O [ 905.326237][T15200] vivid-003: Generate RBDS Instead of RDS: false [ 905.482135][T15200] vivid-003: RDS Reception: true [ 905.744150][T15222] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 905.794828][T15200] vivid-003: RDS Program Type: 0 inactive [ 905.928014][T15200] vivid-003: RDS PS Name: inactive [ 906.157156][T15200] vivid-003: RDS Radio Text: inactive [ 906.162677][T15200] vivid-003: RDS Traffic Announcement: false inactive [ 906.466274][T15200] vivid-003: RDS Traffic Program: false inactive [ 906.623677][T15200] vivid-003: RDS Music: false inactive [ 906.797143][T15200] vivid-003: ================== END STATUS ================== [ 907.745914][T15237] delete_channel: no stack [ 908.120715][T15248] delete_channel: no stack [ 911.128729][T15289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1755'. [ 911.146996][T15289] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1755'. [ 911.297208][T15291] delete_channel: no stack [ 914.280956][T15341] [U]  [ 914.283799][T15341] [U] [ 914.286527][T15341] [U] [ 914.289245][T15341] [U] [ 914.436257][T15341] [U] [ 914.439085][T15341] [U] [ 914.441822][T15341] [U] [ 914.444535][T15341] [U] [ 914.598032][T15341] [U] [ 914.600778][T15341] [U] [ 914.603495][T15341] [U] [ 914.606191][T15341] [U] [ 914.742886][T15341] [U] [ 916.808167][T15365] could not allocate digest TFM handle [ 916.951099][T15380] delete_channel: no stack [ 917.066863][T15382] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 917.413567][T15382] netlink: zone id is out of range [ 917.478674][T15382] netlink: zone id is out of range [ 917.738771][T15382] netlink: zone id is out of range [ 917.743923][T15382] netlink: zone id is out of range [ 918.015406][ T30] audit: type=1804 audit(4294967786.450:23): pid=15388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1771" name="/newroot/sys/kernel/tracing/current_tracer" dev="tracefs" ino=24 res=1 errno=0 [ 918.056532][T15372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1768'. [ 918.068522][T15382] netlink: zone id is out of range [ 918.073644][T15382] netlink: zone id is out of range [ 918.149788][T15382] netlink: zone id is out of range [ 918.196446][T15382] netlink: zone id is out of range [ 918.259961][T15382] netlink: zone id is out of range [ 918.265103][T15382] netlink: zone id is out of range [ 918.276176][ T6563] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 967 with max blocks 57 with error 117 [ 918.321917][ T6563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 918.321917][ T6563] [ 918.358670][ T6563] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 993 with max blocks 31 with error 117 [ 918.415755][ T6563] EXT4-fs (sda1): This should not happen!! Data will be lost [ 918.415755][ T6563] [ 918.694322][T15400] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 919.605522][T15411] delete_channel: no stack [ 921.350868][T15445] delete_channel: no stack [ 924.397044][T15488] FAULT_INJECTION: forcing a failure. [ 924.397044][T15488] name failslab, interval 1, probability 0, space 0, times 0 [ 924.421719][T15488] CPU: 1 UID: 0 PID: 15488 Comm: syz.2.1789 Tainted: G U syzkaller #0 PREEMPT(full) [ 924.421752][T15488] Tainted: [U]=USER [ 924.421758][T15488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 924.421771][T15488] Call Trace: [ 924.421778][T15488] [ 924.421786][T15488] dump_stack_lvl+0x16c/0x1f0 [ 924.421823][T15488] should_fail_ex+0x512/0x640 [ 924.421857][T15488] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 924.421883][T15488] should_failslab+0xc2/0x120 [ 924.421912][T15488] __kmalloc_cache_noprof+0x6a/0x3e0 [ 924.421934][T15488] ? rcu_is_watching+0x12/0xc0 [ 924.421956][T15488] ? call_usermodehelper_setup+0xaf/0x360 [ 924.421979][T15488] ? __pfx_free_modprobe_argv+0x10/0x10 [ 924.422015][T15488] call_usermodehelper_setup+0xaf/0x360 [ 924.422041][T15488] __request_module+0x3bd/0x690 [ 924.422075][T15488] ? __pfx___request_module+0x10/0x10 [ 924.422120][T15488] ? rcu_is_watching+0x12/0xc0 [ 924.422142][T15488] ? lockdep_hardirqs_on+0x7c/0x110 [ 924.422179][T15488] netlink_create+0x226/0x620 [ 924.422215][T15488] __sock_create+0x335/0x8d0 [ 924.422245][T15488] __sys_socket+0x14d/0x260 [ 924.422271][T15488] ? __pfx___sys_socket+0x10/0x10 [ 924.422296][T15488] ? xfd_validate_state+0x61/0x180 [ 924.422327][T15488] ? __pfx_ksys_write+0x10/0x10 [ 924.422358][T15488] __x64_sys_socket+0x72/0xb0 [ 924.422383][T15488] ? lockdep_hardirqs_on+0x7c/0x110 [ 924.422414][T15488] do_syscall_64+0xcd/0x4c0 [ 924.422450][T15488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.422472][T15488] RIP: 0033:0x7f35b558eec9 [ 924.422488][T15488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.422509][T15488] RSP: 002b:00007f35b37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 924.422529][T15488] RAX: ffffffffffffffda RBX: 00007f35b57e5fa0 RCX: 00007f35b558eec9 [ 924.422543][T15488] RDX: 000000000000001f RSI: 0000000000000003 RDI: 0000000000000010 [ 924.422555][T15488] RBP: 00007f35b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 924.422568][T15488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.422580][T15488] R13: 00007f35b57e6038 R14: 00007f35b57e5fa0 R15: 00007ffc6e9c2a58 [ 924.422606][T15488] [ 925.318325][T15496] delete_channel: no stack [ 926.000983][T15504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1793'. [ 926.158526][T15509] FAULT_INJECTION: forcing a failure. [ 926.158526][T15509] name failslab, interval 1, probability 0, space 0, times 0 [ 926.289249][T15509] CPU: 1 UID: 0 PID: 15509 Comm: syz.3.1794 Tainted: G U syzkaller #0 PREEMPT(full) [ 926.289286][T15509] Tainted: [U]=USER [ 926.289293][T15509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 926.289306][T15509] Call Trace: [ 926.289314][T15509] [ 926.289322][T15509] dump_stack_lvl+0x16c/0x1f0 [ 926.289362][T15509] should_fail_ex+0x512/0x640 [ 926.289399][T15509] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 926.289426][T15509] should_failslab+0xc2/0x120 [ 926.289458][T15509] __kmalloc_cache_noprof+0x6a/0x3e0 [ 926.289484][T15509] ? snd_seq_pool_new+0x44/0x230 [ 926.289522][T15509] ? __pfx_snd_seq_open+0x10/0x10 [ 926.289546][T15509] snd_seq_pool_new+0x44/0x230 [ 926.289576][T15509] seq_create_client1+0x66/0x5e0 [ 926.289601][T15509] ? __pfx_snd_seq_open+0x10/0x10 [ 926.289623][T15509] snd_seq_open+0x59/0x550 [ 926.289645][T15509] ? __pfx_snd_seq_open+0x10/0x10 [ 926.289666][T15509] snd_open+0x22d/0x4c0 [ 926.289688][T15509] ? __pfx_snd_open+0x10/0x10 [ 926.289709][T15509] chrdev_open+0x231/0x6a0 [ 926.289739][T15509] ? __pfx_apparmor_file_open+0x10/0x10 [ 926.289776][T15509] ? __pfx_chrdev_open+0x10/0x10 [ 926.289806][T15509] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 926.289837][T15509] do_dentry_open+0x97f/0x1530 [ 926.289865][T15509] ? __pfx_chrdev_open+0x10/0x10 [ 926.289899][T15509] vfs_open+0x82/0x3f0 [ 926.289935][T15509] path_openat+0x1de4/0x2cb0 [ 926.289971][T15509] ? __pfx_path_openat+0x10/0x10 [ 926.290005][T15509] do_filp_open+0x20b/0x470 [ 926.290031][T15509] ? __pfx_do_filp_open+0x10/0x10 [ 926.290077][T15509] ? alloc_fd+0x471/0x7d0 [ 926.290128][T15509] do_sys_openat2+0x11b/0x1d0 [ 926.290163][T15509] ? __pfx_do_sys_openat2+0x10/0x10 [ 926.290211][T15509] __x64_sys_openat+0x174/0x210 [ 926.290232][T15509] ? __pfx___x64_sys_openat+0x10/0x10 [ 926.290264][T15509] do_syscall_64+0xcd/0x4c0 [ 926.290302][T15509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.290327][T15509] RIP: 0033:0x7f722ad8eec9 [ 926.290345][T15509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.290368][T15509] RSP: 002b:00007f722bc8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 926.290389][T15509] RAX: ffffffffffffffda RBX: 00007f722afe5fa0 RCX: 00007f722ad8eec9 [ 926.290404][T15509] RDX: 00000000000a2741 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 926.290419][T15509] RBP: 00007f722ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 926.290433][T15509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 926.290446][T15509] R13: 00007f722afe6038 R14: 00007f722afe5fa0 R15: 00007ffe7c4db128 [ 926.290476][T15509] [ 926.637840][T15430] kexec: Could not allocate control_code_buffer [ 927.676699][ T917] usb usb38-port5: attempt