last executing test programs: 7.967070222s ago: executing program 0 (id=1813): mmap$auto(0x0, 0x7f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="361b1000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') socket(0x10, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x80000002, 0x85fc, 0x21010004}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r5, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 7.869643353s ago: executing program 2 (id=1815): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) socket(0x2, 0x1, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x2, 0x5, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) unshare$auto(0x40000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x7ffff000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0x6, 0x0, 0x100000002) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000d80), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20008800) 6.892781452s ago: executing program 0 (id=1818): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000013c0)=""/181, 0xb5) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x385241, 0x0) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) io_getevents$auto(0x1, 0x401, 0x2, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2?', 0x80000000) r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x100, 0x0) read$auto_buffer_percent_fops_trace(r2, &(0x7f00000003c0)=""/93, 0x5d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x5, 0x3, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x20) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) chdir$auto(0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x40001, 0x0) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xcc0}, 0x1, 0x0, 0x0, 0x10}, 0x8010) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x20002, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x7d48, 0x948b, 0x4, 0x15f4da0c, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) 6.730266902s ago: executing program 2 (id=1820): mmap$auto(0x0, 0x7f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="361b1000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') socket(0x10, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x80000002, 0x85fc, 0x21010004}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r5, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 6.052546779s ago: executing program 1 (id=1822): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x700, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 6.021690485s ago: executing program 3 (id=1823): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x700, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 5.788476563s ago: executing program 2 (id=1824): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x700, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 4.742592344s ago: executing program 1 (id=1825): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0xfffff958) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r1, &(0x7f0000000000)='system.posix_acl_access\x00') truncate$auto(&(0x7f00000000c0)='./file0\x00', 0x6) write$auto(r0, 0x0, 0x101) fcntl$auto_F_SETOWN(r0, 0x8, 0x0) r2 = socket(0x28, 0x1, 0x0) setsockopt$auto(r2, 0x28, 0x0, 0x0, 0x2) r3 = socket(0xa, 0x1, 0x84) socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) listen$auto(0x3, 0x81) close_range$auto(r3, 0xa, 0x0) write$auto(0x3, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) 4.582067538s ago: executing program 2 (id=1826): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) read$auto_stats_fops_(r1, &(0x7f0000000840)=""/4096, 0x1000) write$auto(r0, &(0x7f0000000000)='/dev/loop6\x00', 0x6) write$auto_fops_init_pkru_pkeys(r1, &(0x7f0000000280)="e7c2da8ba23469d9b78d2e257333bedaec957355b8c2c4c78f4a98e7180a2dfeddb935038a6350c625940925fc61f1b8b51df8f60e61c078ff39654003ba04", 0x3f) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440), 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) listen$auto(r2, 0xff) 4.30417169s ago: executing program 3 (id=1827): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) read$auto_stats_fops_(r1, &(0x7f0000000840)=""/4096, 0x1000) write$auto(r0, &(0x7f0000000000)='/dev/loop6\x00', 0x6) write$auto_fops_init_pkru_pkeys(r1, &(0x7f0000000280)="e7c2da8ba23469d9b78d2e257333bedaec957355b8c2c4c78f4a98e7180a2dfeddb935038a6350c625940925fc61f1b8b51df8f60e61c078ff39654003ba04", 0x3f) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) listen$auto(r2, 0xff) 4.179548126s ago: executing program 1 (id=1828): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r1, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) 4.169156618s ago: executing program 2 (id=1829): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd4\x00', 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r1, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) 3.95364768s ago: executing program 0 (id=1830): openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80502, 0x0) prctl$auto_PR_SET_MM_ENV_END(0xff, 0xb, 0x0, 0x9, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x1f53, 0x2000000000002) open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0xc0585609, r0) 3.733032122s ago: executing program 0 (id=1831): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000013c0)=""/181, 0xb5) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x385241, 0x0) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) io_getevents$auto(0x1, 0x401, 0x2, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2?', 0x80000000) r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x100, 0x0) read$auto_buffer_percent_fops_trace(r2, &(0x7f00000003c0)=""/93, 0x5d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x5, 0x3, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x20) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) chdir$auto(0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x40001, 0x0) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xcc0}, 0x1, 0x0, 0x0, 0x10}, 0x8010) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x20002, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x7d48, 0x948b, 0x4, 0x15f4da0c, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) 3.395361572s ago: executing program 3 (id=1832): mmap$auto(0x0, 0x7f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="361b1000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') socket(0x10, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x80000002, 0x85fc, 0x21010004}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r5, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 1.862776453s ago: executing program 3 (id=1833): mmap$auto(0x0, 0x6, 0xdb, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socketpair$auto(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x88) socketpair$auto(0x1, 0x5, 0x5, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu2\x00', 0x101800, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) 1.442587132s ago: executing program 3 (id=1834): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd4\x00', 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 945.863262ms ago: executing program 0 (id=1835): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), r0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) 770.103241ms ago: executing program 2 (id=1836): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000280), r0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) 742.513207ms ago: executing program 1 (id=1837): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0xfffff958) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r1, &(0x7f0000000000)='system.posix_acl_access\x00') truncate$auto(&(0x7f00000000c0)='./file0\x00', 0x6) write$auto(r0, 0x0, 0x101) fcntl$auto_F_SETOWN(r0, 0x8, 0x0) r2 = socket(0x28, 0x1, 0x0) setsockopt$auto(r2, 0x28, 0x0, 0x0, 0x2) r3 = socket(0xa, 0x1, 0x84) socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) listen$auto(0x3, 0x81) close_range$auto(r3, 0xa, 0x0) write$auto(0x3, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) 421.39738ms ago: executing program 3 (id=1838): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4082, 0x0) utimensat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x4000000006, 0x40}, 0x38) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60204, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x6, 0x0, &(0x7f0000000100)={[0x8, 0x200000000005, 0x7, 0x7, 0x8, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffffc, 0xfff]}, &(0x7f0000000180)={[0x2, 0x8000, 0x4, 0x8000000000000001, 0x7f, 0x700, 0x7, 0x7, 0x8, 0x2, 0x8, 0x10, 0x5, 0xfffffffffffffff4, 0x9, 0x2]}, &(0x7f0000000080)={0x1ff, 0x401}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3c", 0xfdef) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) 292.727425ms ago: executing program 1 (id=1839): socket(0x10, 0x3, 0x6) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80502, 0x0) prctl$auto_PR_SET_MM_ENV_END(0xff, 0xb, 0x0, 0x9, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x1f53, 0x2000000000002) open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0xc0585609, r0) 115.197477ms ago: executing program 1 (id=1840): mmap$auto(0x0, 0x7f, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="361b1000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250300000008000600020000000c0014"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) setgroups$auto(0x8, &(0x7f0000000000)=0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) syz_genetlink_get_family_id$auto_smc_pnetid(0x0, 0xffffffffffffffff) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r4, 0x0, 0x7) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') socket(0x10, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x80000002, 0x85fc, 0x21010004}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r5, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 0s ago: executing program 0 (id=1841): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mknod$auto(0x0, 0x20e9, 0x103) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x5) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r1, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x287) socket(0x23, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40002, 0x0) socket(0xa, 0x1, 0x84) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x20006, 0x4, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 7642][T10899] ? __pfx_do_sys_openat2+0x10/0x10 [ 465.897688][T10899] ? __fget_files+0x21f/0x3d0 [ 465.897733][T10899] __x64_sys_openat+0x12d/0x210 [ 465.897760][T10899] ? __pfx___x64_sys_openat+0x10/0x10 [ 465.897788][T10899] ? xfd_validate_state+0x129/0x190 [ 465.897830][T10899] do_syscall_64+0xc9/0xf80 [ 465.897867][T10899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.897896][T10899] RIP: 0033:0x7f2cd4f9bf79 [ 465.897958][T10899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.897987][T10899] RSP: 002b:00007f2cd5ec9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 465.898019][T10899] RAX: ffffffffffffffda RBX: 00007f2cd5215fa0 RCX: 00007f2cd4f9bf79 [ 465.898036][T10899] RDX: 00000000000a8000 RSI: 0000200000001100 RDI: ffffffffffffff9c [ 465.898051][T10899] RBP: 00007f2cd50327e0 R08: 0000000000000000 R09: 0000000000000000 [ 465.898067][T10899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.898081][T10899] R13: 00007f2cd5216038 R14: 00007f2cd5215fa0 R15: 00007ffc6953f078 [ 465.898112][T10899] [ 466.464204][T10899] ERROR: Out of memory at tomoyo_realpath_from_path. [ 469.164279][T10942] Process accounting resumed [ 469.214212][ T3546] EXT4-fs: 46 callbacks suppressed [ 469.214232][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 969 with max blocks 26 with error 117 [ 469.243981][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 469.243981][ T3546] [ 469.337978][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 923 with max blocks 18 with error 117 [ 469.394300][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 469.394300][ T3546] [ 469.440047][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 972 with max blocks 22 with error 117 [ 469.479832][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 469.479832][ T3546] [ 469.535436][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 937 with max blocks 57 with error 117 [ 469.594156][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 469.594156][ T3546] [ 469.691580][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 469.742303][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 469.742303][ T3546] [ 471.538531][T10971] netlink: 342 bytes leftover after parsing attributes in process `syz.0.875'. [ 473.584532][T10993] netlink: 342 bytes leftover after parsing attributes in process `syz.1.880'. [ 476.839188][T11047] zswap: compressor not available [ 477.997222][T11077] netlink: 342 bytes leftover after parsing attributes in process `syz.3.893'. [ 478.394689][T11077] EXT4-fs: 22 callbacks suppressed [ 478.394712][T11077] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 478.586841][T11077] EXT4-fs (sda1): This should not happen!! Data will be lost [ 478.586841][T11077] [ 483.684528][T11118] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 483.768761][T11118] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 483.892390][T11118] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 484.004419][T11118] page_type: f5(slab) [ 484.008474][T11118] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 484.097142][T11118] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 484.184240][T11118] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 484.228221][T11118] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 484.270620][T11131] netlink: 342 bytes leftover after parsing attributes in process `syz.0.912'. [ 484.299029][T11118] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 484.760310][T11118] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 484.775283][T11131] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 484.810993][T11131] EXT4-fs (sda1): This should not happen!! Data will be lost [ 484.810993][T11131] [ 484.812404][T11118] page dumped because: unmovable page [ 485.208491][T11118] page_owner tracks the page as allocated [ 485.315745][T11118] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevadm), ts 36315578697, free_ts 29666744734 [ 485.514346][T11118] post_alloc_hook+0x1e1/0x250 [ 485.519353][T11118] get_page_from_freelist+0xe3d/0x2e10 [ 485.525064][T11118] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 485.531150][T11118] alloc_pages_mpol+0x1fb/0x550 [ 485.554184][T11118] new_slab+0x2c4/0x440 [ 485.566060][T11118] ___slab_alloc+0xda3/0x1ca0 [ 485.570898][T11118] __slab_alloc.isra.0+0x63/0x110 [ 485.576627][T11118] kmem_cache_alloc_lru_noprof+0x507/0x7d0 [ 485.672575][T11118] alloc_inode+0x183/0x250 [ 485.714298][T11118] iget_locked+0x1d9/0x6d0 [ 485.720078][T11118] kernfs_get_inode+0x46/0x470 [ 485.741849][T11118] kernfs_iop_lookup+0x1a7/0x2d0 [ 485.747317][T11118] __lookup_slow+0x251/0x460 [ 485.761960][T11118] lookup_slow+0x50/0x70 [ 485.774201][T11118] path_lookupat+0x5e8/0xc40 [ 485.785412][T11118] filename_lookup+0x202/0x590 [ 485.805357][T11118] page last free pid 1 tgid 1 stack trace: [ 485.815887][T11118] __free_frozen_pages+0x822/0x1130 [ 485.838487][T11118] free_contig_range+0x1a3/0x520 [ 485.848606][T11118] destroy_args+0xa8/0x7a0 [ 485.854380][T11118] debug_vm_pgtable+0x1b66/0x34b0 [ 485.860494][T11118] do_one_initcall+0x11d/0x690 [ 485.866791][T11118] kernel_init_freeable+0x6e5/0x790 [ 485.872487][T11118] kernel_init+0x1f/0x1e0 [ 485.878117][T11118] ret_from_fork+0x754/0xaf0 [ 485.883484][T11118] ret_from_fork_asm+0x1a/0x30 [ 486.084460][T11150] netlink: 342 bytes leftover after parsing attributes in process `syz.0.908'. [ 486.131698][T11146] zswap: compressor not available [ 486.170171][T11154] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 486.182751][T11154] EXT4-fs (sda1): This should not happen!! Data will be lost [ 486.182751][T11154] [ 488.274565][T11187] FAULT_INJECTION: forcing a failure. [ 488.274565][T11187] name failslab, interval 1, probability 0, space 0, times 0 [ 488.337971][T11187] CPU: 0 UID: 0 PID: 11187 Comm: syz.1.916 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.338015][T11187] Tainted: [L]=SOFTLOCKUP [ 488.338025][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 488.338045][T11187] Call Trace: [ 488.338055][T11187] [ 488.338067][T11187] dump_stack_lvl+0x100/0x190 [ 488.338109][T11187] should_fail_ex.cold+0x5/0xa [ 