last executing test programs: 5m49.894372305s ago: executing program 0 (id=10460): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/net/rxrpc/conns\x00', 0x0, 0x0) pread64$auto(r0, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x5) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) msgctl$auto_MSG_INFO(0x4, 0xc, &(0x7f0000000380)={{0x8, 0x0, 0xee01, 0x1, 0xfffffffc, 0x106, 0x4}, 0x0, 0x0, 0x8, 0x0, 0x7, 0x7, 0x9, 0x100, 0x16, 0x2, @inferred, @raw=0xc}) ioctl$auto(0x3, 0xae60, 0x10000000000402) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000002c0)={{0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000180)="cb7978ababe605edf078e6f2726ae03e663c080c0d6c169eec931ca2ea579299bf44495b1fe078f2e9c5586ae69caa813549", 0x1}, 0xfffffffffffffff7, 0x0, 0x5, 0x24b}, 0x800}, 0x8, 0xff) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) 5m49.28504944s ago: executing program 0 (id=10463): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) r0 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x21003b46, 0x2, 0x0, 0x0, 0x6) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, r2, 0x99, 0x8, 0x1, @relative_id=0x4, 0x9}, 0x8a4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) 5m48.774435984s ago: executing program 0 (id=10467): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) socket(0xa, 0x2, 0x3a) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x1002, 0xfffffffc, 0x5, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e18441074052a3fa6c3ccf1bf00"}) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x2}, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) pidfd_open$auto(0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) unshare$auto(0x40000080) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x9, 0x0, 0x800) process_vm_readv$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000000c0)='\x04>\x00\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\xf9y\xc7p\xf1w\xbe\xde\xe8\xc3\x01#\xcc\tF\xb6\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1\xd5\x1e\x8f\t\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x85\x00\x00\x00\xe2E\x00\x00-a\xb6n\xbc\xb4=\xf8\xce\x01\x1f]\x85|\xce\xd7\xff\xff\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\x00\x80\x00\x00\xe9e\xe5\x80\x1c\x02\"\xa7&8U\xfd\xdc\x15\xae\xfa5\xb8}\x0e\xb4:\x91\xbb5\xd3{\xb2\xd0\xc0\x93=\xf8E\xceO\x1e\xd5\x8f\xdf\xaa\x1c\xfd\xb0h\xd8\xbc\xecA\xa6\xde\xd1=\xfd)d\x8f\vk\x1c+\xf7, \xf8]\xb3\xe9B\x02\f\'\xcf0\x06', 0x1ff) 5m45.463388328s ago: executing program 0 (id=10474): bpf$auto(0x0, 0x0, 0xf) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd$auto(0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x3, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x3a) r0 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) 5m45.105170168s ago: executing program 0 (id=10476): mmap$auto(0x7ffffffffffffffd, 0xb3b7, 0x4000000000e1, 0x2000000001a, 0x401, 0x7ffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2a01, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$auto(0x1, 0x890b, 0x8) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) bpf$auto(0x1, 0x0, 0xc) unshare$auto(0x40000080) umount2$auto(0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 5m43.995059252s ago: executing program 0 (id=10480): setgroups$auto(0xa1, &(0x7f0000000000)=0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) mmap$auto(0x8000000000, 0xc3a, 0xe2, 0x9b72, 0x7, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap$auto(0x0, 0x20009, 0x4, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x8, 0x2, "141dbb9d"}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500c862a41184f600000a00010000000000000000000a00010070b28a70c5dc0000080004000300000006000700ff"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x10000) sysfs$auto(0x2, 0x4d, 0x0) 5m28.562168725s ago: executing program 32 (id=10480): setgroups$auto(0xa1, &(0x7f0000000000)=0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) mmap$auto(0x8000000000, 0xc3a, 0xe2, 0x9b72, 0x7, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8000) mmap$auto(0x0, 0x20009, 0x4, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x8, 0x2, "141dbb9d"}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fcdbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500c862a41184f600000a00010000000000000000000a00010070b28a70c5dc0000080004000300000006000700ff"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x10000) sysfs$auto(0x2, 0x4d, 0x0) 4m35.592784449s ago: executing program 2 (id=10708): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x543d80, 0x0) setsockopt$auto(r0, 0xc, 0xc56e, 0x0, 0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) getpid() sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 4m34.393268323s ago: executing program 2 (id=10713): mmap$auto(0x7ffffffffffffffd, 0xb3b7, 0x4000000000e1, 0x2000000001a, 0x401, 0x7ffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, 0x0, 0x3) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2a01, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') ioctl$auto(0x1, 0x890b, 0x8) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, 0xfffffffffffffffd) 4m33.985843274s ago: executing program 2 (id=10716): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x543d80, 0x0) setsockopt$auto(r0, 0xc, 0xc56e, 0x0, 0x5) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 4m32.75169659s ago: executing program 2 (id=10720): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x261c2, 0x84) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000001c0), r1) 4m31.214934131s ago: executing program 2 (id=10724): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), r0) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000011}, 0x4080) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000040)='I\xb7\x1dF\xbfB\xd1\x10\x7fz\x053g\xa5,\xfcf\xfb\xa6\xf6\x02\xa1\x7f>\xf7s\x04\"\x87\x16\xe9/\xc9\xa8|\xec\xbe9+\x1af\x1b\x1f\xee\xe9=\xa2\xb7B^{\x1d^:t\xb0\xc9\xe2\x14\xa0\xec\x89)\xe7\xa0\xd2\xcd>y\xa4\x88\xa8,\xe8\x80O\xc3\x9d\x0e\xe2P\xa5d\xa5b\x95\xdb\xf2\x1a\x82o\xc9\x03W\x8e\xc4,\x1b\xb6\xac\xd2Djr \xc5\x93\xc1\x7f\xa8b)9\xf4\x97\xd1\x9e\xd2I\xf8rc\x832\xdbR\x13\rXHw\xe0\xb1\x01\xb8\xd5^\xbas\xe8\xd6_\x95\xb4\xb4\x04\x00\xe5\xf5\x06\x83<\xea\'k\xbe\xd1f7\xb72\xed\r%\xb1*:9\xc0\x11\x80l\xadkL\xb6\xe3&\x11\x94\x97\xad\xc9\x17j\xb3\xabO\x0fOx_\xe9w9\xc7\xef\xbeC\tah,\a\xf6b\xaaXgL\xee7F%\xf7L*\x03K\xab\xdc\xcaP\x9f\xdb&f\xf6r7\x81\xc6', 0x4) execveat$auto(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/wlan0/disable_policy\x00', 0x6a201, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x400, 0x0) ioctl$auto_EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000040)=[0xff, 0x9]) r5 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) 4m30.882459739s ago: executing program 2 (id=10726): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x19b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(r0, 0x0) close_range$auto(0x0, 0x5, 0x0) r1 = socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) bind$auto(r1, 0x0, 0x13) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptytd\x00', 0x800, 0x0) r2 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6) r3 = open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x2) read$auto_fops_ulong_ro_(r3, &(0x7f0000000100)=""/43, 0x2b) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) 4m15.696120109s ago: executing program 33 (id=10726): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x19b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(r0, 0x0) close_range$auto(0x0, 0x5, 0x0) r1 = socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) bind$auto(r1, 0x0, 0x13) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptytd\x00', 0x800, 0x0) r2 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6) r3 = open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x2) read$auto_fops_ulong_ro_(r3, &(0x7f0000000100)=""/43, 0x2b) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) 8.110202818s ago: executing program 1 (id=11543): unshare$auto(0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0xb) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), r3) sendmsg$auto_OVS_DP_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdb7d, {}, [@OVS_DP_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) r5 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r5, 0x65, 0x6, 0xffffffffffffffff, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 6.532956652s ago: executing program 4 (id=11547): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0xc800) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x80902, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/2-0:1.0/usb2-port1/disable\x00', 0x102, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0x5c8) mprotect$auto(0x0, 0x806121, 0x6) 6.530963438s ago: executing program 3 (id=11548): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2800, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x27) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) read$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x402c542b, 0x38) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000881}, 0xc000810) wait4$auto(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$auto_MSG_INFO(0x8, 0xc, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, 0x0, 0x891) 6.317715491s ago: executing program 1 (id=11549): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socket(0xa, 0x80000, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setuid$auto(0x800000000008) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) setns$auto(r0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = clone$auto(0x20003b4a, 0xecc, 0x0, 0x0, 0x2) r2 = pidfd_open$auto(r1, 0x0) setns(r2, 0x20000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) 6.245830162s ago: executing program 5 (id=11550): ioctl$auto_FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) select$auto(0xe, 0x0, 0x0, &(0x7f0000000000)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x100, 0xd08, 0xc, 0x200000000000c, 0x0, 0x6d2f, 0xffffffffffffff00, 0x2, 0x4000000000000d]}, 0x0) socket(0x2c, 0x1, 0x4004) getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setregid$auto(0xee01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 6.002981079s ago: executing program 3 (id=11551): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) unshare$auto(0x40000080) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0xffffffffffffffff, 0x0, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0) read$auto(r1, &(0x7f0000000000)='veth1\x00', 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) read$auto(0xffffffffffffffff, 0x0, 0x7f) mmap$auto(0x8000000000000, 0x400008, 0xdf, 0x9b72, r2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRES64=r2, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) 5.892933021s ago: executing program 4 (id=11552): r0 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0xa8000, 0x0) mmap$auto(0x200000000000000, 0x2020009, 0x3, 0xeb1, r0, 0x100000000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) r2 = syz_clone(0x20011, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x4206, r2, 0x0, 0x200005) waitid$auto_P_ALL(0x0, 0x5, 0x0, 0x8, 0x0) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x141241, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000000001) clone$auto(0x8ffe, 0xbc2, 0xffffffffffffffff, 0xfffffffffffffffc, 0x400) select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x3, 0x1, 0xdd, 0x1000000000000004, 0x15f4da0a, 0x4000000400039, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) shutdown$auto(0x200000003, 0x2) 5.15228585s ago: executing program 1 (id=11553): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa200, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) sendmmsg$auto(r0, 0x0, 0x4, 0x4008) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) setfsuid$auto(0xee00) setfsuid$auto(0xee01) ioctl$auto(r1, 0x89f2, 0x24) 4.976490315s ago: executing program 4 (id=11554): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xa2) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x80000000) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmsg$auto_NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x4048090) getpgrp(0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) 4.946874573s ago: executing program 5 (id=11555): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) fstatfs$auto(0xffffffffffffffff, &(0x7f0000000140)={0x8001, 0x100000000000, 0x1, 0x9, 0x5d, 0x2, 0x75, {[0x80000000]}, 0x0, 0x7ff, 0x68a6, [0x5, 0x8, 0x5, 0x4]}) sysfs$auto(0x2, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x40}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x45}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000850}, 0xc08c) setitimer$auto(0x9, &(0x7f0000000140)={{0x3, 0x1}, {0xfffffffffffffffc, 0x8}}, &(0x7f0000000180)={{0x7, 0x230d}, {0x5, 0x148}}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000001380)={{&(0x7f00000001c0), 0x6c8, 0x0, 0x9, &(0x7f0000001300), 0xf55c, 0xffffffff}, 0xa00}, 0x7, 0x1) sendfile$auto(0x3, r1, 0x0, 0x400000000006) socket(0x18, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x202, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb2, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x81004000000008dd, 0x1000000eb1, r3, 0x0) 4.560329289s ago: executing program 3 (id=11556): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/smaps\x00', 0x10083, 0x0) 3.951958041s ago: executing program 1 (id=11557): ioctl$auto_FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) select$auto(0xe, 0x0, 0x0, &(0x7f0000000000)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x100, 0xd08, 0xc, 0x200000000000c, 0x0, 0x6d2f, 0xffffffffffffff00, 0x2, 0x4000000000000d]}, 0x0) socket(0x2c, 0x1, 0x4004) getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setregid$auto(0xee01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 3.58214169s ago: executing program 5 (id=11558): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0xff) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 3.415986225s ago: executing program 4 (id=11559): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) userfaultfd$auto(0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x3, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x68, 0x0) r0 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x3, 0x0, 0x7) 3.305899722s ago: executing program 5 (id=11560): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x10, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE_OLD(r0, 0x5422, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000002dc0)='/dev/adsp1\x00', 0x2401, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) write$auto(r1, 0x0, 0x6051) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) 3.102662363s ago: executing program 3 (id=11561): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) socket(0x2, 0x4, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) landlock_restrict_self$auto(0xffffffffffffffff, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0xa, 0x3) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) ioctl$auto(r2, 0x4b67, 0x1) 2.475537818s ago: executing program 4 (id=11562): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socket(0xa, 0x80000, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setuid$auto(0x800000000008) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) setns$auto(r0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = clone$auto(0x20003b4a, 0xecc, 0x0, 0x0, 0x2) r2 = pidfd_open$auto(r1, 0x0) setns(r2, 0x20000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) 2.475250581s ago: executing program 1 (id=11563): socket(0xa, 0x2, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, 0x0, 0xc050) fsconfig$auto(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22100, 0x0) socket(0x10, 0x2, 0x14) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000000)=@l2={0x1f, 0x2, @none, 0x40, 0x1}, 0x6a) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/udp\x00', 0x80, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x3, 0x0, 0x4b1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x1000000000400) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x0, 0xfffffffffffff000, 0x0) ioctl$auto_TIOCGPTPEER(r2, 0x5441, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/rcutree/parameters/do_rcu_barrier\x00', 0x808882, 0x0) write$auto(r3, &(0x7f00000004c0)='1\x00\\\xa0\x04|\xfd\xca\x12\xfa\b\x1c\xc7k\x923\xe05\"3n\x84n#\xd1\xcaso\v\xf0\xda\xbb\x86\xbcX\xb4\x999\\\xa8&;<\xca\xa8\x05\x9d\x9e-\xc3\x93\xaa\xda\x02\x03\xddUbHu\x01\x00\x00\x00\xac\xa7\x93T\aA\xbd\xc0\xb8K\xd7\xed\xcbP\xa1\xfe\xc7\xa1\x8b\xa7\x02\xad\xbc\xfaq*0F\xff&\xbb+\x9b\xe2\xbfd\xf7\xde\xb40\x1d=\x99\xe2\x06\xbf\x9cNS\xbf\x82\x9c\xfb', 0x3) 1.987963812s ago: executing program 5 (id=11564): ioctl$auto_FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) write$auto(0xffffffffffffffff, 0x0, 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) select$auto(0xe, 0x0, 0x0, &(0x7f0000000000)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x100, 0xd08, 0xc, 0x200000000000c, 0x0, 0x6d2f, 0xffffffffffffff00, 0x2, 0x4000000000000d]}, 0x0) socket(0x2c, 0x1, 0x4004) getsockopt$auto(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) setregid$auto(0xee01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1.566354117s ago: executing program 3 (id=11565): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|3\x1ck\x00'/24, 0x5) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/40, 0x28) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) userfaultfd$auto(0x816) mlockall$auto(0x7) mprotect$auto(0x0, 0x8000000000000001, 0x6) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0xffc, 0x100000004, 0x100000002, 0x0, 0x7ff, 0x5) setuid$auto(0xe) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r2, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008880) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f000000a600)={0x114c, r3, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xc}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0x10, 0xbb, "ab45ba42ee1c7190aeeacc67"}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x9}, @NL80211_ATTR_STA_FLAGS2={0xf24, 0x43, "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"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xace}, @NL80211_ATTR_MBSSID_ELEMS={0x14c, 0x133, 0x0, 0x1, [@nested={0xbf, 