power cycle [ 928.029880][T15527] delete_channel: no stack [ 928.240627][ T917] usb usb38-port5: unable to enumerate USB device [ 930.463521][T15559] delete_channel: no stack [ 931.546541][T15565] could not allocate digest TFM handle [ 931.652759][T15584] FAULT_INJECTION: forcing a failure. [ 931.652759][T15584] name failslab, interval 1, probability 0, space 0, times 0 [ 931.668858][T15584] CPU: 1 UID: 0 PID: 15584 Comm: syz.2.1810 Tainted: G U syzkaller #0 PREEMPT(full) [ 931.668897][T15584] Tainted: [U]=USER [ 931.668905][T15584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 931.668921][T15584] Call Trace: [ 931.668929][T15584] [ 931.668946][T15584] dump_stack_lvl+0x16c/0x1f0 [ 931.668992][T15584] should_fail_ex+0x512/0x640 [ 931.669032][T15584] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 931.669062][T15584] should_failslab+0xc2/0x120 [ 931.669097][T15584] __kmalloc_cache_noprof+0x6a/0x3e0 [ 931.669125][T15584] ? trace_pid_list_alloc+0x27c/0x3f0 [ 931.669164][T15584] trace_pid_list_alloc+0x27c/0x3f0 [ 931.669202][T15584] trace_pid_write+0x10c/0x4b0 [ 931.669244][T15584] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 931.669288][T15584] ? __pfx_trace_pid_write+0x10/0x10 [ 931.669327][T15584] ? __pfx___mutex_lock+0x10/0x10 [ 931.669367][T15584] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 931.669409][T15584] ? update_last_data+0xb3/0x510 [ 931.669455][T15584] event_pid_write.isra.0+0x3f7/0x7f0 [ 931.669495][T15584] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 931.669541][T15584] ? __pfx_ftrace_event_pid_write+0x10/0x10 [ 931.669576][T15584] vfs_writev+0x5df/0xde0 [ 931.669621][T15584] ? __pfx_vfs_writev+0x10/0x10 [ 931.669648][T15584] ? __mutex_lock+0x1c5/0x1060 [ 931.669697][T15584] ? __pfx___mutex_lock+0x10/0x10 [ 931.669750][T15584] ? __fget_files+0x20e/0x3c0 [ 931.669787][T15584] ? do_writev+0x132/0x340 [ 931.669812][T15584] do_writev+0x132/0x340 [ 931.669840][T15584] ? __pfx_do_writev+0x10/0x10 [ 931.669878][T15584] do_syscall_64+0xcd/0x4c0 [ 931.669920][T15584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.669952][T15584] RIP: 0033:0x7f35b558eec9 [ 931.669972][T15584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.669999][T15584] RSP: 002b:00007f35b37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 931.670024][T15584] RAX: ffffffffffffffda RBX: 00007f35b57e5fa0 RCX: 00007f35b558eec9 [ 931.670041][T15584] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 931.670056][T15584] RBP: 00007f35b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 931.670070][T15584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 931.670085][T15584] R13: 00007f35b57e6038 R14: 00007f35b57e5fa0 R15: 00007ffc6e9c2a58 [ 931.670118][T15584] [ 932.004060][T15565] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1806'. [ 932.510774][T15588] usb usb36: usbfs: process 15588 (syz.0.1811) did not claim interface 0 before use [ 932.908200][T15588] FAULT_INJECTION: forcing a failure. [ 932.908200][T15588] name failslab, interval 1, probability 0, space 0, times 0 [ 933.062350][T15588] CPU: 1 UID: 0 PID: 15588 Comm: syz.0.1811 Tainted: G U syzkaller #0 PREEMPT(full) [ 933.062386][T15588] Tainted: [U]=USER [ 933.062393][T15588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 933.062407][T15588] Call Trace: [ 933.062414][T15588] [ 933.062422][T15588] dump_stack_lvl+0x16c/0x1f0 [ 933.062461][T15588] should_fail_ex+0x512/0x640 [ 933.062498][T15588] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 933.062529][T15588] should_failslab+0xc2/0x120 [ 933.062560][T15588] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 933.062598][T15588] ? __proc_create+0xc3/0x8e0 [ 933.062629][T15588] ? __proc_create+0x2ce/0x8e0 [ 933.062665][T15588] __proc_create+0x2ce/0x8e0 [ 933.062698][T15588] ? __pfx___proc_create+0x10/0x10 [ 933.062734][T15588] ? __pfx___netlink_kernel_create+0x10/0x10 [ 933.062768][T15588] ? fib4_semantics_init+0x25/0x100 [ 933.062802][T15588] proc_create_reg+0x7d/0x180 [ 933.062837][T15588] proc_create_seq_private+0x8e/0x180 [ 933.062902][T15588] ? __pfx_proc_create_seq_private+0x10/0x10 [ 933.062938][T15588] ? __pfx_nl_fib_input+0x10/0x10 [ 933.062963][T15588] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 933.062986][T15588] ip_rt_do_proc_init+0x57/0x1b0 [ 933.063008][T15588] ops_init+0x1e2/0x5f0 [ 933.063045][T15588] setup_net+0x10f/0x380 [ 933.063061][T15588] ? lockdep_init_map_type+0x5c/0x280 [ 933.063092][T15588] ? __pfx_setup_net+0x10/0x10 [ 933.063113][T15588] ? debug_mutex_init+0x37/0x70 [ 933.063137][T15588] copy_net_ns+0x2a6/0x5f0 [ 933.063161][T15588] create_new_namespaces+0x3ea/0xa90 [ 933.063192][T15588] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 933.063220][T15588] ksys_unshare+0x45b/0xa40 [ 933.063250][T15588] ? __pfx_ksys_unshare+0x10/0x10 [ 933.063282][T15588] ? xfd_validate_state+0x61/0x180 [ 933.063321][T15588] __x64_sys_unshare+0x31/0x40 [ 933.063354][T15588] do_syscall_64+0xcd/0x4c0 [ 933.063390][T15588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.063413][T15588] RIP: 0033:0x7f7a02b8eec9 [ 933.063429][T15588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.063451][T15588] RSP: 002b:00007f7a03a78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 933.063472][T15588] RAX: ffffffffffffffda RBX: 00007f7a02de5fa0 RCX: 00007f7a02b8eec9 [ 933.063486][T15588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 933.063499][T15588] RBP: 00007f7a02c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 933.063512][T15588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.063525][T15588] R13: 00007f7a02de6038 R14: 00007f7a02de5fa0 R15: 00007ffd58376a58 [ 933.063552][T15588] [ 934.048427][T15596] FAULT_INJECTION: forcing a failure. [ 934.048427][T15596] name failslab, interval 1, probability 0, space 0, times 0 [ 934.063533][T15596] CPU: 1 UID: 0 PID: 15596 Comm: syz.2.1813 Tainted: G U syzkaller #0 PREEMPT(full) [ 934.063565][T15596] Tainted: [U]=USER [ 934.063571][T15596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 934.063584][T15596] Call Trace: [ 934.063591][T15596] [ 934.063599][T15596] dump_stack_lvl+0x16c/0x1f0 [ 934.063637][T15596] should_fail_ex+0x512/0x640 [ 934.063671][T15596] ? __kmalloc_noprof+0xbf/0x510 [ 934.063698][T15596] ? cache_create_net+0x9d/0x220 [ 934.063726][T15596] should_failslab+0xc2/0x120 [ 934.063760][T15596] __kmalloc_noprof+0xd2/0x510 [ 934.063791][T15596] cache_create_net+0x9d/0x220 [ 934.063823][T15596] unix_gid_cache_create+0x60/0x130 [ 934.063874][T15596] ? __pfx_sunrpc_init_net+0x10/0x10 [ 934.063915][T15596] sunrpc_init_net+0x71/0x190 [ 934.063941][T15596] ops_init+0x1e2/0x5f0 [ 934.063997][T15596] setup_net+0x10f/0x380 [ 934.064015][T15596] ? lockdep_init_map_type+0x5c/0x280 [ 934.064048][T15596] ? __pfx_setup_net+0x10/0x10 [ 934.064070][T15596] ? debug_mutex_init+0x37/0x70 [ 934.064096][T15596] copy_net_ns+0x2a6/0x5f0 [ 934.064123][T15596] create_new_namespaces+0x3ea/0xa90 [ 934.064155][T15596] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 934.064185][T15596] ksys_unshare+0x45b/0xa40 [ 934.064217][T15596] ? __pfx_ksys_unshare+0x10/0x10 [ 934.064250][T15596] ? xfd_validate_state+0x61/0x180 [ 934.064293][T15596] __x64_sys_unshare+0x31/0x40 [ 934.064326][T15596] do_syscall_64+0xcd/0x4c0 [ 934.064384][T15596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.064408][T15596] RIP: 0033:0x7f35b558eec9 [ 934.064427][T15596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.064450][T15596] RSP: 002b:00007f35b37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 934.064472][T15596] RAX: ffffffffffffffda RBX: 00007f35b57e5fa0 RCX: 00007f35b558eec9 [ 934.064488][T15596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 934.064503][T15596] RBP: 00007f35b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 934.064517][T15596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.064531][T15596] R13: 00007f35b57e6038 R14: 00007f35b57e5fa0 R15: 00007ffc6e9c2a58 [ 934.064561][T15596] [ 936.839294][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.847889][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.003368][T15648] delete_channel: no stack [ 938.845281][T15689] delete_channel: no stack [ 