last executing test programs: 6.978806327s ago: executing program 3 (id=818): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x1, 0x3, 0x3c, 0xfffffffffffffff3}) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r1, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r1, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_FILS_KEK={0x9, 0xf2, "3cd55e4f62"}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xffff8001}, @NL80211_ATTR_MAC={0x44, 0x6, "00204066381b1c58a483b53199d4837d846ca61522e6c89f0acd61ec6c5428960dd901c91f13598befbd829e303932132ef60abdd8ea4dbec67f9cd0c6f06297"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x20000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, r5, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PUBLIC_KEY={0x8f, 0x4, "b5f225dd90eecbbe748886000032517caac56108473d26f9851fd8f1994ee19209dd3f52d5471ab3e08aff4afc8a40a557ea2ad6c1cd68ac761ba6bcd03e7b2f38cfdd309924cbf80ea3b86c10b255d1610ef5f6f9cdccac0d05995afa5038be16c59232e696a1d15a1d03313d69d6d6f2ce6a67fe40f730652f0b991ac110b24eea9e3716b9afe14ba2f9"}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x6}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'nr0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0xd0}}, 0x448d1) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/hwirq\x00', 0x181840, 0x0) r8 = ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000001c0)={0x8, &(0x7f0000000180)={0xe3b4, 0x9, 0xca, @raw}}) read$auto_seq_oss_f_ops_seq_oss(r8, &(0x7f00000002c0)=""/17, 0x11) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000000)=""/46, 0x2e) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, r9) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) r11 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown$auto(0x200000003, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GPARAMS(r11, 0x40485404, &(0x7f0000003e80)={{0x0, 0x7f, 0x938, 0x4, 0xf9a}, 0x0, 0x20400000000000, "81eaaeb421c1ea18e8758bd4845baf6f22d2878af1a124891ecb3fdcff09c3ef"}) write$auto(r10, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) io_uring_setup$auto(0xa9, 0x0) r12 = socket(0x2a, 0x2, 0x1) r13 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/workqueue/parameters/default_affinity_scope\x00', 0x3e9240, 0x0) sendfile$auto(r12, r13, 0x0, 0x5) 6.413706157s ago: executing program 3 (id=821): socket(0x1e, 0x6, 0x3) mmap$auto(0x0, 0xac1, 0xdf, 0x100000009b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) accept$auto(0xffffffffffffffff, &(0x7f0000000480)=@sco, &(0x7f00000004c0)=0x7ff) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0xe2}, 0x6, 0x5, 0x100000004, 0x2e) prctl$auto(0x21, 0x4000000000, 0x0, 0x9, 0xc8e) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptyq0\x00', 0x197800, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000003800)='/proc/thread-self/net/bonding/bond0\x00', 0x20000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) rename$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mprotect$auto(0x0, 0xffffffff, 0x8) 6.188406649s ago: executing program 0 (id=822): mmap$auto(0x0, 0x402000a, 0x8, 0x16, 0x401, 0x8000000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r0, 0x0, 0xfffffdf1) ioctl$auto_FS_IOC_SETFLAGS2(r0, 0x40086602, 0x0) socket(0x2, 0x5, 0xff) read$auto_mon_fops_binary_mon_bin(r0, &(0x7f0000001080)=""/4097, 0x1001) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x600006, 0x19) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/psaux\x00', 0x151000, 0x0) times$auto(&(0x7f0000000040)={0x100002b, 0x9, 0x1, 0x2}) poll$auto(&(0x7f0000000000)={r1, 0x3, 0x4}, 0xb, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nbd2\x00', 0x40000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf19030000000800010002"], 0x1c}}, 0x24044880) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) writev$auto(0xffffffffffffffff, 0x0, 0xbf) socket$nl_generic(0x10, 0x3, 0x10) 5.675455599s ago: executing program 3 (id=825): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pppol2tp\x00', 0x40, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xba*G\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90~Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1\x00'/232, 0x2, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) syz_clone3(&(0x7f00000001c0)={0x12c0a4580, 0x0, 0x0, 0x0, {0x20}, 0x0, 0xffffffffffffff56, 0x0, 0x0}, 0x58) ioctl$auto_PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000180)=0x2) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r2, 0xc0104d08, r2) mmap$auto(0x0, 0x20009, 0xe3, 0x200100000eb1, 0xffffffffffffffff, 0x8000) r3 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(r3, 0x80000000, 0x0, 0x6) fcntl$getown(r0, 0x9) 5.337048859s ago: executing program 3 (id=826): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) r1 = getpid() mmap$auto(0x0, 0x401, 0x3, 0xeb1, r0, 0x8000) close_range$auto(0x0, 0x5, 0x0) r2 = pipe$auto(0x0) mmap$auto(0x0, 0x1, 0x8000000000000001, 0x38, 0xffffffffffffffff, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram3\x00', 0x24e602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r3, 0x8000) r4 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r4, 0x0, 0xfffffdf1) ioctl$auto_SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000340)="6e945ae43e768f8052df6e1d821991fe5653e6de865e422d2e42ba781d04bcbcad09ef349d6a9262e62c6d5ee8c094b656aa329b6486f122311ccb83b91c9dd2b371112f04ba88464e45d8c68b9b88b88329a27206c0380d879c61f59b092c7a31040469862c8a9be68fb962522beb0e25e3bb2306367196a5f83d5500678f54ae2f5350c4629a6f8d486cdbc0b1c834b0b0f6b9") fdatasync$auto(r3) madvise$auto(0x0, 0x400053, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r5, r6, 0x0, 0x1000200) r7 = socket(0x11, 0x80003, 0x300) recvmmsg$auto(r7, 0x0, 0x10001, 0x0, 0x0) mount$auto(0x0, 0x0, 0x0, 0xf, 0x0) getdents64$auto(r5, &(0x7f00000000c0)={0x8b7, 0x10001, 0xf, 0x93, "98926d09103960d20df0ba9d16ae893e3741690ae4481076201fa4bb8b303e86fa9a71398cdbf8d199433c6fb654c503820757f8"}, 0xa224) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, r3, 0xc) sysfs$auto(0x2, 0x100000000000039, 0x0) r8 = fsopen$auto(0x0, 0x1) fsconfig$auto(r8, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@link_create={@map_fd=r2, @target_fd=r2, 0x200, 0x8e6, @uprobe_multi={0xffffffffffffffff, 0x400, 0x59cb, 0x1, 0x10000, 0x1, r1}}, 0x10) 4.798695386s ago: executing program 0 (id=828): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000236bd7000fedbdf250200000008003c00020000000800130002000000"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x8d1}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x70bd2d, 0x25dfd3fb, {}, [@HWSIM_ATTR_RADIO_NAME={0x13, 0x11, '\x0e\xbba}8(\xd2\x9av~O8.\"%'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000010) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) io_setup$auto(0xffff, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x9, 0x5, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x9}) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ASSOCIATE_REQ(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r5, @ANYBLOB="10002bbd7000ffdbdf250100000005001d000c000000d0fd45e490388d13dbe18677c722d324f244d17babfd9448ee4e256c552171c2849f9df21275c5689191db493f87768e6188cd79dda575c878fa"], 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4008890) sendmsg$auto_IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f00000002c0)={&(0x7f0000000100), 0x5, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012abd7000fcdbdf25030000000500120002000000050013000000000006000d00000000004c000f00000000000000000005001a000600000005002b0002000000050034000100000005001800030000003c705d79251aa3b69150d80bcc7624fcbb8a0247e8e4"], 0x58}, 0x1, 0x0, 0x0, 0x8880}, 0x800) statx$auto(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x8000, 0x5853, &(0x7f00000005c0)={0x8, 0x8, 0x10000, 0x5, 0xee00, 0xee00, 0x3, 0xa723, 0xffff, 0xb5, 0x0, 0xffffffffffffffff, {0x9, 0x9}, {0x5, 0x9}, {0x1, 0x1}, {0x1, 0xfffffff8}, 0x4, 0xf33, 0x2, 0x4, 0xe7, 0x579adbac, 0xa, 0x4, 0x8, 0x56, 0x3, 0x4, [0x401, 0x8, 0x6, 0x7fffffffffffffff, 0x5, 0xda, 0xa0a, 0xd1, 0x3]}) fstat$auto(r4, &(0x7f00000006c0)={0x6, 0x101, 0x6, 0x2, r6, 0xffffffffffffffff, 0x0, 0x10000, 0x200, 0x8000000000000001, 0x80000001, 0x7ff, 0x1, 0xff, 0x0, 0x61, 0x6}) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) write$auto(r0, &(0x7f0000000140)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\nu(=\xd1<\xf9\x96\x10>\xb9IL\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1cS\xf2~>\xb1\xc6\xd1\xee\xc8\x06e\xc1w\xf05%\xd76]\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xf9\xff\xff\xff\xdc\xc6\xbb^\xa92\xa9u/\x00'/134, 0x100000002) 4.350495115s ago: executing program 2 (id=830): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x10, 0x0, 0x5, 0x8}, 0xfff}, 0x8, 0x311) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r2, 0x0, 0x10, 0xccbd5d) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x10) unshare$auto(0x40000080) r3 = socket(0x27, 0x6, 0x0) sendmmsg$auto(r3, &(0x7f00000001c0)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0x9}, 0xf}, 0xd, 0xffffffff) connect$auto(0x3, 0x0, 0x6) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) getsockopt$auto(0xffffffffffffffff, 0x40000000029, 0x50, 0xfffffffffffffffe, 0x0) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0x200007, 0x19) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0xffffffffffffffeb, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x400c040) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) socket(0x29, 0x2, 0x0) 3.801227464s ago: executing program 0 (id=831): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(r0, 0x0, 0x10007d) r1 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000001500)='/proc/self/ns/cgroup\x00', 0x180, 0x0) fremovexattr$auto(r1, &(0x7f00000003c0)='system.p\xbc\xf2\x8ewLsix_acl]access\x00e\xd8\v\x1b\x02\xd5q?\x8c\xf1\x8f\x89\x7f\xd47\x84dG\xb3\xf1\xa6\x1b\x03\x18s8G \x950\xf0\xe0H!\x86,\xd1{\xf0\xd4\x11B\xc5-\vX-c\xfd\x84\xf24\xdd\xac\xea\x1f1\xc2+0\xc7\xae\xcfC\x18gA\xa8\xc6B\xc9f\'_]\xe5i\xc0d\xb8c\xbbtzB\xe7\x9383\xdf\xf7x\x18\xd8\xfb(\xae\xb6\xc3\x02;mlG\x14\xdf\x9f\xea\xbf\x93\xae\xa5.\xfd\xe2a\xa4\x1bK\xbbZA\xb8\xc4\x9f\x93\xff\x86l\xd2\a7\xba=LC\xc4\xdc3\xfd%\xef\x7f\x81\x9eB\x9ao\a\xa3\xea?\x11\xd8LuX\xb8\xa8\xe2j\x98\\\xd0\xd72_c\b\xb3\xd1\xa6g,5\b|\x95\x98\xb0c\x90\xfd\x12\x1f\x1c\x00\x00\x00\x00\x00\x00\x00\x03\xa1\x98\te\'\xc8\x97\xda\xe4&)\xe5\xa3)@\x13In\xad:\xaf@_c\x1b9k\xbfT\xbd\xde\v\x7f\x1e0\xe5\xff\xcbv\xd2B\xd5\xaf+\xc8T\x00\x00\x00\x00\x00\x00\x00\x00 \xa4\xf4\xf2l]m\x8c\xa7=\x97|cBLO\xf3\x1a^\xdbcY\xd7Bwx\x12}\xecg\xf9\xbf\xe5\xf8\xe7\xf0\xd0\x03\xa0\x11e\xbd\xea\x03\xdb\xb3\xb0\x99r3\xafUy\"\xf0W\x88\xe0!e\x8d\xdeN\xa2\xe4\xccvi\xa5\x10q\xa1\xc0\xe3\xe7\x1c:Q\xa0\xcf\xc7\xf1\xf0y\xb1`v.\xb0\xe3?\xca\xa7\x11`\xc64\xcd\xb8\xab\x18f\xc3a\xa1\xf0\\\xa1\x98\x1cF\xf9[)\x86\x90\xbbS1\xa8\n%\x02\x13\xc2\xc5\xd5[\xf5y\x9c\xc7b\xbb&\x824G\'9\v\x82\xcd#\xebnp]\xc9\x17\x87\xc9{u$&\xb1\n\x1f\x1f\xdf\\]\x05U\xb7\xaf\xf75\xa6\xd20\x1c9\xc2\xd8\xb4\x1c\xcf\xcd\x1b\xd0\r\b\xf5\xa7\x99)p\xd7T\xbf\xce\xd4\xaa\xc4j\xac6\x8b=\xf1\x86\xdd\x98\xb4\xe9\x84@\xec\xb8\xe0r\x8f\b\':\x0e\xf1@\xdb') openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x20080, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a", 0x18) mmap$auto(0x0, 0x838, 0x3, 0xeb1, 0xfffffffffffffffa, 0xa83c) close_range$auto(0x2, 0xa, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto_SO_DEBUG(r3, 0x6, 0x1, 0x0, 0xda3) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x403c6f2b, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xa, 0x0, 0x80006, 0x11, 0xfffffffffffffffa, 0x65) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x8e) gettimeofday$auto(0x0, 0x0) fanotify_init$auto(0x5, 0x0) mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) 3.554989218s ago: executing program 3 (id=833): unshare$auto(0x40000080) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x807ff0000000000, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x40000000f42c, 0x80202) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x1) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40000, 0x0) getdents$auto(r2, 0x0, 0x802) r3 = socket(0xa, 0x5, 0x0) ioctl$auto(r3, 0x8941, 0x8) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, 0x0, 0x1000) ioctl$auto_TCSBRKP2(r1, 0x5425, 0x0) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r4, 0x5408, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0x9, 0x0) 3.502050461s ago: executing program 2 (id=834): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) r3 = io_uring_setup$auto(0x6, 0x0) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) getsockname$auto(r3, &(0x7f0000000080)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, &(0x7f0000000140)=0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(0x2, 0x8, 0x0) 3.046204624s ago: executing program 2 (id=836): mmap$auto(0x0, 0x402000a, 0x8, 0x16, 0x401, 0x8000000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r0, 0x0, 0xfffffdf1) ioctl$auto_FS_IOC_SETFLAGS2(r0, 0x40086602, 0x0) socket(0x2, 0x5, 0xff) read$auto_mon_fops_binary_mon_bin(r0, &(0x7f0000001080)=""/4097, 0x1001) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x600006, 0x19) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/psaux\x00', 0x151000, 0x0) times$auto(&(0x7f0000000040)={0x100002b, 0x9, 0x1, 0x2}) poll$auto(&(0x7f0000000000)={r1, 0x3, 0x4}, 0xb, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nbd2\x00', 0x40000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000006cc0), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r2, &(0x7f0000006d80)={0x0, 0x0, &(0x7f0000006d40)={&(0x7f0000006d00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf19030000000800010002"], 0x1c}}, 0x24044880) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) writev$auto(0xffffffffffffffff, 0x0, 0xbf) socket$nl_generic(0x10, 0x3, 0x10) 2.704692755s ago: executing program 3 (id=837): r0 = socket(0xa, 0x801, 0x106) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, &(0x7f0000000400)={0x3, 0xbd64}) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x1, 0x20009, 0xdf, 0xebf, 0x40000000000a5, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x4, 0x73) socket(0x8, 0x5, 0x400084) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="020000", @ANYBLOB="29f7"], 0x14}}, 0x24004814) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000440)={0x0, 0xc4}, 0x40001, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x1, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x8, 0x0, [0xe, 0x5, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xfffffffffffffffb, 0xfffbffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x200000, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) listen$auto(r1, 0x0) r2 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r2, &(0x7f0000000100)={&(0x7f0000000040), 0x82}, 0x1008, 0xe637, 0x3) 2.043792013s ago: executing program 1 (id=838): r0 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/032/001\x00', 0x200042, 0x0) ioctl$auto_USBDEVFS_DISCSIGNAL(r1, 0x8010550e, &(0x7f00000000c0)={0x10, &(0x7f0000000040)="0e4780be27c5d7424e3539a86e5f8e8c6bc9f6c2514a78f4a6a18d481142c28e8f11"}) syz_genetlink_get_family_id$auto_cifs(0x0, 0xffffffffffffffff) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(0xffffffffffffffff, 0x0, 0x0) socket(0xa, 0x3, 0x3a) unshare$auto(0x2) close_range$auto(r0, 0x5, 0x8001) io_uring_register$auto(0xffffffffffffffff, 0x10, 0x0, 0x7f) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) io_setup$auto(0x7ffe, 0x0) 1.901810915s ago: executing program 1 (id=839): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x5, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1181, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) mmap$auto(0x0, 0x7, 0x3edc2ecf, 0x9b72, 0x2, 0x8000) socket(0x27, 0x800, 0x84) ioprio_set$auto(0x2, 0xee00, 0x80000001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x300c00, 0x0) ioctl$auto_TIOCGDEV2(r4, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0x21, 0x9b72, 0x2, 0x7fff) socket(0xa, 0x3, 0x3b) mmap$auto(0x800000000, 0x202000c, 0xfffffffffffffffa, 0xeb1, r3, 0x8000) r5 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r5, 0x11c, 0x1, 0x0, 0x0) msync$auto(0x200000, 0x2000000005, 0x6) mmap$auto(0x3, 0x8, 0x40000df, 0x8eb1, 0x401, 0x400073de) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0x2, 0x3, 0x6) 1.477451018s ago: executing program 2 (id=840): socket(0x1e, 0x6, 0x3) mmap$auto(0x0, 0xac1, 0xdf, 0x100000009b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) accept$auto(0xffffffffffffffff, &(0x7f0000000480)=@sco, &(0x7f00000004c0)=0x7ff) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0xe2}, 0x6, 0x5, 0x100000004, 0x2e) prctl$auto(0x21, 0x4000000000, 0x0, 0x9, 0xc8e) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) rename$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mprotect$auto(0x0, 0xffffffff, 0x8) 1.345984527s ago: executing program 1 (id=841): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) (async, rerun: 64) r0 = openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ramdisk_pages/ram15\x00', 0x102, 0x0) read$auto_fops_u64_ro_(r0, 0x0, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x11) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) (async) sched_setaffinity$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) (async) socketpair$auto(0x0, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) recvmmsg$auto(0x3, 0x0, 0x10700, 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async, rerun: 64) connect$auto(0xffffffffffffffff, 0x0, 0xb) (rerun: 64) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) (async, rerun: 64) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 64) clone$auto(0x400000000000021, 0xe, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xd) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) madvise$auto(0x5, 0x80000000, 0x4) (async) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, 0x0, 0x80) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x800, 0x6, 0xa, 0xffffffffffffffff, [], {0x8, 0x101, 0x1, 0x22b, 0x8000100, 0x581, 0x104, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1001, 0x52, 0x8, 0x3, 0x3d, 0x8, 0xb9, 0x100000000}}) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) 1.276621748s ago: executing program 0 (id=842): mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0x405, 0x100008000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20082, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) msync$auto(0x110c230000, 0xc4, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/tty/ttyx0/power/autosuspend_delay_ms\x00', 0x412d00, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x8, 0x5, 0x13, 0xfffffffffffffffa, 0x7f) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x7, 0x40009, 0xde, 0x13, r0, 0xea8) socket(0x2c, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/virtual/block/nbd12/size\x00', 0x474082, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0xdd4f, 0xffffbfffffff0016, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttys9/power/runtime_suspended_time\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x1000000001) writev$auto(0xffffffffffffffff, 