last executing test programs: 8.393338491s ago: executing program 0 (id=2395): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000900)='/proc/sys/kernel/pid_max\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/arch_status\x00', 0x100382, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x40106f52, r1) 7.988748755s ago: executing program 2 (id=2398): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @rand_addr=0x40020000}, 0x55) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) capset$auto(0x0, 0x0) setsockopt$auto(r0, 0x10000000084, 0x8, 0x0, 0xc) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xb8ff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x29, 0x31, 0x0, 0x2) socket(0x2, 0x2, 0x0) socket(0x23, 0x6, 0x4) setsockopt$auto(0x4, 0x0, 0x480, 0xfffffffffffffffe, 0x0) r2 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r2, &(0x7f0000000140)={0x0, 0x2}, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto(r3, 0x2289, 0xbb1) 7.709210239s ago: executing program 0 (id=2399): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r0, &(0x7f0000000000)='system.posix_acl_access\x00') close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.4/usb5/descriptors\x00', 0x18b940, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7fffefff) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_FD={0x8, 0x17, r1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x400c004) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) io_pgetevents$auto(0x7, 0x9, 0x7ff, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1}}) setsockopt$auto(0x3, 0x6b, 0x7, 0x0, 0x4) sendfile$auto(0x1, 0x3, 0x0, 0xd551) writev$auto(0xffffffffffffffff, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) 7.511094501s ago: executing program 3 (id=2400): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) capget$auto(0x0, 0xfffffffffffffffe) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x200004, 0x3, 0x40eb2, 0xd, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) 6.705992497s ago: executing program 0 (id=2402): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) shutdown$auto(0x200000003, 0x2) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0x2, 0xb}, 0xfff}, 0x6, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r1, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) ioctl$auto(0x3, 0x541b, 0x10000000000402) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) 6.352912564s ago: executing program 1 (id=2403): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r0, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r2, 0x5, 0x0) getdents$auto(r2, &(0x7f00000004c0)={0x100, 0x7fffffffffffffff, 0x4}, 0x62d4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x646502, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) close_range$auto(0x2, 0xa, 0x0) 6.272450321s ago: executing program 3 (id=2404): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0x40000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0xc00009}, 0x5, 0x20000000) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) readv$auto(0x3, 0x0, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) socket(0xa, 0x5, 0x2) fcntl$auto(0x3, 0x8, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x1ff, 0x1000, 0x2beb80, 0x8001) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mprotect$auto(0x200000000000, 0x806121, 0x6) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r3, 0x28000) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x101800, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x890006, 0x3ff, 0x8000000008012, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 6.011115668s ago: executing program 2 (id=2405): mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, r0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000240)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r2, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x4, 0x7, 0x5, 0xf357}, {0x5000007, 0xd, 0x2, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) setsockopt$auto_SO_BUSY_POLL(r3, 0x5, 0x2e, &(0x7f0000000000)='--\x00', 0xcdda) 5.340257953s ago: executing program 1 (id=2406): mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0x2a8380, 0x0) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x840, 0xc) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x83, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/err\x00', 0x2, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x109500, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x60c40, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x105000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0x7, 0x4, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r1, 0x5408, 0x0) 5.173504601s ago: executing program 0 (id=2407): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) socket(0x2, 0x2, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_udc.6/udc/dummy_udc.6/state\x00', 0x2000, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) socket(0x29, 0x2, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 5.119380218s ago: executing program 2 (id=2408): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e10600"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) sysfs$auto(0x2, 0x10000000000002a, 0x81) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r0, 0x15, 0x0, 0x9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xfffffffffffffffc, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0201, 0x0) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0xc) write$auto_tomoyo_operations_securityfs_if(r1, &(0x7f00000000c0)="0a1b9a3c3e3efd6ea3d31791840bd70c00000082574c58e9865c42d76e1cadd6a7b7b426b7fcdc8e357080d70b5ab848770dc8f745d1c76eedaa12b9db4b519958c62bf692d2c9df7a9a2e8a556b30aeb5dfce3531f694dabdbc08f62cb37e5bc82e660cfd70f603b20416c7bf0e95345b899b4466bf6a70b1274b19782b41ac172a25e65be53e69c6369b67a4cbd6383a0d766de0287d84516183587530a17dbfd83a7678c6dad9917b91c7c9de3d61af452f90cf22400c4bcbb8410703641b3bccd058f9f2bad31f2ce81e389e210b34f43b4a5af377a6d4353989b4e9d49b2537b0a63a5cf6ae230d1296ef8b30c6bcdf7a6edf5c3258be46ae9d15fc0417e6b59bce357b9a8b05b4ad586c7b72db5ae55e", 