last executing test programs: 7.935862696s ago: executing program 0 (id=3286): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000200), r1) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xf}, 0x5b, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) 7.518609779s ago: executing program 0 (id=3287): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x6574) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x4, 0x15f4da0a, 0xffffffff, 0x3, 0xfffffffffffffff9, 0x208000001f, 0x2, 0x6d3c, 0x9, 0xffffffff, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f0000000580)={@siginfo_0_0={0x7, 0x4, 0x309, @_sigchld={0x0, 0x0, 0x40, 0x4, 0xb000}}}, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x9, 0x8004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 6.65994596s ago: executing program 2 (id=3290): setsockopt$auto(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r0, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, 0x0) 6.290545335s ago: executing program 2 (id=3292): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) mlock$auto(0x7, 0x4) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x800, 0x8000003b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000007ec0)=""/254, 0xfe) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000080) madvise$auto(0x8080800000000000, 0x3, 0x6) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 6.22471072s ago: executing program 0 (id=3293): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) mlock$auto(0x7, 0x4) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x800, 0x8000003b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000007ec0)=""/254, 0xfe) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x20000080) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 5.809957541s ago: executing program 3 (id=3294): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183841, 0x0) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) mmap$auto(0x1000, 0x4020008, 0xdf, 0xeb1, 0xffffffffffffffff, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto_IPC_RMID(0x7, 0x0, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0xc004) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x80086601, 0x0) connect$auto(0x3, 0x0, 0x81) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r1, 0x0, 0x100000001, 0x100) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto_SO_WIFI_STATUS(r2, 0x0, 0x29, 0x0, 0xbff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x2, 0x17, 0x401, 0x0) write$auto(0x3, 0x0, 0x5c8) 5.133110633s ago: executing program 0 (id=3296): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000200), r1) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xf}, 0x5b, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r0, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) 5.060724246s ago: executing program 2 (id=3297): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0xfff, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020005, 0x2, 0x110, r0, 0x7fff) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x2b, 0x1, 0x1) ioctl$auto(r5, 0x8901, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) 4.807470034s ago: executing program 0 (id=3298): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e22, @multicast2}, 0x5) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) setsockopt$auto(0x3, 0x10f, 0x9f06, 0x0, 0x17) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = pipe2$auto(0x0, 0x80) ioctl$auto(r1, 0x5761, 0x4) ioctl$auto_BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000080)="d7a13be3c14e950bc86ac4250954b7f9b37dd9020413b9c0e0437b1770f1e60e3016321fb32f747b55a5dc9aa9c22b1dce04ad94fac29031234d3619f36b2b2872d09c5d4c1cfb73312afd29d4257a5df2dd59a775625a1e196dab0cb2e1b2d6541cf92b53ca962bcdda378470c44ab0a64c4b64c9b43e54f87ea6b5832db97dcf93a6d4b9b9dc59bd74fc71a5359a31c4f31c95a12fe985109d1d4f81144690b512f4214444131cedbd0214a12d") r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x14000000000df, 0x40eb2, r2, 0x300000000000) semtimedop$auto(0x40, 0x0, 0x6, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) 4.639239768s ago: executing program 1 (id=3300): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r1, &(0x7f00000018c0)={0x0, 0x1}, 0x9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x40100000001) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/anycast6\x00', 0x181500, 0x0) pread64$auto(r3, 0x0, 0x1ff, 0x5) socket(0x15, 0x5, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r1, 0xe, &(0x7f0000000200)='((\xc9.]\xad$\x00', &(0x7f0000000240)="cd1f7af77f18b1e346a49040b3b6343364fb499f7202c7208912a2e4dcef851b297d32365de296168bd8a7bb3827b461999f937d0b96b028cc1c5f1bfd5cbf8cf36a7766b3af6d0ebdd8ba1977bc1cb113334b759d8f8a4f3caf4e08bbfa50656af881fe7eb8c5176eb16ac691d587dfcf10df9c02ce9f5652135a7b27ea7eea89c57a81daa36653127eb750a3fc8463b1153e2b748bee52ed0217e59d0683f61237757c20c1cc83", 0x4) 4.421837954s ago: executing program 3 (id=3301): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r4, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) r5 = ioctl$auto_TUNSETOFFLOAD2(r0, 0x400454d0, &(0x7f0000000180)=0x2) r6 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000200), r3) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xf}, 0x5b, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop7/trace/act_mask\x00', 0x402, 0x0) write$auto(r8, &(0x7f0000000200)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8\xe4\x145\x90e\xd3\xe0);\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x1e\xe1\xdb\x03\x19\xba\xda\x19\xbbW\xc6\x8c\xd54\x0eJ\xcdpq\xedv\x93\x89\r\xb5\xe06:\x85\xc0\x982]dy\xd9Y\x8d\xbe\x90\xbcu*\xc8\xdc\x0e]\x01\xd1\x9e\x0f\x05_\xfc\xb8\xeb\xd9\xb7\xa4\a\xae\xa5I\f7\x17\x91L}m\xea\r+\xecy\xe1\xe0D\x824\xfc[+\x0f\xe0\x11\xe8\x83\xc4\"\xcc&z\x8c@pC\xb2\xf6k\x14~iA?\x90Pnj\x82\xea\xf0\xfa\xe8\xe1\x81Q6\x11\xe4T\xd5\xf0\xb1\xc65tr\x8b\x83^\xa17uX 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 651.665539][T14970] RSP: 002b:00007ff1a344dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 651.665553][T14970] RAX: ffffffffffffffda RBX: 00007ff1a344dfc0 RCX: 00007ff1a2590abc [ 651.665563][T14970] RDX: 0000000000000020 RSI: 00007ff1a344e010 RDI: 0000000000000009 [ 651.665573][T14970] RBP: 0000000000000000 R08: 00007ff1a344df14 R09: 000000000000000c [ 651.665582][T14970] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 651.665591][T14970] R13: 00007ff1a344df68 R14: 00007ff1a344e010 R15: 0000000000000000 [ 651.665610][T14970] [ 652.517543][ T13] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:1: bg 1: bad block bitmap checksum [ 652.548516][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1388 with max blocks 15 with error 74 [ 652.576999][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 652.576999][ T13] [ 654.041624][T15059] FAULT_INJECTION: forcing a failure. [ 654.041624][T15059] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 654.102484][T15059] CPU: 1 UID: 0 PID: 15059 Comm: syz.2.2493 Not tainted syzkaller #0 PREEMPT(full) [ 654.102506][T15059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 654.102515][T15059] Call Trace: [ 654.102521][T15059] [ 654.102528][T15059] dump_stack_lvl+0x16c/0x1f0 [ 654.102555][T15059] should_fail_ex+0x512/0x640 [ 654.102580][T15059] should_fail_alloc_page+0xe7/0x130 [ 654.102602][T15059] prepare_alloc_pages+0x3c2/0x610 [ 654.102626][T15059] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 654.102646][T15059] ? stack_trace_save+0x8e/0xc0 [ 654.102663][T15059] ? __pfx_stack_trace_save+0x10/0x10 [ 654.102683][T15059] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 654.102701][T15059] ? css_rstat_updated+0x1c2/0x510 [ 654.102716][T15059] ? __pfx_css_rstat_updated+0x10/0x10 [ 654.102733][T15059] ? __lock_acquire+0x62e/0x1ce0 [ 654.102755][T15059] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 654.102777][T15059] ? policy_nodemask+0xea/0x4e0 [ 654.102820][T15059] alloc_pages_mpol+0x1fb/0x550 [ 654.102840][T15059] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 654.102865][T15059] alloc_pages_noprof+0x131/0x390 [ 654.102884][T15059] pgd_alloc+0x4b/0x650 [ 654.102902][T15059] mm_init+0x714/0x13a0 [ 654.102917][T15059] ? mm_alloc+0x1c/0xc0 [ 654.102935][T15059] mm_alloc+0x9f/0xc0 [ 654.102950][T15059] alloc_bprm+0x2af/0x710 [ 654.102968][T15059] do_execveat_common.isra.0+0x1ce/0x610 [ 654.102988][T15059] __x64_sys_execve+0x8e/0xb0 [ 654.103004][T15059] do_syscall_64+0xcd/0x4c0 [ 654.103028][T15059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.103042][T15059] RIP: 0033:0x7f14c458ec29 [ 654.103055][T15059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.103068][T15059] RSP: 002b:00007f14c54a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 654.103083][T15059] RAX: ffffffffffffffda RBX: 00007f14c47d5fa0 RCX: 00007f14c458ec29 [ 654.103093][T15059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 654.103101][T15059] RBP: 00007f14c4611e41 R08: 0000000000000000 R09: 0000000000000000 [ 654.103111][T15059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.103119][T15059] R13: 00007f14c47d6038 R14: 00007f14c47d5fa0 R15: 00007fffa3c49168 [ 654.103138][T15059] [ 654.755451][T12912] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 654.873566][T15086] sd 0:0:1:0: PR command failed: 1026 [ 654.907570][T15086] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 654.922408][T15086] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 656.263748][T15100] futex_wake_op: syz.2.2497 tries to shift op by -2048; fix this program [ 656.326204][T15100] futex_wake_op: syz.2.2497 tries to shift op by -2048; fix this program [ 657.355631][T15209] FAULT_INJECTION: forcing a failure. [ 657.355631][T15209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.421622][T15210] __vm_enough_memory: pid: 15210, comm: syz.1.2504, bytes: 4398046511104 not enough memory for the allocation [ 657.476339][T15209] CPU: 1 UID: 0 PID: 15209 Comm: syz.1.2504 Not tainted syzkaller #0 PREEMPT(full) [ 657.476361][T15209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 657.476371][T15209] Call Trace: [ 657.476377][T15209] [ 657.476383][T15209] dump_stack_lvl+0x16c/0x1f0 [ 657.476409][T15209] should_fail_ex+0x512/0x640 [ 657.476431][T15209] ? page_copy_sane+0xcd/0x2d0 [ 657.476446][T15209] copy_folio_from_iter_atomic+0x36f/0x1ac0 [ 657.476477][T15209] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 657.476493][T15209] ? shmem_write_begin+0x176/0x300 [ 657.476512][T15209] ? __pfx_shmem_write_begin+0x10/0x10 [ 657.476530][T15209] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 657.476556][T15209] generic_perform_write+0x221/0x900 [ 657.476579][T15209] ? __pfx_generic_perform_write+0x10/0x10 [ 657.476595][T15209] ? inode_needs_update_time.part.0+0x191/0x270 [ 657.476619][T15209] shmem_file_write_iter+0x10e/0x140 [ 657.476641][T15209] vfs_write+0x7d3/0x11d0 [ 657.476658][T15209] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 657.476679][T15209] ? __pfx___mutex_lock+0x10/0x10 [ 657.476700][T15209] ? __pfx_vfs_write+0x10/0x10 [ 657.476729][T15209] ksys_write+0x12a/0x250 [ 657.476745][T15209] ? __pfx_ksys_write+0x10/0x10 [ 657.476767][T15209] do_syscall_64+0xcd/0x4c0 [ 657.476790][T15209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.476805][T15209] RIP: 0033:0x7f5bb6b8ec29 [ 657.476818][T15209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.476832][T15209] RSP: 002b:00007f5bb7a8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 657.476846][T15209] RAX: ffffffffffffffda RBX: 00007f5bb6dd5fa0 RCX: 00007f5bb6b8ec29 [ 657.476856][T15209] RDX: 0000000080000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 657.476864][T15209] RBP: 00007f5bb6c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 657.476873][T15209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.476881][T15209] R13: 00007f5bb6dd6038 R14: 00007f5bb6dd5fa0 R15: 00007ffd3cf88848 [ 657.476900][T15209] [ 658.096171][T15219] XFS: Clearing xfsstats [ 660.059937][T15275] ubi0: attaching mtd0 [ 660.096050][T15275] ubi0: scanning is finished [ 660.140047][T15275] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 660.473385][T15275] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 syzkaller syzkaller login: [ 660.740195][T15284] : Can't lookup blockdev [ 660.914187][ T30] audit: type=1800 audit(4294967340.119:21): pid=15287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2521" name="features" dev="configfs" ino=57798 res=0 errno=0 [ 661.547930][T15300] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2527'. [ 661.839194][T15311] vivid-007: ================= START STATUS ================= [ 661.863231][T15311] vivid-007: Generate PTS: true [ 661.890162][T15311] vivid-007: Generate SCR: true [ 661.899630][T15311] tpg source WxH: 320x240 (Y'CbCr) [ 661.932724][T15311] tpg field: 1 [ 661.936108][T15311] tpg crop: (0,0)/320x240 [ 661.940436][T15311] tpg compose: (0,0)/320x240 [ 662.004038][T15311] tpg colorspace: 8 [ 662.007879][T15311] tpg transfer function: 0/0 [ 662.035918][T15311] tpg Y'CbCr encoding: 0/0 [ 662.078043][T15311] tpg quantization: 0/0 [ 662.107032][T15311] tpg RGB range: 0/2 [ 662.118834][T15311] vivid-007: ================== END STATUS ================== [ 662.344343][T15327] sysfs_service_op_show: Client not running :-5: [ 662.851257][T15359] netlink: 'syz.0.2536': attribute type 11 has an invalid length. [ 662.889828][T15359] netlink: 'syz.0.2536': attribute type 11 has an invalid length. [ 663.080931][T15364] FAULT_INJECTION: forcing a failure. [ 663.080931][T15364] name failslab, interval 1, probability 0, space 0, times 0 [ 663.148782][T15364] CPU: 1 UID: 0 PID: 15364 Comm: syz.1.2537 Not tainted syzkaller #0 PREEMPT(full) [ 663.148805][T15364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 663.148815][T15364] Call Trace: [ 663.148821][T15364] [ 663.148827][T15364] dump_stack_lvl+0x16c/0x1f0 [ 663.148854][T15364] should_fail_ex+0x512/0x640 [ 663.148876][T15364] ? fs_reclaim_acquire+0xae/0x150 [ 663.148905][T15364] ? tomoyo_open_control+0x51f/0xa30 [ 663.148918][T15364] should_failslab+0xc2/0x120 [ 663.148938][T15364] __kmalloc_noprof+0xd2/0x510 [ 663.148960][T15364] tomoyo_open_control+0x51f/0xa30 [ 663.148977][T15364] do_dentry_open+0x97f/0x1530 [ 663.148995][T15364] ? __pfx_tomoyo_open+0x10/0x10 [ 663.149018][T15364] vfs_open+0x82/0x3f0 [ 663.149041][T15364] path_openat+0x1de4/0x2cb0 [ 663.149064][T15364] ? __pfx_path_openat+0x10/0x10 [ 663.149085][T15364] do_filp_open+0x20b/0x470 [ 663.149102][T15364] ? __pfx_do_filp_open+0x10/0x10 [ 663.149132][T15364] ? alloc_fd+0x471/0x7d0 [ 663.149152][T15364] do_sys_openat2+0x11b/0x1d0 [ 663.149172][T15364] ? __pfx_do_sys_openat2+0x10/0x10 [ 663.149200][T15364] __x64_sys_openat+0x174/0x210 [ 663.149214][T15364] ? __pfx___x64_sys_openat+0x10/0x10 [ 663.149234][T15364] do_syscall_64+0xcd/0x4c0 [ 663.149256][T15364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.149271][T15364] RIP: 0033:0x7f5bb6b8ec29 [ 663.149284][T15364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.149297][T15364] RSP: 002b:00007f5bb7a8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 663.149312][T15364] RAX: ffffffffffffffda RBX: 00007f5bb6dd5fa0 RCX: 00007f5bb6b8ec29 [ 663.149322][T15364] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 663.149331][T15364] RBP: 00007f5bb6c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 663.149340][T15364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.149348][T15364] R13: 00007f5bb6dd6038 R14: 00007f5bb6dd5fa0 R15: 00007ffd3cf88848 [ 663.149366][T15364] [ 663.353991][ C1] vkms_vblank_simulate: vblank timer overrun [ 663.957083][T15379] FAULT_INJECTION: forcing a failure. [ 663.957083][T15379] name failslab, interval 1, probability 0, space 0, times 0 [ 664.012830][T15379] CPU: 1 UID: 0 PID: 15379 Comm: syz.2.2540 Not tainted syzkaller #0 PREEMPT(full) [ 664.012853][T15379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 664.012862][T15379] Call Trace: [ 664.012868][T15379] [ 664.012875][T15379] dump_stack_lvl+0x16c/0x1f0 [ 664.012901][T15379] should_fail_ex+0x512/0x640 [ 664.012922][T15379] ? fs_reclaim_acquire+0xae/0x150 [ 664.012946][T15379] ? tomoyo_encode2+0x100/0x3e0 [ 664.012965][T15379] should_failslab+0xc2/0x120 [ 664.012985][T15379] __kmalloc_noprof+0xd2/0x510 [ 664.013007][T15379] tomoyo_encode2+0x100/0x3e0 [ 664.013029][T15379] tomoyo_encode+0x29/0x50 [ 664.013047][T15379] tomoyo_realpath_from_path+0x18f/0x6e0 [ 