488.338163][T11187] should_failslab+0xc2/0x120 [ 488.338207][T11187] kmem_cache_alloc_noprof+0x83/0x780 [ 488.338247][T11187] ? __proc_create+0xc2/0x8c0 [ 488.338272][T11187] ? __proc_create+0x2cb/0x8c0 [ 488.338309][T11187] ? __proc_create+0x2cb/0x8c0 [ 488.338334][T11187] __proc_create+0x2cb/0x8c0 [ 488.338375][T11187] ? __pfx___proc_create+0x10/0x10 [ 488.338410][T11187] ? _raw_write_unlock+0x28/0x50 [ 488.338447][T11187] proc_create_reg+0x75/0x170 [ 488.338480][T11187] proc_create_data+0x86/0x110 [ 488.338531][T11187] ? __pfx_proc_create_data+0x10/0x10 [ 488.338562][T11187] ? cache_register_net+0x137/0x5e0 [ 488.338603][T11187] ? cache_register_net+0x137/0x5e0 [ 488.338671][T11187] cache_register_net+0x1e0/0x5e0 [ 488.338712][T11187] gss_svc_init_net+0x98/0x640 [ 488.338746][T11187] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 488.338787][T11187] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 488.338824][T11187] ops_init+0x1e2/0x5f0 [ 488.338867][T11187] setup_net+0x118/0x3a0 [ 488.338911][T11187] ? __pfx_setup_net+0x10/0x10 [ 488.338955][T11187] ? lockdep_init_map_type+0x5c/0x250 [ 488.338999][T11187] ? mutex_init_lockep+0x110/0x150 [ 488.339053][T11187] copy_net_ns+0x46f/0x7c0 [ 488.339101][T11187] create_new_namespaces+0x3ea/0xac0 [ 488.339147][T11187] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 488.339190][T11187] ksys_unshare+0x455/0xab0 [ 488.339236][T11187] ? __pfx_ksys_unshare+0x10/0x10 [ 488.339283][T11187] ? xfd_validate_state+0x129/0x190 [ 488.339324][T11187] __x64_sys_unshare+0x31/0x40 [ 488.339424][T11187] do_syscall_64+0xc9/0xf80 [ 488.339458][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.339489][T11187] RIP: 0033:0x7f2cd4f9bf79 [ 488.339514][T11187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.339542][T11187] RSP: 002b:00007f2cd5ec9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 488.339574][T11187] RAX: ffffffffffffffda RBX: 00007f2cd5215fa0 RCX: 00007f2cd4f9bf79 [ 488.339592][T11187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 488.339608][T11187] RBP: 00007f2cd50327e0 R08: 0000000000000000 R09: 0000000000000000 [ 488.339625][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.339645][T11187] R13: 00007f2cd5216038 R14: 00007f2cd5215fa0 R15: 00007ffc6953f078 [ 488.339683][T11187] [ 491.667379][T11226] netlink: 342 bytes leftover after parsing attributes in process `syz.0.921'. [ 492.066285][T11226] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 492.244225][T11226] EXT4-fs (sda1): This should not happen!! Data will be lost [ 492.244225][T11226] [ 492.651272][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 924 with max blocks 17 with error 117 [ 492.699364][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 492.699364][ T12] [ 492.752957][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 925 with max blocks 2 with error 117 [ 492.777484][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 492.777484][ T12] [ 492.809467][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 492.829487][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 492.829487][ T12] [ 492.840683][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 968 with max blocks 27 with error 117 [ 492.996991][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 492.996991][ T12] [ 493.064050][T11241] input: jJǸ-9%vJ86 as /devices/virtual/input/input8 [ 494.023624][T11260] FAULT_INJECTION: forcing a failure. [ 494.023624][T11260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.091539][T11266] base or size exceeds the MTRR width [ 494.104229][T11260] CPU: 0 UID: 0 PID: 11260 Comm: syz.1.926 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.104271][T11260] Tainted: [L]=SOFTLOCKUP [ 494.104279][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 494.104295][T11260] Call Trace: [ 494.104304][T11260] [ 494.104314][T11260] dump_stack_lvl+0x100/0x190 [ 494.104355][T11260] should_fail_ex.cold+0x5/0xa [ 494.104400][T11260] strncpy_from_user+0x3b/0x2d0 [ 494.104436][T11260] do_getname+0x271/0x390 [ 494.104481][T11260] __x64_sys_symlink+0x57/0xb0 [ 494.104518][T11260] do_syscall_64+0xc9/0xf80 [ 494.104552][T11260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.104583][T11260] RIP: 0033:0x7f2cd4f9bf79 [ 494.104606][T11260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.104634][T11260] RSP: 002b:00007f2cd5ec9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 494.104660][T11260] RAX: ffffffffffffffda RBX: 00007f2cd5215fa0 RCX: 00007f2cd4f9bf79 [ 494.104679][T11260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 494.104694][T11260] RBP: 00007f2cd50327e0 R08: 0000000000000000 R09: 0000000000000000 [ 494.104708][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.104731][T11260] R13: 00007f2cd5216038 R14: 00007f2cd5215fa0 R15: 00007ffc6953f078 [ 494.104770][T11260] [ 494.600473][T11273] netlink: 342 bytes leftover after parsing attributes in process `syz.0.931'. [ 494.820874][T11259] FAULT_INJECTION: forcing a failure. [ 494.820874][T11259] name failslab, interval 1, probability 0, space 0, times 0 [ 494.835046][T11280] netlink: 342 bytes leftover after parsing attributes in process `syz.2.933'. [ 494.932267][T11259] CPU: 1 UID: 0 PID: 11259 Comm: syz.3.925 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.932294][T11259] Tainted: [L]=SOFTLOCKUP [ 494.932300][T11259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 494.932310][T11259] Call Trace: [ 494.932315][T11259] [ 494.932331][T11259] dump_stack_lvl+0x100/0x190 [ 494.932357][T11259] should_fail_ex.cold+0x5/0xa [ 494.932383][T11259] should_failslab+0xc2/0x120 [ 494.932405][T11259] kmem_cache_alloc_noprof+0x83/0x780 [ 494.932424][T11259] ? __pfx_map_id_range_down+0x10/0x10 [ 494.932440][T11259] ? security_inode_alloc+0x3b/0x2c0 [ 494.932459][T11259] ? security_inode_alloc+0x3b/0x2c0 [ 494.932487][T11259] security_inode_alloc+0x3b/0x2c0 [ 494.932517][T11259] inode_init_always_gfp+0xced/0x1040 [ 494.932557][T11259] alloc_inode+0x8e/0x250 [ 494.932605][T11259] path_from_stashed+0x25b/0x750 [ 494.932626][T11259] ? do_raw_spin_unlock+0x145/0x1e0 [ 494.932645][T11259] ns_get_path+0x60/0x80 [ 494.932664][T11259] proc_ns_get_link+0x121/0x230 [ 494.932686][T11259] ? __pfx_proc_ns_get_link+0x10/0x10 [ 494.932709][T11259] ? atime_needs_update+0x8b/0x6b0 [ 494.932724][T11259] pick_link+0xd17/0x13c0 [ 494.932740][T11259] ? __pfx_proc_ns_get_link+0x10/0x10 [ 494.932764][T11259] step_into_slowpath+0x9ba/0xf90 [ 494.932783][T11259] ? __pfx_step_into_slowpath+0x10/0x10 [ 494.932798][T11259] ? find_held_lock+0x2b/0x80 [ 494.932820][T11259] path_openat+0xf95/0x31a0 [ 494.932845][T11259] ? __pfx_path_openat+0x10/0x10 [ 494.932876][T11259] do_file_open+0x20e/0x430 [ 494.932897][T11259] ? __pfx_do_file_open+0x10/0x10 [ 494.932928][T11259] ? _raw_spin_unlock+0x28/0x50 [ 494.932951][T11259] ? alloc_fd+0x476/0x790 [ 494.932974][T11259] do_sys_openat2+0x10d/0x1e0 [ 494.932997][T11259] ? __pfx_do_sys_openat2+0x10/0x10 [ 494.933022][T11259] ? __fget_files+0x21f/0x3d0 [ 494.933043][T11259] __x64_sys_openat+0x12d/0x210 [ 494.933058][T11259] ? __pfx___x64_sys_openat+0x10/0x10 [ 494.933077][T11259] ? xfd_validate_state+0x129/0x190 [ 494.933115][T11259] do_syscall_64+0xc9/0xf80 [ 494.933145][T11259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.933174][T11259] RIP: 0033:0x7f99c1b5c84e [ 494.933194][T11259] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 494.933221][T11259] RSP: 002b:00007f99bfdf5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 494.933250][T11259] RAX: ffffffffffffffda RBX: 00007f99bfdf66c0 RCX: 00007f99c1b5c84e [ 494.933268][T11259] RDX: 0000000000000002 RSI: 00007f99bfdf5f90 RDI: ffffffffffffff9c [ 494.933286][T11259] RBP: 00007f99c1c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 494.933304][T11259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.933339][T11259] R13: 00007f99c1e16038 R14: 00007f99c1e15fa0 R15: 00007fffa76ae948 [ 494.933377][T11259] [ 497.891512][ T3546] EXT4-fs: 20 callbacks suppressed [ 497.891526][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 498.008805][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 498.008805][ T3546] [ 498.114582][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 968 with max blocks 27 with error 117 [ 498.184268][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 498.184268][ T3546] [ 498.227341][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 968 with max blocks 26 with error 117 [ 498.268369][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 498.268369][ T3546] [ 498.334223][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 972 with max blocks 22 with error 117 [ 498.338511][T11326] zswap: compressor not available [ 498.558424][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 498.558424][ T3546] [ 498.597776][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 927 with max blocks 67 with error 117 [ 498.624176][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 498.624176][ T3546] [ 499.296612][T11344] netlink: 342 bytes leftover after parsing attributes in process `syz.2.943'. [ 500.143720][T11336] Process accounting paused [ 501.315709][T11379] FAULT_INJECTION: forcing a failure. [ 501.315709][T11379] name failslab, interval 1, probability 0, space 0, times 0 [ 501.354214][T11379] CPU: 0 UID: 0 PID: 11379 Comm: syz.3.948 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.354242][T11379] Tainted: [L]=SOFTLOCKUP [ 501.354247][T11379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 501.354257][T11379] Call Trace: [ 501.354263][T11379] [ 501.354269][T11379] dump_stack_lvl+0x100/0x190 [ 501.354295][T11379] should_fail_ex.cold+0x5/0xa [ 501.354321][T11379] should_failslab+0xc2/0x120 [ 501.354342][T11379] ? lsm_blob_alloc+0x68/0x90 [ 501.354366][T11379] __kmalloc_noprof+0xf6/0x9c0 [ 501.354398][T11379] ? lsm_blob_alloc+0x68/0x90 [ 501.354433][T11379] lsm_blob_alloc+0x68/0x90 [ 501.354470][T11379] security_sb_alloc+0x25/0x240 [ 501.354495][T11379] alloc_super+0x24c/0xd20 [ 501.354528][T11379] ? __pfx_mqueue_fill_super+0x10/0x10 [ 501.354567][T11379] sget_fc+0x117/0xc70 [ 501.354583][T11379] ? __pfx_set_anon_super_fc+0x10/0x10 [ 501.354599][T11379] ? __pfx_mqueue_fill_super+0x10/0x10 [ 501.354621][T11379] get_tree_nodev+0x28/0x190 [ 501.354638][T11379] mqueue_get_tree+0xf1/0x130 [ 501.354661][T11379] vfs_get_tree+0x92/0x320 [ 501.354675][T11379] fc_mount_longterm+0x1a/0x270 [ 501.354692][T11379] mq_init_ns+0x482/0x820 [ 501.354709][T11379] copy_ipcs+0x3dd/0x7e0 [ 501.354727][T11379] create_new_namespaces+0x20a/0xac0 [ 501.354746][T11379] ? security_capable+0x80/0x260 [ 501.354762][T11379] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 501.354782][T11379] ksys_unshare+0x455/0xab0 [ 501.354806][T11379] ? __pfx_ksys_unshare+0x10/0x10 [ 501.354828][T11379] ? xfd_validate_state+0x129/0x190 [ 501.354849][T11379] __x64_sys_unshare+0x31/0x40 [ 501.354871][T11379] do_syscall_64+0xc9/0xf80 [ 501.354889][T11379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.354905][T11379] RIP: 0033:0x7f99c1b9bf79 [ 501.354927][T11379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.354942][T11379] RSP: 002b:00007f99bfdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 501.354957][T11379] RAX: ffffffffffffffda RBX: 00007f99c1e16090 RCX: 00007f99c1b9bf79 [ 501.354967][T11379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 501.354977][T11379] RBP: 00007f99c1c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 501.354986][T11379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 501.354995][T11379] R13: 00007f99c1e16128 R14: 00007f99c1e16090 R15: 00007fffa76ae948 [ 501.355015][T11379] [ 502.420943][ T30] audit: type=1326 audit(1770726548.559:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11384 comm="syz.0.950" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc0979bf79 code=0x0 [ 503.654269][T11377] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 503.894577][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 504.060181][T11377] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 504.066361][T11377] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 504.073512][T11377] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 505.284557][ T48] EXT4-fs: 38 callbacks suppressed [ 505.284573][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 925 with max blocks 69 with error 117 [ 505.374381][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 505.374381][ T48] [ 505.450563][T11432] FAULT_INJECTION: forcing a failure. [ 505.450563][T11432] name fail_futex, interval 1, probability 0, space 0, times 0 [ 505.468329][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 505.534163][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 505.534163][ T48] [ 505.576312][T11432] CPU: 1 UID: 0 PID: 11432 Comm: syz.3.956 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.576354][T11432] Tainted: [L]=SOFTLOCKUP [ 505.576363][T11432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 505.576379][T11432] Call Trace: [ 505.576388][T11432] [ 505.576398][T11432] dump_stack_lvl+0x100/0x190 [ 505.576438][T11432] should_fail_ex.cold+0x5/0xa [ 505.576481][T11432] get_futex_key+0x1d2/0x1620 [ 505.576523][T11432] ? __pfx_get_futex_key+0x10/0x10 [ 505.576579][T11432] futex_wake+0xea/0x530 [ 505.576605][T11432] ? __pfx_futex_wake+0x10/0x10 [ 505.576636][T11432] ? __lock_acquire+0x4a5/0x2630 [ 505.576686][T11432] do_futex+0x32b/0x350 [ 505.576721][T11432] ? __pfx_do_futex+0x10/0x10 [ 505.576765][T11432] ? find_held_lock+0x2b/0x80 [ 505.576796][T11432] __x64_sys_futex+0x34f/0x4d0 [ 505.576836][T11432] ? __pfx___x64_sys_futex+0x10/0x10 [ 505.576873][T11432] ? safesetid_task_fix_setuid+0x64/0x1e0 [ 505.576922][T11432] do_syscall_64+0xc9/0xf80 [ 505.576952][T11432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.576979][T11432] RIP: 0033:0x7f99c1b9bf79 [ 505.577001][T11432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.577027][T11432] RSP: 002b:00007f99bfdd50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 505.577053][T11432] RAX: ffffffffffffffda RBX: 00007f99c1e16098 RCX: 00007f99c1b9bf79 [ 505.577070][T11432] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f99c1e1609c [ 505.577087][T11432] RBP: 00007f99c1e16090 R08: 0000000000000000 R09: 0000000000000000 [ 505.577102][T11432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.577118][T11432] R13: 00007f99c1e16128 R14: 00007fffa76ae860 R15: 00007fffa76ae948 [ 505.577153][T11432] [ 505.704423][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 968 with max blocks 27 with error 117 [ 505.826743][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 505.985135][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 505.985135][ T48] [ 506.005880][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 970 with max blocks 1 with error 117 [ 506.021266][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 506.021266][ T48] [ 506.045062][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 968 with max blocks 26 with error 117 [ 506.064279][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 506.064279][ T48] [ 506.134321][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 506.135259][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 506.437254][T11441] nfs: Unknown parameter 'nl802154' [ 506.697300][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.703663][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.712482][T11466] netlink: 342 bytes leftover after parsing attributes in process `syz.3.964'. [ 509.166507][T11464] FAULT_INJECTION: forcing a failure. [ 509.166507][T11464] name failslab, interval 1, probability 0, space 0, times 0 [ 509.198632][T11464] CPU: 1 UID: 0 PID: 11464 Comm: syz.1.962 Tainted: G L syzkaller #0 PREEMPT(full) [ 509.198683][T11464] Tainted: [L]=SOFTLOCKUP [ 509.198693][T11464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 509.198711][T11464] Call Trace: [ 509.198720][T11464] [ 509.198732][T11464] dump_stack_lvl+0x100/0x190 [ 509.198777][T11464] should_fail_ex.cold+0x5/0xa [ 509.198826][T11464] should_failslab+0xc2/0x120 [ 509.198867][T11464] ? memcg_list_lru_alloc+0x4ec/0x740 [ 509.198902][T11464] __kmalloc_noprof+0xf6/0x9c0 [ 509.198943][T11464] ? memcg_list_lru_alloc+0x4ec/0x740 [ 509.198978][T11464] memcg_list_lru_alloc+0x4ec/0x740 [ 509.199032][T11464] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 509.199069][T11464] ? rcu_read_unlock+0x17/0x60 [ 509.199114][T11464] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 509.199150][T11464] __memcg_slab_post_alloc_hook+0x12e/0x880 [ 509.199198][T11464] ? kasan_save_track+0x14/0x30 [ 509.199238][T11464] kmem_cache_alloc_lru_noprof+0x606/0x7d0 [ 509.199280][T11464] ? find_held_lock+0x2b/0x80 [ 509.199311][T11464] ? alloc_inode+0x183/0x250 [ 509.199342][T11464] ? alloc_inode+0x183/0x250 [ 509.199366][T11464] alloc_inode+0x183/0x250 [ 509.199392][T11464] path_from_stashed+0x25b/0x750 [ 509.199436][T11464] ? do_raw_spin_unlock+0x145/0x1e0 [ 509.199473][T11464] ns_get_path+0x60/0x80 [ 509.199510][T11464] proc_ns_get_link+0x121/0x230 [ 509.199553][T11464] ? __pfx_proc_ns_get_link+0x10/0x10 [ 509.199600][T11464] ? atime_needs_update+0x8b/0x6b0 [ 509.199632][T11464] pick_link+0xd17/0x13c0 [ 509.199662][T11464] ? __pfx_proc_ns_get_link+0x10/0x10 [ 509.199708][T11464] step_into_slowpath+0x9ba/0xf90 [ 509.199747][T11464] ? __pfx_step_into_slowpath+0x10/0x10 [ 509.199777][T11464] ? find_held_lock+0x2b/0x80 [ 509.199822][T11464] path_openat+0xf95/0x31a0 [ 509.199872][T11464] ? __pfx_path_openat+0x10/0x10 [ 509.199922][T11464] do_file_open+0x20e/0x430 [ 509.199961][T11464] ? __pfx_do_file_open+0x10/0x10 [ 509.200023][T11464] ? _raw_spin_unlock+0x28/0x50 [ 509.200061][T11464] ? alloc_fd+0x476/0x790 [ 509.200100][T11464] do_sys_openat2+0x10d/0x1e0 [ 509.200138][T11464] ? __pfx_do_sys_openat2+0x10/0x10 [ 509.200180][T11464] ? __fget_files+0x21f/0x3d0 [ 509.200217][T11464] __x64_sys_openat+0x12d/0x210 [ 509.200243][T11464] ? __pfx___x64_sys_openat+0x10/0x10 [ 509.200267][T11464] ? xfd_validate_state+0x129/0x190 [ 509.200309][T11464] do_syscall_64+0xc9/0xf80 [ 509.200341][T11464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.200370][T11464] RIP: 0033:0x7f2cd4f5c84e [ 509.200392][T11464] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 509.200427][T11464] RSP: 002b:00007f2cd5ec8ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 509.200454][T11464] RAX: ffffffffffffffda RBX: 00007f2cd5ec96c0 RCX: 00007f2cd4f5c84e [ 509.200474][T11464] RDX: 0000000000000002 RSI: 00007f2cd5ec8f90 RDI: ffffffffffffff9c [ 509.200493][T11464] RBP: 00007f2cd50327e0 R08: 0000000000000000 R09: 0000000000000000 [ 509.200511][T11464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.200528][T11464] R13: 00007f2cd5216038 R14: 00007f2cd5215fa0 R15: 00007ffc6953f078 [ 509.200565][T11464] [ 511.198469][ T12] EXT4-fs: 10 callbacks suppressed [ 511.198483][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 511.300451][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 511.300451][ T12] [ 511.341054][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 968 with max blocks 27 with error 117 [ 511.424593][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 511.424593][ T12] [ 511.485151][T11505] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1059 with max blocks 3 with error 117 [ 511.510747][T11505] EXT4-fs (sda1): This should not happen!! Data will be lost [ 511.510747][T11505] [ 511.525542][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 969 with max blocks 25 with error 117 [ 511.579196][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 511.579196][ T12] [ 511.602490][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 925 with max blocks 69 with error 117 [ 511.617571][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 511.617571][ T12] [ 511.744404][T11505] [U] ^\ [ 516.666691][T11565] Process accounting resumed [ 517.393169][T11586] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 517.443679][T11586] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 517.457310][T11586] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 517.618729][T11586] page_type: f5(slab) [ 517.665939][T11586] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 517.728819][T11586] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 517.776181][T11586] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 517.806069][T11586] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 518.015870][T11586] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 518.188987][T11586] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 518.219788][T11586] page dumped because: unmovable page [ 518.238433][T11586] page_owner tracks the page as allocated [ 518.274222][T11586] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevadm), ts 36315578697, free_ts 29666744734 [ 518.346479][T11586] post_alloc_hook+0x1e1/0x250 [ 518.366511][T11586] get_page_from_freelist+0xe3d/0x2e10 [ 518.386643][ T48] EXT4-fs: 38 callbacks suppressed [ 518.386664][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 965 with max blocks 29 with error 117 [ 518.415201][T11586] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 518.421179][T11586] alloc_pages_mpol+0x1fb/0x550 [ 518.494477][T11586] new_slab+0x2c4/0x440 [ 518.498934][T11586] ___slab_alloc+0xda3/0x1ca0 [ 518.512691][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 518.512691][ T48] [ 518.530875][T11586] __slab_alloc.isra.0+0x63/0x110 [ 518.544400][T11586] kmem_cache_alloc_lru_noprof+0x507/0x7d0 [ 518.581277][T11586] alloc_inode+0x183/0x250 [ 518.586170][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 920 with max blocks 18 with error 117 [ 518.599058][T11586] iget_locked+0x1d9/0x6d0 [ 518.609256][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 518.609256][ T48] [ 518.626096][T11586] kernfs_get_inode+0x46/0x470 [ 518.637320][T11586] kernfs_iop_lookup+0x1a7/0x2d0 [ 518.665533][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 518.678253][T11586] __lookup_slow+0x251/0x460 [ 518.682904][T11586] lookup_slow+0x50/0x70 [ 518.724889][T11586] path_lookupat+0x5e8/0xc40 [ 518.729552][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 518.729552][ T48] [ 518.756370][T11586] filename_lookup+0x202/0x590 [ 518.764643][T11586] page last free pid 1 tgid 1 stack trace: [ 518.770613][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1443 with max blocks 5 with error 117 [ 518.795675][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 518.795675][ T48] [ 518.824581][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 924 with max blocks 70 with error 117 [ 518.837359][T11586] __free_frozen_pages+0x822/0x1130 [ 518.847277][T11586] free_contig_range+0x1a3/0x520 [ 518.852271][T11586] destroy_args+0xa8/0x7a0 [ 518.875909][T11586] debug_vm_pgtable+0x1b66/0x34b0 [ 518.881005][T11586] do_one_initcall+0x11d/0x690 [ 518.896601][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 518.896601][ T48] [ 518.918279][T11586] kernel_init_freeable+0x6e5/0x790 [ 518.924384][T11586] kernel_init+0x1f/0x1e0 [ 518.954233][T11586] ret_from_fork+0x754/0xaf0 [ 518.958901][T11586] ret_from_fork_asm+0x1a/0x30 [ 521.552203][T11652] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 521.818060][T11652] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 522.018792][T11652] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 522.212539][T11652] page_type: f5(slab) [ 522.221726][T11652] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 522.557310][T11652] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 522.688628][T11652] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 522.734110][T11652] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 522.742943][T11652] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 522.788951][T11652] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 522.881435][T11652] page dumped because: unmovable page [ 522.944347][T11652] page_owner tracks the page as allocated [ 522.964146][T11652] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevadm), ts 36315578697, free_ts 29666744734 [ 523.031267][T11652] post_alloc_hook+0x1e1/0x250 [ 523.059290][T11652] get_page_from_freelist+0xe3d/0x2e10 [ 523.087210][T11652] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 523.095176][T11652] alloc_pages_mpol+0x1fb/0x550 [ 523.103195][T11652] new_slab+0x2c4/0x440 [ 523.117436][T11652] ___slab_alloc+0xda3/0x1ca0 [ 523.164197][T11652] __slab_alloc.isra.0+0x63/0x110 [ 523.199185][T11652] kmem_cache_alloc_lru_noprof+0x507/0x7d0 [ 523.247245][T11652] alloc_inode+0x183/0x250 [ 523.282276][T11652] iget_locked+0x1d9/0x6d0 [ 523.328375][T11652] kernfs_get_inode+0x46/0x470 [ 523.380722][T11652] kernfs_iop_lookup+0x1a7/0x2d0 [ 523.427577][T11652] __lookup_slow+0x251/0x460 [ 523.455941][T11652] lookup_slow+0x50/0x70 [ 523.513415][T11652] path_lookupat+0x5e8/0xc40 [ 523.570092][T11652] filename_lookup+0x202/0x590 [ 523.774189][T11652] page last free pid 1 tgid 1 stack trace: [ 523.780019][T11652] __free_frozen_pages+0x822/0x1130 [ 523.835817][T11652] free_contig_range+0x1a3/0x520 [ 523.840798][T11652] destroy_args+0xa8/0x7a0 [ 523.894788][T11652] debug_vm_pgtable+0x1b66/0x34b0 [ 523.927577][T11652] do_one_initcall+0x11d/0x690 [ 523.932394][T11652] kernel_init_freeable+0x6e5/0x790 [ 524.003603][T11652] kernel_init+0x1f/0x1e0 [ 524.032782][T11652] ret_from_fork+0x754/0xaf0 [ 524.052196][T11652] ret_from_fork_asm+0x1a/0x30 [ 525.681466][ T30] audit: type=1326 audit(1770726571.809:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.1.1006" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2cd4f9bf79 code=0x0 [ 525.996279][T11721] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1008'. [ 526.125330][T11724] EXT4-fs: 22 callbacks suppressed [ 526.125360][T11724] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 526.125397][T11724] EXT4-fs (sda1): This should not happen!! Data will be lost [ 526.125397][T11724] [ 526.985191][T11738] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1011'. [ 528.529304][T11712] Process accounting resumed [ 529.261416][T11766] FAULT_INJECTION: forcing a failure. [ 529.261416][T11766] name failslab, interval 1, probability 0, space 0, times 0 [ 529.311437][T11763] FAULT_INJECTION: forcing a failure. [ 529.311437][T11763] name failslab, interval 1, probability 0, space 0, times 0 [ 529.334253][T11766] CPU: 1 UID: 0 PID: 11766 Comm: syz.3.1016 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.334300][T11766] Tainted: [L]=SOFTLOCKUP [ 529.334310][T11766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 529.334327][T11766] Call Trace: [ 529.334335][T11766] [ 529.334343][T11766] dump_stack_lvl+0x100/0x190 [ 529.334383][T11766] should_fail_ex.cold+0x5/0xa [ 529.334426][T11766] should_failslab+0xc2/0x120 [ 529.334470][T11766] __kmalloc_cache_node_noprof+0x83/0x840 [ 529.334509][T11766] ? __get_vm_area_node+0x101/0x330 [ 529.334554][T11766] ? __get_vm_area_node+0x101/0x330 [ 529.334593][T11766] __get_vm_area_node+0x101/0x330 [ 529.334638][T11766] __vmalloc_node_range_noprof+0x213/0x1530 [ 529.334664][T11766] ? n_tty_open+0x1a/0x170 [ 529.334705][T11766] ? look_up_lock_class+0x64/0x120 [ 529.334736][T11766] ? n_tty_open+0x1a/0x170 [ 529.334783][T11766] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 529.334810][T11766] ? __ldsem_down_write_nested+0xfd/0x830 [ 529.334850][T11766] ? __ldsem_down_write_nested+0x10e/0x830 [ 529.334889][T11766] ? is_console_locked+0x9/0x20 [ 529.334932][T11766] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 529.334987][T11766] ? n_tty_open+0x1a/0x170 [ 529.335025][T11766] __vmalloc_node_noprof+0xad/0xf0 [ 529.335051][T11766] ? n_tty_open+0x1a/0x170 [ 529.335090][T11766] ? __pfx_n_tty_open+0x10/0x10 [ 529.335129][T11766] n_tty_open+0x1a/0x170 [ 529.335169][T11766] tty_ldisc_open+0xa2/0x120 [ 529.335199][T11766] tty_ldisc_setup+0x40/0xf0 [ 529.335231][T11766] tty_init_dev.part.0+0x1b5/0x470 [ 529.335272][T11766] tty_open+0xa63/0xfa0 [ 529.335312][T11766] ? __pfx_tty_open+0x10/0x10 [ 529.335347][T11766] ? chrdev_open+0x10b/0x6a0 [ 529.335377][T11766] ? chrdev_open+0x10b/0x6a0 [ 529.335413][T11766] ? __pfx_tty_open+0x10/0x10 [ 529.335448][T11766] chrdev_open+0x234/0x6a0 [ 529.335480][T11766] ? __pfx_apparmor_file_open+0x10/0x10 [ 529.335507][T11766] ? __pfx_chrdev_open+0x10/0x10 [ 529.335542][T11766] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 529.335582][T11766] do_dentry_open+0x6d8/0x1660 [ 529.335616][T11766] ? __pfx_chrdev_open+0x10/0x10 [ 529.335656][T11766] vfs_open+0x82/0x3f0 [ 529.335700][T11766] path_openat+0x208c/0x31a0 [ 529.335743][T11766] ? __pfx_path_openat+0x10/0x10 [ 529.335788][T11766] do_file_open+0x20e/0x430 [ 529.335824][T11766] ? __pfx_do_file_open+0x10/0x10 [ 529.335880][T11766] ? _raw_spin_unlock+0x28/0x50 [ 529.335919][T11766] ? alloc_fd+0x476/0x790 [ 529.335967][T11766] do_sys_openat2+0x10d/0x1e0 [ 529.336008][T11766] ? __pfx_do_sys_openat2+0x10/0x10 [ 529.336061][T11766] __x64_sys_openat+0x12d/0x210 [ 529.336086][T11766] ? __pfx___x64_sys_openat+0x10/0x10 [ 529.336109][T11766] ? xfd_validate_state+0x129/0x190 [ 529.336149][T11766] do_syscall_64+0xc9/0xf80 [ 529.336179][T11766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.336206][T11766] RIP: 0033:0x7f99c1b9bf79 [ 529.336228][T11766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.336254][T11766] RSP: 002b:00007f99bfdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 529.336279][T11766] RAX: ffffffffffffffda RBX: 00007f99c1e16090 RCX: 00007f99c1b9bf79 [ 529.336297][T11766] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 529.336314][T11766] RBP: 00007f99c1c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 529.336330][T11766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.336345][T11766] R13: 00007f99c1e16128 R14: 00007f99c1e16090 R15: 00007fffa76ae948 [ 529.336382][T11766] [ 529.336625][T11766] syz.3.1016: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 529.694212][T11763] CPU: 0 UID: 0 PID: 11763 Comm: syz.1.1024 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.694258][T11763] Tainted: [L]=SOFTLOCKUP [ 529.694268][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 529.694285][T11763] Call Trace: [ 529.694294][T11763] [ 529.694305][T11763] dump_stack_lvl+0x100/0x190 [ 529.694345][T11763] should_fail_ex.cold+0x5/0xa [ 529.694390][T11763] should_failslab+0xc2/0x120 [ 529.694428][T11763] __kmalloc_cache_noprof+0x80/0x810 [ 529.694460][T11763] ? zs_create_pool+0x4fe/0xbc0 [ 529.694507][T11763] ? zs_create_pool+0x4fe/0xbc0 [ 529.694545][T11763] zs_create_pool+0x4fe/0xbc0 [ 529.694590][T11763] ? __pfx_zs_create_pool+0x10/0x10 [ 529.694637][T11763] ? disksize_store+0x117/0x510 [ 529.694670][T11763] ? __vmalloc_node_noprof+0xad/0xf0 [ 529.694696][T11763] ? disksize_store+0x117/0x510 [ 529.694737][T11763] ? __pfx_disksize_store+0x10/0x10 [ 529.694777][T11763] disksize_store+0x175/0x510 [ 529.694818][T11763] ? sysfs_file_kobj+0xe4/0x290 [ 529.694856][T11763] ? __pfx_disksize_store+0x10/0x10 [ 529.694896][T11763] dev_attr_store+0x58/0x80 [ 529.694927][T11763] ? __pfx_dev_attr_store+0x10/0x10 [ 529.694961][T11763] sysfs_kf_write+0xf2/0x150 [ 529.695000][T11763] kernfs_fop_write_iter+0x3e0/0x5f0 [ 529.695029][T11763] ? __pfx_sysfs_kf_write+0x10/0x10 [ 529.695067][T11763] vfs_write+0x6ac/0x1070 [ 529.695102][T11763] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 529.695135][T11763] ? __pfx_vfs_write+0x10/0x10 [ 529.695165][T11763] ? find_held_lock+0x2b/0x80 [ 529.695229][T11763] ksys_write+0x12a/0x250 [ 529.695256][T11763] ? __pfx_ksys_write+0x10/0x10 [ 529.695294][T11763] do_syscall_64+0xc9/0xf80 [ 529.695327][T11763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.695357][T11763] RIP: 0033:0x7f2cd4f9bf79 [ 529.695380][T11763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.695407][T11763] RSP: 002b:00007f2cd5ec9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 529.695434][T11763] RAX: ffffffffffffffda RBX: 00007f2cd5215fa0 RCX: 00007f2cd4f9bf79 [ 529.695452][T11763] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 529.695469][T11763] RBP: 00007f2cd50327e0 R08: 0000000000000000 R09: 0000000000000000 [ 529.695486][T11763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.695502][T11763] R13: 00007f2cd5216038 R14: 00007f2cd5215fa0 R15: 00007ffc6953f078 [ 529.695538][T11763] [ 529.981682][T11766] ,cpuset=/,mems_allowed=0-1 [ 529.986853][T11766] CPU: 1 UID: 0 PID: 11766 Comm: syz.3.1016 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.986901][T11766] Tainted: [L]=SOFTLOCKUP [ 529.986911][T11766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 529.986935][T11766] Call Trace: [ 529.986944][T11766] [ 529.986955][T11766] dump_stack_lvl+0x100/0x190 [ 529.986998][T11766] warn_alloc.cold+0x95/0x1c1 [ 529.987042][T11766] ? __pfx_warn_alloc+0x10/0x10 [ 529.987074][T11766] ? trace_kmalloc+0x83/0xb0 [ 529.987111][T11766] ? __kmalloc_cache_node_noprof+0x343/0x840 [ 529.987150][T11766] ? __get_vm_area_node+0x101/0x330 [ 529.987198][T11766] ? __kasan_kmalloc+0x8a/0xb0 [ 529.987236][T11766] ? __get_vm_area_node+0x208/0x330 [ 529.987286][T11766] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 529.987319][T11766] ? look_up_lock_class+0x64/0x120 [ 529.987356][T11766] ? n_tty_open+0x1a/0x170 [ 529.987411][T11766] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 529.987444][T11766] ? __ldsem_down_write_nested+0xfd/0x830 [ 529.987489][T11766] ? __ldsem_down_write_nested+0x10e/0x830 [ 529.987534][T11766] ? is_console_locked+0x9/0x20 [ 529.987579][T11766] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 529.987630][T11766] ? n_tty_open+0x1a/0x170 [ 529.987670][T11766] __vmalloc_node_noprof+0xad/0xf0 [ 529.987712][T11766] ? n_tty_open+0x1a/0x170 [ 529.987756][T11766] ? __pfx_n_tty_open+0x10/0x10 [ 529.987797][T11766] n_tty_open+0x1a/0x170 [ 529.987838][T11766] tty_ldisc_open+0xa2/0x120 [ 529.987869][T11766] tty_ldisc_setup+0x40/0xf0 [ 529.987905][T11766] tty_init_dev.part.0+0x1b5/0x470 [ 529.987955][T11766] tty_open+0xa63/0xfa0 [ 529.987999][T11766] ? __pfx_tty_open+0x10/0x10 [ 529.988036][T11766] ? chrdev_open+0x10b/0x6a0 [ 529.988072][T11766] ? chrdev_open+0x10b/0x6a0 [ 529.988113][T11766] ? __pfx_tty_open+0x10/0x10 [ 529.988151][T11766] chrdev_open+0x234/0x6a0 [ 529.988186][T11766] ? __pfx_apparmor_file_open+0x10/0x10 [ 529.988217][T11766] ? __pfx_chrdev_open+0x10/0x10 [ 529.988252][T11766] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 529.988297][T11766] do_dentry_open+0x6d8/0x1660 [ 529.988330][T11766] ? __pfx_chrdev_open+0x10/0x10 [ 529.988374][T11766] vfs_open+0x82/0x3f0 [ 529.988422][T11766] path_openat+0x208c/0x31a0 [ 529.988472][T11766] ? __pfx_path_openat+0x10/0x10 [ 529.988524][T11766] do_file_open+0x20e/0x430 [ 529.988564][T11766] ? __pfx_do_file_open+0x10/0x10 [ 529.988628][T11766] ? _raw_spin_unlock+0x28/0x50 [ 529.988671][T11766] ? alloc_fd+0x476/0x790 [ 529.988717][T11766] do_sys_openat2+0x10d/0x1e0 [ 529.988763][T11766] ? __pfx_do_sys_openat2+0x10/0x10 [ 529.988823][T11766] __x64_sys_openat+0x12d/0x210 [ 529.988851][T11766] ? __pfx___x64_sys_openat+0x10/0x10 [ 529.988898][T11766] ? xfd_validate_state+0x129/0x190 [ 529.988947][T11766] do_syscall_64+0xc9/0xf80 [ 529.988982][T11766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.989012][T11766] RIP: 0033:0x7f99c1b9bf79 [ 529.989035][T11766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.989062][T11766] RSP: 002b:00007f99bfdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 529.989090][T11766] RAX: ffffffffffffffda RBX: 00007f99c1e16090 RCX: 00007f99c1b9bf79 [ 529.989110][T11766] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 529.989136][T11766] RBP: 00007f99c1c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 529.989153][T11766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.989170][T11766] R13: 00007f99c1e16128 R14: 00007f99c1e16090 R15: 00007fffa76ae948 [ 529.989211][T11766] [ 529.989222][T11766] Mem-Info: [ 530.538455][T11766] active_anon:27520 inactive_anon:0 isolated_anon:0 [ 530.538455][T11766] active_file:19932 inactive_file:41947 isolated_file:0 [ 530.538455][T11766] unevictable:768 dirty:2410 writeback:192 [ 530.538455][T11766] slab_reclaimable:11658 slab_unreclaimable:92110 [ 530.538455][T11766] mapped:43788 shmem:18049 pagetables:1316 [ 530.538455][T11766] sec_pagetables:0 bounce:0 [ 530.538455][T11766] kernel_misc_reclaimable:0 [ 530.538455][T11766] free:1287001 free_pcp:14177 free_cma:0 [ 530.734246][T11766] Node 0 active_anon:104580kB inactive_anon:0kB active_file:76784kB inactive_file:167652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:169952kB dirty:8744kB writeback:0kB shmem:65060kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11312kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 530.794214][T11766] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 530.893526][T11763] Process accounting resumed [ 530.914242][T11766] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 530.965548][T11766] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 530.971398][T11766] Node 0 DMA32 free:1261348kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:91916kB inactive_anon:0kB active_file:73840kB inactive_file:167524kB unevictable:1536kB writepending:8744kB zspages:0kB present:3129332kB managed:2537276kB mlocked:0kB bounce:0kB free_pcp:53000kB local_pcp:20588kB free_cma:0kB [ 531.070377][T11766] lowmem_reserve[]: 0 0 1 1 1 [ 531.075698][T11766] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 531.108337][T11766] lowmem_reserve[]: 0 0 0 0 0 [ 531.114692][T11766] Node 1 Normal free:3900280kB boost:0kB min:55824kB low:69780kB high:83736kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 531.148106][T11766] lowmem_reserve[]: 0 0 0 0 0 [ 531.156079][T11766] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 531.174421][T11766] Node 0 DMA32: 5252*4kB (UM) 2446*8kB (UME) 2033*16kB (UME) 1648*32kB (UME) 1509*64kB (UME) 933*128kB (UME) 575*256kB (UME) 244*512kB (UME) 143*1024kB (UME) 11*2048kB (UM) 119*4096kB (M) = 1270352kB [ 531.200167][T11766] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 531.219997][T11766] Node 1 Normal: 178*4kB (UME) 46*8kB (UME) 34*16kB (UME) 225*32kB (UME) 94*64kB (UME) 29*128kB (UME) 13*256kB (UME) 7*512kB (UME) 2*1024kB (UM) 3*2048kB (UE) 944*4096kB (M) = 3900280kB [ 531.271880][T11766] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.297120][T11782] FAULT_INJECTION: forcing a failure. [ 531.297120][T11782] name failslab, interval 1, probability 0, space 0, times 0 [ 531.313562][T11782] CPU: 1 UID: 0 PID: 11782 Comm: syz.2.1018 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.313603][T11782] Tainted: [L]=SOFTLOCKUP [ 531.313609][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 531.313619][T11782] Call Trace: [ 531.313625][T11782] [ 531.313631][T11782] dump_stack_lvl+0x100/0x190 [ 531.313657][T11782] should_fail_ex.cold+0x5/0xa [ 531.313683][T11782] should_failslab+0xc2/0x120 [ 531.313703][T11782] ? get_callchain_buffers+0x123/0x380 [ 531.313718][T11782] __kmalloc_noprof+0xf6/0x9c0 [ 531.313734][T11782] ? trace_ignore_this_task+0xbc/0x100 [ 531.313756][T11782] ? get_callchain_buffers+0x123/0x380 [ 531.313779][T11782] get_callchain_buffers+0x123/0x380 [ 531.313798][T11782] stack_map_alloc+0x316/0x610 [ 531.313814][T11782] ? __pfx_stack_map_mem_usage+0x10/0x10 [ 531.313830][T11782] map_create+0x84e/0x2ba0 [ 531.313846][T11782] ? preempt_schedule_thunk+0x16/0x30 [ 531.313868][T11782] ? __pfx_map_create+0x10/0x10 [ 531.313881][T11782] ? __might_fault+0xc5/0x140 [ 531.313898][T11782] ? __might_fault+0xc5/0x140 [ 531.313921][T11782] __sys_bpf+0xcec/0x5050 [ 531.313937][T11782] ? futex_private_hash_put+0x107/0x1c0 [ 531.313958][T11782] ? __pfx___sys_bpf+0x10/0x10 [ 531.313977][T11782] ? __pfx_futex_wake+0x10/0x10 [ 531.313993][T11782] ? io_uring_setup+0xd7/0x160 [ 531.314022][T11782] ? do_futex+0x192/0x350 [ 531.314062][T11782] ? xfd_validate_state+0x129/0x190 [ 531.314095][T11782] __x64_sys_bpf+0x7b/0xc0 [ 531.314127][T11782] ? lockdep_hardirqs_on+0x78/0x100 [ 531.314153][T11782] do_syscall_64+0xc9/0xf80 [ 531.314185][T11782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.314209][T11782] RIP: 0033:0x7f25c1b9bf79 [ 531.314223][T11782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.314237][T11782] RSP: 002b:00007f25c29be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 531.314253][T11782] RAX: ffffffffffffffda RBX: 00007f25c1e16090 RCX: 00007f25c1b9bf79 [ 531.314263][T11782] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 531.314272][T11782] RBP: 00007f25c1c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 531.314281][T11782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.314290][T11782] R13: 00007f25c1e16128 R14: 00007f25c1e16090 R15: 00007ffdc00ee088 [ 531.314310][T11782] [ 531.554399][T11766] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.563747][T11766] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 531.641034][T11766] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 531.650405][T11766] 71720 total pagecache pages [ 531.655105][T11766] 0 pages in swap cache [ 531.659242][T11766] Free swap = 122952kB [ 531.663371][T11766] Total swap = 124996kB [ 531.667546][T11766] 2097051 pages RAM [ 531.671336][T11766] 0 pages HighMem/MovableOnly [ 531.676040][T11766] 430834 pages reserved [ 531.680177][T11766] 0 pages cma reserved [ 531.684441][T11766] tty tty6: ldisc open failed (-12), clearing slot 5 [ 532.115032][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 532.159795][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 532.159795][ T3546] [ 532.193750][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 921 with max blocks 13 with error 117 [ 532.211484][T11793] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 532.242516][T11793] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 532.261605][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 532.261605][ T3546] [ 532.294161][T11793] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 532.315083][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 939 with max blocks 55 with error 117 [ 532.332855][T11793] page_type: f5(slab) [ 532.343002][T11793] raw: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 532.352336][T11793] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 532.384770][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 532.384770][ T3546] [ 532.404312][T11793] head: 00fff00000000040 ffff8881404078c0 dead000000000122 0000000000000000 [ 532.413071][T11793] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 532.443735][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 969 with max blocks 25 with error 117 [ 532.467765][T11793] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 532.494582][T11793] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 532.506025][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 532.506025][ T3546] [ 532.673092][T11793] page dumped because: unmovable page [ 532.713792][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 969 with max blocks 25 with error 117 [ 532.734235][T11793] page_owner tracks the page as allocated [ 532.764231][T11793] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevadm), ts 36315578697, free_ts 29666744734 [ 532.799146][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 532.799146][ T3546] [ 532.834202][T11793] post_alloc_hook+0x1e1/0x250 [ 532.839001][T11793] get_page_from_freelist+0xe3d/0x2e10 [ 532.885044][T11793] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 532.891009][T11793] alloc_pages_mpol+0x1fb/0x550 [ 532.933997][T11793] new_slab+0x2c4/0x440 [ 532.965104][T11793] ___slab_alloc+0xda3/0x1ca0 [ 532.994238][T11793] __slab_alloc.isra.0+0x63/0x110 [ 533.004432][T11793] kmem_cache_alloc_lru_noprof+0x507/0x7d0 [ 533.025938][T11793] alloc_inode+0x183/0x250 [ 533.030608][T11793] iget_locked+0x1d9/0x6d0 [ 533.041904][T11793] kernfs_get_inode+0x46/0x470 [ 533.055920][T11793] kernfs_iop_lookup+0x1a7/0x2d0 [ 533.069483][T11793] __lookup_slow+0x251/0x460 [ 533.080668][T11793] lookup_slow+0x50/0x70 [ 533.094134][T11793] path_lookupat+0x5e8/0xc40 [ 533.112646][T11793] filename_lookup+0x202/0x590 [ 533.122099][T11793] page last free pid 1 tgid 1 stack trace: [ 533.142787][T11793] __free_frozen_pages+0x822/0x1130 [ 533.174498][T11793] free_contig_range+0x1a3/0x520 [ 533.193112][T11793] destroy_args+0xa8/0x7a0 [ 533.210201][T11793] debug_vm_pgtable+0x1b66/0x34b0 [ 533.234346][T11814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 533.248231][T11793] do_one_initcall+0x11d/0x690 [ 533.259711][T11793] kernel_init_freeable+0x6e5/0x790 [ 533.284184][T11793] kernel_init+0x1f/0x1e0 [ 533.290917][T11793] ret_from_fork+0x754/0xaf0 [ 533.308092][T11815] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1023'. [ 533.308938][T11793] ret_from_fork_asm+0x1a/0x30 [ 534.216045][T11833] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1028'. [ 538.003395][ T1163] EXT4-fs: 34 callbacks suppressed [ 538.003410][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 923 with max blocks 17 with error 117 [ 538.042937][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 538.042937][ T1163] [ 538.081538][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 538.157663][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 538.157663][ T1163] [ 538.295178][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 968 with max blocks 26 with error 117 [ 538.388312][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 538.388312][ T1163] [ 538.429101][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 939 with max blocks 55 with error 117 [ 538.534598][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 538.534598][ T1163] [ 538.549058][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'. [ 538.566246][T11888] ovs_: entered promiscuous mode [ 538.675968][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 923 with max blocks 1 with error 117 [ 538.695747][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 538.695747][ T48] [ 539.760704][T11905] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1042'. [ 540.876981][T11918] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 543.004263][ T71] EXT4-fs: 28 callbacks suppressed [ 543.004278][ T71] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 967 with max blocks 28 with error 117 [ 543.074978][ T71] EXT4-fs (sda1): This should not happen!! Data will be lost [ 543.074978][ T71] [ 543.150120][ T71] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 977 with max blocks 17 with error 117 [ 543.239454][ T71] EXT4-fs (sda1): This should not happen!! Data will be lost [ 543.239454][ T71] [ 543.296198][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 543.337012][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 543.337012][ T3546] [ 543.375059][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 969 with max blocks 4 with error 117 [ 543.423550][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 543.423550][ T3546] [ 543.475955][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1455 with max blocks 1 with error 117 [ 543.488669][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 543.488669][ T3546] [ 543.570975][T11970] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1054'. [ 544.428415][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1053'. [ 545.080793][T11981] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1053'. [ 547.602484][T12004] Process accounting resumed [ 547.867110][T12006] Process accounting paused [ 550.003025][T12060] EXT4-fs: 34 callbacks suppressed [ 550.003043][T12060] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 550.044532][T12060] EXT4-fs (sda1): This should not happen!! Data will be lost [ 550.044532][T12060] [ 550.807589][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 550.944272][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 550.944272][ T48] [ 550.964336][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 936 with max blocks 59 with error 117 [ 551.082282][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 551.082282][ T48] [ 551.149076][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 917 with max blocks 1 with error 117 [ 551.224213][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 551.224213][ T48] [ 551.261516][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 971 with max blocks 23 with error 117 [ 551.275290][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 551.275290][ T48] [ 552.501268][T12095] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1074'. [ 553.998699][T12111] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1075'. [ 554.966889][ T30] audit: type=1800 audit(4294967350.020:6): pid=12122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1077" name="lu_gp_id" dev="configfs" ino=40497 res=0 errno=0 [ 554.977877][T12122] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1077'. [ 555.003986][T12122] bridge0: port 3(team0) entered disabled state [ 555.010646][T12122] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.017896][T12122] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.291267][ T1163] EXT4-fs: 44 callbacks suppressed [ 556.291282][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 556.370531][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 556.370531][ T1163] [ 556.428288][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 967 with max blocks 28 with error 117 [ 556.428438][T12153] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1083'. [ 556.464191][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 556.464191][ T1163] [ 556.486024][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 936 with max blocks 58 with error 117 [ 556.541041][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 556.541041][ T1163] [ 556.614756][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 921 with max blocks 44 with error 117 [ 556.638262][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 556.638262][ T1163] [ 556.680760][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 970 with max blocks 24 with error 117 [ 556.756138][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 556.756138][ T1163] [ 556.894532][T12160] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1084'. [ 556.904764][T12153] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1083'. [ 556.927270][T12153] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1083'. [ 556.946799][T12153] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1083'. [ 557.977412][T12176] FAULT_INJECTION: forcing a failure. [ 557.977412][T12176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.990517][T12176] CPU: 1 UID: 0 PID: 12176 Comm: syz.1.1089 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.990544][T12176] Tainted: [L]=SOFTLOCKUP [ 557.990549][T12176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 557.990559][T12176] Call Trace: [ 557.990567][T12176] [ 557.990574][T12176] dump_stack_lvl+0x100/0x190 [ 557.990599][T12176] should_fail_ex.cold+0x5/0xa [ 557.990625][T12176] _copy_to_user+0x32/0xd0 [ 557.990646][T12176] do_pages_stat+0x559/0x7f0 [ 557.990674][T12176] ? __pfx_do_pages_stat+0x10/0x10 [ 557.990714][T12176] ? do_raw_spin_unlock+0x145/0x1e0 [ 557.990732][T12176] kernel_move_pages+0xecf/0x13f0 [ 557.990747][T12176] ? do_futex+0x192/0x350 [ 557.990769][T12176] ? __pfx_do_futex+0x10/0x10 [ 557.990790][T12176] ? __pfx_kernel_move_pages+0x10/0x10 [ 557.990807][T12176] ? __x64_sys_futex+0x34f/0x4d0 [ 557.990827][T12176] ? __x64_sys_futex+0x358/0x4d0 [ 557.990849][T12176] ? xfd_validate_state+0x129/0x190 [ 557.990863][T12176] ? __task_pid_nr_ns+0x1f5/0x500 [ 557.990887][T12176] __x64_sys_move_pages+0xe0/0x1c0 [ 557.990907][T12176] ? do_syscall_64+0x94/0xf80 [ 557.990935][T12176] ? lockdep_hardirqs_on+0x78/0x100 [ 557.990950][T12176] do_syscall_64+0xc9/0xf80 [ 557.990974][T12176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.990991][T12176] RIP: 0033:0x7f2cd4f9bf79 [ 557.991005][T12176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.991019][T12176] RSP: 002b:00007f2cd5ea8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 557.991034][T12176] RAX: ffffffffffffffda RBX: 00007f2cd5216090 RCX: 00007f2cd4f9bf79 [ 557.991045][T12176] RDX: 0000200000000180 RSI: 00000000000000a1 RDI: 0000000000000586 [ 557.991054][T12176] RBP: 00007f2cd50327e0 R08: 0000200000000200 R09: 0000000000000000 [ 557.991065][T12176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.991076][T12176] R13: 00007f2cd5216128 R14: 00007f2cd5216090 R15: 00007ffc6953f078 [ 557.991095][T12176] [ 559.182115][T12149] Process accounting paused [ 559.594903][T12195] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1091'. [ 561.294468][ T3546] EXT4-fs: 28 callbacks suppressed [ 561.294483][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 561.360205][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 561.360205][ T3546] [ 561.394022][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 969 with max blocks 26 with error 117 [ 561.498879][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 561.498879][ T3546] [ 561.600047][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 924 with max blocks 70 with error 117 [ 561.673387][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 561.673387][ T3546] [ 561.706214][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 920 with max blocks 19 with error 117 [ 561.740010][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 561.740010][ T3546] [ 561.812634][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 561.893835][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 561.893835][ T3546] [ 562.069310][T12187] Process accounting paused [ 562.307226][T12238] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1097'. [ 563.416842][T12251] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 564.807402][T12274] serio: Serial port pty6 [ 565.602069][T12290] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1104'. [ 567.020967][ T1163] EXT4-fs: 34 callbacks suppressed [ 567.020981][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 567.168499][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 567.168499][ T1163] [ 567.249397][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 972 with max blocks 23 with error 117 [ 567.284239][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 567.284239][ T1163] [ 567.317973][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 969 with max blocks 25 with error 117 [ 567.318017][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 567.318017][ T1163] [ 567.321211][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 927 with max blocks 1 with error 117 [ 567.321249][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 567.321249][ T1163] [ 567.322060][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 925 with max blocks 69 with error 117 [ 567.322095][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 567.322095][ T1163] [ 568.136894][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.143321][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.634424][T12369] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1117'. [ 572.345033][ T3546] EXT4-fs: 42 callbacks suppressed [ 572.345100][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 572.433762][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 572.433762][ T3546] [ 572.516444][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1439 with max blocks 41 with error 117 [ 572.550080][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 572.550080][ T3546] [ 572.707061][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 925 with max blocks 17 with error 117 [ 572.724532][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 572.724532][ T3546] [ 572.744418][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1435 with max blocks 27 with error 117 [ 572.764151][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 572.764151][ T3546] [ 572.794838][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 969 with max blocks 25 with error 117 [ 572.874205][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 572.874205][ T3546] [ 572.934438][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 575.734744][ T5144] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 575.996140][T12431] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1127'. [ 576.933258][T12445] Invalid ELF header magic: != ELF [ 577.117461][T12451] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1130: iget: checksum invalid [ 577.186509][T12451] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 577.248032][T12451] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1130: iget: checksum invalid [ 577.288973][T12451] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 577.340012][T12451] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1130: iget: checksum invalid [ 577.351820][T12451] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 577.363754][T12451] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1130: iget: checksum invalid [ 577.375267][T12451] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 577.384777][T12451] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 577.395559][T12451] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 577.989809][T12451] Process accounting paused [ 578.140849][T12462] Invalid ELF header magic: != ELF [ 578.526746][T12463] Process accounting resumed [ 579.366215][T12488] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1136'. [ 579.439323][T12491] EXT4-fs: 22 callbacks suppressed [ 579.439337][T12491] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 579.674321][T12491] EXT4-fs (sda1): This should not happen!! Data will be lost [ 579.674321][T12491] [ 580.573282][ T30] audit: type=1800 audit(4294967375.619:7): pid=12498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1134" name="lu_gp_id" dev="configfs" ino=41592 res=0 errno=0 [ 581.025418][T12509] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1138'. [ 581.446313][T12516] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 581.468391][T12516] EXT4-fs (sda1): This should not happen!! Data will be lost [ 581.468391][T12516] [ 584.231501][ T30] audit: type=1804 audit(4294967379.279:8): pid=12547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1148" name="/newroot/sys/kernel/debug/tracing/options/irq-info" dev="tracefs" ino=1211 res=1 errno=0 [ 585.467665][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1152'. [ 586.063838][T12591] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz.2.1154: Error -117 reading block bitmap for 5 [ 586.077366][T12591] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz.2.1154: Error -117 reading block bitmap for 4 [ 587.565672][T12606] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1158'. [ 589.613423][T12656] blktrace: Concurrent blktraces are not allowed on loop2 [ 589.662005][T12655] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 589.674622][T12654] FAULT_INJECTION: forcing a failure. [ 589.674622][T12654] name failslab, interval 1, probability 0, space 0, times 0 [ 589.837554][T12654] CPU: 1 UID: 0 PID: 12654 Comm: syz.2.1167 Tainted: G L syzkaller #0 PREEMPT(full) [ 589.837602][T12654] Tainted: [L]=SOFTLOCKUP [ 589.837612][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 589.837629][T12654] Call Trace: [ 589.837638][T12654] [ 589.837648][T12654] dump_stack_lvl+0x100/0x190 [ 589.837691][T12654] should_fail_ex.cold+0x5/0xa [ 589.837738][T12654] should_failslab+0xc2/0x120 [ 589.837779][T12654] ? tbl_mask_array_alloc+0x38/0x160 [ 589.837825][T12654] __kmalloc_noprof+0xf6/0x9c0 [ 589.837865][T12654] ? tbl_mask_array_alloc+0x38/0x160 [ 589.837903][T12654] tbl_mask_array_alloc+0x38/0x160 [ 589.837945][T12654] ovs_flow_tbl_init+0x40/0x600 [ 589.837982][T12654] ? kasan_save_track+0x14/0x30 [ 589.838019][T12654] ovs_dp_cmd_new+0x251/0xdf0 [ 589.838064][T12654] ? __kmalloc_noprof+0x365/0x9c0 [ 589.838089][T12654] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 589.838135][T12654] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 589.838177][T12654] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 589.838225][T12654] genl_family_rcv_msg_doit+0x214/0x300 [ 589.838269][T12654] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 589.838309][T12654] ? genl_get_cmd+0x3ef/0x720 [ 589.838354][T12654] ? bpf_lsm_capable+0x9/0x10 [ 589.838376][T12654] ? security_capable+0x80/0x260 [ 589.838402][T12654] ? ns_capable+0xd2/0xf0 [ 589.838435][T12654] genl_rcv_msg+0x560/0x800 [ 589.838462][T12654] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.838486][T12654] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 589.838538][T12654] netlink_rcv_skb+0x159/0x420 [ 589.838574][T12654] ? __pfx_genl_rcv_msg+0x10/0x10 [ 589.838599][T12654] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 589.838648][T12654] ? netlink_deliver_tap+0x1ae/0xcc0 [ 589.838686][T12654] genl_rcv+0x28/0x40 [ 589.838721][T12654] netlink_unicast+0x5aa/0x870 [ 589.838762][T12654] ? __pfx_netlink_unicast+0x10/0x10 [ 589.838817][T12654] netlink_sendmsg+0x8b0/0xda0 [ 589.838860][T12654] ? __pfx_netlink_sendmsg+0x10/0x10 [ 589.838896][T12654] ? __import_iovec+0x1d2/0x640 [ 589.838933][T12654] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 589.838963][T12654] ____sys_sendmsg+0xa54/0xc30 [ 589.838992][T12654] ? __pfx_____sys_sendmsg+0x10/0x10 [ 589.839014][T12654] ? __pfx___futex_wait+0x10/0x10 [ 589.839045][T12654] ? __pfx_futex_wake_mark+0x10/0x10 [ 589.839075][T12654] ___sys_sendmsg+0x190/0x1e0 [ 589.839103][T12654] ? __pfx____sys_sendmsg+0x10/0x10 [ 589.839144][T12654] ? find_held_lock+0x2b/0x80 [ 589.839192][T12654] __sys_sendmsg+0x170/0x220 [ 589.839226][T12654] ? __pfx___sys_sendmsg+0x10/0x10 [ 589.839258][T12654] ? __x64_sys_futex+0x34f/0x4d0 [ 589.839313][T12654] do_syscall_64+0xc9/0xf80 [ 589.839342][T12654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.839368][T12654] RIP: 0033:0x7f25c1b9bf79 [ 589.839388][T12654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.839413][T12654] RSP: 002b:00007f25c29df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 589.839438][T12654] RAX: ffffffffffffffda RBX: 00007f25c1e15fa0 RCX: 00007f25c1b9bf79 [ 589.839456][T12654] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 589.839472][T12654] RBP: 00007f25c1c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 589.839487][T12654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.839502][T12654] R13: 00007f25c1e16038 R14: 00007f25c1e15fa0 R15: 00007ffdc00ee088 [ 589.839535][T12654] [ 591.013593][T12651] Process accounting resumed [ 592.639286][ T30] audit: type=1326 audit(4294967387.689:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12681 comm="syz.3.1173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f99c1b9bf79 code=0x0 [ 592.796048][T12688] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 592.796048][T12688] The task syz.3.1173 (12688) triggered the difference, watch for misbehavior. [ 593.485018][ T30] audit: type=1804 audit(4294967388.519:10): pid=12692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1172" name="/newroot/294/file0" dev="tmpfs" ino=1519 res=1 errno=0 [ 593.553021][ T71] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 927 with max blocks 68 with error 117 [ 593.565816][ T30] audit: type=1804 audit(4294967388.609:11): pid=12693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1172" name="/newroot/294/file0" dev="tmpfs" ino=1519 res=1 errno=0 [ 593.589272][ T71] EXT4-fs (sda1): This should not happen!! Data will be lost [ 593.589272][ T71] [ 593.616553][ T71] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 927 with max blocks 67 with error 117 [ 593.644578][ T71] EXT4-fs (sda1): This should not happen!! Data will be lost [ 593.644578][ T71] [ 593.684474][ T71] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 925 with max blocks 17 with error 117 [ 593.774129][ T71] EXT4-fs (sda1): This should not happen!! Data will be lost [ 593.774129][ T71] [ 593.946257][ T71] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 966 with max blocks 28 with error 117 [ 594.007315][ T71] EXT4-fs (sda1): This should not happen!! Data will be lost [ 594.007315][ T71] [ 594.080330][ T71] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 2 with max blocks 1 with error 117 [ 594.094152][ T71] EXT4-fs (sda1): This should not happen!! Data will be lost [ 594.094152][ T71] [ 594.403022][T12668] Process accounting resumed [ 594.583988][T12711] usb usb14: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 596.653639][T12747] FAULT_INJECTION: forcing a failure. [ 596.653639][T12747] name failslab, interval 1, probability 0, space 0, times 0 [ 596.670002][T12747] CPU: 0 UID: 0 PID: 12747 Comm: syz.2.1182 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.670045][T12747] Tainted: [L]=SOFTLOCKUP [ 596.670055][T12747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 596.670079][T12747] Call Trace: [ 596.670089][T12747] [ 596.670099][T12747] dump_stack_lvl+0x100/0x190 [ 596.670147][T12747] should_fail_ex.cold+0x5/0xa [ 596.670200][T12747] should_failslab+0xc2/0x120 [ 596.670245][T12747] kmem_cache_alloc_noprof+0x83/0x780 [ 596.670287][T12747] ? mas_wr_store_type+0xb21/0x2200 [ 596.670315][T12747] ? mas_alloc_nodes+0x280/0x390 [ 596.670366][T12747] ? mas_alloc_nodes+0x280/0x390 [ 596.670406][T12747] mas_alloc_nodes+0x280/0x390 [ 596.670458][T12747] mas_preallocate+0x39c/0xf10 [ 596.670498][T12747] ? __pfx_mas_preallocate+0x10/0x10 [ 596.670548][T12747] ? lockdep_init_map_type+0x5c/0x250 [ 596.670599][T12747] __mmap_region+0x1201/0x2820 [ 596.670639][T12747] ? __pfx___mmap_region+0x10/0x10 [ 596.670684][T12747] ? find_held_lock+0x2b/0x80 [ 596.670715][T12747] ? trace_ignore_this_task+0xbc/0x100 [ 596.670750][T12747] ? trace_ignore_this_task+0xbc/0x100 [ 596.670796][T12747] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 596.670847][T12747] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 596.670901][T12747] ? __schedule+0xff8/0x5fa0 [ 596.670947][T12747] ? trace_ignore_this_task+0xbc/0x100 [ 596.670978][T12747] ? trace_ignore_this_task+0xbc/0x100 [ 596.671059][T12747] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 596.671113][T12747] ? rcu_is_watching+0x12/0xc0 [ 596.671150][T12747] mmap_region+0x180/0x3e0 [ 596.671195][T12747] do_mmap+0xc63/0x12f0 [ 596.671247][T12747] ? __pfx_do_mmap+0x10/0x10 [ 596.671289][T12747] ? __pfx_down_write_killable+0x10/0x10 [ 596.671332][T12747] vm_mmap_pgoff+0x29e/0x470 [ 596.671384][T12747] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 596.671439][T12747] ? __x64_sys_futex+0x34f/0x4d0 [ 596.671477][T12747] ? __x64_sys_futex+0x358/0x4d0 [ 596.671526][T12747] ksys_mmap_pgoff+0x7d/0x5b0 [ 596.671576][T12747] __x64_sys_mmap+0x125/0x190 [ 596.671613][T12747] do_syscall_64+0xc9/0xf80 [ 596.671649][T12747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.671678][T12747] RIP: 0033:0x7f25c1b9bf79 [ 596.671702][T12747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.671733][T12747] RSP: 002b:00007f25c29df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 596.671760][T12747] RAX: ffffffffffffffda RBX: 00007f25c1e15fa0 RCX: 00007f25c1b9bf79 [ 596.671783][T12747] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 596.671801][T12747] RBP: 00007f25c1c327e0 R08: ffffffffffffffff R09: 0000000008008000 [ 596.671820][T12747] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 596.671836][T12747] R13: 00007f25c1e16038 R14: 00007f25c1e15fa0 R15: 00007ffdc00ee088 [ 596.671878][T12747] [ 598.727557][T12768] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1186'. [ 599.179709][T12770] EXT4-fs: 12 callbacks suppressed [ 599.179732][T12770] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 2 with max blocks 1 with error 117 [ 599.484616][T12770] EXT4-fs (sda1): This should not happen!! Data will be lost [ 599.484616][T12770] [ 599.766062][ T71] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 971 with max blocks 23 with error 117 [ 599.894174][ T71] EXT4-fs (sda1): This should not happen!! Data will be lost [ 599.894174][ T71] [ 599.906542][ T71] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 973 with max blocks 21 with error 117 [ 599.920959][ T71] EXT4-fs (sda1): This should not happen!! Data will be lost [ 599.920959][ T71] [ 599.933514][ T71] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 928 with max blocks 1 with error 117 [ 600.102783][ T71] EXT4-fs (sda1): This should not happen!! Data will be lost [ 600.102783][ T71] [ 600.113901][ T71] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 927 with max blocks 67 with error 117 [ 600.127586][ T71] EXT4-fs (sda1): This should not happen!! Data will be lost [ 600.127586][ T71] [ 600.874820][T12783] Setting dangerous option i915.mitigations - tainting kernel [ 600.944604][T12785] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1190'. [ 601.041679][T12789] ubi31: attaching mtd0 [ 601.166541][T12789] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514 [ 601.177122][T12789] ubi31 error: validate_ec_hdr: bad EC header [ 601.183437][T12789] Erase counter header dump: [ 601.198436][T12789] magic 0x55424923 [ 601.306259][T12789] version 1 [ 601.364897][T12789] ec 1 [ 601.395790][T12789] vid_hdr_offset 64 [ 601.473114][T12789] data_offset 128 [ 601.533546][T12789] image_seq 456801789 [ 601.559320][T12789] hdr_crc 0xc1239719 [ 601.716932][T12789] erase counter header hexdump: [ 601.722290][T12789] CPU: 1 UID: 0 PID: 12789 Comm: syz.0.1189 Tainted: G U L syzkaller #0 PREEMPT(full) [ 601.722335][T12789] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 601.722346][T12789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 601.722364][T12789] Call Trace: [ 601.722374][T12789] [ 601.722384][T12789] dump_stack_lvl+0x100/0x190 [ 601.722428][T12789] validate_ec_hdr+0x2d0/0x330 [ 601.722463][T12789] ubi_io_read_ec_hdr+0x656/0x6d0 [ 601.722498][T12789] ubi_attach+0x601/0x4d30 [ 601.722538][T12789] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 601.722602][T12789] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 601.722632][T12789] ? ubi_msg+0x114/0x159 [ 601.722670][T12789] ? __pfx_ubi_msg+0x10/0x10 [ 601.722710][T12789] ? __pfx_ubi_attach+0x10/0x10 [ 601.722747][T12789] ? lockdep_init_map_type+0x5c/0x250 [ 601.722794][T12789] ? ubi_attach_mtd_dev+0x1587/0x3370 [ 601.722832][T12789] ? __vmalloc_node_noprof+0xad/0xf0 [ 601.722859][T12789] ? ubi_attach_mtd_dev+0x1587/0x3370 [ 601.722903][T12789] ubi_attach_mtd_dev+0x15d3/0x3370 [ 601.722959][T12789] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 601.722998][T12789] ? __pfx_get_mtd_device+0x10/0x10 [ 601.723039][T12789] ctrl_cdev_ioctl+0x36a/0x400 [ 601.723079][T12789] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 601.723129][T12789] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 601.723172][T12789] __x64_sys_ioctl+0x18e/0x210 [ 601.723204][T12789] do_syscall_64+0xc9/0xf80 [ 601.723237][T12789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.723266][T12789] RIP: 0033:0x7fcc0979bf79 [ 601.723290][T12789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.723317][T12789] RSP: 002b:00007fcc0a58b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.723348][T12789] RAX: ffffffffffffffda RBX: 00007fcc09a16090 RCX: 00007fcc0979bf79 [ 601.723368][T12789] RDX: 0000200000000000 RSI: 0000000040186f40 RDI: 000000000000000b [ 601.723387][T12789] RBP: 00007fcc098327e0 R08: 0000000000000000 R09: 0000000000000000 [ 601.723404][T12789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.723422][T12789] R13: 00007fcc09a16128 R14: 00007fcc09a16090 R15: 00007ffff4de2b68 [ 601.723461][T12789] [ 601.723471][T12789] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 602.132966][T12789] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 603.209082][T12820] FAULT_INJECTION: forcing a failure. [ 603.209082][T12820] name failslab, interval 1, probability 0, space 0, times 0 [ 603.227050][T12820] CPU: 0 UID: 0 PID: 12820 Comm: syz.3.1201 Tainted: G U L syzkaller #0 PREEMPT(full) [ 603.227096][T12820] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 603.227106][T12820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 603.227122][T12820] Call Trace: [ 603.227130][T12820] [ 603.227140][T12820] dump_stack_lvl+0x100/0x190 [ 603.227182][T12820] should_fail_ex.cold+0x5/0xa [ 603.227228][T12820] should_failslab+0xc2/0x120 [ 603.227268][T12820] kmem_cache_alloc_noprof+0x83/0x780 [ 603.227307][T12820] ? __pfx_map_id_range_down+0x10/0x10 [ 603.227333][T12820] ? security_inode_alloc+0x3b/0x2c0 [ 603.227379][T12820] ? security_inode_alloc+0x3b/0x2c0 [ 603.227415][T12820] security_inode_alloc+0x3b/0x2c0 [ 603.227449][T12820] inode_init_always_gfp+0xced/0x1040 [ 603.227493][T12820] alloc_inode+0x8e/0x250 [ 603.227517][T12820] sock_alloc+0x44/0x280 [ 603.227554][T12820] ? security_socket_create+0x7f/0x250 [ 603.227585][T12820] sock_create_lite+0x82/0x120 [ 603.227628][T12820] __netlink_kernel_create+0xbd/0x750 [ 603.227670][T12820] ? __pfx___netlink_kernel_create+0x10/0x10 [ 603.227718][T12820] ? __pfx_genl_pernet_init+0x10/0x10 [ 603.227761][T12820] genl_pernet_init+0xbd/0x160 [ 603.227803][T12820] ? __pfx_genl_pernet_init+0x10/0x10 [ 603.227845][T12820] ? lockdep_init_map_type+0x5c/0x250 [ 603.227887][T12820] ? __pfx_genl_rcv+0x10/0x10 [ 603.227932][T12820] ? __pfx_genl_bind+0x10/0x10 [ 603.227970][T12820] ? __pfx_genl_unbind+0x10/0x10 [ 603.228009][T12820] ? __pfx_genl_release+0x10/0x10 [ 603.228051][T12820] ? mutex_init_lockep+0x110/0x150 [ 603.228098][T12820] ops_init+0x1e2/0x5f0 [ 603.228140][T12820] setup_net+0x118/0x3a0 [ 603.228178][T12820] ? __pfx_setup_net+0x10/0x10 [ 603.228215][T12820] ? lockdep_init_map_type+0x5c/0x250 [ 603.228257][T12820] ? mutex_init_lockep+0x110/0x150 [ 603.228305][T12820] copy_net_ns+0x46f/0x7c0 [ 603.228350][T12820] create_new_namespaces+0x3ea/0xac0 [ 603.228405][T12820] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 603.228443][T12820] ksys_unshare+0x455/0xab0 [ 603.228489][T12820] ? __pfx_ksys_unshare+0x10/0x10 [ 603.228530][T12820] ? xfd_validate_state+0x129/0x190 [ 603.228570][T12820] __x64_sys_unshare+0x31/0x40 [ 603.228611][T12820] do_syscall_64+0xc9/0xf80 [ 603.228645][T12820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.228674][T12820] RIP: 0033:0x7f99c1b9bf79 [ 603.228697][T12820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.228725][T12820] RSP: 002b:00007f99bfdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 603.228753][T12820] RAX: ffffffffffffffda RBX: 00007f99c1e15fa0 RCX: 00007f99c1b9bf79 [ 603.228772][T12820] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 603.228789][T12820] RBP: 00007f99c1c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 603.228806][T12820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.228823][T12820] R13: 00007f99c1e16038 R14: 00007f99c1e15fa0 R15: 00007fffa76ae948 [ 603.228860][T12820] [ 608.342714][T12932] Process accounting resumed [ 608.649656][ T13] EXT4-fs: 6 callbacks suppressed [ 608.649670][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 963 with max blocks 19 with error 117 [ 608.753938][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 608.753938][ T13] [ 608.851126][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 936 with max blocks 58 with error 117 [ 608.867189][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 608.867189][ T13] [ 608.954436][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 961 with max blocks 4 with error 117 [ 609.041218][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 609.041218][ T13] [ 609.075545][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 928 with max blocks 1 with error 117 [ 609.124811][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 609.124811][ T13] [ 609.136228][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 2 with max blocks 1 with error 117 [ 609.155556][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 609.155556][ T13] [ 609.362987][T12933] Process accounting paused [ 613.093277][T13039] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1260'. [ 613.894671][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 615.379298][ T1163] EXT4-fs: 8 callbacks suppressed [ 615.379313][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1415 with max blocks 65 with error 117 [ 615.465148][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 615.465148][ T1163] [ 615.507740][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 967 with max blocks 27 with error 117 [ 615.530628][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 615.530628][ T1163] [ 615.553086][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 969 with max blocks 25 with error 117 [ 615.574639][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 615.574639][ T1163] [ 615.615763][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 922 with max blocks 1 with error 117 [ 615.638741][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 615.638741][ T1163] [ 615.728313][ T1163] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:6: bg 1: bad block bitmap checksum [ 615.869703][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 6398 with max blocks 1 with error 74 [ 615.964436][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 615.964436][ T1163] [ 616.754836][T13100] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1273'. [ 617.494318][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 617.575913][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 620.054179][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 621.172153][T13152] Process accounting paused [ 621.180138][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 622.343606][ T36] EXT4-fs: 6 callbacks suppressed [ 622.343620][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 964 with max blocks 30 with error 117 [ 622.477032][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 622.477032][ T36] [ 622.517525][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1416 with max blocks 23 with error 117 [ 622.602747][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 622.602747][ T36] [ 622.664775][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 935 with max blocks 60 with error 117 [ 622.708487][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 622.708487][ T36] [ 622.738026][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1425 with max blocks 31 with error 117 [ 622.773872][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 622.773872][ T36] [ 622.800254][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1425 with max blocks 37 with error 117 [ 622.866833][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 622.866833][ T36] [ 624.614489][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 624.681409][T13183] Process accounting paused [ 626.375320][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 628.374567][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 628.854194][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 629.588505][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.594925][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.014645][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 631.334299][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 632.586632][T13371] netlink: 322 bytes leftover after parsing attributes in process `syz.1.1325'. [ 633.040831][T13375] EXT4-fs: 16 callbacks suppressed [ 633.040852][T13375] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 927 with max blocks 67 with error 117 [ 633.088179][T13375] EXT4-fs (sda1): This should not happen!! Data will be lost [ 633.088179][T13375] [ 635.094170][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 635.654115][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 637.812812][T13469] netlink: 322 bytes leftover after parsing attributes in process `syz.1.1344'. [ 637.974358][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 638.016124][T13471] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 962 with max blocks 32 with error 117 [ 638.089948][T13471] EXT4-fs (sda1): This should not happen!! Data will be lost [ 638.089948][T13471] [ 638.403230][T13480] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1348'. [ 638.682081][T13476] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 993 with max blocks 1 with error 117 [ 638.738640][T13476] EXT4-fs (sda1): This should not happen!! Data will be lost [ 638.738640][T13476] [ 639.071375][T13476] Process accounting paused [ 639.594895][ T30] audit: type=1800 audit(4294967434.649:12): pid=13504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1353" name="lu_gp_id" dev="configfs" ino=47053 res=0 errno=0 [ 639.631160][T13504] netlink: 326 bytes leftover after parsing attributes in process `syz.3.1353'. [ 639.675113][T13504] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.682446][T13504] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.085621][T13519] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1355'. [ 640.352104][T13523] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 966 with max blocks 27 with error 117 [ 640.434830][T13523] EXT4-fs (sda1): This should not happen!! Data will be lost [ 640.434830][T13523] [ 641.438711][T13506] Process accounting resumed [ 641.808715][T13545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 641.834509][T13545] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1359'. [ 642.273123][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 941 with max blocks 54 with error 117 [ 642.323854][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 642.323854][ T48] [ 642.364896][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 964 with max blocks 26 with error 117 [ 642.408254][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 642.408254][ T48] [ 642.454508][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 964 with max blocks 30 with error 117 [ 642.854215][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 643.324718][ T30] audit: type=1800 audit(4294967438.369:13): pid=13563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1365" name="lu_gp_id" dev="configfs" ino=47198 res=0 errno=0 [ 643.408735][T13563] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1365'. [ 643.486880][T13563] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.494315][T13563] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.153996][T13572] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1367'. [ 645.578045][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 647.184178][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 