0x113) mmap$auto(0x1000000072, 0x20009, 0x10000203, 0xeb1, 0xffffffffffffffff, 0x7fff) close_range$auto(0x2, 0x8, 0x0) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x3, 0x2, 0x8, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) epoll_create$auto(0x3e) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000001cc0)={{0x800, 0x10000, 0x5, 0x591, 0x7}, 0x6, 0x2, 0x6, "58e5218f9678796f35bf2803b1e21a54bddb4e340bb83340b899e51485a51568"}) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94B\xbb\x995\x1e\xf7@\xd8\xca\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea2\x1b\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8f\xb5\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) 5.063436794s ago: executing program 3 (id=2409): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket(0x2, 0x2, 0x0) openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/bluetooth/hci0/force_suspend\x00', 0x400002, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x2d, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x9, 0x1, 0xffffffdffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1a, 0x5, 0xfffffffd) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x18a65f3b, 0x6, 0xffffffffffffffff, 0xbaa}, &(0x7f0000000100)={0xf5, 0x4, 0x7, 0x4c}) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x400000001, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0xf, 0x7fffffff, 0x2, 0x6d3c, 0x9, 0x6, 0x6]}, 0x0) 4.851728911s ago: executing program 1 (id=2410): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r1, 0xc058560f, r1) 4.71133141s ago: executing program 0 (id=2411): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x80) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB="6a0051b1"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x10, 0x2, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/bonding/bond0\x00', 0x18b000, 0x0) pread64$auto(r1, 0x0, 0x8100000041, 0x413e) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0002000000000000000000008869e71e0000", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f00000008000400010000880800030004"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) capget$auto(&(0x7f0000000000)={0x4, 0xffffffffffffffff}, &(0x7f0000000040)={0x6, 0x2a, 0x401}) getpgid$auto(r2) prctl$auto_PR_SET_MM_ENV_END(0x36020000, 0xb, r2, 0x4, 0x80000009) r3 = socket(0xa, 0x1, 0x100) setsockopt$auto_SO_BSDCOMPAT(r3, 0x6, 0xe, &(0x7f0000000340)='/Eev/audio1\x00Vi\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000740)={0x30, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_HE_CAPABILITY={0x1a, 0x10d, "e2d1b2c3e0f4246df8a3901298f8aa701033e4ad8868"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x300) 3.906363683s ago: executing program 2 (id=2412): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000001080)=0xffffffff) fcntl$auto(r2, 0x5, r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) tee$auto(r1, r2, 0x8000000000000001, 0xfffffcc0) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000002b80), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r4, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20044000}, 0x8040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) write$auto(r6, 0x0, 0x3f00) ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, &(0x7f0000001040)=0x5) ioctl$auto_NVRAM_INIT(r2, 0x7040, 0x0) keyctl$auto(0x0, 0x0, 0x0, 0x0, 0x10000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/dummy_hcd.1/usb2/bNumInterfaces\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000040)=""/4096, 0x1000) read$auto(r2, 0x0, 0x7ffffffd) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x1000) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/options/event-fork\x00', 0x2000, 0x0) 3.905629847s ago: executing program 1 (id=2420): r0 = socket(0x2, 0x3, 0xa) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x16, 0x7, 0x2, 0x7, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x1c, r2, 0x705, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x38, 0xfc, "a3f3ed4a2518f58bb72809280aa15df957bde7822cb5f50fb93972c1b11144d98cb1aa979057f359ff53b6f0459519d2f805bf4f"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xb}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r3) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) futex$auto(0x0, 0x85, 0x2, 0x0, 0x0, 0x1) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) 3.253668648s ago: executing program 0 (id=2413): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r2 = socket(0x23, 0x5, 0x0) bind$auto(r2, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) socket(0x23, 0xa, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap$auto(0xff, 0x400008, 0x80df, 0xfffffffffffffffe, 0x2, 0x7) unshare$auto(0x40000080) 3.112173709s ago: executing program 3 (id=2414): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(r0, 0x8, 0x100000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000ff0000030004020000060007040080000300000000", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000300000008000200", @ANYRES32=0x0, @ANYBLOB="0800030001"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40008d0) socket(0x2, 0x3, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:03/uid\x00', 0x103080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000003800)=""/168, 0xa8) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_TIOCVHANGUP(0xffffffffffffffff, 0x5437, &(0x7f0000000240)="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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_CAPABILITY={0x15, 