664.013069][T15379] ? tomoyo_profile+0x47/0x60 [ 664.013085][T15379] tomoyo_path_perm+0x274/0x460 [ 664.013100][T15379] ? tomoyo_path_perm+0x260/0x460 [ 664.013119][T15379] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 664.013156][T15379] ? __pfx_ima_file_check+0x10/0x10 [ 664.013169][T15379] ? hook_file_truncate+0xc7/0x250 [ 664.013192][T15379] security_file_truncate+0x84/0x1e0 [ 664.013213][T15379] path_openat+0xc10/0x2cb0 [ 664.013236][T15379] ? __pfx_path_openat+0x10/0x10 [ 664.013258][T15379] do_filp_open+0x20b/0x470 [ 664.013275][T15379] ? __pfx_do_filp_open+0x10/0x10 [ 664.013306][T15379] ? alloc_fd+0x471/0x7d0 [ 664.013327][T15379] do_sys_openat2+0x11b/0x1d0 [ 664.013348][T15379] ? __pfx_do_sys_openat2+0x10/0x10 [ 664.013377][T15379] __x64_sys_openat+0x174/0x210 [ 664.013390][T15379] ? __pfx___x64_sys_openat+0x10/0x10 [ 664.013411][T15379] do_syscall_64+0xcd/0x4c0 [ 664.013433][T15379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.013448][T15379] RIP: 0033:0x7f14c458ec29 [ 664.013461][T15379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.013475][T15379] RSP: 002b:00007f14c54a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 664.013489][T15379] RAX: ffffffffffffffda RBX: 00007f14c47d5fa0 RCX: 00007f14c458ec29 [ 664.013498][T15379] RDX: 0000000000141241 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 664.013507][T15379] RBP: 00007f14c4611e41 R08: 0000000000000000 R09: 0000000000000000 [ 664.013516][T15379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.013525][T15379] R13: 00007f14c47d6038 R14: 00007f14c47d5fa0 R15: 00007fffa3c49168 [ 664.013544][T15379] [ 664.013562][T15379] ERROR: Out of memory at tomoyo_realpath_from_path. [ 664.345130][T15404] sd 0:0:1:0: PR command failed: 1026 [ 664.350535][T15404] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 664.392427][T15404] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 665.104413][T15419] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 665.579532][T15431] ubi0: attaching mtd0 [ 665.670796][T15431] ubi0: scanning is finished [ 665.751712][T15431] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 666.284395][T15431] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 666.296950][T15439] sp0: Synchronizing with TNC [ 667.914672][T15488] sd 0:0:1:0: PR command failed: 1026 [ 667.985570][T15488] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 668.122795][T15488] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 670.052123][T15533] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78008 [ 670.086461][T15533] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 670.131623][T15533] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 670.221870][T15533] page_type: f5(slab) [ 670.247255][T15533] raw: 00fff00000000040 ffff88801ce9a640 dead000000000100 dead000000000122 [ 670.322549][T15533] raw: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 670.455274][T15533] head: 00fff00000000040 ffff88801ce9a640 dead000000000100 dead000000000122 [ 670.558703][T15533] head: 0000000000000000 0000000000070007 00000000f5000000 0000000000000000 [ 670.735337][T15533] head: 00fff00000000003 ffffea0001e00201 00000000ffffffff 00000000ffffffff [ 670.803398][T15533] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 670.884003][T15533] page dumped because: unmovable page [ 670.925707][T15533] page_owner tracks the page as allocated [ 670.938764][T15543] Invalid ELF header magic: != ELF [ 670.995125][T15533] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9104, tgid 9104 (udevd), ts 413555249282, free_ts 413436533363 [ 671.146649][T15533] post_alloc_hook+0x1c0/0x230 [ 671.175102][T15533] get_page_from_freelist+0x132b/0x38e0 [ 671.201770][T15533] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 671.236212][T15533] alloc_pages_mpol+0x1fb/0x550 [ 671.296162][T15533] new_slab+0x247/0x330 [ 671.300348][T15533] ___slab_alloc+0xcf2/0x1750 [ 671.346934][T15533] __slab_alloc.constprop.0+0x56/0xb0 [ 671.381098][T15533] kmem_cache_alloc_noprof+0xef/0x3b0 [ 671.391498][T15533] getname_flags.part.0+0x4c/0x550 [ 671.420109][T15533] getname_flags+0x93/0xf0 [ 671.424573][T15533] do_sys_openat2+0xb8/0x1d0 [ 671.458517][T15533] __x64_sys_openat+0x174/0x210 [ 671.463394][T15533] do_syscall_64+0xcd/0x4c0 [ 671.505029][T15533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.525036][T15533] page last free pid 5234 tgid 5234 stack trace: [ 671.556339][T15533] __free_frozen_pages+0x7d5/0x10f0 [ 671.577682][T15533] __put_partials+0x165/0x1c0 [ 671.602637][T15533] qlist_free_all+0x4d/0x120 [ 671.618435][T15533] kasan_quarantine_reduce+0x195/0x1e0 [ 671.641790][T15533] __kasan_slab_alloc+0x69/0x90 [ 671.671667][T15533] __kmalloc_noprof+0x1d4/0x510 [ 671.686452][T15533] tomoyo_realpath_from_path+0xc2/0x6e0 [ 671.723711][T15533] tomoyo_path_perm+0x274/0x460 [ 671.735105][T15533] security_inode_getattr+0x116/0x290 [ 671.765219][T15533] vfs_fstat+0x4b/0xe0 [ 671.782275][T15533] __do_sys_newfstat+0x87/0x100 [ 671.805834][T15533] do_syscall_64+0xcd/0x4c0 [ 671.820563][T15533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.596593][T15564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2574'. [ 672.664208][ T30] audit: type=1800 audit(4294967301.039:22): pid=15556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2571" name="features" dev="configfs" ino=59016 res=0 errno=0 [ 674.037773][T15617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2581'. [ 674.092159][T15620] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2581'. [ 674.606606][T15633] zswap: compressor not available [ 675.816057][ T30] audit: type=1400 audit(4294967304.189:23): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=15656 comm="syz.2.2584" [ 676.423076][T15713] ubi0: attaching mtd0 [ 676.488876][T15713] ubi0: scanning is finished [ 676.537750][T15713] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 676.899832][T15713] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 677.780720][T15727] zswap: compressor 000 not available [ 677.828073][T15736] sp0: Synchronizing with TNC [ 678.023530][T15718] Process accounting paused [ 679.849933][T15791] HfR: entered promiscuous mode [ 679.918647][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2600'. [ 680.029200][T15800] zswap: compressor not available [ 680.161962][T15793] HfR: left promiscuous mode [ 680.738032][T15819] FAULT_INJECTION: forcing a failure. [ 680.738032][T15819] name failslab, interval 1, probability 0, space 0, times 0 [ 680.796841][T15819] CPU: 1 UID: 0 PID: 15819 Comm: syz.3.2606 Not tainted syzkaller #0 PREEMPT(full) [ 680.796865][T15819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 680.796875][T15819] Call Trace: [ 680.796881][T15819] [ 680.796887][T15819] dump_stack_lvl+0x16c/0x1f0 [ 680.796913][T15819] should_fail_ex+0x512/0x640 [ 680.796934][T15819] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 680.796952][T15819] should_failslab+0xc2/0x120 [ 680.796971][T15819] __kmalloc_cache_noprof+0x6a/0x3e0 [ 680.796985][T15819] ? do_raw_spin_lock+0x12c/0x2b0 [ 680.797006][T15819] ? single_open+0x4d/0x1f0 [ 680.797028][T15819] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 680.797046][T15819] single_open+0x4d/0x1f0 [ 680.797066][T15819] tracing_trace_options_open+0xa7/0x100 [ 680.797088][T15819] do_dentry_open+0x97f/0x1530 [ 680.797106][T15819] ? __pfx_tracing_trace_options_open+0x10/0x10 [ 680.797130][T15819] vfs_open+0x82/0x3f0 [ 680.797158][T15819] path_openat+0x1de4/0x2cb0 [ 680.797181][T15819] ? __pfx_path_openat+0x10/0x10 [ 680.797204][T15819] do_filp_open+0x20b/0x470 [ 680.797221][T15819] ? __pfx_do_filp_open+0x10/0x10 [ 680.797252][T15819] ? alloc_fd+0x471/0x7d0 [ 680.797272][T15819] do_sys_openat2+0x11b/0x1d0 [ 680.797293][T15819] ? __pfx_do_sys_openat2+0x10/0x10 [ 680.797321][T15819] __x64_sys_openat+0x174/0x210 [ 680.797334][T15819] ? __pfx___x64_sys_openat+0x10/0x10 [ 680.797354][T15819] do_syscall_64+0xcd/0x4c0 [ 680.797377][T15819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.797391][T15819] RIP: 0033:0x7fb101f8ec29 [ 680.797404][T15819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 680.797418][T15819] RSP: 002b:00007fb102ebe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 680.797433][T15819] RAX: ffffffffffffffda RBX: 00007fb1021d5fa0 RCX: 00007fb101f8ec29 [ 680.797443][T15819] RDX: 0000000000084100 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 680.797452][T15819] RBP: 00007fb102011e41 R08: 0000000000000000 R09: 0000000000000000 [ 680.797461][T15819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.797469][T15819] R13: 00007fb1021d6038 R14: 00007fb1021d5fa0 R15: 00007fff420fdac8 [ 680.797487][T15819] [ 681.636493][T15830] FAULT_INJECTION: forcing a failure. [ 681.636493][T15830] name failslab, interval 1, probability 0, space 0, times 0 [ 681.775388][T15830] CPU: 1 UID: 0 PID: 15830 Comm: syz.1.2608 Not tainted syzkaller #0 PREEMPT(full) [ 681.775411][T15830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 681.775420][T15830] Call Trace: [ 681.775426][T15830] [ 681.775432][T15830] dump_stack_lvl+0x16c/0x1f0 [ 681.775459][T15830] should_fail_ex+0x512/0x640 [ 681.775481][T15830] ? __kmalloc_noprof+0xbf/0x510 [ 681.775500][T15830] ? ovs_vport_set_upcall_portids+0xfc/0x2f0 [ 681.775514][T15830] should_failslab+0xc2/0x120 [ 681.775533][T15830] __kmalloc_noprof+0xd2/0x510 [ 681.775556][T15830] ovs_vport_set_upcall_portids+0xfc/0x2f0 [ 681.775573][T15830] ovs_vport_alloc+0x28c/0x3d0 [ 681.775588][T15830] internal_dev_create+0x25/0x520 [ 681.775604][T15830] ovs_vport_add+0x147/0x4d0 [ 681.775627][T15830] new_vport+0x16/0x1d0 [ 681.775645][T15830] ovs_dp_cmd_new+0x6ba/0xe60 [ 681.775669][T15830] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 681.775692][T15830] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 681.775709][T15830] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 681.775729][T15830] genl_family_rcv_msg_doit+0x209/0x2f0 [ 681.775746][T15830] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 681.775768][T15830] ? bpf_lsm_capable+0x9/0x10 [ 681.775782][T15830] ? security_capable+0x7e/0x260 [ 681.775797][T15830] ? ns_capable+0xd7/0x110 [ 681.775815][T15830] genl_rcv_msg+0x55c/0x800 [ 681.775832][T15830] ? __pfx_genl_rcv_msg+0x10/0x10 [ 681.775848][T15830] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 681.775868][T15830] ? __lock_acquire+0x62e/0x1ce0 [ 681.775891][T15830] netlink_rcv_skb+0x155/0x420 [ 681.775912][T15830] ? __pfx_genl_rcv_msg+0x10/0x10 [ 681.775928][T15830] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 681.775957][T15830] ? netlink_deliver_tap+0x1ae/0xd30 [ 681.775977][T15830] ? is_vmalloc_addr+0x86/0xa0 [ 681.775995][T15830] genl_rcv+0x28/0x40 [ 681.776008][T15830] netlink_unicast+0x5aa/0x870 [ 681.776032][T15830] ? __pfx_netlink_unicast+0x10/0x10 [ 681.776065][T15830] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 681.776085][T15830] ? __lock_acquire+0xb97/0x1ce0 [ 681.776109][T15830] netlink_sendmsg+0x8d1/0xdd0 [ 681.776134][T15830] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.776159][T15830] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 681.776179][T15830] ____sys_sendmsg+0xa95/0xc70 [ 681.776196][T15830] ? copy_msghdr_from_user+0x10a/0x160 [ 681.776217][T15830] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.776237][T15830] ? __pfx_futex_wake_mark+0x10/0x10 [ 681.776264][T15830] ___sys_sendmsg+0x134/0x1d0 [ 681.776286][T15830] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.776330][T15830] __sys_sendmsg+0x16d/0x220 [ 681.776352][T15830] ? __pfx___sys_sendmsg+0x10/0x10 [ 681.776372][T15830] ? __x64_sys_futex+0x1e0/0x4c0 [ 681.776401][T15830] do_syscall_64+0xcd/0x4c0 [ 681.776424][T15830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.776439][T15830] RIP: 0033:0x7f5bb6b8ec29 [ 681.776452][T15830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.776466][T15830] RSP: 002b:00007f5bb7a8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.776481][T15830] RAX: ffffffffffffffda RBX: 00007f5bb6dd5fa0 RCX: 00007f5bb6b8ec29 [ 681.776491][T15830] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000006 [ 681.776501][T15830] RBP: 00007f5bb6c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 681.776510][T15830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.776519][T15830] R13: 00007f5bb6dd6038 R14: 00007f5bb6dd5fa0 R15: 00007ffd3cf88848 [ 681.776538][T15830] [ 682.759297][T15838] FAULT_INJECTION: forcing a failure. [ 682.759297][T15838] name failslab, interval 1, probability 0, space 0, times 0 [ 682.784995][T15838] CPU: 1 UID: 0 PID: 15838 Comm: syz.2.2616 Not tainted syzkaller #0 PREEMPT(full) [ 682.785016][T15838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 682.785026][T15838] Call Trace: [ 682.785032][T15838] [ 682.785039][T15838] dump_stack_lvl+0x16c/0x1f0 [ 682.785067][T15838] should_fail_ex+0x512/0x640 [ 682.785089][T15838] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 682.785107][T15838] should_failslab+0xc2/0x120 [ 682.785125][T15838] __kmalloc_cache_noprof+0x6a/0x3e0 [ 682.785141][T15838] ? copy_net_ns+0x135/0x5f0 [ 682.785158][T15838] copy_net_ns+0x135/0x5f0 [ 682.785171][T15838] ? copy_cgroup_ns+0x71/0x700 [ 682.785189][T15838] create_new_namespaces+0x3ea/0xa90 [ 682.785210][T15838] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 682.785229][T15838] ksys_unshare+0x45b/0xa40 [ 682.785249][T15838] ? __pfx_ksys_unshare+0x10/0x10 [ 682.785270][T15838] ? syscall_user_dispatch+0x78/0x140 [ 682.785296][T15838] __x64_sys_unshare+0x31/0x40 [ 682.785314][T15838] do_syscall_64+0xcd/0x4c0 [ 682.785336][T15838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.785351][T15838] RIP: 0033:0x7f14c458ec29 [ 682.785363][T15838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.785377][T15838] RSP: 002b:00007f14c54a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 682.785391][T15838] RAX: ffffffffffffffda RBX: 00007f14c47d5fa0 RCX: 00007f14c458ec29 [ 682.785401][T15838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 682.785410][T15838] RBP: 00007f14c4611e41 R08: 0000000000000000 R09: 0000000000000000 [ 682.785418][T15838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.785427][T15838] R13: 00007f14c47d6038 R14: 00007f14c47d5fa0 R15: 00007fffa3c49168 [ 682.785445][T15838] [ 683.404499][T15868] random: crng reseeded on system resumption [ 684.050567][T15868] Unrecognized hibernate image header format! [ 684.080990][T15868] PM: hibernation: Image mismatch: architecture specific data [ 684.948178][T15883] zswap: compressor not available [ 685.928175][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.934544][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.127413][T15976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2622'. [ 686.202524][T15976] netlink: 'syz.1.2622': attribute type 1 has an invalid length. [ 686.239530][T15976] netlink: 'syz.1.2622': attribute type 6 has an invalid length. [ 687.642601][T16026] can0: slcan on ptm0. [ 687.768745][T16022] can0 (unregistered): slcan off ptm0. [ 689.078399][T16144] FAULT_INJECTION: forcing a failure. [ 689.078399][T16144] name failslab, interval 1, probability 0, space 0, times 0 [ 689.144782][T16144] CPU: 1 UID: 0 PID: 16144 Comm: syz.2.2638 Not tainted syzkaller #0 PREEMPT(full) [ 689.144806][T16144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 689.144815][T16144] Call Trace: [ 689.144822][T16144] [ 689.144829][T16144] dump_stack_lvl+0x16c/0x1f0 [ 689.144856][T16144] should_fail_ex+0x512/0x640 [ 689.144881][T16144] ? fs_reclaim_acquire+0xae/0x150 [ 689.144904][T16144] ? tomoyo_open_control+0x51f/0xa30 [ 689.144917][T16144] should_failslab+0xc2/0x120 [ 689.144936][T16144] __kmalloc_noprof+0xd2/0x510 [ 689.144958][T16144] tomoyo_open_control+0x51f/0xa30 [ 689.144975][T16144] do_dentry_open+0x97f/0x1530 [ 689.144993][T16144] ? __pfx_tomoyo_open+0x10/0x10 [ 689.145017][T16144] vfs_open+0x82/0x3f0 [ 689.145040][T16144] path_openat+0x1de4/0x2cb0 [ 689.145063][T16144] ? __pfx_path_openat+0x10/0x10 [ 689.145084][T16144] do_filp_open+0x20b/0x470 [ 689.145101][T16144] ? __pfx_do_filp_open+0x10/0x10 [ 689.145131][T16144] ? alloc_fd+0x471/0x7d0 [ 689.145153][T16144] do_sys_openat2+0x11b/0x1d0 [ 689.145174][T16144] ? __pfx_do_sys_openat2+0x10/0x10 [ 689.145202][T16144] __x64_sys_openat+0x174/0x210 [ 689.145215][T16144] ? __pfx___x64_sys_openat+0x10/0x10 [ 689.145235][T16144] do_syscall_64+0xcd/0x4c0 [ 