939.750177][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 939.756674][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.780256][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 939.792990][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.820530][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 939.831104][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.871144][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 939.889097][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.912485][T15724] vivid-003: ================= START STATUS ================= [ 940.936965][T15724] vivid-003: Radio HW Seek Mode: Bounded [ 940.942661][T15724] vivid-003: Radio Programmable HW Seek: false [ 940.958805][T15724] vivid-003: RDS Rx I/O Mode: Block I/O [ 940.967268][T15724] vivid-003: Generate RBDS Instead of RDS: false [ 940.977193][T15724] vivid-003: RDS Reception: true [ 940.982161][T15724] vivid-003: RDS Program Type: 0 inactive [ 941.005701][T15724] vivid-003: RDS PS Name: inactive [ 941.016453][T15724] vivid-003: RDS Radio Text: inactive [ 941.025743][T15724] vivid-003: RDS Traffic Announcement: false inactive [ 941.032628][T15724] vivid-003: RDS Traffic Program: false inactive [ 941.043449][T15724] vivid-003: RDS Music: false inactive [ 941.076923][T15724] vivid-003: ================== END STATUS ================== [ 943.059579][T15755] delete_channel: no stack [ 944.129665][T15783] input: f as /devices/virtual/input/input26 [ 945.877263][T15810] delete_channel: no stack [ 947.338803][T15832] delete_channel: no stack [ 948.996340][ T6549] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 967 with max blocks 57 with error 117 [ 949.170519][ T6549] EXT4-fs (sda1): This should not happen!! Data will be lost [ 949.170519][ T6549] [ 949.335314][ T6549] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 993 with max blocks 31 with error 117 [ 949.498402][ T6549] EXT4-fs (sda1): This should not happen!! Data will be lost [ 949.498402][ T6549] [ 951.036380][T15891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1862'. [ 951.330265][T15891] bond0: (slave bond_slave_0): Releasing backup interface [ 951.666200][T15904] delete_channel: no stack [ 954.036483][T15932] delete_channel: no stack [ 956.592358][T15962] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1874'. [ 956.693671][T15965] delete_channel: no stack [ 956.806204][T15962] bond0: (slave bond_slave_0): Releasing backup interface [ 957.033639][T15973] sp0: Synchronizing with TNC [ 957.251297][T15974] ptp ptp0: new virtual clock ptp1 [ 957.287207][T15974] ptp ptp0: new virtual clock ptp2 [ 957.302957][T15974] ptp ptp0: new virtual clock ptp3 [ 957.309241][T15974] ptp ptp0: guarantee physical clock free running [ 958.225856][T15988] delete_channel: no stack [ 958.307889][T15969] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1875'. [ 958.806599][T15969] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.1875: iget: checksum invalid [ 959.150868][T15969] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 959.365529][T15969] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.1875: iget: checksum invalid [ 959.679871][T15969] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 960.038446][T15969] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.1875: iget: checksum invalid [ 960.224335][T15969] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 960.692461][T15969] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.1875: iget: checksum invalid [ 961.225986][T15969] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 961.235427][T15969] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 961.854447][T15969] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 964.012709][T16067] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1891'. [ 964.321545][T16073] delete_channel: no stack [ 966.066835][T16085] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 966.450188][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 966.872903][T16108] sp0: Synchronizing with TNC [ 967.751075][T16125] netlink: 'syz.2.1899': attribute type 1 has an invalid length. [ 967.787103][T16125] net_ratelimit: 96 callbacks suppressed [ 967.787120][T16125] netlink: zone id is out of range [ 967.815814][T16125] netlink: zone id is out of range [ 967.824127][T16125] netlink: zone id is out of range [ 967.829588][T16125] netlink: zone id is out of range [ 967.848662][T16125] netlink: zone id is out of range [ 967.859076][T16125] netlink: zone id is out of range [ 967.864212][T16125] netlink: zone id is out of range [ 967.896764][T16125] netlink: zone id is out of range [ 967.901891][T16125] netlink: zone id is out of range [ 967.935766][T16125] netlink: zone id is out of range [ 968.235825][T16108] ptp ptp0: guarantee physical clock free running [ 970.985267][T16148] FAULT_INJECTION: forcing a failure. [ 970.985267][T16148] name failslab, interval 1, probability 0, space 0, times 0 [ 971.470332][T16148] CPU: 1 UID: 0 PID: 16148 Comm: syz.3.1903 Tainted: G U syzkaller #0 PREEMPT(full) [ 971.470393][T16148] Tainted: [U]=USER [ 971.470400][T16148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 971.470415][T16148] Call Trace: [ 971.470423][T16148] [ 971.470431][T16148] dump_stack_lvl+0x16c/0x1f0 [ 971.470471][T16148] should_fail_ex+0x512/0x640 [ 971.470507][T16148] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 971.470539][T16148] should_failslab+0xc2/0x120 [ 971.470571][T16148] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 971.470599][T16148] ? posix_lock_inode+0x1b7/0x2280 [ 971.470641][T16148] posix_lock_inode+0x1b7/0x2280 [ 971.470689][T16148] ? __pfx_posix_lock_inode+0x10/0x10 [ 971.470734][T16148] vfs_lock_file+0xfb/0x150 [ 971.470756][T16148] fcntl_setlk+0x3ff/0xe20 [ 971.470781][T16148] ? __pfx_fcntl_setlk+0x10/0x10 [ 971.470802][T16148] ? lockdep_hardirqs_on+0x7c/0x110 [ 971.470847][T16148] ? rep_movs_alternative+0x30/0x90 [ 971.470879][T16148] do_fcntl+0xbce/0x15a0 [ 971.470913][T16148] ? __pfx_do_fcntl+0x10/0x10 [ 971.470953][T16148] ? tomoyo_file_fcntl+0x6c/0xc0 [ 971.470978][T16148] __x64_sys_fcntl+0x163/0x200 [ 971.471015][T16148] do_syscall_64+0xcd/0x4c0 [ 971.471053][T16148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.471077][T16148] RIP: 0033:0x7f722ad8eec9 [ 971.471107][T16148] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.471130][T16148] RSP: 002b:00007f722bc8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 971.471151][T16148] RAX: ffffffffffffffda RBX: 00007f722afe5fa0 RCX: 00007f722ad8eec9 [ 971.471166][T16148] RDX: 00000000000000ff RSI: 0000000000000025 RDI: 0000000000000005 [ 971.471180][T16148] RBP: 00007f722ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 971.471194][T16148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.471207][T16148] R13: 00007f722afe6038 R14: 00007f722afe5fa0 R15: 00007ffe7c4db128 [ 971.471236][T16148] [ 973.288198][T16195] input: f as /devices/virtual/input/input27 [ 975.657608][T16224] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 938 with max blocks 86 with error 117 [ 975.745683][T16224] EXT4-fs (sda1): This should not happen!! Data will be lost [ 975.745683][T16224] [ 976.540084][T16224] kexec: Could not allocate control_code_buffer [ 978.135866][T16243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1920'. [ 978.675159][T16252] delete_channel: no stack [ 978.931808][T16259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1919'. [ 980.205565][ T6549] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 978 with max blocks 46 with error 117 [ 980.327438][ T6549] EXT4-fs (sda1): This should not happen!! Data will be lost [ 980.327438][ T6549] [ 980.431742][ T6549] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 993 with max blocks 31 with error 117 [ 980.568027][ T6549] EXT4-fs (sda1): This should not happen!! Data will be lost [ 980.568027][ T6549] [ 980.735978][ T6549] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1384 with max blocks 1 with error 117 [ 980.859393][ T6549] EXT4-fs (sda1): This should not happen!! Data will be lost [ 980.859393][ T6549] [ 980.991593][T16259] bond0: (slave bond_slave_0): Releasing backup interface [ 982.991689][T16298] FAULT_INJECTION: forcing a failure. [ 