0x10d, "8223d208b7dd3463a3a936688073d724bb"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x759, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000005, 0x384, 0x9, 0xb10, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x196fc46e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fa, 0xd) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffff7effffd05, &(0x7f00000001c0)) 2.043857297s ago: executing program 1 (id=2415): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram2\x00', 0xc642, 0x0) write$auto(0x3, 0x0, 0xfffffdef) socket(0xa, 0x1, 0x100) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x0, 0x9) rseq$auto(&(0x7f0000000300)={0xe, 0xffffffff, 0x1, 0x106, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) rseq$auto(&(0x7f0000000140)={0x35, 0xa41, 0x1c186f2b, 0x4, 0x1, 0x9, "0387712376a0beaa7069937193ba4f73aec3d5239f935020c6a13ab22ec45a1a549defc89265e6d2c1cfbe59c66e6860d9f668153ab25ce5234a7402cc57432388abae45eee1d61fcd41f309ef7f26a70f7a1db1c0fa653b323fd4e62f168a6e1ee084847957516c8ecee8a136e5427cfde05de464ac031dff482802c448b3e3bc0198da363dcaae1abb2ccd310706eb062ac3e6c62765ed7d5f88c1a0f79ca4818f67f11f21254f3200d703075dcc13cfcca04498b0711f3a15867d4271664f8706dcce174dea35611f5727b47138d09d33f75c7dfc0ba72562c0b653f855b9b189b97662fe64c1aaef00272a3cbe13f4b2105be94b"}, 0x0, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x254, 0x9}, 0x20000007}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2, 0x2, 0x1) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x1b, r1, 0x10000}, 0x10) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x81}, 0x10, 0x0, 0x0, 0x8) 768.393364ms ago: executing program 2 (id=2416): r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x10, 0x2, 0xa) mount$auto(&(0x7f00000002c0)='ip6erspan0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='^.#-.$\x00', 0x800000000000, &(0x7f0000000440)="ab7c5612aeab6242faed87d1fd2b3375921c5401ca96ce4083fec7d85a15143b29d8934cac2c4e6840f523651401f322c526593e1d4223520fef72354e5b2f8b2426a0615c40e2e95fd35272a613c0b01f3f90a350a666") setsockopt$auto(r1, 0x104000000000010e, 0x1, 0x0, 0x16) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) ioperm$auto(0x7, 0x71, 0x863) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r4, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r3) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf250600000008000100", @ANYRES32=0x0, @ANYBLOB="2e453b2b86eb6609ac6b21859c95ef1c4960514a70c8613b16ee0a1d9d07d2fe7286fdd02c7145b82ccedbe325c98b019cf0fe4866fabde884a9e94061d34e65ee55d80c6cb3dc6493676626e1014705804fa60887b6f97ef95b7f74d7f7fb5cd2"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x400c8d4) iopl$auto(0x3) umask$auto(0xffff) ioperm$auto(0x5, 0x3432, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/msr/events/tsc\x00', 0x305501, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000140)=""/213, 0xd5) 500.441761ms ago: executing program 1 (id=2417): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) r1 = getsockopt$auto(r0, 0x0, 0x1, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x900, 0x0) mmap$auto(0x7, 0x580f, 0x2, 0x8000000008011, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8000, 0xe9) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x3, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto(0x3, 0x560a, 0x38) write$auto(0x1, 0x0, 0x80000000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x109180, 0x0) pread64$auto(r2, 0x0, 0x682c3390, 0xcff) write$auto(r1, 0x0, 0x100000abd9) munmap$auto(0x8000, 0xffffffff) 287.191129ms ago: executing program 3 (id=2418): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x15, 0x5, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x5, 0x7, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1, 0x3}, 0x55) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x8, &(0x7f0000000100)={0x0, 0xfc2}, 0x4, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 29.932366ms ago: executing program 3 (id=2419): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x1, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x561642, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) unshare$auto(0x8000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/clk/clk_orphan_summary\x00', 0x80, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28282, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x18, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x0, 0x2, 0xfffffffd, 0x0) r0 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x1, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xb, 0x5}, 0x7) 0s ago: executing program 2 (id=2421): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r0, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r2, 0x5, 0x0) getdents$auto(r2, &(0x7f00000004c0)={0x100, 0x7fffffffffffffff, 0x4}, 0x62d4) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x646502, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x630001, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) close_range$auto(0x2, 0xa, 0x0) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        [ 582.680189][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 3 with max blocks 1 with error 117 [ 582.765719][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 582.765719][ T36] [ 584.273388][ T30] audit: type=1804 audit(4294967418.975:26): pid=14199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2062" name="/newroot/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=1293 res=1 errno=0 [ 585.472620][T14212] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 585.482282][T14212] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2067'. [ 587.337877][T14233] can0: slcan on ptm0. [ 587.509686][T14226] can0 (unregistered): slcan off ptm0. [ 589.597762][T14264] FAULT_INJECTION: forcing a failure. [ 589.597762][T14264] name failslab, interval 1, probability 0, space 0, times 0 [ 