0xa7, 0x0, 0x1, [@generic="aa1cf3d4514d0b98612432ebc4b177cff0c708913835ff01f80a48de547ca2", @typed={0x8, 0x88, 0x0, 0x0, @fd}, @generic="b38cec191855bd597456f11b40619b05976d1f578409dab1b702f339c2a2ae78e1899ec707e196aa9f112bd2405ac9ad6a9b66d3ecd53a8e70d3bc8984c16d4092d162292864ca2274267c293459ad11ffbf1dc38d0fc404ba1e1ae318b41f8e60c35571b629063d780f0c019a60886cc1e43f12ce0509df3d03037ffaf1b3f7b2cc6991cf02687276db5f636ffd5d701933362a"]}, @nested={0x4, 0x115}, @generic="629d77c5f3b52399d9bb0146f78339e2e6847b67c11539b7560a619ba6edec0d424015b530d6b3b6852c7e5a9c6ff302bf1f1640314ef41a3de1d30422a187ce257f9325e0114edca5ffebe566feec869fe2c79f621544554a6eb35c2e53ac251e35f94351f141a073f1bd36876a5f5c55b875d43f92d68adc296e72c2912292", @generic, @nested={0x4, 0xa2}]}, @NL80211_ATTR_SCAN_SSIDS={0x31, 0x2d, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="78ad4de8f1900fb130a71565a2d984fa62", @typed={0x14, 0x107, 0x0, 0x0, @ipv6=@empty}]}, @NL80211_ATTR_MPATH_NEXT_HOP={0x52, 0x1a, "c5c5e14497de61402a3812d43f6740ee9d1f91fd3aa535faaa88531689270d67f818e4f1ea1c5ae8593e6851752948791fff5087c29f0962cbc3c386f81d42db0338a9f1bba496ef3c4e987ed86b"}, @NL80211_ATTR_SSID={0x15, 0x34, "2c20b88d68a872eb2cd7fca146a341b2c1"}]}, 0x114c}, 0x1, 0x0, 0x0, 0x80}, 0x8844) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xa, 0x2, 0x88) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) 974.327472ms ago: executing program 3 (id=11566): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40000000000eb1, r0, 0x8100) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000200), r2) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1, 0x202000a, 0xfffffffc, 0xdc, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x440001, 0x0) fadvise64$auto_POSIX_FADV_RANDOM(r3, 0x7fffffff, 0x80000001, 0x1) 948.130535ms ago: executing program 1 (id=11567): mmap$auto(0x0, 0x420009, 0xe3, 0x200000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) r0 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x10001) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x2000000}, 0x68) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)={0x5, 0x0, "460ddfc9cb1303e3cb3cb8b78d079250", "b31c382ff7d56364e0d26c7bab8b9e20", "1cafd62b30b2a903dc9a085d9ee0ba162b8330330b264a6a74409a4ce590c4bf", "4e1dbeb57bd17e7c7df1e91365edf04778bc5c1a207095281af9278eb83923bbf15705e9d6f6d69577746d87e49fc720f84fa8577721a04d7c92008bdccfe0090e2d5114ca8d8f294a9eea52b03f0017", "b95bae6d60a3bd673b7cd01cd90c770d", "73f8c280acd3ce3001b3a8a94118e117be5144b4e4569b698f3e26158aa7de1ae9d6274479386aaa7bfbe85c3087831e36a9f252656920847a297220836f4c645eb7665ed896caf88adae98b80ddf64f", "a732243deb65abbae48d3956d6c4c5a6c41d4d421f628112b85322a66e52583a837076fd6605f062c4b467eaa614bb31d9fbc8504b7e811603745b4295f60dfdc01f6465e71577802a14d1c44125d0eead606d4bb97c3e22fadff9c6807177168fda3f963c1a028ed4f5087d740239e850adc1b558578c1b7a4f8347df90a31a"}) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r3, &(0x7f0000000000)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6071e1dcedc5f00e8fdffff00c291dfb40000d401d5f8673c6ed5a5aa78041e7f6e", 0x38) mmap$auto(0x0, 0x2000a, 0x20010000000000df, 0x18, 0x401, 0x4) getsockopt$auto_SO_PEERCRED(r2, 0x6, 0x11, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', &(0x7f00000000c0)=0x13) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x7, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x1f1d02, 0x0) mbind$auto(0x2000, 0x800000100000004, 0x100000000, 0x0, 0x1003, 0x2) mlock$auto(0xfbe8, 0x4) 4.189324ms ago: executing program 4 (id=11568): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/usbip-vudc.0/dev_desc\x00', 0x200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unlinkat$auto(r0, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)=@batch={0xc0cb, 0x5, 0xd3f, 0x80000000, 0x2, 0xffffffffffffffff, 0xe5a6, 0xff}, 0x4) mknod$auto(0x0, 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) 0s ago: executing program 5 (id=11569): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001280)={&(0x7f0000001140)=ANY=[@ANYBLOB="c98681e4", @ANYRES16=r4, @ANYBLOB="080027bd7000fddbdf2569000000060065000900000006004f01090000001700130013c366f9244357d432f6e44cc4bf4e5878fe5d00080002002f247b0005006000080000000500a3000200000045001f00ff8ddbe0dca3a0c40b31575a0fc89a052ad1070f85525f215dde201061c7ecbce4e876ab8d9dd571ee3b51789e3654f47243f6e34471afffdadef51ab57ef583e90000005c007580ba6aeb15a3f761572ca4eb336e5dfaa39a4e112524144c26d5a6468d0f3a3919ee7a2bf863f683c121bc3b2170c49b100b274baaf7e35af6d0f2356f99129b14dfb3c040f557f81b08003800000400000800e600", @ANYRES32=r1, @ANYBLOB="05008a00080000000500f60007000000"], 0x108}, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r0, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r0, 0x2, 0x9193) kernel console output (not intermixed with test programs): m_cache_alloc_noprof+0x7b/0x6e0 [ 1431.426943][ T2545] ? __kernfs_new_node+0xd2/0x960 [ 1431.426976][ T2545] __kernfs_new_node+0xd2/0x960 [ 1431.427007][ T2545] ? __pfx___kernfs_new_node+0x10/0x10 [ 1431.427046][ T2545] ? find_held_lock+0x2b/0x80 [ 1431.427065][ T2545] ? kernfs_root+0xee/0x2a0 [ 1431.427092][ T2545] ? kernfs_root+0xee/0x2a0 [ 1431.427124][ T2545] kernfs_new_node+0x11b/0x1a0 [ 1431.427147][ T2545] __kernfs_create_file+0x53/0x350 [ 1431.427172][ T2545] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1431.427205][ T2545] internal_create_group+0x593/0xf40 [ 1431.427240][ T2545] ? __pfx_internal_create_group+0x10/0x10 [ 1431.427274][ T2545] ? kernfs_create_link+0x1bd/0x240 [ 1431.427301][ T2545] internal_create_groups+0x9d/0x150 [ 1431.427333][ T2545] device_add+0x77a/0x1950 [ 1431.427361][ T2545] ? __pfx_device_add+0x10/0x10 [ 1431.427384][ T2545] ? __pfx___might_resched+0x10/0x10 [ 1431.427411][ T2545] ? lockdep_hardirqs_on+0x78/0x100 [ 1431.427438][ T2545] __add_disk+0x518/0xe40 [ 1431.427467][ T2545] add_disk_fwnode+0x118/0x5c0 [ 1431.427491][ T2545] loop_add+0x90b/0xb60 [ 1431.427519][ T2545] ? __pfx_loop_add+0x10/0x10 [ 1431.427561][ T2545] ? __x64_sys_close_range+0x2d9/0x5d0 [ 1431.427587][ T2545] loop_control_ioctl+0xae/0x620 [ 1431.427617][ T2545] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1431.427647][ T2545] ? xfd_validate_state+0x129/0x190 [ 1431.427677][ T2545] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1431.427708][ T2545] __x64_sys_ioctl+0x18e/0x210 [ 1431.427738][ T2545] do_syscall_64+0x106/0xf80 [ 1431.427756][ T2545] ? clear_bhb_loop+0x40/0x90 [ 1431.427779][ T2545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.427798][ T2545] RIP: 0033:0x7f9770f9c819 [ 1431.427815][ T2545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.427833][ T2545] RSP: 002b:00007f9771e13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1431.427851][ T2545] RAX: ffffffffffffffda RBX: 00007f9771215fa0 RCX: 00007f9770f9c819 [ 1431.427863][ T2545] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000001 [ 1431.427874][ T2545] RBP: 00007f9771032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1431.427892][ T2545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1431.427903][ T2545] R13: 00007f9771216038 R14: 00007f9771215fa0 R15: 00007fff35e32218 [ 1431.427927][ T2545] [ 1432.027143][ T1166] Bluetooth: hci1: command 0x0c1a tx timeout [ 1432.033218][ T1166] Bluetooth: hci3: command 0x0406 tx timeout [ 1432.043726][ T1166] Bluetooth: hci2: command 0x0c1a tx timeout [ 1433.077539][T31448] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 1433.077567][T31448] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 1433.093395][T31448] Bluetooth: hci3: Dropping invalid advertising data [ 1433.100478][T31448] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 1433.100506][T31448] Bluetooth: hci3: Dropping invalid advertising data [ 1433.115215][T31448] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1434.006670][ T2585] Loading of unsigned module is rejected [ 1434.778926][ T2596] Loading of unsigned module is rejected [ 1435.839304][ T2613] Loading of unsigned module is rejected [ 1436.390210][ T2626] FAULT_INJECTION: forcing a failure. [ 1436.390210][ T2626] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.452979][ T2626] CPU: 0 UID: 0 PID: 2626 Comm: syz.1.10411 Tainted: G L syzkaller #0 PREEMPT(full) [ 1436.453010][ T2626] Tainted: [L]=SOFTLOCKUP [ 1436.453018][ T2626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1436.453029][ T2626] Call Trace: [ 1436.453036][ T2626] [ 1436.453044][ T2626] dump_stack_lvl+0x100/0x190 [ 1436.453076][ T2626] should_fail_ex.cold+0x5/0xa [ 1436.453099][ T2626] should_failslab+0xc2/0x120 [ 1436.453122][ T2626] __kvmalloc_node_noprof+0xfa/0xa00 [ 1436.453141][ T2626] ? sbitmap_init_node+0x1cc/0x720 [ 1436.453176][ T2626] sbitmap_init_node+0x1cc/0x720 [ 1436.453214][ T2626] sbitmap_queue_init_node+0x40/0x4a0 [ 1436.453248][ T2626] blk_mq_init_tags+0x184/0x300 [ 1436.453273][ T2626] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 1436.453296][ T2626] ? blk_mq_update_queue_map+0x227/0x3a0 [ 1436.453321][ T2626] blk_mq_alloc_tag_set+0x848/0x1330 [ 1436.453353][ T2626] loop_add+0x3b7/0xb60 [ 1436.453381][ T2626] ? __pfx_loop_add+0x10/0x10 [ 1436.453427][ T2626] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1436.453453][ T2626] loop_control_ioctl+0xae/0x620 [ 1436.453483][ T2626] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1436.453511][ T2626] ? xfd_validate_state+0x129/0x190 [ 1436.453541][ T2626] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1436.453571][ T2626] __x64_sys_ioctl+0x18e/0x210 [ 1436.453600][ T2626] do_syscall_64+0x106/0xf80 [ 1436.453619][ T2626] ? clear_bhb_loop+0x40/0x90 [ 1436.453641][ T2626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.453660][ T2626] RIP: 0033:0x7efc16b9c819 [ 1436.453677][ T2626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1436.453694][ T2626] RSP: 002b:00007efc17ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1436.453713][ T2626] RAX: ffffffffffffffda RBX: 00007efc16e15fa0 RCX: 00007efc16b9c819 [ 1436.453726][ T2626] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 1436.453738][ T2626] RBP: 00007efc16c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1436.453750][ T2626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1436.453762][ T2626] R13: 00007efc16e16038 R14: 00007efc16e15fa0 R15: 00007ffcc2d26038 [ 1436.453786][ T2626] [ 1436.679133][ T2626] blk-mq: reduced tag depth (128 -> 64) [ 1437.022911][ C0] vcan0: j1939_tp_rxtimer: 0xffff888042f32800: rx timeout, send abort [ 1437.038534][ T5175] ERROR: Out of memory at tomoyo_memory_ok. [ 1437.531182][ C0] vcan0: j1939_tp_rxtimer: 0xffff888042f32800: abort rx timeout. Force session deactivation [ 1438.135207][ T2647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10414'. [ 1438.366041][ T2656] Loading of unsigned module is rejected [ 1438.738746][ T2664] binder: 2663:2664 ioctl c018620c 200000000040 returned -22 [ 1439.446447][ T2676] can0: slcan on ttyS2. [ 1439.780679][ T2687] FAULT_INJECTION: forcing a failure. [ 1439.780679][ T2687] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.837938][ T2672] can0 (unregistered): slcan off ttyS2. [ 1439.883017][ T2687] CPU: 0 UID: 0 PID: 2687 Comm: syz.1.10423 Tainted: G L syzkaller #0 PREEMPT(full) [ 1439.883050][ T2687] Tainted: [L]=SOFTLOCKUP [ 1439.883057][ T2687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1439.883069][ T2687] Call Trace: [ 1439.883076][ T2687] [ 1439.883083][ T2687] dump_stack_lvl+0x100/0x190 [ 1439.883116][ T2687] should_fail_ex.cold+0x5/0xa [ 1439.883138][ T2687] should_failslab+0xc2/0x120 [ 1439.883161][ T2687] __kvmalloc_node_noprof+0xfa/0xa00 [ 1439.883179][ T2687] ? sbitmap_init_node+0x1cc/0x720 [ 1439.883215][ T2687] sbitmap_init_node+0x1cc/0x720 [ 1439.883247][ T2687] sbitmap_queue_init_node+0x40/0x4a0 [ 1439.883280][ T2687] blk_mq_init_tags+0x184/0x300 [ 1439.883304][ T2687] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 1439.883327][ T2687] ? blk_mq_update_queue_map+0x227/0x3a0 [ 1439.883356][ T2687] blk_mq_alloc_tag_set+0x848/0x1330 [ 1439.883384][ T2687] loop_add+0x3b7/0xb60 [ 1439.883412][ T2687] ? __pfx_loop_add+0x10/0x10 [ 1439.883453][ T2687] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1439.883477][ T2687] loop_control_ioctl+0xae/0x620 [ 1439.883507][ T2687] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1439.883537][ T2687] ? xfd_validate_state+0x129/0x190 [ 1439.883567][ T2687] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1439.883597][ T2687] __x64_sys_ioctl+0x18e/0x210 [ 1439.883626][ T2687] do_syscall_64+0x106/0xf80 [ 1439.883645][ T2687] ? clear_bhb_loop+0x40/0x90 [ 1439.883668][ T2687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.883687][ T2687] RIP: 0033:0x7efc16b9c819 [ 1439.883703][ T2687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.883721][ T2687] RSP: 002b:00007efc17ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1439.883740][ T2687] RAX: ffffffffffffffda RBX: 00007efc16e15fa0 RCX: 00007efc16b9c819 [ 1439.883752][ T2687] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 1439.883764][ T2687] RBP: 00007efc16c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1439.883782][ T2687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1439.883793][ T2687] R13: 00007efc16e16038 R14: 00007efc16e15fa0 R15: 00007ffcc2d26038 [ 1439.883817][ T2687] [ 1439.883934][ T2687] blk-mq: reduced tag depth (128 -> 64) [ 1441.170957][ T2720] netlink: 'syz.3.10430': attribute type 1 has an invalid length. [ 1441.242451][ T2720] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10430'. [ 1441.701581][ T2736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10431'. [ 1442.063329][ T29] audit: type=1800 audit(2147483843.670:30): pid=2735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10429" name="dbroot" dev="configfs" ino=147495 res=0 errno=0 [ 1442.201676][ T2736] veth1_macvtap: left promiscuous mode [ 1443.458698][ T2770] FAULT_INJECTION: forcing a failure. [ 1443.458698][ T2770] name failslab, interval 1, probability 0, space 0, times 0 [ 1443.634436][ T2770] CPU: 0 UID: 0 PID: 2770 Comm: syz.0.10433 Tainted: G L syzkaller #0 PREEMPT(full) [ 1443.634469][ T2770] Tainted: [L]=SOFTLOCKUP [ 1443.634476][ T2770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1443.634487][ T2770] Call Trace: [ 1443.634493][ T2770] [ 1443.634501][ T2770] dump_stack_lvl+0x100/0x190 [ 1443.634534][ T2770] should_fail_ex.cold+0x5/0xa [ 1443.634557][ T2770] ? __register_sysctl_table+0xac/0x1650 [ 1443.634577][ T2770] should_failslab+0xc2/0x120 [ 1443.634599][ T2770] __kmalloc_noprof+0xe0/0x850 [ 1443.634633][ T2770] __register_sysctl_table+0xac/0x1650 [ 1443.634652][ T2770] ? is_module_address+0x5f/0xf0 [ 1443.634682][ T2770] ? __pfx___register_sysctl_table+0x10/0x10 [ 1443.634701][ T2770] ? is_module_address+0x69/0xf0 [ 1443.634741][ T2770] ? register_net_sysctl_sz+0x222/0x430 [ 1443.634766][ T2770] ? __asan_memcpy+0x3c/0x60 [ 1443.634797][ T2770] xfrm_sysctl_init+0x1f5/0x2d0 [ 1443.634825][ T2770] xfrm_net_init+0x856/0xcf0 [ 1443.634855][ T2770] ? __pfx_xfrm_net_init+0x10/0x10 [ 1443.634879][ T2770] ops_init+0x1e2/0x5f0 [ 1443.634901][ T2770] setup_net+0x118/0x3a0 [ 1443.634920][ T2770] ? __pfx_setup_net+0x10/0x10 [ 1443.634937][ T2770] ? lockdep_init_map_type+0x5c/0x250 [ 1443.634965][ T2770] ? mutex_init_lockep+0x110/0x150 [ 1443.634998][ T2770] copy_net_ns+0x46f/0x7c0 [ 1443.635021][ T2770] create_new_namespaces+0x3ea/0xac0 [ 1443.635047][ T2770] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1443.635070][ T2770] ksys_unshare+0x473/0xad0 [ 1443.635096][ T2770] ? __pfx_ksys_unshare+0x10/0x10 [ 1443.635129][ T2770] __x64_sys_unshare+0x31/0x40 [ 1443.635153][ T2770] do_syscall_64+0x106/0xf80 [ 1443.635171][ T2770] ? clear_bhb_loop+0x40/0x90 [ 1443.635194][ T2770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1443.635213][ T2770] RIP: 0033:0x7f9770f9c819 [ 1443.635230][ T2770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1443.635248][ T2770] RSP: 002b:00007f9771e13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1443.635267][ T2770] RAX: ffffffffffffffda RBX: 00007f9771215fa0 RCX: 00007f9770f9c819 [ 1443.635279][ T2770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1443.635290][ T2770] RBP: 00007f9771032c91 R08: 0000000000000000 R09: 0000000000000000 [ 1443.635302][ T2770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1443.635312][ T2770] R13: 00007f9771216038 R14: 00007f9771215fa0 R15: 00007fff35e32218 [ 1443.635336][ T2770] [ 1446.052431][ T2803] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1447.157585][T27742] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1447 with max blocks 2 with error 117 [ 1447.221632][T27742] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1447.221632][T27742] [ 1447.388363][ T2826] Loading of unsigned module is rejected [ 1448.131842][ T2833] Loading of unsigned module is rejected [ 1449.637591][ T2873] FAULT_INJECTION: forcing a failure. [ 1449.637591][ T2873] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.709153][ T2873] CPU: 0 UID: 0 PID: 2873 Comm: syz.1.10453 Tainted: G L syzkaller #0 PREEMPT(full) [ 1449.709184][ T2873] Tainted: [L]=SOFTLOCKUP [ 1449.709191][ T2873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1449.709202][ T2873] Call Trace: [ 1449.709209][ T2873] [ 1449.709216][ T2873] dump_stack_lvl+0x100/0x190 [ 1449.709250][ T2873] should_fail_ex.cold+0x5/0xa [ 1449.709272][ T2873] should_failslab+0xc2/0x120 [ 1449.709295][ T2873] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1449.709322][ T2873] ? kvm_uevent_notify_change.part.0+0x2a6/0x450 [ 1449.709352][ T2873] kvm_uevent_notify_change.part.0+0x2a6/0x450 [ 1449.709379][ T2873] ? __pfx_kvm_vm_release+0x10/0x10 [ 1449.709400][ T2873] kvm_put_kvm+0xe4/0xb10 [ 1449.709421][ T2873] ? lockdep_hardirqs_on+0x78/0x100 [ 1449.709440][ T2873] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1449.709469][ T2873] ? __pfx_kvm_vm_release+0x10/0x10 [ 1449.709490][ T2873] kvm_vm_release+0x3c/0x50 [ 1449.709510][ T2873] __fput+0x3ff/0xb40 [ 1449.709538][ T2873] task_work_run+0x150/0x240 [ 1449.709566][ T2873] ? __pfx_task_work_run+0x10/0x10 [ 1449.709600][ T2873] exit_to_user_mode_loop+0x100/0x4a0 [ 1449.709628][ T2873] do_syscall_64+0x668/0xf80 [ 1449.709645][ T2873] ? clear_bhb_loop+0x40/0x90 [ 1449.709669][ T2873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.709688][ T2873] RIP: 0033:0x7efc16b9c819 [ 1449.709704][ T2873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1449.709721][ T2873] RSP: 002b:00007efc17ac3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1449.709749][ T2873] RAX: 0000000000000000 RBX: 00007efc16e15fa0 RCX: 00007efc16b9c819 [ 1449.709761][ T2873] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1449.709772][ T2873] RBP: 00007efc16c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1449.709783][ T2873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1449.709795][ T2873] R13: 00007efc16e16038 R14: 00007efc16e15fa0 R15: 00007ffcc2d26038 [ 1449.709818][ T2873] [ 1451.323866][ T2890] Loading of unsigned module is rejected [ 1452.378930][ T2894] netlink: 334 bytes leftover after parsing attributes in process `syz.2.10458'. [ 1452.575743][ T2903] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=538976288 (1077952576 ns) > initial count (3830 ns). Using initial count to start timer. [ 1453.093863][ T2917] ubi0: attaching mtd0 [ 1453.129127][ T2917] ubi0: scanning is finished [ 1453.133770][ T2917] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1453.479751][ T2917] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1454.100159][T31448] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 1454.100189][T31448] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 1454.117914][T31448] Bluetooth: hci0: Dropping invalid advertising data [ 1454.124756][T31448] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 1454.124781][T31448] Bluetooth: hci0: Dropping invalid advertising data [ 1454.139020][T31448] Bluetooth: hci0: Malformed LE Event: 0x02 [ 1457.652210][ T2972] ubi6: attaching mtd3 [ 1457.664719][ T2972] ubi6 error: ubi_attach_mtd_dev: bad VID header (9) or data offsets (73) [ 1458.606169][ T2989] netlink: 338 bytes leftover after parsing attributes in process `syz.0.10480'. [ 1459.749602][ T2920] Process accounting paused [ 1460.815700][ T3011] Loading of unsigned module is rejected [ 1461.425596][ T3019] can0: slcan on ttyS2. [ 1461.679464][ T3025] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 1461.699371][ T3017] can0 (unregistered): slcan off ttyS2. [ 1464.727960][ T3093] netlink: 334 bytes leftover after parsing attributes in process `syz.1.10503'. [ 1465.269210][ T3107] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.10506: iget: checksum invalid [ 1465.406889][ T3107] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1465.542424][ T3107] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.10506: iget: checksum invalid [ 1465.636418][ T3107] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1465.731820][ T3107] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.10506: iget: checksum invalid [ 1465.833492][ T3107] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1465.986195][ T3107] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.10506: iget: checksum invalid [ 1466.104863][ T3107] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1466.164060][ T3107] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1466.206297][ T3107] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1466.891403][ T3130] Loading of unsigned module is rejected [ 1467.369807][ T3143] netlink: 9 bytes leftover after parsing attributes in process `syz.2.10516'. [ 1467.528412][ T3149] netlink: 334 bytes leftover after parsing attributes in process `syz.3.10515'. [ 1467.822593][T31448] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 1467.822622][T31448] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 1467.839386][T31448] Bluetooth: hci2: Dropping invalid advertising data [ 1467.846083][T31448] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 1467.846108][T31448] Bluetooth: hci2: Dropping invalid advertising data [ 1467.860068][T31448] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1473.691399][ T3186] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 1473.716082][ T3190] Loading of unsigned module is rejected [ 1473.784012][ T3186] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 1473.863957][ T3186] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 1474.482740][ T1166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1474.492791][ T1166] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1474.504485][ T1166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1474.512317][ T1166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1474.523728][ T1166] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1475.156897][ T3207] chnl_net:caif_netlink_parms(): no params data found [ 1475.605473][ T3207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.636160][ T3207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.665813][ T3207] bridge_slave_0: entered allmulticast mode [ 1475.679235][ T3207] bridge_slave_0: entered promiscuous mode [ 1475.709250][ T3207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.722745][ T3207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.767337][ T3207] bridge_slave_1: entered allmulticast mode [ 1475.784946][ T3207] bridge_slave_1: entered promiscuous mode [ 1475.888820][ T3207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1475.940105][ T3207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.049490][ T3207] team0: Port device team_slave_0 added [ 1476.084680][ T3207] team0: Port device team_slave_1 added [ 1476.259391][ T29] audit: type=1800 audit(2147483877.860:31): pid=3226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10532" name="dbroot" dev="configfs" ino=150326 res=0 errno=0 [ 1476.282511][ T3226] db_root: cannot open: /dev/audio1 [ 1476.297309][ T3226] db_root: not a directory: /dev/audio1 [ 1476.307630][ T3207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1476.327779][ T3207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1476.424557][ T3207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1476.517303][ T3207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1476.547508][ T3207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1476.600782][ T1166] Bluetooth: hci4: command tx timeout [ 1476.681316][ T3207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1476.968405][ T3207] hsr_slave_0: entered promiscuous mode [ 1476.999897][ T3207] hsr_slave_1: entered promiscuous mode [ 1477.023227][ T3207] debugfs: 'hsr0' already exists in 'hsr' [ 1477.059660][ T3207] Cannot create hsr debugfs directory [ 1477.724488][ T155] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1447 with max blocks 2 with error 117 [ 1477.777140][ T155] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1477.777140][ T155] [ 1478.306207][ T3207] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1478.363499][ T3207] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1478.426380][ T3207] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1478.470492][ T3207] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1478.680294][ T1166] Bluetooth: hci4: command tx timeout [ 1478.852605][ T3207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.895601][ T3207] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.955889][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.963133][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1479.061426][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1479.068636][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1479.599798][ T3290] Loading of unsigned module is rejected [ 1479.924150][ T3207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1480.760377][ T1166] Bluetooth: hci4: command tx timeout [ 1480.852811][ T3207] veth0_vlan: entered promiscuous mode [ 1480.888352][ T3207] veth1_vlan: entered promiscuous mode [ 1480.989323][ T3207] veth0_macvtap: entered promiscuous mode [ 1481.028893][ T3207] veth1_macvtap: entered promiscuous mode [ 1481.111044][ T3207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1481.273669][ T3207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1481.344024][ T155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.372189][ T155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.423402][ T155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.472258][ T155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.621158][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1481.661699][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1481.728522][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1481.736371][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1481.853592][ T3207] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1482.342639][ T3331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10557'. [ 1482.532258][ T29] audit: type=1800 audit(2147483884.140:32): pid=3334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10551" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1482.838610][ T1166] Bluetooth: hci4: command tx timeout [ 1484.054349][ T3351] netlink: 25 bytes leftover after parsing attributes in process `syz.1.10554'. [ 1484.470413][ T3342] can: request_module (can-proto-3) failed. [ 1485.002248][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.008861][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.059252][ T3366] FAULT_INJECTION: forcing a failure. [ 1485.059252][ T3366] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.139369][ T3366] CPU: 0 UID: 0 PID: 3366 Comm: syz.1.10561 Tainted: G L syzkaller #0 PREEMPT(full) [ 1485.139401][ T3366] Tainted: [L]=SOFTLOCKUP [ 1485.139408][ T3366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1485.139419][ T3366] Call Trace: [ 1485.139429][ T3366] [ 1485.139437][ T3366] dump_stack_lvl+0x100/0x190 [ 1485.139485][ T3366] should_fail_ex.cold+0x5/0xa [ 1485.139508][ T3366] ? tomoyo_init_log+0x1224/0x20c0 [ 1485.139534][ T3366] should_failslab+0xc2/0x120 [ 1485.139557][ T3366] __kmalloc_noprof+0xe0/0x850 [ 1485.139592][ T3366] tomoyo_init_log+0x1224/0x20c0 [ 1485.139621][ T3366] ? number+0x983/0xc90 [ 1485.139645][ T3366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1485.139669][ T3366] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1485.139702][ T3366] tomoyo_write_log2+0x2ed/0xbc0 [ 1485.139736][ T3366] tomoyo_supervisor+0x15e/0x1340 [ 1485.139771][ T3366] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1485.139804][ T3366] ? tomoyo_realpath_from_path+0x19c/0x690 [ 1485.139839][ T3366] ? tomoyo_realpath_from_path+0x19c/0x690 [ 1485.139866][ T3366] ? kfree+0x1f6/0x6b0 [ 1485.139893][ T3366] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 1485.139923][ T3366] tomoyo_path_number_perm+0x445/0x580 [ 1485.139949][ T3366] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1485.139995][ T3366] ? find_held_lock+0x2b/0x80 [ 1485.140013][ T3366] ? current_check_access_path+0x281/0x460 [ 1485.140044][ T3366] ? d_alloc_parallel+0x864/0x14e0 [ 1485.140077][ T3366] tomoyo_path_mknod+0x164/0x190 [ 1485.140095][ T3366] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1485.140112][ T3366] ? find_held_lock+0x2b/0x80 [ 1485.140131][ T3366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1485.140155][ T3366] security_path_mknod+0x161/0x300 [ 1485.140184][ T3366] may_o_create+0x30/0x3a0 [ 1485.140213][ T3366] lookup_open.isra.0+0xa0d/0x11b0 [ 1485.140247][ T3366] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1485.140284][ T3366] ? __pfx___might_resched+0x10/0x10 [ 1485.140312][ T3366] ? mnt_get_write_access+0x52/0x2f0 [ 1485.140343][ T3366] ? __pfx_down_write+0x10/0x10 [ 1485.140362][ T3366] ? mnt_get_write_access+0x1e9/0x2f0 [ 1485.140392][ T3366] path_openat+0x2291/0x31a0 [ 1485.140420][ T3366] ? __pfx_path_openat+0x10/0x10 [ 1485.140449][ T3366] do_file_open+0x20e/0x430 [ 1485.140472][ T3366] ? __pfx_do_file_open+0x10/0x10 [ 1485.140515][ T3366] ? alloc_fd+0x476/0x790 [ 1485.140537][ T3366] ? do_getname+0x191/0x390 [ 1485.140564][ T3366] do_sys_openat2+0x10d/0x1e0 [ 1485.140590][ T3366] ? __pfx_do_sys_openat2+0x10/0x10 [ 1485.140624][ T3366] __x64_sys_openat+0x12d/0x210 [ 1485.140656][ T3366] ? __pfx___x64_sys_openat+0x10/0x10 [ 1485.140692][ T3366] do_syscall_64+0x106/0xf80 [ 1485.140709][ T3366] ? clear_bhb_loop+0x40/0x90 [ 1485.140735][ T3366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.140756][ T3366] RIP: 0033:0x7efc16b9c819 [ 1485.140773][ T3366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1485.140791][ T3366] RSP: 002b:00007efc17ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1485.140810][ T3366] RAX: ffffffffffffffda RBX: 00007efc16e15fa0 RCX: 00007efc16b9c819 [ 1485.140823][ T3366] RDX: 0000000000000043 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1485.140834][ T3366] RBP: 00007efc16c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1485.140846][ T3366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1485.140857][ T3366] R13: 00007efc16e16038 R14: 00007efc16e15fa0 R15: 00007ffcc2d26038 [ 1485.140881][ T3366] [ 1485.949801][ T1166] Bluetooth: hci3: unexpected event 0x0f length: 440 > 4 [ 1485.993038][ T3376] vivid-003: ================= START STATUS ================= [ 1486.027125][ T3376] vivid-003: Radio HW Seek Mode: Bounded [ 1486.037544][ T3376] vivid-003: Radio Programmable HW Seek: false [ 1486.043903][ T3376] vivid-003: RDS Rx I/O Mode: Block I/O [ 1486.087962][ T3376] vivid-003: Generate RBDS Instead of RDS: false [ 1486.104963][ T3376] vivid-003: RDS Reception: true [ 1486.110019][ T3376] vivid-003: RDS Program Type: 0 inactive [ 1486.125962][ T3376] vivid-003: RDS PS Name: inactive [ 1486.136069][ T3376] vivid-003: RDS Radio Text: inactive [ 1486.149075][ T3376] vivid-003: RDS Traffic Announcement: false inactive [ 1486.185925][ T3376] vivid-003: RDS Traffic Program: false inactive [ 1486.249527][ T3376] vivid-003: RDS Music: false inactive [ 1486.259345][ T3376] vivid-003: ================== END STATUS ================== [ 1486.468910][ T3387] Loading of unsigned module is rejected [ 1487.068337][ T3405] Loading of unsigned module is rejected [ 1488.539609][ T29] audit: type=1800 audit(2147483890.150:33): pid=3415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10571" name="dbroot" dev="configfs" ino=152060 res=0 errno=0 [ 1488.567478][ T3415] db_root: cannot open: /dev/audio1 [ 1488.585253][ T3415] db_root: not a directory: /dev/audio1 [ 1489.959966][T31448] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1489.969574][T31448] Bluetooth: hci3: Injecting HCI hardware error event [ 1489.978506][ T5833] Bluetooth: hci3: hardware error 0x00 [ 1490.140848][ T3456] Loading of unsigned module is rejected [ 1490.517221][ T1166] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1490.629652][ T3462] Loading of unsigned module is rejected [ 1492.039187][ T5833] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1492.420087][ T3492] Loading of unsigned module is rejected [ 1493.222814][ T3506] Loading of unsigned module is rejected [ 1493.523153][ T3512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10593'. [ 1493.568409][ T3512] bridge_slave_1 (unregistering): left allmulticast mode [ 1493.593508][ T3512] bridge_slave_1 (unregistering): left promiscuous mode [ 1493.644495][ T3512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.887162][ T3501] FAULT_INJECTION: forcing a failure. [ 1493.887162][ T3501] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1493.970227][ T3501] CPU: 0 UID: 0 PID: 3501 Comm: syz.1.10589 Tainted: G L syzkaller #0 PREEMPT(full) [ 1493.970260][ T3501] Tainted: [L]=SOFTLOCKUP [ 1493.970267][ T3501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1493.970279][ T3501] Call Trace: [ 1493.970286][ T3501] [ 1493.970294][ T3501] dump_stack_lvl+0x100/0x190 [ 1493.970327][ T3501] should_fail_ex.cold+0x5/0xa [ 1493.970350][ T3501] get_futex_key+0x1d2/0x1620 [ 1493.970376][ T3501] ? __pfx_get_futex_key+0x10/0x10 [ 1493.970406][ T3501] futex_wait_setup+0x83/0x510 [ 1493.970442][ T3501] __futex_wait+0x19f/0x300 [ 1493.970479][ T3501] ? __pfx___futex_wait+0x10/0x10 [ 1493.970512][ T3501] ? __pfx_futex_wake_mark+0x10/0x10 [ 1493.970547][ T3501] ? find_held_lock+0x2b/0x80 [ 1493.970565][ T3501] ? futex_wake+0x456/0x530 [ 1493.970598][ T3501] futex_wait+0xed/0x380 [ 1493.970627][ T3501] ? __pfx_futex_wait+0x10/0x10 [ 1493.970661][ T3501] ? putname+0xb1/0x110 [ 1493.970681][ T3501] ? kmem_cache_free+0x124/0x6a0 [ 1493.970712][ T3501] do_futex+0x1ef/0x350 [ 1493.970737][ T3501] ? __pfx_do_futex+0x10/0x10 [ 1493.970760][ T3501] ? __pfx_do_sys_openat2+0x10/0x10 [ 1493.970787][ T3501] ? __fget_files+0x21f/0x3d0 [ 1493.970809][ T3501] __x64_sys_futex+0x34f/0x4d0 [ 1493.970835][ T3501] ? __x64_sys_openat+0x12d/0x210 [ 1493.970861][ T3501] ? __pfx___x64_sys_futex+0x10/0x10 [ 1493.970894][ T3501] do_syscall_64+0x106/0xf80 [ 1493.970912][ T3501] ? clear_bhb_loop+0x40/0x90 [ 1493.970935][ T3501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.970954][ T3501] RIP: 0033:0x7efc16b9c819 [ 1493.970971][ T3501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.970988][ T3501] RSP: 002b:00007efc17aa20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1493.971007][ T3501] RAX: ffffffffffffffda RBX: 00007efc16e16098 RCX: 00007efc16b9c819 [ 1493.971019][ T3501] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efc16e16098 [ 1493.971030][ T3501] RBP: 00007efc16e16090 R08: 0000000000000000 R09: 0000000000000000 [ 1493.971041][ T3501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1493.971052][ T3501] R13: 00007efc16e16128 R14: 00007ffcc2d25f50 R15: 00007ffcc2d26038 [ 1493.971075][ T3501] [ 1495.970039][ T3555] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 1496.126234][ T3555] netlink: 'syz.3.10601': attribute type 2 has an invalid length. [ 1496.211702][ T1166] Bluetooth: hci1: unexpected event 0x0f length: 440 > 4 [ 1496.212634][ T1166] Bluetooth: hci1: unexpected event for opcode 0x0010 [ 1498.056722][ T3591] netlink: 17 bytes leftover after parsing attributes in process `syz.1.10608'. [ 1498.306093][ T3594] [U]  [ 1498.308925][ T3594] [U] [ 1498.311640][ T3594] [U] [ 1498.314341][ T3594] [U] [ 1498.353045][ T3594] [U] [ 1498.355779][ T3594] [U] [ 1498.358469][ T3594] [U] [ 1498.361158][ T3594] [U] [ 1498.425504][ T3594] [U] [ 1498.428240][ T3594] [U] [ 1498.430933][ T3594] [U] [ 1498.433622][ T3594] [U] [ 1498.488505][ T3594] [U] [ 1498.491245][ T3594] [U] [ 1498.493938][ T3594] [U] [ 1498.496629][ T3594] [U] [ 1498.547610][ T3594] [U] [ 1498.550347][ T3594] [U] [ 1498.553040][ T3594] [U] [ 1498.555729][ T3594] [U] [ 1498.594091][ T3594] [U] [ 1498.596823][ T3594] [U] [ 1498.599515][ T3594] [U] [ 1498.602212][ T3594] [U] [ 1498.655277][ T3594] [U] [ 1498.658005][ T3594] [U] [ 1498.660715][ T3594] [U] [ 1498.663418][ T3594] [U] [ 1498.707275][ T3594] [U] [ 1498.710010][ T3594] [U] [ 1498.712703][ T3594] [U] [ 1498.715397][ T3594] [U] [ 1498.762797][ T3594] [U] [ 1498.765529][ T3594] [U] [ 1498.768221][ T3594] [U] [ 1498.770911][ T3594] [U] [ 1498.823157][ T3594] [U] [ 1498.825891][ T3594] [U] [ 1498.828581][ T3594] [U] [ 1498.831299][ T3594] [U] [ 1498.889205][ T3594] [U] [ 1498.891944][ T3594] [U] [ 1498.894652][ T3594] [U] [ 1498.897339][ T3594] [U] [ 1498.947311][ T3594] [U] [ 1498.950066][ T3594] [U] [ 1498.952757][ T3594] [U] [ 1498.955445][ T3594] [U] [ 1499.012115][ T3594] [U] [ 1499.014851][ T3594] [U] [ 1499.017551][ T3594] [U] [ 1499.020251][ T3594] [U] [ 1499.102741][ T3594] [U] [ 1499.105480][ T3594] [U] [ 1499.108169][ T3594] [U] [ 1499.110858][ T3594] [U] [ 1499.161150][ T3594] [U] [ 1499.163928][ T3594] [U] [ 1499.166631][ T3594] [U] [ 1499.169344][ T3594] [U] [ 1499.232340][ T3594] [U] [ 1499.376881][ T3611] __vm_enough_memory: pid: 3611, comm: syz.1.10612, bytes: 4398046511104 not enough memory for the allocation [ 1500.277986][ T1166] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1500.288228][ T1166] Bluetooth: hci1: Injecting HCI hardware error event [ 1500.296825][ T5833] Bluetooth: hci1: hardware error 0x00 [ 1500.421952][ T3618] netlink: 'syz.1.10614': attribute type 2 has an invalid length. [ 1500.470785][ T3620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10615'. [ 1500.497117][ T3618] netlink: 5 bytes leftover after parsing attributes in process `syz.1.10614'. [ 1501.293000][ T3632] sd 0:0:1:0: PR command failed: 1026 [ 1501.490435][ T3632] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1501.563578][ T3632] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1502.366042][ T5833] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1502.928589][ T5833] Bluetooth: hci4: unexpected event 0x3e length: 508 > 260 [ 1502.928619][ T5833] Bluetooth: hci4: unexpected subevent 0x02 length: 507 > 260 [ 1502.943705][ T5833] Bluetooth: hci4: Dropping invalid advertising data [ 1502.952662][ T5833] Bluetooth: hci4: unknown advertising packet type: 0xe9 [ 1502.952687][ T5833] Bluetooth: hci4: Dropping invalid advertising data [ 1502.967797][ T5833] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1503.527732][ T3644] sd 0:0:1:0: PR command failed: 1026 [ 1503.572940][ T3662] netlink: 318 bytes leftover after parsing attributes in process `syz.2.10625'. [ 1503.594131][ T3644] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1503.645071][ T3644] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1504.113625][ T3672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10627'. [ 1504.164513][ T3672] netlink: 'syz.4.10627': attribute type 1 has an invalid length. [ 1504.224618][ T3672] netlink: 51505 bytes leftover after parsing attributes in process `syz.4.10627'. [ 1504.623302][ T3679] FAULT_INJECTION: forcing a failure. [ 1504.623302][ T3679] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.648345][ T3680] netlink: 17 bytes leftover after parsing attributes in process `syz.4.10630'. [ 1504.716814][ T3679] CPU: 0 UID: 0 PID: 3679 Comm: syz.1.10629 Tainted: G L syzkaller #0 PREEMPT(full) [ 1504.716847][ T3679] Tainted: [L]=SOFTLOCKUP [ 1504.716854][ T3679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1504.716865][ T3679] Call Trace: [ 1504.716871][ T3679] [ 1504.716879][ T3679] dump_stack_lvl+0x100/0x190 [ 1504.716912][ T3679] should_fail_ex.cold+0x5/0xa [ 1504.716935][ T3679] should_failslab+0xc2/0x120 [ 1504.716956][ T3679] __kvmalloc_node_noprof+0xfa/0xa00 [ 1504.716975][ T3679] ? sbitmap_init_node+0x1cc/0x720 [ 1504.717016][ T3679] sbitmap_init_node+0x1cc/0x720 [ 1504.717049][ T3679] sbitmap_queue_init_node+0x40/0x4a0 [ 1504.717082][ T3679] blk_mq_init_tags+0x184/0x300 [ 1504.717106][ T3679] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 1504.717130][ T3679] ? blk_mq_update_queue_map+0x227/0x3a0 [ 1504.717155][ T3679] blk_mq_alloc_tag_set+0x848/0x1330 [ 1504.717183][ T3679] loop_add+0x3b7/0xb60 [ 1504.717211][ T3679] ? __pfx_loop_add+0x10/0x10 [ 1504.717253][ T3679] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1504.717277][ T3679] loop_control_ioctl+0xae/0x620 [ 1504.717307][ T3679] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1504.717336][ T3679] ? xfd_validate_state+0x129/0x190 [ 1504.717365][ T3679] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1504.717397][ T3679] __x64_sys_ioctl+0x18e/0x210 [ 1504.717427][ T3679] do_syscall_64+0x106/0xf80 [ 1504.717446][ T3679] ? clear_bhb_loop+0x40/0x90 [ 1504.717478][ T3679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.717498][ T3679] RIP: 0033:0x7efc16b9c819 [ 1504.717513][ T3679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.717531][ T3679] RSP: 002b:00007efc17ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1504.717550][ T3679] RAX: ffffffffffffffda RBX: 00007efc16e15fa0 RCX: 00007efc16b9c819 [ 1504.717562][ T3679] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 1504.717574][ T3679] RBP: 00007efc16c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1504.717585][ T3679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1504.717596][ T3679] R13: 00007efc16e16038 R14: 00007efc16e15fa0 R15: 00007ffcc2d26038 [ 1504.717620][ T3679] [ 1505.966835][ T3679] blk-mq: reduced tag depth (128 -> 64) [ 1506.376407][ T3713] sp0: Synchronizing with TNC [ 1507.684775][ T155] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 948 with max blocks 35 with error 117 [ 1507.743810][ T155] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1507.743810][ T155] [ 1508.019768][ T155] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1417 with max blocks 32 with error 117 [ 1508.101062][ T155] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1508.101062][ T155] [ 1508.783472][ T3757] FAULT_INJECTION: forcing a failure. [ 1508.783472][ T3757] name failslab, interval 1, probability 0, space 0, times 0 [ 1508.840035][ T3757] CPU: 0 UID: 0 PID: 3757 Comm: syz.1.10648 Tainted: G L syzkaller #0 PREEMPT(full) [ 1508.840068][ T3757] Tainted: [L]=SOFTLOCKUP [ 1508.840075][ T3757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1508.840087][ T3757] Call Trace: [ 1508.840094][ T3757] [ 1508.840102][ T3757] dump_stack_lvl+0x100/0x190 [ 1508.840135][ T3757] should_fail_ex.cold+0x5/0xa [ 1508.840159][ T3757] should_failslab+0xc2/0x120 [ 1508.840182][ T3757] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1508.840208][ T3757] ? tomoyo_write_log2+0x333/0xbc0 [ 1508.840240][ T3757] tomoyo_write_log2+0x333/0xbc0 [ 1508.840270][ T3757] tomoyo_supervisor+0x15e/0x1340 [ 1508.840306][ T3757] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1508.840345][ T3757] ? tomoyo_realpath_from_path+0x19c/0x690 [ 1508.840381][ T3757] ? tomoyo_realpath_from_path+0x19c/0x690 [ 1508.840408][ T3757] ? kfree+0x1f6/0x6b0 [ 1508.840435][ T3757] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 1508.840466][ T3757] tomoyo_path_number_perm+0x445/0x580 [ 1508.840491][ T3757] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1508.840522][ T3757] ? do_raw_spin_lock+0x128/0x260 [ 1508.840562][ T3757] ? find_held_lock+0x2b/0x80 [ 1508.840580][ T3757] ? __pfx_d_add+0x10/0x10 [ 1508.840603][ T3757] ? d_alloc+0x176/0x1e0 [ 1508.840623][ T3757] ? current_check_access_path+0x281/0x460 [ 1508.840655][ T3757] ? simple_lookup+0x105/0x1d0 [ 1508.840676][ T3757] tomoyo_path_mknod+0x164/0x190 [ 1508.840695][ T3757] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1508.840715][ T3757] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1508.840739][ T3757] security_path_mknod+0x161/0x300 [ 1508.840769][ T3757] filename_mknodat+0x241/0x7f0 [ 1508.840794][ T3757] ? __pfx_filename_mknodat+0x10/0x10 [ 1508.840816][ T3757] ? strncpy_from_user+0x19d/0x2d0 [ 1508.840842][ T3757] ? do_getname+0x191/0x390 [ 1508.840869][ T3757] __x64_sys_mknod+0x8f/0xc0 [ 1508.840891][ T3757] do_syscall_64+0x106/0xf80 [ 1508.840910][ T3757] ? clear_bhb_loop+0x40/0x90 [ 1508.840933][ T3757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.840958][ T3757] RIP: 0033:0x7efc16b9c819 [ 1508.840975][ T3757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.840993][ T3757] RSP: 002b:00007efc17aa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1508.841013][ T3757] RAX: ffffffffffffffda RBX: 00007efc16e16090 RCX: 00007efc16b9c819 [ 1508.841025][ T3757] RDX: 0000000000000009 RSI: 0000000000000002 RDI: 0000000000000000 [ 1508.841036][ T3757] RBP: 00007efc16c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1508.841047][ T3757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1508.841058][ T3757] R13: 00007efc16e16128 R14: 00007efc16e16090 R15: 00007ffcc2d26038 [ 1508.841082][ T3757] [ 1511.511289][ T3790] [U]  [ 1511.514131][ T3790] [U] [ 1511.516823][ T3790] [U] [ 1511.519512][ T3790] [U] [ 1511.573356][ T3790] [U] [ 1511.576091][ T3790] [U] [ 1511.578784][ T3790] [U] [ 1511.581491][ T3790] [U] [ 1511.648171][ T3790] [U] [ 1511.650923][ T3790] [U] [ 1511.653643][ T3790] [U] [ 1511.656369][ T3790] [U] [ 1511.707271][ T3790] [U] [ 1511.710012][ T3790] [U] [ 1511.712721][ T3790] [U] [ 1511.715591][ T3790] [U] [ 1511.751494][ T3790] [U] [ 1511.754263][ T3790] [U] [ 1511.756957][ T3790] [U] [ 1511.759647][ T3790] [U] [ 1511.820999][ T3790] [U] [ 1511.823766][ T3790] [U] [ 1511.826469][ T3790] [U] [ 1511.829162][ T3790] [U] [ 1511.869860][ T3790] [U] [ 1511.872764][ T3790] [U] [ 1511.875455][ T3790] [U] [ 1511.878144][ T3790] [U] [ 1511.922553][ T3790] [U] [ 1511.925282][ T3790] [U] [ 1511.927968][ T3790] [U] [ 1511.930685][ T3790] [U] [ 1511.972322][ T3790] [U] [ 1511.975062][ T3790] [U] [ 1511.977750][ T3790] [U] [ 1511.980438][ T3790] [U] [ 1512.017271][ T3790] [U] [ 1512.020011][ T3790] [U] [ 1512.022705][ T3790] [U] [ 1512.025393][ T3790] [U] [ 1512.074560][ T3790] [U] [ 1512.077305][ T3790] [U] [ 1512.080005][ T3790] [U] [ 1512.082703][ T3790] [U] [ 1512.117001][ T3790] [U] [ 1512.119740][ T3790] [U] [ 1512.122445][ T3790] [U] [ 1512.125152][ T3790] [U] [ 1512.168533][ T3790] [U] [ 1512.171279][ T3790] [U] [ 1512.173990][ T3790] [U] [ 1512.176689][ T3790] [U] [ 1512.213262][ T3790] [U] [ 1512.216004][ T3790] [U] [ 1512.218696][ T3790] [U] [ 1512.221469][ T3790] [U] [ 1512.325815][ T3790] [U] [ 1512.328554][ T3790] [U] [ 1512.331247][ T3790] [U] [ 1512.334027][ T3790] [U] [ 1512.423653][ T3790] [U] [ 1512.426392][ T3790] [U] [ 1512.429088][ T3790] [U] [ 1512.431778][ T3790] [U] [ 1512.473598][ T3790] [U] [ 1512.476336][ T3790] [U] [ 1512.479027][ T3790] [U] [ 1512.481724][ T3790] [U] [ 1512.545950][ T3790] [U] [ 1512.548688][ T3790] [U] [ 1512.551379][ T3790] [U] [ 1512.554063][ T3790] [U] [ 1512.597678][ T3790] [U] [ 1512.600410][ T3790] [U] [ 1512.603101][ T3790] [U] [ 1512.605808][ T3790] [U] [ 1512.647643][ T3790] [U] [ 1513.638271][ T5833] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1515.446154][ T3844] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1515.659373][ T3815] kexec: Could not allocate control_code_buffer [ 1516.365968][ T3856] FAULT_INJECTION: forcing a failure. [ 1516.365968][ T3856] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1516.457242][ T3856] CPU: 0 UID: 0 PID: 3856 Comm: syz.4.10670 Tainted: G L syzkaller #0 PREEMPT(full) [ 1516.457275][ T3856] Tainted: [L]=SOFTLOCKUP [ 1516.457282][ T3856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1516.457297][ T3856] Call Trace: [ 1516.457306][ T3856] [ 1516.457314][ T3856] dump_stack_lvl+0x100/0x190 [ 1516.457346][ T3856] should_fail_ex.cold+0x5/0xa [ 1516.457369][ T3856] get_futex_key+0x1d2/0x1620 [ 1516.457395][ T3856] ? __pfx_get_futex_key+0x10/0x10 [ 1516.457421][ T3856] ? find_held_lock+0x2b/0x80 [ 1516.457440][ T3856] ? __fget_files+0x215/0x3d0 [ 1516.457459][ T3856] ? __fget_files+0x215/0x3d0 [ 1516.457480][ T3856] futex_wake+0xea/0x530 [ 1516.457507][ T3856] ? __fget_files+0x21f/0x3d0 [ 1516.457527][ T3856] ? __pfx_futex_wake+0x10/0x10 [ 1516.457564][ T3856] ? fput+0x79/0x100 [ 1516.457586][ T3856] ? __sys_sendto+0x2bc/0x4b0 [ 1516.457615][ T3856] ? __pfx___sys_sendto+0x10/0x10 [ 1516.457645][ T3856] do_futex+0x32b/0x350 [ 1516.457672][ T3856] ? __pfx_do_futex+0x10/0x10 [ 1516.457703][ T3856] __x64_sys_futex+0x34f/0x4d0 [ 1516.457731][ T3856] ? __pfx___x64_sys_futex+0x10/0x10 [ 1516.457765][ T3856] do_syscall_64+0x106/0xf80 [ 1516.457788][ T3856] ? clear_bhb_loop+0x40/0x90 [ 1516.457811][ T3856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.457831][ T3856] RIP: 0033:0x7f33acf9c819 [ 1516.457848][ T3856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.457866][ T3856] RSP: 002b:00007f33adeb30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1516.457885][ T3856] RAX: ffffffffffffffda RBX: 00007f33ad216098 RCX: 00007f33acf9c819 [ 1516.457898][ T3856] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f33ad21609c [ 1516.457909][ T3856] RBP: 00007f33ad216090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.457920][ T3856] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1516.457932][ T3856] R13: 00007f33ad216128 R14: 00007fff917b9cd0 R15: 00007fff917b9db8 [ 1516.457956][ T3856] [ 1517.064310][ T3863] Loading of unsigned module is rejected [ 1518.024657][ T3883] ERROR: Out of memory at tomoyo_memory_ok. [ 1520.648048][ T3919] Loading of unsigned module is rejected [ 1522.584479][ T3953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10696'. [ 1522.637674][ T3953] netlink: 354 bytes leftover after parsing attributes in process `syz.3.10696'. [ 1523.270098][ T3964] Loading of unsigned module is rejected [ 1525.031962][ T3959] kexec: Could not allocate control_code_buffer [ 1525.749803][ T3987] Loading of unsigned module is rejected [ 1525.892588][ T3988] can: request_module (can-proto-4) failed. [ 1526.758216][ T4000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10709'. [ 1528.357734][ T4027] Loading of unsigned module is rejected [ 1529.244760][ T4037] ptrace attach of "./syz-executor exec"[11459] was attempted by "A7BU\x1b!|\x0dBfӻ:RE\x5c̉pz!PD[Hu,݄Ca6\x0de ɉAvyAߴ$,+3\x0dH5\x07`\x0d\x09ʬQfKaaܞeZMH \x0a[؍R@{9]Kۘ/$`ʔ.:\x0aOܤnWNCpplO8~L]`cꃪ\x0c\x22P!L\x09U \x1be`O+FpdR EP&N*ƒF4Ƣ?%_;QXG< G2\x0bdAS&1nakg&Aw'A˚yr͊m\x0ajS/jmeJ\x5cnP=QnL47\x0d/7򡱶BmD6pԲglOo/d]=9Z9i\x0b=N]ٸOnih\x0cY#>uvow=S@OV%nտ [ 1531.151225][ T4066] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1531.803361][ T4078] netlink: 86 bytes leftover after parsing attributes in process `syz.4.10727'. [ 1534.922106][ T4124] netlink: 25 bytes leftover after parsing attributes in process `syz.3.10740'. [ 1535.068640][ T4126] Loading of unsigned module is rejected [ 1536.528154][ T4153] futex_wake_op: syz.4.10747 tries to shift op by -2048; fix this program [ 1538.437879][ T83] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 957 with max blocks 26 with error 117 [ 1538.493650][ T83] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1538.493650][ T83] [ 1539.245673][ T4188] FAULT_INJECTION: forcing a failure. [ 1539.245673][ T4188] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.312979][ T4188] CPU: 0 UID: 0 PID: 4188 Comm: syz.1.10754 Tainted: G L syzkaller #0 PREEMPT(full) [ 1539.313011][ T4188] Tainted: [L]=SOFTLOCKUP [ 1539.313019][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1539.313031][ T4188] Call Trace: [ 1539.313038][ T4188] [ 1539.313046][ T4188] dump_stack_lvl+0x100/0x190 [ 1539.313079][ T4188] should_fail_ex.cold+0x5/0xa [ 1539.313102][ T4188] should_failslab+0xc2/0x120 [ 1539.313132][ T4188] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1539.313162][ T4188] ? __kernfs_new_node+0xd2/0x960 [ 1539.313190][ T4188] ? kstrdup+0xb3/0xe0 [ 1539.313212][ T4188] __kernfs_new_node+0xd2/0x960 [ 1539.313238][ T4188] ? __kernel_text_address+0xd/0x30 [ 1539.313268][ T4188] ? arch_stack_walk+0xa6/0xf0 [ 1539.313287][ T4188] ? __pfx___kernfs_new_node+0x10/0x10 [ 1539.313320][ T4188] ? find_held_lock+0x2b/0x80 [ 1539.313338][ T4188] ? kernfs_root+0xee/0x2a0 [ 1539.313364][ T4188] ? kernfs_root+0xee/0x2a0 [ 1539.313396][ T4188] kernfs_new_node+0x11b/0x1a0 [ 1539.313418][ T4188] kernfs_create_dir_ns+0x4c/0x1a0 [ 1539.313440][ T4188] sysfs_create_dir_ns+0x13a/0x2b0 [ 1539.313467][ T4188] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1539.313493][ T4188] ? find_held_lock+0x2b/0x80 [ 1539.313510][ T4188] ? kobject_add_internal+0x25f/0x930 [ 1539.313533][ T4188] ? kobject_add_internal+0x25f/0x930 [ 1539.313557][ T4188] ? class_dir_child_ns_type+0xd/0x60 [ 1539.313585][ T4188] kobject_add_internal+0x2c8/0x930 [ 1539.313611][ T4188] kobject_add+0x16a/0x1e0 [ 1539.313633][ T4188] ? __pfx_kobject_add+0x10/0x10 [ 1539.313659][ T4188] ? kobject_put+0xb9/0x640 [ 1539.313685][ T4188] device_add+0x294/0x1950 [ 1539.313710][ T4188] ? __pfx_dev_set_name+0x10/0x10 [ 1539.313739][ T4188] ? __pfx_device_add+0x10/0x10 [ 1539.313762][ T4188] ? __pfx___might_resched+0x10/0x10 [ 1539.313790][ T4188] ? lockdep_hardirqs_on+0x78/0x100 [ 1539.313816][ T4188] __add_disk+0x518/0xe40 [ 1539.313841][ T4188] add_disk_fwnode+0x118/0x5c0 [ 1539.313864][ T4188] loop_add+0x90b/0xb60 [ 1539.313892][ T4188] ? __pfx_loop_add+0x10/0x10 [ 1539.313934][ T4188] ? __x64_sys_close_range+0x2d9/0x5d0 [ 1539.313959][ T4188] loop_control_ioctl+0xae/0x620 [ 1539.313996][ T4188] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1539.314030][ T4188] ? xfd_validate_state+0x129/0x190 [ 1539.314059][ T4188] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1539.314090][ T4188] __x64_sys_ioctl+0x18e/0x210 [ 1539.314127][ T4188] do_syscall_64+0x106/0xf80 [ 1539.314145][ T4188] ? clear_bhb_loop+0x40/0x90 [ 1539.314168][ T4188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1539.314188][ T4188] RIP: 0033:0x7efc16b9c819 [ 1539.314205][ T4188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1539.314224][ T4188] RSP: 002b:00007efc17ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1539.314242][ T4188] RAX: ffffffffffffffda RBX: 00007efc16e15fa0 RCX: 00007efc16b9c819 [ 1539.314255][ T4188] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000001 [ 1539.314266][ T4188] RBP: 00007efc16c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1539.314277][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1539.314288][ T4188] R13: 00007efc16e16038 R14: 00007efc16e15fa0 R15: 00007ffcc2d26038 [ 1539.314313][ T4188] [ 1539.314392][ T4188] kobject: kobject_add_internal failed for loop50 (error: -12 parent: block) [ 1541.023469][ T4209] netlink: 'syz.3.10761': attribute type 1 has an invalid length. [ 1541.050077][ T4209] netlink: 9 bytes leftover after parsing attributes in process `syz.3.10761'. [ 1543.625215][ T4255] can: request_module (can-proto-4) failed. [ 1545.997805][ T4282] netlink: 25 bytes leftover after parsing attributes in process `syz.4.10776'. [ 1546.442586][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.457292][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.014345][ T1166] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1547.026147][ T1166] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1547.034681][ T1166] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1547.042362][ T1166] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1547.057179][ T1166] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1547.286936][ T4303] zswap: compressor not available [ 1547.843165][ T4305] chnl_net:caif_netlink_parms(): no params data found [ 1548.081454][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.112166][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 1548.134242][ T4305] bridge_slave_0: entered allmulticast mode [ 1548.160553][ T4305] bridge_slave_0: entered promiscuous mode [ 1548.199897][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.234191][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 1548.267234][ T4305] bridge_slave_1: entered allmulticast mode [ 1548.300612][ T4305] bridge_slave_1: entered promiscuous mode [ 1548.442602][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.501817][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1548.779057][ T4305] team0: Port device team_slave_0 added [ 1548.838315][ T4305] team0: Port device team_slave_1 added [ 1549.004184][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.037258][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.143154][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1549.219324][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1549.237363][ T1166] Bluetooth: hci5: command tx timeout [ 1549.262600][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1549.374265][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1549.566521][ T4305] hsr_slave_0: entered promiscuous mode [ 1549.595586][ T4305] hsr_slave_1: entered promiscuous mode [ 1549.624755][ T4305] debugfs: 'hsr0' already exists in 'hsr' [ 1549.655175][ T4305] Cannot create hsr debugfs directory [ 1550.481594][ T4346] netlink: 350 bytes leftover after parsing attributes in process `syz.3.10791'. [ 1550.640013][ T4305] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1550.727662][ T4305] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1550.769289][ T4357] random: crng reseeded on system resumption [ 1550.788836][ T4305] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1550.878313][ T4305] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1551.317065][ T1166] Bluetooth: hci5: command tx timeout [ 1551.356385][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.633905][ T4305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.695036][ T4377] FAULT_INJECTION: forcing a failure. [ 1551.695036][ T4377] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.756801][ T4377] CPU: 0 UID: 0 PID: 4377 Comm: syz.1.10798 Tainted: G L syzkaller #0 PREEMPT(full) [ 1551.756833][ T4377] Tainted: [L]=SOFTLOCKUP [ 1551.756839][ T4377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1551.756850][ T4377] Call Trace: [ 1551.756857][ T4377] [ 1551.756865][ T4377] dump_stack_lvl+0x100/0x190 [ 1551.756898][ T4377] should_fail_ex.cold+0x5/0xa [ 1551.756921][ T4377] ? tomoyo_init_log+0x1224/0x20c0 [ 1551.756948][ T4377] should_failslab+0xc2/0x120 [ 1551.756976][ T4377] __kmalloc_noprof+0xe0/0x850 [ 1551.757011][ T4377] tomoyo_init_log+0x1224/0x20c0 [ 1551.757049][ T4377] ? number+0x983/0xc90 [ 1551.757074][ T4377] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1551.757099][ T4377] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1551.757133][ T4377] tomoyo_write_log2+0x2ed/0xbc0 [ 1551.757164][ T4377] tomoyo_supervisor+0x15e/0x1340 [ 1551.757199][ T4377] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1551.757232][ T4377] ? tomoyo_realpath_from_path+0x19c/0x690 [ 1551.757267][ T4377] ? tomoyo_realpath_from_path+0x19c/0x690 [ 1551.757293][ T4377] ? kfree+0x1f6/0x6b0 [ 1551.757320][ T4377] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 1551.757350][ T4377] tomoyo_path_number_perm+0x445/0x580 [ 1551.757376][ T4377] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1551.757400][ T4377] ? futex_wake+0x1ad/0x530 [ 1551.757451][ T4377] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1551.757470][ T4377] ? hook_file_ioctl_common+0x146/0x410 [ 1551.757498][ T4377] ? __x64_sys_openat+0x12d/0x210 [ 1551.757525][ T4377] ? xfd_validate_state+0x129/0x190 [ 1551.757555][ T4377] security_file_ioctl+0xd3/0x230 [ 1551.757580][ T4377] __x64_sys_ioctl+0xb7/0x210 [ 1551.757609][ T4377] do_syscall_64+0x106/0xf80 [ 1551.757627][ T4377] ? clear_bhb_loop+0x40/0x90 [ 1551.757650][ T4377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1551.757669][ T4377] RIP: 0033:0x7efc16b9c819 [ 1551.757686][ T4377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1551.757705][ T4377] RSP: 002b:00007efc17ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1551.757724][ T4377] RAX: ffffffffffffffda RBX: 00007efc16e15fa0 RCX: 00007efc16b9c819 [ 1551.757736][ T4377] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 1551.757747][ T4377] RBP: 00007efc16c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1551.757758][ T4377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1551.757769][ T4377] R13: 00007efc16e16038 R14: 00007efc16e15fa0 R15: 00007ffcc2d26038 [ 1551.757792][ T4377] [ 1552.032258][ T4305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1552.042738][ T4305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1552.354385][T27742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.361555][T27742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.479886][T27742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.487076][T27742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.380793][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.398322][ T1166] Bluetooth: hci5: command tx timeout [ 1553.988430][ T4391] ubi0: attaching mtd0 [ 1553.993899][ T4391] ubi0: scanning is finished [ 1554.079370][ T4391] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1554.429056][ T4305] veth0_vlan: entered promiscuous mode [ 1554.490516][ T4305] veth1_vlan: entered promiscuous mode [ 1554.603228][ T4305] veth0_macvtap: entered promiscuous mode [ 1554.661113][ T4305] veth1_macvtap: entered promiscuous mode [ 1554.726573][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.754623][ T4409] Loading of unsigned module is rejected [ 1554.768160][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.958209][ T4391] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1555.030808][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.049302][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.170218][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.329129][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.477126][ T1166] Bluetooth: hci5: command tx timeout [ 1555.545311][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.598320][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.771768][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.816524][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.300309][ T4459] Loading of unsigned module is rejected [ 1559.326243][ T5833] Bluetooth: hci6: command 0x1003 tx timeout [ 1559.334372][ T1166] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1564.049779][ T4505] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10824'. [ 1564.107220][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1564.139788][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1564.227752][ T4505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1564.275117][ T4505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.024528][ T4495] FAULT_INJECTION: forcing a failure. [ 1565.024528][ T4495] name failslab, interval 1, probability 0, space 0, times 0 [ 1565.097112][ T4495] CPU: 0 UID: 0 PID: 4495 Comm: syz.1.10820 Tainted: G L syzkaller #0 PREEMPT(full) [ 1565.097144][ T4495] Tainted: [L]=SOFTLOCKUP [ 1565.097151][ T4495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1565.097163][ T4495] Call Trace: [ 1565.097170][ T4495] [ 1565.097178][ T4495] dump_stack_lvl+0x100/0x190 [ 1565.097212][ T4495] should_fail_ex.cold+0x5/0xa [ 1565.097235][ T4495] should_failslab+0xc2/0x120 [ 1565.097257][ T4495] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1565.097286][ T4495] ? security_inode_alloc+0x3b/0x2c0 [ 1565.097307][ T4495] ? lockdep_init_map_type+0x5c/0x250 [ 1565.097337][ T4495] security_inode_alloc+0x3b/0x2c0 [ 1565.097360][ T4495] inode_init_always_gfp+0xced/0x1040 [ 1565.097384][ T4495] alloc_inode+0x8e/0x250 [ 1565.097409][ T4495] new_inode+0x22/0x1c0 [ 1565.097437][ T4495] hugetlbfs_get_inode+0x313/0x750 [ 1565.097462][ T4495] hugetlb_file_setup+0x3cc/0x5b0 [ 1565.097487][ T4495] newseg+0xabb/0xed0 [ 1565.097516][ T4495] ? __pfx_newseg+0x10/0x10 [ 1565.097542][ T4495] ? down_write+0x146/0x1f0 [ 1565.097564][ T4495] ? ksys_write+0x190/0x250 [ 1565.097581][ T4495] ? ksys_write+0x190/0x250 [ 1565.097602][ T4495] ipcget+0xee/0xf50 [ 1565.097628][ T4495] ? do_futex+0x192/0x350 [ 1565.097653][ T4495] ? __pfx_do_futex+0x10/0x10 [ 1565.097682][ T4495] ? __pfx_ipcget+0x10/0x10 [ 1565.097709][ T4495] ? __x64_sys_futex+0x34f/0x4d0 [ 1565.097733][ T4495] ? __x64_sys_futex+0x358/0x4d0 [ 1565.097762][ T4495] __x64_sys_shmget+0x13b/0x1b0 [ 1565.097790][ T4495] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1565.097823][ T4495] do_syscall_64+0x106/0xf80 [ 1565.097841][ T4495] ? clear_bhb_loop+0x40/0x90 [ 1565.097864][ T4495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.097883][ T4495] RIP: 0033:0x7efc16b9c819 [ 1565.097900][ T4495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1565.097918][ T4495] RSP: 002b:00007efc17ac3028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1565.097937][ T4495] RAX: ffffffffffffffda RBX: 00007efc16e15fa0 RCX: 00007efc16b9c819 [ 1565.097958][ T4495] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 1565.097970][ T4495] RBP: 00007efc16c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1565.097982][ T4495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1565.097994][ T4495] R13: 00007efc16e16038 R14: 00007efc16e15fa0 R15: 00007ffcc2d26038 [ 1565.098017][ T4495] [ 1568.997498][ T49] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 961 with max blocks 22 with error 117 [ 1569.064417][ T49] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1569.064417][ T49] [ 1571.150184][ T4597] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1571.903077][ T4610] random: crng reseeded on system resumption [ 1572.133615][ T4614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10857'. [ 1574.187613][ T4629] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1574.910484][ T4655] Loading of unsigned module is rejected [ 1575.094987][ T4657] netlink: 326 bytes leftover after parsing attributes in process `syz.4.10861'. [ 1577.093840][ T4692] hub 1-0:1.0: USB hub found [ 1577.154633][ T4692] hub 1-0:1.0: 1 port detected [ 1579.740194][ T4727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10875'. [ 1579.821605][ T4732] netlink: 'syz.5.10875': attribute type 1 has an invalid length. [ 1579.907119][ T4732] netlink: 51505 bytes leftover after parsing attributes in process `syz.5.10875'. [ 1580.812738][ T4742] Loading of unsigned module is rejected [ 1583.064674][ T4774] FAULT_INJECTION: forcing a failure. [ 1583.064674][ T4774] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.267922][ T4774] CPU: 0 UID: 0 PID: 4774 Comm: syz.5.10886 Tainted: G L syzkaller #0 PREEMPT(full) [ 1583.267954][ T4774] Tainted: [L]=SOFTLOCKUP [ 1583.267961][ T4774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1583.267972][ T4774] Call Trace: [ 1583.267979][ T4774] [ 1583.267987][ T4774] dump_stack_lvl+0x100/0x190 [ 1583.268019][ T4774] should_fail_ex.cold+0x5/0xa [ 1583.268042][ T4774] should_failslab+0xc2/0x120 [ 1583.268064][ T4774] __kmalloc_node_noprof+0xe6/0x850 [ 1583.268093][ T4774] ? blk_mq_alloc_tag_set+0x57a/0x1330 [ 1583.268113][ T4774] ? rt_mutex_debug_task_free+0x140/0x1e0 [ 1583.268146][ T4774] blk_mq_alloc_tag_set+0x57a/0x1330 [ 1583.268165][ T4774] ? idr_alloc+0x77/0x130 [ 1583.268191][ T4774] loop_add+0x3b7/0xb60 [ 1583.268219][ T4774] ? __pfx_loop_add+0x10/0x10 [ 1583.268259][ T4774] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1583.268284][ T4774] loop_control_ioctl+0xae/0x620 [ 1583.268314][ T4774] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1583.268343][ T4774] ? xfd_validate_state+0x129/0x190 [ 1583.268372][ T4774] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1583.268403][ T4774] __x64_sys_ioctl+0x18e/0x210 [ 1583.268433][ T4774] do_syscall_64+0x106/0xf80 [ 1583.268451][ T4774] ? clear_bhb_loop+0x40/0x90 [ 1583.268474][ T4774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.268493][ T4774] RIP: 0033:0x7fd72559c819 [ 1583.268509][ T4774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.268528][ T4774] RSP: 002b:00007fd72640b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1583.268546][ T4774] RAX: ffffffffffffffda RBX: 00007fd725815fa0 RCX: 00007fd72559c819 [ 1583.268558][ T4774] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 1583.268569][ T4774] RBP: 00007fd725632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1583.268580][ T4774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1583.268591][ T4774] R13: 00007fd725816038 R14: 00007fd725815fa0 R15: 00007ffd840638a8 [ 1583.268613][ T4774] [ 1584.109171][ T4789] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.10890: iget: checksum invalid [ 1584.166655][ T4789] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1584.215147][ T4789] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.10890: iget: checksum invalid [ 1584.290037][ T1166] Bluetooth: hci5: Malformed LE Event: 0x0b [ 1584.314510][ T4789] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1584.353607][ T4789] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.10890: iget: checksum invalid [ 1584.432127][ T4789] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1584.489420][ T4789] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.10890: iget: checksum invalid [ 1584.542407][ T4789] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1584.587141][ T4789] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1584.614738][ T4789] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1586.546233][ T4805] FAULT_INJECTION: forcing a failure. [ 1586.546233][ T4805] name failslab, interval 1, probability 0, space 0, times 0 [ 1586.589114][ T4805] CPU: 0 UID: 0 PID: 4805 Comm: syz.5.10894 Tainted: G L syzkaller #0 PREEMPT(full) [ 1586.589147][ T4805] Tainted: [L]=SOFTLOCKUP [ 1586.589154][ T4805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1586.589166][ T4805] Call Trace: [ 1586.589173][ T4805] [ 1586.589181][ T4805] dump_stack_lvl+0x100/0x190 [ 1586.589215][ T4805] should_fail_ex.cold+0x5/0xa [ 1586.589238][ T4805] ? memcg_list_lru_alloc+0x4ec/0x740 [ 1586.589267][ T4805] should_failslab+0xc2/0x120 [ 1586.589289][ T4805] __kmalloc_noprof+0xe0/0x850 [ 1586.589319][ T4805] ? ipcget+0xee/0xf50 [ 1586.589348][ T4805] memcg_list_lru_alloc+0x4ec/0x740 [ 1586.589384][ T4805] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 1586.589413][ T4805] ? rcu_read_unlock+0x17/0x60 [ 1586.589440][ T4805] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 1586.589472][ T4805] __memcg_slab_post_alloc_hook+0x130/0x990 [ 1586.589499][ T4805] ? kasan_save_track+0x14/0x30 [ 1586.589519][ T4805] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 1586.589549][ T4805] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 1586.589574][ T4805] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 1586.589594][ T4805] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 1586.589615][ T4805] alloc_inode+0x68/0x250 [ 1586.589642][ T4805] new_inode+0x22/0x1c0 [ 1586.589669][ T4805] hugetlbfs_get_inode+0x313/0x750 [ 1586.589693][ T4805] hugetlb_file_setup+0x3cc/0x5b0 [ 1586.589718][ T4805] newseg+0xabb/0xed0 [ 1586.589747][ T4805] ? __pfx_newseg+0x10/0x10 [ 1586.589772][ T4805] ? down_write+0x146/0x1f0 [ 1586.589794][ T4805] ? ksys_write+0x190/0x250 [ 1586.589820][ T4805] ? ksys_write+0x190/0x250 [ 1586.589841][ T4805] ipcget+0xee/0xf50 [ 1586.589867][ T4805] ? do_futex+0x192/0x350 [ 1586.589893][ T4805] ? __pfx_do_futex+0x10/0x10 [ 1586.589922][ T4805] ? __pfx_ipcget+0x10/0x10 [ 1586.589949][ T4805] ? __x64_sys_futex+0x34f/0x4d0 [ 1586.589973][ T4805] ? __x64_sys_futex+0x358/0x4d0 [ 1586.590002][ T4805] __x64_sys_shmget+0x13b/0x1b0 [ 1586.590030][ T4805] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1586.590064][ T4805] do_syscall_64+0x106/0xf80 [ 1586.590087][ T4805] ? clear_bhb_loop+0x40/0x90 [ 1586.590110][ T4805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.590130][ T4805] RIP: 0033:0x7fd72559c819 [ 1586.590146][ T4805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.590164][ T4805] RSP: 002b:00007fd7263ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1586.590183][ T4805] RAX: ffffffffffffffda RBX: 00007fd725816090 RCX: 00007fd72559c819 [ 1586.590194][ T4805] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 1586.590205][ T4805] RBP: 00007fd725632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1586.590216][ T4805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1586.590227][ T4805] R13: 00007fd725816128 R14: 00007fd725816090 R15: 00007ffd840638a8 [ 1586.590250][ T4805] [ 1589.938789][ T4867] FAULT_INJECTION: forcing a failure. [ 1589.938789][ T4867] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.020492][ T4867] CPU: 0 UID: 0 PID: 4867 Comm: syz.5.10910 Tainted: G L syzkaller #0 PREEMPT(full) [ 1590.020525][ T4867] Tainted: [L]=SOFTLOCKUP [ 1590.020531][ T4867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1590.020542][ T4867] Call Trace: [ 1590.020549][ T4867] [ 1590.020557][ T4867] dump_stack_lvl+0x100/0x190 [ 1590.020591][ T4867] should_fail_ex.cold+0x5/0xa [ 1590.020614][ T4867] should_failslab+0xc2/0x120 [ 