0x0, 0x2) r2 = fcntl$getown(r1, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x7886ad126460b68b, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000ec0)=""/4096, 0x1000) prctl$auto(0x4, 0x1, r2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f00000001c0)="d439cdb834de74948a799b5d9d9ecc0bcab574996a79de4710bd50438cf11530b567697481f49d4e82f30616dd4b4a2708957b4653ca400c10af7875c6240fceb6805cf1face2f0cca0700000d5b000000fa5c8423e0dd713256cb2578e8280e1617b20d0bb03235f9f615586d203876a0d0328bb5de1e7e", 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x8000000000000001, 0xb}, 0xfff}, 0x5, 0x10311) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4) 922.935676ms ago: executing program 0 (id=843): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0x1d, "0000e100"}, 0x58) sendto$auto(0xffffffffffffffff, 0x0, 0x2, 0x800f035, &(0x7f0000000340)=@l2={0x1f, 0x9, @none, 0x5, 0x2}, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_RXQ_OVFL(r0, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x107383, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, 0x0, 0x0) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x20000000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/memory.numa_stat\x00', 0xe2080, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) unshare$auto(0x40000080) 795.621115ms ago: executing program 1 (id=844): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x129800, 0x0) ioctl$auto(r0, 0x901064ae, 0x4) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) 709.822613ms ago: executing program 2 (id=845): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$auto(r2, 0x800064cf, r2) sendmsg$auto_TIPC_NL_MEDIA_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim1/ports/2/ipsec\x00', 0x400, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd3\x00', 0x80, 0x0) socket(0xa, 0x801, 0x84) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x200002, 0x4, 0x30}, 0x18) bpf$auto(0x6, &(0x7f0000000140)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x4007}, 0xa3) getxattrat$auto(r3, &(0x7f0000000100)='./file0\x00', 0x200, &(0x7f0000000140)='/dev/kvm\x00', &(0x7f00000001c0)={0x7, 0x2, 0x4}, 0xa) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r5 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000001240), 0x40, 0x0) ioctl$auto(r5, 0x3b8e, r4) socket(0x11, 0x3, 0x1) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r6, 0x400c4d04, r6) 687.028729ms ago: executing program 1 (id=846): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf250d00000008000100", @ANYRES32=r1, @ANYBLOB="0001914600", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r2, 0x8000) arch_prctl$auto_ARCH_SHSTK_STATUS(0x5005, 0xfffffffffffffffb) socketpair$auto(0x7, 0x2cc, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x6) quotactl_fd$auto(r0, 0x200, 0x0, &(0x7f0000000240)="d70c3de76eda") sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_MACSEC_CMD_GET_TXSC(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000400)={0x1c8, 0x0, 0x300, 0x0, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0x1a9, 0x9, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @fd}, @generic="2011f07bda49aab6e6281e38dab7db1af4fcdf2413496978b2f39593421b5509a7c7578697cbb7acd12605db57ccb0547030c22c53533b4d47ccf4ff0e025688ec0a74d3ac6e45d4faf0970b18af0c198b34ac9a9906a8c0923771076c9f07b706e86e4d3b8a307e73347f94217a3fcb65e92c29101635d816073f15b81cb6c658f67704eeaf15688ba7aec130600ff087d541ab511467c5f7e099f4c5b410089cdff6f717d8808df896180c7912409f47800da9540fa8bc28cf32a03cee43cc19c713f6fdf6ea01fac088ff395cfe56771ead32ebf66833dc57c85559b755b5f7371d1803ffde", @nested={0x18, 0x4d, 0x0, 0x1, [@nested={0x4, 0xd1}, @typed={0x8, 0x152, 0x0, 0x0, @fd}, @nested={0x4}, @nested={0x4, 0xa6}]}, @generic="69445bfcfcc03faf74a2b743e28bc64bec331c1947079c385c16d65804b6fc76755574d1e2b1fd46dea528bdaa53ad500fcda95129183f4bf39b9b246878ca22a408d92fb9ab529be56dda271050cfb01aea800e23e28944cba3c94c9ca72e35f4e3e65ed0746d37247ae522158c2ff4b5e99ed70d9e9f267a277b26fcec78981a7b9aa977e3af8c6bfe2af32a6e08f25f1534529c81e68d83415de7c7fe"]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x8001}, 0x801) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x800a) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7fd, 0x89, 0x26, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffa, 0x8, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x9, 0xd) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd05, &(0x7f00000001c0)) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x101, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) 398.506967ms ago: executing program 2 (id=847): unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x7fffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/watchdog_thresh\x00', 0x20402, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x840042, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x101, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x20000006}, 0x9) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) ioctl$auto_RTC_UIE_ON(r4, 0x7003, 0x4) mmap$auto(0x1, 0x7f, 0xdf, 0xeb1, 0xffffffffffffffff, 0x9) dup3$auto(r3, r3, 0x4) set_tid_address$auto(0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB="10002c"], 0x2c}}, 0x4000000) 96.555926ms ago: executing program 1 (id=848): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/can/stats\x00', 0x121040, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffe) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pci/drivers/goku_udc/new_id\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x10010) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/dummy_hcd.5/usb6/bMaxPower\x00', 0x80, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000100)={0x0, 0x7}, 0x3) mq_getsetattr$auto(0x3, 0x0, &(0x7f0000000140)={0x8, 0x8, 0x1, 0x1}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf25030000000400080010"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400e31d", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf25020000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) pread64$auto(r0, 0x0, 0x100006, 0xc982) madvise$auto(0x0, 0x7, 0xa) clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) unshare$auto(0x4000007d) madvise$auto(0x0, 0x2003f0, 0x17) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 0s ago: executing program 0 (id=849): unshare$auto(0x40000080) mmap$auto(0x6, 0xffff, 0xfffffffffffffffa, 0xeb3, 0xffffffffffffffff, 0xd) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/serial8250/serial8250:0/serial8250:0.2/tty/ttyS2/power/wakeup_abort_count\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = io_uring_setup$auto(0xf6, 0x0) ioctl$auto(0x3, 0x4038ae7a, r1) mmap$auto(0xfffffffffffffffa, 0x4000004, 0xdf, 0xeb1, 0x401, 0x7fff) pipe$auto(0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0xffffffffffffffff, 0x4008ae6a, 0xffffffffffffffff) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty41\x00', 0x109101, 0x0) ioctl$auto_SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000100)="f862ebefa5787d9e59948e181d8213510721bce313202994a41753cd93f253e9245f61ebac59d265ac6ea53184bd0f32fb1cb666776d820811046979007a89f5fdcb692c6db174118acd00ac57cd0a9631e400c6a1e4a7cc9ac85221826d486aee55559290e8818881e9d5c06586b7dfda584aa3e6b5560fdbfda00d25c6431bbcb1fb080bc16240b29565c846a911a19b14a96d502d20dc4f47785681bc728f03c0d1929a61a66ebdb879e48af03ceabf68cac35fdf3a81f156699f165c64c24a4a08fab2836a9d8a105ae3b3a076096ee947bd3d9dd37f3853dedcade9e5c2dda9337f444f543614efda287e0a3da25025e6a640cb2ccbb6c8b598d22d419d0f98857e05b580350da1931885f28378baa41e241e6aa80bedaa981fff261f1509609a1775628fb1bc77b3de1ceefa38eb026306015f877f12e2624442c4300724b103de8fb7463c693dcfa67ef66df1ea2b7dc228c97e68d066b860b665ee606ec258c16ee92e723d8de246cc55c1d62ad64cffd8d6706ccb9c7712853d6d8175a399f42877d3e6aea19d3cc2055304882fd2e82334e03c8be805feb177bfa4825e360c20fcb11c6d20269dd6a7d98d2d7cb5a297e287649be02b772ffe6453a0bf3c514fb138bb9f35ccc82f91205b70622c0d2ae61a5c569e50e6d43c2292639edc54e294ee44b2de77754187612761f2656b346ee4b71443f001bb9422e6b9492f91f09aa408a00712db4e47e98bee60487fd2a3d8d4dd99fae8394163201f82b5261f66095c32c1e902bfb84fc6b225e187a05478055a26196cfbb408ea035d92c4526373932021bb9b85588907c4e16ec02ab448b59e684da6ab99336654d51a233ba667d7fc5f7ed5e2cab7f6812aa56ce2977dd389915b7539203fe6368bc1f859ab3b1cdb71cefbd09570699e2b091061ab80e5ea171b9eb64cfa50cff25c3f9a97466a0a8b955ccbbb0df0888325d7f0c8c94ce5bf41a80b1f12c8e2820f458a186b094d71a190fde6dd3eacea622206a6c013b84042f18e72addd0d6b6a37cf8c27cdf2bc679690e6ddbea60d0c2c8202713e8c2a35f831b31764e7338500ccdbdca26f8d277af2f87ee14f840c8f702b1b965f09a72838b20934d6f65afa023d4162e4377cad88af4bd10a6640f2c4f2e641af119d96eba57b2c70e5a526d7f58b8df5354f97763957580fea04d38f7f2f295bd5b98dc9c6f6989f49607375abe955563181d2982e12ed0b73fa398de4b25581957f7efc01e0c0571c421bcf71483a4b3c6f776433582ae89992c358e12b4dfe3db511c0009c941aa20998c8a8e7e922b9be9995243de47c4cb5840818ff16d1c2ec4bc2ba1c7cb2e14594c11f3b06dac7060efecdf53c9e2f82e81cfa8537a6c58327ce6b6853e246de8a9ada8c6eb5567c05f6e277360cdf548e6cafc9b2b6f7bb190d4f8a601cdc192d29341fde5eb2c70b9f0b4144e19cd51ce2543f78839b055779574c1fa08bd55c40a9e6bbcb2cd1d6ba590e7996030484e11d9a9700341e51eaaa41af70e6bb2286b33798202687de1e4dccdd1fd650da94bbac9fd0e5370a2c981f11a13e7bf46d3487cf316eb107d4b352e4f8e8c932174d7fc7ef501aba14fc4f3170c09919a09640e4176a983e374cc892e639a4e3704777a36164a96a2c6c1d5c887b5ee527cb744b6ebad93b69490761768863344c105d8652705f6933c88a92ba976ff12b70f0fc765098ce1679b09da7574d272b3ff2c497353d3f2e3db32bc85f27db93571760a874c154bc3ed4067eeb5640351abf7686d0f53351f1334729681eef26b21ad33e4b5486d41b3f12e442b40af6f281049da05bd32ab2d324c7f0e260354e5e8dea242c023d5696f80902aedb0301bd9ffc0e1d604967361ce5013ad41109eb8c5468cbaf37c869e8bd7d133d24f7f1c3c2551fb99235b2b411a5d61db5715e1c2cf8602903ab796f95aecdec2089cbe7d9d897eabadee729db53e3cb7058b064fe6cfea2695fce5998b0b25e0b86d8f0f5b40183e3b37938788b5f7bd8fbd46cd8b1fc1fa484c42d468c4fee6456f5d0212848a20160e1a7aad6fcd8df3666b4b8d342f89845b59605b4d0fdd6ddc67191f5cf94d0f73a07baea731c9974793d0107ada17386689cc55a2380bcbea5169d5e86815459d3efa988831fe91d04e22f44698a588fd6af94deed270725c9ec952a971641f098f1f429d6762931f95ccba3af59a020ee715349d8fe5aba8504526e4bfa6ea5aa783ee88c48b58f7072f579131442c19e43fb398fa784dabba1830f81d9fec12986c5d6ab3d7243d650768a61bfc4d37a9351e6c1b972f4eae1b8314fd9804fca19fa6a0a0e9606449613aaaf5143c8587d2cdfd7c5e90af0b0991dbde84daa0f3f4053d23911431ef8177d931fd1b090980fc965f337859aa5520fbc28b8c495666cc281bc23ec26273ed22f1d555444da90730914265ffd5504d28d57f5e77625569fcd719417c2dddc293406e0998a20405ecde3641017dba2aa72da0d91e2f017233f4a4b300a14d07699f0ca5cba4a770cbdd02f46a356528fae9c52e322904704d01998f7223f3d2ef9ae8ff28e4049425101b51bf6919109e3dd97534bb7d17a246c56721a2e7913c2083943ac28639529c2637506f642eaad65067508c7ab1a28b55a9eadfaedd79656f53ed40dc87ae1a12ff34873f1d15d8c7197f842843446f707d081d406e4348d301648d31ca8460d0f53a540a4310bf8b979e43d7f67b3e8ced496441964ccf4b1b792ccbc5491f7310306e14e363626558364a23de5e61b6595a1c79eb339bfd331332a1439aea145eed3ffffd5bdeafb3c7d202d733f796dd6c3fcc10275f7b7c3410ed509fed9f76d07b891ddad18b959d202aca0daa5de387def8c9ec9165ed2be297d6712a4a141002c3c18199b50ac04642174e59c0796fa5b2a958846e2087928451801a6f65e69b4350cc3c9a5cafa492abd5eea762f59f7983faa5664ffef1012f4fae12bfb88b88dff9417610d3255b1e7b412df6758363aac7505f4dd259ca5994230db238b432484eed7468d30c9369ef00ad2294f1317a02bfdac60094b8b5d32a1b18dd5d44351dea332da8e86bca8f1fc9d7fc59bbab8464dba57bde0770f0f37c38a761a549a3dcab6da3d58a36791033a07537d6bb0f5fafad016b588ff9e580f4f7659f8ee8cb90e9e4b2d941e4845a88a85e6aaaf2700b353baaaff053928835e875c197febc3a2c6028162a8420f1c16651e3525fd7ec84af2e1cb1293112b79decfff48c781daf3382aebfe233590c7683eff6c356eef958694d82a880bfb04ecff2db8ec7d2d582dd0c8128996bdb83b45de6913a3622fea3aa8f7a1c3fb8d0afca10a19b8e847f00734513e46113610582e26ef5f731b57aa626eb7e45982beaac6e849c7e9166e6ca076b2da28fd63c8711d327ec9d5cd7a0b88a0a526c8bae11dfa7ec250f717dac6b0c98913cbbc4fe7055917e6df03f21ce56b5471a3750886671d4cc3c21e68fb9fc569d6708463f2eaf032098be706d28409c1f7827b454ec93c6692f2129be9cff6a62991247c3e2d7bbdd0567167d6db2c57984ecb2a18b5a8e07a97913a11b3ed07fd1aa2a0c0e5739c7a3593bfd6f39f741223f7b3556b4b52022cec30c6b22df8a6cd407c8338089bb30d1e4c649aa0692364c66814bc5631ab6db5b30817a4f6e2be00ad02a3afa3406e6703d9c6eb8103c570cd238b81ccfd353197db829d80fb787d979b6b20778ba6706e6e46f5df8812624c7148c2400b7880781e470bbf7a53dee9404e2e2bcf623eb384a21ca93891b198d434e7d848c31ef7376a7217d580c05221c750e3c2400829cec192f5859b84494f7c1dbb241835b5d9d0f84abccadab0b5fb6d122ae95fc4023dd0a08c62b4a9e8e0c137c039541ea5c28fdcea479692e679c7e9c79b3d9df81c71a834ff6567ce1cd0ae975fdd2e10c8d7c9d75eea85e25e0362383778084920ebb1917434f73bfeb02a77b88d362768f7da7b66a063634a66452218e27530650b3c481d27396a0ff21639ff3bb36baddf48f3a94a70183bbc09856617b5b8413f28546a1b1a2ced66516a43f0c9ab1cd5089769e4a6f2200a4a17f016fda96e93c8f9da487ce062edfb6bc3d15b6d927c86a7f15061b9a7b6b2d5910d58a2a75306c366530ca12ccb5c84fd3207c50e39da6273d68f02e8d84a0733fec6efd82d6da4e07c615c3a80382ab3473c7b0d08a32b95f4b3703fdb90d67cc3972391b551cd7b74a098ffc356299856ff3ab417f89eef2a25c61b5e8b0d8eb35fa64668b5a5a429b48c643b17e1de76034ec2a58474f04e4d6c2834b68e9b52f9147b1c496d4d6770ed00abc72457a073a80e89c22115d727e12b31b9b55fbe5fbb3029ef5df6abee2ca0b1f93835b4cc45260b34ce6c9a6566e6cdc36dab66128e98057897bfd36326c01b36a116a02969a6483d42f70adcffa08ae186fd02c6bd4a90e82b8f1d39123e730c770420ddafd6673a963956cbb5e8fea108891036f60dfba0ea6d59641d10d9621f8a45156f479e35c5c41455af50d00ccbeb000ccdb18f3d9fd241fa1b83b4d67f39cad9498d5928e6227717cd7db20bdf9a21b68371ed90b58de265fb327fe70957f4e1de2e5030a4ab64b5efc72a93b9684bdaa2575d4f895087ff5aaef3a74f2b85ebc9195d3d3565f74a7bdc47fe58e90845c5e0b72b20f8399eca89e359cfc3502bca0cc5d91348fe1c6c5a12d5b0841ba2b078af1624d6bec007a363f2f3097d63224a0d1437f4889168f389789475d3ade8b6ce3f3334d36881379565234ad977da6561dcd78144b5c12922536e1a1ee94a5458dab177ee46dbb0cb019913332a2eb4240b4ecbf3818478849625597a5042ba13b058bd73c1dba8fe37a0443d7ce3d556ef4935de719fda195ec8373ffe57af6ff2a0e1df414216a13a50bbb5ac28a2ba27a68479341a26ceccc695367348dd5652032e9e577abb791ecfb1f68e48fff7948106ef9b0db2e4547916af978931351497f8b705e1bb24af90ec6f11e8db31c0c360e08ae733f9fbda4ef275c4f687011db2c75485fc1572b1a0268352cd84e3c015aba9dda51abad5925a73bd7f5d935487e8971c30b13b6d06835657c8704d064ffb85dc662e7080a66824a98a00b2b960a814f6a40b6a570a79216f8e3a423082814091b6ee23007544eef2f7aecf2a3ef131b66cf047aa0e8dc6f8d41779f0899ecf710c6980605872ef5a58a48102faba20213671bccbda26bf774eefe11cf222daa8a86b6ce30756cb14e84eedae1c980432bb11bb746961a9a5a0ecb2eaabbddee2cdf72838538272f7b88ae5b6c3bd8b728d3345d1e772e649b017ec8c59fa543f785c81a8e0e7ed9c44a0e202db6b0cace61404dfbf2c1fde2767fbd9ab4d6755b2c7ef9b91f83cc37819d193055afc0e9c097834a4283c021d1f6e2395c995d23807f50cd256aaf5405d3a70a37ba6dc5c8d2412c97438a20eaf023eb83dd75e46c36aa4b9e126adb518fa9e8e4e5634cf0d7e9c0692323e07c83517b0ab23f13da2645460503e0227b95b3b69204bca750fbde650a10efab8d0c117285b5e8cc842a1cbc6b03e3ea7eb3b4fae49a673d5ff5c89debb9439676ddb758b8b2214abaf06329e870e75468e2316ef5ba4113d0d8eb6bd7e313176c5256ef2d25a2e540f7fd59353acfdfd7a9e2ad8f1988eadcf903b6b7db1271bc4d9b1a9444203f724599f4b38b5a15c6070a9001bd5fc3eaffdc6e55ccb") ioctl$auto(r3, 0x5605, r3) mremap$auto(0xfffff000, 0xfffffffffffffffd, 0x4, 0x7, 0x1001ff000) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) read$auto(r4, 0x0, 0xfffffdef) read$auto(0x3, 0x0, 0x5) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0xe897) ioctl$auto(0x3, 0x502c542b, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x494480, 0x0) socket(0xb, 0x2, 0x2) kernel console output (not intermixed with test programs): 0: command 0x0c1a tx timeout [ 124.881660][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.041997][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.152835][ T6427] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'. [ 125.288916][ T6427] FAULT_INJECTION: forcing a failure. [ 125.288916][ T6427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.399168][ T6427] CPU: 0 UID: 0 PID: 6427 Comm: syz.2.141 Tainted: G L syzkaller #0 PREEMPT(full) [ 125.399194][ T6427] Tainted: [L]=SOFTLOCKUP [ 125.399199][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.399208][ T6427] Call Trace: [ 125.399213][ T6427] [ 125.399219][ T6427] dump_stack_lvl+0x100/0x190 [ 125.399241][ T6427] should_fail_ex.cold+0x5/0xa [ 125.399259][ T6427] _copy_to_iter+0x5a4/0x1720 [ 125.399283][ T6427] ? __pfx__copy_to_iter+0x10/0x10 [ 125.399303][ T6427] ? folio_mark_accessed+0xf3/0x1040 [ 125.399328][ T6427] ? __pfx_folio_mark_accessed+0x10/0x10 [ 125.399353][ T6427] copy_page_to_iter+0x285/0x370 [ 125.399375][ T6427] filemap_read+0x7a9/0x10a0 [ 125.399405][ T6427] ? __pfx_filemap_read+0x10/0x10 [ 125.399440][ T6427] ? __pfx_down_read+0x10/0x10 [ 125.399458][ T6427] ? __pfx_aa_file_perm+0x10/0x10 [ 125.399479][ T6427] blkdev_read_iter+0x2c4/0x4f0 [ 125.399504][ T6427] do_iter_readv_writev+0x616/0x930 [ 125.399526][ T6427] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 125.399549][ T6427] ? bpf_lsm_file_permission+0x9/0x10 [ 125.399570][ T6427] ? security_file_permission+0x76/0x210 [ 125.399588][ T6427] ? rw_verify_area+0xce/0x6d0 [ 125.399608][ T6427] vfs_readv+0x4d3/0x8d0 [ 125.399632][ T6427] ? __pfx_vfs_readv+0x10/0x10 [ 125.399665][ T6427] ? __fget_files+0x21f/0x3d0 [ 125.399690][ T6427] ? do_preadv+0x1ac/0x270 [ 125.399708][ T6427] do_preadv+0x1ac/0x270 [ 125.399727][ T6427] ? __pfx_do_preadv+0x10/0x10 [ 125.399746][ T6427] ? xfd_validate_state+0x129/0x190 [ 125.399766][ T6427] __x64_sys_preadv2+0xef/0x160 [ 125.399790][ T6427] do_syscall_64+0x115/0x840 [ 125.399811][ T6427] ? clear_bhb_loop+0x40/0x90 [ 125.399829][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.399844][ T6427] RIP: 0033:0x7f9a5d39de59 [ 125.399857][ T6427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.399871][ T6427] RSP: 002b:00007f9a5e1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 125.399885][ T6427] RAX: ffffffffffffffda RBX: 00007f9a5d625fa0 RCX: 00007f9a5d39de59 [ 125.399895][ T6427] RDX: 0000000000000006 RSI: 0000200000000280 RDI: 0000000000000003 [ 125.399903][ T6427] RBP: 00007f9a5d433e6f R08: 0000000000000004 R09: 000000000000002a [ 125.399912][ T6427] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 125.399920][ T6427] R13: 00007f9a5d626038 R14: 00007f9a5d625fa0 R15: 00007ffe898ae4a8 [ 125.399940][ T6427] [ 125.675749][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.793887][ T6440] netlink: 25 bytes leftover after parsing attributes in process `syz.1.144'. [ 125.930341][ T6451] zswap: compressor not available [ 127.678931][ T6470] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 127.835425][ T6502] size and base must be multiples of 4 kiB [ 127.864774][ T6502] CPU: 0 UID: 0 PID: 6502 Comm: syz.0.159 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.864809][ T6502] Tainted: [L]=SOFTLOCKUP [ 127.864814][ T6502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 127.864823][ T6502] Call Trace: [ 127.864828][ T6502] [ 127.864834][ T6502] dump_stack_lvl+0x100/0x190 [ 127.864855][ T6502] mtrr_del.cold+0x72/0x85 [ 127.864872][ T6502] mtrr_ioctl+0xbc8/0xcf0 [ 127.864888][ T6502] ? __pfx_mtrr_ioctl+0x10/0x10 [ 127.864905][ T6502] ? find_held_lock+0x2b/0x80 [ 127.864927][ T6502] ? __fget_files+0x21f/0x3d0 [ 127.864949][ T6502] ? __pfx_mtrr_ioctl+0x10/0x10 [ 127.864964][ T6502] proc_reg_unlocked_ioctl+0x229/0x320 [ 127.864985][ T6502] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 127.865007][ T6502] __x64_sys_ioctl+0x18e/0x210 [ 127.865027][ T6502] do_syscall_64+0x115/0x840 [ 127.865048][ T6502] ? clear_bhb_loop+0x40/0x90 [ 127.865066][ T6502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.865081][ T6502] RIP: 0033:0x7f754df9de59 [ 127.865097][ T6502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.865111][ T6502] RSP: 002b:00007f754c1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.865124][ T6502] RAX: ffffffffffffffda RBX: 00007f754e225fa0 RCX: 00007f754df9de59 [ 127.865134][ T6502] RDX: 0000000000000005 RSI: 00000000400c4d04 RDI: 0000000000000005 [ 127.865142][ T6502] RBP: 00007f754e033e6f R08: 0000000000000000 R09: 0000000000000000 [ 127.865151][ T6502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.865159][ T6502] R13: 00007f754e226038 R14: 00007f754e225fa0 R15: 00007ffe522dac58 [ 127.865177][ T6502] [ 129.198479][ T5630] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 130.639487][ T6566] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 131.063065][ T30] audit: type=1800 audit(3617102.720:6): pid=6586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.173" name="dbroot" dev="configfs" ino=13075 res=0 errno=0 [ 132.752670][ T6625] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.179: iget: checksum invalid [ 132.752864][ T6625] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 132.752994][ T6625] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.179: iget: checksum invalid [ 132.753112][ T6625] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 132.753221][ T6625] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.179: iget: checksum invalid [ 132.753335][ T6625] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 132.753440][ T6625] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.179: iget: checksum invalid [ 132.753590][ T6625] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 132.753614][ T6625] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 132.753629][ T6625] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 132.885641][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.885715][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.567925][ T6635] wlan1: mtu less than device minimum [ 133.987224][ T6644] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 136.099279][ T6680] netlink: 25 bytes leftover after parsing attributes in process `syz.3.186'. [ 136.802029][ T6705] random: crng reseeded on system resumption [ 137.694536][ T6733] process 'syz.3.192' launched './file0' with NULL argv: empty string added [ 137.721265][ T6725] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 138.175295][ T6743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.195'. [ 138.215414][ T6743] veth1_vlan: entered allmulticast mode [ 139.218687][ T6767] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.199: iget: checksum invalid [ 139.358188][ T6767] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 139.384702][ T6775] FAULT_INJECTION: forcing a failure. [ 139.384702][ T6775] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.474656][ T6775] CPU: 0 UID: 0 PID: 6775 Comm: syz.1.201 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.474679][ T6775] Tainted: [L]=SOFTLOCKUP [ 139.474684][ T6775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.474692][ T6775] Call Trace: [ 139.474697][ T6775] [ 139.474702][ T6775] dump_stack_lvl+0x100/0x190 [ 139.474735][ T6775] should_fail_ex.cold+0x5/0xa [ 139.474748][ T6775] ? prepare_alloc_pages+0x16d/0x5f0 [ 139.474768][ T6775] should_fail_alloc_page+0xeb/0x140 [ 139.474787][ T6775] prepare_alloc_pages+0x1f0/0x5f0 [ 139.474807][ T6775] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 139.474825][ T6775] ? stack_trace_save+0x8e/0xc0 [ 139.474842][ T6775] ? __pfx_stack_trace_save+0x10/0x10 [ 139.474859][ T6775] ? stack_depot_save_flags+0x27/0x9d0 [ 139.474878][ T6775] ? kasan_save_stack+0x3f/0x50 [ 139.474892][ T6775] ? kasan_save_stack+0x30/0x50 [ 139.474906][ T6775] ? kasan_save_track+0x14/0x30 [ 139.474923][ T6775] ? kasan_save_stack+0x3f/0x50 [ 139.474937][ T6775] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.474960][ T6775] ? __asan_memcpy+0x3c/0x60 [ 139.474976][ T6775] ? __pfx_interleave_nid+0x10/0x10 [ 139.474993][ T6775] ? lock_acquire+0x1b9/0x370 [ 139.475015][ T6775] ? policy_nodemask+0xed/0x4f0 [ 139.475033][ T6775] alloc_pages_mpol+0x1fb/0x540 [ 139.475052][ T6775] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 139.475074][ T6775] folio_alloc_mpol_noprof+0x36/0x260 [ 139.475095][ T6775] vma_alloc_folio_noprof+0xed/0x1d0 [ 139.475115][ T6775] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 139.475140][ T6775] do_anonymous_page+0xb2b/0x2080 [ 139.475162][ T6775] ? rcu_read_unlock+0x2d/0xb0 [ 139.475179][ T6775] __handle_mm_fault+0x1d2c/0x2a00 [ 139.475201][ T6775] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.475220][ T6775] ? __pfx___handle_mm_fault+0x10/0x10 [ 139.475241][ T6775] ? pte_offset_map_lock+0x174/0x320 [ 139.475257][ T6775] ? find_held_lock+0x2b/0x80 [ 139.475278][ T6775] ? follow_page_pte+0x4d0/0x13f0 [ 139.475299][ T6775] handle_mm_fault+0x37b/0xa30 [ 139.475322][ T6775] __get_user_pages+0x1178/0x32a0 [ 139.475347][ T6775] ? __pfx___get_user_pages+0x10/0x10 [ 139.475369][ T6775] populate_vma_page_range+0x267/0x3f0 [ 139.475389][ T6775] ? __pfx_populate_vma_page_range+0x10/0x10 [ 139.475407][ T6775] ? __pfx_find_vma_intersection+0x10/0x10 [ 139.475424][ T6775] ? do_mmap+0x93f/0x12f0 [ 139.475443][ T6775] __mm_populate+0x107/0x3a0 [ 139.475462][ T6775] ? __pfx___mm_populate+0x10/0x10 [ 139.475481][ T6775] ? up_write+0x2e5/0x5c0 [ 139.475496][ T6775] vm_mmap_pgoff+0x37f/0x470 [ 139.475515][ T6775] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 139.475534][ T6775] ? do_sys_openat2+0x159/0x1e0 [ 139.475551][ T6775] ? __pfx_do_sys_openat2+0x10/0x10 [ 139.475570][ T6775] ksys_mmap_pgoff+0xe4/0x610 [ 139.475589][ T6775] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 139.475606][ T6775] ? ksys_write+0x1ac/0x250 [ 139.475625][ T6775] ? __pfx_ksys_write+0x10/0x10 [ 139.475646][ T6775] __x64_sys_mmap+0x125/0x190 [ 139.475664][ T6775] do_syscall_64+0x115/0x840 [ 139.475684][ T6775] ? clear_bhb_loop+0x40/0x90 [ 139.475701][ T6775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.475722][ T6775] RIP: 0033:0x7fc38059de59 [ 139.475735][ T6775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.475748][ T6775] RSP: 002b:00007fc3813ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 139.475762][ T6775] RAX: ffffffffffffffda RBX: 00007fc380825fa0 RCX: 00007fc38059de59 [ 139.475771][ T6775] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 139.475779][ T6775] RBP: 00007fc3813ad090 R08: 0000000000000002 R09: 0000000000008000 [ 139.475787][ T6775] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000002 [ 139.475794][ T6775] R13: 00007fc380826038 R14: 00007fc380825fa0 R15: 00007ffc9b9ed838 [ 139.475813][ T6775] [ 140.160642][ T6767] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.199: iget: checksum invalid [ 140.171760][ T6767] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 140.182118][ T6767] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.199: iget: checksum invalid [ 140.194033][ T6767] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 140.204501][ T6767] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.199: iget: checksum invalid [ 140.215495][ T6767] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 140.225845][ T6767] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 140.236151][ T6767] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 141.955034][ T6815] netlink: 330 bytes leftover after parsing attributes in process `syz.2.205'. [ 142.360390][ T6828] binder: 6827:6828 ioctl c0306201 0 returned -14 [ 147.061546][ T6922] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 147.202763][ T5630] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 147.202788][ T5630] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 147.217853][ T5630] Bluetooth: hci1: Dropping invalid advertising data [ 147.224933][ T5630] Bluetooth: hci1: Dropping invalid advertising data [ 147.231978][ T5630] Bluetooth: hci1: unknown advertising packet type: 0x0f [ 147.232046][ T5630] Bluetooth: hci1: Dropping invalid advertising data [ 147.247196][ T5630] Bluetooth: hci1: Malformed LE Event: 0x02 [ 147.438198][ T6901] Process accounting paused [ 147.690243][ T6928] netlink: 25 bytes leftover after parsing attributes in process `syz.1.222'. [ 147.985667][ T6945] zero sized request [ 148.181139][ T6947] netlink: 342 bytes leftover after parsing attributes in process `syz.2.226'. [ 148.775786][ T6958] ICMPv6: process `syz.3.229' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 149.334840][ T6964] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 149.558185][ T30] audit: type=1800 audit(3617121.216:7): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.231" name="dbroot" dev="configfs" ino=14396 res=0 errno=0 [ 149.807047][ T6972] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 149.870138][ T6975] netlink: 338 bytes leftover after parsing attributes in process `syz.1.233'. [ 149.999446][ T6977] program syz.1.233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.113788][ T6977] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 151.342994][ T6990] random: crng reseeded on system resumption [ 151.812167][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.368309][ T7100] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 158.850688][ T7107] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 159.406035][ T7118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'. [ 159.542791][ T7118] ip6gretap0: entered promiscuous mode [ 160.461630][ T7133] sd 0:0:1:0: PR command failed: 1026 [ 160.501689][ T7133] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 160.523394][ T7133] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 160.892432][ T7136] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 161.167776][ T7145] input: f¬ as /devices/virtual/input/input7 [ 161.531106][ T7152] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 162.634385][ T30] audit: type=1800 audit(3617134.286:8): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.273" name="dbroot" dev="configfs" ino=15739 res=0 errno=0 [ 163.971116][ T7175] block nbd2: not configured, cannot reconfigure [ 164.850727][ T7224] ======================================================= [ 164.850727][ T7224] WARNING: The mand mount option has been deprecated and [ 164.850727][ T7224] and is ignored by this kernel. Remove the mand [ 164.850727][ T7224] option from the mount to silence this warning. [ 164.850727][ T7224] ======================================================= [ 165.450970][ T7229] FAULT_INJECTION: forcing a failure. [ 165.450970][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 165.634488][ T30] audit: type=1800 audit(3617137.296:9): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.284" name="version" dev="configfs" ino=16134 res=0 errno=0 [ 165.663186][ T7229] CPU: 0 UID: 0 PID: 7229 Comm: syz.3.282 Tainted: G L syzkaller #0 PREEMPT(full) [ 165.663212][ T7229] Tainted: [L]=SOFTLOCKUP [ 165.663218][ T7229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.663227][ T7229] Call Trace: [ 165.663232][ T7229] [ 165.663240][ T7229] dump_stack_lvl+0x100/0x190 [ 165.663262][ T7229] should_fail_ex.cold+0x5/0xa [ 165.663279][ T7229] should_failslab+0xc2/0x120 [ 165.663299][ T7229] __kmalloc_noprof+0xfc/0x820 [ 165.663316][ T7229] ? snd_midi_event_new+0xa1/0x210 [ 165.663338][ T7229] snd_midi_event_new+0xa1/0x210 [ 165.663356][ T7229] snd_virmidi_output_open+0x106/0x670 [ 165.663378][ T7229] open_substream+0x480/0x970 [ 165.663402][ T7229] rawmidi_open_priv+0x595/0x6f0 [ 165.663420][ T7229] snd_rawmidi_open+0x4c9/0xba0 [ 165.663438][ T7229] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 165.663453][ T7229] ? __pfx_default_wake_function+0x10/0x10 [ 165.663471][ T7229] ? kobject_get_unless_zero+0x156/0x200 [ 165.663490][ T7229] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 165.663504][ T7229] snd_open+0x201/0x450 [ 165.663524][ T7229] ? __pfx_snd_open+0x10/0x10 [ 165.663542][ T7229] chrdev_open+0x234/0x6a0 [ 165.663565][ T7229] ? __pfx_apparmor_file_open+0x10/0x10 [ 165.663588][ T7229] ? __pfx_chrdev_open+0x10/0x10 [ 165.663619][ T7229] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 165.663639][ T7229] do_dentry_open+0x6ab/0x14d0 [ 165.663661][ T7229] ? __pfx_chrdev_open+0x10/0x10 [ 165.663688][ T7229] vfs_open+0x82/0x3f0 [ 165.663708][ T7229] path_openat+0x2873/0x4280 [ 165.663738][ T7229] ? __pfx_path_openat+0x10/0x10 [ 165.663765][ T7229] do_file_open+0x20e/0x430 [ 165.663788][ T7229] ? __pfx_do_file_open+0x10/0x10 [ 165.663831][ T7229] ? alloc_fd+0x471/0x7a0 [ 165.663855][ T7229] ? do_getname+0x191/0x390 [ 165.663873][ T7229] do_sys_openat2+0x10f/0x1e0 [ 165.663891][ T7229] ? __pfx_do_sys_openat2+0x10/0x10 [ 165.663910][ T7229] ? __fget_files+0x21f/0x3d0 [ 165.663934][ T7229] __x64_sys_openat+0x12d/0x210 [ 165.663952][ T7229] ? __pfx___x64_sys_openat+0x10/0x10 [ 165.663977][ T7229] do_syscall_64+0x115/0x840 [ 165.663998][ T7229] ? clear_bhb_loop+0x40/0x90 [ 165.664016][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.664031][ T7229] RIP: 0033:0x7f182779de59 [ 165.664044][ T7229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.664058][ T7229] RSP: 002b:00007f18285f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 165.664072][ T7229] RAX: ffffffffffffffda RBX: 00007f1827a25fa0 RCX: 00007f182779de59 [ 165.664082][ T7229] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 165.664091][ T7229] RBP: 00007f1827833e6f R08: 0000000000000000 R09: 0000000000000000 [ 165.664099][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.664108][ T7229] R13: 00007f1827a26038 R14: 00007f1827a25fa0 R15: 00007ffe02e4cf78 [ 165.664129][ T7229] [ 165.664959][ T7244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.284'. [ 166.279558][ T30] audit: type=1800 audit(3617137.936:10): pid=7254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.285" name="dbroot" dev="configfs" ino=16176 res=0 errno=0 [ 167.450969][ T7268] netlink: 25 bytes leftover after parsing attributes in process `syz.1.287'. [ 167.910953][ T7278] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 169.573615][ T7310] bond0: Unable to set down delay as MII monitoring is disabled [ 169.986450][ T7339] netlink: 25 bytes leftover after parsing attributes in process `syz.0.298'. [ 170.395132][ T7347] FAULT_INJECTION: forcing a failure. [ 170.395132][ T7347] name failslab, interval 1, probability 0, space 0, times 0 [ 170.447992][ T7350] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 170.478145][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.0.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.478172][ T7347] Tainted: [L]=SOFTLOCKUP [ 170.478177][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 170.478186][ T7347] Call Trace: [ 170.478192][ T7347] [ 170.478198][ T7347] dump_stack_lvl+0x100/0x190 [ 170.478220][ T7347] should_fail_ex.cold+0x5/0xa [ 170.478238][ T7347] should_failslab+0xc2/0x120 [ 170.478257][ T7347] kmem_cache_alloc_noprof+0x91/0x6a0 [ 170.478276][ T7347] ? mas_preallocate+0x1105/0x14a0 [ 170.478297][ T7347] mas_preallocate+0x1105/0x14a0 [ 170.478317][ T7347] ? __pfx_mas_preallocate+0x10/0x10 [ 170.478340][ T7347] ? anon_vma_name+0x5a/0x250 [ 170.478365][ T7347] __split_vma+0x33d/0xda0 [ 170.478391][ T7347] ? __pfx___split_vma+0x10/0x10 [ 170.478416][ T7347] ? __pfx_mas_prev+0x10/0x10 [ 170.478436][ T7347] vms_gather_munmap_vmas+0x3a5/0x1720 [ 170.478463][ T7347] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 170.478492][ T7347] ? mas_walk+0x6ef/0x9b0 [ 170.478519][ T7347] __mmap_region+0x4a7/0x2db0 [ 170.478542][ T7347] ? __x64_sys_mmap+0x125/0x190 [ 170.478557][ T7347] ? do_syscall_64+0x115/0x840 [ 170.478578][ T7347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.478594][ T7347] ? __pfx___mmap_region+0x10/0x10 [ 170.478634][ T7347] ? kasan_quarantine_put+0x104/0x240 [ 170.478649][ T7347] ? lockdep_hardirqs_on+0x78/0x100 [ 170.478677][ T7347] ? process_measurement+0x109c/0x2350 [ 170.478691][ T7347] ? process_measurement+0x109c/0x2350 [ 170.478709][ T7347] ? __mutex_unlock_slowpath+0x35d/0x930 [ 170.478735][ T7347] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 170.478758][ T7347] ? process_measurement+0x10a9/0x2350 [ 170.478772][ T7347] ? rcu_is_watching+0x12/0xc0 [ 170.478817][ T7347] mmap_region+0x527/0x620 [ 170.478833][ T7347] ? __pfx_mmap_region+0x10/0x10 [ 170.478850][ T7347] ? cap_mmap_addr+0x4b/0x120 [ 170.478870][ T7347] ? bpf_lsm_mmap_addr+0x9/0x30 [ 170.478891][ T7347] ? security_mmap_addr+0x71/0x1e0 [ 170.478908][ T7347] ? __get_unmapped_area+0x255/0x3e0 [ 170.478929][ T7347] do_mmap+0xc63/0x12f0 [ 170.478950][ T7347] ? __pfx_do_mmap+0x10/0x10 [ 170.478968][ T7347] ? __pfx_down_write_killable+0x10/0x10 [ 170.478987][ T7347] vm_mmap_pgoff+0x29e/0x470 [ 170.479009][ T7347] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 170.479032][ T7347] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 170.479059][ T7347] ksys_mmap_pgoff+0x285/0x610 [ 170.479080][ T7347] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 170.479099][ T7347] ? xfd_validate_state+0x129/0x190 [ 170.479118][ T7347] __x64_sys_mmap+0x125/0x190 [ 170.479137][ T7347] do_syscall_64+0x115/0x840 [ 170.479158][ T7347] ? clear_bhb_loop+0x40/0x90 [ 170.479176][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.479191][ T7347] RIP: 0033:0x7f754df9de59 [ 170.479205][ T7347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.479218][ T7347] RSP: 002b:00007f754c1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 170.479232][ T7347] RAX: ffffffffffffffda RBX: 00007f754e225fa0 RCX: 00007f754df9de59 [ 170.479242][ T7347] RDX: 00004000000000df RSI: 0000000000000003 RDI: 0000000000000000 [ 170.479251][ T7347] RBP: 00007f754e033e6f R08: 0000000000000401 R09: 0000300000000000 [ 170.479260][ T7347] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 170.479269][ T7347] R13: 00007f754e226038 R14: 00007f754e225fa0 R15: 00007ffe522dac58 [ 170.479289][ T7347] [ 172.032131][ T7347] FAULT_INJECTION: forcing a failure. [ 172.032131][ T7347] name failslab, interval 1, probability 0, space 0, times 0 [ 172.108906][ T7347] CPU: 0 UID: 0 PID: 7347 Comm: syz.0.