589.647098][T14264] CPU: 1 UID: 0 PID: 14264 Comm: syz.3.2080 Not tainted syzkaller #0 PREEMPT(full) [ 589.647135][T14264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 589.647151][T14264] Call Trace: [ 589.647161][T14264] [ 589.647172][T14264] dump_stack_lvl+0x16c/0x1f0 [ 589.647216][T14264] should_fail_ex+0x512/0x640 [ 589.647252][T14264] ? __kmalloc_noprof+0xbf/0x510 [ 589.647295][T14264] ? lsm_blob_alloc+0x68/0x90 [ 589.647318][T14264] should_failslab+0xc2/0x120 [ 589.647353][T14264] __kmalloc_noprof+0xd2/0x510 [ 589.647391][T14264] lsm_blob_alloc+0x68/0x90 [ 589.647420][T14264] security_sk_alloc+0x30/0x270 [ 589.647450][T14264] sk_prot_alloc+0x1c7/0x2a0 [ 589.647482][T14264] sk_alloc+0x36/0xc20 [ 589.647521][T14264] __netlink_create+0x5e/0x2c0 [ 589.647552][T14264] ? __wake_up+0x3f/0x60 [ 589.647582][T14264] netlink_create+0x39e/0x620 [ 589.647615][T14264] ? __pfx_genl_bind+0x10/0x10 [ 589.647639][T14264] ? __pfx_genl_unbind+0x10/0x10 [ 589.647661][T14264] ? __pfx_genl_release+0x10/0x10 [ 589.647691][T14264] __sock_create+0x338/0x8d0 [ 589.647726][T14264] __sys_socket+0x14d/0x260 [ 589.647756][T14264] ? __pfx___sys_socket+0x10/0x10 [ 589.647786][T14264] ? xfd_validate_state+0x61/0x180 [ 589.647822][T14264] ? __pfx___x64_sys_mount+0x10/0x10 [ 589.647862][T14264] __x64_sys_socket+0x72/0xb0 [ 589.647891][T14264] ? lockdep_hardirqs_on+0x7c/0x110 [ 589.647927][T14264] do_syscall_64+0xcd/0x4c0 [ 589.647968][T14264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.647996][T14264] RIP: 0033:0x7ff329b8eec9 [ 589.648017][T14264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.648042][T14264] RSP: 002b:00007ff32a941038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 589.648069][T14264] RAX: ffffffffffffffda RBX: 00007ff329de5fa0 RCX: 00007ff329b8eec9 [ 589.648087][T14264] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 589.648104][T14264] RBP: 00007ff329c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 589.648120][T14264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.648136][T14264] R13: 00007ff329de6038 R14: 00007ff329de5fa0 R15: 00007fff09e92828 [ 589.648168][T14264] [ 590.279844][ T5873] Bluetooth: hci1: hcon ffff888034610000 sent 1 < count 256 [ 590.376136][T14273] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2082'. [ 590.456090][T14273] : renamed from bond0 (while UP) [ 591.150692][T14286] Invalid ELF header magic: != ELF [ 592.168292][ T5873] Bluetooth: hci1: unexpected event 0x10 length: 440 > 1 [ 592.170020][ T5863] Bluetooth: hci1: hardware error 0x00 [ 593.094359][T14296] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 594.207143][ T5863] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 595.998007][T14361] usb usb15: usbfs: process 14361 (syz.1.2097) did not claim interface 0 before use [ 599.116140][T14408] FAULT_INJECTION: forcing a failure. [ 599.116140][T14408] name failslab, interval 1, probability 0, space 0, times 0 [ 599.129482][T14408] CPU: 1 UID: 0 PID: 14408 Comm: syz.1.2108 Not tainted syzkaller #0 PREEMPT(full) [ 599.129516][T14408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 599.129533][T14408] Call Trace: [ 599.129542][T14408] [ 599.129554][T14408] dump_stack_lvl+0x16c/0x1f0 [ 599.129600][T14408] should_fail_ex+0x512/0x640 [ 599.129643][T14408] should_failslab+0xc2/0x120 [ 599.129677][T14408] __kmalloc_cache_noprof+0x6a/0x3e0 [ 599.129707][T14408] ? tipc_nametbl_insert_publ+0x700/0x1720 [ 599.129751][T14408] tipc_nametbl_insert_publ+0x700/0x1720 [ 599.129795][T14408] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 599.129833][T14408] ? net_generic+0xea/0x2a0 [ 599.129877][T14408] tipc_nametbl_publish+0x137/0x280 [ 599.129923][T14408] tipc_sk_publish+0x1d8/0x430 [ 599.129949][T14408] ? __pfx_tipc_sk_publish+0x10/0x10 [ 599.129979][T14408] ? __local_bh_enable_ip+0xa4/0x120 [ 599.130014][T14408] tipc_sk_bind+0x16f/0x380 [ 599.130041][T14408] tipc_bind+0x190/0x2a0 [ 599.130070][T14408] __sys_bind+0x1a4/0x260 [ 599.130104][T14408] ? __pfx___sys_bind+0x10/0x10 [ 599.130149][T14408] ? xfd_validate_state+0x61/0x180 [ 599.130185][T14408] ? __pfx_do_writev+0x10/0x10 [ 599.130221][T14408] __x64_sys_bind+0x72/0xb0 [ 599.130251][T14408] ? lockdep_hardirqs_on+0x7c/0x110 [ 599.130288][T14408] do_syscall_64+0xcd/0x4c0 [ 599.130329][T14408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.130356][T14408] RIP: 0033:0x7f3d8d98eec9 [ 599.130377][T14408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.130412][T14408] RSP: 002b:00007f3d8e837038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 599.130439][T14408] RAX: ffffffffffffffda RBX: 00007f3d8dbe6090 RCX: 00007f3d8d98eec9 [ 599.130458][T14408] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000006 [ 599.130475][T14408] RBP: 00007f3d8da11f91 R08: 0000000000000000 R09: 0000000000000000 [ 599.130492][T14408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.130508][T14408] R13: 00007f3d8dbe6128 R14: 00007f3d8dbe6090 R15: 00007fffecd6e5c8 [ 599.130546][T14408] [ 599.130556][T14408] tipc: Failed to bind to 65,0,0 [ 599.598059][T14421] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2112'. [ 599.739518][T14428] netlink: 'syz.2.2112': attribute type 1 has an invalid length. [ 599.747487][T14428] netlink: 'syz.2.2112': attribute type 2 has an invalid length. [ 599.755222][T14428] netlink: 'syz.2.2112': attribute type 7 has an invalid length. [ 599.811132][T14428] netlink: 274 bytes leftover after parsing attributes in process `syz.2.2112'. [ 601.197125][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 946 with max blocks 10 with error 117 [ 601.237107][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 601.237107][ T12] [ 601.658169][T14457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2119'. [ 601.750966][T14457] netlink: 354 bytes leftover after parsing attributes in process `syz.2.2119'. [ 