689.145258][T16144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.145274][T16144] RIP: 0033:0x7f14c458ec29 [ 689.145293][T16144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.145308][T16144] RSP: 002b:00007f14c54a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 689.145323][T16144] RAX: ffffffffffffffda RBX: 00007f14c47d5fa0 RCX: 00007f14c458ec29 [ 689.145333][T16144] RDX: 00000000000c0802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 689.145343][T16144] RBP: 00007f14c4611e41 R08: 0000000000000000 R09: 0000000000000000 [ 689.145351][T16144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.145360][T16144] R13: 00007f14c47d6038 R14: 00007f14c47d5fa0 R15: 00007fffa3c49168 [ 689.145379][T16144] [ 689.803724][T16151] program syz.1.2640 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 689.977281][T16168] netlink: 'syz.3.2641': attribute type 15 has an invalid length. [ 690.006876][T16168] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2641'. [ 690.065302][T16168] netlink: 'syz.3.2641': attribute type 15 has an invalid length. [ 690.095061][T16168] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2641'. [ 691.231927][T16217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2645'. [ 692.633461][T16309] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2651'. [ 692.657988][T16304] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2649'. [ 692.688727][T16309] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2651'. [ 692.779318][T16309] netlink: 290 bytes leftover after parsing attributes in process `syz.3.2651'. [ 692.802878][T16309] veth0_macvtap: left promiscuous mode [ 692.816750][T16313] netlink: 290 bytes leftover after parsing attributes in process `syz.3.2651'. [ 692.841302][T16313] veth0_macvtap: entered promiscuous mode [ 694.991203][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.999907][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.020809][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.034041][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.052646][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.070613][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.082582][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.091017][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.429318][T16505] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2668'. [ 697.614527][T16505] kfence: disabled [ 699.641815][T16621] FAULT_INJECTION: forcing a failure. [ 699.641815][T16621] name failslab, interval 1, probability 0, space 0, times 0 [ 699.725256][T16621] CPU: 1 UID: 0 PID: 16621 Comm: syz.1.2673 Not tainted syzkaller #0 PREEMPT(full) [ 699.725280][T16621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 699.725289][T16621] Call Trace: [ 699.725295][T16621] [ 699.725302][T16621] dump_stack_lvl+0x16c/0x1f0 [ 699.725329][T16621] should_fail_ex+0x512/0x640 [ 699.725351][T16621] ? __kmalloc_noprof+0xbf/0x510 [ 699.725370][T16621] ? devlink_fmsg_put_value+0xaa/0x2d0 [ 699.725391][T16621] should_failslab+0xc2/0x120 [ 699.725410][T16621] __kmalloc_noprof+0xd2/0x510 [ 699.725432][T16621] devlink_fmsg_put_value+0xaa/0x2d0 [ 699.725456][T16621] devlink_fmsg_bool_pair_put+0x19c/0x2f0 [ 699.725471][T16621] ? __pfx_devlink_fmsg_bool_pair_put+0x10/0x10 [ 699.725487][T16621] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 699.725512][T16621] nsim_dev_dummy_fmsg_put+0x25/0x1e0 [ 699.725535][T16621] devlink_health_do_dump+0x240/0x620 [ 699.725553][T16621] devlink_health_report+0x3c9/0x9c0 [ 699.725570][T16621] ? __pfx_devlink_health_report+0x10/0x10 [ 699.725586][T16621] ? _copy_from_user+0x59/0xd0 [ 699.725603][T16621] nsim_dev_health_break_write+0x166/0x210 [ 699.725625][T16621] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 699.725652][T16621] full_proxy_write+0x12e/0x1a0 [ 699.725675][T16621] ? __pfx_full_proxy_write+0x10/0x10 [ 699.725695][T16621] vfs_write+0x29d/0x11d0 [ 699.725715][T16621] ? __pfx___mutex_lock+0x10/0x10 [ 699.725736][T16621] ? __pfx_vfs_write+0x10/0x10 [ 699.725758][T16621] ? __fget_files+0x20e/0x3c0 [ 699.725780][T16621] ksys_write+0x12a/0x250 [ 699.725796][T16621] ? __pfx_ksys_write+0x10/0x10 [ 699.725818][T16621] do_syscall_64+0xcd/0x4c0 [ 699.725841][T16621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.725856][T16621] RIP: 0033:0x7f5bb6b8ec29 [ 699.725868][T16621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.725882][T16621] RSP: 002b:00007f5bb7a8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 699.725897][T16621] RAX: ffffffffffffffda RBX: 00007f5bb6dd5fa0 RCX: 00007f5bb6b8ec29 [ 699.725907][T16621] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000008 [ 699.725916][T16621] RBP: 00007f5bb6c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 699.725924][T16621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.725933][T16621] R13: 00007f5bb6dd6038 R14: 00007f5bb6dd5fa0 R15: 00007ffd3cf88848 [ 699.725953][T16621] [ 700.444103][T16632] zswap: compressor not available [ 701.026865][T16650] zswap: compressor 000 not available [ 701.439011][T16681] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2683'. [ 701.590580][T16681] ima: policy update failed [ 701.629014][ T30] audit: type=1802 audit(4294967330.009:24): pid=16681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2683" res=0 errno=0 [ 704.076798][T16710] kexec: Could not allocate control_code_buffer [ 704.355434][T16735] netlink: 93 bytes leftover after parsing attributes in process `syz.0.2692'. [ 705.148484][T16795] ptrace attach of "./syz-executor exec"[5865] was attempted by ""[16795] [ 706.601177][T16821] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2704'. [ 706.688468][T16821] ima: policy update failed [ 706.718258][ T30] audit: type=1802 audit(4294967335.099:25): pid=16821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2704" res=0 errno=0 [ 707.702388][T16851] __vm_enough_memory: pid: 16851, comm: syz.2.2709, bytes: 4398046511104 not enough memory for the allocation [ 708.228350][T15958] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.420815][T16850] Process accounting resumed [ 708.539140][T16876] openvswitch: HfR: Dropping previously announced user features [ 709.956315][T16929] bcache: register_bcache() error : failed to open device [ 710.084689][T16895] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2719'. [ 710.113579][T16932] __vm_enough_memory: pid: 16932, comm: syz.3.2724, bytes: 4398046511104 not enough memory for the allocation [ 710.131317][T16895] bond0: entered allmulticast mode [ 710.165498][T16895] bond_slave_0: entered allmulticast mode [ 710.444497][T15958] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.727613][T16964] FAULT_INJECTION: forcing a failure. [ 710.727613][T16964] name failslab, interval 1, probability 0, space 0, times 0 [ 710.784860][T16964] CPU: 1 UID: 0 PID: 16964 Comm: syz.0.2727 Not tainted syzkaller #0 PREEMPT(full) [ 710.784885][T16964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 710.784894][T16964] Call Trace: [ 710.784900][T16964] [ 710.784907][T16964] dump_stack_lvl+0x16c/0x1f0 [ 710.784934][T16964] should_fail_ex+0x512/0x640 [ 710.784956][T16964] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 710.784976][T16964] ? __pfx_objects_open+0x10/0x10 [ 710.784994][T16964] should_failslab+0xc2/0x120 [ 710.785013][T16964] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 710.785030][T16964] ? seq_open+0x55/0x170 [ 710.785050][T16964] ? __pfx___debugfs_file_get+0x10/0x10 [ 710.785073][T16964] ? __pfx_objects_open+0x10/0x10 [ 710.785089][T16964] seq_open+0x55/0x170 [ 710.785109][T16964] objects_open+0x22/0xd0 [ 710.785134][T16964] full_proxy_open_regular+0x1b9/0x360 [ 710.785151][T16964] do_dentry_open+0x97f/0x1530 [ 710.785171][T16964] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 710.785189][T16964] vfs_open+0x82/0x3f0 [ 710.785213][T16964] path_openat+0x1de4/0x2cb0 [ 710.785241][T16964] ? __pfx_path_openat+0x10/0x10 [ 710.785263][T16964] do_filp_open+0x20b/0x470 [ 710.785280][T16964] ? __pfx_do_filp_open+0x10/0x10 [ 710.785310][T16964] ? alloc_fd+0x471/0x7d0 [ 710.785331][T16964] do_sys_openat2+0x11b/0x1d0 [ 710.785351][T16964] ? __pfx_do_sys_openat2+0x10/0x10 [ 710.785379][T16964] __x64_sys_openat+0x174/0x210 [ 710.785392][T16964] ? __pfx___x64_sys_openat+0x10/0x10 [ 710.785415][T16964] do_syscall_64+0xcd/0x4c0 [ 710.785440][T16964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.785456][T16964] RIP: 0033:0x7ff1a258ec29 [ 710.785469][T16964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.785483][T16964] RSP: 002b:00007ff1a342e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 710.785496][T16964] RAX: ffffffffffffffda RBX: 00007ff1a27d6180 RCX: 00007ff1a258ec29 [ 710.785506][T16964] RDX: 0000000000040042 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 710.785516][T16964] RBP: 00007ff1a2611e41 R08: 0000000000000000 R09: 0000000000000000 [ 710.785525][T16964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.785534][T16964] R13: 00007ff1a27d6218 R14: 00007ff1a27d6180 R15: 00007fff5a6740d8 [ 710.785553][T16964] [ 713.670900][T17110] sd 0:0:1:0: PR command failed: 1026 [ 713.705007][T17110] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 713.735006][T17110] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 714.296165][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2738'. [ 714.932745][T17130] [U]  [ 714.935545][T17130] [U] [ 714.938216][T17130] [U] [ 714.940886][T17130] [U] [ 715.032494][T17130] [U] [ 715.035209][T17130] [U] [ 715.037889][T17130] [U] [ 715.040560][T17130] [U] [ 715.146136][T17130] [U] [ 715.148850][T17130] [U] [ 715.151527][T17130] [U] [ 715.154195][T17130] [U] [ 715.245836][T17130] [U] [ 715.248549][T17130] [U] [ 715.251223][T17130] [U] [ 715.253895][T17130] [U] [ 715.355159][T17130] [U] [ 715.357889][T17130] [U] [ 715.360570][T17130] [U] [ 715.363241][T17130] [U] [ 715.526213][T17130] [U] [ 716.669236][T17172] zswap: compressor not available [ 716.880823][T17184] zswap: compressor  not available [ 720.576352][T17280] FAULT_INJECTION: forcing a failure. [ 720.576352][T17280] name failslab, interval 1, probability 0, space 0, times 0 [ 720.589376][T17280] CPU: 1 UID: 0 PID: 17280 Comm: syz.3.2761 Not tainted syzkaller #0 PREEMPT(full) [ 720.589397][T17280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 720.589406][T17280] Call Trace: [ 720.589413][T17280] [ 720.589419][T17280] dump_stack_lvl+0x16c/0x1f0 [ 720.589446][T17280] should_fail_ex+0x512/0x640 [ 720.589471][T17280] should_failslab+0xc2/0x120 [ 720.589491][T17280] __kmalloc_cache_noprof+0x6a/0x3e0 [ 720.589508][T17280] ? alloc_lookup_fw_priv+0x1f6/0x820 [ 720.589529][T17280] alloc_lookup_fw_priv+0x1f6/0x820 [ 720.589548][T17280] ? firmware_request_builtin_buf+0x169/0x1c0 [ 720.589571][T17280] _request_firmware+0x33e/0x1470 [ 720.589594][T17280] ? assign_fw+0x1cb/0x640 [ 720.589610][T17280] ? _request_firmware+0x957/0x1470 [ 720.589629][T17280] ? __pfx__request_firmware+0x10/0x10 [ 720.589655][T17280] request_firmware+0x35/0x50 [ 720.589674][T17280] valid_regdb+0x184/0x590 [ 720.589693][T17280] ? __pfx___mutex_lock+0x10/0x10 [ 720.589715][T17280] ? __pfx_valid_regdb+0x10/0x10 [ 720.589740][T17280] reg_reload_regdb+0x11a/0x460 [ 720.589754][T17280] ? __pfx_reg_reload_regdb+0x10/0x10 [ 720.589768][T17280] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 720.589786][T17280] ? nl80211_pre_doit+0x1b0/0xb10 [ 720.589805][T17280] genl_family_rcv_msg_doit+0x209/0x2f0 [ 720.589823][T17280] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 720.589838][T17280] ? rcu_is_watching+0x12/0xc0 [ 720.589859][T17280] ? bpf_lsm_capable+0x9/0x10 [ 720.589872][T17280] ? security_capable+0x7e/0x260 [ 720.589890][T17280] genl_rcv_msg+0x55c/0x800 [ 720.589907][T17280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 720.589922][T17280] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 720.589939][T17280] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 720.589959][T17280] ? __pfx_nl80211_post_doit+0x10/0x10 [ 720.589979][T17280] netlink_rcv_skb+0x155/0x420 [ 720.589999][T17280] ? __pfx_genl_rcv_msg+0x10/0x10 [ 720.590015][T17280] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 720.590044][T17280] ? netlink_deliver_tap+0x1ae/0xd30 [ 720.590066][T17280] genl_rcv+0x28/0x40 [ 720.590079][T17280] netlink_unicast+0x5aa/0x870 [ 720.590102][T17280] ? __pfx_netlink_unicast+0x10/0x10 [ 720.590123][T17280] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 720.590153][T17280] ? __lock_acquire+0xb97/0x1ce0 [ 720.590178][T17280] netlink_sendmsg+0x8d1/0xdd0 [ 720.590203][T17280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 720.590227][T17280] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 720.590246][T17280] ____sys_sendmsg+0xa95/0xc70 [ 720.590264][T17280] ? copy_msghdr_from_user+0x10a/0x160 [ 720.590284][T17280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 720.590304][T17280] ? __pfx_futex_wake_mark+0x10/0x10 [ 720.590327][T17280] ___sys_sendmsg+0x134/0x1d0 [ 720.590349][T17280] ? __pfx____sys_sendmsg+0x10/0x10 [ 720.590392][T17280] __sys_sendmsg+0x16d/0x220 [ 720.590413][T17280] ? __pfx___sys_sendmsg+0x10/0x10 [ 720.590433][T17280] ? __x64_sys_futex+0x1e0/0x4c0 [ 720.590462][T17280] do_syscall_64+0xcd/0x4c0 [ 720.590484][T17280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.590499][T17280] RIP: 0033:0x7fb101f8ec29 [ 720.590512][T17280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 720.590526][T17280] RSP: 002b:00007fb102ebe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 720.590541][T17280] RAX: ffffffffffffffda RBX: 00007fb1021d5fa0 RCX: 00007fb101f8ec29 [ 720.590550][T17280] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000002 [ 720.590559][T17280] RBP: 00007fb102011e41 R08: 0000000000000000 R09: 0000000000000000 [ 720.590568][T17280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 720.590577][T17280] R13: 00007fb1021d6038 R14: 00007fb1021d5fa0 R15: 00007fff420fdac8 [ 720.590596][T17280] [ 721.687037][T17269] sp0: Synchronizing with TNC [ 721.696538][T17269] sp0: Found TNC [ 723.042841][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.049567][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 723.060542][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.066992][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 723.118905][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.135009][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 723.149797][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 723.156165][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 723.667055][T17383] random: crng reseeded on system resumption [ 725.041906][T17455] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2777'. [ 725.205134][T17461] netlink: 93 bytes leftover after parsing attributes in process `syz.0.2777'. [ 725.694645][T17488] FAULT_INJECTION: forcing a failure. [ 725.694645][T17488] name failslab, interval 1, probability 0, space 0, times 0 [ 725.766528][T17488] CPU: 1 UID: 0 PID: 17488 Comm: syz.2.2779 Not tainted syzkaller #0 PREEMPT(full) [ 725.766551][T17488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 725.766561][T17488] Call Trace: [ 725.766567][T17488] [ 725.766573][T17488] dump_stack_lvl+0x16c/0x1f0 [ 725.766601][T17488] should_fail_ex+0x512/0x640 [ 725.766632][T17488] should_failslab+0xc2/0x120 [ 725.766654][T17488] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 725.766673][T17488] ? skb_clone+0x190/0x3f0 [ 725.766697][T17488] skb_clone+0x190/0x3f0 [ 725.766718][T17488] netlink_deliver_tap+0xabd/0xd30 [ 725.766744][T17488] netlink_unicast+0x64c/0x870 [ 725.766769][T17488] ? __pfx_netlink_unicast+0x10/0x10 [ 725.766792][T17488] ? __asan_memset+0x23/0x50 [ 725.766806][T17488] ? __build_skb_around+0x278/0x3b0 [ 725.766824][T17488] ? is_vmalloc_addr+0x86/0xa0 [ 725.766843][T17488] netlink_sendmsg+0x8d1/0xdd0 [ 725.766867][T17488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 725.766891][T17488] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 725.766910][T17488] ____sys_sendmsg+0xa95/0xc70 [ 725.766928][T17488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 725.766953][T17488] ___sys_sendmsg+0x134/0x1d0 [ 725.766975][T17488] ? __pfx____sys_sendmsg+0x10/0x10 [ 725.767005][T17488] ? find_held_lock+0x2b/0x80 [ 725.767032][T17488] __sys_sendmmsg+0x200/0x420 [ 725.767056][T17488] ? __pfx___sys_sendmmsg+0x10/0x10 [ 725.767082][T17488] ? __pfx_do_futex+0x10/0x10 [ 