982.991689][T16298] name failslab, interval 1, probability 0, space 0, times 0 [ 983.041136][T16298] CPU: 1 UID: 0 PID: 16298 Comm: syz.2.1930 Tainted: G U syzkaller #0 PREEMPT(full) [ 983.041173][T16298] Tainted: [U]=USER [ 983.041181][T16298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 983.041194][T16298] Call Trace: [ 983.041202][T16298] [ 983.041210][T16298] dump_stack_lvl+0x16c/0x1f0 [ 983.041250][T16298] should_fail_ex+0x512/0x640 [ 983.041287][T16298] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 983.041314][T16298] should_failslab+0xc2/0x120 [ 983.041345][T16298] __kmalloc_cache_noprof+0x6a/0x3e0 [ 983.041370][T16298] ? create_filter_start.constprop.0+0x103/0x300 [ 983.041406][T16298] create_filter_start.constprop.0+0x103/0x300 [ 983.041439][T16298] create_filter+0xb5/0x210 [ 983.041467][T16298] ? __pfx_create_filter+0x10/0x10 [ 983.041497][T16298] ? __pfx___mutex_lock+0x10/0x10 [ 983.041532][T16298] ? find_held_lock+0x2b/0x80 [ 983.041558][T16298] apply_event_filter+0x220/0x500 [ 983.041589][T16298] ? __pfx_apply_event_filter+0x10/0x10 [ 983.041627][T16298] event_filter_write+0x16d/0x290 [ 983.041664][T16298] ? __pfx_event_filter_write+0x10/0x10 [ 983.041699][T16298] vfs_write+0x29d/0x11d0 [ 983.041730][T16298] ? __pfx___mutex_lock+0x10/0x10 [ 983.041767][T16298] ? __pfx_vfs_write+0x10/0x10 [ 983.041802][T16298] ? __fget_files+0x20e/0x3c0 [ 983.041836][T16298] ksys_write+0x12a/0x250 [ 983.041863][T16298] ? __pfx_ksys_write+0x10/0x10 [ 983.041901][T16298] do_syscall_64+0xcd/0x4c0 [ 983.041940][T16298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.041963][T16298] RIP: 0033:0x7f35b558eec9 [ 983.041982][T16298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 983.042006][T16298] RSP: 002b:00007f35b37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 983.042027][T16298] RAX: ffffffffffffffda RBX: 00007f35b57e5fa0 RCX: 00007f35b558eec9 [ 983.042043][T16298] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 983.042065][T16298] RBP: 00007f35b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 983.042079][T16298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 983.042093][T16298] R13: 00007f35b57e6038 R14: 00007f35b57e5fa0 R15: 00007ffc6e9c2a58 [ 983.042122][T16298] [ 984.587314][T16318] delete_channel: no stack [ 985.019845][T16325] sp0: Synchronizing with TNC [ 985.675320][T16326] ptp ptp0: guarantee physical clock free running [ 986.456827][T16333] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 986.530325][T16336] input: f as /devices/virtual/input/input28 [ 987.398682][T14895] udevd[14895]: setting owner of /dev/input/event2 to uid=0, gid=104 failed: No such file or directory [ 987.703496][T16345] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 951 with max blocks 42 with error 117 [ 988.064216][T16345] EXT4-fs (sda1): This should not happen!! Data will be lost [ 988.064216][T16345] [ 991.153120][T16381] sp0: Synchronizing with TNC [ 992.044582][T16381] ptp ptp0: guarantee physical clock free running [ 992.314280][T16401] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 949 with max blocks 75 with error 117 [ 992.423631][T16401] EXT4-fs (sda1): This should not happen!! Data will be lost [ 992.423631][T16401] [ 993.727406][T16423] delete_channel: no stack [ 993.897337][T16428] delete_channel: no stack [ 994.380167][T16439] zero sized request [ 995.233538][T16453] delete_channel: no stack [ 995.902314][T16468] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1960'. [ 996.496067][T16468] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.1960: iget: checksum invalid [ 996.644641][T16468] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 996.821741][T16468] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.1960: iget: checksum invalid [ 997.082406][T16468] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 997.337956][T16468] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.1960: iget: checksum invalid [ 997.753602][T16468] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 998.054721][T16468] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.3.1960: iget: checksum invalid [ 998.297257][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.304005][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.317610][T16468] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 998.623223][T16468] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 998.926995][T16468] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 999.256304][T16514] delete_channel: no stack [ 1000.403824][T16533] delete_channel: no stack [ 1000.657615][T16538] ICMPv6: process `syz.2.1973' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 1001.384482][T16539] FAULT_INJECTION: forcing a failure. [ 1001.384482][T16539] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.563534][T16539] CPU: 1 UID: 0 PID: 16539 Comm: syz.0.1972 Tainted: G U syzkaller #0 PREEMPT(full) [ 1001.563594][T16539] Tainted: [U]=USER [ 1001.563602][T16539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1001.563622][T16539] Call Trace: [ 1001.563630][T16539] [ 1001.563638][T16539] dump_stack_lvl+0x16c/0x1f0 [ 1001.563680][T16539] should_fail_ex+0x512/0x640 [ 1001.563718][T16539] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1001.563754][T16539] should_failslab+0xc2/0x120 [ 1001.563810][T16539] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1001.563840][T16539] ? posix_lock_inode+0x1b7/0x2280 [ 1001.563884][T16539] posix_lock_inode+0x1b7/0x2280 [ 1001.563951][T16539] ? __pfx_posix_lock_inode+0x10/0x10 [ 1001.563999][T16539] vfs_lock_file+0xfb/0x150 [ 1001.564022][T16539] fcntl_setlk+0x3ff/0xe20 [ 1001.564048][T16539] ? __pfx_fcntl_setlk+0x10/0x10 [ 1001.564069][T16539] ? lockdep_hardirqs_on+0x7c/0x110 [ 1001.564117][T16539] ? rep_movs_alternative+0x30/0x90 [ 1001.564151][T16539] do_fcntl+0xbce/0x15a0 [ 1001.564185][T16539] ? __pfx_do_fcntl+0x10/0x10 [ 1001.564227][T16539] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1001.564253][T16539] __x64_sys_fcntl+0x163/0x200 [ 1001.564291][T16539] do_syscall_64+0xcd/0x4c0 [ 1001.564331][T16539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.564358][T16539] RIP: 0033:0x7f7a02b8eec9 [ 1001.564377][T16539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.564401][T16539] RSP: 002b:00007f7a03a78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1001.564423][T16539] RAX: ffffffffffffffda RBX: 00007f7a02de5fa0 RCX: 00007f7a02b8eec9 [ 1001.564439][T16539] RDX: 00000000000000ff RSI: 0000000000000025 RDI: 0000000000000005 [ 1001.564453][T16539] RBP: 00007f7a02c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1001.564467][T16539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.564482][T16539] R13: 00007f7a02de6038 R14: 00007f7a02de5fa0 R15: 00007ffd58376a58 [ 1001.564519][T16539] [ 1002.306952][T16563] hub 1-0:1.0: USB hub found [ 1002.323697][T16563] hub 1-0:1.0: 1 port detected [ 1005.583687][T16602] delete_channel: no stack [ 1008.024731][T16633] delete_channel: no stack [ 1009.737003][T16646] delete_channel: no stack [ 1011.396221][T12856] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 978 with max blocks 46 with error 117 [ 1011.566125][T12856] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1011.566125][T12856] [ 1011.640245][T12856] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 993 with max blocks 31 with error 117 [ 1011.801944][T12856] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1011.801944][T12856] [ 1012.467073][T16685] ICMPv6: process `syz.0.1994' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 1013.196940][T16698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1996'. [ 1014.043542][T16698] veth0_macvtap: left promiscuous mode [ 1014.145691][T16698] macvtap0: entered promiscuous mode [ 1014.205953][T16698] macvtap0: entered allmulticast mode [ 1014.671825][T16711] FAULT_INJECTION: forcing a failure. [ 1014.671825][T16711] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.695893][T16711] CPU: 1 UID: 0 PID: 16711 Comm: syz.2.2000 Tainted: G U syzkaller #0 PREEMPT(full) [ 1014.695929][T16711] Tainted: [U]=USER [ 1014.695936][T16711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1014.695949][T16711] Call Trace: [ 1014.695956][T16711] [ 