601.790147][T14456] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 603.977350][ T10] smpboot: CPU 1 is now offline [ 606.725987][T14527] netlink: 306 bytes leftover after parsing attributes in process `syz.2.2134'. [ 607.236812][T14535] random: crng reseeded on system resumption [ 608.852197][T14553] zswap: compressor not available [ 611.010866][T14592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2149'. [ 611.061411][T14592] netlink: 'syz.1.2149': attribute type 1 has an invalid length. [ 611.094501][T14592] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2149'. [ 613.456089][T14595] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 613.826007][T14616] zswap: compressor not available [ 614.832411][T14631] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 615.041728][T14647] FAULT_INJECTION: forcing a failure. [ 615.041728][T14647] name failslab, interval 1, probability 0, space 0, times 0 [ 615.122349][T14647] CPU: 0 UID: 0 PID: 14647 Comm: syz.3.2160 Not tainted syzkaller #0 PREEMPT(full) [ 615.122372][T14647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 615.122383][T14647] Call Trace: [ 615.122389][T14647] [ 615.122395][T14647] dump_stack_lvl+0x16c/0x1f0 [ 615.122422][T14647] should_fail_ex+0x512/0x640 [ 615.122444][T14647] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 615.122464][T14647] should_failslab+0xc2/0x120 [ 615.122483][T14647] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 615.122500][T14647] ? locks_get_lock_context+0x243/0x410 [ 615.122525][T14647] locks_get_lock_context+0x243/0x410 [ 615.122548][T14647] generic_setlease+0x5e7/0x1300 [ 615.122565][T14647] ? find_held_lock+0x2b/0x80 [ 615.122581][T14647] ? __pfx_generic_setlease+0x10/0x10 [ 615.122600][T14647] kernel_setlease+0x106/0x140 [ 615.122614][T14647] vfs_setlease+0x258/0x2d0 [ 615.122629][T14647] fcntl_setlease+0x3ed/0x5a0 [ 615.122643][T14647] ? __pfx_fcntl_setlease+0x10/0x10 [ 615.122659][T14647] ? do_futex+0x122/0x350 [ 615.122678][T14647] ? __pfx_do_futex+0x10/0x10 [ 615.122697][T14647] do_fcntl+0x751/0x15a0 [ 615.122717][T14647] ? __pfx_do_fcntl+0x10/0x10 [ 615.122736][T14647] ? __x64_sys_futex+0x1e0/0x4c0 [ 615.122752][T14647] ? __x64_sys_futex+0x1e9/0x4c0 [ 615.122772][T14647] ? tomoyo_file_fcntl+0x6c/0xc0 [ 615.122789][T14647] __x64_sys_fcntl+0x163/0x200 [ 615.122811][T14647] do_syscall_64+0xcd/0x4c0 [ 615.122833][T14647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.122848][T14647] RIP: 0033:0x7ff329b8eec9 [ 615.122860][T14647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.122882][T14647] RSP: 002b:00007ff32a941038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 615.122897][T14647] RAX: ffffffffffffffda RBX: 00007ff329de5fa0 RCX: 00007ff329b8eec9 [ 615.122907][T14647] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000001 [ 615.122916][T14647] RBP: 00007ff329c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 615.122925][T14647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.122934][T14647] R13: 00007ff329de6038 R14: 00007ff329de5fa0 R15: 00007fff09e92828 [ 615.122953][T14647] [ 615.357479][T14649] Invalid ELF header magic: != ELF [ 616.739963][T14669] nvme_fabrics: missing parameter 'transport=%s' [ 616.820020][T14669] nvme_fabrics: missing parameter 'nqn=%s' [ 617.871098][T14695] FAULT_INJECTION: forcing a failure. [ 617.871098][T14695] name fail_futex, interval 1, probability 0, space 0, times 0 [ 617.905274][T14695] CPU: 0 UID: 0 PID: 14695 Comm: syz.2.2173 Not tainted syzkaller #0 PREEMPT(full) [ 617.905295][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 617.905305][T14695] Call Trace: [ 617.905310][T14695] [ 617.905317][T14695] dump_stack_lvl+0x16c/0x1f0 [ 617.905343][T14695] should_fail_ex+0x512/0x640 [ 617.905368][T14695] get_futex_key+0x1d0/0x1560 [ 617.905388][T14695] ? __pfx_get_futex_key+0x10/0x10 [ 617.905411][T14695] futex_wait_setup+0x9d/0x550 [ 617.905436][T14695] __futex_wait+0x194/0x2f0 [ 617.905458][T14695] ? __pfx___futex_wait+0x10/0x10 [ 617.905481][T14695] ? __pfx_futex_wake_mark+0x10/0x10 [ 617.905504][T14695] ? futex_private_hash_put+0x176/0x300 [ 617.905524][T14695] ? futex_private_hash_put+0x18a/0x300 [ 617.905542][T14695] futex_wait+0xe8/0x380 [ 617.905562][T14695] ? __pfx_futex_wait+0x10/0x10 [ 617.905594][T14695] ? __fget_files+0x204/0x3c0 [ 617.905615][T14695] do_futex+0x229/0x350 [ 617.905633][T14695] ? __pfx_do_futex+0x10/0x10 [ 617.905651][T14695] ? fdget+0x187/0x210 [ 617.905666][T14695] ? __sys_sendmsg+0x18c/0x220 [ 617.905689][T14695] __x64_sys_futex+0x1e0/0x4c0 [ 617.905709][T14695] ? __pfx___x64_sys_futex+0x10/0x10 [ 617.905734][T14695] do_syscall_64+0xcd/0x4c0 [ 617.905756][T14695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.905771][T14695] RIP: 0033:0x7f2e5098eec9 [ 617.905783][T14695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.905797][T14695] RSP: 002b:00007f2e4ebf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 617.905812][T14695] RAX: ffffffffffffffda RBX: 00007f2e50be5fa8 RCX: 00007f2e5098eec9 [ 617.905822][T14695] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2e50be5fa8 [ 617.905830][T14695] RBP: 00007f2e50be5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 617.905839][T14695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.905847][T14695] R13: 00007f2e50be6038 R14: 00007ffd35a51ea0 R15: 00007ffd35a51f88 [ 617.905866][T14695] [ 618.108637][ C0] vkms_vblank_simulate: vblank timer overrun [ 620.338118][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2179'. [ 620.696842][T14733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2180'. [ 621.001502][T14737] ubi0: attaching mtd0 [ 621.030417][T14737] ubi0: scanning is finished [ 621.067819][T14737] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 621.317819][T14737] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 