647.637671][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 647.661271][ T1163] EXT4-fs: 11 callbacks suppressed [ 647.661286][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 938 with max blocks 56 with error 117 [ 647.703435][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 647.703435][ T1163] [ 647.741520][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 965 with max blocks 29 with error 117 [ 647.764436][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 647.764436][ T1163] [ 647.805109][T13608] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1371'. [ 647.850990][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 922 with max blocks 20 with error 117 [ 647.894522][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 647.964138][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 647.964138][ T1163] [ 648.008323][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1412 with max blocks 44 with error 117 [ 648.061615][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 648.061615][ T1163] [ 648.125713][ T1163] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 928 with max blocks 11 with error 117 [ 648.158965][ T1163] EXT4-fs (sda1): This should not happen!! Data will be lost [ 648.158965][ T1163] [ 648.788688][T13622] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1375'. [ 651.425180][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 653.420067][ T36] EXT4-fs: 14 callbacks suppressed [ 653.420120][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 939 with max blocks 56 with error 117 [ 653.457468][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 653.457468][ T36] [ 653.511640][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 985 with max blocks 9 with error 117 [ 653.544137][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 653.544137][ T36] [ 653.560516][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1417 with max blocks 45 with error 117 [ 653.576053][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 653.576053][ T36] [ 653.589437][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 926 with max blocks 11 with error 117 [ 653.635759][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 653.635759][ T36] [ 653.686384][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1436 with max blocks 20 with error 117 [ 653.764465][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 653.764465][ T36] [ 654.464269][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 654.714302][T13686] Process accounting resumed [ 655.236919][T13713] Process accounting resumed [ 656.935565][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 659.033700][ T3546] EXT4-fs: 2 callbacks suppressed [ 659.033720][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1409 with max blocks 47 with error 117 [ 659.085538][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 659.085538][ T3546] [ 659.107597][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 659.163952][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 984 with max blocks 10 with error 117 [ 659.240163][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 659.240163][ T3546] [ 659.306772][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 934 with max blocks 60 with error 117 [ 659.412080][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 659.412080][ T3546] [ 659.499842][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 924 with max blocks 16 with error 117 [ 659.574357][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 659.589623][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 659.589623][ T3546] [ 659.702542][ T3546] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1453 with max blocks 3 with error 117 [ 659.715580][ T3546] EXT4-fs (sda1): This should not happen!! Data will be lost [ 659.715580][ T3546] [ 662.960207][T13830] serio: Serial port pty6 [ 665.901223][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 669.494180][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 669.830375][T13947] Process accounting resumed [ 670.863583][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 672.250705][T13980] Process accounting paused [ 672.564253][T14003] Invalid ELF header magic: != ELF [ 672.652581][T13989] Invalid ELF header magic: != ELF [ 672.678319][T14001] EXT4-fs: 18 callbacks suppressed [ 672.678336][T14001] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 924 with max blocks 70 with error 117 [ 672.724208][T14001] EXT4-fs (sda1): This should not happen!! Data will be lost [ 672.724208][T14001] [ 675.081874][T14051] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 960 with max blocks 22 with error 117 [ 675.124810][T14051] EXT4-fs (sda1): This should not happen!! Data will be lost [ 675.124810][T14051] [ 676.057616][T14075] FAULT_INJECTION: forcing a failure. [ 676.057616][T14075] name failslab, interval 1, probability 0, space 0, times 0 [ 676.080695][T14075] CPU: 1 UID: 0 PID: 14075 Comm: syz.3.1464 Tainted: G U L syzkaller #0 PREEMPT(full) [ 676.080746][T14075] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 676.080757][T14075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 676.080776][T14075] Call Trace: [ 676.080785][T14075] [ 676.080795][T14075] dump_stack_lvl+0x100/0x190 [ 676.080835][T14075] should_fail_ex.cold+0x5/0xa [ 676.080878][T14075] should_failslab+0xc2/0x120 [ 676.080913][T14075] __kmalloc_cache_noprof+0x80/0x810 [ 676.080941][T14075] ? ovs_flow_tbl_init+0x8b/0x600 [ 676.080986][T14075] ? ovs_flow_tbl_init+0x8b/0x600 [ 676.081026][T14075] ovs_flow_tbl_init+0x8b/0x600 [ 676.081074][T14075] ovs_dp_cmd_new+0x251/0xdf0 [ 676.081124][T14075] ? __kmalloc_noprof+0x365/0x9c0 [ 676.081153][T14075] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 676.081202][T14075] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x290 [ 676.081246][T14075] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1b4/0x290 [ 676.081302][T14075] genl_family_rcv_msg_doit+0x214/0x300 [ 676.081353][T14075] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 676.081411][T14075] ? genl_get_cmd+0x3ef/0x720 [ 676.081459][T14075] ? bpf_lsm_capable+0x9/0x10 [ 676.081483][T14075] ? security_capable+0x80/0x260 [ 676.081509][T14075] ? ns_capable+0xd2/0xf0 [ 676.081544][T14075] genl_rcv_msg+0x560/0x800 [ 676.081573][T14075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.081599][T14075] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 676.081647][T14075] netlink_rcv_skb+0x159/0x420 [ 676.081685][T14075] ? __pfx_genl_rcv_msg+0x10/0x10 [ 676.081713][T14075] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 676.081765][T14075] ? netlink_deliver_tap+0x1ae/0xcc0 [ 676.081805][T14075] genl_rcv+0x28/0x40 [ 676.081840][T14075] netlink_unicast+0x5aa/0x870 [ 676.081883][T14075] ? __pfx_netlink_unicast+0x10/0x10 [ 676.081938][T14075] netlink_sendmsg+0x8b0/0xda0 [ 676.081982][T14075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 676.082021][T14075] ? __import_iovec+0x1d2/0x640 [ 676.082061][T14075] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 676.082094][T14075] ____sys_sendmsg+0xa54/0xc30 [ 676.082127][T14075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 676.082153][T14075] ? __pfx___futex_wait+0x10/0x10 [ 676.082187][T14075] ? __pfx_futex_wake_mark+0x10/0x10 [ 676.082222][T14075] ___sys_sendmsg+0x190/0x1e0 [ 676.082253][T14075] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.082300][T14075] ? find_held_lock+0x2b/0x80 [ 676.082356][T14075] __sys_sendmsg+0x170/0x220 [ 676.082407][T14075] ? __pfx___sys_sendmsg+0x10/0x10 [ 676.082445][T14075] ? __x64_sys_futex+0x34f/0x4d0 [ 676.082508][T14075] do_syscall_64+0xc9/0xf80 [ 676.082543][T14075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.082570][T14075] RIP: 0033:0x7f99c1b9bf79 [ 676.082593][T14075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.082621][T14075] RSP: 002b:00007f99bfdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 676.082647][T14075] RAX: ffffffffffffffda RBX: 00007f99c1e15fa0 RCX: 00007f99c1b9bf79 [ 676.082667][T14075] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 676.082684][T14075] RBP: 00007f99c1c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 676.082702][T14075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.082719][T14075] R13: 00007f99c1e16038 R14: 00007f99c1e15fa0 R15: 00007fffa76ae948 [ 676.082759][T14075] [ 678.257603][T14115] ovs_: entered promiscuous mode [ 678.349798][T14120] FAULT_INJECTION: forcing a failure. [ 678.349798][T14120] name fail_futex, interval 1, probability 0, space 0, times 0 [ 678.424245][T14120] CPU: 0 UID: 0 PID: 14120 Comm: syz.1.1475 Tainted: G U L syzkaller #0 PREEMPT(full) [ 678.424293][T14120] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 678.424303][T14120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 678.424316][T14120] Call Trace: [ 678.424323][T14120] [ 678.424329][T14120] dump_stack_lvl+0x100/0x190 [ 678.424355][T14120] should_fail_ex.cold+0x5/0xa [ 678.424383][T14120] get_futex_key+0x1d2/0x1620 [ 678.424405][T14120] ? __pfx_get_futex_key+0x10/0x10 [ 678.424423][T14120] ? ex_handler_uaccess.isra.0+0xfa/0x200 [ 678.424446][T14120] ? fixup_exception+0x119/0xff0 [ 678.424477][T14120] futex_wake+0xea/0x530 [ 678.424492][T14120] ? __bad_area_nosemaphore+0x320/0x3f0 [ 678.424510][T14120] ? __pfx_futex_wake+0x10/0x10 [ 678.424527][T14120] ? rcu_is_watching+0x12/0xc0 [ 678.424541][T14120] ? irqentry_exit+0x180/0x670 [ 678.424559][T14120] do_futex+0x32b/0x350 [ 678.424579][T14120] ? __pfx_do_futex+0x10/0x10 [ 678.424604][T14120] __x64_sys_futex+0x34f/0x4d0 [ 678.424626][T14120] ? __pfx___x64_sys_futex+0x10/0x10 [ 678.424648][T14120] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 678.424674][T14120] do_syscall_64+0xc9/0xf80 [ 678.424691][T14120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.424706][T14120] RIP: 0033:0x7f2cd4f9bf79 [ 678.424718][T14120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.424732][T14120] RSP: 002b:00007f2cd5ec90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 678.424747][T14120] RAX: ffffffffffffffda RBX: 00007f2cd5215fa8 RCX: 00007f2cd4f9bf79 [ 678.424757][T14120] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2cd5215fac [ 678.424766][T14120] RBP: 00007f2cd5215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 678.424775][T14120] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 678.424785][T14120] R13: 00007f2cd5216038 R14: 00007ffc6953ef90 R15: 00007ffc6953f078 [ 678.424804][T14120] [ 678.699202][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 679.025127][ T30] audit: type=1804 audit(4294967474.079:14): pid=14131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1477" name="/newroot/383/file0" dev="tmpfs" ino=1986 res=1 errno=0 [ 679.234797][T14128] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 923 with max blocks 18 with error 117 [ 679.252136][T14128] EXT4-fs (sda1): This should not happen!! Data will be lost [ 679.252136][T14128] [ 679.308178][ T30] audit: type=1804 audit(4294967474.359:15): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1477" name="/newroot/383/file0" dev="tmpfs" ino=1986 res=1 errno=0 [ 680.686367][T14170] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1485'. [ 680.986424][T14171] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 987 with max blocks 7 with error 117 [ 681.030188][T14171] EXT4-fs (sda1): This should not happen!! Data will be lost [ 681.030188][T14171] [ 682.607121][ T30] audit: type=1800 audit(4294967477.659:16): pid=14188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1488" name="lu_gp_id" dev="configfs" ino=49840 res=0 errno=0 [ 682.634385][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 683.414458][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 684.876418][T14232] Setting dangerous option i915.mitigations - tainting kernel [ 685.110168][T14233] ubi31: attaching mtd0 [ 685.198265][T14233] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514 [ 685.312459][T14230] Process accounting paused [ 685.328793][T14233] ubi31 error: validate_ec_hdr: bad EC header [ 685.436524][T14233] Erase counter header dump: [ 685.441182][T14233] magic 0x55424923 [ 685.457501][T14233] version 1 [ 685.465456][T14233] ec 1 [ 685.473830][T14233] vid_hdr_offset 64 [ 685.482336][T14233] data_offset 128 [ 685.489843][T14233] image_seq 456801789 [ 685.496298][T14233] hdr_crc 0xc1239719 [ 685.501029][T14233] erase counter header hexdump: [ 685.506145][T14233] CPU: 1 UID: 0 PID: 14233 Comm: syz.3.1499 Tainted: G U L syzkaller #0 PREEMPT(full) [ 685.506190][T14233] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 685.506201][T14233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 685.506218][T14233] Call Trace: [ 685.506228][T14233] [ 685.506238][T14233] dump_stack_lvl+0x100/0x190 [ 685.506281][T14233] validate_ec_hdr+0x2d0/0x330 [ 685.506316][T14233] ubi_io_read_ec_hdr+0x656/0x6d0 [ 685.506350][T14233] ubi_attach+0x601/0x4d30 [ 685.506390][T14233] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 685.506440][T14233] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 685.506470][T14233] ? ubi_msg+0x114/0x159 [ 685.506507][T14233] ? __pfx_ubi_msg+0x10/0x10 [ 685.506548][T14233] ? __pfx_ubi_attach+0x10/0x10 [ 685.506582][T14233] ? lockdep_init_map_type+0x5c/0x250 [ 685.506629][T14233] ? ubi_attach_mtd_dev+0x1587/0x3370 [ 685.506681][T14233] ? __vmalloc_node_noprof+0xad/0xf0 [ 685.506709][T14233] ? ubi_attach_mtd_dev+0x1587/0x3370 [ 685.506754][T14233] ubi_attach_mtd_dev+0x15d3/0x3370 [ 685.506812][T14233] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 685.506851][T14233] ? __pfx_get_mtd_device+0x10/0x10 [ 685.506892][T14233] ctrl_cdev_ioctl+0x36a/0x400 [ 685.506933][T14233] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 685.506983][T14233] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 685.507025][T14233] __x64_sys_ioctl+0x18e/0x210 [ 685.507062][T14233] do_syscall_64+0xc9/0xf80 [ 685.507094][T14233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.507124][T14233] RIP: 0033:0x7f99c1b9bf79 [ 685.507146][T14233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.507175][T14233] RSP: 002b:00007f99bfdd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.507206][T14233] RAX: ffffffffffffffda RBX: 00007f99c1e16090 RCX: 00007f99c1b9bf79 [ 685.507221][T14233] RDX: 0000200000000000 RSI: 0000000040186f40 RDI: 000000000000000b [ 685.507236][T14233] RBP: 00007f99c1c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 685.507249][T14233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 685.507262][T14233] R13: 00007f99c1e16128 R14: 00007f99c1e16090 R15: 00007fffa76ae948 [ 685.507293][T14233] [ 685.507375][T14233] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 685.818000][T14233] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 686.774381][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 686.869123][T14206] Process accounting paused [ 688.189315][T14288] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 2 with max blocks 1 with error 117 [ 688.203490][T14288] EXT4-fs (sda1): This should not happen!! Data will be lost [ 688.203490][T14288] [ 690.134655][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 691.017905][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.024314][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.034186][T14335] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 927 with max blocks 67 with error 117 [ 691.068200][T14335] EXT4-fs (sda1): This should not happen!! Data will be lost [ 691.068200][T14335] [ 691.885053][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 964 with max blocks 31 with error 117 [ 691.908190][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 691.908190][ T36] [ 691.987045][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 965 with max blocks 29 with error 117 [ 692.044130][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 692.044130][ T36] [ 692.128141][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 963 with max blocks 31 with error 117 [ 692.175201][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 692.175864][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 692.175864][ T36] [ 693.814233][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 694.617896][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 698.454267][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 698.702777][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 699.992351][T14441] Process accounting paused [ 700.562800][T14459] EXT4-fs: 2 callbacks suppressed [ 