725.767108][T17488] ? __sys_socket+0xac/0x260 [ 725.767126][T17488] ? xfd_validate_state+0x61/0x180 [ 725.767146][T17488] ? __pfx_do_writev+0x10/0x10 [ 725.767165][T17488] __x64_sys_sendmmsg+0x9c/0x100 [ 725.767185][T17488] ? lockdep_hardirqs_on+0x7c/0x110 [ 725.767206][T17488] do_syscall_64+0xcd/0x4c0 [ 725.767228][T17488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.767243][T17488] RIP: 0033:0x7f14c458ec29 [ 725.767256][T17488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 725.767271][T17488] RSP: 002b:00007f14c54a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 725.767285][T17488] RAX: ffffffffffffffda RBX: 00007f14c47d5fa0 RCX: 00007f14c458ec29 [ 725.767295][T17488] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000006 [ 725.767305][T17488] RBP: 00007f14c4611e41 R08: 0000000000000000 R09: 0000000000000000 [ 725.767313][T17488] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 725.767323][T17488] R13: 00007f14c47d6038 R14: 00007f14c47d5fa0 R15: 00007fffa3c49168 [ 725.767343][T17488] [ 726.077403][T17488] syz.2.2779 (17488): /proc/17486/oom_adj is deprecated, please use /proc/17486/oom_score_adj instead. [ 727.356325][T17532] HfR: entered promiscuous mode [ 727.899890][T17538] FAULT_INJECTION: forcing a failure. [ 727.899890][T17538] name failslab, interval 1, probability 0, space 0, times 0 [ 727.965762][T17538] CPU: 1 UID: 0 PID: 17538 Comm: syz.3.2787 Not tainted syzkaller #0 PREEMPT(full) [ 727.965785][T17538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 727.965795][T17538] Call Trace: [ 727.965800][T17538] [ 727.965807][T17538] dump_stack_lvl+0x16c/0x1f0 [ 727.965833][T17538] should_fail_ex+0x512/0x640 [ 727.965855][T17538] ? fs_reclaim_acquire+0xae/0x150 [ 727.965879][T17538] ? tomoyo_encode2+0x100/0x3e0 [ 727.965898][T17538] should_failslab+0xc2/0x120 [ 727.965918][T17538] __kmalloc_noprof+0xd2/0x510 [ 727.965934][T17538] ? d_absolute_path+0x136/0x1a0 [ 727.965957][T17538] tomoyo_encode2+0x100/0x3e0 [ 727.965979][T17538] tomoyo_encode+0x29/0x50 [ 727.965998][T17538] tomoyo_realpath_from_path+0x18f/0x6e0 [ 727.966024][T17538] tomoyo_check_open_permission+0x2ab/0x3c0 [ 727.966043][T17538] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 727.966079][T17538] ? do_raw_spin_lock+0x12c/0x2b0 [ 727.966106][T17538] tomoyo_file_open+0x6b/0x90 [ 727.966120][T17538] security_file_open+0x84/0x1e0 [ 727.966140][T17538] do_dentry_open+0x596/0x1530 [ 727.966164][T17538] vfs_open+0x82/0x3f0 [ 727.966187][T17538] path_openat+0x1de4/0x2cb0 [ 727.966211][T17538] ? __pfx_path_openat+0x10/0x10 [ 727.966232][T17538] do_filp_open+0x20b/0x470 [ 727.966250][T17538] ? __pfx_do_filp_open+0x10/0x10 [ 727.966280][T17538] ? alloc_fd+0x471/0x7d0 [ 727.966301][T17538] do_sys_openat2+0x11b/0x1d0 [ 727.966322][T17538] ? __pfx_do_sys_openat2+0x10/0x10 [ 727.966350][T17538] __x64_sys_openat+0x174/0x210 [ 727.966369][T17538] ? __pfx___x64_sys_openat+0x10/0x10 [ 727.966391][T17538] do_syscall_64+0xcd/0x4c0 [ 727.966422][T17538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.966438][T17538] RIP: 0033:0x7fb101f8ec29 [ 727.966451][T17538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 727.966465][T17538] RSP: 002b:00007fb102ebe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 727.966480][T17538] RAX: ffffffffffffffda RBX: 00007fb1021d5fa0 RCX: 00007fb101f8ec29 [ 727.966489][T17538] RDX: 0000000000101600 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 727.966498][T17538] RBP: 00007fb102011e41 R08: 0000000000000000 R09: 0000000000000000 [ 727.966507][T17538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.966516][T17538] R13: 00007fb1021d6038 R14: 00007fb1021d5fa0 R15: 00007fff420fdac8 [ 727.966535][T17538] [ 727.966554][T17538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 729.891331][T17582] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.0.2796: bg 2: bad block bitmap checksum [ 729.965197][T17582] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 2 with max blocks 2 with error 74 [ 730.048622][T17595] FAULT_INJECTION: forcing a failure. [ 730.048622][T17595] name failslab, interval 1, probability 0, space 0, times 0 [ 730.105795][T17582] EXT4-fs (sda1): This should not happen!! Data will be lost [ 730.105795][T17582] [ 730.145794][T17595] CPU: 1 UID: 0 PID: 17595 Comm: syz.0.2796 Not tainted syzkaller #0 PREEMPT(full) [ 730.145817][T17595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 730.145827][T17595] Call Trace: [ 730.145833][T17595] [ 730.145840][T17595] dump_stack_lvl+0x16c/0x1f0 [ 730.145867][T17595] should_fail_ex+0x512/0x640 [ 730.145890][T17595] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 730.145907][T17595] should_failslab+0xc2/0x120 [ 730.145927][T17595] __kmalloc_cache_noprof+0x6a/0x3e0 [ 730.145941][T17595] ? ovs_flow_tbl_init+0xb0/0x600 [ 730.145960][T17595] ? ovs_flow_tbl_init+0x1c7/0x600 [ 730.145980][T17595] ovs_flow_tbl_init+0x1c7/0x600 [ 730.146000][T17595] ovs_dp_cmd_new+0x251/0xe60 [ 730.146024][T17595] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 730.146047][T17595] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 730.146065][T17595] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 730.146085][T17595] genl_family_rcv_msg_doit+0x209/0x2f0 [ 730.146102][T17595] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 730.146124][T17595] ? bpf_lsm_capable+0x9/0x10 [ 730.146137][T17595] ? security_capable+0x7e/0x260 [ 730.146154][T17595] ? ns_capable+0xd7/0x110 [ 730.146171][T17595] genl_rcv_msg+0x55c/0x800 [ 730.146188][T17595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 730.146210][T17595] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 730.146236][T17595] netlink_rcv_skb+0x155/0x420 [ 730.146259][T17595] ? __pfx_genl_rcv_msg+0x10/0x10 [ 730.146275][T17595] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 730.146305][T17595] ? netlink_deliver_tap+0x1ae/0xd30 [ 730.146328][T17595] genl_rcv+0x28/0x40 [ 730.146340][T17595] netlink_unicast+0x5aa/0x870 [ 730.146364][T17595] ? __pfx_netlink_unicast+0x10/0x10 [ 730.146385][T17595] ? __pfx___might_resched+0x10/0x10 [ 730.146399][T17595] ? __lock_acquire+0xb97/0x1ce0 [ 730.146423][T17595] netlink_sendmsg+0x8d1/0xdd0 [ 730.146447][T17595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 730.146470][T17595] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 730.146489][T17595] ____sys_sendmsg+0xa95/0xc70 [ 730.146506][T17595] ? copy_msghdr_from_user+0x10a/0x160 [ 730.146526][T17595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 730.146547][T17595] ? __pfx_futex_wake_mark+0x10/0x10 [ 730.146570][T17595] ___sys_sendmsg+0x134/0x1d0 [ 730.146592][T17595] ? __pfx____sys_sendmsg+0x10/0x10 [ 730.146636][T17595] __sys_sendmsg+0x16d/0x220 [ 730.146656][T17595] ? __pfx___sys_sendmsg+0x10/0x10 [ 730.146676][T17595] ? __x64_sys_futex+0x1e0/0x4c0 [ 730.146705][T17595] do_syscall_64+0xcd/0x4c0 [ 730.146728][T17595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.146742][T17595] RIP: 0033:0x7ff1a258ec29 [ 730.146755][T17595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.146770][T17595] RSP: 002b:00007ff1a344f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.146784][T17595] RAX: ffffffffffffffda RBX: 00007ff1a27d6090 RCX: 00007ff1a258ec29 [ 730.146794][T17595] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 000000000000000a [ 730.146803][T17595] RBP: 00007ff1a2611e41 R08: 0000000000000000 R09: 0000000000000000 [ 730.146812][T17595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.146821][T17595] R13: 00007ff1a27d6128 R14: 00007ff1a27d6090 R15: 00007fff5a6740d8 [ 730.146839][T17595] [ 730.905721][T17599] __vm_enough_memory: pid: 17599, comm: syz.0.2797, bytes: 4398046511104 not enough memory for the allocation [ 731.288891][T17607] FAULT_INJECTION: forcing a failure. [ 731.288891][T17607] name failslab, interval 1, probability 0, space 0, times 0 [ 731.332987][T17607] CPU: 1 UID: 0 PID: 17607 Comm: syz.0.2800 Not tainted syzkaller #0 PREEMPT(full) [ 731.333010][T17607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 731.333019][T17607] Call Trace: [ 731.333024][T17607] [ 731.333031][T17607] dump_stack_lvl+0x16c/0x1f0 [ 731.333062][T17607] should_fail_ex+0x512/0x640 [ 731.333085][T17607] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 731.333103][T17607] should_failslab+0xc2/0x120 [ 731.333122][T17607] __kmalloc_cache_noprof+0x6a/0x3e0 [ 731.333138][T17607] ? kvm_dev_ioctl+0x13ce/0x1af0 [ 731.333156][T17607] kvm_dev_ioctl+0x13ce/0x1af0 [ 731.333176][T17607] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 731.333196][T17607] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 731.333212][T17607] __x64_sys_ioctl+0x18b/0x210 [ 731.333237][T17607] do_syscall_64+0xcd/0x4c0 [ 731.333260][T17607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.333275][T17607] RIP: 0033:0x7ff1a258ec29 [ 731.333287][T17607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.333301][T17607] RSP: 002b:00007ff1a3470038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.333315][T17607] RAX: ffffffffffffffda RBX: 00007ff1a27d5fa0 RCX: 00007ff1a258ec29 [ 731.333325][T17607] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 731.333334][T17607] RBP: 00007ff1a2611e41 R08: 0000000000000000 R09: 0000000000000000 [ 731.333343][T17607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.333352][T17607] R13: 00007ff1a27d6038 R14: 00007ff1a27d5fa0 R15: 00007fff5a6740d8 [ 731.333371][T17607] [ 732.696371][T17658] __vm_enough_memory: pid: 17658, comm: syz.0.2806, bytes: 4398046511104 not enough memory for the allocation [ 732.901473][ T3542] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.065430][T17661] FAULT_INJECTION: forcing a failure. [ 733.065430][T17661] name failslab, interval 1, probability 0, space 0, times 0 [ 733.122477][T17661] CPU: 1 UID: 0 PID: 17661 Comm: syz.2.2808 Not tainted syzkaller #0 PREEMPT(full) [ 733.122501][T17661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 733.122510][T17661] Call Trace: [ 733.122516][T17661] [ 733.122522][T17661] dump_stack_lvl+0x16c/0x1f0 [ 733.122549][T17661] should_fail_ex+0x512/0x640 [ 733.122570][T17661] ? __kmalloc_noprof+0xbf/0x510 [ 733.122589][T17661] ? ovs_vport_set_upcall_portids+0xfc/0x2f0 [ 733.122603][T17661] should_failslab+0xc2/0x120 [ 733.122622][T17661] __kmalloc_noprof+0xd2/0x510 [ 733.122643][T17661] ovs_vport_set_upcall_portids+0xfc/0x2f0 [ 733.122660][T17661] ovs_vport_alloc+0x28c/0x3d0 [ 733.122675][T17661] internal_dev_create+0x25/0x520 [ 733.122690][T17661] ovs_vport_add+0x147/0x4d0 [ 733.122713][T17661] new_vport+0x16/0x1d0 [ 733.122731][T17661] ovs_dp_cmd_new+0x6ba/0xe60 [ 733.122755][T17661] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 733.122778][T17661] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 733.122795][T17661] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 733.122815][T17661] genl_family_rcv_msg_doit+0x209/0x2f0 [ 733.122832][T17661] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 733.122854][T17661] ? bpf_lsm_capable+0x9/0x10 [ 733.122867][T17661] ? security_capable+0x7e/0x260 [ 733.122883][T17661] ? ns_capable+0xd7/0x110 [ 733.122900][T17661] genl_rcv_msg+0x55c/0x800 [ 733.122918][T17661] ? __pfx_genl_rcv_msg+0x10/0x10 [ 733.122933][T17661] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 733.122959][T17661] netlink_rcv_skb+0x155/0x420 [ 733.122980][T17661] ? __pfx_genl_rcv_msg+0x10/0x10 [ 733.122996][T17661] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 733.123025][T17661] ? netlink_deliver_tap+0x1ae/0xd30 [ 733.123048][T17661] genl_rcv+0x28/0x40 [ 733.123060][T17661] netlink_unicast+0x5aa/0x870 [ 733.123085][T17661] ? __pfx_netlink_unicast+0x10/0x10 [ 733.123106][T17661] ? __pfx___might_resched+0x10/0x10 [ 733.123128][T17661] ? __lock_acquire+0xb97/0x1ce0 [ 733.123152][T17661] netlink_sendmsg+0x8d1/0xdd0 [ 733.123177][T17661] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.123201][T17661] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 733.123220][T17661] ____sys_sendmsg+0xa95/0xc70 [ 733.123237][T17661] ? copy_msghdr_from_user+0x10a/0x160 [ 733.123257][T17661] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.123278][T17661] ? __pfx_futex_wake_mark+0x10/0x10 [ 733.123302][T17661] ___sys_sendmsg+0x134/0x1d0 [ 733.123324][T17661] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.123368][T17661] __sys_sendmsg+0x16d/0x220 [ 733.123389][T17661] ? __pfx___sys_sendmsg+0x10/0x10 [ 733.123409][T17661] ? __x64_sys_futex+0x1e0/0x4c0 [ 733.123439][T17661] do_syscall_64+0xcd/0x4c0 [ 733.123461][T17661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.123476][T17661] RIP: 0033:0x7f14c458ec29 [ 733.123489][T17661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.123503][T17661] RSP: 002b:00007f14c54a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.123517][T17661] RAX: ffffffffffffffda RBX: 00007f14c47d5fa0 RCX: 00007f14c458ec29 [ 733.123527][T17661] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 000000000000000a [ 733.123538][T17661] RBP: 00007f14c4611e41 R08: 0000000000000000 R09: 0000000000000000 [ 733.123547][T17661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.123556][T17661] R13: 00007f14c47d6038 R14: 00007f14c47d5fa0 R15: 00007fffa3c49168 [ 733.123575][T17661] [ 733.941906][T17675] __vm_enough_memory: pid: 17675, comm: syz.2.2810, bytes: 4398046511104 not enough memory for the allocation [ 736.488674][T17755] FAULT_INJECTION: forcing a failure. [ 736.488674][T17755] name failslab, interval 1, probability 0, space 0, times 0 [ 736.565409][T17755] CPU: 1 UID: 0 PID: 17755 Comm: syz.3.2821 Not tainted syzkaller #0 PREEMPT(full) [ 736.565432][T17755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 736.565442][T17755] Call Trace: [ 736.565448][T17755] [ 736.565454][T17755] dump_stack_lvl+0x16c/0x1f0 [ 736.565482][T17755] should_fail_ex+0x512/0x640 [ 736.565505][T17755] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 736.565525][T17755] should_failslab+0xc2/0x120 [ 736.565557][T17755] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 736.565575][T17755] ? sk_prot_alloc+0x60/0x2a0 [ 736.565593][T17755] sk_prot_alloc+0x60/0x2a0 [ 736.565609][T17755] sk_alloc+0x36/0xc20 [ 736.565629][T17755] unix_create1+0xa6/0x700 [ 736.565652][T17755] unix_create+0x110/0x270 [ 736.565672][T17755] __sock_create+0x338/0x8d0 [ 736.565691][T17755] __sys_socketpair+0x1d8/0x5a0 [ 736.565710][T17755] ? __pfx___sys_socketpair+0x10/0x10 [ 736.565729][T17755] ? xfd_validate_state+0x61/0x180 [ 736.565753][T17755] __x64_sys_socketpair+0x96/0x100 [ 736.565771][T17755] ? lockdep_hardirqs_on+0x7c/0x110 [ 736.565791][T17755] do_syscall_64+0xcd/0x4c0 [ 736.565813][T17755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.565828][T17755] RIP: 0033:0x7fb101f8ec29 [ 736.565840][T17755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.565854][T17755] RSP: 002b:00007fb102e9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 736.565869][T17755] RAX: ffffffffffffffda RBX: 00007fb1021d6090 RCX: 00007fb101f8ec29 [ 736.565879][T17755] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 736.565888][T17755] RBP: 00007fb102011e41 R08: 0000000000000000 R09: 0000000000000000 [ 736.565896][T17755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.565904][T17755] R13: 00007fb1021d6128 R14: 00007fb1021d6090 R15: 00007fff420fdac8 [ 736.565922][T17755] [ 737.203658][T17778] FAULT_INJECTION: forcing a failure. [ 737.203658][T17778] name failslab, interval 1, probability 0, space 0, times 0 [ 737.244940][T17778] CPU: 1 UID: 0 PID: 17778 Comm: syz.1.2822 Not tainted syzkaller #0 PREEMPT(full) [ 737.244963][T17778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 737.244972][T17778] Call Trace: [ 737.244978][T17778] [ 737.244985][T17778] dump_stack_lvl+0x16c/0x1f0 [ 737.245012][T17778] should_fail_ex+0x512/0x640 [ 737.245034][T17778] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 737.245054][T17778] should_failslab+0xc2/0x120 [ 737.245075][T17778] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 737.245092][T17778] ? __kernfs_new_node+0xd2/0x8e0 [ 737.245113][T17778] __kernfs_new_node+0xd2/0x8e0 [ 737.245134][T17778] ? __pfx___kernfs_new_node+0x10/0x10 [ 737.245157][T17778] ? find_held_lock+0x2b/0x80 [ 737.245172][T17778] ? kernfs_root+0xee/0x2a0 [ 737.245194][T17778] kernfs_new_node+0x13c/0x1e0 [ 737.245217][T17778] __kernfs_create_file+0x53/0x350 [ 737.245235][T17778] sysfs_add_file_mode_ns+0x207/0x3c0 [ 