621.388723][T14733] team0: Port device team_slave_1 removed [ 622.618049][T14734] kexec: Could not allocate control_code_buffer [ 623.012243][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.019817][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.519384][T14754] binder: 14753:14754 ioctl c018620c 0 returned -22 [ 624.509517][T14785] FAULT_INJECTION: forcing a failure. [ 624.509517][T14785] name failslab, interval 1, probability 0, space 0, times 0 [ 624.727850][T14785] CPU: 0 UID: 0 PID: 14785 Comm: syz.3.2192 Not tainted syzkaller #0 PREEMPT(full) [ 624.727872][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 624.727885][T14785] Call Trace: [ 624.727891][T14785] [ 624.727897][T14785] dump_stack_lvl+0x16c/0x1f0 [ 624.727924][T14785] should_fail_ex+0x512/0x640 [ 624.727952][T14785] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 624.727971][T14785] should_failslab+0xc2/0x120 [ 624.727991][T14785] __kmalloc_cache_noprof+0x6a/0x3e0 [ 624.728006][T14785] ? drm_atomic_helper_setup_commit+0x73c/0x15d0 [ 624.728023][T14785] ? drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 624.728042][T14785] drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 624.728067][T14785] drm_atomic_helper_commit+0xa9/0x380 [ 624.728084][T14785] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 624.728101][T14785] drm_atomic_commit+0x231/0x300 [ 624.728118][T14785] ? __pfx_drm_atomic_commit+0x10/0x10 [ 624.728134][T14785] ? __pfx___drm_printfn_info+0x10/0x10 [ 624.728157][T14785] ? drm_client_rotation+0x4da/0x6a0 [ 624.728177][T14785] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 624.728201][T14785] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 624.728219][T14785] ? rcu_is_watching+0x12/0xc0 [ 624.728253][T14785] drm_client_modeset_commit_locked+0x14d/0x580 [ 624.728274][T14785] drm_client_modeset_commit+0x4f/0x80 [ 624.728292][T14785] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 624.728310][T14785] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 624.728332][T14785] drm_fbdev_client_restore+0x2c/0x40 [ 624.728353][T14785] drm_client_dev_restore+0x1f3/0x2a0 [ 624.728374][T14785] drm_release+0x2c4/0x360 [ 624.728391][T14785] ? __pfx_drm_release+0x10/0x10 [ 624.728405][T14785] __fput+0x3ff/0xb70 [ 624.728430][T14785] task_work_run+0x14d/0x240 [ 624.728452][T14785] ? __pfx_task_work_run+0x10/0x10 [ 624.728474][T14785] ? __pfx___do_sys_close_range+0x10/0x10 [ 624.728496][T14785] exit_to_user_mode_loop+0xeb/0x110 [ 624.728517][T14785] do_syscall_64+0x41c/0x4c0 [ 624.728541][T14785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.728556][T14785] RIP: 0033:0x7ff329b8eec9 [ 624.728568][T14785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.728582][T14785] RSP: 002b:00007ff32a941038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 624.728597][T14785] RAX: 0000000000000000 RBX: 00007ff329de5fa0 RCX: 00007ff329b8eec9 [ 624.728607][T14785] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 624.728615][T14785] RBP: 00007ff329c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 624.728625][T14785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.728634][T14785] R13: 00007ff329de6038 R14: 00007ff329de5fa0 R15: 00007fff09e92828 [ 624.728654][T14785] [ 628.446652][ T5863] Bluetooth: hci3: unexpected event 0x30 length: 47 > 3 [ 628.920503][T14862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2204'. [ 629.806509][T14870] FAULT_INJECTION: forcing a failure. [ 629.806509][T14870] name failslab, interval 1, probability 0, space 0, times 0 [ 629.858762][T14870] CPU: 0 UID: 0 PID: 14870 Comm: syz.0.2207 Not tainted syzkaller #0 PREEMPT(full) [ 629.858784][T14870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 629.858794][T14870] Call Trace: [ 629.858800][T14870] [ 629.858806][T14870] dump_stack_lvl+0x16c/0x1f0 [ 629.858832][T14870] should_fail_ex+0x512/0x640 [ 629.858854][T14870] ? fs_reclaim_acquire+0xae/0x150 [ 629.858877][T14870] should_failslab+0xc2/0x120 [ 629.858897][T14870] __kmalloc_cache_noprof+0x6a/0x3e0 [ 629.858913][T14870] ? kobject_create_and_add+0x4a/0xf0 [ 629.858931][T14870] kobject_create_and_add+0x4a/0xf0 [ 629.858946][T14870] __add_disk+0x709/0xf00 [ 629.858971][T14870] add_disk_fwnode+0x13f/0x5d0 [ 629.858994][T14870] loop_add+0x903/0xb70 [ 629.859012][T14870] ? __pfx_loop_add+0x10/0x10 [ 629.859041][T14870] ? find_held_lock+0x2b/0x80 [ 629.859059][T14870] loop_control_ioctl+0x13e/0x630 [ 629.859078][T14870] ? __pfx_loop_control_ioctl+0x10/0x10 [ 629.859099][T14870] ? __pfx_loop_control_ioctl+0x10/0x10 [ 629.859117][T14870] __x64_sys_ioctl+0x18b/0x210 [ 629.859141][T14870] do_syscall_64+0xcd/0x4c0 [ 629.859163][T14870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.859177][T14870] RIP: 0033:0x7fa486f8eec9 [ 629.859190][T14870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.859204][T14870] RSP: 002b:00007fa4851f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.859218][T14870] RAX: ffffffffffffffda RBX: 00007fa4871e5fa0 RCX: 00007fa486f8eec9 [ 629.859227][T14870] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 629.859236][T14870] RBP: 00007fa487011f91 R08: 0000000000000000 R09: 0000000000000000 [ 629.859245][T14870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.859253][T14870] R13: 00007fa4871e6038 R14: 00007fa4871e5fa0 R15: 00007ffe328a5068 [ 629.859272][T14870] [ 630.255622][T14875] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2210'. [ 630.323994][T14883] sock: sock_timestamping_bind_phc: sock not bind to device [ 631.133112][T14883] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 631.148932][T14883] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 631.218857][T14902] vivid-007: ================= START STATUS ================= [ 631.296209][T14902] vivid-007: Enable Output Cropping: true [ 631.372110][T14902] vivid-007: Enable Output