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.108932][ T7347] Tainted: [L]=SOFTLOCKUP [ 172.108937][ T7347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.108946][ T7347] Call Trace: [ 172.108951][ T7347] [ 172.108957][ T7347] dump_stack_lvl+0x100/0x190 [ 172.108979][ T7347] should_fail_ex.cold+0x5/0xa [ 172.108996][ T7347] should_failslab+0xc2/0x120 [ 172.109015][ T7347] kmem_cache_alloc_noprof+0x91/0x6a0 [ 172.109030][ T7347] ? d_instantiate+0x8a/0xb0 [ 172.109045][ T7347] ? d_instantiate+0x8a/0xb0 [ 172.109059][ T7347] ? alloc_empty_file+0x5b/0x1c0 [ 172.109079][ T7347] alloc_empty_file+0x5b/0x1c0 [ 172.109095][ T7347] alloc_file_pseudo+0x183/0x290 [ 172.109112][ T7347] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 172.109128][ T7347] ? alloc_fd+0x471/0x7a0 [ 172.109150][ T7347] ? do_raw_spin_unlock+0x145/0x1e0 [ 172.109166][ T7347] __anon_inode_getfile+0xe8/0x280 [ 172.109186][ T7347] anon_inode_getfile_fmode+0x37/0xa0 [ 172.109204][ T7347] __do_sys_fanotify_init+0xa0d/0xe30 [ 172.109228][ T7347] do_syscall_64+0x115/0x840 [ 172.109250][ T7347] ? clear_bhb_loop+0x40/0x90 [ 172.109268][ T7347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.109282][ T7347] RIP: 0033:0x7f754df9de59 [ 172.109296][ T7347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.109309][ T7347] RSP: 002b:00007f754c1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 172.109324][ T7347] RAX: ffffffffffffffda RBX: 00007f754e225fa0 RCX: 00007f754df9de59 [ 172.109333][ T7347] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 172.109341][ T7347] RBP: 00007f754e033e6f R08: 0000000000000000 R09: 0000000000000000 [ 172.109350][ T7347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.109358][ T7347] R13: 00007f754e226038 R14: 00007f754e225fa0 R15: 00007ffe522dac58 [ 172.109380][ T7347] [ 172.540268][ T7366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.302'. [ 173.749654][ T7395] netlink: 25 bytes leftover after parsing attributes in process `syz.0.309'. [ 174.406524][ T30] audit: type=1800 audit(3617146.066:11): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.314" name="dbroot" dev="configfs" ino=16933 res=0 errno=0 [ 174.868600][ T7414] FAULT_INJECTION: forcing a failure. [ 174.868600][ T7414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.967543][ T7414] CPU: 0 UID: 0 PID: 7414 Comm: syz.2.315 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.967576][ T7414] Tainted: [L]=SOFTLOCKUP [ 174.967581][ T7414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.967598][ T7414] Call Trace: [ 174.967604][ T7414] [ 174.967610][ T7414] dump_stack_lvl+0x100/0x190 [ 174.967632][ T7414] should_fail_ex.cold+0x5/0xa [ 174.967650][ T7414] _copy_from_user+0x2e/0xd0 [ 174.967670][ T7414] snd_rawmidi_kernel_write1+0x390/0x7c0 [ 174.967702][ T7414] snd_rawmidi_write+0x2dc/0xc60 [ 174.967728][ T7414] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 174.967752][ T7414] ? __pfx_default_wake_function+0x10/0x10 [ 174.967768][ T7414] ? bpf_lsm_file_permission+0x9/0x10 [ 174.967789][ T7414] ? security_file_permission+0x76/0x210 [ 174.967808][ T7414] ? rw_verify_area+0xce/0x6d0 [ 174.967829][ T7414] vfs_write+0x2aa/0x1050 [ 174.967850][ T7414] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 174.967873][ T7414] ? __pfx_vfs_write+0x10/0x10 [ 174.967892][ T7414] ? find_held_lock+0x2b/0x80 [ 174.967907][ T7414] ? __fget_files+0x215/0x3d0 [ 174.967927][ T7414] ? __fget_files+0x215/0x3d0 [ 174.967950][ T7414] ? __fget_files+0x21f/0x3d0 [ 174.967974][ T7414] ksys_write+0x1f8/0x250 [ 174.967994][ T7414] ? __pfx_ksys_write+0x10/0x10 [ 174.968020][ T7414] do_syscall_64+0x115/0x840 [ 174.968042][ T7414] ? clear_bhb_loop+0x40/0x90 [ 174.968059][ T7414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.968075][ T7414] RIP: 0033:0x7f9a5d39de59 [ 174.968089][ T7414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.968102][ T7414] RSP: 002b:00007f9a5e1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.968116][ T7414] RAX: ffffffffffffffda RBX: 00007f9a5d625fa0 RCX: 00007f9a5d39de59 [ 174.968126][ T7414] RDX: 000000100000a3d9 RSI: 00002000000000c0 RDI: 0000000000000008 [ 174.968134][ T7414] RBP: 00007f9a5d433e6f R08: 0000000000000000 R09: 0000000000000000 [ 174.968143][ T7414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.968151][ T7414] R13: 00007f9a5d626038 R14: 00007f9a5d625fa0 R15: 00007ffe898ae4a8 [ 174.968171][ T7414] [ 175.891778][ T7427] futex_wake_op: syz.1.317 tries to shift op by -2048; fix this program [ 176.570895][ T7443] vivid-003: ================= START STATUS ================= [ 176.622850][ T7443] vivid-003: Test Pattern: 75% Colorbar [ 176.645311][ T7443] vivid-003: Fill Percentage of Frame: 100 [ 176.667864][ T7443] vivid-003: Horizontal Movement: No Movement [ 176.699737][ T7443] vivid-003: Vertical Movement: No Movement [ 176.727497][ T7443] vivid-003: OSD Text Mode: All [ 176.742986][ T7443] vivid-003: Show Border: false [ 176.759620][ T7443] vivid-003: Show Square: false [ 176.778888][ T7443] vivid-003: Sensor Flipped Horizontally: false [ 176.798970][ T7443] vivid-003: Sensor Flipped Vertically: false [ 176.835905][ T7443] vivid-003: Insert SAV Code in Image: false [ 176.883495][ T7443] vivid-003: Insert EAV Code in Image: false [ 176.943052][ T7443] vivid-003: Insert Video Guard Band: false [ 177.001503][ T7443] vivid-003: Reduced Framerate: false [ 177.030852][ T7443] vivid-003: HDMI 003-0 Is Connected To: Test Pattern Generator [ 177.139617][ T7443] vivid-003: S-Video 003-0 Is Connected To: Test Pattern Generator [ 177.239073][ T7443] vivid-003: Enable Capture Cropping: true [ 177.275955][ T7462] syz.3.322(7462): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 177.318739][ T7443] vivid-003: Enable Capture Composing: true [ 177.384969][ T7443] vivid-003: Enable Capture Scaler: true [ 177.445547][ T7443] vivid-003: Timestamp Source: End of Frame [ 177.500997][ T7443] vivid-003: Colorspace: sRGB [ 177.534270][ T7443] vivid-003: Transfer Function: Default [ 177.595763][ T7443] vivid-003: Y'CbCr Encoding: Default [ 177.647714][ T7443] vivid-003: HSV Encoding: Hue 0-179 [ 177.677300][ T7443] vivid-003: Quantization: Default [ 177.710863][ T7443] vivid-003: Apply Alpha To Red Only: false [ 177.742701][ T7443] vivid-003: Standard Aspect Ratio: 4x3 [ 177.758652][ T7443] vivid-003: DV Timings Signal Mode: Current DV Timings inactive [ 177.775113][ T7443] vivid-003: DV Timings: 640x480p59 inactive [ 177.790760][ T7443] vivid-003: DV Timings Aspect Ratio: Source Width x Height [ 177.826201][ T7443] vivid-003: Maximum EDID Blocks: 2 [ 177.853249][ T7443] vivid-003: Limited RGB Range (16-235): false [ 177.880413][ T7443] vivid-003: Rx RGB Quantization Range: Automatic [ 177.910898][ T7443] vivid-003: Power Present: 0x00000001 [ 177.972734][ T7443] tpg source WxH: 320x240 (Y'CbCr) [ 177.993052][ T7451] Process accounting resumed [ 178.126417][ T7443] tpg field: 1 [ 178.210272][ T7443] tpg crop: (0,0)/320x240 [ 178.281643][ T7443] tpg compose: (0,0)/320x240 [ 178.324387][ T7443] tpg colorspace: 8 [ 178.345185][ T7443] tpg transfer function: 0/0 [ 178.378020][ T7443] tpg Y'CbCr encoding: 0/0 [ 178.378047][ T7443] tpg quantization: 0/0 [ 178.378054][ T7443] tpg RGB range: 0/2 [ 178.378062][ T7443] vivid-003: ================== END STATUS ================== [ 179.061722][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.1.328'. [ 179.467899][ T7488] Invalid ELF header magic: != ELF [ 180.188507][ T7520] random: crng reseeded on system resumption [ 180.510555][ T7520] hub 1-0:1.0: USB hub found [ 180.558984][ T7520] hub 1-0:1.0: 1 port detected [ 181.747473][ T30] audit: type=1800 audit(3617153.406:12): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.343" name="dbroot" dev="configfs" ino=17935 res=0 errno=0 [ 182.253981][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 183.608933][ T7595] netlink: 'syz.2.348': attribute type 10 has an invalid length. [ 183.682309][ T7595] netlink: 330 bytes leftover after parsing attributes in process `syz.2.348'. [ 184.128280][ T7611] binder: 7610:7611 ioctl c018620c 200000000040 returned -22 [ 186.288637][ T7642] input: f¬ as /devices/virtual/input/input8 [ 186.837205][ T7657] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 187.036477][ T7664] capability: warning: `syz.1.363' uses deprecated v2 capabilities in a way that may be insecure [ 187.554830][ T7668] mtrr: base(0x1000000) is not aligned on a size(0x0000) boundary [ 187.746418][ T7675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.929145][ T7680] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.365: iget: checksum invalid [ 187.975471][ T30] audit: type=1800 audit(3617159.636:13): pid=7683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.367" name="dbroot" dev="configfs" ino=18730 res=0 errno=0 [ 187.997948][ T7683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.367'. [ 188.166769][ T7680] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 188.365144][ T7680] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.365: iget: checksum invalid [ 188.582713][ T7680] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 188.706488][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.369'. [ 188.735811][ T7680] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.365: iget: checksum invalid [ 188.826982][ T7680] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 188.938326][ T7680] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.365: iget: checksum invalid [ 189.103210][ T7680] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 189.185731][ T7680] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 189.223956][ T7680] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 191.509776][ T19] MTRR: CPU 0: Writing MSR 202 to 10003:0 failed [ 191.729276][ T7725] MTRR 2 not used [ 192.068180][ T7731] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.377: iget: checksum invalid [ 192.235964][ T7731] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 192.386855][ T7731] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.377: iget: checksum invalid [ 192.403349][ T7736] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 192.503460][ T7731] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 192.594652][ T7731] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.377: iget: checksum invalid [ 192.703014][ T7731] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 192.798176][ T7731] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.377: iget: checksum invalid [ 192.866457][ T7731] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 192.913986][ T7731] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 192.977285][ T7731] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 194.019866][ T7771] zram0: detected capacity change from 0 to 16 [ 194.273611][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.385'. [ 194.279537][ T7781] Zero length message leads to an empty skb [ 194.329424][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.329465][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.464302][ T7789] netlink: 25 bytes leftover after parsing attributes in process `syz.1.390'. [ 194.471339][ T7784] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5632] was attempted by ""[7784] [ 195.877440][ T7832] MTRR 2 not used [ 195.959433][ T30] audit: type=1800 audit(3618190.614:14): pid=7834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.397" name="dbroot" dev="configfs" ino=19690 res=0 errno=0 [ 196.601201][ T5630] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3 [ 197.768180][ T7870] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 197.933487][ T7870] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 198.032976][ T7870] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 198.098418][ T7870] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 198.771699][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.408'. [ 199.766626][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 200.006084][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 200.030994][ T7915] MTRR 2 not used [ 200.086076][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 200.166433][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 200.515440][ T5630] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 200.623552][ T7938] futex_wake_op: syz.0.421 tries to shift op by -2048; fix this program [ 201.532797][ T7955] MTRR 2 not used [ 201.839214][ T7958] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 201.974180][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.427'. [ 202.255411][ T7966] input: f¬ as /devices/virtual/input/input9 [ 204.039595][ T7995] MTRR 2 not used [ 204.068470][ T7998] netlink: 350 bytes leftover after parsing attributes in process `syz.0.436'. [ 204.303154][ T8001] vivid-007: ================= START STATUS ================= [ 204.390856][ T8001] vivid-007: Generate PTS: true [ 204.456275][ T8001] vivid-007: Generate SCR: true [ 204.511087][ T8001] tpg source WxH: 320x240 (Y'CbCr) [ 204.584821][ T8001] tpg field: 1 [ 204.624179][ T8001] tpg crop: (0,0)/320x240 [ 204.673116][ T8016] process 'syz.3.434' launched ':,' with NULL argv: empty string added [ 204.701252][ T8001] tpg compose: (0,0)/320x240 [ 204.752982][ T8001] tpg colorspace: 8 [ 204.801926][ T8001] tpg transfer function: 0/0 [ 204.873803][ T8001] tpg Y'CbCr encoding: 0/0 [ 204.926510][ T8001] tpg quantization: 0/0 [ 205.019065][ T8001] tpg RGB range: 0/2 [ 205.102785][ T8001] vivid-007: ================== END STATUS ================== [ 205.475766][ T8028] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 206.265906][ T8051] mmap: syz.0.447 (8051) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 207.313070][ T8049] netlink: 'syz.2.446': attribute type 16 has an invalid length. [ 207.356646][ T8049] netlink: 16 bytes leftover after parsing attributes in process `syz.2.446'. [ 208.084971][ T8063] Process accounting paused [ 208.283551][ T8084] mtrr: base(0x1000000) is not aligned on a size(0x0000) boundary [ 209.935605][ T8099] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 209.980257][ T8099] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 210.018221][ T8099] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 210.068774][ T8099] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 210.572735][ T8119] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5632] was attempted by "Î%0mó\x0cr¶.¤ýœ­`S¢_σ2àŠ¿·6ækôIŽ­‹+í›árW1MümD\x0b„(p)ÖG²äI£ËJl—Ñ”©°u=33›GáVíÐ4œd…/”0ùR'À¼/ÈdŠ¿.šIÖhí÷fSÆ[˜àNÀ9ô’ã„lººJGf+ïálñ‡z1Ö`‹Ô=Øâq„ÊO‹;t­÷i€õ sDíP]Ô“ÊÔpú:ßòÌ¥[Ù\x0b«nhöAÿþ¨ gøG#£¯Ä÷šìå\x22Ø몰8ç¸íßGÃ_¼Âk9Ú½ÇÐxÛ]g`ŒÇî:PÝ¥ÿÜóß?ͲەӀ [ 211.214102][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 212.015189][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 212.094965][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 212.095005][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.008730][ T8166] MTRR 2 not used [ 213.301943][ T8105] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:10: bg 4: bad block bitmap checksum [ 213.328385][ T8173] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input10 [ 213.390259][ T8105] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 213.488797][ T8105] EXT4-fs (sda1): This should not happen!! Data will be lost [ 213.488797][ T8105] [ 213.843896][ T141] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 213.914081][ T141] EXT4-fs (sda1): This should not happen!! Data will be lost [ 213.914081][ T141] [ 214.795966][ T8110] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 214.894969][ T8110] EXT4-fs (sda1): This should not happen!! Data will be lost [ 214.894969][ T8110] [ 215.250128][ T141] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 215.349307][ T141] EXT4-fs (sda1): This should not happen!! Data will be lost [ 215.349307][ T141] [ 215.550821][ T8216] FAULT_INJECTION: forcing a failure. [ 215.550821][ T8216] name failslab, interval 1, probability 0, space 0, times 0 [ 215.660246][ T8225] ubi0: attaching mtd0 [ 215.666847][ T8216] CPU: 0 UID: 0 PID: 8216 Comm: syz.0.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 215.666876][ T8216] Tainted: [L]=SOFTLOCKUP [ 215.666881][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 215.666889][ T8216] Call Trace: [ 215.666894][ T8216] [ 215.666899][ T8216] dump_stack_lvl+0x100/0x190 [ 215.666921][ T8216] should_fail_ex.cold+0x5/0xa [ 215.666937][ T8216] should_failslab+0xc2/0x120 [ 215.666955][ T8216] kmem_cache_alloc_noprof+0x91/0x6a0 [ 215.666970][ T8216] ? __proc_create+0xc1/0x8f0 [ 215.666990][ T8216] ? __proc_create+0xc1/0x8f0 [ 215.667009][ T8216] ? __proc_create+0x247/0x8f0 [ 215.667032][ T8216] __proc_create+0x247/0x8f0 [ 215.667053][ T8216] ? __pfx___proc_create+0x10/0x10 [ 215.667074][ T8216] ? proc_register+0x56d/0x910 [ 215.667099][ T8216] proc_create_reg+0x75/0x170 [ 215.667114][ T8216] proc_create_data+0x86/0x110 [ 215.667127][ T8216] ? __pfx_proc_create_data+0x10/0x10 [ 215.667140][ T8216] ? net_generic+0xea/0x2a0 [ 215.667158][ T8216] gss_svc_init_net+0x233/0x640 [ 215.667172][ T8216] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 215.667189][ T8216] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 215.667204][ T8216] ops_init+0x1e2/0x5f0 [ 215.667223][ T8216] setup_net+0x118/0x3a0 [ 215.667239][ T8216] ? __pfx_setup_net+0x10/0x10 [ 215.667255][ T8216] ? mutex_init_lockdep+0xf1/0x120 [ 215.667280][ T8216] copy_net_ns+0x46f/0x7c0 [ 215.667301][ T8216] create_new_namespaces+0x3ea/0xac0 [ 215.667328][ T8216] unshare_nsproxy_namespaces+0xf2/0x220 [ 215.667351][ T8216] ksys_unshare+0x438/0xab0 [ 215.667368][ T8216] ? __pfx_ksys_unshare+0x10/0x10 [ 215.667397][ T8216] __x64_sys_unshare+0x31/0x40 [ 215.667412][ T8216] do_syscall_64+0x115/0x840 [ 215.667433][ T8216] ? clear_bhb_loop+0x40/0x90 [ 215.667450][ T8216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.667464][ T8216] RIP: 0033:0x7f754df9de59 [ 215.667477][ T8216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.667490][ T8216] RSP: 002b:00007f754c1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 215.667504][ T8216] RAX: ffffffffffffffda RBX: 00007f754e226090 RCX: 00007f754df9de59 [ 215.667513][ T8216] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 215.667521][ T8216] RBP: 00007f754e033e6f R08: 0000000000000000 R09: 0000000000000000 [ 215.667529][ T8216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.667537][ T8216] R13: 00007f754e226128 R14: 00007f754e226090 R15: 00007ffe522dac58 [ 215.667555][ T8216] [ 216.388024][ T8232] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 216.417939][ T8232] EXT4-fs (sda1): This should not happen!! Data will be lost [ 216.417939][ T8232] [ 217.034002][ T8225] ubi0: scanning is finished [ 217.137216][ T8225] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 218.152354][ T8251] input: f¬ as /devices/virtual/input/input11 [ 218.185769][ T8225] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 218.568582][ T8258] netlink: 'syz.2.489': attribute type 9 has an invalid length. [ 218.601709][ T8258] netlink: 330 bytes leftover after parsing attributes in process `syz.2.489'. [ 218.658322][ T757] EXT4-fs: 4 callbacks suppressed [ 218.658336][ T757] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 218.737038][ T757] EXT4-fs (sda1): This should not happen!! Data will be lost [ 218.737038][ T757] [ 219.030869][ T8269] netlink: 202 bytes leftover after parsing attributes in process `syz.0.491'. [ 219.240373][ T8264] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 219.956654][ T8289] mmap: syz.0.495 (8289): VmData 45805568 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 220.096913][ T8262] kexec: Could not allocate