737.245257][T17778] internal_create_group+0x578/0xf30 [ 737.245281][T17778] ? __pfx_internal_create_group+0x10/0x10 [ 737.245303][T17778] ? kernfs_create_link+0x1bd/0x240 [ 737.245321][T17778] internal_create_groups+0x9d/0x150 [ 737.245342][T17778] device_add+0x731/0x1aa0 [ 737.245360][T17778] ? __pfx_device_add+0x10/0x10 [ 737.245376][T17778] ? kfree+0x2b4/0x4d0 [ 737.245389][T17778] ? input_register_device+0xc56/0x1180 [ 737.245410][T17778] input_register_device+0x7e8/0x1180 [ 737.245426][T17778] ? atkbd_set_device_attrs+0x864/0xa90 [ 737.245448][T17778] atkbd_set_scroll+0x238/0x370 [ 737.245469][T17778] ? __pfx_atkbd_set_scroll+0x10/0x10 [ 737.245497][T17778] ? mark_held_locks+0x49/0x80 [ 737.245518][T17778] ? __pfx_atkbd_set_scroll+0x10/0x10 [ 737.245543][T17778] atkbd_attr_set_helper.isra.0+0x11f/0x230 [ 737.245567][T17778] ? __pfx_atkbd_do_set_scroll+0x10/0x10 [ 737.245587][T17778] dev_attr_store+0x55/0x80 [ 737.245602][T17778] ? __pfx_dev_attr_store+0x10/0x10 [ 737.245616][T17778] sysfs_kf_write+0xef/0x150 [ 737.245634][T17778] kernfs_fop_write_iter+0x3ac/0x570 [ 737.245655][T17778] ? __pfx_sysfs_kf_write+0x10/0x10 [ 737.245673][T17778] vfs_write+0x7d3/0x11d0 [ 737.245691][T17778] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 737.245714][T17778] ? __pfx___mutex_lock+0x10/0x10 [ 737.245736][T17778] ? __pfx_vfs_write+0x10/0x10 [ 737.245766][T17778] ksys_write+0x12a/0x250 [ 737.245782][T17778] ? __pfx_ksys_write+0x10/0x10 [ 737.245805][T17778] do_syscall_64+0xcd/0x4c0 [ 737.245828][T17778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.245843][T17778] RIP: 0033:0x7f5bb6b8ec29 [ 737.245857][T17778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.245871][T17778] RSP: 002b:00007f5bb7a8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 737.245886][T17778] RAX: ffffffffffffffda RBX: 00007f5bb6dd5fa0 RCX: 00007f5bb6b8ec29 [ 737.245896][T17778] RDX: 0000000000000081 RSI: 00002000000001c0 RDI: 0000000000000007 [ 737.245905][T17778] RBP: 00007f5bb6c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 737.245914][T17778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.245923][T17778] R13: 00007f5bb6dd6038 R14: 00007f5bb6dd5fa0 R15: 00007ffd3cf88848 [ 737.245943][T17778] [ 737.754972][T17809] __vm_enough_memory: pid: 17809, comm: syz.1.2824, bytes: 4398046511104 not enough memory for the allocation [ 738.643345][ T44] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.948039][T17830] vivid-003: ================= START STATUS ================= [ 738.978076][T17830] vivid-003: Radio HW Seek Mode: Bounded [ 738.983770][T17830] vivid-003: Radio Programmable HW Seek: false [ 739.109646][T17830] vivid-003: RDS Rx I/O Mode: Block I/O [ 739.222250][T17830] vivid-003: Generate RBDS Instead of RDS: false [ 739.313476][T17830] vivid-003: RDS Reception: true [ 739.389961][T17830] vivid-003: RDS Program Type: 0 inactive [ 739.457874][T17830] vivid-003: RDS PS Name: inactive [ 739.505088][T17830] vivid-003: RDS Radio Text: inactive [ 739.546642][T17830] vivid-003: RDS Traffic Announcement: false inactive [ 739.573305][T17760] Process accounting paused [ 739.605099][T17830] vivid-003: RDS Traffic Program: false inactive [ 739.635434][T17830] vivid-003: RDS Music: false inactive [ 739.655518][T17830] vivid-003: ================== END STATUS ================== [ 739.870319][T17851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2829'. [ 740.617183][T17872] __vm_enough_memory: pid: 17872, comm: syz.3.2834, bytes: 4398046511104 not enough memory for the allocation [ 740.810754][ T13] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 741.328318][T17885] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 742.175851][T17913] netlink: 'syz.1.2839': attribute type 11 has an invalid length. [ 742.253537][T17913] netlink: 'syz.1.2839': attribute type 11 has an invalid length. [ 742.344164][T17913] netlink: 'syz.1.2839': attribute type 11 has an invalid length. [ 742.396632][T17913] netlink: 'syz.1.2839': attribute type 11 has an invalid length. [ 742.745941][T17912] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 743.236859][T17952] __vm_enough_memory: pid: 17952, comm: syz.3.2845, bytes: 4398046511104 not enough memory for the allocation [ 744.028833][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2847'. [ 745.219211][T18022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2854'. [ 746.940768][T18047] __vm_enough_memory: pid: 18047, comm: syz.3.2857, bytes: 4398046511104 not enough memory for the allocation [ 747.370641][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.378801][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.825883][T18090] FAULT_INJECTION: forcing a failure. [ 748.825883][T18090] name failslab, interval 1, probability 0, space 0, times 0 [ 748.838925][T18090] CPU: 1 UID: 0 PID: 18090 Comm: syz.1.2863 Not tainted syzkaller #0 PREEMPT(full) [ 748.838947][T18090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 748.838957][T18090] Call Trace: [ 748.838963][T18090] [ 748.838969][T18090] dump_stack_lvl+0x16c/0x1f0 [ 748.838997][T18090] should_fail_ex+0x512/0x640 [ 748.839023][T18090] should_failslab+0xc2/0x120 [ 748.839043][T18090] __kmalloc_cache_noprof+0x6a/0x3e0 [ 748.839059][T18090] ? tipc_nametbl_insert_publ+0x700/0x1720 [ 748.839084][T18090] tipc_nametbl_insert_publ+0x700/0x1720 [ 748.839107][T18090] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 748.839129][T18090] ? net_generic+0xea/0x2a0 [ 748.839152][T18090] tipc_nametbl_publish+0x137/0x280 [ 748.839176][T18090] tipc_sk_publish+0x1d8/0x430 [ 748.839190][T18090] ? __pfx_tipc_sk_publish+0x10/0x10 [ 748.839206][T18090] ? __local_bh_enable_ip+0xa4/0x120 [ 748.839225][T18090] tipc_sk_bind+0x16f/0x380 [ 748.839239][T18090] tipc_bind+0x190/0x2a0 [ 748.839257][T18090] __sys_bind+0x1a4/0x260 [ 748.839276][T18090] ? __pfx___sys_bind+0x10/0x10 [ 748.839340][T18090] ? xfd_validate_state+0x61/0x180 [ 748.839362][T18090] ? __pfx_do_writev+0x10/0x10 [ 748.839381][T18090] __x64_sys_bind+0x72/0xb0 [ 748.839397][T18090] ? lockdep_hardirqs_on+0x7c/0x110 [ 748.839418][T18090] do_syscall_64+0xcd/0x4c0 [ 748.839440][T18090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.839455][T18090] RIP: 0033:0x7f5bb6b8ec29 [ 748.839468][T18090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.839482][T18090] RSP: 002b:00007f5bb7a6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 748.839496][T18090] RAX: ffffffffffffffda RBX: 00007f5bb6dd6090 RCX: 00007f5bb6b8ec29 [ 748.839506][T18090] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000006 [ 748.839514][T18090] RBP: 00007f5bb6c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 748.839523][T18090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.839532][T18090] R13: 00007f5bb6dd6128 R14: 00007f5bb6dd6090 R15: 00007ffd3cf88848 [ 748.839551][T18090] [ 748.839558][T18090] tipc: Failed to bind to 65,0,0 [ 749.182120][T18077] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2862'. [ 749.578487][T18113] zswap: compressor not available [ 749.888006][T12912] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 749.895845][T12912] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 749.906905][T12912] CPU: 1 UID: 0 PID: 12912 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 749.906926][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 749.906937][T12912] Workqueue: hci0 hci_rx_work [ 749.906961][T12912] Call Trace: [ 749.906966][T12912] [ 749.906972][T12912] dump_stack_lvl+0x16c/0x1f0 [ 749.906996][T12912] sysfs_warn_dup+0x7f/0xa0 [ 749.907015][T12912] sysfs_create_dir_ns+0x24b/0x2b0 [ 749.907032][T12912] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 749.907048][T12912] ? find_held_lock+0x2b/0x80 [ 749.907067][T12912] ? do_raw_spin_unlock+0x172/0x230 [ 749.907090][T12912] kobject_add_internal+0x2c4/0x9b0 [ 749.907108][T12912] kobject_add+0x16e/0x240 [ 749.907122][T12912] ? __pfx_kobject_add+0x10/0x10 [ 749.907137][T12912] ? do_raw_spin_unlock+0x172/0x230 [ 749.907159][T12912] ? kobject_put+0xab/0x5a0 [ 749.907177][T12912] device_add+0x288/0x1aa0 [ 749.907193][T12912] ? __pfx_dev_set_name+0x10/0x10 [ 749.907210][T12912] ? __pfx_device_add+0x10/0x10 [ 749.907225][T12912] ? mgmt_send_event_skb+0x2fb/0x460 [ 749.907249][T12912] hci_conn_add_sysfs+0x17e/0x230 [ 749.907276][T12912] le_conn_complete_evt+0x1075/0x1d70 [ 749.907296][T12912] ? preempt_count_sub+0x130/0x160 [ 749.907315][T12912] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 749.907332][T12912] ? bt_warn+0xe4/0x120 [ 749.907347][T12912] ? __pfx_bt_warn+0x10/0x10 [ 749.907367][T12912] hci_le_conn_complete_evt+0x23c/0x370 [ 749.907390][T12912] hci_le_meta_evt+0x354/0x5e0 [ 749.907409][T12912] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 749.907430][T12912] hci_event_packet+0x685/0x11c0 [ 749.907447][T12912] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 749.907467][T12912] ? __pfx_hci_event_packet+0x10/0x10 [ 749.907487][T12912] ? kcov_remote_start+0x3c9/0x6d0 [ 749.907507][T12912] ? lockdep_hardirqs_on+0x7c/0x110 [ 749.907532][T12912] hci_rx_work+0x2c5/0x16b0 [ 749.907551][T12912] ? rcu_is_watching+0x12/0xc0 [ 749.907568][T12912] process_one_work+0x9cf/0x1b70 [ 749.907598][T12912] ? __pfx_process_one_work+0x10/0x10 [ 749.907625][T12912] ? assign_work+0x1a0/0x250 [ 749.907647][T12912] worker_thread+0x6c8/0xf10 [ 749.907666][T12912] ? __kthread_parkme+0x19e/0x250 [ 749.907685][T12912] ? __pfx_worker_thread+0x10/0x10 [ 749.907697][T12912] kthread+0x3c5/0x780 [ 749.907718][T12912] ? __pfx_kthread+0x10/0x10 [ 749.907739][T12912] ? rcu_is_watching+0x12/0xc0 [ 749.907753][T12912] ? __pfx_kthread+0x10/0x10 [ 749.907774][T12912] ret_from_fork+0x56d/0x730 [ 749.907794][T12912] ? __pfx_kthread+0x10/0x10 [ 749.907815][T12912] ret_from_fork_asm+0x1a/0x30 [ 749.907841][T12912] [ 749.907863][T12912] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 750.188900][T12912] Bluetooth: hci0: failed to register connection device [ 750.308810][T18134] __vm_enough_memory: pid: 18134, comm: syz.2.2866, bytes: 4398046511104 not enough memory for the allocation [ 750.581472][ T3542] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.787980][T18232] WARNING! power/level is deprecated; use power/control instead [ 755.982239][T18258] Invalid ELF header magic: != ELF [ 756.542443][T18276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2889'. [ 757.200307][T18293] can0: slcan on ptm0. [ 757.336681][T18292] can0 (unregistered): slcan off ptm0. [ 763.116090][T18440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2896'. [ 763.449946][T18438] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 763.483504][T18438] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 763.536182][T18438] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 763.784320][T18456] __vm_enough_memory: pid: 18456, comm: syz.1.2899, bytes: 4398046511104 not enough memory for the allocation [ 763.836562][T18445] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2898'. [ 763.936504][T18445] macsec0: entered allmulticast mode [ 763.946666][T18445] veth1_macvtap: entered allmulticast mode [ 763.993766][T18456] Format for adding new port is "id [perm_addr]" (uint MAC). [ 764.020699][T18471] __vm_enough_memory: pid: 18471, comm: syz.3.2901, bytes: 4398046511104 not enough memory for the allocation [ 764.323530][T18493] [ 765.208054][T18519] netlink: 29 bytes leftover after parsing attributes in process `syz.2.2907'. [ 765.598544][T18524] __vm_enough_memory: pid: 18524, comm: syz.0.2908, bytes: 4398046511104 not enough memory for the allocation [ 765.865173][ T44] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.040166][T18530] netlink: 266 bytes leftover after parsing attributes in process `syz.2.2909'. [ 766.069741][T18533] __vm_enough_memory: pid: 18533, comm: syz.1.2910, bytes: 4398046511104 not enough memory for the allocation [ 766.093662][T18530] IPv6: NLM_F_CREATE should be specified when creating new route [ 766.226054][T18535] Format for adding new port is "id [perm_addr]" (uint MAC). [ 766.459829][T18541] __vm_enough_memory: pid: 18541, comm: syz.1.2914, bytes: 4398046511104 not enough memory for the allocation [ 767.314624][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2916'. [ 769.456191][ T3542] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1401 with max blocks 2 with error 117 [ 769.536126][ T3542] EXT4-fs (sda1): This should not happen!! Data will be lost [ 769.536126][ T3542] [ 769.604568][ T3542] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 2 with max blocks 2 with error 117 [ 769.707137][ T3542] EXT4-fs (sda1): This should not happen!! Data will be lost [ 769.707137][ T3542] [ 769.793021][ T3542] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 2 with max blocks 2 with error 117 [ 769.906130][ T3542] EXT4-fs (sda1): This should not happen!! Data will be lost [ 769.906130][ T3542] [ 769.955272][ T3542] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 3 with max blocks 1 with error 117 [ 770.058232][ T3542] EXT4-fs (sda1): This should not happen!! Data will be lost [ 770.058232][ T3542] [ 770.078280][T18666] __vm_enough_memory: pid: 18666, comm: syz.3.2921, bytes: 4398046511104 not enough memory for the allocation [ 770.473389][ T3542] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.713704][T18590] Process accounting resumed [ 770.901651][T18689] __vm_enough_memory: pid: 18689, comm: syz.2.2923, bytes: 4398046511104 not enough memory for the allocation [ 771.349534][T18720] FAULT_INJECTION: forcing a failure. [ 771.349534][T18720] name failslab, interval 1, probability 0, space 0, times 0 [ 771.416422][T18720] CPU: 1 UID: 0 PID: 18720 Comm: syz.2.2925 Not tainted syzkaller #0 PREEMPT(full) [ 771.416446][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 771.416455][T18720] Call Trace: [ 771.416461][T18720] [ 771.416467][T18720] dump_stack_lvl+0x16c/0x1f0 [ 771.416493][T18720] should_fail_ex+0x512/0x640 [ 771.416516][T18720] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 771.416536][T18720] should_failslab+0xc2/0x120 [ 771.416555][T18720] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 771.416571][T18720] ? d_instantiate+0x77/0x90 [ 771.416591][T18720] ? alloc_empty_file+0x55/0x1e0 [ 771.416614][T18720] alloc_empty_file+0x55/0x1e0 [ 771.416635][T18720] alloc_file_pseudo+0x13a/0x230 [ 771.416656][T18720] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 771.416677][T18720] ? alloc_fd+0x471/0x7d0 [ 771.416696][T18720] sock_alloc_file+0x50/0x210 [ 771.416710][T18720] __sys_socket+0x1c0/0x260 [ 771.416727][T18720] ? __pfx___sys_socket+0x10/0x10 [ 771.416743][T18720] ? xfd_validate_state+0x61/0x180 [ 771.416763][T18720] ? __pfx___x64_sys_mount+0x10/0x10 [ 771.416787][T18720] __x64_sys_socket+0x72/0xb0 [ 771.416803][T18720] ? lockdep_hardirqs_on+0x7c/0x110 [ 771.416823][T18720] do_syscall_64+0xcd/0x4c0 [ 771.416845][T18720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.416859][T18720] RIP: 0033:0x7f14c458ec29 [ 771.416871][T18720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.416885][T18720] RSP: 002b:00007f14c54a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 771.416899][T18720] RAX: ffffffffffffffda RBX: 00007f14c47d5fa0 RCX: 00007f14c458ec29 [ 771.416909][T18720] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 771.416918][T18720] RBP: 00007f14c4611e41 R08: 0000000000000000 R09: 0000000000000000 [ 771.416926][T18720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.416935][T18720] R13: 00007f14c47d6038 R14: 00007f14c47d5fa0 R15: 00007fffa3c49168 [ 771.416953][T18720] [ 771.623611][ C1] vkms_vblank_simulate: vblank timer overrun [ 772.661987][T18718] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2924'. [ 773.691861][T18748] __vm_enough_memory: pid: 18748, comm: syz.2.2931, bytes: 4398046511104 not enough memory for the allocation [ 773.817199][T18748] Format for adding new port is "id [perm_addr]" (uint MAC). [ 774.656893][T18771] __vm_enough_memory: pid: 18771, comm: syz.0.2939, bytes: 4398046511104 not enough memory for the allocation [ 774.712149][T18777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2938'. [ 774.891257][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2941'. [ 774.907748][T18777] team0: Port device team_slave_1 removed [ 774.984469][T18786] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2941'. [ 775.120088][T18790] __vm_enough_memory: pid: 18790, comm: syz.2.2943, bytes: 4398046511104 