Composing: true [ 631.421251][T14902] vivid-007: Enable Output Scaler: true [ 631.459894][T14902] vivid-007: Tx RGB Quantization Range: Automatic [ 631.506939][T14902] vivid-007: Transmit Mode: HDMI [ 631.545340][T14902] vivid-007: Hotplug Present: 0x00000000 [ 631.605934][T14902] vivid-007: RxSense Present: 0x00000000 [ 631.658757][T14902] vivid-007: EDID Present: 0x00000000 [ 631.704122][T14902] vivid-007: ================== END STATUS ================== [ 632.219864][T14921] __vm_enough_memory: pid: 14921, comm: syz.3.2219, bytes: 4398046511104 not enough memory for the allocation [ 632.244074][T14917] Invalid ELF header magic: != ELF [ 632.687323][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 633.167943][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 633.261506][T14946] ima: policy update failed [ 633.297805][ T30] audit: type=1802 audit(4294967467.995:27): pid=14946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2225" res=0 errno=0 [ 633.315703][T14946] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2225'. [ 633.436516][T14943] zswap: compressor û not available [ 634.201640][T14960] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2229'. [ 634.562384][ T30] audit: type=1800 audit(4294967469.265:28): pid=14972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2231" name="features" dev="configfs" ino=55240 res=0 errno=0 [ 636.871747][T14996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2236'. [ 636.978035][T14996] geneve1: entered promiscuous mode [ 636.983255][T14996] geneve1: entered allmulticast mode [ 637.071476][T15000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2236'. [ 637.120778][T14965] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 637.419231][T15007] netlink: zone id is out of range [ 637.446624][T15007] netlink: zone id is out of range [ 637.454989][T15001] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 637.480598][T15007] netlink: zone id is out of range [ 637.485707][T15007] netlink: zone id is out of range [ 637.528807][T15007] netlink: zone id is out of range [ 637.554308][T15007] netlink: zone id is out of range [ 637.589346][T15007] netlink: zone id is out of range [ 637.604987][T15007] netlink: zone id is out of range [ 637.626701][T15007] netlink: zone id is out of range [ 637.651641][T15007] netlink: zone id is out of range [ 638.858425][T15037] FAULT_INJECTION: forcing a failure. [ 638.858425][T15037] name failslab, interval 1, probability 0, space 0, times 0 [ 638.871358][T15037] CPU: 0 UID: 0 PID: 15037 Comm: syz.3.2245 Not tainted syzkaller #0 PREEMPT(full) [ 638.871378][T15037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 638.871388][T15037] Call Trace: [ 638.871393][T15037] [ 638.871400][T15037] dump_stack_lvl+0x16c/0x1f0 [ 638.871426][T15037] should_fail_ex+0x512/0x640 [ 638.871449][T15037] ? tipc_conn_lookup+0xd0/0x250 [ 638.871470][T15037] should_failslab+0xc2/0x120 [ 638.871489][T15037] __kmalloc_cache_noprof+0x6a/0x3e0 [ 638.871506][T15037] ? tipc_topsrv_queue_evt+0x126/0x3f0 [ 638.871527][T15037] tipc_topsrv_queue_evt+0x126/0x3f0 [ 638.871548][T15037] tipc_sub_report_overlap+0x547/0x9b0 [ 638.871571][T15037] tipc_nametbl_insert_publ+0xe0a/0x1720 [ 638.871609][T15037] tipc_nametbl_publish+0x137/0x280 [ 638.871634][T15037] tipc_sk_publish+0x1d8/0x430 [ 638.871649][T15037] ? __pfx_tipc_sk_publish+0x10/0x10 [ 638.871668][T15037] tipc_setsockopt+0x991/0xdb0 [ 638.871685][T15037] ? __pfx_tipc_setsockopt+0x10/0x10 [ 638.871707][T15037] ? __pfx_tipc_setsockopt+0x10/0x10 [ 638.871723][T15037] do_sock_setsockopt+0xf0/0x1d0 [ 638.871741][T15037] __sys_setsockopt+0x120/0x1a0 [ 638.871764][T15037] __x64_sys_setsockopt+0xbd/0x160 [ 638.871783][T15037] ? do_syscall_64+0x91/0x4c0 [ 638.871803][T15037] ? lockdep_hardirqs_on+0x7c/0x110 [ 638.871823][T15037] do_syscall_64+0xcd/0x4c0 [ 638.871846][T15037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.871860][T15037] RIP: 0033:0x7ff329b8eec9 [ 638.871872][T15037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.871886][T15037] RSP: 002b:00007ff32a941038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 638.871900][T15037] RAX: ffffffffffffffda RBX: 00007ff329de5fa0 RCX: 00007ff329b8eec9 [ 638.871909][T15037] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 638.871918][T15037] RBP: 00007ff329c11f91 R08: 0000000000000014 R09: 0000000000000000 [ 638.871926][T15037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.871935][T15037] R13: 00007ff329de6038 R14: 00007ff329de5fa0 R15: 00007fff09e92828 [ 638.871954][T15037] [ 641.231394][T15072] FAULT_INJECTION: forcing a failure. [ 641.231394][T15072] name failslab, interval 1, probability 0, space 0, times 0 [ 641.286289][T15072] CPU: 0 UID: 0 PID: 15072 Comm: syz.3.2253 Not tainted syzkaller #0 PREEMPT(full) [ 641.286311][T15072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 641.286320][T15072] Call Trace: [ 641.286326][T15072] [ 641.286333][T15072] dump_stack_lvl+0x16c/0x1f0 [ 641.286360][T15072] should_fail_ex+0x512/0x640 [ 641.286383][T15072] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 641.286403][T15072] should_failslab+0xc2/0x120 [ 641.286423][T15072] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 641.286440][T15072] ? ima_d_path+0xbd/0x2a0 [ 641.286467][T15072] ima_d_path+0xbd/0x2a0 [ 641.286484][T15072] ? __pfx_ima_d_path+0x10/0x10 [ 641.286505][T15072] ? lockdep_init_map_type+0x5c/0x280 [ 641.286526][T15072] ? ima_inode_get+0x39e/0x580 [ 641.286543][T15072] process_measurement+0x175f/0x23e0 [ 641.286562][T15072] ? __lock_acquire+0x62e/0x1ce0 [ 641.286581][T15072] ? __pfx_process_measurement+0x10/0x10 [ 641.286604][T15072] ? find_held_lock+0x2b/0x80 [ 641.286634][T15072] ? futex_private_hash_put+0x18a/0x300 [ 641.286656][T15072] ima_file_mmap+0x1b1/0x1d0 [ 641.286671][T15072] ? __pfx_ima_file_mmap+0x10/0x10 [ 