control_code_buffer [ 220.196751][ T8294] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 220.238253][ T8294] EXT4-fs (sda1): This should not happen!! Data will be lost [ 220.238253][ T8294] [ 220.293620][ T8295] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 221.018611][ T141] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 221.092418][ T141] EXT4-fs (sda1): This should not happen!! Data will be lost [ 221.092418][ T141] [ 221.460669][ T30] audit: type=1800 audit(3618216.093:15): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.504" name="dbroot" dev="configfs" ino=22951 res=0 errno=0 [ 221.660701][ T8322] netlink: 186 bytes leftover after parsing attributes in process `syz.2.503'. [ 221.790797][ T8323] netlink: 186 bytes leftover after parsing attributes in process `syz.2.503'. [ 222.127151][ T141] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 222.192471][ T141] EXT4-fs (sda1): This should not happen!! Data will be lost [ 222.192471][ T141] [ 222.503624][ T8338] MTRR 2 not used [ 222.765416][ T8349] input: f¬ as /devices/virtual/input/input12 [ 222.938767][ T8347] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1304175345.2665573094.4177866691), cmd(3) [ 223.141712][ T8350] block nbd2: not configured, cannot reconfigure [ 223.929647][ T141] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 224.012931][ T141] EXT4-fs (sda1): This should not happen!! Data will be lost [ 224.012931][ T141] [ 224.765167][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 224.862854][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 224.862854][ T8109] [ 225.213506][ T8390] usb usb30: usbfs: interface 0 claimed by hub while 'syz.2.517' sets config #0 [ 225.289637][ T8397] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 225.502748][ T8397] EXT4-fs (sda1): This should not happen!! Data will be lost [ 225.502748][ T8397] [ 225.617202][ T8407] input: f¬ as /devices/virtual/input/input14 [ 225.904194][ T8412] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 226.718052][ T8435] Setting dangerous option i915.mitigations - tainting kernel [ 227.382537][ T8105] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 227.479320][ T8105] EXT4-fs (sda1): This should not happen!! Data will be lost [ 227.479320][ T8105] [ 228.273921][ T8105] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 228.273996][ T8105] EXT4-fs (sda1): This should not happen!! Data will be lost [ 228.273996][ T8105] [ 228.986768][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 229.043048][ T8480] vivid-011: ================= START STATUS ================= [ 229.065682][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 229.065682][ T8109] [ 229.199955][ T8480] vivid-011: Radio HW Seek Mode: Bounded [ 229.250896][ T8104] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 229.303180][ T8480] vivid-011: Radio Programmable HW Seek: false [ 229.310554][ T8104] EXT4-fs (sda1): This should not happen!! Data will be lost [ 229.310554][ T8104] [ 229.409116][ T8471] FAULT_INJECTION: forcing a failure. [ 229.409116][ T8471] name failslab, interval 1, probability 0, space 0, times 0 [ 229.427304][ T8480] vivid-011: RDS Rx I/O Mode: Block I/O [ 229.481044][ T8480] vivid-011: Generate RBDS Instead of RDS: false [ 229.528470][ T8480] vivid-011: RDS Reception: true [ 229.533877][ T8471] CPU: 0 UID: 0 PID: 8471 Comm: syz.0.535 Tainted: G U L syzkaller #0 PREEMPT(full) [ 229.533903][ T8471] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 229.533909][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.533918][ T8471] Call Trace: [ 229.533923][ T8471] [ 229.533928][ T8471] dump_stack_lvl+0x100/0x190 [ 229.533950][ T8471] should_fail_ex.cold+0x5/0xa [ 229.533968][ T8471] should_failslab+0xc2/0x120 [ 229.533988][ T8471] kmem_cache_alloc_noprof+0x91/0x6a0 [ 229.534005][ T8471] ? trace_kmem_cache_alloc+0xdd/0x100 [ 229.534023][ T8471] ? security_file_alloc+0x34/0x2c0 [ 229.534044][ T8471] security_file_alloc+0x34/0x2c0 [ 229.534061][ T8471] init_file+0x95/0x480 [ 229.534077][ T8471] alloc_empty_file+0x79/0x1c0 [ 229.534094][ T8471] dentry_open+0x46/0xd0 [ 229.534110][ T8471] pidfs_alloc_file+0x18f/0x290 [ 229.534133][ T8471] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 229.534159][ T8471] pidfd_prepare+0x107/0x1b0 [ 229.534191][ T8471] __x64_sys_pidfd_open+0x105/0x1a0 [ 229.534211][ T8471] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 229.534236][ T8471] do_syscall_64+0x115/0x840 [ 229.534257][ T8471] ? clear_bhb_loop+0x40/0x90 [ 229.534275][ T8471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.534290][ T8471] RIP: 0033:0x7f754df9de59 [ 229.534304][ T8471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.534317][ T8471] RSP: 002b:00007f754c1b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 229.534331][ T8471] RAX: ffffffffffffffda RBX: 00007f754e226180 RCX: 00007f754df9de59 [ 229.534341][ T8471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 229.534349][ T8471] RBP: 00007f754e033e6f R08: 0000000000000000 R09: 0000000000000000 [ 229.534358][ T8471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.534367][ T8471] R13: 00007f754e226218 R14: 00007f754e226180 R15: 00007ffe522dac58 [ 229.534386][ T8471] [ 229.959400][ T8480] vivid-011: RDS Program Type: 0 inactive [ 229.968902][ T8480] vivid-011: RDS PS Name: inactive [ 229.982397][ T8480] vivid-011: RDS Radio Text: inactive [ 230.020132][ T8480] vivid-011: RDS Traffic Announcement: false inactive [ 230.034339][ T8480] vivid-011: RDS Traffic Program: false inactive [ 230.055598][ T8480] vivid-011: RDS Music: false inactive [ 230.072994][ T8480] vivid-011: ================== END STATUS ================== [ 230.390055][ T8488] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.408901][ T8488] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 230.427110][ T8488] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 230.450909][ T8488] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 230.566569][ T8104] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 230.619884][ T8104] EXT4-fs (sda1): This should not happen!! Data will be lost [ 230.619884][ T8104] [ 231.018873][ T8104] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 231.056134][ T8502] FAULT_INJECTION: forcing a failure. [ 231.056134][ T8502] name failslab, interval 1, probability 0, space 0, times 0 [ 231.120892][ T8104] EXT4-fs (sda1): This should not happen!! Data will be lost [ 231.120892][ T8104] [ 231.163355][ T8498] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 231.173762][ T8502] CPU: 0 UID: 0 PID: 8502 Comm: syz.1.542 Tainted: G U L syzkaller #0 PREEMPT(full) [ 231.173790][ T8502] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 231.173796][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 231.173805][ T8502] Call Trace: [ 231.173812][ T8502] [ 231.173818][ T8502] dump_stack_lvl+0x100/0x190 [ 231.173841][ T8502] should_fail_ex.cold+0x5/0xa [ 231.173860][ T8502] should_failslab+0xc2/0x120 [ 231.173879][ T8502] __kmalloc_cache_noprof+0x91/0x6c0 [ 231.173902][ T8502] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 231.173924][ T8502] ? sctp_endpoint_new+0xfc/0xb20 [ 231.173946][ T8502] sctp_endpoint_new+0xfc/0xb20 [ 231.173966][ T8502] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 231.173985][ T8502] ? lockdep_init_map_type+0x5c/0x250 [ 231.174007][ T8502] ? lockdep_init_map_type+0x5c/0x250 [ 231.174041][ T8502] ? lockdep_init_map_type+0x5c/0x250 [ 231.174066][ T8502] sctp_init_sock+0xe2b/0x1300 [ 231.174083][ T8502] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 231.174102][ T8502] sctp_v6_init_sock+0x16/0x70 [ 231.174118][ T8502] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 231.174136][ T8502] inet6_create+0xb1a/0x12b0 [ 231.174159][ T8502] ? inet6_create+0x7f/0x12b0 [ 231.174183][ T8502] __sock_create+0x339/0x860 [ 231.174209][ T8502] __sys_socket+0x14d/0x260 [ 231.174231][ T8502] ? __pfx___sys_socket+0x10/0x10 [ 231.174257][ T8502] __x64_sys_socket+0x72/0xb0 [ 231.174278][ T8502] ? lockdep_hardirqs_on+0x78/0x100 [ 231.174300][ T8502] do_syscall_64+0x115/0x840 [ 231.174322][ T8502] ? clear_bhb_loop+0x40/0x90 [ 231.174340][ T8502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.174355][ T8502] RIP: 0033:0x7fc38059de59 [ 231.174370][ T8502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.174384][ T8502] RSP: 002b:00007fc3813ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 231.174399][ T8502] RAX: ffffffffffffffda RBX: 00007fc380825fa0 RCX: 00007fc38059de59 [ 231.174409][ T8502] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 231.174419][ T8502] RBP: 00007fc380633e6f R08: 0000000000000000 R09: 0000000000000000 [ 231.174428][ T8502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.174437][ T8502] R13: 00007fc380826038 R14: 00007fc380825fa0 R15: 00007ffc9b9ed838 [ 231.174464][ T8502] [ 231.711957][ T8104] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 231.754293][ T8104] EXT4-fs (sda1): This should not happen!! Data will be lost [ 231.754293][ T8104] [ 232.270555][ T8514] zswap: compressor not available [ 232.388700][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.439158][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.447481][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.517862][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.607854][ T8557] FAULT_INJECTION: forcing a failure. [ 233.607854][ T8557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.669933][ T8557] CPU: 0 UID: 0 PID: 8557 Comm: syz.0.553 Tainted: G U L syzkaller #0 PREEMPT(full) [ 233.669961][ T8557] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 233.669967][ T8557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 233.669976][ T8557] Call Trace: [ 233.669981][ T8557] [ 233.669986][ T8557] dump_stack_lvl+0x100/0x190 [ 233.670007][ T8557] should_fail_ex.cold+0x5/0xa [ 233.670023][ T8557] _copy_to_user+0x32/0xd0 [ 233.670044][ T8557] simple_read_from_buffer+0xcb/0x170 [ 233.670072][ T8557] proc_fail_nth_read+0x1af/0x230 [ 233.670090][ T8557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.670107][ T8557] ? rw_verify_area+0xce/0x6d0 [ 233.670125][ T8557] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.670141][ T8557] vfs_read+0x1e4/0xb40 [ 233.670162][ T8557] ? __pfx_vfs_read+0x10/0x10 [ 233.670180][ T8557] ? __fget_files+0x215/0x3d0 [ 233.670204][ T8557] ? __fget_files+0x21f/0x3d0 [ 233.670228][ T8557] ksys_read+0x12a/0x250 [ 233.670246][ T8557] ? __pfx_ksys_read+0x10/0x10 [ 233.670270][ T8557] do_syscall_64+0x115/0x840 [ 233.670290][ T8557] ? clear_bhb_loop+0x40/0x90 [ 233.670307][ T8557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.670321][ T8557] RIP: 0033:0x7f754df5e68e [ 233.670333][ T8557] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 233.670346][ T8557] RSP: 002b:00007f754c1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.670360][ T8557] RAX: ffffffffffffffda RBX: 00007f754c1f66c0 RCX: 00007f754df5e68e [ 233.670369][ T8557] RDX: 000000000000000f RSI: 00007f754c1f60a0 RDI: 0000000000000003 [ 233.670377][ T8557] RBP: 00007f754c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 233.670385][ T8557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.670393][ T8557] R13: 00007f754e226038 R14: 00007f754e225fa0 R15: 00007ffe522dac58 [ 233.670411][ T8557] [ 234.740800][ T757] EXT4-fs: 2 callbacks suppressed [ 234.740814][ T757] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 234.783455][ T757] EXT4-fs (sda1): This should not happen!! Data will be lost [ 234.783455][ T757] [ 235.220327][ T8567] netlink: 28 bytes leftover after parsing attributes in process `syz.1.557'. [ 235.262937][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 235.309632][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 235.309632][ T36] [ 235.496420][ T8574] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 235.767366][ T8578] input: f¬ as /devices/virtual/input/input15 [ 235.787188][ T8105] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 235.870260][ T8105] EXT4-fs (sda1): This should not happen!! Data will be lost [ 235.870260][ T8105] [ 236.275883][ T8594] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 236.372835][ T8594] EXT4-fs (sda1): This should not happen!! Data will be lost [ 236.372835][ T8594] [ 236.800799][ T757] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 236.873472][ T757] EXT4-fs (sda1): This should not happen!! Data will be lost [ 236.873472][ T757] [ 237.516009][ T8624] zswap: compressor not available [ 237.743805][ T8636] mtrr: base(0x10000000000) is not aligned on a size(0x0000) boundary [ 238.273385][ T8641] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 238.391222][ T8646] input: f¬ as /devices/virtual/input/input16 [ 238.638544][ T8655] FAULT_INJECTION: forcing a failure. [ 238.638544][ T8655] name failslab, interval 1, probability 0, space 0, times 0 [ 238.776708][ T8655] CPU: 0 UID: 0 PID: 8655 Comm: syz.1.574 Tainted: G U L syzkaller #0 PREEMPT(full) [ 238.776736][ T8655] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 238.776742][ T8655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.776753][ T8655] Call Trace: [ 238.776758][ T8655] [ 238.776764][ T8655] dump_stack_lvl+0x100/0x190 [ 238.776786][ T8655] should_fail_ex.cold+0x5/0xa [ 238.776804][ T8655] should_failslab+0xc2/0x120 [ 238.776823][ T8655] __kmalloc_cache_noprof+0x91/0x6c0 [ 238.776847][ T8655] ? apply_subsystem_event_filter+0x539/0x17a0 [ 238.776872][ T8655] apply_subsystem_event_filter+0x539/0x17a0 [ 238.776898][ T8655] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 238.776921][ T8655] ? _copy_from_user+0x59/0xd0 [ 238.776945][ T8655] subsystem_filter_write+0x95/0x120 [ 238.776966][ T8655] vfs_write+0x2aa/0x1050 [ 238.776988][ T8655] ? __pfx_subsystem_filter_write+0x10/0x10 [ 238.777009][ T8655] ? __pfx_vfs_write+0x10/0x10 [ 238.777029][ T8655] ? __fget_files+0x215/0x3d0 [ 238.777053][ T8655] ? __fget_files+0x21f/0x3d0 [ 238.777079][ T8655] ksys_write+0x12a/0x250 [ 238.777099][ T8655] ? __pfx_ksys_write+0x10/0x10 [ 238.777125][ T8655] do_syscall_64+0x115/0x840 [ 238.777147][ T8655] ? clear_bhb_loop+0x40/0x90 [ 238.777164][ T8655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.777179][ T8655] RIP: 0033:0x7fc38059de59 [ 238.777192][ T8655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.777205][ T8655] RSP: 002b:00007fc38138c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.777223][ T8655] RAX: ffffffffffffffda RBX: 00007fc380826090 RCX: 00007fc38059de59 [ 238.777232][ T8655] RDX: 0000000000000071 RSI: 0000200000000040 RDI: 0000000000000008 [ 238.777241][ T8655] RBP: 00007fc380633e6f R08: 0000000000000000 R09: 0000000000000000 [ 238.777249][ T8655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.777258][ T8655] R13: 00007fc380826128 R14: 00007fc380826090 R15: 00007ffc9b9ed838 [ 238.777277][ T8655] [ 239.003782][ T8234] Process accounting resumed [ 239.614267][ T8670] netlink: 342 bytes leftover after parsing attributes in process `syz.3.576'. [ 239.903652][ T8109] EXT4-fs: 6 callbacks suppressed [ 239.903666][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 239.951375][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 239.951375][ T8109] [ 240.289134][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 240.329262][ T8687] kernel read not supported for file /sg0 (pid: 8687 comm: syz.0.578) [ 240.361891][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 240.361891][ T8109] [ 240.993375][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 241.058962][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 241.058962][ T8109] [ 241.496377][ T8701] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.556877][ T757] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 241.608070][ T757] EXT4-fs (sda1): This should not happen!! Data will be lost [ 241.608070][ T757] [ 241.923827][ T8701] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.286341][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 242.409807][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 242.409807][ T8109] [ 242.428850][ T8701] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.785995][ T8701] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.986860][ T8716] block nbd2: not configured, cannot reconfigure [ 243.073291][ T8701] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.157055][ T8236] syz.3.480 (8236) used greatest stack depth: 19320 bytes left [ 244.241125][ T8738] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 245.077621][ T8762] input: f¬ as /devices/virtual/input/input17 [ 245.795961][ T8109] EXT4-fs: 6 callbacks suppressed [ 245.795982][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 245.915956][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 245.915956][ T8109] [ 246.213248][ T8790] MTRR 2 not used [ 246.256664][ T8792] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 246.352101][ T8794] vivid-007: ================= START STATUS ================= [ 246.407836][ T8794] vivid-007: Generate PTS: true [ 246.437834][ T8794] vivid-007: Generate SCR: true [ 246.467953][ T8794] tpg source WxH: 320x240 (Y'CbCr) [ 246.489689][ T8794] tpg field: 1 [ 246.504993][ T8794] tpg crop: (0,0)/320x240 [ 246.542871][ T8794] tpg compose: (0,0)/320x240 [ 246.556875][ T8800] hub 1-0:1.0: USB hub found [ 246.575094][ T8794] tpg colorspace: 8 [ 246.588054][ T8800] hub 1-0:1.0: 1 port detected [ 246.593482][ T8794] tpg transfer function: 0/0 [ 246.608668][ T8794] tpg Y'CbCr encoding: 0/0 [ 246.628814][ T8794] tpg quantization: 0/0 [ 246.657727][ T8794] tpg RGB range: 0/2 [ 246.679426][ T8794] vivid-007: ================== END STATUS ================== [ 246.833864][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 246.934694][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 246.934694][ T36] [ 247.395158][ T8821] input: f¬ as /devices/virtual/input/input19 [ 247.688791][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 247.739235][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 247.739235][ T8109] [ 248.002828][ T8841] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 248.183606][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 248.639367][ T8859] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 248.711230][ T8859] EXT4-fs (sda1): This should not happen!! Data will be lost [ 248.711230][ T8859] [ 248.785852][ T8868] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 249.461497][ T757] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 249.513210][ T757] EXT4-fs (sda1): This should not happen!! Data will be lost [ 249.513210][ T757] [ 251.798179][ T36] EXT4-fs: 4 callbacks suppressed [ 251.798193][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 251.868920][ T8904] block nbd2: not configured, cannot reconfigure [ 251.894238][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 251.894238][ T36] [ 253.020271][ T8933] vhci_hcd: not connected 4 [ 253.089563][ T8110] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 253.184289][ T8110] EXT4-fs (sda1): This should not happen!! Data will be lost [ 253.184289][ T8110] [ 254.439863][ T8104] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 254.530060][ T8104] EXT4-fs (sda1): This