1014.695964][T16711] dump_stack_lvl+0x16c/0x1f0 [ 1014.696003][T16711] should_fail_ex+0x512/0x640 [ 1014.696049][T16711] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1014.696079][T16711] should_failslab+0xc2/0x120 [ 1014.696108][T16711] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1014.696135][T16711] ? shmem_alloc_inode+0x25/0x50 [ 1014.696169][T16711] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1014.696199][T16711] shmem_alloc_inode+0x25/0x50 [ 1014.696228][T16711] alloc_inode+0x61/0x240 [ 1014.696260][T16711] new_inode+0x22/0x1c0 [ 1014.696289][T16711] ? trace_cap_capable+0x18d/0x200 [ 1014.696314][T16711] shmem_get_inode+0x19a/0xfb0 [ 1014.696348][T16711] ? __vm_enough_memory+0x184/0x3f0 [ 1014.696382][T16711] __shmem_file_setup+0x279/0x330 [ 1014.696406][T16711] shmem_zero_setup+0x93/0x1a0 [ 1014.696435][T16711] __mmap_region+0x2081/0x27b0 [ 1014.696462][T16711] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1014.696485][T16711] ? __pfx___mmap_region+0x10/0x10 [ 1014.696509][T16711] ? rcu_is_watching+0x12/0xc0 [ 1014.696537][T16711] ? rcu_is_watching+0x12/0xc0 [ 1014.696558][T16711] ? trace_sched_exit_tp+0xd1/0x120 [ 1014.696591][T16711] ? __schedule+0x11a3/0x5de0 [ 1014.696620][T16711] ? __lock_acquire+0x62e/0x1ce0 [ 1014.696662][T16711] ? __pfx___schedule+0x10/0x10 [ 1014.696721][T16711] ? trace_cap_capable+0x18d/0x200 [ 1014.696752][T16711] mmap_region+0x1ab/0x3f0 [ 1014.696778][T16711] ? __get_unmapped_area+0x267/0x440 [ 1014.696812][T16711] do_mmap+0xa3e/0x1210 [ 1014.696848][T16711] ? __pfx_do_mmap+0x10/0x10 [ 1014.696886][T16711] ? __pfx_down_write_killable+0x10/0x10 [ 1014.696913][T16711] vm_mmap_pgoff+0x29e/0x470 [ 1014.696949][T16711] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1014.696980][T16711] ? find_held_lock+0x2b/0x80 [ 1014.697004][T16711] ? __x64_sys_futex+0x1e0/0x4c0 [ 1014.697031][T16711] ? __x64_sys_futex+0x1e9/0x4c0 [ 1014.697062][T16711] ksys_mmap_pgoff+0x7d/0x5c0 [ 1014.697102][T16711] ? xfd_validate_state+0x61/0x180 [ 1014.697136][T16711] __x64_sys_mmap+0x125/0x190 [ 1014.697170][T16711] do_syscall_64+0xcd/0x4c0 [ 1014.697203][T16711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.697224][T16711] RIP: 0033:0x7f35b558eec9 [ 1014.697239][T16711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.697258][T16711] RSP: 002b:00007f35b37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1014.697276][T16711] RAX: ffffffffffffffda RBX: 00007f35b57e5fa0 RCX: 00007f35b558eec9 [ 1014.697289][T16711] RDX: 0000000000010001 RSI: 0000000002020009 RDI: 0000000000000000 [ 1014.697301][T16711] RBP: 00007f35b5611f91 R08: fffffffffffffffa R09: 0000000000008000 [ 1014.697314][T16711] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1014.697326][T16711] R13: 00007f35b57e6038 R14: 00007f35b57e5fa0 R15: 00007ffc6e9c2a58 [ 1014.697351][T16711] [ 1015.764976][T16722] delete_channel: no stack [ 1019.993571][T16779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2008'. [ 1020.003874][T16779] veth0_macvtap: left promiscuous mode [ 1020.013527][T16779] macvtap0: entered promiscuous mode [ 1020.020474][T16779] macvtap0: entered allmulticast mode [ 1020.134462][T16781] delete_channel: no stack [ 1023.134568][T16810] zswap: compressor not available [ 1023.451054][T16812] zswap: compressor not available [ 1024.383375][T16839] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1 with max blocks 2 with error 117 [ 1024.647192][T16839] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1024.647192][T16839] [ 1025.449563][T16851] FAULT_INJECTION: forcing a failure. [ 1025.449563][T16851] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.463257][T16851] CPU: 1 UID: 0 PID: 16851 Comm: syz.2.2021 Tainted: G U syzkaller #0 PREEMPT(full) [ 1025.463293][T16851] Tainted: [U]=USER [ 1025.463300][T16851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1025.463314][T16851] Call Trace: [ 1025.463321][T16851] [ 1025.463330][T16851] dump_stack_lvl+0x16c/0x1f0 [ 1025.463370][T16851] should_fail_ex+0x512/0x640 [ 1025.463408][T16851] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1025.463441][T16851] should_failslab+0xc2/0x120 [ 1025.463473][T16851] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1025.463503][T16851] ? posix_lock_inode+0x1b7/0x2280 [ 1025.463545][T16851] posix_lock_inode+0x1b7/0x2280 [ 1025.463595][T16851] ? __pfx_posix_lock_inode+0x10/0x10 [ 1025.463642][T16851] vfs_lock_file+0xfb/0x150 [ 1025.463664][T16851] fcntl_setlk+0x3ff/0xe20 [ 1025.463690][T16851] ? __pfx_fcntl_setlk+0x10/0x10 [ 1025.463712][T16851] ? lockdep_hardirqs_on+0x7c/0x110 [ 1025.463759][T16851] ? rep_movs_alternative+0x30/0x90 [ 1025.463792][T16851] do_fcntl+0xbce/0x15a0 [ 1025.463827][T16851] ? __pfx_do_fcntl+0x10/0x10 [ 1025.463876][T16851] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1025.463903][T16851] __x64_sys_fcntl+0x163/0x200 [ 1025.463941][T16851] do_syscall_64+0xcd/0x4c0 [ 1025.463980][T16851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.464005][T16851] RIP: 0033:0x7f35b558eec9 [ 1025.464023][T16851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1025.464047][T16851] RSP: 002b:00007f35b37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1025.464069][T16851] RAX: ffffffffffffffda RBX: 00007f35b57e5fa0 RCX: 00007f35b558eec9 [ 1025.464085][T16851] RDX: 00000000000000ff RSI: 0000000000000025 RDI: 0000000000000005 [ 1025.464099][T16851] RBP: 00007f35b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1025.464114][T16851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.464127][T16851] R13: 00007f35b57e6038 R14: 00007f35b57e5fa0 R15: 00007ffc6e9c2a58 [ 1025.464156][T16851] [ 1026.423659][T16857] vivid-007: ================= START STATUS ================= [ 1026.592260][T16857] vivid-007: Generate PTS: true [ 1026.629946][T16860] delete_channel: no stack [ 1026.705935][T16857] vivid-007: Generate SCR: true [ 1026.710915][T16857] tpg source WxH: 320x240 (Y'CbCr) [ 1026.824534][T16857] tpg field: 1 [ 1026.831815][T16857] tpg crop: (0,0)/320x240 [ 1026.905414][T16857] tpg compose: (0,0)/320x240 [ 1026.959715][T16857] tpg colorspace: 8 [ 1026.963549][T16857] tpg transfer function: 0/0 [ 1027.141631][T16857] tpg Y'CbCr encoding: 0/0 [ 1027.252441][T16857] tpg quantization: 0/0 [ 1027.302775][T16870] can: request_module (can-proto-3) failed. [ 1027.565045][T16857] tpg RGB range: 0/2 [ 1027.670821][T16883] hub 1-0:1.0: USB hub found [ 1027.681833][T16857] vivid-007: ================== END STATUS ================== [ 1027.696190][T16883] hub 1-0:1.0: 1 port detected [ 1034.335851][T16963] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input29 [ 1035.076765][T16979] ubi: mtd0 is already attached to ubi0 [ 1035.098596][T16979] ubi0: detaching mtd0 [ 1035.148323][T16979] ubi0: mtd0 is detached [ 1037.826968][T17017] delete_channel: no stack [ 1040.216507][T17058] delete_channel: no stack [ 1042.756009][T12856] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 978 with max blocks 46 with error 117 [ 1042.958495][T12856] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1042.958495][T12856] [ 1043.098583][T12856] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 993 with max blocks 31 with error 117 [ 1043.332181][T12856] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1043.332181][T12856] [ 1043.464705][T12856] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1383 with max blocks 2 with error 117 [ 1043.635797][T12856] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1043.635797][T12856] [ 1043.852797][T17129] delete_channel: no stack [ 1045.446487][T17155] FAULT_INJECTION: forcing a failure. [ 1045.446487][T17155] name failslab, interval 1, probability 0, space 0, times 0 [ 1045.466502][T17155] CPU: 1 UID: 0 PID: 17155 Comm: syz.2.2068 Tainted: G U syzkaller #0 PREEMPT(full) [ 1045.466538][T17155] Tainted: [U]=USER [ 1045.466546][T17155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1045.466560][T17155] Call Trace: [ 1045.466567][T17155] [ 1045.466576][T17155] dump_stack_lvl+0x16c/0x1f0 [ 1045.466617][T17155] should_fail_ex+0x512/0x640 [ 1045.466654][T17155] ? __kmalloc_noprof+0xbf/0x510 [ 1045.466685][T17155] ? __register_sysctl_table+0xea2/0x1900 [ 