700.562823][T14459] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 984 with max blocks 10 with error 117 [ 700.654146][T14459] EXT4-fs (sda1): This should not happen!! Data will be lost [ 700.654146][T14459] [ 701.352106][T14453] Invalid ELF header magic: != ELF [ 703.047973][T14453] Process accounting resumed [ 704.714828][T14535] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 965 with max blocks 19 with error 117 [ 704.823765][T14535] EXT4-fs (sda1): This should not happen!! Data will be lost [ 704.823765][T14535] [ 710.774801][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 711.004769][T14651] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 980 with max blocks 15 with error 117 [ 711.033230][T14651] EXT4-fs (sda1): This should not happen!! Data will be lost [ 711.033230][T14651] [ 711.334761][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 712.099901][T14653] tipc: can't start tipc send workqueue [ 712.332984][T14663] Invalid ELF header magic: != ELF [ 716.268812][T14714] Process accounting resumed [ 716.694143][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 717.094179][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 717.219259][T14699] Process accounting resumed [ 717.278335][T14744] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 966 with max blocks 28 with error 117 [ 717.332535][T14744] EXT4-fs (sda1): This should not happen!! Data will be lost [ 717.332535][T14744] [ 718.758633][T14770] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 964 with max blocks 30 with error 117 [ 718.794249][T14770] EXT4-fs (sda1): This should not happen!! Data will be lost [ 718.794249][T14770] [ 719.991971][T14785] Invalid ELF header magic: != ELF [ 720.055452][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 722.167365][T14825] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 984 with max blocks 10 with error 117 [ 722.189582][T14825] EXT4-fs (sda1): This should not happen!! Data will be lost [ 722.189582][T14825] [ 722.785145][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 965 with max blocks 16 with error 117 [ 722.805718][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 722.805718][ T13] [ 722.868298][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 984 with max blocks 10 with error 117 [ 722.925836][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 722.925836][ T13] [ 722.947520][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 967 with max blocks 27 with error 117 [ 723.014153][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 723.014153][ T13] [ 723.036986][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 966 with max blocks 28 with error 117 [ 723.070963][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 723.070963][ T13] [ 723.814136][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 724.704438][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 729.504581][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 729.814164][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 731.093551][T14966] Process accounting resumed [ 732.910814][T15034] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 980 with max blocks 15 with error 117 [ 732.925175][T15034] EXT4-fs (sda1): This should not happen!! Data will be lost [ 732.925175][T15034] [ 733.612008][T15039] Process accounting paused [ 739.814342][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 739.989080][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 742.878381][T15238] smpboot: CPU 1 is now offline [ 743.056365][T15240] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 743.750195][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 748.006666][T15323] Process accounting paused [ 749.254201][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 749.427701][T15316] Process accounting paused [ 751.189761][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.196253][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.566375][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 965 with max blocks 30 with error 117 [ 753.606137][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 753.606137][ T48] [ 753.634961][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 984 with max blocks 10 with error 117 [ 753.746017][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 753.746017][ T48] [ 753.793152][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1407 with max blocks 55 with error 117 [ 753.841616][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 753.841616][ T48] [ 753.885811][ T48] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 968 with max blocks 26 with error 117 [ 753.992171][ T48] EXT4-fs (sda1): This should not happen!! Data will be lost [ 753.992171][ T48] [ 754.454579][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 759.334372][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 760.054204][T13092] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 760.614063][ T5144] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 760.859663][T15595] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 980 with max blocks 14 with error 117 [ 760.920784][T15595] EXT4-fs (sda1): This should not happen!! Data will be lost [ 760.920784][T15595] [ 761.376640][T15598] Process accounting paused [ 763.104076][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 763.364650][T15635] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 964 with max blocks 1 with error 117 [ 763.377537][T15635] EXT4-fs (sda1): This should not happen!! Data will be lost [ 763.377537][T15635] [ 765.422461][T15626] Process accounting resumed [ 766.935079][ T5144] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 768.774123][T13092] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 769.368613][T15748] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 966 with max blocks 29 with error 117 [ 769.396511][T15748] EXT4-fs (sda1): This should not happen!! Data will be lost [ 769.396511][T15748] [ 774.516517][T15840] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 965 with max blocks 15 with error 117 [ 774.644327][T15840] EXT4-fs (sda1): This should not happen!! Data will be lost [ 774.644327][T15840] [ 775.974159][ T5144] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 775.974172][T13092] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 777.045854][T15884] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 955 with max blocks 39 with error 117 [ 777.151960][T15886] smpboot: CPU 1 is now offline [ 777.154338][T15884] EXT4-fs (sda1): This should not happen!! Data will be lost [ 777.154338][T15884] [ 777.204797][T15888] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 777.205663][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 777.205691][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 777.205852][T15880] ------------[ cut here ]------------ [ 777.207077][T15880] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 777.207092][T15880] WARNING: kernel/sched/sched.h:1575 at update_rq_clock+0x34a/0xd30, CPU#0: syz.3.1838/15880 [ 777.207156][T15880] Modules linked in: [ 777.207708][T15880] CPU: 0 UID: 0 PID: 15880 Comm: syz.3.1838 Tainted: G U L syzkaller #0 PREEMPT(full) [ 777.207756][T15880] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 777.207768][T15880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 777.207786][T15880] RIP: 0010:update_rq_clock+0x34a/0xd30 [ 777.207828][T15880] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 79 a6 09 a8 04 0f 84 9e fd ff ff 90 0f 0b 90 e9 95 fd ff ff 90 <0f> 0b 90 e9 51 fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 777.207857][T15880] RSP: 0018:ffffc9000f33f860 EFLAGS: 00010046 [ 777.207881][T15880] RAX: 0000000000000000 RBX: ffff8880b853ae00 RCX: 0000000000000001 [ 777.207900][T15880] RDX: 0000000000000046 RSI: ffffffff8dc27210 RDI: ffffffff8bfa95a0 [ 777.207920][T15880] RBP: ffffc9000f33fa08 R08: 0000000000000001 R09: 0000000000000001 [ 777.207939][T15880] R10: ffffffff90b84bd7 R11: 0000000000000000 R12: ffffffff90b87eb4 [ 777.207958][T15880] R13: ffff8880b853bc30 R14: ffff88801e2b3c80 R15: ffff8880b853ae00 [ 777.207979][T15880] FS: 00007f99bf56e6c0(0000) GS:ffff8881245c1000(0000) knlGS:0000000000000000 [ 777.208007][T15880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.208027][T15880] CR2: 0000001b30eb0ff8 CR3: 0000000030f54000 CR4: 00000000003526f0 [ 777.208047][T15880] Call Trace: [ 777.208056][T15880] [ 777.208074][T15880] __schedule+0x1b0f/0x5fa0 [ 777.208123][T15880] ? stack_trace_save+0x8e/0xc0 [ 777.208179][T15880] ? __pfx___schedule+0x10/0x10 [ 777.208229][T15880] ? mark_held_locks+0x40/0x70 [ 777.208275][T15880] preempt_schedule_irq+0x50/0x90 [ 777.208304][T15880] irqentry_exit+0x17b/0x670 [ 777.208337][T15880] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 777.208369][T15880] RIP: 0010:__sanitizer_cov_trace_pc+0x60/0x70 [ 777.208405][T15880] Code: c0 74 f1 8b 82 28 16 00 00 83 f8 02 75 e6 48 8b 8a 30 16 00 00 8b 92 2c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 cd 48 89 01 <48> 89 34 c1 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 [ 777.208434][T15880] RSP: 0018:ffffc9000f33fb18 EFLAGS: 00000287 [ 777.208456][T15880] RAX: 0000000000008322 RBX: 0000000080000000 RCX: ffffc90011e7a000 [ 777.208475][T15880] RDX: 0000000000080000 RSI: ffffffff81b845a8 RDI: ffff888079984000 [ 777.208495][T15880] RBP: ffff888079984000 R08: 0000000000000005 R09: 0000000000000180 [ 777.208513][T15880] R10: 00000000000000c0 R11: 0000000000000000 R12: 0000000000000000 [ 777.208531][T15880] R13: ffffc9000f33fbc0 R14: 0000000000000000 R15: ffff88809adb77fe [ 777.208561][T15880] ? __phys_addr+0x18/0x180 [ 777.208612][T15880] __phys_addr+0x18/0x180 [ 777.208657][T15880] kfree+0x6c/0x690 [ 777.208695][T15880] ? unix_destruct_scm+0x13a/0x190 [ 777.208741][T15880] ? skb_free_head+0x119/0x220 [ 777.208775][T15880] skb_free_head+0x119/0x220 [ 777.208811][T15880] skb_release_data+0x540/0x700 [ 777.208851][T15880] ? __pfx_unix_destruct_scm+0x10/0x10 [ 777.208898][T15880] sk_skb_reason_drop+0x102/0x1b0 [ 777.208941][T15880] unix_release_sock+0x759/0x1340 [ 777.208986][T15880] ? __pfx___might_resched+0x10/0x10 [ 777.209017][T15880] ? __pfx_unix_release_sock+0x10/0x10 [ 777.209064][T15880] ? down_write+0x146/0x1f0 [ 777.209104][T15880] unix_release+0x91/0xf0 [ 777.209148][T15880] __sock_release+0xb3/0x260 [ 777.209189][T15880] ? __pfx_sock_close+0x10/0x10 [ 777.209230][T15880] sock_close+0x1c/0x30 [ 777.209269][T15880] __fput+0x3ff/0xb40 [ 777.209319][T15880] task_work_run+0x150/0x240 [ 777.209349][T15880] ? __pfx_task_work_run+0x10/0x10 [ 777.209389][T15880] exit_to_user_mode_loop+0x100/0x4b0 [ 777.209432][T15880] ? rcu_is_watching+0x12/0xc0 [ 777.209463][T15880] do_syscall_64+0x4ea/0xf80 [ 777.209497][T15880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.209527][T15880] RIP: 0033:0x7f99c1b9bf79 [ 777.209550][T15880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.209579][T15880] RSP: 002b:00007f99bf56e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 777.209607][T15880] RAX: 0000000000000000 RBX: 00007f99c1e16360 RCX: 00007f99c1b9bf79 [ 777.209626][T15880] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 777.209644][T15880] RBP: 00007f99c1c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 777.209662][T15880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.209686][T15880] R13: 00007f99c1e163f8 R14: 00007f99c1e16360 R15: 00007fffa76ae948 [ 777.209725][T15880] [ 777.209739][T15880] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 777.209761][T15880] CPU: 0 UID: 0 PID: 15880 Comm: syz.3.1838 Tainted: G U L syzkaller #0 PREEMPT(full) [ 777.209805][T15880] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 777.209816][T15880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 777.209833][T15880] Call Trace: [ 777.209842][T15880] [ 777.209853][T15880] dump_stack_lvl+0x100/0x190 [ 777.209892][T15880] vpanic+0x20d/0x630 [ 777.209920][T15880] panic+0xd1/0xd1 [ 777.209946][T15880] ? __pfx_panic+0x10/0x10 [ 777.209989][T15880] check_panic_on_warn.cold+0x19/0x34 [ 777.210019][T15880] ? update_rq_clock+0x34a/0xd30 [ 777.210053][T15880] __warn.cold+0x191/0x2f8 [ 777.210085][T15880] __report_bug+0x296/0x3d0 [ 777.210126][T15880] ? update_rq_clock+0x34a/0xd30 [ 777.210165][T15880] ? __pfx___report_bug+0x10/0x10 [ 777.210209][T15880] ? __lock_acquire+0x4a5/0x2630 [ 777.210265][T15880] ? update_rq_clock+0x34a/0xd30 [ 777.210302][T15880] report_bug+0xb2/0x220 [ 777.210345][T15880] ? update_rq_clock+0x34a/0xd30 [ 777.210381][T15880] handle_bug+0x166/0x2a0 [ 777.210416][T15880] exc_invalid_op+0x17/0x50 [ 777.210450][T15880] asm_exc_invalid_op+0x1a/0x20 [ 777.210477][T15880] RIP: 0010:update_rq_clock+0x34a/0xd30 [ 777.210520][T15880] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 79 a6 09 a8 04 0f 84 9e fd ff ff 90 0f 0b 90 e9 95 fd ff ff 90 <0f> 0b 90 e9 51 fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 777.210548][T15880] RSP: 0018:ffffc9000f33f860 EFLAGS: 00010046 [ 777.210572][T15880] RAX: 0000000000000000 RBX: ffff8880b853ae00 RCX: 0000000000000001 [ 777.210591][T15880] RDX: 0000000000000046 RSI: ffffffff8dc27210 RDI: ffffffff8bfa95a0 [ 777.210611][T15880] RBP: ffffc9000f33fa08 R08: 0000000000000001 R09: 0000000000000001 [ 777.210630][T15880] R10: ffffffff90b84bd7 R11: 0000000000000000 R12: ffffffff90b87eb4 [ 777.210650][T15880] R13: ffff8880b853bc30 R14: ffff88801e2b3c80 R15: ffff8880b853ae00 [ 777.210702][T15880] __schedule+0x1b0f/0x5fa0 [ 777.210746][T15880] ? stack_trace_save+0x8e/0xc0 [ 777.210800][T15880] ? __pfx___schedule+0x10/0x10 [ 777.210850][T15880] ? mark_held_locks+0x40/0x70 [ 777.210895][T15880] preempt_schedule_irq+0x50/0x90 [ 777.210922][T15880] irqentry_exit+0x17b/0x670 [ 777.210950][T15880] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 777.210980][T15880] RIP: 0010:__sanitizer_cov_trace_pc+0x60/0x70 [ 777.211012][T15880] Code: c0 74 f1 8b 82 28 16 00 00 83 f8 02 75 e6 48 8b 8a 30 16 00 00 8b 92 2c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 cd 48 89 01 <48> 89 34 c1 c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 [ 777.211040][T15880] RSP: 0018:ffffc9000f33fb18 EFLAGS: 00000287 [ 777.211062][T15880] RAX: 0000000000008322 RBX: 0000000080000000 RCX: ffffc90011e7a000 [ 777.211081][T15880] RDX: 0000000000080000 RSI: ffffffff81b845a8 RDI: ffff888079984000 [ 777.211100][T15880] RBP: ffff888079984000 R08: 0000000000000005 R09: 0000000000000180 [ 777.211118][T15880] R10: 00000000000000c0 R11: 0000000000000000 R12: 0000000000000000 [ 777.211136][T15880] R13: ffffc9000f33fbc0 R14: 0000000000000000 R15: ffff88809adb77fe [ 777.211166][T15880] ? __phys_addr+0x18/0x180 [ 777.211214][T15880] __phys_addr+0x18/0x180 [ 777.211258][T15880] kfree+0x6c/0x690 [ 777.211290][T15880] ? unix_destruct_scm+0x13a/0x190 [ 777.211335][T15880] ? skb_free_head+0x119/0x220 [ 777.211367][T15880] skb_free_head+0x119/0x220 [ 777.211403][T15880] skb_release_data+0x540/0x700 [ 777.211443][T15880] ? __pfx_unix_destruct_scm+0x10/0x10 [ 777.211488][T15880] sk_skb_reason_drop+0x102/0x1b0 [ 777.211532][T15880] unix_release_sock+0x759/0x1340 [ 777.211577][T15880] ? __pfx___might_resched+0x10/0x10 [ 777.211609][T15880] ? __pfx_unix_release_sock+0x10/0x10 [ 777.211654][T15880] ? down_write+0x146/0x1f0 [ 777.211732][T15880] unix_release+0x91/0xf0 [ 777.211777][T15880] __sock_release+0xb3/0x260 [ 777.211819][T15880] ? __pfx_sock_close+0x10/0x10 [ 777.211860][T15880] sock_close+0x1c/0x30 [ 777.211898][T15880] __fput+0x3ff/0xb40 [ 777.211947][T15880] task_work_run+0x150/0x240 [ 777.211977][T15880] ? __pfx_task_work_run+0x10/0x10 [ 777.212017][T15880] exit_to_user_mode_loop+0x100/0x4b0 [ 777.212058][T15880] ? rcu_is_watching+0x12/0xc0 [ 777.212090][T15880] do_syscall_64+0x4ea/0xf80 [ 777.212123][T15880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.212158][T15880] RIP: 0033:0x7f99c1b9bf79 [ 777.212181][T15880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.212210][T15880] RSP: 002b:00007f99bf56e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 777.212237][T15880] RAX: 0000000000000000 RBX: 00007f99c1e16360 RCX: 00007f99c1b9bf79 [ 777.212256][T15880] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 777.212274][T15880] RBP: 00007f99c1c327e0 R08: 0000000000000000 R09: 0000000000000000 [ 777.212292][T15880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.212310][T15880] R13: 00007f99c1e163f8 R14: 00007f99c1e16360 R15: 00007fffa76ae948 [ 777.212350][T15880] [ 777.212428][T15880] Kernel Offset: disabled