should not happen!! Data will be lost [ 254.530060][ T8104] [ 255.035162][ T9002] MTRR 2 not used [ 255.506033][ T9016] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 255.589354][ T9016] EXT4-fs (sda1): This should not happen!! Data will be lost [ 255.589354][ T9016] [ 255.680745][ T9029] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 255.809674][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.817062][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.491558][ T141] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 256.583554][ T141] EXT4-fs (sda1): This should not happen!! Data will be lost [ 256.583554][ T141] [ 256.730976][ T9058] MTRR 2 not used [ 257.036611][ T8109] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:14: bg 5: bad block bitmap checksum [ 257.132779][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 3565 with max blocks 19 with error 74 [ 257.153756][ T9053] FAULT_INJECTION: forcing a failure. [ 257.153756][ T9053] name failslab, interval 1, probability 0, space 0, times 0 [ 257.214459][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 257.214459][ T8109] [ 257.253104][ T9053] CPU: 0 UID: 0 PID: 9053 Comm: syz.0.665 Tainted: G U L syzkaller #0 PREEMPT(full) [ 257.253132][ T9053] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 257.253138][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 257.253147][ T9053] Call Trace: [ 257.253152][ T9053] [ 257.253158][ T9053] dump_stack_lvl+0x100/0x190 [ 257.253179][ T9053] should_fail_ex.cold+0x5/0xa [ 257.253196][ T9053] should_failslab+0xc2/0x120 [ 257.253215][ T9053] __kmalloc_cache_noprof+0x91/0x6c0 [ 257.253239][ T9053] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 257.253265][ T9053] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 257.253290][ T9053] ? snd_pcm_oss_get_active_substream+0x153/0x1d0 [ 257.253313][ T9053] ? kasan_quarantine_put+0x104/0x240 [ 257.253330][ T9053] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 257.253351][ T9053] ? __pfx___mutex_lock+0x10/0x10 [ 257.253364][ T9053] ? find_held_lock+0x2b/0x80 [ 257.253381][ T9053] ? tomoyo_path_number_perm+0x28f/0x580 [ 257.253397][ T9053] ? tomoyo_path_number_perm+0x28f/0x580 [ 257.253420][ T9053] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 257.253441][ T9053] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 257.253467][ T9053] snd_pcm_oss_get_formats+0x7d/0x350 [ 257.253487][ T9053] ? do_vfs_ioctl+0x226/0x13e0 [ 257.253505][ T9053] ? __pfx_snd_pcm_oss_get_formats+0x10/0x10 [ 257.253531][ T9053] snd_pcm_oss_ioctl+0x1777/0x3790 [ 257.253552][ T9053] ? find_held_lock+0x2b/0x80 [ 257.253567][ T9053] ? __fget_files+0x215/0x3d0 [ 257.253586][ T9053] ? hook_file_ioctl_common+0x140/0x440 [ 257.253603][ T9053] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 257.253626][ T9053] ? __fget_files+0x21f/0x3d0 [ 257.253648][ T9053] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 257.253670][ T9053] __x64_sys_ioctl+0x18e/0x210 [ 257.253689][ T9053] do_syscall_64+0x115/0x840 [ 257.253710][ T9053] ? clear_bhb_loop+0x40/0x90 [ 257.253728][ T9053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.253742][ T9053] RIP: 0033:0x7f754df9de59 [ 257.253756][ T9053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.253769][ T9053] RSP: 002b:00007f754c1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.253783][ T9053] RAX: ffffffffffffffda RBX: 00007f754e226090 RCX: 00007f754df9de59 [ 257.253793][ T9053] RDX: 0000000000000000 RSI: 000000008004500b RDI: 0000000000000006 [ 257.253802][ T9053] RBP: 00007f754e033e6f R08: 0000000000000000 R09: 0000000000000000 [ 257.253811][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.253819][ T9053] R13: 00007f754e226128 R14: 00007f754e226090 R15: 00007ffe522dac58 [ 257.253838][ T9053] [ 257.529262][ T9053] ======================================================= [ 257.529262][ T9053] WARNING: The mand mount option has been deprecated and [ 257.529262][ T9053] and is ignored by this kernel. Remove the mand [ 257.529262][ T9053] option from the mount to silence this warning. [ 257.529262][ T9053] ======================================================= [ 258.166473][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 258.254712][ T9084] FAULT_INJECTION: forcing a failure. [ 258.254712][ T9084] name failslab, interval 1, probability 0, space 0, times 0 [ 258.274612][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 258.274612][ T8109] [ 258.322259][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 3565 with max blocks 1 with error 117 [ 258.336601][ T9084] CPU: 0 UID: 0 PID: 9084 Comm: syz.1.671 Tainted: G U L syzkaller #0 PREEMPT(full) [ 258.336625][ T9084] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 258.336630][ T9084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 258.336638][ T9084] Call Trace: [ 258.336643][ T9084] [ 258.336649][ T9084] dump_stack_lvl+0x100/0x190 [ 258.336669][ T9084] should_fail_ex.cold+0x5/0xa [ 258.336686][ T9084] should_failslab+0xc2/0x120 [ 258.336704][ T9084] __kmalloc_noprof+0xfc/0x820 [ 258.336719][ T9084] ? tomoyo_encode2+0xfb/0x3c0 [ 258.336740][ T9084] tomoyo_encode2+0xfb/0x3c0 [ 258.336760][ T9084] tomoyo_encode+0x29/0x50 [ 258.336784][ T9084] tomoyo_realpath_from_path+0x18c/0x690 [ 258.336807][ T9084] tomoyo_path_number_perm+0x23c/0x580 [ 258.336821][ T9084] ? tomoyo_path_number_perm+0x22e/0x580 [ 258.336838][ T9084] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 258.336871][ T9084] ? find_held_lock+0x2b/0x80 [ 258.336887][ T9084] ? __fget_files+0x215/0x3d0 [ 258.336905][ T9084] ? hook_file_ioctl_common+0x140/0x440 [ 258.336920][ T9084] ? __fget_files+0x215/0x3d0 [ 258.336942][ T9084] ? __fget_files+0x21f/0x3d0 [ 258.336964][ T9084] security_file_ioctl+0xd3/0x230 [ 258.336980][ T9084] __x64_sys_ioctl+0xb7/0x210 [ 258.336999][ T9084] do_syscall_64+0x115/0x840 [ 258.337022][ T9084] ? clear_bhb_loop+0x40/0x90 [ 258.337039][ T9084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.337053][ T9084] RIP: 0033:0x7fc38059de59 [ 258.337066][ T9084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.337079][ T9084] RSP: 002b:00007fc3813ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.337093][ T9084] RAX: ffffffffffffffda RBX: 00007fc380825fa0 RCX: 00007fc38059de59 [ 258.337102][ T9084] RDX: 0000000000000000 RSI: 0000000080045510 RDI: 0000000000000002 [ 258.337110][ T9084] RBP: 00007fc3813ad090 R08: 0000000000000000 R09: 0000000000000000 [ 258.337118][ T9084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.337125][ T9084] R13: 00007fc380826038 R14: 00007fc380825fa0 R15: 00007ffc9b9ed838 [ 258.337144][ T9084] [ 258.337166][ T9084] ERROR: Out of memory at tomoyo_realpath_from_path. [ 258.612430][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 258.612430][ T8109] [ 259.423134][ T9113] bond0: invalid ARP target specified [ 259.445367][ T9114] nbd: socks must be embedded in a SOCK_ITEM attr [ 259.539978][ T9114] block nbd0: shutting down sockets [ 259.687233][ T9114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.678'. [ 259.817721][ T9114] team0 (unregistering): Port device team_slave_0 removed [ 259.835813][ T9114] team0 (unregistering): Port device team_slave_1 removed [ 259.854307][ T8104] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 259.870682][ T8104] EXT4-fs (sda1): This should not happen!! Data will be lost [ 259.870682][ T8104] [ 260.440632][ T141] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 260.514308][ T141] EXT4-fs (sda1): This should not happen!! Data will be lost [ 260.514308][ T141] [ 260.895062][ T9145] hub 1-0:1.0: USB hub found [ 260.937337][ T9145] hub 1-0:1.0: 1 port detected [ 261.044516][ T9153] FAULT_INJECTION: forcing a failure. [ 261.044516][ T9153] name failslab, interval 1, probability 0, space 0, times 0 [ 261.143169][ T9153] CPU: 0 UID: 0 PID: 9153 Comm: syz.2.688 Tainted: G U L syzkaller #0 PREEMPT(full) [ 261.143197][ T9153] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 261.143202][ T9153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 261.143211][ T9153] Call Trace: [ 261.143216][ T9153] [ 261.143223][ T9153] dump_stack_lvl+0x100/0x190 [ 261.143245][ T9153] should_fail_ex.cold+0x5/0xa [ 261.143262][ T9153] should_failslab+0xc2/0x120 [ 261.143281][ T9153] kmem_cache_alloc_noprof+0x91/0x6a0 [ 261.143298][ T9153] ? sk_prot_alloc+0x60/0x2a0 [ 261.143321][ T9153] sk_prot_alloc+0x60/0x2a0 [ 261.143341][ T9153] sk_alloc+0x36/0xe80 [ 261.143357][ T9153] inet6_create+0x385/0x12b0 [ 261.143379][ T9153] ? inet6_create+0x7f/0x12b0 [ 261.143401][ T9153] __sock_create+0x339/0x860 [ 261.143425][ T9153] __sys_socket+0x14d/0x260 [ 261.143446][ T9153] ? __pfx___sys_socket+0x10/0x10 [ 261.143472][ T9153] __x64_sys_socket+0x72/0xb0 [ 261.143492][ T9153] ? lockdep_hardirqs_on+0x78/0x100 [ 261.143514][ T9153] do_syscall_64+0x115/0x840 [ 261.143546][ T9153] ? clear_bhb_loop+0x40/0x90 [ 261.143564][ T9153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.143580][ T9153] RIP: 0033:0x7f9a5d39de59 [ 261.143593][ T9153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.143607][ T9153] RSP: 002b:00007f9a5e1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 261.143621][ T9153] RAX: ffffffffffffffda RBX: 00007f9a5d625fa0 RCX: 00007f9a5d39de59 [ 261.143631][ T9153] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 261.143639][ T9153] RBP: 00007f9a5d433e6f R08: 0000000000000000 R09: 0000000000000000 [ 261.143647][ T9153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.143656][ T9153] R13: 00007f9a5d626038 R14: 00007f9a5d625fa0 R15: 00007ffe898ae4a8 [ 261.143675][ T9153] [ 262.622909][ T8109] EXT4-fs: 6 callbacks suppressed [ 262.622922][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 262.721089][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 262.721089][ T8109] [ 262.780036][ T9187] blktrace: Concurrent blktraces are not allowed on nbd5 [ 262.792616][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 262.868526][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 262.868526][ T8109] [ 263.829570][ T9206] FAULT_INJECTION: forcing a failure. [ 263.829570][ T9206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.919583][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 263.932385][ T9206] CPU: 0 UID: 0 PID: 9206 Comm: syz.1.699 Tainted: G U L syzkaller #0 PREEMPT(full) [ 263.932419][ T9206] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 263.932425][ T9206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 263.932434][ T9206] Call Trace: [ 263.932440][ T9206] [ 263.932446][ T9206] dump_stack_lvl+0x100/0x190 [ 263.932468][ T9206] should_fail_ex.cold+0x5/0xa [ 263.932485][ T9206] _copy_to_iter+0x1f3/0x1720 [ 263.932507][ T9206] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 263.932532][ T9206] ? __pfx__copy_to_iter+0x10/0x10 [ 263.932553][ T9206] ? __skb_recv_datagram+0x1b2/0x220 [ 263.932579][ T9206] simple_copy_to_iter+0x46/0x90 [ 263.932601][ T9206] __skb_datagram_iter+0x129/0x900 [ 263.932622][ T9206] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 263.932645][ T9206] ? skb_recv_datagram+0x88/0xc0 [ 263.932669][ T9206] skb_copy_datagram_iter+0xa1/0x250 [ 263.932692][ T9206] netlink_recvmsg+0x27e/0xa90 [ 263.932714][ T9206] ? __pfx_netlink_recvmsg+0x10/0x10 [ 263.932733][ T9206] ? __fget_files+0x215/0x3d0 [ 263.932753][ T9206] ? __fget_files+0x215/0x3d0 [ 263.932775][ T9206] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 263.932798][ T9206] ? __pfx_netlink_recvmsg+0x10/0x10 [ 263.932819][ T9206] sock_recvmsg+0x1d5/0x220 [ 263.932839][ T9206] __sys_recvfrom+0x1f2/0x2f0 [ 263.932855][ T9206] ? __pfx___sys_recvfrom+0x10/0x10 [ 263.932875][ T9206] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 263.932906][ T9206] __x64_sys_recvfrom+0xe0/0x1c0 [ 263.932921][ T9206] ? do_syscall_64+0x90/0x840 [ 263.932942][ T9206] ? lockdep_hardirqs_on+0x78/0x100 [ 263.932963][ T9206] do_syscall_64+0x115/0x840 [ 263.932984][ T9206] ? clear_bhb_loop+0x40/0x90 [ 263.933002][ T9206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.933017][ T9206] RIP: 0033:0x7fc38055e68e [ 263.933031][ T9206] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.933045][ T9206] RSP: 002b:00007fc3813abee8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 263.933060][ T9206] RAX: ffffffffffffffda RBX: 00007fc3813ad6c0 RCX: 00007fc38055e68e [ 263.933070][ T9206] RDX: 0000000000001000 RSI: 00007fc3813ac000 RDI: 000000000000000a [ 263.933080][ T9206] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000 [ 263.933088][ T9206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000001f00 [ 263.933098][ T9206] R13: 00007fc3813abfb0 R14: 000000000000000b R15: 0000000000000000 [ 263.933117][ T9206] [ 264.460349][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 264.460349][ T8109] [ 264.519421][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 264.573292][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 264.573292][ T8109] [ 264.610485][ T9214] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 264.913917][ T141] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 264.941398][ T141] EXT4-fs (sda1): This should not happen!! Data will be lost [ 264.941398][ T141] [ 265.452696][ T9227] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.703: iget: checksum invalid [ 265.527183][ T9225] NFSD: Failed to start, no listeners configured. [ 265.546485][ T9227] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 265.574506][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 265.604503][ T9227] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.703: iget: checksum invalid [ 265.667787][ T9227] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 265.717517][ T9227] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.703: iget: checksum invalid [ 265.769525][ T9227] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 265.820437][ T9239] size and base must be multiples of 4 kiB [ 265.838627][ T9227] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.703: iget: checksum invalid [ 265.863216][ T9239] CPU: 0 UID: 0 PID: 9239 Comm: syz.2.705 Tainted: G U L syzkaller #0 PREEMPT(full) [ 265.863248][ T9239] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 265.863254][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.863264][ T9239] Call Trace: [ 265.863269][ T9239] [ 265.863276][ T9239] dump_stack_lvl+0x100/0x190 [ 265.863297][ T9239] mtrr_del.cold+0x72/0x85 [ 265.863315][ T9239] mtrr_ioctl+0xbc8/0xcf0 [ 265.863332][ T9239] ? __pfx_mtrr_ioctl+0x10/0x10 [ 265.863351][ T9239] ? find_held_lock+0x2b/0x80 [ 265.863374][ T9239] ? __fget_files+0x21f/0x3d0 [ 265.863396][ T9239] ? __pfx_mtrr_ioctl+0x10/0x10 [ 265.863412][ T9239] proc_reg_unlocked_ioctl+0x229/0x320 [ 265.863434][ T9239] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 265.863458][ T9239] __x64_sys_ioctl+0x18e/0x210 [ 265.863479][ T9239] do_syscall_64+0x115/0x840 [ 265.863502][ T9239] ? clear_bhb_loop+0x40/0x90 [ 265.863522][ T9239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.863538][ T9239] RIP: 0033:0x7f9a5d39de59 [ 265.863552][ T9239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.863567][ T9239] RSP: 002b:00007f9a5e1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.863583][ T9239] RAX: ffffffffffffffda RBX: 00007f9a5d625fa0 RCX: 00007f9a5d39de59 [ 265.863593][ T9239] RDX: 0000000000000009 RSI: 00000000400c4d04 RDI: 0000000000000009 [ 265.863602][ T9239] RBP: 00007f9a5d433e6f R08: 0000000000000000 R09: 0000000000000000 [ 265.863611][ T9239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.863620][ T9239] R13: 00007f9a5d626038 R14: 00007f9a5d625fa0 R15: 00007ffe898ae4a8 [ 265.863640][ T9239] [ 266.061398][ T9227] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 266.070943][ T9227] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 266.080623][ T9227] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 266.120847][ T9229] NFSD: Failed to start, no listeners configured. [ 266.912341][ T9258] FAULT_INJECTION: forcing a failure. [ 266.912341][ T9258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.950566][ T9258] CPU: 0 UID: 0 PID: 9258 Comm: syz.1.710 Tainted: G U L syzkaller #0 PREEMPT(full) [ 266.950594][ T9258] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 266.950600][ T9258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 266.950609][ T9258] Call Trace: [ 266.950614][ T9258] [ 266.950620][ T9258] dump_stack_lvl+0x100/0x190 [ 266.950642][ T9258] should_fail_ex.cold+0x5/0xa [ 266.950657][ T9258] ? prepare_alloc_pages+0x16d/0x5f0 [ 266.950678][ T9258] should_fail_alloc_page+0xeb/0x140 [ 266.950698][ T9258] prepare_alloc_pages+0x1f0/0x5f0 [ 266.950720][ T9258] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 266.950753][ T9258] ? vfs_write+0x6ac/0x1050 [ 266.950774][ T9258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.950800][ T9258] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 266.950827][ T9258] ? trace_kmalloc+0xeb/0x110 [ 266.950844][ T9258] ? __kasan_kmalloc+0xaa/0xb0 [ 266.950861][ T9258] ? __kmalloc_node_track_caller_noprof+0x34f/0x830 [ 266.950880][ T9258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 266.950900][ T9258] ? policy_nodemask+0xed/0x4f0 [ 266.950921][ T9258] alloc_pages_mpol+0x1fb/0x540 [ 266.950940][ T9258] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 266.950957][ T9258] ? __alloc_skb+0x5b7/0x710 [ 266.950972][ T9258] ? __pfx___alloc_skb+0x10/0x10 [ 266.950991][ T9258] alloc_pages_noprof+0x1a/0x160 [ 266.951012][ T9258] alloc_skb_with_frags+0x4e7/0x760 [ 266.951041][ T9258] sock_alloc_send_pskb+0x801/0x980 [ 266.951063][ T9258] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 266.951088][ T9258] tun_get_user+0x904/0x3c20 [ 266.951121][ T9258] ? __pfx_tun_get_user+0x10/0x10 [ 266.951146][ T9258] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 266.951174][ T9258] ? find_held_lock+0x2b/0x80 [ 266.951189][ T9258] ? tun_get+0x191/0x370 [ 266.951209][ T9258] ? tun_get+0x191/0x370 [ 266.951235][ T9258] tun_chr_write_iter+0xdc/0x200 [ 266.951251][ T9258] vfs_write+0x6ac/0x1050 [ 266.951272][ T9258] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 266.951289][ T9258] ? __pfx_vfs_write+0x10/0x10 [ 266.951307][ T9258] ? find_held_lock+0x2b/0x80 [ 266.951334][ T9258] __x64_sys_pwrite64+0x1eb/0x250 [ 266.951357][ T9258] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 266.951384][ T9258] do_syscall_64+0x115/0x840 [ 266.951406][ T9258] ? clear_bhb_loop+0x40/0x90 [ 266.951424][ T9258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.951439][ T9258] RIP: 0033:0x7fc38059de59 [ 266.951453][ T9258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.951467][ T9258] RSP: 002b:00007fc38138c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 266.951481][ T9258] RAX: ffffffffffffffda RBX: 00007fc380826090 RCX: 00007fc38059de59 [ 266.951492][ T9258] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 00000000000000c8 [ 266.951501][ T9258] RBP: 00007fc380633e6f R08: 0000000000000000 R09: 0000000000000000 [ 266.951510][ T9258] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 266.951519][ T9258] R13: 00007fc380826128 R14: 00007fc380826090 R15: 00007ffc9b9ed838 [ 266.951538][ T9258] [ 267.832801][ T9252] Process accounting