1045.466721][T17155] should_failslab+0xc2/0x120 [ 1045.466752][T17155] __kmalloc_noprof+0xd2/0x510 [ 1045.466779][T17155] ? __register_sysctl_table+0xe8e/0x1900 [ 1045.466821][T17155] __register_sysctl_table+0xea2/0x1900 [ 1045.466864][T17155] ? __pfx___register_sysctl_table+0x10/0x10 [ 1045.466919][T17155] ? is_module_address+0x69/0xf0 [ 1045.466952][T17155] ? register_net_sysctl_sz+0x228/0x3e0 [ 1045.466976][T17155] ? __asan_memcpy+0x3c/0x60 [ 1045.467002][T17155] sysctl_core_net_init+0xe3/0x280 [ 1045.467033][T17155] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 1045.467061][T17155] ops_init+0x1e2/0x5f0 [ 1045.467101][T17155] setup_net+0x10f/0x380 [ 1045.467119][T17155] ? lockdep_init_map_type+0x5c/0x280 [ 1045.467152][T17155] ? __pfx_setup_net+0x10/0x10 [ 1045.467173][T17155] ? debug_mutex_init+0x37/0x70 [ 1045.467212][T17155] copy_net_ns+0x2a6/0x5f0 [ 1045.467237][T17155] create_new_namespaces+0x3ea/0xa90 [ 1045.467269][T17155] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1045.467297][T17155] ksys_unshare+0x45b/0xa40 [ 1045.467329][T17155] ? __pfx_ksys_unshare+0x10/0x10 [ 1045.467360][T17155] ? xfd_validate_state+0x61/0x180 [ 1045.467401][T17155] __x64_sys_unshare+0x31/0x40 [ 1045.467432][T17155] do_syscall_64+0xcd/0x4c0 [ 1045.467468][T17155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.467491][T17155] RIP: 0033:0x7f35b558eec9 [ 1045.467507][T17155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1045.467528][T17155] RSP: 002b:00007f35b37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1045.467548][T17155] RAX: ffffffffffffffda RBX: 00007f35b57e5fa0 RCX: 00007f35b558eec9 [ 1045.467562][T17155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1045.467575][T17155] RBP: 00007f35b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1045.467588][T17155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1045.467600][T17155] R13: 00007f35b57e6038 R14: 00007f35b57e5fa0 R15: 00007ffc6e9c2a58 [ 1045.467628][T17155] [ 1045.467636][T17155] sysctl could not get directory: /net/core -12 [ 1047.018995][T17175] vivid-007: ================= START STATUS ================= [ 1047.026907][T17175] vivid-007: Generate PTS: true [ 1047.031780][T17175] vivid-007: Generate SCR: true [ 1047.039828][T17175] tpg source WxH: 320x240 (Y'CbCr) [ 1047.044954][T17175] tpg field: 1 [ 1047.060937][T17175] tpg crop: (0,0)/320x240 [ 1047.071034][T17175] tpg compose: (0,0)/320x240 [ 1047.081171][T17175] tpg colorspace: 8 [ 1047.084986][T17175] tpg transfer function: 0/0 [ 1047.091287][T17175] tpg Y'CbCr encoding: 0/0 [ 1047.106789][T17175] tpg quantization: 0/0 [ 1047.110987][T17175] tpg RGB range: 0/2 [ 1047.114876][T17175] vivid-007: ================== END STATUS ================== [ 1047.583123][T17176] can: request_module (can-proto-3) failed. [ 1048.139777][T10536] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1048.260486][T17189] delete_channel: no stack [ 1049.287587][T17212] delete_channel: no stack [ 1050.143438][T17223] delete_channel: no stack [ 1054.219754][T17286] FAULT_INJECTION: forcing a failure. [ 1054.219754][T17286] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.246690][T17286] CPU: 1 UID: 0 PID: 17286 Comm: syz.2.2090 Tainted: G U syzkaller #0 PREEMPT(full) [ 1054.246729][T17286] Tainted: [U]=USER [ 1054.246737][T17286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1054.246751][T17286] Call Trace: [ 1054.246759][T17286] [ 1054.246768][T17286] dump_stack_lvl+0x16c/0x1f0 [ 1054.246809][T17286] should_fail_ex+0x512/0x640 [ 1054.246845][T17286] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1054.246874][T17286] should_failslab+0xc2/0x120 [ 1054.246906][T17286] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1054.246932][T17286] ? cgroup_file_open+0x93/0x330 [ 1054.246958][T17286] cgroup_file_open+0x93/0x330 [ 1054.246978][T17286] ? __pfx_cgroup_file_open+0x10/0x10 [ 1054.247002][T17286] kernfs_fop_open+0x8c6/0xda0 [ 1054.247041][T17286] do_dentry_open+0x97f/0x1530 [ 1054.247072][T17286] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1054.247101][T17286] vfs_open+0x82/0x3f0 [ 1054.247154][T17286] path_openat+0x1de4/0x2cb0 [ 1054.247192][T17286] ? __pfx_path_openat+0x10/0x10 [ 1054.247227][T17286] do_filp_open+0x20b/0x470 [ 1054.247274][T17286] ? __pfx_do_filp_open+0x10/0x10 [ 1054.247323][T17286] ? alloc_fd+0x471/0x7d0 [ 1054.247357][T17286] do_sys_openat2+0x11b/0x1d0 [ 1054.247394][T17286] ? __pfx_do_sys_openat2+0x10/0x10 [ 1054.247443][T17286] __x64_sys_openat+0x174/0x210 [ 1054.247465][T17286] ? __pfx___x64_sys_openat+0x10/0x10 [ 1054.247498][T17286] do_syscall_64+0xcd/0x4c0 [ 1054.247551][T17286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.247575][T17286] RIP: 0033:0x7f35b558eec9 [ 1054.247592][T17286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.247615][T17286] RSP: 002b:00007f35b37f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1054.247636][T17286] RAX: ffffffffffffffda RBX: 00007f35b57e5fa0 RCX: 00007f35b558eec9 [ 1054.247652][T17286] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1054.247666][T17286] RBP: 00007f35b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1054.247679][T17286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.247693][T17286] R13: 00007f35b57e6038 R14: 00007f35b57e5fa0 R15: 00007ffc6e9c2a58 [ 1054.247722][T17286] [ 1054.474173][ C1] vkms_vblank_simulate: vblank timer overrun [ 1054.832109][T17291] delete_channel: no stack [ 1057.282231][T17321] delete_channel: no stack [ 1059.326894][T17306] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1059.728157][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.757005][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.907467][T17381] Invalid ELF header magic: != ELF [ 1063.235124][T17403] delete_channel: no stack [ 1064.029791][T17423] blktrace: Concurrent blktraces are not allowed on ram7 [ 1068.264522][T17479] capability: warning: `syz.0.2122' uses deprecated v2 capabilities in a way that may be insecure [ 1068.636886][T17486] Invalid ELF header magic: != ELF [ 1068.900925][T17494] delete_channel: no stack [ 1070.139877][ T30] audit: type=1806 audit(4294967380.610:24): xattr="" res=-22 [ 1070.647138][T17523] mkiss: ax0: crc mode is auto. [ 1072.480227][T17560] ERROR: Out of memory at tomoyo_memory_ok. [ 1073.181410][T17570] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 947 with max blocks 77 with error 117 [ 1073.226771][T17570] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1073.226771][T17570] [ 1073.311816][T17554] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 946 with max blocks 78 with error 117 [ 1073.865769][T17554] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1073.865769][T17554] [ 1074.596278][ T6549] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1002 with max blocks 22 with error 117 [ 1074.751820][ T6549] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1074.751820][ T6549] [ 1074.870547][ T6549] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1363 with max blocks 51 with error 117 [ 1075.048012][ T6549] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1075.048012][ T6549] [ 1075.153494][T17598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2142'. [ 1075.246802][ T6549] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 951 with max blocks 11 with error 117 [ 1075.437158][ T6549] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1075.437158][ T6549] [ 1075.469674][T17598] bridge0: entered allmulticast mode [ 1076.519696][T17620] delete_channel: no stack [ 1076.660361][T17623] delete_channel: no stack [ 1078.313968][T17646] ERROR: Out of memory at tomoyo_memory_ok. [ 1078.770751][T17656] delete_channel: no stack [ 1082.620114][T17706] device-mapper: ioctl: Unable to rename non-existent device,  to [ 1083.437484][T17711] delete_channel: no stack [ 1085.526335][T17735] blktrace: Concurrent blktraces are not allowed on ram7 [ 1087.739588][T17768] FAULT_INJECTION: forcing a failure. [ 1087.739588][T17768] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.739637][T17768] CPU: 1 UID: 0 PID: 17768 Comm: syz.2.2171 Tainted: G U syzkaller #0 PREEMPT(full) [ 1087.739669][T17768] Tainted: [U]=USER [ 1087.739676][T17768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1087.739690][T17768] Call