1590.020636][ T4867] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1590.020685][ T4867] ? seq_open+0x55/0x170 [ 1590.020715][ T4867] seq_open+0x55/0x170 [ 1590.020741][ T4867] __seq_open_private+0x3e/0xd0 [ 1590.020770][ T4867] tracing_open+0x2a8/0xef0 [ 1590.020799][ T4867] do_dentry_open+0x6d8/0x1660 [ 1590.020818][ T4867] ? __pfx_tracing_open+0x10/0x10 [ 1590.020853][ T4867] vfs_open+0x82/0x3f0 [ 1590.020879][ T4867] path_openat+0x208c/0x31a0 [ 1590.020907][ T4867] ? __pfx_path_openat+0x10/0x10 [ 1590.020935][ T4867] do_file_open+0x20e/0x430 [ 1590.020958][ T4867] ? __pfx_do_file_open+0x10/0x10 [ 1590.020995][ T4867] ? alloc_fd+0x476/0x790 [ 1590.021017][ T4867] ? do_getname+0x191/0x390 [ 1590.021044][ T4867] do_sys_openat2+0x10d/0x1e0 [ 1590.021070][ T4867] ? __pfx_do_sys_openat2+0x10/0x10 [ 1590.021105][ T4867] __x64_sys_openat+0x12d/0x210 [ 1590.021132][ T4867] ? __pfx___x64_sys_openat+0x10/0x10 [ 1590.021166][ T4867] do_syscall_64+0x106/0xf80 [ 1590.021185][ T4867] ? clear_bhb_loop+0x40/0x90 [ 1590.021208][ T4867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.021228][ T4867] RIP: 0033:0x7fd72559c819 [ 1590.021244][ T4867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1590.021262][ T4867] RSP: 002b:00007fd72640b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1590.021281][ T4867] RAX: ffffffffffffffda RBX: 00007fd725815fa0 RCX: 00007fd72559c819 [ 1590.021293][ T4867] RDX: 1a6b75d638929210 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1590.021305][ T4867] RBP: 00007fd725632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1590.021316][ T4867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.021327][ T4867] R13: 00007fd725816038 R14: 00007fd725815fa0 R15: 00007ffd840638a8 [ 1590.021350][ T4867] [ 1592.177930][ T4901] zswap: compressor not available [ 1593.865576][ T4936] hub 1-0:1.0: USB hub found [ 1593.889450][ T4938] ERROR: Out of memory at tomoyo_memory_ok. [ 1593.906573][ T4936] hub 1-0:1.0: 1 port detected [ 1596.795624][ T1166] Bluetooth: hci4: unexpected event 0x1c length: 725 > 5 [ 1599.717377][ T35] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 961 with max blocks 22 with error 117 [ 1599.740221][ T1166] Bluetooth: hci4: command 0x0406 tx timeout [ 1599.789083][ T35] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1599.789083][ T35] [ 1603.244109][ T5104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10962'. [ 1603.314003][ T5106] netlink: 'syz.5.10962': attribute type 1 has an invalid length. [ 1603.366012][ T5106] netlink: 51505 bytes leftover after parsing attributes in process `syz.5.10962'. [ 1607.449443][ T5169] netlink: 202 bytes leftover after parsing attributes in process `syz.4.10975'. [ 1607.896874][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.904795][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.732407][ T5195] vivid-007: ================= START STATUS ================= [ 1608.776348][ T5195] vivid-007: Generate PTS: true [ 1608.813080][ T5195] vivid-007: Generate SCR: true [ 1608.843358][ T5195] tpg source WxH: 320x240 (Y'CbCr) [ 1608.873468][ T5195] tpg field: 1 [ 1608.876894][ T5195] tpg crop: (0,0)/320x240 [ 1609.037212][ T5195] tpg compose: (0,0)/320x240 [ 1609.086569][ T5195] tpg colorspace: 8 [ 1609.143777][ T5195] tpg transfer function: 0/0 [ 1609.217076][ T5195] tpg Y'CbCr encoding: 0/0 [ 1609.221533][ T5195] tpg quantization: 0/0 [ 1609.363333][ T5195] tpg RGB range: 0/2 [ 1609.416228][ T5195] vivid-007: ================== END STATUS ================== [ 1611.152087][ T5228] vivid-007: ================= START STATUS ================= [ 1611.191448][ T5228] vivid-007: Generate PTS: true [ 1611.214122][ T5228] vivid-007: Generate SCR: true [ 1611.236857][ T5228] tpg source WxH: 320x240 (Y'CbCr) [ 1611.271508][ T5228] tpg field: 1 [ 1611.296392][ T5228] tpg crop: (0,0)/320x240 [ 1611.316853][ T5228] tpg compose: (0,0)/320x240 [ 1611.349125][ T5228] tpg colorspace: 8 [ 1611.409789][ T5228] tpg transfer function: 0/0 [ 1611.414416][ T5228] tpg Y'CbCr encoding: 0/0 [ 1611.508210][ T5228] tpg quantization: 0/0 [ 1611.512403][ T5228] tpg RGB range: 0/2 [ 1611.516301][ T5228] vivid-007: ================== END STATUS ================== [ 1613.495784][ T5257] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10993'. [ 1613.578269][ T5257] veth1_macvtap: left promiscuous mode [ 1615.225463][ T5278] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1615.335373][ T29] audit: type=1800 audit(2147484016.940:34): pid=5270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10994" name="sr0" dev="tmpfs" ino=709 res=0 errno=0 [ 1617.041380][ T5311] program syz.5.11003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1617.498579][ T5322] program syz.3.11006 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1617.965111][ T5334] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1620.844037][ T5378] random: crng reseeded on system resumption [ 1621.140749][ T5385] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b1215a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 1621.156660][ T5385] Call Trace: [ 1621.159952][ T5385] [ 1621.162887][ T5385] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 1621.169631][ T5385] ? do_raw_spin_lock+0x128/0x260 [ 1621.174694][ T5385] mce_cpu_restart+0xd5/0x1f0 [ 1621.179399][ T5385] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1621.184718][ T5385] smp_call_function_many_cond+0x11fc/0x1500 [ 1621.190724][ T5385] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1621.196040][ T5385] ? mark_held_locks+0x40/0x70 [ 1621.200828][ T5385] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1621.206667][ T5385] ? lockdep_hardirqs_on+0x78/0x100 [ 1621.211885][ T5385] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1621.217726][ T5385] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1621.224160][ T5385] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 1621.230170][ T5385] ? __timer_delete_sync+0x151/0x1c0 [ 1621.235475][ T5385] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1621.240804][ T5385] on_each_cpu_cond_mask+0x40/0x90 [ 1621.245944][ T5385] set_bank+0x240/0x3a0 [ 1621.250127][ T5385] ? __pfx_set_bank+0x10/0x10 [ 1621.254837][ T5385] ? find_held_lock+0x2b/0x80 [ 1621.259536][ T5385] ? sysfs_file_kobj+0xe4/0x290 [ 1621.264398][ T5385] ? sysfs_file_kobj+0xe4/0x290 [ 1621.269261][ T5385] ? __pfx_set_bank+0x10/0x10 [ 1621.273950][ T5385] dev_attr_store+0x58/0x80 [ 1621.278465][ T5385] ? __pfx_dev_attr_store+0x10/0x10 [ 1621.283673][ T5385] sysfs_kf_write+0xf2/0x150 [ 1621.288273][ T5385] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1621.293565][ T5385] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1621.298787][ T5385] vfs_write+0x6ac/0x1070 [ 1621.303134][ T5385] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1621.308950][ T5385] ? __pfx_vfs_write+0x10/0x10 [ 1621.313740][ T5385] ksys_write+0x12a/0x250 [ 1621.318070][ T5385] ? __pfx_ksys_write+0x10/0x10 [ 1621.322926][ T5385] do_syscall_64+0x106/0xf80 [ 1621.327522][ T5385] ? clear_bhb_loop+0x40/0x90 [ 1621.332214][ T5385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.338121][ T5385] RIP: 0033:0x7f348879c819 [ 1621.342548][ T5385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1621.362157][ T5385] RSP: 002b:00007f3489655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1621.370672][ T5385] RAX: ffffffffffffffda RBX: 00007f3488a15fa0 RCX: 00007f348879c819 [ 1621.378641][ T5385] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000006 [ 1621.386616][ T5385] RBP: 00007f3488832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1621.394582][ T5385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1621.402555][ T5385] R13: 00007f3488a16038 R14: 00007f3488a15fa0 R15: 00007fff44804358 [ 1621.410541][ T5385] [ 1621.690987][ T5392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11021'. [ 1621.763551][ T5395] netlink: 354 bytes leftover after parsing attributes in process `syz.1.11021'. [ 1626.002138][ T29] audit: type=1800 audit(2147484027.600:35): pid=5443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.11032" name="dummy_udc" dev="gadgetfs" ino=7455 res=0 errno=0 [ 1626.061919][ T5443] XFS: Clearing xfsstats [ 1630.437345][ T35] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 971 with max blocks 12 with error 117 [ 1630.496787][ T35] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1630.496787][ T35] [ 1638.468214][ T5657] program syz.5.11071 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1640.346906][ T5684] can: request_module (can-proto-5) failed. [ 1640.457992][ T5684] netlink: 186 bytes leftover after parsing attributes in process `syz.5.11077'. [ 1642.695945][ T5732] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11089'. [ 1643.725106][ T2988] NFSD: Failed to start, no listeners configured. [ 1645.927925][ T5777] netlink: 'syz.1.11099': attribute type 1 has an invalid length. [ 1645.935788][ T5777] netlink: 9 bytes leftover after parsing attributes in process `syz.1.11099'. [ 1646.148790][ T5780] netlink: 'syz.5.11100': attribute type 1 has an invalid length. [ 1646.210707][ T5780] netlink: 9 bytes leftover after parsing attributes in process `syz.5.11100'. [ 1647.453955][ T5796] netlink: 202 bytes leftover after parsing attributes in process `syz.3.11104'. [ 1649.310888][ T5825] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 959 with max blocks 2 with error 117 [ 1649.578872][ T5825] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1649.578872][ T5825] [ 1652.622136][ T5888] ERROR: Out of memory at tomoyo_memory_ok. [ 1652.859838][ T5883] netlink: 354 bytes leftover after parsing attributes in process `syz.3.11120'. [ 1653.206630][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11122'. [ 1653.247813][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11122'. [ 1653.318157][ T5896] netlink: 17 bytes leftover after parsing attributes in process `syz.3.11123'. [ 1653.370527][ T5896] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11123'. [ 1654.385776][ T5910] ERROR: Out of memory at tomoyo_memory_ok. [ 1655.934894][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11134'. [ 1655.994433][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11134'. [ 1660.068049][ T5977] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1660.837530][ T35] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 977 with max blocks 6 with error 117 [ 1660.914918][ T35] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1660.914918][ T35] [ 1661.677611][ T29] audit: type=1804 audit(2147484063.280:36): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.11147" name="/newroot/2816/file0" dev="tmpfs" ino=14449 res=1 errno=0 [ 1661.829702][ T29] audit: type=1804 audit(2147484063.320:37): pid=6002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.11147" name="/newroot/2816/file0" dev="tmpfs" ino=14449 res=1 errno=0 [ 1664.811838][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11157'. [ 1664.842475][ T6043] syz.5.11155: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1664.865991][ T6046] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 1664.894717][ T6046] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 1664.945674][ T1166] Bluetooth: hci5: ACL packet too small [ 1665.137808][ T6043] CPU: 0 UID: 0 PID: 6043 Comm: syz.5.11155 Tainted: G L syzkaller #0 PREEMPT(full) [ 1665.137840][ T6043] Tainted: [L]=SOFTLOCKUP [ 1665.137847][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1665.137858][ T6043] Call Trace: [ 1665.137864][ T6043] [ 1665.137872][ T6043] dump_stack_lvl+0x100/0x190 [ 1665.137905][ T6043] warn_alloc.cold+0x95/0x1c1 [ 1665.137936][ T6043] ? __pfx_warn_alloc+0x10/0x10 [ 1665.137969][ T6043] ? __lock_acquire+0x4a5/0x2630 [ 1665.138006][ T6043] __vmalloc_node_range_noprof+0x1252/0x1530 [ 1665.138035][ T6043] ? rcu_is_watching+0x12/0xc0 [ 1665.138064][ T6043] ? trace_contention_end+0x140/0x180 [ 1665.138091][ T6043] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1665.138114][ T6043] ? dvb_dvr_do_ioctl+0x7e/0x270 [ 1665.138134][ T6043] ? tomoyo_path_number_perm+0x28f/0x580 [ 1665.138158][ T6043] ? tomoyo_path_number_perm+0x28f/0x580 [ 1665.138183][ T6043] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1665.138208][ T6043] ? __pfx___mutex_lock+0x10/0x10 [ 1665.138232][ T6043] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1665.138255][ T6043] ? futex_wait+0x125/0x380 [ 1665.138286][ T6043] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1665.138307][ T6043] __vmalloc_node_noprof+0xad/0xf0 [ 1665.138342][ T6043] ? dvb_dvr_do_ioctl+0x15d/0x270 [ 1665.138366][ T6043] dvb_dvr_do_ioctl+0x15d/0x270 [ 1665.138392][ T6043] dvb_usercopy+0x167/0x340 [ 1665.138412][ T6043] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 1665.138436][ T6043] ? __pfx_dvb_usercopy+0x10/0x10 [ 1665.138466][ T6043] ? __fget_files+0x21f/0x3d0 [ 1665.138489][ T6043] dvb_dvr_ioctl+0x29/0x40 [ 1665.138509][ T6043] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 1665.138531][ T6043] __x64_sys_ioctl+0x18e/0x210 [ 1665.138562][ T6043] do_syscall_64+0x106/0xf80 [ 1665.138582][ T6043] ? clear_bhb_loop+0x40/0x90 [ 1665.138605][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.138625][ T6043] RIP: 0033:0x7fd72559c819 [ 1665.138641][ T6043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1665.138659][ T6043] RSP: 002b:00007fd72640b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1665.138678][ T6043] RAX: ffffffffffffffda RBX: 00007fd725815fa0 RCX: 00007fd72559c819 [ 1665.138690][ T6043] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000005 [ 1665.138701][ T6043] RBP: 00007fd725632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1665.138713][ T6043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1665.138723][ T6043] R13: 00007fd725816038 R14: 00007fd725815fa0 R15: 00007ffd840638a8 [ 1665.138747][ T6043] [ 1665.138754][ T6043] Mem-Info: [ 1665.617331][ T5833] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1667.690727][ T6043] active_anon:25506 inactive_anon:42249 isolated_anon:0 [ 1667.690727][ T6043] active_file:42747 inactive_file:38343 isolated_file:0 [ 1667.690727][ T6043] unevictable:768 dirty:609 writeback:0 [ 1667.690727][ T6043] slab_reclaimable:13788 slab_unreclaimable:107385 [ 1667.690727][ T6043] mapped:45331 shmem:40419 pagetables:1387 [ 1667.690727][ T6043] sec_pagetables:0 bounce:0 [ 1667.690727][ T6043] kernel_misc_reclaimable:0 [ 1667.690727][ T6043] free:1186874 free_pcp:24977 free_cma:0 [ 1667.837478][ T6043] Node 0 active_anon:102024kB inactive_anon:161924kB active_file:170592kB inactive_file:153236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:180984kB dirty:2432kB writeback:0kB shmem:153068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11488kB pagetables:5412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1667.947101][ T6043] Node 1 active_anon:0kB inactive_anon:0kB active_file:396kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:340kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1668.057164][ T6043] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1668.147173][ T6043] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1668.167053][ T6043] Node 0 DMA32 free:834996kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102024kB inactive_anon:145336kB active_file:170592kB inactive_file:153236kB unevictable:1536kB writepending:2432kB zspages:728kB present:3129332kB managed:2537292kB mlocked:0kB bounce:0kB free_pcp:72844kB local_pcp:72844kB free_cma:0kB [ 1668.275062][ T6043] lowmem_reserve[]: 0 0 1 1 1 [ 1668.295278][ T6043] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1668.389471][ T6043] lowmem_reserve[]: 0 0 0 0 0 [ 1668.405209][ T6043] Node 1 Normal free:3918912kB boost:0kB min:55584kB low:69480kB high:83376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:396kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:28992kB local_pcp:28992kB free_cma:0kB [ 1668.512662][ T6043] lowmem_reserve[]: 0 0 0 0 0 [ 1668.532094][ T6043] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1668.575857][ T6043] Node 0 DMA32: 8169*4kB (UME) 7363*8kB (UME) 4788*16kB (UME) 763*32kB (UME) 768*64kB (UME) 918*128kB (UME) 637*256kB (UME) 195*512kB (UM) 169*1024kB (UME) 2*2048kB (UM) 24*4096kB (M) = 897628kB [ 1668.647269][ T6043] Node 0 Normal: 5*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1668.687210][ T6043] Node 1 Normal: 4*4kB (UM) 6*8kB (UM) 2*16kB (M) 3*32kB (M) 8*64kB (M) 5*128kB (UM) 1*256kB (M) 1*512kB (U) 1*1024kB (U) 0*2048kB 956*4096kB (UM) = 3918912kB [ 1668.746420][ T6043] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1668.777230][ T6043] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1668.807236][ T6043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1668.832784][ T6043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1668.867085][ T6043] 91679 total pagecache pages [ 1668.871803][ T6043] 25 pages in swap cache [ 1668.876042][ T6043] Free swap = 124608kB [ 1668.906998][ T6043] Total swap = 124996kB [ 1668.911212][ T6043] 2097051 pages RAM [ 1668.915116][ T6043] 0 pages HighMem/MovableOnly [ 1668.951214][ T6043] 430849 pages reserved [ 1668.955400][ T6043] 0 pages cma reserved [ 1669.327244][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.333563][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.082825][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11167'. [ 1671.164875][ T6099] team0: Port device team_slave_1 removed [ 1671.398121][ T1166] Bluetooth: hci5: command 0x0406 tx timeout [ 1672.338922][ T6116] FAULT_INJECTION: forcing a failure. [ 1672.338922][ T6116] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.413128][ T6116] CPU: 0 UID: 0 PID: 6116 Comm: syz.5.11173 Tainted: G L syzkaller #0 PREEMPT(full) [ 1672.413161][ T6116] Tainted: [L]=SOFTLOCKUP [ 1672.413169][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1672.413180][ T6116] Call Trace: [ 1672.413187][ T6116] [ 1672.413195][ T6116] dump_stack_lvl+0x100/0x190 [ 1672.413227][ T6116] should_fail_ex.cold+0x5/0xa [ 1672.413259][ T6116] should_failslab+0xc2/0x120 [ 1672.413281][ T6116] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1672.413310][ T6116] ? __proc_create+0x2cb/0x8c0 [ 1672.413335][ T6116] __proc_create+0x2cb/0x8c0 [ 1672.413354][ T6116] ? __pfx___proc_create+0x10/0x10 [ 1672.413382][ T6116] proc_mkdir+0x81/0x170 [ 1672.413402][ T6116] ? __pfx_proc_mkdir+0x10/0x10 [ 1672.413420][ T6116] ? cache_register_net+0x137/0x5e0 [ 1672.413441][ T6116] ? cache_register_net+0x137/0x5e0 [ 1672.413465][ T6116] cache_register_net+0x18f/0x5e0 [ 1672.413488][ T6116] gss_svc_init_net+0x14e/0x640 [ 1672.413516][ T6116] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 1672.413537][ T6116] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 1672.413566][ T6116] ops_init+0x1e2/0x5f0 [ 1672.413588][ T6116] setup_net+0x118/0x3a0 [ 1672.413607][ T6116] ? __pfx_setup_net+0x10/0x10 [ 1672.413624][ T6116] ? lockdep_init_map_type+0x5c/0x250 [ 1672.413650][ T6116] ? mutex_init_lockep+0x110/0x150 [ 1672.413680][ T6116] copy_net_ns+0x46f/0x7c0 [ 1672.413703][ T6116] create_new_namespaces+0x3ea/0xac0 [ 1672.413730][ T6116] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1672.413753][ T6116] ksys_unshare+0x473/0xad0 [ 1672.413779][ T6116] ? __pfx_ksys_unshare+0x10/0x10 [ 1672.413812][ T6116] __x64_sys_unshare+0x31/0x40 [ 1672.413836][ T6116] do_syscall_64+0x106/0xf80 [ 1672.413855][ T6116] ? clear_bhb_loop+0x40/0x90 [ 1672.413877][ T6116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1672.413897][ T6116] RIP: 0033:0x7fd72559c819 [ 1672.413914][ T6116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1672.413933][ T6116] RSP: 002b:00007fd72640b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1672.413951][ T6116] RAX: ffffffffffffffda RBX: 00007fd725815fa0 RCX: 00007fd72559c819 [ 1672.413963][ T6116] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1672.413974][ T6116] RBP: 00007fd725632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1672.413985][ T6116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1672.413995][ T6116] R13: 00007fd725816038 R14: 00007fd725815fa0 R15: 00007ffd840638a8 [ 1672.414018][ T6116] [ 1681.211800][ T6211] netlink: 'syz.3.11191': attribute type 1 has an invalid length. [ 1681.319364][ T6211] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11191'. [ 1684.768648][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11202'. [ 1684.874366][ T6255] team0: Port device team_slave_1 removed [ 1685.602886][ T6265] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input28 [ 1685.659345][ T5178] ERROR: Out of memory at tomoyo_memory_ok. [ 1685.988640][ T6276] netlink: zone id is out of range [ 1686.015914][ T6276] netlink: zone id is out of range [ 1686.047957][ T6276] netlink: zone id is out of range [ 1686.087248][ T6276] netlink: zone id is out of range [ 1686.129152][ T6281] netlink: zone id is out of range [ 1686.144180][ T6276] netlink: zone id is out of range [ 1686.166531][ T6281] netlink: zone id is out of range [ 1686.200131][ T6276] netlink: zone id is out of range [ 1686.227743][ T6281] netlink: zone id is out of range [ 1686.234311][ T6276] netlink: zone id is out of range [ 1687.224680][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11212'. [ 1687.348265][ T6302] FAULT_INJECTION: forcing a failure. [ 1687.348265][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.421725][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.5.11214 Tainted: G L syzkaller #0 PREEMPT(full) [ 1687.421758][ T6302] Tainted: [L]=SOFTLOCKUP [ 1687.421766][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1687.421777][ T6302] Call Trace: [ 1687.421784][ T6302] [ 1687.421792][ T6302] dump_stack_lvl+0x100/0x190 [ 1687.421825][ T6302] should_fail_ex.cold+0x5/0xa [ 1687.421848][ T6302] should_failslab+0xc2/0x120 [ 1687.421870][ T6302] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1687.421896][ T6302] ? shrinker_alloc+0xf5/0xbc0 [ 1687.421920][ T6302] shrinker_alloc+0xf5/0xbc0 [ 1687.421940][ T6302] ? mark_held_locks+0x40/0x70 [ 1687.421964][ T6302] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1687.421996][ T6302] ? rcu_is_watching+0x12/0xc0 [ 1687.422025][ T6302] ? __pfx_shrinker_alloc+0x10/0x10 [ 1687.422047][ T6302] ? lockdep_init_map_type+0x5c/0x250 [ 1687.422072][ T6302] ? lockdep_init_map_type+0x5c/0x250 [ 1687.422098][ T6302] ? __raw_spin_lock_init+0x3a/0x110 [ 1687.422125][ T6302] ? __init_rwsem+0x12d/0x1b0 [ 1687.422163][ T6302] alloc_super+0x7c7/0xd20 [ 1687.422195][ T6302] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1687.422226][ T6302] sget_fc+0x117/0xc70 [ 1687.422255][ T6302] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1687.422293][ T6302] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1687.422323][ T6302] get_tree_nodev+0x28/0x190 [ 1687.422342][ T6302] mqueue_get_tree+0xf1/0x130 [ 1687.422372][ T6302] vfs_get_tree+0x92/0x320 [ 1687.422401][ T6302] fc_mount_longterm+0x1a/0x270 [ 1687.422434][ T6302] mq_init_ns+0x482/0x820 [ 1687.422456][ T6302] copy_ipcs+0x3dd/0x7e0 [ 1687.422479][ T6302] create_new_namespaces+0x20a/0xac0 [ 1687.422500][ T6302] ? security_capable+0x80/0x260 [ 1687.422521][ T6302] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1687.422544][ T6302] ksys_unshare+0x473/0xad0 [ 1687.422585][ T6302] ? __pfx_ksys_unshare+0x10/0x10 [ 1687.422618][ T6302] __x64_sys_unshare+0x31/0x40 [ 1687.422643][ T6302] do_syscall_64+0x106/0xf80 [ 1687.422661][ T6302] ? clear_bhb_loop+0x40/0x90 [ 1687.422685][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.422710][ T6302] RIP: 0033:0x7fd72559c819 [ 1687.422728][ T6302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1687.422751][ T6302] RSP: 002b:00007fd72640b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1687.422770][ T6302] RAX: ffffffffffffffda RBX: 00007fd725815fa0 RCX: 00007fd72559c819 [ 1687.422783][ T6302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1687.422794][ T6302] RBP: 00007fd725632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1687.422806][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1687.422817][ T6302] R13: 00007fd725816038 R14: 00007fd725815fa0 R15: 00007ffd840638a8 [ 1687.422842][ T6302] [ 1687.704441][ T6302] FAULT_INJECTION: forcing a failure. [ 1687.704441][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 1687.717413][ T6302] CPU: 0 UID: 0 PID: 6302 Comm: syz.5.11214 Tainted: G L syzkaller #0 PREEMPT(full) [ 1687.717450][ T6302] Tainted: [L]=SOFTLOCKUP [ 1687.717458][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1687.717469][ T6302] Call Trace: [ 1687.717476][ T6302] [ 1687.717484][ T6302] dump_stack_lvl+0x100/0x190 [ 1687.717517][ T6302] should_fail_ex.cold+0x5/0xa [ 1687.717540][ T6302] should_failslab+0xc2/0x120 [ 1687.717562][ T6302] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1687.717591][ T6302] ? skb_clone+0x190/0x400 [ 1687.717612][ T6302] skb_clone+0x190/0x400 [ 1687.717631][ T6302] netlink_deliver_tap+0xaed/0xcc0 [ 1687.717667][ T6302] netlink_unicast+0x650/0x870 [ 1687.717690][ T6302] ? __pfx_netlink_unicast+0x10/0x10 [ 1687.717718][ T6302] netlink_sendmsg+0x8b0/0xda0 [ 1687.717742][ T6302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1687.717764][ T6302] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1687.717788][ T6302] __sys_sendto+0x468/0x4b0 [ 1687.717814][ T6302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1687.717835][ T6302] ? __pfx___sys_sendto+0x10/0x10 [ 1687.717868][ T6302] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1687.717890][ T6302] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1687.717925][ T6302] __x64_sys_sendto+0xe0/0x1c0 [ 1687.717951][ T6302] ? do_syscall_64+0x95/0xf80 [ 1687.717970][ T6302] ? lockdep_hardirqs_on+0x78/0x100 [ 1687.717989][ T6302] do_syscall_64+0x106/0xf80 [ 1687.718006][ T6302] ? clear_bhb_loop+0x40/0x90 [ 1687.718029][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.718048][ T6302] RIP: 0033:0x7fd72555d04e [ 1687.718064][ T6302] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1687.718082][ T6302] RSP: 002b:00007fd726409e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1687.718101][ T6302] RAX: ffffffffffffffda RBX: 00007fd72640b6c0 RCX: 00007fd72555d04e [ 1687.718113][ T6302] RDX: 000000000000001c RSI: 00007fd72640a000 RDI: 0000000000000005 [ 1687.718125][ T6302] RBP: 0000000000000000 R08: 00007fd726409f04 R09: 000000000000000c [ 1687.718137][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1687.718148][ T6302] R13: 00007fd726409f58 R14: 00007fd72640a000 R15: 0000000000000000 [ 1687.718171][ T6302] [ 1688.832328][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11217'. [ 1688.883663][ T6322] netlink: 25 bytes leftover after parsing attributes in process `syz.5.11217'. [ 1689.587866][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11219'. [ 1689.647251][ T6327] netlink: 354 bytes leftover after parsing attributes in process `syz.1.11219'. [ 1691.334124][ T6352] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1691.478255][ T155] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 977 with max blocks 6 with error 117 [ 1691.542792][ T155] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1691.542792][ T155] [ 1699.334523][ T155] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 1699.377066][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11244'. [ 1699.409776][ T6451] netlink: 'syz.1.11244': attribute type 1 has an invalid length. [ 1699.442876][ T6451] netlink: 342 bytes leftover after parsing attributes in process `syz.1.11244'. [ 1702.902305][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11251'. [ 1702.949998][ T6490] netlink: 354 bytes leftover after parsing attributes in process `syz.4.11251'. [ 1707.181555][ T6539] net_ratelimit: 16 callbacks suppressed [ 1707.181576][ T6539] netlink: zone id is out of range [ 1707.255016][ T6539] netlink: zone id is out of range [ 1707.297038][ T6539] netlink: zone id is out of range [ 1707.317963][ T6541] netlink: zone id is out of range [ 1707.335185][ T6539] netlink: zone id is out of range [ 1707.352348][ T6541] netlink: zone id is out of range [ 1707.375863][ T6539] netlink: zone id is out of range [ 1707.400385][ T6541] netlink: zone id is out of range [ 1707.427243][ T6539] netlink: zone id is out of range [ 1707.440923][ T6541] netlink: zone id is out of range [ 1707.864402][ T6552] netlink: 25 bytes leftover after parsing attributes in process `syz.1.11264'. [ 1707.957109][ T5833] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1707.993602][ T6554] netlink: 'syz.5.11265': attribute type 1 has an invalid length. [ 1708.028095][ T6554] netlink: 9 bytes leftover after parsing attributes in process `syz.5.11265'. [ 1708.327292][ T5833] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1713.526117][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11286'. [ 1713.581862][ T6640] netlink: 'syz.1.11286': attribute type 1 has an invalid length. [ 1713.628489][ T6640] netlink: 'syz.1.11286': attribute type 6 has an invalid length. [ 1718.024086][ T6708] netlink: 306 bytes leftover after parsing attributes in process `syz.4.11299'. [ 1720.216650][ T6748] netlink: 246 bytes leftover after parsing attributes in process `syz.4.11305'. [ 1721.469935][ T6777] nvme_fcloop: unknown parameter or missing value '7' [ 1722.117398][ T83] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 977 with max blocks 6 with error 117 [ 1722.178248][ T83] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1722.178248][ T83] [ 1722.967697][ T6796] futex_wake_op: syz.1.11315 tries to shift op by -2048; fix this program [ 1723.009696][ T6796] futex_wake_op: syz.1.11315 tries to shift op by -2048; fix this program [ 1723.176580][ T6793] 0x000000000001-0x000000020000 : "" [ 1723.239822][ T6793] ftl_cs: FTL header corrupt! [ 1723.458271][ T6804] ERROR: Out of memory at tomoyo_memory_ok. [ 1728.517297][ T5833] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1729.265187][ T6874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11329'. [ 1729.783609][ T6881] netlink: 25 bytes leftover after parsing attributes in process `syz.3.11331'. [ 1730.762294][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.769133][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.406552][ T6899] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11336'. [ 1733.108645][ T6915] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 958 with max blocks 25 with error 117 [ 1733.166184][ T6915] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1733.166184][ T6915] [ 1733.859504][ T6930] netlink: 9 bytes leftover after parsing attributes in process `syz.3.11342'. [ 1735.436322][ T6964] ERROR: Out of memory at tomoyo_memory_ok. [ 1735.494465][ T6961] ERROR: Out of memory at tomoyo_memory_ok. [ 1736.007242][ T6963] nvme_fcloop: unknown parameter or missing value '7' [ 1737.800670][ T6989] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1737.823603][ T6989] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1737.842853][ T6989] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1737.864250][ T5833] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1737.890209][ T6989] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1737.931187][ T6989] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1737.955000][ T6989] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1738.028628][ T6989] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1739.106802][ T7029] futex_wake_op: syz.4.11364 tries to shift op by -2048; fix this program [ 1739.157741][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 1739.217179][ T7029] futex_wake_op: syz.4.11364 tries to shift op by -2048; fix this program [ 1739.877198][ T1166] Bluetooth: hci2: command 0x0c1a tx timeout [ 1739.883255][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 1739.959307][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 1740.331775][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11375'. [ 1740.353899][ T7044] netlink: 354 bytes leftover after parsing attributes in process `syz.4.11375'. [ 1741.077639][ T7060] binder: 7055:7060 ioctl c00c620f 2000000001c0 returned -22 [ 1741.957150][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 1742.037135][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 1742.533836][ T7089] vivid-007: ================= START STATUS ================= [ 1742.567956][ T7089] vivid-007: Generate PTS: true [ 1742.599631][ T7089] vivid-007: Generate SCR: true [ 1742.631636][ T7089] tpg source WxH: 320x240 (Y'CbCr) [ 1742.636787][ T7089] tpg field: 1 [ 1742.669284][ T7089] tpg crop: (0,0)/320x240 [ 1742.694969][ T7089] tpg compose: (0,0)/320x240 [ 1742.715596][ T7089] tpg colorspace: 8 [ 1742.725716][ T7089] tpg transfer function: 0/0 [ 1742.740827][ T7089] tpg Y'CbCr encoding: 0/0 [ 1742.751921][ T7089] tpg quantization: 0/0 [ 1742.765634][ T7089] tpg RGB range: 0/2 [ 1742.779048][ T7089] vivid-007: ================== END STATUS ================== [ 1744.117710][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 1744.361042][ T7120] random: crng reseeded on system resumption [ 1744.929417][ T7132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11387'. [ 1745.005891][ T7135] netlink: 354 bytes leftover after parsing attributes in process `syz.4.11387'. [ 1745.639733][ T5833] block nbd0: Receive control failed (result -32) [ 1747.228147][ T10] Process accounting resumed [ 1747.238930][ T7182] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 963 with max blocks 10 with error 117 [ 1747.599511][ T7182] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1747.599511][ T7182] [ 1749.729424][ T7223] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 962 with max blocks 21 with error 117 [ 1749.912069][ T7223] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1749.912069][ T7223] [ 1751.178826][ T7267] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=538976288 (1077952576 ns) > initial count (3830 ns). Using initial count to start timer. [ 1751.919638][ T7274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.11412: iget: checksum invalid [ 1752.007939][ T7274] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1752.096423][ T7274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.11412: iget: checksum invalid [ 1752.166022][ T5833] block nbd4: Receive control failed (result -32) [ 1752.264311][ T7274] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1752.409897][ T7274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.11412: iget: checksum invalid [ 1752.436553][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11415'. [ 1752.494694][ T7286] netlink: 354 bytes leftover after parsing attributes in process `syz.4.11415'. [ 1752.544112][ T7274] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1752.597633][ T155] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 977 with max blocks 4 with error 117 [ 1752.612031][ T7274] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.11412: iget: checksum invalid [ 1752.660330][ T155] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1752.660330][ T155] [ 1752.687182][ T7274] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1752.696614][ T7274] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1752.807016][ T7274] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1754.013021][ T29] audit: type=1800 audit(2147484155.620:38): pid=7302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.11418" name="sr0" dev="devtmpfs" ino=2828 res=0 errno=0 [ 1754.386810][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11420'. [ 1755.192705][ T7322] ERROR: Out of memory at tomoyo_memory_ok. [ 1755.248055][ T7321] ERROR: Out of memory at tomoyo_memory_ok. [ 1755.439547][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11425'. [ 1755.473589][ T7330] netlink: 354 bytes leftover after parsing attributes in process `syz.1.11425'. [ 1755.491373][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11426'. [ 1755.533799][ T7328] netlink: 'syz.3.11426': attribute type 1 has an invalid length. [ 1755.581630][ T7328] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11426'. [ 1756.300880][ T7350] bridge0: port 2(gretap0) entered blocking state [ 1756.326274][ T7350] bridge0: port 2(gretap0) entered disabled state [ 1756.349527][ T7350] gretap0: entered allmulticast mode [ 1756.374608][ T7350] gretap0: entered promiscuous mode [ 1756.829544][ T7359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11434'. [ 1757.074804][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11437'. [ 1757.099379][ T7368] netlink: 354 bytes leftover after parsing attributes in process `syz.1.11437'. [ 1757.476758][ T7378] Loading of unsigned module is rejected [ 1758.334670][ T7390] bridge0: port 2(gretap0) entered blocking state [ 1758.378165][ T7390] bridge0: port 2(gretap0) entered disabled