resumed [ 267.884037][ T3329] EXT4-fs: 8 callbacks suppressed [ 267.884051][ T3329] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 267.952145][ T3329] EXT4-fs (sda1): This should not happen!! Data will be lost [ 267.952145][ T3329] [ 268.551072][ T141] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 268.599908][ T141] EXT4-fs (sda1): This should not happen!! Data will be lost [ 268.599908][ T141] [ 268.911026][ T3329] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 268.956573][ T3329] EXT4-fs (sda1): This should not happen!! Data will be lost [ 268.956573][ T3329] [ 269.306530][ T3329] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 269.388645][ T3329] EXT4-fs (sda1): This should not happen!! Data will be lost [ 269.388645][ T3329] [ 269.568459][ T9264] HfR: entered promiscuous mode [ 269.600478][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.712'. [ 269.667578][ T9265] HfR: left promiscuous mode [ 269.868424][ T3329] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 269.972809][ T3329] EXT4-fs (sda1): This should not happen!! Data will be lost [ 269.972809][ T3329] [ 270.584434][ T9297] hub 1-0:1.0: USB hub found [ 270.590673][ T9302] FAULT_INJECTION: forcing a failure. [ 270.590673][ T9302] name fail_futex, interval 1, probability 0, space 0, times 0 [ 270.643930][ T9297] hub 1-0:1.0: 1 port detected [ 270.802250][ T9302] CPU: 0 UID: 0 PID: 9302 Comm: syz.1.717 Tainted: G U L syzkaller #0 PREEMPT(full) [ 270.802285][ T9302] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 270.802291][ T9302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 270.802301][ T9302] Call Trace: [ 270.802306][ T9302] [ 270.802312][ T9302] dump_stack_lvl+0x100/0x190 [ 270.802335][ T9302] should_fail_ex.cold+0x5/0xa [ 270.802352][ T9302] get_futex_key+0x1d2/0x14f0 [ 270.802379][ T9302] ? __pfx_get_futex_key+0x10/0x10 [ 270.802406][ T9302] futex_wake+0xf4/0x5e0 [ 270.802426][ T9302] ? __pfx_futex_wake+0x10/0x10 [ 270.802441][ T9302] ? kasan_quarantine_put+0x104/0x240 [ 270.802460][ T9302] ? putname+0xb1/0x110 [ 270.802473][ T9302] ? kmem_cache_free+0x127/0x6b0 [ 270.802498][ T9302] do_futex+0x2b2/0x440 [ 270.802513][ T9302] ? __pfx_do_futex+0x10/0x10 [ 270.802526][ T9302] ? __pfx_do_sys_openat2+0x10/0x10 [ 270.802544][ T9302] ? do_raw_spin_lock+0x128/0x260 [ 270.802561][ T9302] __x64_sys_futex+0x34f/0x4d0 [ 270.802577][ T9302] ? __x64_sys_openat+0x12d/0x210 [ 270.802594][ T9302] ? __pfx___x64_sys_futex+0x10/0x10 [ 270.802616][ T9302] do_syscall_64+0x115/0x840 [ 270.802645][ T9302] ? clear_bhb_loop+0x40/0x90 [ 270.802663][ T9302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.802679][ T9302] RIP: 0033:0x7fc38059de59 [ 270.802692][ T9302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.802707][ T9302] RSP: 002b:00007fc37e7f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 270.802722][ T9302] RAX: ffffffffffffffda RBX: 00007fc380826188 RCX: 00007fc38059de59 [ 270.802732][ T9302] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc38082618c [ 270.802741][ T9302] RBP: 00007fc380826180 R08: 0000000000000001 R09: 0000000000000000 [ 270.802749][ T9302] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 270.802758][ T9302] R13: 00007fc380826218 R14: 00007ffc9b9ed750 R15: 00007ffc9b9ed838 [ 270.802777][ T9302] [ 271.328406][ T5629] Bluetooth: hci3: unexpected event 0x02 length: 1021 > 260 [ 271.572778][ T9311] bond0: invalid ARP target specified [ 271.866471][ T9320] ima: policy update failed [ 271.916022][ T30] audit: type=1802 audit(4294967364.591:16): pid=9320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.721" res=0 errno=0 [ 272.140925][ T9326] random: crng reseeded on system resumption [ 272.596119][ T5629] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 273.067650][ T757] EXT4-fs: 6 callbacks suppressed [ 273.067663][ T757] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 273.131376][ T757] EXT4-fs (sda1): This should not happen!! Data will be lost [ 273.131376][ T757] [ 273.201493][ T9334] input: f¬ as /devices/virtual/input/input27 [ 273.250017][ T9336] openvswitch: netlink: ct_state flags d4ff96ff unsupported [ 273.319225][ T9336] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 273.394815][ T9336] EXT4-fs (sda1): This should not happen!! Data will be lost [ 273.394815][ T9336] [ 273.638560][ T9345] size and base must be multiples of 4 kiB [ 273.655457][ T9345] CPU: 0 UID: 0 PID: 9345 Comm: syz.2.727 Tainted: G U L syzkaller #0 PREEMPT(full) [ 273.655487][ T9345] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 273.655493][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.655503][ T9345] Call Trace: [ 273.655509][ T9345] [ 273.655516][ T9345] dump_stack_lvl+0x100/0x190 [ 273.655539][ T9345] mtrr_del.cold+0x72/0x85 [ 273.655556][ T9345] mtrr_ioctl+0xbc8/0xcf0 [ 273.655573][ T9345] ? __pfx_mtrr_ioctl+0x10/0x10 [ 273.655592][ T9345] ? find_held_lock+0x2b/0x80 [ 273.655614][ T9345] ? __fget_files+0x21f/0x3d0 [ 273.655636][ T9345] ? __pfx_mtrr_ioctl+0x10/0x10 [ 273.655652][ T9345] proc_reg_unlocked_ioctl+0x229/0x320 [ 273.655674][ T9345] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 273.655698][ T9345] __x64_sys_ioctl+0x18e/0x210 [ 273.655719][ T9345] do_syscall_64+0x115/0x840 [ 273.655741][ T9345] ? clear_bhb_loop+0x40/0x90 [ 273.655761][ T9345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.655778][ T9345] RIP: 0033:0x7f9a5d39de59 [ 273.655792][ T9345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.655806][ T9345] RSP: 002b:00007f9a5e1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.655822][ T9345] RAX: ffffffffffffffda RBX: 00007f9a5d625fa0 RCX: 00007f9a5d39de59 [ 273.655832][ T9345] RDX: 0000000000000009 RSI: 00000000400c4d04 RDI: 0000000000000009 [ 273.655841][ T9345] RBP: 00007f9a5d433e6f R08: 0000000000000000 R09: 0000000000000000 [ 273.655850][ T9345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.655859][ T9345] R13: 00007f9a5d626038 R14: 00007f9a5d625fa0 R15: 00007ffe898ae4a8 [ 273.655879][ T9345] [ 274.391387][ T757] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 274.410497][ T757] EXT4-fs (sda1): This should not happen!! Data will be lost [ 274.410497][ T757] [ 275.071374][ T3329] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 275.106680][ T3329] EXT4-fs (sda1): This should not happen!! Data will be lost [ 275.106680][ T3329] [ 275.242706][ T9358] nvme_fabrics: missing parameter 'transport=%s' [ 275.287176][ T9358] nvme_fabrics: missing parameter 'nqn=%s' [ 275.631571][ T9118] syz.0.677 (9118) used greatest stack depth: 19120 bytes left [ 275.893761][ T9368] FAULT_INJECTION: forcing a failure. [ 275.893761][ T9368] name failslab, interval 1, probability 0, space 0, times 0 [ 275.959674][ T141] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 275.972737][ T9368] CPU: 0 UID: 0 PID: 9368 Comm: syz.2.733 Tainted: G U L syzkaller #0 PREEMPT(full) [ 275.972769][ T9368] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 275.972775][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.972784][ T9368] Call Trace: [ 275.972789][ T9368] [ 275.972795][ T9368] dump_stack_lvl+0x100/0x190 [ 275.972816][ T9368] should_fail_ex.cold+0x5/0xa [ 275.972834][ T9368] should_failslab+0xc2/0x120 [ 275.972854][ T9368] __kmalloc_cache_noprof+0x91/0x6c0 [ 275.972876][ T9368] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 275.972900][ T9368] ? resv_map_alloc+0x46/0x400 [ 275.972920][ T9368] resv_map_alloc+0x46/0x400 [ 275.972938][ T9368] hugetlb_reserve_pages+0x63c/0x1490 [ 275.972960][ T9368] ? __pfx___might_resched+0x10/0x10 [ 275.972981][ T9368] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 275.973002][ T9368] ? atime_needs_update+0x8b/0x6b0 [ 275.973023][ T9368] ? touch_atime+0xa5/0x760 [ 275.973039][ T9368] ? mas_preallocate+0x521/0x14a0 [ 275.973059][ T9368] hugetlbfs_file_mmap+0x51a/0x780 [ 275.973077][ T9368] ? __pfx_hugetlbfs_file_mmap+0x10/0x10 [ 275.973096][ T9368] ? lockdep_init_map_type+0x5c/0x250 [ 275.973119][ T9368] __mmap_region+0x13c7/0x2db0 [ 275.973146][ T9368] ? __pfx___mmap_region+0x10/0x10 [ 275.973172][ T9368] ? find_held_lock+0x2b/0x80 [ 275.973195][ T9368] ? debug_object_activate+0x343/0x4b0 [ 275.973215][ T9368] ? debug_object_activate+0x343/0x4b0 [ 275.973244][ T9368] ? __lock_acquire+0x49f/0x1a40 [ 275.973275][ T9368] ? is_bpf_text_address+0x8a/0x1a0 [ 275.973295][ T9368] ? is_bpf_text_address+0x8a/0x1a0 [ 275.973321][ T9368] ? unwind_get_return_address+0x59/0xa0 [ 275.973341][ T9368] ? arch_stack_walk+0xa6/0xf0 [ 275.973391][ T9368] mmap_region+0x35d/0x620 [ 275.973407][ T9368] ? __pfx_mmap_region+0x10/0x10 [ 275.973424][ T9368] ? cap_mmap_addr+0x4b/0x120 [ 275.973444][ T9368] ? bpf_lsm_mmap_addr+0x9/0x30 [ 275.973464][ T9368] ? security_mmap_addr+0x71/0x1e0 [ 275.973482][ T9368] ? __get_unmapped_area+0x255/0x3e0 [ 275.973503][ T9368] do_mmap+0xc63/0x12f0 [ 275.973524][ T9368] ? __pfx_do_mmap+0x10/0x10 [ 275.973542][ T9368] ? __pfx_down_write_killable+0x10/0x10 [ 275.973562][ T9368] vm_mmap_pgoff+0x29e/0x470 [ 275.973583][ T9368] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 275.973599][ T9368] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 275.973626][ T9368] ksys_mmap_pgoff+0x285/0x610 [ 275.973647][ T9368] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 275.973664][ T9368] ? xfd_validate_state+0x129/0x190 [ 275.973687][ T9368] __x64_sys_mmap+0x125/0x190 [ 275.973709][ T9368] do_syscall_64+0x115/0x840 [ 275.973730][ T9368] ? clear_bhb_loop+0x40/0x90 [ 275.973747][ T9368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.973763][ T9368] RIP: 0033:0x7f9a5d39de59 [ 275.973778][ T9368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.973792][ T9368] RSP: 002b:00007f9a5e1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 275.973808][ T9368] RAX: ffffffffffffffda RBX: 00007f9a5d625fa0 RCX: 00007f9a5d39de59 [ 275.973818][ T9368] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 275.973828][ T9368] RBP: 00007f9a5d433e6f R08: 000000000000000d R09: 0000300000000000 [ 275.973837][ T9368] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 275.973846][ T9368] R13: 00007f9a5d626038 R14: 00007f9a5d625fa0 R15: 00007ffe898ae4a8 [ 275.973866][ T9368] [ 276.676082][ T141] EXT4-fs (sda1): This should not happen!! Data will be lost [ 276.676082][ T141] [ 277.769451][ T9381] zram: Added device: zram1 [ 277.895430][ T9394] FAULT_INJECTION: forcing a failure. [ 277.895430][ T9394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 278.045786][ T9394] CPU: 0 UID: 0 PID: 9394 Comm: syz.2.738 Tainted: G U L syzkaller #0 PREEMPT(full) [ 278.045812][ T9394] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 278.045817][ T9394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 278.045825][ T9394] Call Trace: [ 278.045830][ T9394] [ 278.045836][ T9394] dump_stack_lvl+0x100/0x190 [ 278.045857][ T9394] should_fail_ex.cold+0x5/0xa [ 278.045871][ T9394] ? prepare_alloc_pages+0x16d/0x5f0 [ 278.045890][ T9394] should_fail_alloc_page+0xeb/0x140 [ 278.045909][ T9394] prepare_alloc_pages+0x1f0/0x5f0 [ 278.045930][ T9394] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 278.045950][ T9394] ? __update_page_owner_handle+0x390/0x530 [ 278.045972][ T9394] ? __lock_acquire+0x49f/0x1a40 [ 278.046000][ T9394] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 278.046017][ T9394] ? __lock_acquire+0x49f/0x1a40 [ 278.046046][ T9394] ? find_held_lock+0x2b/0x80 [ 278.046060][ T9394] ? is_bpf_text_address+0x8a/0x1a0 [ 278.046078][ T9394] ? is_bpf_text_address+0x8a/0x1a0 [ 278.046096][ T9394] ? bpf_ksym_find+0x124/0x1c0 [ 278.046108][ T9394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 278.046128][ T9394] ? policy_nodemask+0xed/0x4f0 [ 278.046147][ T9394] alloc_pages_mpol+0x1fb/0x540 [ 278.046166][ T9394] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 278.046189][ T9394] folio_alloc_mpol_noprof+0x36/0x260 [ 278.046210][ T9394] shmem_alloc_folio+0x135/0x160 [ 278.046231][ T9394] shmem_alloc_and_add_folio+0x371/0xd40 [ 278.046257][ T9394] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 278.046280][ T9394] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 278.046306][ T9394] shmem_get_folio_gfp+0x6ad/0x1910 [ 278.046330][ T9394] ? filemap_map_pages+0x112d/0x1fe0 [ 278.046352][ T9394] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 278.046374][ T9394] ? __pfx_filemap_map_pages+0x10/0x10 [ 278.046393][ T9394] ? filemap_map_pages+0x1137/0x1fe0 [ 278.046415][ T9394] shmem_fault+0x1f9/0xa20 [ 278.046435][ T9394] ? __lock_acquire+0x49f/0x1a40 [ 278.046455][ T9394] ? __pfx_shmem_fault+0x10/0x10 [ 278.046479][ T9394] ? __pfx_filemap_map_pages+0x10/0x10 [ 278.046501][ T9394] ? find_held_lock+0x2b/0x80 [ 278.046518][ T9394] __do_fault+0x10b/0x440 [ 278.046535][ T9394] do_fault+0xa99/0x1750 [ 278.046552][ T9394] ? __pmd_alloc+0x3fb/0x950 [ 278.046571][ T9394] __handle_mm_fault+0x187d/0x2a00 [ 278.046595][ T9394] ? mt_find+0x45e/0x8e0 [ 278.046611][ T9394] ? __pfx___handle_mm_fault+0x10/0x10 [ 278.046630][ T9394] ? __pfx_mt_find+0x10/0x10 [ 278.046655][ T9394] ? find_vma+0xbf/0x140 [ 278.046669][ T9394] ? __pfx_find_vma+0x10/0x10 [ 278.046686][ T9394] handle_mm_fault+0x37b/0xa30 [ 278.046711][ T9394] do_user_addr_fault+0x74c/0x12f0 [ 278.046734][ T9394] exc_page_fault+0x6f/0xd0 [ 278.046755][ T9394] asm_exc_page_fault+0x26/0x30 [ 278.046769][ T9394] RIP: 0010:__get_user_4+0x14/0x30 [ 278.046787][ T9394] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 278.046801][ T9394] RSP: 0018:ffffc900039ffc38 EFLAGS: 00050287 [ 278.046812][ T9394] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900039ffbdc [ 278.046821][ T9394] RDX: 00007ffffffff000 RSI: ffffffff825b8ab1 RDI: ffffffff8c400380 [ 278.046830][ T9394] RBP: ffffc900039ffec0 R08: 0000000000000001 R09: 00000000000001c5 [ 278.046839][ T9394] R10: 0000000000000200 R11: 0000000000000000 R12: ffff88802b2a3178 [ 278.046847][ T9394] R13: 1ffff9200073ff8f R14: ffff88802b161360 R15: ffff88807e687800 [ 278.046863][ T9394] ? __might_fault+0x111/0x140 [ 278.046886][ T9394] usbdev_ioctl+0xdd7/0x3aa0 [ 278.046910][ T9394] ? __pfx_usbdev_ioctl+0x10/0x10 [ 278.046934][ T9394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 278.046953][ T9394] ? do_vfs_ioctl+0x226/0x13e0 [ 278.046971][ T9394] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 278.047016][ T9394] ? find_held_lock+0x2b/0x80 [ 278.047031][ T9394] ? __fget_files+0x215/0x3d0 [ 278.047049][ T9394] ? hook_file_ioctl_common+0x140/0x440 [ 278.047070][ T9394] ? __fget_files+0x21f/0x3d0 [ 278.047091][ T9394] ? __pfx_usbdev_ioctl+0x10/0x10 [ 278.047113][ T9394] __x64_sys_ioctl+0x18e/0x210 [ 278.047131][ T9394] do_syscall_64+0x115/0x840 [ 278.047151][ T9394] ? clear_bhb_loop+0x40/0x90 [ 278.047168][ T9394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.047182][ T9394] RIP: 0033:0x7f9a5d39de59 [ 278.047194][ T9394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.047207][ T9394] RSP: 002b:00007f9a5e1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.047220][ T9394] RAX: ffffffffffffffda RBX: 00007f9a5d625fa0 RCX: 00007f9a5d39de59 [ 278.047229][ T9394] RDX: 0000000000000000 RSI: 0000000080045510 RDI: 0000000000000002 [ 278.047237][ T9394] RBP: 00007f9a5e1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 278.047246][ T9394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.047253][ T9394] R13: 00007f9a5d626038 R14: 00007f9a5d625fa0 R15: 00007ffe898ae4a8 [ 278.047272][ T9394] [ 278.709785][ T8109] EXT4-fs: 4 callbacks suppressed [ 278.709798][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 3575 with max blocks 9 with error 117 [ 278.728605][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 278.728605][ T8109] [ 278.738792][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 278.751189][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 278.751189][ T8109] [ 279.046299][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 3567 with max blocks 9 with error 117 [ 279.059303][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 279.059303][ T8109] [ 279.070929][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 279.129802][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 279.129802][ T8109] [ 279.151107][ T9411] FAULT_INJECTION: forcing a failure. [ 279.151107][ T9411] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 279.182948][ T9411] CPU: 0 UID: 0 PID: 9411 Comm: syz.2.743 Tainted: G U L syzkaller #0 PREEMPT(full) [ 279.182975][ T9411] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 279.182981][ T9411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 279.182989][ T9411] Call Trace: [ 279.182994][ T9411] [ 279.183000][ T9411] dump_stack_lvl+0x100/0x190 [ 279.183021][ T9411] should_fail_ex.cold+0x5/0xa [ 279.183034][ T9411] ? prepare_alloc_pages+0x16d/0x5f0 [ 279.183055][ T9411] should_fail_alloc_page+0xeb/0x140 [ 279.183074][ T9411] prepare_alloc_pages+0x1f0/0x5f0 [ 279.183095][ T9411] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 279.183112][ T9411] ? __kernel_text_address+0xd/0x30 [ 279.183131][ T9411] ? unwind_get_return_address+0x59/0xa0 [ 279.183154][ T9411] ? __lock_acquire+0x49f/0x1a40 [ 279.183176][ T9411] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 279.183194][ T9411] ? look_up_lock_class+0x55/0x120 [ 279.183216][ T9411] ? register_lock_class+0x40/0x560 [ 279.183235][ T9411] ? find_held_lock+0x2b/0x80 [ 279.183249][ T9411] ? ima_match_policy+0x8c4/0x2350 [ 279.183267][ T9411] ? ima_match_policy+0x8c4/0x2350 [ 279.183287][ T9411] ? __lock_acquire+0x49f/0x1a40 [ 279.183307][ T9411] ? vma_is_special_huge+0x23f/0x2d0 [ 279.183325][ T9411] ? __pfx_vma_is_special_huge+0x10/0x10 [ 279.183342][ T9411] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 279.183363][ T9411] ? policy_nodemask+0xed/0x4f0 [ 279.183391][ T9411] alloc_pages_mpol+0x1fb/0x540 [ 279.183411][ T9411] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 279.183428][ T9411] ? process_measurement+0x4c8/0x2350 [ 279.183442][ T9411] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 279.183464][ T9411] alloc_pages_noprof+0x1a/0x160 [ 279.183485][ T9411] __pmd_alloc+0x3b/0x950 [ 279.183505][ T9411] __handle_mm_fault+0xa9c/0x2a00 [ 279.183528][ T9411] ? mt_find+0x45e/0x8e0 [ 279.183544][ T9411] ? __pfx___handle_mm_fault+0x10/0x10 [ 279.183563][ T9411] ? __pfx_mt_find+0x10/0x10 [ 279.183587][ T9411] ? find_vma+0xbf/0x140 [ 279.183602][ T9411] ? __pfx_find_vma+0x10/0x10 [ 279.183619][ T9411] handle_mm_fault+0x37b/0xa30 [ 279.183643][ T9411] do_user_addr_fault+0x74c/0x12f0 [ 279.183666][ T9411] exc_page_fault+0x6f/0xd0 [ 279.183686][ T9411] asm_exc_page_fault+0x26/0x30 [ 279.183700][ T9411] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 279.183723][ T9411] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 279.183737][ T9411] RSP: 0018:ffffc90003d2fa60 EFLAGS: 00050212 [ 279.183749][ T9411] RAX: 756e65470000000d RBX: 0000000000000010 RCX: 0000000000000010 [ 279.183758][ T9411] RDX: 0000000000000001 RSI: ffffc90003d2fb50 RDI: 0000000000000000 [ 279.183766][ T9411] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff520007a5f6b [ 279.183775][ T9411] R10: ffffc90003d2fb5f R11: 0000000000000000 R12: ffffc90003d2fb50 [ 279.183783][ T9411] R13: 0000000000000010 R14: 