Trace: [ 1087.739698][T17768] [ 1087.739706][T17768] dump_stack_lvl+0x16c/0x1f0 [ 1087.739745][T17768] should_fail_ex+0x512/0x640 [ 1087.739790][T17768] ? __kmalloc_noprof+0xbf/0x510 [ 1087.739819][T17768] ? vc_allocate+0x489/0x880 [ 1087.739851][T17768] should_failslab+0xc2/0x120 [ 1087.739882][T17768] __kmalloc_noprof+0xd2/0x510 [ 1087.739917][T17768] vc_allocate+0x489/0x880 [ 1087.739950][T17768] ? __pfx_vc_allocate+0x10/0x10 [ 1087.739999][T17768] con_install+0xa1/0x600 [ 1087.740035][T17768] ? __pfx_con_install+0x10/0x10 [ 1087.740074][T17768] ? __pfx_con_install+0x10/0x10 [ 1087.740108][T17768] tty_init_dev.part.0+0x99/0x500 [ 1087.740132][T17768] tty_open+0xa50/0xf90 [ 1087.740158][T17768] ? __pfx_tty_open+0x10/0x10 [ 1087.740179][T17768] ? chrdev_open+0x58c/0x6a0 [ 1087.740214][T17768] ? __pfx_tty_open+0x10/0x10 [ 1087.740233][T17768] chrdev_open+0x231/0x6a0 [ 1087.740265][T17768] ? __pfx_chrdev_open+0x10/0x10 [ 1087.740297][T17768] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1087.740330][T17768] do_dentry_open+0x97f/0x1530 [ 1087.740359][T17768] ? __pfx_chrdev_open+0x10/0x10 [ 1087.740414][T17768] vfs_open+0x82/0x3f0 [ 1087.740453][T17768] path_openat+0x1de4/0x2cb0 [ 1087.740493][T17768] ? __pfx_path_openat+0x10/0x10 [ 1087.740530][T17768] do_filp_open+0x20b/0x470 [ 1087.740563][T17768] ? __pfx_do_filp_open+0x10/0x10 [ 1087.740615][T17768] ? alloc_fd+0x471/0x7d0 [ 1087.740649][T17768] do_sys_openat2+0x11b/0x1d0 [ 1087.740686][T17768] ? __pfx_do_sys_openat2+0x10/0x10 [ 1087.740736][T17768] __x64_sys_openat+0x174/0x210 [ 1087.740762][T17768] ? __pfx___x64_sys_openat+0x10/0x10 [ 1087.740796][T17768] do_syscall_64+0xcd/0x4c0 [ 1087.740836][T17768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.740861][T17768] RIP: 0033:0x7f35b558eec9 [ 1087.740880][T17768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.740904][T17768] RSP: 002b:00007f35b37b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1087.740927][T17768] RAX: ffffffffffffffda RBX: 00007f35b57e6180 RCX: 00007f35b558eec9 [ 1087.740943][T17768] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1087.740959][T17768] RBP: 00007f35b5611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1087.740973][T17768] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1087.740987][T17768] R13: 00007f35b57e6218 R14: 00007f35b57e6180 R15: 00007ffc6e9c2a58 [ 1087.741018][T17768] [ 1089.613986][T17187] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 1090.912085][T17790] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 938 with max blocks 86 with error 117 [ 1090.964028][T17801] delete_channel: no stack [ 1091.128591][T17790] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1091.128591][T17790] [ 1091.620026][T17813] Invalid ELF header magic: != ELF [ 1092.556171][T17821] ICMPv6: process `syz.2.2180' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 1097.658879][ T6560] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1002 with max blocks 22 with error 117 [ 1097.840419][ T6560] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1097.840419][ T6560] [ 1097.970151][ T6560] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1398 with max blocks 16 with error 117 [ 1098.180424][ T6560] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1098.180424][ T6560] [ 1098.624675][T17894] warning: `syz.2.2192' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1099.788546][T12856] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1344 with max blocks 70 with error 117 [ 1099.857459][T12856] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1099.857459][T12856] [ 1099.913184][T12856] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 985 with max blocks 39 with error 117 [ 1100.045972][T12856] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1100.045972][T12856] [ 1100.266648][T12856] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 939 with max blocks 85 with error 117 [ 1100.459544][T12856] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1100.459544][T12856] [ 1102.112002][T17934] random: crng reseeded on system resumption [ 1102.171475][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 1102.357804][ T6558] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1102.368396][T12856] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 1102.515824][T12856] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 1102.526873][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 1102.654179][ T6558] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1102.665993][T12856] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 1102.828572][T12856] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 1102.838839][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 1102.941483][ T6558] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1102.951398][T12856] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 1103.016229][T12856] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 1103.026402][ T6558] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:2: iget: checksum invalid [ 1103.103697][ T6558] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 1103.123526][T12856] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:0: iget: checksum invalid [ 1103.165413][ T6558] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 1103.194770][T12856] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 1103.231863][ T6558] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 1103.251989][T12856] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 1103.336015][T12856] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 1117.002549][T17948] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 1117.021577][T17948] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 1117.041491][T17948] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 1119.385630][ T30] audit: type=1800 audit(4294967429.850:25): pid=17975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2204" name="dbroot" dev="configfs" ino=59129 res=0 errno=0 [ 1121.101646][T17991] vivid-003: ================= START STATUS ================= [ 1121.111108][T17991] vivid-003: Radio HW Seek Mode: Bounded [ 1121.117851][T17991] vivid-003: Radio Programmable HW Seek: false [ 1121.128538][T17991] vivid-003: RDS Rx I/O Mode: Block I/O [ 1121.167036][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.173343][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.200364][T17991] vivid-003: Generate RBDS Instead of RDS: false [ 1121.231052][T17991] vivid-003: RDS Reception: true [ 1121.269577][T17991] vivid-003: RDS Program Type: 0 inactive [ 1121.325133][T17991] vivid-003: RDS PS Name: inactive [ 1121.362377][T17991] vivid-003: RDS Radio Text: inactive [ 1121.384289][T17991] vivid-003: RDS Traffic Announcement: false inactive [ 1121.403672][T17991] vivid-003: RDS Traffic Program: false inactive [ 1121.420464][T17991] vivid-003: RDS Music: false inactive [ 1121.435039][T17991] vivid-003: ================== END STATUS ================== [ 1124.439974][T18016] ptrace attach of "./syz-executor exec"[5879] was attempted by ""[18016] [ 1124.473936][T18016] FAULT_INJECTION: forcing a failure. [ 1124.473936][T18016] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.511765][T18016] CPU: 1 UID: 0 PID: 18016 Comm: syz.1.2212 Tainted: G U syzkaller #0 PREEMPT(full) [ 1124.511803][T18016] Tainted: [U]=USER [ 1124.511809][T18016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1124.511822][T18016] Call Trace: [ 1124.511831][T18016] [ 1124.511839][T18016] dump_stack_lvl+0x16c/0x1f0 [ 1124.511877][T18016] should_fail_ex+0x512/0x640 [ 1124.511910][T18016] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1124.511939][T18016] should_failslab+0xc2/0x120 [ 1124.511968][T18016] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1124.511994][T18016] ? d_instantiate+0x77/0x90 [ 1124.512021][T18016] ? alloc_empty_file+0x55/0x1e0 [ 1124.512057][T18016] alloc_empty_file+0x55/0x1e0 [ 1124.512090][T18016] alloc_file_pseudo+0x13a/0x230 [ 1124.512124][T18016] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1124.512160][T18016] ? do_raw_spin_unlock+0x172/0x230 [ 1124.512207][T18016] __anon_inode_getfile+0xe8/0x280 [ 1124.512237][T18016] anon_inode_getfile_fmode+0x37/0xa0 [ 1124.512267][T18016] __do_sys_fanotify_init+0x96d/0xc00 [ 1124.512306][T18016] do_syscall_64+0xcd/0x4c0 [ 1124.512342][T18016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.512383][T18016] RIP: 0033:0x7f152e78eec9 [ 1124.512401][T18016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1124.512425][T18016] RSP: 002b:00007f152c9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1124.512446][T18016] RAX: ffffffffffffffda RBX: 00007f152e9e6090 RCX: 00007f152e78eec9 [ 1124.512461][T18016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ba [ 1124.512475][T18016] RBP: 00007f152e811f91 R08: 0000000000000000 R09: 0000000000000000 [ 1124.512488][T18016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.512502][T18016] R13: 00007f152e9e6128 R14: 00007f152e9e6090 R15: 00007ffed882a868 [ 1124.512531][T18016] [ 1131.048244][ T6740] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 985 with max blocks 39 with error 117 [ 1131.061119][ T6740] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1131.061119][ T6740] [ 1131.080464][ T6740] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 977 with max blocks 47 with error 117 [ 1131.093857][ T6740] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1131.093857][ T6740] [ 1135.021344][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2217'. [ 1161.474991][ T6549] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1385 with max blocks 29 with error 117 [ 1161.494123][ T6549] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1161.494123][ T6549] [ 1182.604379][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.613425][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1191.882100][ T8235] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 955 with max blocks 30 with error 117 [ 1191.896728][ T8235] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1191.896728][ T8235] [ 1244.042823][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.049246][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.478976][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.485344][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.919161][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.925942][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.358698][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.365008][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1436.176265][ T6740] ------------[ cut here ]------------ [ 1436.182182][ T6740] WARNING: CPU: 1 PID: 6740 at io_uring/io_uring.c:2980 io_ring_exit_work+0x3fc/0x10f0 [ 1436.191910][ T6740] Modules linked in: [ 1436.196268][ T6740] CPU: 1 UID: 0 PID: 6740 Comm: kworker/u10:6 Tainted: G U syzkaller #0 PREEMPT(full) [ 1436.207417][ T6740] Tainted: [U]=USER [ 1436.211233][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1436.222048][ T6740] Workqueue: iou_exit io_ring_exit_work [ 1436.228211][ T6740] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 1436.234043][ T6740] Code: 0f 85 0a 0b 00 00 48 8b 05 c1 66 4b 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 3f 5a e5 fc 4d 85 f6 79 12 e8 c5 5e e5 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 b3 5e e5 fc 48 8b 74 24 60 [ 1436.253886][ T6740] RSP: 0018:ffffc9000b767a90 EFLAGS: 00010293 [ 1436.260010][ T6740] RAX: 0000000000000000 RBX: ffff88807c83a6c8 RCX: ffffffff84d5ab51 [ 1436.268112][ T6740] RDX: ffff88802cb48000 RSI: ffffffff84d5ab5b RDI: 0000000000000007 [ 1436.276108][ T6740] RBP: ffffc9000b767c50 R08: 0000000000000007 R09: 0000000000000000 [ 1436.284078][ T6740] R10: fffffffffffffffa R11: 0000000000000000 R12: ffff88807c83a000 [ 1436.292101][ T6740] R13: dffffc0000000000 R14: fffffffffffffffa R15: ffff88807c83a040 [ 1436.300234][ T6740] FS: 0000000000000000(0000) GS:ffff8881247ba000(0000) knlGS:0000000000000000 [ 1436.309326][ T6740] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1436.315960][ T6740] CR2: 00007ffcfcf82158 CR3: 0000000072476000 CR4: 00000000003526f0 [ 1436.324613][ T6740] Call Trace: [ 1436.328364][ T6740] [ 1436.331303][ T6740] ? do_raw_spin_lock+0x12c/0x2b0 [ 1436.336394][ T6740] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1436.341879][ T6740] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1436.347777][ T6740] ? debug_object_deactivate+0x1ec/0x3a0 [ 1436.353452][ T6740] ? rcu_is_watching+0x12/0xc0 [ 1436.358301][ T6740] process_one_work+0x9cf/0x1b70 [ 1436.363308][ T6740] ? __pfx_process_one_work+0x10/0x10 [ 1436.368816][ T6740] ? assign_work+0x1a0/0x250 [ 1436.373451][ T6740] worker_thread+0x6c8/0xf10 [ 1436.378104][ T6740] ? __kthread_parkme+0x19e/0x250 [ 1436.383154][ T6740] ? __pfx_worker_thread+0x10/0x10 [ 1436.388366][ T6740] kthread+0x3c5/0x780 [ 1436.392469][ T6740] ? __pfx_kthread+0x10/0x10 [ 1436.397154][ T6740] ? rcu_is_watching+0x12/0xc0 [ 1436.401935][ T6740] ? __pfx_kthread+0x10/0x10 [ 1436.406610][ T6740] ret_from_fork+0x56d/0x730 [ 1436.411223][ T6740] ? __pfx_kthread+0x10/0x10 [ 1436.415878][ T6740] ret_from_fork_asm+0x1a/0x30 [ 1436.420678][ T6740] [ 1436.424513][ T6740] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1436.431822][ T6740] CPU: 1 UID: 0 PID: 6740 Comm: kworker/u10:6 Tainted: G U syzkaller #0 PREEMPT(full) [ 1436.442952][ T6740] Tainted: [U]=USER [ 1436.446759][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1436.456826][ T6740] Workqueue: iou_exit io_ring_exit_work [ 1436.462395][ T6740] Call Trace: [ 1436.465686][ T6740] [ 1436.468674][ T6740] dump_stack_lvl+0x3d/0x1f0 [ 1436.473289][ T6740] vpanic+0x6e8/0x7a0 [ 1436.477288][ T6740] ? __pfx_vpanic+0x10/0x10 [ 1436.481811][ T6740] ? io_ring_exit_work+0x3fc/0x10f0 [ 1436.487025][ T6740] panic+0xca/0xd0 [ 1436.490768][ T6740] ? __pfx_panic+0x10/0x10 [ 1436.495212][ T6740] ? check_panic_on_warn+0x1f/0xb0 [ 1436.500435][ T6740] check_panic_on_warn+0xab/0xb0 [ 1436.505414][ T6740] __warn+0xf6/0x3c0 [ 1436.509331][ T6740] ? io_ring_exit_work+0x3fc/0x10f0 [ 1436.514550][ T6740] report_bug+0x3c3/0x580 [ 1436.518908][ T6740] ? io_ring_exit_work+0x3fc/0x10f0 [ 1436.524468][ T6740] handle_bug+0x184/0x210 [ 1436.528807][ T6740] exc_invalid_op+0x17/0x50 [ 1436.533339][ T6740] asm_exc_invalid_op+0x1a/0x20 [ 1436.538194][ T6740] RIP: 0010:io_ring_exit_work+0x3fc/0x10f0 [ 1436.544012][ T6740] Code: 0f 85 0a 0b 00 00 48 8b 05 c1 66 4b 09 4c 8b 74 24 68 31 ff 49 29 c6 4c 89 f6 e8 3f 5a e5 fc 4d 85 f6 79 12 e8 c5 5e e5 fc 90 <0f> 0b 90 48 c7 44 24 60 70 17 00 00 e8 b3 5e e5 fc 48 8b 74 24 60 [ 1436.563624][ T6740] RSP: 0018:ffffc9000b767a90 EFLAGS: 00010293 [ 1436.569698][ T6740] RAX: 0000000000000000 RBX: ffff88807c83a6c8 RCX: ffffffff84d5ab51 [ 1436.577672][ T6740] RDX: ffff88802cb48000 RSI: ffffffff84d5ab5b RDI: 0000000000000007 [ 1436.585649][ T6740] RBP: ffffc9000b767c50 R08: 0000000000000007 R09: 0000000000000000 [ 1436.593642][ T6740] R10: fffffffffffffffa R11: 0000000000000000 R12: ffff88807c83a000 [ 1436.601645][ T6740] R13: dffffc0000000000 R14: fffffffffffffffa R15: ffff88807c83a040 [ 1436.609714][ T6740] ? io_ring_exit_work+0x3f1/0x10f0 [ 1436.614943][ T6740] ? io_ring_exit_work+0x3fb/0x10f0 [ 1436.620178][ T6740] ? do_raw_spin_lock+0x12c/0x2b0 [ 1436.625227][ T6740] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1436.630727][ T6740] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1436.636551][ T6740] ? debug_object_deactivate+0x1ec/0x3a0 [ 1436.642225][ T6740] ? rcu_is_watching+0x12/0xc0 [ 1436.646997][ T6740] process_one_work+0x9cf/0x1b70 [ 1436.651964][ T6740] ? __pfx_process_one_work+0x10/0x10 [ 1436.657377][ T6740] ? assign_work+0x1a0/0x250 [ 1436.662003][ T6740] worker_thread+0x6c8/0xf10 [ 1436.666606][ T6740] ? __kthread_parkme+0x19e/0x250 [ 1436.671655][ T6740] ? __pfx_worker_thread+0x10/0x10 [ 1436.676768][ T6740] kthread+0x3c5/0x780 [ 1436.680854][ T6740] ? __pfx_kthread+0x10/0x10 [ 1436.685485][ T6740] ? rcu_is_watching+0x12/0xc0 [ 1436.690256][ T6740] ? __pfx_kthread+0x10/0x10 [ 1436.694868][ T6740] ret_from_fork+0x56d/0x730 [ 1436.699476][ T6740] ? __pfx_kthread+0x10/0x10 [ 1436.704088][ T6740] ret_from_fork_asm+0x1a/0x30 [ 1436.708878][ T6740] [ 1436.711979][ T6740] Kernel Offset: disabled [ 1436.716301][ T6740] Rebooting in 86400 seconds..