state [ 1758.399258][ T7390] gretap0: entered allmulticast mode [ 1758.424677][ T7390] FAULT_INJECTION: forcing a failure. [ 1758.424677][ T7390] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.468858][ T7390] CPU: 0 UID: 0 PID: 7390 Comm: syz.1.11442 Tainted: G L syzkaller #0 PREEMPT(full) [ 1758.468889][ T7390] Tainted: [L]=SOFTLOCKUP [ 1758.468898][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1758.468909][ T7390] Call Trace: [ 1758.468916][ T7390] [ 1758.468923][ T7390] dump_stack_lvl+0x100/0x190 [ 1758.468956][ T7390] should_fail_ex.cold+0x5/0xa [ 1758.468978][ T7390] should_failslab+0xc2/0x120 [ 1758.469000][ T7390] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1758.469030][ T7390] ? __kernfs_new_node+0xd2/0x960 [ 1758.469063][ T7390] __kernfs_new_node+0xd2/0x960 [ 1758.469093][ T7390] ? __pfx___kernfs_new_node+0x10/0x10 [ 1758.469127][ T7390] ? find_held_lock+0x2b/0x80 [ 1758.469145][ T7390] ? kernfs_root+0xee/0x2a0 [ 1758.469171][ T7390] ? kernfs_root+0xee/0x2a0 [ 1758.469203][ T7390] kernfs_new_node+0x11b/0x1a0 [ 1758.469231][ T7390] __kernfs_create_file+0x53/0x350 [ 1758.469257][ T7390] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1758.469289][ T7390] sysfs_create_file_ns+0x145/0x1e0 [ 1758.469315][ T7390] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1758.469341][ T7390] ? kernfs_create_link+0x1bd/0x240 [ 1758.469365][ T7390] ? kernfs_put+0x3f/0x60 [ 1758.469393][ T7390] ? sysfs_do_create_link_sd+0xbb/0x140 [ 1758.469424][ T7390] br_sysfs_addif+0xe4/0x210 [ 1758.469445][ T7390] br_add_if+0x701/0x1b40 [ 1758.469474][ T7390] ? security_capable+0x80/0x260 [ 1758.469496][ T7390] add_del_if+0x114/0x160 [ 1758.469526][ T7390] br_dev_siocdevprivate+0x8ac/0x1650 [ 1758.469558][ T7390] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 1758.469598][ T7390] ? lock_acquire+0x1cf/0x380 [ 1758.469630][ T7390] ? netdev_name_node_lookup+0x107/0x150 [ 1758.469657][ T7390] ? __mutex_lock+0x26a/0x1b90 [ 1758.469679][ T7390] dev_ifsioc+0xc1e/0x1e90 [ 1758.469714][ T7390] ? __pfx_dev_ifsioc+0x10/0x10 [ 1758.469740][ T7390] ? __pfx___mutex_lock+0x10/0x10 [ 1758.469767][ T7390] ? dev_load+0x8e/0x240 [ 1758.469791][ T7390] ? dev_load+0x8e/0x240 [ 1758.469822][ T7390] dev_ioctl+0x70e/0x1070 [ 1758.469852][ T7390] sock_ioctl+0x494/0x6b0 [ 1758.469878][ T7390] ? __pfx_sock_ioctl+0x10/0x10 [ 1758.469906][ T7390] ? hook_file_ioctl_common+0x146/0x410 [ 1758.469935][ T7390] ? __fget_files+0x21f/0x3d0 [ 1758.469957][ T7390] ? __pfx_sock_ioctl+0x10/0x10 [ 1758.469982][ T7390] __x64_sys_ioctl+0x18e/0x210 [ 1758.470013][ T7390] do_syscall_64+0x106/0xf80 [ 1758.470030][ T7390] ? clear_bhb_loop+0x40/0x90 [ 1758.470053][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1758.470073][ T7390] RIP: 0033:0x7efc16b9c819 [ 1758.470089][ T7390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1758.470107][ T7390] RSP: 002b:00007efc17ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1758.470126][ T7390] RAX: ffffffffffffffda RBX: 00007efc16e15fa0 RCX: 00007efc16b9c819 [ 1758.470138][ T7390] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000008 [ 1758.470149][ T7390] RBP: 00007efc16c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1758.470160][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1758.470171][ T7390] R13: 00007efc16e16038 R14: 00007efc16e15fa0 R15: 00007ffcc2d26038 [ 1758.470195][ T7390] [ 1758.475317][ T7390] gretap0: left allmulticast mode [ 1759.800907][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11447'. [ 1759.806183][ T7411] netlink: 354 bytes leftover after parsing attributes in process `syz.1.11447'. [ 1764.581317][ T5833] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 1768.561647][ T7521] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1768.561860][ T7521] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1768.562016][ T7521] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1768.562290][ T7521] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1770.197026][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 1770.597433][ T5833] Bluetooth: hci5: command 0x0406 tx timeout [ 1770.603503][ T1166] Bluetooth: hci4: command 0x0406 tx timeout [ 1770.609988][ T1166] Bluetooth: hci2: command 0x0c1a tx timeout [ 1771.132989][ T7560] ERROR: Out of memory at tomoyo_memory_ok. [ 1771.209564][ T7556] ERROR: Out of memory at tomoyo_memory_ok. [ 1773.858456][ T7552] Bluetooth: hci5: ACL packet for unknown connection handle 0 [ 1775.884463][ T7599] kexec: Could not allocate control_code_buffer [ 1776.725886][ T7625] ERROR: Out of memory at tomoyo_memory_ok. [ 1777.313591][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11493'. [ 1778.387059][T27742] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 977 with max blocks 6 with error 117 [ 1778.404460][ T7637] random: crng reseeded on system resumption [ 1778.450032][T27742] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1778.450032][T27742] [ 1778.658118][T27742] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1408 with max blocks 41 with error 117 [ 1778.729197][T27742] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1778.729197][T27742] [ 1779.807668][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11498'. [ 1780.218725][ T7665] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.11500: iget: checksum invalid [ 1780.387507][ T7665] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1780.537173][ T7665] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.11500: iget: checksum invalid [ 1780.653715][ T7665] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1780.724910][ T7665] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.11500: iget: checksum invalid [ 1780.862350][ T7665] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1780.953257][ T7665] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.11500: iget: checksum invalid [ 1780.993172][ T7665] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1781.047958][ T7665] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1781.081222][ T7665] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1782.489076][ T7699] Loading of unsigned module is rejected [ 1783.135402][ T7709] blktrace: Concurrent blktraces are not allowed on loop2 [ 1783.957312][ T7719] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 961 with max blocks 16 with error 117 [ 1783.957455][ T7719] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1783.957455][ T7719] [ 1784.551191][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11516'. [ 1784.551645][ T7732] netlink: 25 bytes leftover after parsing attributes in process `syz.1.11516'. [ 1784.948075][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11518'. [ 1785.449119][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11518'. [ 1786.198241][ T155] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1410 with max blocks 39 with error 117 [ 1786.271349][ T155] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1786.271349][ T155] [ 1787.344303][T27742] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 967 with max blocks 16 with error 117 [ 1787.418547][T27742] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1787.418547][T27742] [ 1791.134618][ T7829] netlink: 'syz.3.11534': attribute type 2 has an invalid length. [ 1791.971381][ T7845] Loading of unsigned module is rejected [ 1792.204270][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.217019][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.148600][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11542'. [ 1794.593634][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11543'. [ 1795.215774][ T7887] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 964 with max blocks 19 with error 117 [ 1795.315908][ T7887] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1795.315908][ T7887] [ 1795.471400][ T7861] kexec: Could not allocate control_code_buffer [ 1799.027608][ T7960] futex_wake_op: syz.5.11560 tries to shift op by -2048; fix this program [ 1799.297914][ T7965] blktrace: Concurrent blktraces are not allowed on loop2 [ 1801.347861][ T7995] FAULT_INJECTION: forcing a failure. [ 1801.347861][ T7995] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.400857][ T7995] CPU: 0 UID: 0 PID: 7995 Comm: syz.1.11567 Tainted: G L syzkaller #0 PREEMPT(full) [ 1801.400889][ T7995] Tainted: [L]=SOFTLOCKUP [ 1801.400896][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1801.400907][ T7995] Call Trace: [ 1801.400915][ T7995] [ 1801.400922][ T7995] dump_stack_lvl+0x100/0x190 [ 1801.400957][ T7995] should_fail_ex.cold+0x5/0xa [ 1801.400980][ T7995] ? tomoyo_init_log+0x1224/0x20c0 [ 1801.401006][ T7995] should_failslab+0xc2/0x120 [ 1801.401027][ T7995] __kmalloc_noprof+0xe0/0x850 [ 1801.401061][ T7995] tomoyo_init_log+0x1224/0x20c0 [ 1801.401093][ T7995] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1801.401117][ T7995] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1801.401150][ T7995] tomoyo_write_log2+0x2ed/0xbc0 [ 1801.401180][ T7995] tomoyo_supervisor+0x15e/0x1340 [ 1801.401214][ T7995] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1801.401255][ T7995] ? kasan_quarantine_put+0x104/0x240 [ 1801.401287][ T7995] ? tomoyo_check_path_acl+0x141/0x210 [ 1801.401310][ T7995] ? tomoyo_check_acl+0x1f7/0x410 [ 1801.401333][ T7995] tomoyo_path_permission+0x270/0x3b0 [ 1801.401359][ T7995] tomoyo_check_open_permission+0x34d/0x3c0 [ 1801.401384][ T7995] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1801.401428][ T7995] ? do_raw_spin_lock+0x128/0x260 [ 1801.401467][ T7995] ? path_get+0x61/0x80 [ 1801.401491][ T7995] tomoyo_file_open+0x6b/0x90 [ 1801.401510][ T7995] security_file_open+0xb5/0x1e0 [ 1801.401536][ T7995] do_dentry_open+0x5aa/0x1660 [ 1801.401559][ T7995] ? security_inode_permission+0xbf/0x250 [ 1801.401587][ T7995] vfs_open+0x82/0x3f0 [ 1801.401614][ T7995] path_openat+0x208c/0x31a0 [ 1801.401642][ T7995] ? __pfx_path_openat+0x10/0x10 [ 1801.401671][ T7995] do_file_open+0x20e/0x430 [ 1801.401694][ T7995] ? __pfx_do_file_open+0x10/0x10 [ 1801.401731][ T7995] ? alloc_fd+0x476/0x790 [ 1801.401753][ T7995] ? do_getname+0x191/0x390 [ 1801.401779][ T7995] do_sys_openat2+0x10d/0x1e0 [ 1801.401805][ T7995] ? __pfx_do_sys_openat2+0x10/0x10 [ 1801.401832][ T7995] ? __fget_files+0x21f/0x3d0 [ 1801.401855][ T7995] __x64_sys_openat+0x12d/0x210 [ 1801.401882][ T7995] ? __pfx___x64_sys_openat+0x10/0x10 [ 1801.401917][ T7995] do_syscall_64+0x106/0xf80 [ 1801.401935][ T7995] ? clear_bhb_loop+0x40/0x90 [ 1801.401958][ T7995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.401977][ T7995] RIP: 0033:0x7efc16b9c819 [ 1801.401994][ T7995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.402012][ T7995] RSP: 002b:00007efc17ac3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1801.402031][ T7995] RAX: ffffffffffffffda RBX: 00007efc16e15fa0 RCX: 00007efc16b9c819 [ 1801.402044][ T7995] RDX: 00000000000a2741 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 1801.402055][ T7995] RBP: 00007efc16c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1801.402066][ T7995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1801.402077][ T7995] R13: 00007efc16e16038 R14: 00007efc16e15fa0 R15: 00007ffcc2d26038 [ 1801.402100][ T7995] [ 1802.443173][ T8006] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.11569: iget: checksum invalid [ 1802.478686][ T30] INFO: task syz.2.10726:4069 blocked for more than 143 seconds. [ 1802.535635][ T30] Tainted: G L syzkaller #0 [ 1802.567420][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1802.576122][ T30] task:syz.2.10726 state:D stack:25416 pid:4069 tgid:4067 ppid:16627 task_flags:0x400140 flags:0x00080002 [ 1802.679886][ T8006] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 1802.698105][ T30] Call Trace: [ 1802.701412][ T30] [ 1802.724594][ T30] __schedule+0xfee/0x6120 [ 1802.749242][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1802.774632][ T30] ? __pfx___schedule+0x10/0x10 [ 1802.800006][ T30] ? find_held_lock+0x2b/0x80 [ 1802.828477][ T30] ? schedule+0x2bf/0x390 [ 1802.832868][ T30] schedule+0xdd/0x390 [ 1802.860656][ T8006] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.11569: iget: checksum invalid [ 1802.876963][ T30] schedule_preempt_disabled+0x13/0x30 [ 1802.903250][ T30] __mutex_lock+0xc9a/0x1b90 [ 1802.923058][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1802.953322][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1802.987247][ T8006] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 1803.000241][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1803.005306][ T30] ? net_generic+0xea/0x2a0 [ 1803.037476][ T30] ? net_generic+0xea/0x2a0 [ 1803.056974][ T30] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1803.084030][ T30] nfsd_shutdown_threads+0x5b/0xf0 [ 1803.097091][ T8006] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.11569: iget: checksum invalid [ 1803.122984][ T30] nfsd_umount+0x3b/0x60 [ 1803.160509][ T30] deactivate_locked_super+0xc1/0x1b0 [ 1803.166060][ T30] deactivate_super+0xe7/0x110 [ 1803.220013][ T30] cleanup_mnt+0x21f/0x450 [ 1803.269153][ T30] task_work_run+0x150/0x240 [ 1803.273827][ T30] ? __pfx_task_work_run+0x10/0x10 [ 1803.279392][ T8006] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 1803.332003][ T30] exit_to_user_mode_loop+0x100/0x4a0 [ 1803.373622][ T30] do_syscall_64+0x668/0xf80 [ 1803.404680][ T30] ? clear_bhb_loop+0x40/0x90 [ 1803.409948][ T8006] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.5.11569: iget: checksum invalid [ 1803.439105][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.468671][ T30] RIP: 0033:0x7fb25379c819 [ 1803.473129][ T30] RSP: 002b:00007fb2545d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1803.494521][ T8006] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 1803.536977][ T30] RAX: 0000000000000000 RBX: 00007fb253a15fa0 RCX: 00007fb25379c819 [ 1803.558726][ T8006] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 1803.587586][ T30] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000000 [ 1803.639982][ T30] RBP: 00007fb253832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1803.653489][ T8006] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1803.688416][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1803.731414][ T30] R13: 00007fb253a16038 R14: 00007fb253a15fa0 R15: 00007ffff2b69b28 [ 1803.793421][ T30] [ 1803.809326][ T30] [ 1803.809326][ T30] Showing all locks held in the system: [ 1803.867047][ T30] 1 lock held by khungtaskd/30: [ 1803.892441][ T30] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1803.957344][ T30] 2 locks held by syz-executor/5809: [ 1803.962737][ T30] 2 locks held by getty/25447: [ 1804.006961][ T30] #0: ffff888037ee10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1804.053066][ T30] #1: ffffc900038eb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1804.097801][ T30] 2 locks held by syz.0.10480/2988: [ 1804.123303][ T30] #0: ffffffff906c2bd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1804.139203][ T30] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1804.170416][ T30] 2 locks held by syz.2.10726/4069: [ 1804.190393][ T30] #0: ffff888059eb20e0 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1804.316586][ T30] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1804.386959][ T30] 2 locks held by syz-executor/4305: [ 1804.392293][ T30] 1 lock held by syz.4.11568/8000: [ 1804.462563][ T30] 2 locks held by syz.5.11569/7999: [ 1804.486767][ T30] [ 1804.497593][ T30] ============================================= [ 1804.497593][ T30] [ 1804.506050][ T30] NMI backtrace for cpu 0 [ 1804.506066][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1804.506091][ T30] Tainted: [L]=SOFTLOCKUP [ 1804.506098][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1804.506109][ T30] Call Trace: [ 1804.506116][ T30] [ 1804.506123][ T30] dump_stack_lvl+0x100/0x190 [ 1804.506156][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1804.506188][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1804.506219][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1804.506249][ T30] sys_info+0x141/0x190 [ 1804.506270][ T30] watchdog+0xd25/0x1050 [ 1804.506296][ T30] ? __pfx_watchdog+0x10/0x10 [ 1804.506316][ T30] ? __kthread_parkme+0x18c/0x230 [ 1804.506340][ T30] ? kthread+0x13a/0x450 [ 1804.506364][ T30] ? __pfx_watchdog+0x10/0x10 [ 1804.506386][ T30] kthread+0x370/0x450 [ 1804.506411][ T30] ? __pfx_kthread+0x10/0x10 [ 1804.506438][ T30] ret_from_fork+0x754/0xd80 [ 1804.506468][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1804.506499][ T30] ? __switch_to+0x7b4/0x1120 [ 1804.506520][ T30] ? __pfx_kthread+0x10/0x10 [ 1804.506547][ T30] ret_from_fork_asm+0x1a/0x30 [ 1804.506578][ T30] [ 1804.879771][ T8003] tipc: Started in network mode [ 1804.884674][ T8003] tipc: Node identity ee00, cluster identity 4711 [ 1804.969056][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1804.975963][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1804.986654][ T30] Tainted: [L]=SOFTLOCKUP [ 1804.990987][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1805.001051][ T30] Call Trace: [ 1805.004349][ T30] [ 1805.007283][ T30] dump_stack_lvl+0x100/0x190 [ 1805.011975][ T30] vpanic+0x552/0x970 [ 1805.015961][ T30] ? __pfx_vpanic+0x10/0x10 [ 1805.020467][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1805.026634][ T30] panic+0xd1/0xe0 [ 1805.030356][ T30] ? __pfx_panic+0x10/0x10 [ 1805.034778][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1805.040951][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1805.047131][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1805.053291][ T30] ? watchdog.cold+0x198/0x1ca [ 1805.058056][ T30] ? watchdog+0xd35/0x1050 [ 1805.062480][ T30] watchdog.cold+0x1a9/0x1ca [ 1805.067083][ T30] ? __pfx_watchdog+0x10/0x10 [ 1805.071770][ T30] ? __kthread_parkme+0x18c/0x230 [ 1805.076805][ T30] ? kthread+0x13a/0x450 [ 1805.081055][ T30] ? __pfx_watchdog+0x10/0x10 [ 1805.085732][ T30] kthread+0x370/0x450 [ 1805.089821][ T30] ? __pfx_kthread+0x10/0x10 [ 1805.094427][ T30] ret_from_fork+0x754/0xd80 [ 1805.099032][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1805.104179][ T30] ? __switch_to+0x7b4/0x1120 [ 1805.108881][ T30] ? __pfx_kthread+0x10/0x10 [ 1805.113591][ T30] ret_from_fork_asm+0x1a/0x30 [ 1805.118375][ T30] [ 1805.121470][ T30] Kernel Offset: disabled [ 1805.125815][ T30] Rebooting in 86400 seconds..