00007ffffffff000 R15: 0000000000000000 [ 279.183801][ T9411] _copy_to_user+0xa4/0xd0 [ 279.183822][ T9411] cpuid_read_f+0x1d9/0x360 [ 279.183846][ T9411] ? __pfx_cpuid_read_f+0x10/0x10 [ 279.183873][ T9411] ? __pfx_cpuid_smp_cpuid+0x10/0x10 [ 279.183894][ T9411] ? __pfx___might_resched+0x10/0x10 [ 279.183919][ T9411] ? apparmor_file_permission+0x13f/0x1c0 [ 279.183936][ T9411] ? bpf_lsm_file_permission+0x9/0x10 [ 279.183956][ T9411] ? security_file_permission+0x76/0x210 [ 279.183974][ T9411] ? rw_verify_area+0xce/0x6d0 [ 279.183993][ T9411] ? __pfx_cpuid_read_f+0x10/0x10 [ 279.184012][ T9411] vfs_readv+0x5d8/0x8d0 [ 279.184035][ T9411] ? __pfx_vfs_readv+0x10/0x10 [ 279.184054][ T9411] ? rcu_read_lock_any_held+0x6a/0xa0 [ 279.184082][ T9411] ? __fget_files+0x21f/0x3d0 [ 279.184106][ T9411] ? do_readv+0x13e/0x340 [ 279.184122][ T9411] do_readv+0x13e/0x340 [ 279.184141][ T9411] ? __pfx_do_readv+0x10/0x10 [ 279.184163][ T9411] do_syscall_64+0x115/0x840 [ 279.184183][ T9411] ? clear_bhb_loop+0x40/0x90 [ 279.184200][ T9411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.184214][ T9411] RIP: 0033:0x7f9a5d39de59 [ 279.184226][ T9411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.184239][ T9411] RSP: 002b:00007f9a5e1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 279.184252][ T9411] RAX: ffffffffffffffda RBX: 00007f9a5d625fa0 RCX: 00007f9a5d39de59 [ 279.184260][ T9411] RDX: 0000000000000003 RSI: 0000200000000680 RDI: 0000000000000003 [ 279.184269][ T9411] RBP: 00007f9a5e1ff090 R08: 0000000000000000 R09: 0000000000000000 [ 279.184277][ T9411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.184285][ T9411] R13: 00007f9a5d626038 R14: 00007f9a5d625fa0 R15: 00007ffe898ae4a8 [ 279.184304][ T9411] [ 280.602010][ T8109] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 280.628593][ T8109] EXT4-fs (sda1): This should not happen!! Data will be lost [ 280.628593][ T8109] [ 281.092156][ T9430] input: f¬ as /devices/virtual/input/input28 [ 282.893234][ T5629] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 283.766068][ T9485] FAULT_INJECTION: forcing a failure. [ 283.766068][ T9485] name failslab, interval 1, probability 0, space 0, times 0 [ 283.874448][ T9485] CPU: 0 UID: 0 PID: 9485 Comm: syz.1.758 Tainted: G U L syzkaller #0 PREEMPT(full) [ 283.874481][ T9485] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 283.874487][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 283.874495][ T9485] Call Trace: [ 283.874500][ T9485] [ 283.874505][ T9485] dump_stack_lvl+0x100/0x190 [ 283.874527][ T9485] should_fail_ex.cold+0x5/0xa [ 283.874543][ T9485] should_failslab+0xc2/0x120 [ 283.874561][ T9485] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 283.874580][ T9485] ? parse_pred+0x2d4/0x3070 [ 283.874600][ T9485] kmemdup_nul+0x49/0xd0 [ 283.874615][ T9485] parse_pred+0x2d4/0x3070 [ 283.874637][ T9485] ? __pfx_parse_pred+0x10/0x10 [ 283.874659][ T9485] ? trace_kmalloc+0xeb/0x110 [ 283.874676][ T9485] ? __kasan_kmalloc+0xaa/0xb0 [ 283.874694][ T9485] ? process_preds+0x4c2/0x1d90 [ 283.874714][ T9485] process_preds+0x6a6/0x1d90 [ 283.874740][ T9485] apply_subsystem_event_filter+0x4a0/0x17a0 [ 283.874768][ T9485] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 283.874791][ T9485] ? _copy_from_user+0x59/0xd0 [ 283.874812][ T9485] subsystem_filter_write+0x95/0x120 [ 283.874831][ T9485] vfs_write+0x2aa/0x1050 [ 283.874852][ T9485] ? __pfx_subsystem_filter_write+0x10/0x10 [ 283.874872][ T9485] ? __pfx_vfs_write+0x10/0x10 [ 283.874891][ T9485] ? __fget_files+0x215/0x3d0 [ 283.874915][ T9485] ? __fget_files+0x21f/0x3d0 [ 283.874940][ T9485] ksys_write+0x12a/0x250 [ 283.874959][ T9485] ? __pfx_ksys_write+0x10/0x10 [ 283.874984][ T9485] do_syscall_64+0x115/0x840 [ 283.875005][ T9485] ? clear_bhb_loop+0x40/0x90 [ 283.875022][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.875037][ T9485] RIP: 0033:0x7fc38059de59 [ 283.875050][ T9485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.875063][ T9485] RSP: 002b:00007fc3813ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 283.875077][ T9485] RAX: ffffffffffffffda RBX: 00007fc380825fa0 RCX: 00007fc38059de59 [ 283.875087][ T9485] RDX: 0000000000000071 RSI: 0000200000000040 RDI: 0000000000000007 [ 283.875095][ T9485] RBP: 00007fc380633e6f R08: 0000000000000000 R09: 0000000000000000 [ 283.875103][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.875111][ T9485] R13: 00007fc380826038 R14: 00007fc380825fa0 R15: 00007ffc9b9ed838 [ 283.875130][ T9485] [ 284.338270][ T3329] EXT4-fs: 6 callbacks suppressed [ 284.338284][ T3329] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 284.358056][ T3329] EXT4-fs (sda1): This should not happen!! Data will be lost [ 284.358056][ T3329] [ 284.571159][ T141] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 117 [ 284.612179][ T141] EXT4-fs (sda1): This should not happen!! Data will be lost [ 284.612179][ T141] [ 284.966139][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 285.641317][ T9505] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.0.763: Error -117 reading block bitmap for 4 [ 285.741418][ T9510] input: f¬ as /devices/virtual/input/input29 [ 286.826000][ T9546] futex_wake_op: syz.2.772 tries to shift op by -2048; fix this program [ 286.989658][ T9546] FAULT_INJECTION: forcing a failure. [ 286.989658][ T9546] name failslab, interval 1, probability 0, space 0, times 0 [ 287.028043][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 287.132975][ T9546] CPU: 0 UID: 0 PID: 9546 Comm: syz.2.772 Tainted: G U L syzkaller #0 PREEMPT(full) [ 287.133003][ T9546] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 287.133009][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.133018][ T9546] Call Trace: [ 287.133024][ T9546] [ 287.133030][ T9546] dump_stack_lvl+0x100/0x190 [ 287.133051][ T9546] should_fail_ex.cold+0x5/0xa [ 287.133069][ T9546] should_failslab+0xc2/0x120 [ 287.133088][ T9546] kmem_cache_alloc_noprof+0x91/0x6a0 [ 287.133105][ T9546] ? __pfx_map_id_range_down+0x10/0x10 [ 287.133124][ T9546] ? security_inode_alloc+0x3b/0x2c0 [ 287.133142][ T9546] security_inode_alloc+0x3b/0x2c0 [ 287.133157][ T9546] inode_init_always_gfp+0xc77/0xfb0 [ 287.133185][ T9546] alloc_inode+0x8e/0x250 [ 287.133202][ T9546] sock_alloc+0x44/0x280 [ 287.133218][ T9546] ? security_socket_create+0x7f/0x250 [ 287.133242][ T9546] __sock_create+0xc2/0x860 [ 287.133273][ T9546] __sys_socket+0x14d/0x260 [ 287.133295][ T9546] ? __pfx___sys_socket+0x10/0x10 [ 287.133322][ T9546] __x64_sys_socket+0x72/0xb0 [ 287.133343][ T9546] ? lockdep_hardirqs_on+0x78/0x100 [ 287.133366][ T9546] do_syscall_64+0x115/0x840 [ 287.133387][ T9546] ? clear_bhb_loop+0x40/0x90 [ 287.133404][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.133420][ T9546] RIP: 0033:0x7f9a5d39de59 [ 287.133433][ T9546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.133447][ T9546] RSP: 002b:00007f9a5e1ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 287.133462][ T9546] RAX: ffffffffffffffda RBX: 00007f9a5d625fa0 RCX: 00007f9a5d39de59 [ 287.133472][ T9546] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 287.133480][ T9546] RBP: 00007f9a5d433e6f R08: 0000000000000000 R09: 0000000000000000 [ 287.133489][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.133497][ T9546] R13: 00007f9a5d626038 R14: 00007f9a5d625fa0 R15: 00007ffe898ae4a8 [ 287.133516][ T9546] [ 288.088303][ T9546] socket: no more sockets [ 288.240195][ T5630] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 288.284763][ T9581] input: f¬ as /devices/virtual/input/input30 [ 290.317018][ T9614] block nbd2: not configured, cannot reconfigure [ 291.965237][ T9630] ima: policy update failed [ 291.998060][ T30] audit: type=1802 audit(4294967384.661:17): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.787" res=0 errno=0 [ 292.768876][ T9653] input: f¬ as /devices/virtual/input/input31 [ 294.169069][ T9680] FAULT_INJECTION: forcing a failure. [ 294.169069][ T9680] name failslab, interval 1, probability 0, space 0, times 0 [ 294.323629][ T9680] CPU: 0 UID: 0 PID: 9680 Comm: syz.3.798 Tainted: G U L syzkaller #0 PREEMPT(full) [ 294.323659][ T9680] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 294.323665][ T9680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.323674][ T9680] Call Trace: [ 294.323680][ T9680] [ 294.323686][ T9680] dump_stack_lvl+0x100/0x190 [ 294.323708][ T9680] should_fail_ex.cold+0x5/0xa [ 294.323726][ T9680] should_failslab+0xc2/0x120 [ 294.323745][ T9680] kmem_cache_alloc_noprof+0x91/0x6a0 [ 294.323763][ T9680] ? __kernfs_new_node+0xd2/0xa10 [ 294.323788][ T9680] __kernfs_new_node+0xd2/0xa10 [ 294.323812][ T9680] ? __pfx___kernfs_new_node+0x10/0x10 [ 294.323837][ T9680] ? find_held_lock+0x2b/0x80 [ 294.323853][ T9680] ? kernfs_root+0xee/0x2a0 [ 294.323871][ T9680] ? kernfs_root+0xee/0x2a0 [ 294.323894][ T9680] kernfs_new_node+0x117/0x150 [ 294.323919][ T9680] __kernfs_create_file+0x53/0x350 [ 294.323937][ T9680] sysfs_add_file_mode_ns+0x207/0x3c0 [ 294.323960][ T9680] internal_create_group+0x593/0xfb0 [ 294.323985][ T9680] ? __pfx_internal_create_group+0x10/0x10 [ 294.324011][ T9680] ? kernfs_create_link+0x1bd/0x240 [ 294.324030][ T9680] internal_create_groups+0x9d/0x150 [ 294.324052][ T9680] device_add+0x77a/0x1970 [ 294.324075][ T9680] ? __pfx_device_add+0x10/0x10 [ 294.324094][ T9680] ? __pfx___might_resched+0x10/0x10 [ 294.324113][ T9680] ? lockdep_hardirqs_on+0x78/0x100 [ 294.324141][ T9680] __add_disk+0x518/0xe40 [ 294.324162][ T9680] add_disk_fwnode+0x118/0x5c0 [ 294.324180][ T9680] loop_add+0x90b/0xb60 [ 294.324204][ T9680] ? __pfx_loop_add+0x10/0x10 [ 294.324239][ T9680] ? find_held_lock+0x2b/0x80 [ 294.324255][ T9680] ? __fget_files+0x215/0x3d0 [ 294.324278][ T9680] loop_control_ioctl+0xae/0x620 [ 294.324294][ T9680] ? __pfx_loop_control_ioctl+0x10/0x10 [ 294.324312][ T9680] ? __pfx_loop_control_ioctl+0x10/0x10 [ 294.324328][ T9680] __x64_sys_ioctl+0x18e/0x210 [ 294.324348][ T9680] do_syscall_64+0x115/0x840 [ 294.324369][ T9680] ? clear_bhb_loop+0x40/0x90 [ 294.324387][ T9680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.324402][ T9680] RIP: 0033:0x7f182779de59 [ 294.324416][ T9680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.324430][ T9680] RSP: 002b:00007f18285b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 294.324444][ T9680] RAX: ffffffffffffffda RBX: 00007f1827a26180 RCX: 00007f182779de59 [ 294.324454][ T9680] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000009 [ 294.324463][ T9680] RBP: 00007f1827833e6f R08: 0000000000000000 R09: 0000000000000000 [ 294.324472][ T9680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.324488][ T9680] R13: 00007f1827a26218 R14: 00007f1827a26180 R15: 00007ffe02e4cf78 [ 294.324509][ T9680] [ 294.643709][ T9690] FAULT_INJECTION: forcing a failure. [ 294.643709][ T9690] name failslab, interval 1, probability 0, space 0, times 0 [ 294.656532][ T9690] CPU: 0 UID: 0 PID: 9690 Comm: syz.2.800 Tainted: G U L syzkaller #0 PREEMPT(full) [ 294.656559][ T9690] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 294.656565][ T9690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.656574][ T9690] Call Trace: [ 294.656581][ T9690] [ 294.656588][ T9690] dump_stack_lvl+0x100/0x190 [ 294.656609][ T9690] should_fail_ex.cold+0x5/0xa [ 294.656627][ T9690] should_failslab+0xc2/0x120 [ 294.656647][ T9690] kmem_cache_alloc_noprof+0x91/0x6a0 [ 294.656665][ T9690] ? find_held_lock+0x2b/0x80 [ 294.656681][ T9690] ? mpol_new+0x11b/0x2d0 [ 294.656701][ T9690] mpol_new+0x11b/0x2d0 [ 294.656717][ T9690] do_mbind+0x210/0xfd0 [ 294.656744][ T9690] ? __pfx_do_mbind+0x10/0x10 [ 294.656775][ T9690] ? __pfx_get_nodes+0x10/0x10 [ 294.656796][ T9690] kernel_mbind+0x1b7/0x200 [ 294.656819][ T9690] ? __pfx_kernel_mbind+0x10/0x10 [ 294.656845][ T9690] do_syscall_64+0x115/0x840 [ 294.656867][ T9690] ? clear_bhb_loop+0x40/0x90 [ 294.656885][ T9690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.656901][ T9690] RIP: 0033:0x7f9a5d39de59 [ 294.656915][ T9690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.656932][ T9690] RSP: 002b:00007f9a5e1de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 294.656947][ T9690] RAX: ffffffffffffffda RBX: 00007f9a5d626090 RCX: 00007f9a5d39de59 [ 294.656957][ T9690] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 294.656966][ T9690] RBP: 00007f9a5d433e6f R08: 0000000000000006 R09: 0000000000000002 [ 294.656975][ T9690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.656984][ T9690] R13: 00007f9a5d626128 R14: 00007f9a5d626090 R15: 00007ffe898ae4a8 [ 294.657005][ T9690] [ 294.934938][ T5630] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 295.744922][ T9708] MTRR 2 not used [ 295.857171][ T30] audit: type=1800 audit(4294967388.519:18): pid=9712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.806" name="dbroot" dev="configfs" ino=30393 res=0 errno=0 [ 295.883576][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'. [ 296.247086][ T9717] block nbd2: not configured, cannot reconfigure [ 296.731840][ T9733] unsupported nla_type 113 [ 296.806823][ T9736] dlm: non-version read from control device 2147479540 [ 296.937497][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.810'. [ 298.025175][ T9761] Process accounting paused [ 298.423539][ T9772] random: crng reseeded on system resumption [ 298.688908][ T9782] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 298.743648][ T9782] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 299.616222][ T9795] block nbd2: not configured, cannot reconfigure [ 299.985698][ T9808] WARNING! power/level is deprecated; use power/control instead [ 302.650175][ T9861] block nbd2: not configured, cannot reconfigure [ 305.167644][ T9915] zswap: compressor not available [ 305.452840][ T5815] ================================================================== [ 305.452855][ T5815] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 305.452877][ T5815] Write of size 8 at addr ffffc90004bd1be0 by task kworker/0:7/5815 [ 305.452889][ T5815] [ 305.452898][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: kworker/0:7 Tainted: G U L syzkaller #0 PREEMPT(full) [ 305.452919][ T5815] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 305.452925][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.452937][ T5815] Workqueue: events_power_efficient fb_flashcursor [ 305.452956][ T5815] Call Trace: [ 305.452961][ T5815] [ 305.452966][ T5815] dump_stack_lvl+0x100/0x190 [ 305.452982][ T5815] print_report+0x13d/0x4b0 [ 305.453000][ T5815] ? _raw_spin_lock_irqsave+0x52/0x60 [ 305.453022][ T5815] ? sys_imageblit+0x19fb/0x1d60 [ 305.453036][ T5815] kasan_report+0xdf/0x1c0 [ 305.453053][ T5815] ? sys_imageblit+0x19fb/0x1d60 [ 305.453070][ T5815] sys_imageblit+0x19fb/0x1d60 [ 305.453087][ T5815] ? __pfx_sys_imageblit+0x10/0x10 [ 305.453104][ T5815] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 305.453126][ T5815] soft_cursor+0x524/0xa10 [ 305.453148][ T5815] bit_cursor+0xca1/0x1490 [ 305.453170][ T5815] ? __pfx_bit_cursor+0x10/0x10 [ 305.453192][ T5815] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.453211][ T5815] ? get_color+0x1da/0x450 [ 305.453227][ T5815] ? __pfx_bit_cursor+0x10/0x10 [ 305.453246][ T5815] fb_flashcursor+0x338/0x430 [ 305.453263][ T5815] process_one_work+0xa23/0x1940 [ 305.453285][ T5815] ? __pfx_process_one_work+0x10/0x10 [ 305.453305][ T5815] ? __pfx_fb_flashcursor+0x10/0x10 [ 305.453322][ T5815] worker_thread+0x5ef/0xe50 [ 305.453341][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 305.453359][ T5815] ? kthread+0x13a/0x450 [ 305.453376][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 305.453392][ T5815] kthread+0x370/0x450 [ 305.453407][ T5815] ? __pfx_kthread+0x10/0x10 [ 305.453423][ T5815] ret_from_fork+0x72b/0xd50 [ 305.453438][ T5815] ? __pfx_ret_from_fork+0x10/0x10 [ 305.453453][ T5815] ? __switch_to+0x800/0x10f0 [ 305.453471][ T5815] ? __switch_to_asm+0x39/0x70 [ 305.453488][ T5815] ? __pfx_kthread+0x10/0x10 [ 305.453504][ T5815] ret_from_fork_asm+0x1a/0x30 [ 305.453524][ T5815] [ 305.453530][ T5815] [ 305.453533][ T5815] The buggy address belongs to a vmalloc virtual mapping [ 305.453550][ T5815] Memory state around the buggy address: [ 305.453557][ T5815] ffffc90004bd1a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 305.453571][ T5815] ffffc90004bd1b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 305.453580][ T5815] >ffffc90004bd1b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 305.453587][ T5815] ^ [ 305.453595][ T5815] ffffc90004bd1c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 305.453604][ T5815] ffffc90004bd1c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 305.453612][ T5815] ================================================================== [ 305.453638][ T5815] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 305.453648][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: kworker/0:7 Tainted: G U L syzkaller #0 PREEMPT(full) [ 305.453669][ T5815] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 305.453674][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.453683][ T5815] Workqueue: events_power_efficient fb_flashcursor [ 305.453701][ T5815] Call Trace: [ 305.453705][ T5815] [ 305.453710][ T5815] dump_stack_lvl+0x100/0x190 [ 305.453724][ T5815] vpanic+0x552/0x970 [ 305.453737][ T5815] ? __pfx_vpanic+0x10/0x10 [ 305.453751][ T5815] ? mark_held_locks+0x40/0x70 [ 305.453769][ T5815] ? irqentry_exit+0x24d/0xa00 [ 305.453790][ T5815] ? sys_imageblit+0x19fb/0x1d60 [ 305.453805][ T5815] panic+0xd1/0xe0 [ 305.453817][ T5815] ? __pfx_panic+0x10/0x10 [ 305.453832][ T5815] ? check_panic_on_warn+0x1f/0x90 [ 305.453850][ T5815] check_panic_on_warn.cold+0x19/0x34 [ 305.453865][ T5815] end_report.part.0+0x3a/0x90 [ 305.453883][ T5815] kasan_report.cold+0xe/0x18 [ 305.453902][ T5815] ? sys_imageblit+0x19fb/0x1d60 [ 305.453919][ T5815] sys_imageblit+0x19fb/0x1d60 [ 305.453936][ T5815] ? __pfx_sys_imageblit+0x10/0x10 [ 305.453954][ T5815] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 305.453974][ T5815] soft_cursor+0x524/0xa10 [ 305.453997][ T5815] bit_cursor+0xca1/0x1490 [ 305.454019][ T5815] ? __pfx_bit_cursor+0x10/0x10 [ 305.454041][ T5815] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.454059][ T5815] ? get_color+0x1da/0x450 [ 305.454076][ T5815] ? __pfx_bit_cursor+0x10/0x10 [ 305.454095][ T5815] fb_flashcursor+0x338/0x430 [ 305.454112][ T5815] process_one_work+0xa23/0x1940 [ 305.454133][ T5815] ? __pfx_process_one_work+0x10/0x10 [ 305.454153][ T5815] ? __pfx_fb_flashcursor+0x10/0x10 [ 305.454171][ T5815] worker_thread+0x5ef/0xe50 [ 305.454190][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 305.454208][ T5815] ? kthread+0x13a/0x450 [ 305.454223][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 305.454241][ T5815] kthread+0x370/0x450 [ 305.454257][ T5815] ? __pfx_kthread+0x10/0x10 [ 305.454273][ T5815] ret_from_fork+0x72b/0xd50 [ 305.454287][ T5815] ? __pfx_ret_from_fork+0x10/0x10 [ 305.454302][ T5815] ? __switch_to+0x800/0x10f0 [ 305.454320][ T5815] ? __switch_to_asm+0x39/0x70 [ 305.454337][ T5815] ? __pfx_kthread+0x10/0x10 [ 305.454353][ T5815] ret_from_fork_asm+0x1a/0x30 [ 305.454374][ T5815] [ 305.454438][ T5815] Kernel Offset: disabled