not enough memory for the allocation [ 775.144236][T18788] Invalid ELF header magic: != ELF [ 775.306028][T18796] Format for adding new port is "id [perm_addr]" (uint MAC). [ 775.652950][T18763] FAULT_INJECTION: forcing a failure. [ 775.652950][T18763] name failslab, interval 1, probability 0, space 0, times 0 [ 775.689427][T18763] CPU: 1 UID: 0 PID: 18763 Comm: syz.3.2936 Not tainted syzkaller #0 PREEMPT(full) [ 775.689451][T18763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 775.689460][T18763] Call Trace: [ 775.689466][T18763] [ 775.689473][T18763] dump_stack_lvl+0x16c/0x1f0 [ 775.689500][T18763] should_fail_ex+0x512/0x640 [ 775.689523][T18763] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 775.689543][T18763] should_failslab+0xc2/0x120 [ 775.689562][T18763] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 775.689580][T18763] ? __pmd_alloc+0xbf/0x930 [ 775.689603][T18763] __pmd_alloc+0xbf/0x930 [ 775.689622][T18763] ? __pud_alloc+0x526/0x750 [ 775.689656][T18763] copy_page_range+0x3eaf/0x5c80 [ 775.689674][T18763] ? copy_process+0x4081/0x7690 [ 775.689697][T18763] ? ZSTD_HcFindBestMatch_dictMatchState_6.constprop.0+0x1dfc/0x2230 [ 775.689728][T18763] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 775.689750][T18763] ? mas_wr_store_entry+0xa14/0x2550 [ 775.689765][T18763] ? mas_destroy+0x5de/0xa20 [ 775.689779][T18763] ? __pfx_copy_page_range+0x10/0x10 [ 775.689796][T18763] ? mas_store+0x7a9/0x1160 [ 775.689810][T18763] ? find_held_lock+0x2b/0x80 [ 775.689825][T18763] ? __pfx_mas_store+0x10/0x10 [ 775.689837][T18763] ? __vma_enter_locked+0x163/0x3f0 [ 775.689862][T18763] dup_mmap+0xe88/0x21d0 [ 775.689890][T18763] ? __pfx_dup_mmap+0x10/0x10 [ 775.689924][T18763] copy_process+0x4081/0x7690 [ 775.689941][T18763] ? __pfx___futex_wait+0x10/0x10 [ 775.689969][T18763] ? __pfx_copy_process+0x10/0x10 [ 775.689987][T18763] ? futex_private_hash_put+0x176/0x300 [ 775.690006][T18763] ? futex_private_hash_put+0x18a/0x300 [ 775.690026][T18763] kernel_clone+0xfc/0x930 [ 775.690046][T18763] ? __pfx_kernel_clone+0x10/0x10 [ 775.690075][T18763] __do_sys_clone+0xce/0x120 [ 775.690094][T18763] ? __pfx___do_sys_clone+0x10/0x10 [ 775.690111][T18763] ? ksys_unshare+0x687/0xa40 [ 775.690138][T18763] ? xfd_validate_state+0x61/0x180 [ 775.690165][T18763] do_syscall_64+0xcd/0x4c0 [ 775.690187][T18763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.690202][T18763] RIP: 0033:0x7fb101f8ec29 [ 775.690215][T18763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 775.690230][T18763] RSP: 002b:00007fb102ebdfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 775.690244][T18763] RAX: ffffffffffffffda RBX: 00007fb1021d5fa0 RCX: 00007fb101f8ec29 [ 775.690254][T18763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 775.690263][T18763] RBP: 00007fb102011e41 R08: 0000000000000000 R09: 0000000000000000 [ 775.690272][T18763] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 775.690280][T18763] R13: 00007fb1021d6038 R14: 00007fb1021d5fa0 R15: 00007fff420fdac8 [ 775.690300][T18763] [ 777.335211][T18810] FAULT_INJECTION: forcing a failure. [ 777.335211][T18810] name failslab, interval 1, probability 0, space 0, times 0 [ 777.415651][T18810] CPU: 1 UID: 0 PID: 18810 Comm: syz.3.2948 Not tainted syzkaller #0 PREEMPT(full) [ 777.415675][T18810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 777.415684][T18810] Call Trace: [ 777.415690][T18810] [ 777.415697][T18810] dump_stack_lvl+0x16c/0x1f0 [ 777.415722][T18810] should_fail_ex+0x512/0x640 [ 777.415745][T18810] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 777.415766][T18810] should_failslab+0xc2/0x120 [ 777.415785][T18810] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 777.415802][T18810] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 777.415825][T18810] acpi_ut_create_generic_state+0x5c/0xb0 [ 777.415842][T18810] acpi_ds_scope_stack_push+0x4b/0x1d0 [ 777.415864][T18810] acpi_ds_init_aml_walk+0x2bb/0x590 [ 777.415887][T18810] acpi_ps_execute_method+0x32d/0xb30 [ 777.415911][T18810] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 777.415928][T18810] acpi_ns_evaluate+0x76c/0xca0 [ 777.415951][T18810] ? kasan_save_track+0x14/0x30 [ 777.415969][T18810] acpi_evaluate_object+0x1fa/0xa90 [ 777.415989][T18810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.416005][T18810] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 777.416024][T18810] ? __mutex_trylock_common+0xe9/0x250 [ 777.416047][T18810] acpi_evaluate_integer+0xdd/0x200 [ 777.416065][T18810] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 777.416090][T18810] ? __pfx_status_show+0x10/0x10 [ 777.416107][T18810] status_show+0xa0/0x120 [ 777.416126][T18810] ? __pfx_status_show+0x10/0x10 [ 777.416150][T18810] dev_attr_show+0x56/0xe0 [ 777.416166][T18810] ? __pfx_dev_attr_show+0x10/0x10 [ 777.416179][T18810] sysfs_kf_seq_show+0x213/0x3e0 [ 777.416200][T18810] seq_read_iter+0x506/0x12c0 [ 777.416223][T18810] kernfs_fop_read_iter+0x46c/0x610 [ 777.416238][T18810] ? rw_verify_area+0xcf/0x6c0 [ 777.416254][T18810] vfs_read+0x8bf/0xcf0 [ 777.416273][T18810] ? __pfx___mutex_lock+0x10/0x10 [ 777.416300][T18810] ? __pfx_vfs_read+0x10/0x10 [ 777.416330][T18810] ksys_read+0x12a/0x250 [ 777.416346][T18810] ? __pfx_ksys_read+0x10/0x10 [ 777.416368][T18810] do_syscall_64+0xcd/0x4c0 [ 777.416392][T18810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.416406][T18810] RIP: 0033:0x7fb101f8ec29 [ 777.416419][T18810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.416432][T18810] RSP: 002b:00007fb102ebe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 777.416446][T18810] RAX: ffffffffffffffda RBX: 00007fb1021d5fa0 RCX: 00007fb101f8ec29 [ 777.416464][T18810] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 777.416474][T18810] RBP: 00007fb102011e41 R08: 0000000000000000 R09: 0000000000000000 [ 777.416483][T18810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.416492][T18810] R13: 00007fb1021d6038 R14: 00007fb1021d5fa0 R15: 00007fff420fdac8 [ 777.416512][T18810] [ 777.416556][T18810] ACPI Error: ffff888028f70000 walk still has a scope list (20250404/dswstate-694) [ 780.916022][T18847] __vm_enough_memory: pid: 18847, comm: syz.0.2957, bytes: 4398046511104 not enough memory for the allocation [ 781.092985][T18850] Format for adding new port is "id [perm_addr]" (uint MAC). [ 781.186581][T18849] bridge0: port 3(batadv0) entered blocking state [ 781.214517][T18849] bridge0: port 3(batadv0) entered disabled state [ 781.280159][T18849] batadv0: entered allmulticast mode [ 781.318818][T18855] __vm_enough_memory: pid: 18855, comm: syz.0.2959, bytes: 4398046511104 not enough memory for the allocation [ 781.349023][T18849] batadv0: entered promiscuous mode [ 781.399622][T18849] bridge0: port 3(batadv0) entered blocking state [ 781.406425][T18849] bridge0: port 3(batadv0) entered forwarding state [ 781.437910][ T44] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 781.447668][ T44] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 781.786617][T18859] __vm_enough_memory: pid: 18859, comm: syz.0.2960, bytes: 4398046511104 not enough memory for the allocation [ 782.234342][T18877] usb usb15: usbfs: process 18877 (syz.2.2962) did not claim interface 0 before use [ 782.265049][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2961'. [ 783.149139][T12912] Bluetooth: hci2: unexpected event 0x10 length: 440 > 1 [ 783.150643][ T5869] Bluetooth: hci2: hardware error 0x00 [ 784.189896][T18972] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2967'. [ 784.279474][T18972] : renamed from bond0 (while UP) [ 785.178151][T19031] __vm_enough_memory: pid: 19031, comm: syz.1.2972, bytes: 4398046511104 not enough memory for the allocation [ 785.205051][ T5869] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 785.864629][T19044] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2975'. [ 786.453282][ T44] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 2 with max blocks 2 with error 117 [ 786.514674][T19061] __vm_enough_memory: pid: 19061, comm: syz.1.2979, bytes: 4398046511104 not enough memory for the allocation [ 786.527074][ T44] EXT4-fs (sda1): This should not happen!! Data will be lost [ 786.527074][ T44] [ 786.563812][ T44] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 2 with max blocks 2 with error 117 [ 786.628310][ T44] EXT4-fs (sda1): This should not happen!! Data will be lost [ 786.628310][ T44] [ 786.791965][T19061] Format for adding new port is "id [perm_addr]" (uint MAC). [ 787.689214][T19125] __vm_enough_memory: pid: 19125, comm: syz.0.2982, bytes: 4398046511104 not enough memory for the allocation [ 788.311518][T19134] __vm_enough_memory: pid: 19134, comm: syz.3.2985, bytes: 4398046511104 not enough memory for the allocation [ 788.628026][ T44] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.183191][T19233] netlink: 306 bytes leftover after parsing attributes in process `syz.0.2996'. [ 792.283654][T19234] __vm_enough_memory: pid: 19234, comm: syz.2.2997, bytes: 4398046511104 not enough memory for the allocation [ 792.928313][T15958] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.559140][T19299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3006'. [ 795.664372][T19281] kexec: Could not allocate control_code_buffer [ 795.704284][T19304] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input33 [ 795.713385][T19299] FAULT_INJECTION: forcing a failure. [ 795.713385][T19299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.836142][T19299] CPU: 1 UID: 0 PID: 19299 Comm: syz.3.3006 Not tainted syzkaller #0 PREEMPT(full) [ 795.836166][T19299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 795.836176][T19299] Call Trace: [ 795.836182][T19299] [ 795.836188][T19299] dump_stack_lvl+0x16c/0x1f0 [ 795.836214][T19299] should_fail_ex+0x512/0x640 [ 795.836240][T19299] _copy_from_user+0x2e/0xd0 [ 795.836257][T19299] memdup_user+0x6b/0xe0 [ 795.836276][T19299] get_filter+0xe7/0x1b0 [ 795.836296][T19299] ? __pfx_get_filter+0x10/0x10 [ 795.836323][T19299] ? _copy_from_user+0x59/0xd0 [ 795.836339][T19299] ppp_ioctl+0xb96/0x2670 [ 795.836363][T19299] ? find_held_lock+0x2b/0x80 [ 795.836379][T19299] ? __pfx_ppp_ioctl+0x10/0x10 [ 795.836403][T19299] ? __fget_files+0x20e/0x3c0 [ 795.836423][T19299] ? __pfx_ppp_ioctl+0x10/0x10 [ 795.836444][T19299] __x64_sys_ioctl+0x18b/0x210 [ 795.836469][T19299] do_syscall_64+0xcd/0x4c0 [ 795.836491][T19299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.836506][T19299] RIP: 0033:0x7fb101f8ec29 [ 795.836518][T19299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.836533][T19299] RSP: 002b:00007fb102e9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 795.836547][T19299] RAX: ffffffffffffffda RBX: 00007fb1021d6090 RCX: 00007fb101f8ec29 [ 795.836557][T19299] RDX: 0000200000000040 RSI: 0000000040107447 RDI: 0000000000000003 [ 795.836565][T19299] RBP: 00007fb102011e41 R08: 0000000000000000 R09: 0000000000000000 [ 795.836574][T19299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.836582][T19299] R13: 00007fb1021d6128 R14: 00007fb1021d6090 R15: 00007fff420fdac8 [ 795.836610][T19299] [ 796.505550][T19329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3008'. [ 796.558913][T19333] netlink: 354 bytes leftover after parsing attributes in process `syz.0.3008'. [ 801.237317][T19398] Process accounting paused [ 802.259855][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3022'. [ 802.326277][T19429] netlink: 'syz.3.3022': attribute type 1 has an invalid length. [ 802.376804][T19429] netlink: 'syz.3.3022': attribute type 6 has an invalid length. [ 802.418877][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3023'. [ 802.482996][T19432] netlink: 'syz.2.3023': attribute type 1 has an invalid length. [ 802.534011][T19432] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3023'. [ 803.965317][T19456] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 2 with max blocks 2 with error 117 [ 804.524973][T19456] EXT4-fs (sda1): This should not happen!! Data will be lost [ 804.524973][T19456] [ 804.751853][T19481] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 3 with max blocks 1 with error 117 [ 805.089314][T19481] EXT4-fs (sda1): This should not happen!! Data will be lost [ 805.089314][T19481] [ 805.100535][T19499] __vm_enough_memory: pid: 19499, comm: syz.3.3031, bytes: 4398046511104 not enough memory for the allocation [ 805.617267][T19502] __vm_enough_memory: pid: 19502, comm: syz.3.3032, bytes: 4398046511104 not enough memory for the allocation [ 805.894788][ T3542] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.621275][T19510] FAULT_INJECTION: forcing a failure. [ 806.621275][T19510] name failslab, interval 1, probability 0, space 0, times 0 [ 806.922485][T19510] CPU: 1 UID: 0 PID: 19510 Comm: syz.0.3034 Not tainted syzkaller #0 PREEMPT(full) [ 806.922515][T19510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 806.922524][T19510] Call Trace: [ 806.922530][T19510] [ 806.922536][T19510] dump_stack_lvl+0x16c/0x1f0 [ 806.922563][T19510] should_fail_ex+0x512/0x640 [ 806.922585][T19510] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 806.922603][T19510] should_failslab+0xc2/0x120 [ 806.922623][T19510] __kmalloc_cache_noprof+0x6a/0x3e0 [ 806.922638][T19510] ? drm_atomic_helper_check+0x10f/0x190 [ 806.922653][T19510] ? drm_atomic_helper_setup_commit+0x63a/0x15d0 [ 806.922673][T19510] drm_atomic_helper_setup_commit+0x63a/0x15d0 [ 806.922705][T19510] drm_atomic_helper_commit+0xa9/0x380 [ 806.922723][T19510] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 806.922741][T19510] drm_atomic_commit+0x234/0x300 [ 806.922759][T19510] ? __pfx_drm_atomic_commit+0x10/0x10 [ 806.922775][T19510] ? __pfx___drm_printfn_info+0x10/0x10 [ 806.922798][T19510] ? drm_client_rotation+0x4da/0x6a0 [ 806.922818][T19510] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 806.922843][T19510] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 806.922861][T19510] ? rcu_is_watching+0x12/0xc0 [ 806.922895][T19510] drm_client_modeset_commit_locked+0x14d/0x580 [ 806.922916][T19510] drm_client_modeset_commit+0x4f/0x80 [ 806.922933][T19510] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 806.922951][T19510] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 806.922973][T19510] drm_fbdev_client_restore+0x2c/0x40 [ 806.922994][T19510] drm_client_dev_restore+0x1f6/0x2a0 [ 806.923015][T19510] drm_release+0x2c4/0x360 [ 806.923032][T19510] ? __pfx_drm_release+0x10/0x10 [ 806.923047][T19510] __fput+0x3ff/0xb70 [ 806.923072][T19510] task_work_run+0x14d/0x240 [ 806.923095][T19510] ? __pfx_task_work_run+0x10/0x10 [ 806.923117][T19510] ? __pfx___do_sys_close_range+0x10/0x10 [ 806.923139][T19510] exit_to_user_mode_loop+0xeb/0x110 [ 806.923160][T19510] do_syscall_64+0x41c/0x4c0 [ 806.923184][T19510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.923198][T19510] RIP: 0033:0x7ff1a258ec29 [ 806.923211][T19510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 806.923224][T19510] RSP: 002b:00007ff1a3470038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 806.923238][T19510] RAX: 0000000000000000 RBX: 00007ff1a27d5fa0 RCX: 00007ff1a258ec29 [ 806.923247][T19510] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 806.923256][T19510] RBP: 00007ff1a2611e41 R08: 0000000000000000 R09: 0000000000000000 [ 806.923265][T19510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.923274][T19510] R13: 00007ff1a27d6038 R14: 00007ff1a27d5fa0 R15: 00007fff5a6740d8 [ 806.923295][T19510] [ 808.104621][T19546] __vm_enough_memory: pid: 19546, comm: syz.1.3041, bytes: 4398046511104 not enough memory for the allocation [ 808.397837][T19564] random: crng reseeded on system resumption [ 808.605594][T19578] __vm_enough_memory: pid: 19578, comm: syz.3.3044, bytes: 4398046511104 not enough memory for the allocation [ 808.811242][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.828158][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.993615][ T2905] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.988605][T19598] kexec: Could not allocate control_code_buffer [ 811.429772][T19685] __vm_enough_memory: pid: 19685, comm: syz.0.3055, bytes: 4398046511104 not enough memory for the allocation [ 812.068610][T15958] netdevsim netdevsim2 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.033041][T19738] __vm_enough_memory: pid: 19738, comm: syz.3.3063, bytes: 4398046511104 not enough memory for the allocation [ 813.534495][ T1042] netdevsim netdevsim2 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.967162][T19859] __vm_enough_memory: pid: 19859, comm: syz.0.3070, bytes: 4398046511104 not enough memory for the allocation [ 816.584339][ T44] netdevsim netdevsim2 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.526410][T19890] __vm_enough_memory: pid: 19890, comm: syz.0.3073, bytes: 4398046511104 not enough memory for the allocation [ 818.116132][T19907] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 3 with max blocks 1 with error 117 [ 818.257959][T19907] EXT4-fs (sda1): This should not happen!! Data will be lost [ 818.257959][T19907] [ 818.629215][ T2905] netdevsim netdevsim2 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.241235][T20029] binder: 20027:20029 ioctl 400c620e 0 returned -22 [ 821.146146][T20063] __vm_enough_memory: pid: 20063, comm: syz.3.3082, bytes: 4398046511104 not enough memory for the allocation [ 821.414408][ T1042] netdevsim netdevsim2 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.024939][T20092] nvme_fabrics: missing parameter 'transport=%s' [ 823.109627][T20092] nvme_fabrics: missing parameter 'nqn=%s' [ 823.811983][T20124] usb usb15: usbfs: process 20124 (syz.3.3092) did not claim interface 0 before use [ 824.056392][T20141] __vm_enough_memory: pid: 20141, comm: syz.1.3094, bytes: 4398046511104 not enough memory for the allocation [ 824.501084][ T44] netdevsim netdevsim2 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.331640][T20190] netlink: zone id is out of range [ 825.380887][T20186] netlink: set zone limit has 8 unknown bytes [ 825.467032][T20190] netlink: del zone limit has 4 unknown bytes [ 825.512318][T20189] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 2 with max blocks 2 with error 117 [ 825.542985][T20193] openvswitch: HfR: Dropping previously announced user features [ 825.615569][T20189] EXT4-fs (sda1): This should not happen!! Data will be lost [ 825.615569][T20189] [ 826.706157][T20182] FAULT_INJECTION: forcing a failure. [ 826.706157][T20182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 826.807043][T20182] CPU: 1 UID: 0 PID: 20182 Comm: syz.1.3096 Not tainted syzkaller #0 PREEMPT(full) [ 826.807066][T20182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 826.807076][T20182] Call Trace: [ 826.807082][T20182] [ 826.807088][T20182] dump_stack_lvl+0x16c/0x1f0 [ 826.807114][T20182] should_fail_ex+0x512/0x640 [ 826.807139][T20182] should_fail_alloc_page+0xe7/0x130 [ 826.807161][T20182] prepare_alloc_pages+0x3c2/0x610 [ 826.807182][T20182] ? stack_depot_save_flags+0x29/0x9c0 [ 826.807206][T20182] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 826.807224][T20182] ? kasan_save_stack+0x42/0x60 [ 826.807239][T20182] ? kasan_save_stack+0x33/0x60 [ 826.807254][T20182] ? kasan_save_track+0x14/0x30 [ 826.807269][T20182] ? __kasan_slab_alloc+0x89/0x90 [ 826.807284][T20182] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 826.807300][T20182] ? ptlock_alloc+0x1f/0x70 [ 826.807313][T20182] ? pte_alloc_one+0x82/0x3a0 [ 826.807327][T20182] ? copy_huge_pmd+0x18d/0x2f90 [ 826.807347][T20182] ? copy_page_range+0x20d6/0x5c80 [ 826.807360][T20182] ? copy_process+0x4081/0x7690 [ 826.807382][T20182] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 826.807399][T20182] ? __lock_acquire+0x62e/0x1ce0 [ 826.807425][T20182] ? lock_acquire+0x179/0x350 [ 826.807444][T20182] ? find_held_lock+0x2b/0x80 [ 826.807458][T20182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 826.807489][T20182] ? policy_nodemask+0xea/0x4e0 [ 826.807511][T20182] alloc_pages_mpol+0x1fb/0x550 [ 826.807531][T20182] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 826.807553][T20182] ? find_held_lock+0x2b/0x80 [ 826.807569][T20182] alloc_pages_noprof+0x131/0x390 [ 826.807588][T20182] pte_alloc_one+0x1c/0x3a0 [ 826.807604][T20182] copy_huge_pmd+0x18d/0x2f90 [ 826.807631][T20182] ? __pfx_copy_huge_pmd+0x10/0x10 [ 826.807652][T20182] ? do_raw_spin_unlock+0x172/0x230 [ 826.807674][T20182] ? _raw_spin_unlock+0x28/0x50 [ 826.807696][T20182] copy_page_range+0x20d6/0x5c80 [ 826.807719][T20182] ? ZSTD_HcFindBestMatch_dictMatchState_6.constprop.0+0x1dfc/0x2230 [ 826.807750][T20182] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 826.807773][T20182] ? mas_destroy+0x5de/0xa20 [ 826.807788][T20182] ? __pfx_copy_page_range+0x10/0x10 [ 826.807805][T20182] ? mas_store+0x7a9/0x1160 [ 826.807820][T20182] ? find_held_lock+0x2b/0x80 [ 826.807834][T20182] ? __pfx_mas_store+0x10/0x10 [ 826.807847][T20182] ? __vma_enter_locked+0x163/0x3f0 [ 826.807871][T20182] dup_mmap+0xe88/0x21d0 [ 826.807900][T20182] ? __pfx_dup_mmap+0x10/0x10 [ 826.807934][T20182] copy_process+0x4081/0x7690 [ 826.807952][T20182] ? __pfx___futex_wait+0x10/0x10 [ 826.807980][T20182] ? __pfx_copy_process+0x10/0x10 [ 826.807997][T20182] ? futex_private_hash_put+0x176/0x300 [ 826.808017][T20182] ? futex_private_hash_put+0x18a/0x300 [ 826.808037][T20182] kernel_clone+0xfc/0x930 [ 826.808057][T20182] ? __pfx_kernel_clone+0x10/0x10 [ 826.808092][T20182] __do_sys_clone+0xce/0x120 [ 826.808111][T20182] ? __pfx___do_sys_clone+0x10/0x10 [ 826.808129][T20182] ? __pfx___might_resched+0x10/0x10 [ 826.808153][T20182] ? xfd_validate_state+0x61/0x180 [ 826.808180][T20182] do_syscall_64+0xcd/0x4c0 [ 826.808203][T20182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.808218][T20182] RIP: 0033:0x7f5bb6b8ec29 [ 826.808231][T20182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.808246][T20182] RSP: 002b:00007f5bb7a69fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 826.808260][T20182] RAX: ffffffffffffffda RBX: 00007f5bb6dd6090 RCX: 00007f5bb6b8ec29 [ 826.808271][T20182] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 826.808280][T20182] RBP: 00007f5bb6c11e41 R08: 0000000000000000 R09: 0000000000000000 [ 826.808290][T20182] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 826.808299][T20182] R13: 00007f5bb6dd6128 R14: 00007f5bb6dd6090 R15: 00007ffd3cf88848 [ 826.808318][T20182] [ 827.578628][T20245] __vm_enough_memory: pid: 20245, comm: syz.2.3106, bytes: 4398046511104 not enough memory for the allocation [ 827.812904][T20251] Format for adding new port is "id [perm_addr]" (uint MAC). [ 827.887869][T20253] __vm_enough_memory: pid: 20253, comm: syz.3.3107, bytes: 4398046511104 not enough memory for the allocation [ 828.123709][ T3542] netdevsim netdevsim2 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.445325][T20268] __vm_enough_memory: pid: 20268, comm: syz.0.3112, bytes: 4398046511104 not enough memory for the allocation [ 829.323793][T20267] GUP no longer grows the stack in syz.3.3109 (20267): 1000-401000 (0) [ 829.514589][T20267] CPU: 1 UID: 0 PID: 20267 Comm: syz.3.3109 Not tainted syzkaller #0 PREEMPT(full) [ 829.514612][T20267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 829.514621][T20267] Call Trace: [ 829.514632][T20267] [ 829.514638][T20267] dump_stack_lvl+0x16c/0x1f0 [ 829.514666][T20267] gup_vma_lookup+0x1d2/0x220 [ 829.514689][T20267] fixup_user_fault+0x26f/0x540 [ 829.514709][T20267] ? futex_wake_op+0x974/0xe40 [ 829.514732][T20267] fault_in_user_writeable+0x70/0xe0 [ 829.514754][T20267] futex_wake_op+0x9a0/0xe40 [ 829.514780][T20267] ? __pfx_futex_wake_op+0x10/0x10 [ 829.514803][T20267] ? __pfx_futex_wait+0x10/0x10 [ 829.514829][T20267] ? up_write+0x1b2/0x520 [ 829.514852][T20267] do_futex+0x2e9/0x350 [ 829.514871][T20267] ? __pfx_do_futex+0x10/0x10 [ 829.514893][T20267] __x64_sys_futex+0x1e0/0x4c0 [ 829.514912][T20267] ? fput+0x9b/0xd0 [ 829.514932][T20267] ? __pfx___x64_sys_futex+0x10/0x10 [ 829.514950][T20267] ? xfd_validate_state+0x61/0x180 [ 829.514977][T20267] do_syscall_64+0xcd/0x4c0 [ 829.515000][T20267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.515014][T20267] RIP: 0033:0x7fb101f8ec29 [ 829.515027][T20267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.515041][T20267] RSP: 002b:00007fb102e7c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 829.515055][T20267] RAX: ffffffffffffffda RBX: 00007fb1021d6180 RCX: 00007fb101f8ec29 [ 829.515065][T20267] RDX: 0000000000000002 RSI: 0000000000000085 RDI: 0000000000000000 [ 829.515073][T20267] RBP: 00007fb102011e41 R08: 0000000000000000 R09: 0000000000000001 [ 829.515082][T20267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.515090][T20267] R13: 00007fb1021d6218 R14: 00007fb1021d6180 R15: 00007fff420fdac8 [ 829.515108][T20267] [ 829.954560][T20301] __vm_enough_memory: pid: 20301, comm: syz.0.3117, bytes: 4398046511104 not enough memory for the allocation [ 830.259746][T15958] netdevsim netdevsim2 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.318816][T20309] __vm_enough_memory: pid: 20309, comm: syz.3.3118, bytes: 4398046511104 not enough memory for the allocation [ 830.662043][ T1042] netdevsim netdevsim2 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.097675][T20328] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 831.575841][T20337] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3123'. [ 831.575873][T20337] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP) [ 833.554373][T20371] Process accounting resumed [ 834.463740][T20387] ubi0: attaching mtd0 [ 834.489226][T20387] ubi0 error: ubi_attach_mtd_dev: bad VID header (536870975) or data offsets (536871039) [ 836.378153][T20443] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 3 with max blocks 1 with error 117 [ 836.481357][T20443] EXT4-fs (sda1): This should not happen!! Data will be lost [ 836.481357][T20443] [ 838.476203][T20532] __vm_enough_memory: pid: 20532, comm: syz.2.3146, bytes: 4398046511104 not enough memory for the allocation [ 838.739657][T20543] Format for adding new port is "id [perm_addr]" (uint MAC). [ 840.295656][T20561] netlink: 326 bytes leftover after parsing attributes in process `syz.0.3151'. [ 841.670067][T20572] tipc: Started in network mode [ 841.703933][T20572] tipc: Node identity ee00, cluster identity 4711 [ 841.740161][T20572] tipc: Node number set to 60928 [ 841.843529][T20571] Process accounting resumed [ 843.035898][T20627] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 844.182516][T20656] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3169'. [ 844.519646][T20677] binder: 20668:20677 ioctl 400c620e 0 returned -22 [ 845.828842][T20663] FAULT_INJECTION: forcing a failure. [ 845.828842][T20663] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 845.959356][T20663] CPU: 1 UID: 0 PID: 20663 Comm: syz.0.3161 Not tainted syzkaller #0 PREEMPT(full) [ 845.959379][T20663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 845.959389][T20663] Call Trace: [ 845.959394][T20663] [ 845.959401][T20663] dump_stack_lvl+0x16c/0x1f0 [ 845.959429][T20663] should_fail_ex+0x512/0x640 [ 845.959454][T20663] should_fail_alloc_page+0xe7/0x130 [ 845.959476][T20663] prepare_alloc_pages+0x3c2/0x610 [ 845.959497][T20663] ? stack_depot_save_flags+0x29/0x9c0 [ 845.959522][T20663] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 845.959540][T20663] ? kasan_save_stack+0x42/0x60 [ 845.959556][T20663] ? kasan_save_stack+0x33/0x60 [ 845.959570][T20663] ? kasan_save_track+0x14/0x30 [ 845.959585][T20663] ? __kasan_slab_alloc+0x89/0x90 [ 845.959609][T20663] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 845.959626][T20663] ? ptlock_alloc+0x1f/0x70 [ 845.959640][T20663] ? pte_alloc_one+0x82/0x3a0 [ 845.959655][T20663] ? copy_huge_pmd+0x18d/0x2f90 [ 845.959674][T20663] ? copy_page_range+0x20d6/0x5c80 [ 845.959688][T20663] ? copy_process+0x4081/0x7690 [ 845.959710][T20663] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 845.959726][T20663] ? __lock_acquire+0x62e/0x1ce0 [ 845.959753][T20663] ? lock_acquire+0x179/0x350 [ 845.959772][T20663] ? find_held_lock+0x2b/0x80 [ 845.959785][T20663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 845.959808][T20663] ? policy_nodemask+0xea/0x4e0 [ 845.959827][T20663] alloc_pages_mpol+0x1fb/0x550 [ 845.959847][T20663] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 845.959867][T20663] ? find_held_lock+0x2b/0x80 [ 845.959883][T20663] alloc_pages_noprof+0x131/0x390 [ 845.959902][T20663] pte_alloc_one+0x1c/0x3a0 [ 845.959918][T20663] copy_huge_pmd+0x18d/0x2f90 [ 845.959945][T20663] ? __pfx_copy_huge_pmd+0x10/0x10 [ 845.959967][T20663] ? __pfx___might_resched+0x10/0x10 [ 845.959981][T20663] ? copy_page_range+0x1fa8/0x5c80 [ 845.959998][T20663] copy_page_range+0x20d6/0x5c80 [ 845.960033][T20663] ? mas_destroy+0x5de/0xa20 [ 845.960048][T20663] ? __pfx_copy_page_range+0x10/0x10 [ 845.960065][T20663] ? mas_store+0x7a9/0x1160 [ 845.960080][T20663] ? find_held_lock+0x2b/0x80 [ 845.960095][T20663] ? __vma_enter_locked+0x163/0x3f0 [ 845.960120][T20663] dup_mmap+0xe88/0x21d0 [ 845.960148][T20663] ? __pfx_dup_mmap+0x10/0x10 [ 845.960182][T20663] copy_process+0x4081/0x7690 [ 845.960200][T20663] ? __pfx___futex_wait+0x10/0x10 [ 845.960228][T20663] ? __pfx_copy_process+0x10/0x10 [ 845.960246][T20663] ? futex_private_hash_put+0x176/0x300 [ 845.960265][T20663] ? futex_private_hash_put+0x18a/0x300 [ 845.960285][T20663] kernel_clone+0xfc/0x930 [ 845.960305][T20663] ? __pfx_kernel_clone+0x10/0x10 [ 845.960333][T20663] __do_sys_clone+0xce/0x120 [ 845.960351][T20663] ? __pfx___do_sys_clone+0x10/0x10 [ 845.960368][T20663] ? ksys_unshare+0x687/0xa40 [ 845.960395][T20663] ? xfd_validate_state+0x61/0x180 [ 845.960422][T20663] do_syscall_64+0xcd/0x4c0 [ 845.960445][T20663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.960460][T20663] RIP: 0033:0x7ff1a258ec29 [ 845.960473][T20663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.960487][T20663] RSP: 002b:00007ff1a344efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 845.960502][T20663] RAX: ffffffffffffffda RBX: 00007ff1a27d6090 RCX: 00007ff1a258ec29 [ 845.960512][T20663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 845.960521][T20663] RBP: 00007ff1a2611e41 R08: 0000000000000000 R09: 0000000000000000 [ 845.960530][T20663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 845.960538][T20663] R13: 00007ff1a27d6128 R14: 00007ff1a27d6090 R15: 00007fff5a6740d8 [ 845.960558][T20663] [ 847.144577][T20699] nvme_fabrics: missing parameter 'transport=%s' [ 847.227005][T20699] nvme_fabrics: missing parameter 'nqn=%s' [ 847.497802][T20713] netlink: set zone limit has 8 unknown bytes [ 847.626060][T20713] netlink: zone id is out of range [ 847.660337][T20713] netlink: del zone limit has 4 unknown bytes [ 847.730067][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 2 with max blocks 2 with error 117 [ 847.780263][T20713] openvswitch: HfR: Dropping previously announced user features [ 847.900191][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 847.900191][ T12] [ 851.157813][T20818] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 2 with max blocks 2 with error 117 [ 851.157931][T20818] EXT4-fs (sda1): This should not happen!! Data will be lost [ 851.157931][T20818] [ 851.620087][ T5869] Bluetooth: hci0: hcon ffff8880536e4000 sent 1 < count 256 [ 856.123609][T20950] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3202'. [ 857.020157][T20965] FAULT_INJECTION: forcing a failure. [ 857.020157][T20965] name failslab, interval 1, probability 0, space 0, times 0 [ 857.096363][T20965] CPU: 1 UID: 0 PID: 20965 Comm: syz.3.3206 Not tainted syzkaller #0 PREEMPT(full) [ 857.096386][T20965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 857.096396][T20965] Call Trace: [ 857.096401][T20965] [ 857.096408][T20965] dump_stack_lvl+0x16c/0x1f0 [ 857.096435][T20965] should_fail_ex+0x512/0x640 [ 857.096459][T20965] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 857.096481][T20965] should_failslab+0xc2/0x120 [ 857.096501][T20965] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 857.096519][T20965] ? mas_alloc_nodes+0x18b/0x8b0 [ 857.096545][T20965] mas_alloc_nodes+0x18b/0x8b0 [ 857.096567][T20965] mas_node_count_gfp+0x105/0x130 [ 857.096588][T20965] mas_preallocate+0x7e0/0xde0 [ 857.096601][T20965] ? __memcg_slab_post_alloc_hook+0x492/0x960 [ 857.096624][T20965] ? __pfx_mas_preallocate+0x10/0x10 [ 857.096644][T20965] ? anon_vma_name+0x81/0x2f0 [ 857.096667][T20965] __split_vma+0x34a/0x1070 [ 857.096686][T20965] ? __pfx___split_vma+0x10/0x10 [ 857.096712][T20965] ? __pfx_mas_prev+0x10/0x10 [ 857.096737][T20965] vms_gather_munmap_vmas+0x3b1/0x1340 [ 857.096758][T20965] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 857.096778][T20965] ? mas_walk+0x6f5/0x980 [ 857.096804][T20965] __mmap_region+0x436/0x27b0 [ 857.096822][T20965] ? finish_task_switch.isra.0+0x21c/0xc10 [ 857.096839][T20965] ? __pfx___mmap_region+0x10/0x10 [ 857.096855][T20965] ? rcu_is_watching+0x12/0xc0 [ 857.096873][T20965] ? rcu_is_watching+0x12/0xc0 [ 857.096887][T20965] ? trace_sched_exit_tp+0xd1/0x120 [ 857.096908][T20965] ? __schedule+0x11a3/0x5de0 [ 857.096926][T20965] ? __lock_acquire+0x62e/0x1ce0 [ 857.096951][T20965] ? __lock_acquire+0x62e/0x1ce0 [ 857.096971][T20965] ? __pfx___schedule+0x10/0x10 [ 857.097012][T20965] ? trace_cap_capable+0x18d/0x200 [ 857.097034][T20965] mmap_region+0x1ab/0x3f0 [ 857.097050][T20965] ? __get_unmapped_area+0x267/0x440 [ 857.097073][T20965] do_mmap+0xa3e/0x1210 [ 857.097096][T20965] ? __pfx_do_mmap+0x10/0x10 [ 857.097116][T20965] ? __pfx_down_write_killable+0x10/0x10 [ 857.097134][T20965] vm_mmap_pgoff+0x29e/0x470 [ 857.097158][T20965] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 857.097181][T20965] ? __x64_sys_futex+0x1e0/0x4c0 [ 857.097199][T20965] ? __x64_sys_futex+0x1e9/0x4c0 [ 857.097219][T20965] ksys_mmap_pgoff+0x7d/0x5c0 [ 857.097238][T20965] ? xfd_validate_state+0x61/0x180 [ 857.097258][T20965] ? __pfx_ksys_write+0x10/0x10 [ 857.097277][T20965] __x64_sys_mmap+0x125/0x190 [ 857.097300][T20965] do_syscall_64+0xcd/0x4c0 [ 857.097323][T20965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.097338][T20965] RIP: 0033:0x7fb101f8ec29 [ 857.097351][T20965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.097366][T20965] RSP: 002b:00007fb102ebe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 857.097381][T20965] RAX: ffffffffffffffda RBX: 00007fb1021d5fa0 RCX: 00007fb101f8ec29 [ 857.097391][T20965] RDX: 00000000000000e2 RSI: 0000000000020009 RDI: 0000000000000000 [ 857.097400][T20965] RBP: 00007fb102011e41 R08: 0000000000000405 R09: 0000000000008000 [ 857.097410][T20965] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 857.097419][T20965] R13: 00007fb1021d6038 R14: 00007fb1021d5fa0 R15: 00007fff420fdac8 [ 857.097438][T20965] [ 858.365009][T21001] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 2 with max blocks 2 with error 117 [ 858.393709][T21001] EXT4-fs (sda1): This should not happen!! Data will be lost [ 858.393709][T21001] [ 859.610955][T21011] FAULT_INJECTION: forcing a failure. [ 859.610955][T21011] name failslab, interval 1, probability 0, space 0, times 0 [ 859.701512][T21011] CPU: 1 UID: 0 PID: 21011 Comm: syz.0.3212 Not tainted syzkaller #0 PREEMPT(full) [ 859.701535][T21011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 859.701544][T21011] Call Trace: [ 859.701550][T21011] [ 859.701557][T21011] dump_stack_lvl+0x16c/0x1f0 [ 859.701583][T21011] should_fail_ex+0x512/0x640 [ 859.701604][T21011] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 859.701624][T21011] should_failslab+0xc2/0x120 [ 859.701643][T21011] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 859.701660][T21011] ? ima_d_path+0xbd/0x2a0 [ 859.701681][T21011] ima_d_path+0xbd/0x2a0 [ 859.701698][T21011] ? __pfx_ima_d_path+0x10/0x10 [ 859.701718][T21011] ? lockdep_init_map_type+0x5c/0x280 [ 859.701738][T21011] ? ima_inode_get+0x39e/0x580 [ 859.701755][T21011] process_measurement+0x175f/0x23e0 [ 859.701774][T21011] ? __lock_acquire+0x62e/0x1ce0 [ 859.701793][T21011] ? __pfx_process_measurement+0x10/0x10 [ 859.701816][T21011] ? find_held_lock+0x2b/0x80 [ 859.701846][T21011] ? futex_private_hash_put+0x18a/0x300 [ 859.701868][T21011] ima_file_mmap+0x1b1/0x1d0 [ 859.701883][T21011] ? __pfx_ima_file_mmap+0x10/0x10 [ 859.701902][T21011] security_mmap_file+0x88c/0x990 [ 859.701922][T21011] vm_mmap_pgoff+0xec/0x470 [ 859.701943][T21011] ? find_held_lock+0x2b/0x80 [ 859.701957][T21011] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 859.701980][T21011] ? __fget_files+0x20e/0x3c0 [ 859.702000][T21011] ksys_mmap_pgoff+0x32c/0x5c0 [ 859.702023][T21011] __x64_sys_mmap+0x125/0x190 [ 859.702047][T21011] do_syscall_64+0xcd/0x4c0 [ 859.702070][T21011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.702084][T21011] RIP: 0033:0x7ff1a258ec29 [ 859.702097][T21011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 859.702111][T21011] RSP: 002b:00007ff1a3470038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 859.702125][T21011] RAX: ffffffffffffffda RBX: 00007ff1a27d5fa0 RCX: 00007ff1a258ec29 [ 859.702135][T21011] RDX: 00000000000003ff RSI: 0000000000000001 RDI: 000000000000f000 [ 859.702144][T21011] RBP: 00007ff1a2611e41 R08: 0000000000000009 R09: 0000000000000000 [ 859.702153][T21011] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 859.702161][T21011] R13: 00007ff1a27d6038 R14: 00007ff1a27d5fa0 R15: 00007fff5a6740d8 [ 859.702201][T21011] [ 859.933550][ C1] vkms_vblank_simulate: vblank timer overrun [ 859.940132][ T30] audit: type=1804 audit(4294967488.087:26): pid=21011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3212" name="file0" dev="tmpfs" ino=4041 res=1 errno=0 [ 860.842351][T21023] __vm_enough_memory: pid: 21023, comm: syz.1.3222, bytes: 4398046511104 not enough memory for the allocation [ 861.049079][T21029] __vm_enough_memory: pid: 21029, comm: syz.3.3215, bytes: 4398046511104 not enough memory for the allocation [ 861.356477][T21034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3216'. [ 864.570853][T21090] __vm_enough_memory: pid: 21090, comm: syz.0.3225, bytes: 4398046511104 not enough memory for the allocation [ 864.954530][T21096] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 2 with max blocks 2 with error 117 [ 865.026100][T21096] EXT4-fs (sda1): This should not happen!! Data will be lost [ 865.026100][T21096] [ 865.103273][T21102] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3226'. [ 865.922335][T21116] __vm_enough_memory: pid: 21116, comm: syz.2.3233, bytes: 4398046511104 not enough memory for the allocation [ 866.207912][T21123] Format for adding new port is "id [perm_addr]" (uint MAC). [ 866.967410][T21143] ubi0: attaching mtd0 [ 867.015485][T21143] ubi0: scanning is finished [ 867.020124][T21143] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 867.577344][T21124] zswap: compressor @ not available [ 867.588097][T21143] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 868.438665][T21145] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 870.088800][T21220] __vm_enough_memory: pid: 21220, comm: syz.3.3248, bytes: 4398046511104 not enough memory for the allocation [ 870.254227][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.260863][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.523469][T21256] netlink: zone id is out of range [ 871.564906][T21256] netlink: zone id is out of range [ 871.594508][T21256] netlink: zone id is out of range [ 871.647664][T21256] netlink: zone id is out of range [ 871.691170][T21256] netlink: zone id is out of range [ 871.722697][T21256] netlink: zone id is out of range [ 871.750025][T21256] netlink: zone id is out of range [ 871.807928][T21256] netlink: zone id is out of range [ 871.835344][T21256] netlink: zone id is out of range [ 871.875211][T21256] netlink: zone id is out of range [ 871.941766][T21255] Process accounting paused [ 875.006695][T21302] __vm_enough_memory: pid: 21302, comm: syz.0.3265, bytes: 4398046511104 not enough memory for the allocation [ 875.265451][ T44] netdevsim netdevsim2 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.599121][T21310] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 3 with max blocks 1 with error 117 [ 875.687072][T21310] EXT4-fs (sda1): This should not happen!! Data will be lost [ 875.687072][T21310] [ 876.092218][T21322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3270'. [ 877.034524][T21331] __vm_enough_memory: pid: 21331, comm: syz.3.3273, bytes: 4398046511104 not enough memory for the allocation [ 877.428539][ T12] netdevsim netdevsim2 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.248728][ T1042] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 2 with max blocks 2 with error 117 [ 878.355271][ T1042] EXT4-fs (sda1): This should not happen!! Data will be lost [ 878.355271][ T1042] [ 878.735280][T21334] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 880.626007][T21361] vivid-007: ================= START STATUS ================= [ 880.633672][T21361] vivid-007: Enable Output Cropping: true [ 880.785954][T21361] vivid-007: Enable Output Composing: true [ 880.854159][T21361] vivid-007: Enable Output Scaler: true [ 881.031367][T21361] vivid-007: Tx RGB Quantization Range: Automatic [ 881.197437][T21361] vivid-007: Transmit Mode: HDMI [ 881.254893][T21361] vivid-007: Hotplug Present: 0x00000000 [ 881.260557][T21361] vivid-007: RxSense Present: 0x00000000 [ 881.427249][T21449] Invalid ELF header magic: != ELF [ 881.477296][T21361] vivid-007: EDID Present: 0x00000000 [ 881.482798][T21361] vivid-007: ================== END STATUS ================== [ 881.820434][T21463] __vm_enough_memory: pid: 21463, comm: syz.1.3289, bytes: 4398046511104 not enough memory for the allocation [ 882.180422][T21471] __vm_enough_memory: pid: 21471, comm: syz.1.3299, bytes: 4398046511104 not enough memory for the allocation [ 882.580574][T21471] Format for adding new port is "id [perm_addr]" (uint MAC). [ 883.058379][T21491] __vm_enough_memory: pid: 21491, comm: syz.3.3294, bytes: 4398046511104 not enough memory for the allocation [ 883.553763][ T3542] netdevsim netdevsim2 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.955864][T21508] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3297'. [ 884.045857][T21514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3297'. [ 884.128546][T21508] geneve1: entered promiscuous mode [ 884.133777][T21508] geneve1: entered allmulticast mode [ 886.156583][T21551] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(173544298.2314043776.706666779), cmd(6) [ 887.427701][T21582] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 888.228659][T21597] __vm_enough_memory: pid: 21597, comm: syz.2.3312, bytes: 4398046511104 not enough memory for the allocation [ 888.753112][T21362] ------------[ cut here ]------------ [ 888.758730][T21362] WARNING: CPU: 1 PID: 21362 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 888.769209][T21362] Modules linked in: [ 888.773408][T21362] CPU: 1 UID: 0 PID: 21362 Comm: syz.2.3279 Not tainted syzkaller #0 PREEMPT(full) [ 888.783006][T21362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 888.793104][T21362] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 888.799559][T21362] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 31 cd 60 00 eb 87 e8 5a [ 888.819315][T21362] RSP: 0018:ffffc9000488f9c0 EFLAGS: 00010293 [ 888.825521][T21362] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfac79 [ 888.833474][T21362] RDX: ffff88807b2d8000 RSI: ffffffff81bfac8c RDI: 0000000000000005 [ 888.841526][T21362] RBP: ffffffff81bfabb0 R08: 0000000000000005 R09: 0000000000000000 [ 888.849571][T21362] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88803873a688 [ 888.857652][T21362] R13: dffffc0000000000 R14: ffffc9000488fa58 R15: 0000000000000000 [ 888.865632][T21362] FS: 0000000000000000(0000) GS:ffff8881247ba000(0000) knlGS:0000000000000000 [ 888.874541][T21362] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 888.881269][T21362] CR2: 00007f5bb6a68650 CR3: 00000000332ae000 CR4: 00000000003526f0 [ 888.889471][T21362] Call Trace: [ 888.892732][T21362] [ 888.895676][T21362] remove_vma+0x88/0x160 [ 888.899905][T21362] exit_mmap+0x511/0xb90 [ 888.904135][T21362] ? __pfx_exit_mmap+0x10/0x10 [ 888.908928][T21362] ? __lock_acquire+0xb97/0x1ce0 [ 888.913864][T21362] __mmput+0x12a/0x410 [ 888.917940][T21362] mmput+0x62/0x70 [ 888.921749][T21362] do_exit+0x7c7/0x2bf0 [ 888.925919][T21362] ? proc_coredump_connector+0x2d1/0x4f0 [ 888.931536][T21362] ? __pfx_do_exit+0x10/0x10 [ 888.936142][T21362] do_group_exit+0xd3/0x2a0 [ 888.940631][T21362] get_signal+0x2673/0x26d0 [ 888.945149][T21362] ? force_sig_fault+0xc4/0x100 [ 888.949982][T21362] ? __pfx_get_signal+0x10/0x10 [ 888.954960][T21362] arch_do_signal_or_restart+0x8f/0x790 [ 888.960507][T21362] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 888.966640][T21362] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 888.972787][T21362] irqentry_exit_to_user_mode+0x13e/0x290 [ 888.978537][T21362] asm_exc_page_fault+0x26/0x30 [ 888.983368][T21362] RIP: 0033:0x40fff [ 888.987351][T21362] Code: Unable to access opcode bytes at 0x40fd5. [ 888.993738][T21362] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 888.999808][T21362] RAX: 0000000000000000 RBX: 00007f14c47d5fa0 RCX: 00007f14c458ec29 [ 889.007788][T21362] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 889.015768][T21362] RBP: 00007f14c4611e41 R08: 0000000000000002 R09: 0000000000000000 [ 889.023717][T21362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.031702][T21362] R13: 00007f14c47d6038 R14: 00007f14c47d5fa0 R15: 00007fffa3c49168 [ 889.039696][T21362] [ 889.042699][T21362] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 889.049955][T21362] CPU: 1 UID: 0 PID: 21362 Comm: syz.2.3279 Not tainted syzkaller #0 PREEMPT(full) [ 889.059301][T21362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 889.069333][T21362] Call Trace: [ 889.072592][T21362] [ 889.075505][T21362] dump_stack_lvl+0x3d/0x1f0 [ 889.080099][T21362] vpanic+0x6e8/0x7a0 [ 889.084084][T21362] ? __pfx_vpanic+0x10/0x10 [ 889.088609][T21362] ? tracing_buffers_mmap_close+0xdd/0x130 [ 889.094405][T21362] panic+0xca/0xd0 [ 889.098118][T21362] ? __pfx_panic+0x10/0x10 [ 889.102530][T21362] ? check_panic_on_warn+0x1f/0xb0 [ 889.107631][T21362] check_panic_on_warn+0xab/0xb0 [ 889.112561][T21362] __warn+0xf6/0x3c0 [ 889.116444][T21362] ? tracing_buffers_mmap_close+0xdd/0x130 [ 889.122232][T21362] report_bug+0x3c3/0x580 [ 889.126552][T21362] ? tracing_buffers_mmap_close+0xdd/0x130 [ 889.132342][T21362] handle_bug+0x184/0x210 [ 889.136663][T21362] exc_invalid_op+0x17/0x50 [ 889.141147][T21362] asm_exc_invalid_op+0x1a/0x20 [ 889.145982][T21362] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 889.152378][T21362] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 31 cd 60 00 eb 87 e8 5a [ 889.171964][T21362] RSP: 0018:ffffc9000488f9c0 EFLAGS: 00010293 [ 889.178010][T21362] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfac79 [ 889.185961][T21362] RDX: ffff88807b2d8000 RSI: ffffffff81bfac8c RDI: 0000000000000005 [ 889.193911][T21362] RBP: ffffffff81bfabb0 R08: 0000000000000005 R09: 0000000000000000 [ 889.201860][T21362] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88803873a688 [ 889.209897][T21362] R13: dffffc0000000000 R14: ffffc9000488fa58 R15: 0000000000000000 [ 889.217848][T21362] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 889.224073][T21362] ? tracing_buffers_mmap_close+0xc9/0x130 [ 889.229862][T21362] ? tracing_buffers_mmap_close+0xdc/0x130 [ 889.235652][T21362] remove_vma+0x88/0x160 [ 889.239875][T21362] exit_mmap+0x511/0xb90 [ 889.244105][T21362] ? __pfx_exit_mmap+0x10/0x10 [ 889.248857][T21362] ? __lock_acquire+0xb97/0x1ce0 [ 889.253809][T21362] __mmput+0x12a/0x410 [ 889.257861][T21362] mmput+0x62/0x70 [ 889.261564][T21362] do_exit+0x7c7/0x2bf0 [ 889.265727][T21362] ? proc_coredump_connector+0x2d1/0x4f0 [ 889.271342][T21362] ? __pfx_do_exit+0x10/0x10 [ 889.275920][T21362] do_group_exit+0xd3/0x2a0 [ 889.280411][T21362] get_signal+0x2673/0x26d0 [ 889.284900][T21362] ? force_sig_fault+0xc4/0x100 [ 889.289819][T21362] ? __pfx_get_signal+0x10/0x10 [ 889.294657][T21362] arch_do_signal_or_restart+0x8f/0x790 [ 889.300194][T21362] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 889.306251][T21362] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 889.312659][T21362] irqentry_exit_to_user_mode+0x13e/0x290 [ 889.318381][T21362] asm_exc_page_fault+0x26/0x30 [ 889.323211][T21362] RIP: 0033:0x40fff [ 889.327021][T21362] Code: Unable to access opcode bytes at 0x40fd5. [ 889.333406][T21362] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 889.339448][T21362] RAX: 0000000000000000 RBX: 00007f14c47d5fa0 RCX: 00007f14c458ec29 [ 889.347397][T21362] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 889.355347][T21362] RBP: 00007f14c4611e41 R08: 0000000000000002 R09: 0000000000000000 [ 889.363296][T21362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.371260][T21362] R13: 00007f14c47d6038 R14: 00007f14c47d5fa0 R15: 00007fffa3c49168 [ 889.379227][T21362] [ 889.382289][T21362] Kernel Offset: disabled [ 889.386596][T21362] Rebooting in 86400 seconds..