641.286690][T15072] security_mmap_file+0x88c/0x990 [ 641.286711][T15072] vm_mmap_pgoff+0xec/0x470 [ 641.286732][T15072] ? find_held_lock+0x2b/0x80 [ 641.286745][T15072] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 641.286769][T15072] ? __fget_files+0x20e/0x3c0 [ 641.286788][T15072] ksys_mmap_pgoff+0x32c/0x5c0 [ 641.286812][T15072] __x64_sys_mmap+0x125/0x190 [ 641.286835][T15072] do_syscall_64+0xcd/0x4c0 [ 641.286858][T15072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.286873][T15072] RIP: 0033:0x7ff329b8eec9 [ 641.286885][T15072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.286899][T15072] RSP: 002b:00007ff32a941038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 641.286914][T15072] RAX: ffffffffffffffda RBX: 00007ff329de5fa0 RCX: 00007ff329b8eec9 [ 641.286924][T15072] RDX: 00000000000003ff RSI: 0000000000000001 RDI: 000000000000f000 [ 641.286933][T15072] RBP: 00007ff329c11f91 R08: 0000000000000009 R09: 0000000000000000 [ 641.286942][T15072] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 641.286954][T15072] R13: 00007ff329de6038 R14: 00007ff329de5fa0 R15: 00007fff09e92828 [ 641.286972][T15072] [ 642.291400][T15092] bridge0: port 3(dummy0) entered blocking state [ 642.310394][T15092] bridge0: port 3(dummy0) entered disabled state [ 642.342427][T15092] dummy0: entered allmulticast mode [ 642.358433][T15092] dummy0: entered promiscuous mode [ 642.389435][T15092] bridge0: port 3(dummy0) entered blocking state [ 642.395888][T15092] bridge0: port 3(dummy0) entered forwarding state [ 642.436085][ T30] audit: type=1804 audit(4294967477.135:29): pid=15072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2253" name="file0" dev="tmpfs" ino=2883 res=1 errno=0 [ 643.096218][T15101] FAULT_INJECTION: forcing a failure. [ 643.096218][T15101] name failslab, interval 1, probability 0, space 0, times 0 [ 643.188261][T15101] CPU: 0 UID: 0 PID: 15101 Comm: syz.0.2259 Not tainted syzkaller #0 PREEMPT(full) [ 643.188284][T15101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 643.188293][T15101] Call Trace: [ 643.188300][T15101] [ 643.188306][T15101] dump_stack_lvl+0x16c/0x1f0 [ 643.188332][T15101] should_fail_ex+0x512/0x640 [ 643.188355][T15101] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 643.188375][T15101] should_failslab+0xc2/0x120 [ 643.188394][T15101] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 643.188412][T15101] ? __kernfs_iattrs+0x124/0x3e0 [ 643.188431][T15101] __kernfs_iattrs+0x124/0x3e0 [ 643.188448][T15101] ? __pfx___kernfs_iattrs+0x10/0x10 [ 643.188466][T15101] ? down_write+0x14d/0x200 [ 643.188478][T15101] ? inode_newsize_ok+0x13b/0x200 [ 643.188502][T15101] __kernfs_setattr+0x4d/0x3c0 [ 643.188529][T15101] kernfs_iop_setattr+0xda/0x120 [ 643.188548][T15101] ? __pfx_kernfs_iop_setattr+0x10/0x10 [ 643.188565][T15101] notify_change+0x6a6/0x1230 [ 643.188593][T15101] do_truncate+0x1d7/0x230 [ 643.188611][T15101] ? __pfx_do_truncate+0x10/0x10 [ 643.188635][T15101] ? mnt_get_write_access+0x20c/0x300 [ 643.188658][T15101] vfs_truncate+0x5d6/0x6e0 [ 643.188676][T15101] ? __pfx_vfs_truncate+0x10/0x10 [ 643.188694][T15101] ? putname+0x154/0x1a0 [ 643.188716][T15101] __x64_sys_truncate+0x172/0x1e0 [ 643.188734][T15101] ? __pfx___x64_sys_truncate+0x10/0x10 [ 643.188758][T15101] do_syscall_64+0xcd/0x4c0 [ 643.188780][T15101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.188795][T15101] RIP: 0033:0x7fa486f8eec9 [ 643.188807][T15101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.188822][T15101] RSP: 002b:00007fa4851f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 643.188836][T15101] RAX: ffffffffffffffda RBX: 00007fa4871e5fa0 RCX: 00007fa486f8eec9 [ 643.188846][T15101] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000040 [ 643.188855][T15101] RBP: 00007fa487011f91 R08: 0000000000000000 R09: 0000000000000000 [ 643.188864][T15101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.188873][T15101] R13: 00007fa4871e6038 R14: 00007fa4871e5fa0 R15: 00007ffe328a5068 [ 643.188894][T15101] [ 643.428197][T15110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2263'. [ 644.829245][T15142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2269'. [ 644.870081][T15136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 644.915729][T15136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 644.933369][T15154] can0: slcan on ttyS2. [ 645.057621][T15155] can0 (unregistered): slcan off ttyS2. [ 645.317678][T15166] net_ratelimit: 1 callbacks suppressed [ 645.317693][T15166] netlink: zone id is out of range [ 645.449641][T15162] netlink: set zone limit has 8 unknown bytes [ 645.585864][T15169] openvswitch: HfR: Dropping previously announced user features [ 645.585926][T15166] netlink: del zone limit has 4 unknown bytes [ 646.839721][T15201] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(173544298.2314043776.706666779), cmd(6) [ 646.931174][ T5863] Bluetooth: hci3: command 0x0c1a tx timeout [ 646.937701][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 648.928591][T15241] tipc: Started in network mode [ 648.967524][T15241] tipc: Node identity ee00, cluster identity 4711 [ 648.973954][T15241] tipc: Node number set to 60928 [ 649.074426][T15240] Process accounting resumed [ 650.145717][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2294'. [ 650.950212][T15277] zswap: compressor not available [ 652.758752][T15321] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2307'. [ 654.098852][ T5900] usb usb38-port5: attempt power cycle [ 654.708407][ T5900] usb usb38-port5: unable to enumerate USB device [ 654.853115][T15368] zswap: compressor @ not available [ 655.048761][T15376] __vm_enough_memory: pid: 15376, comm: syz.1.2319, bytes: 4398046511104 not enough memory for the allocation [ 655.476350][T15367] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 656.238916][T15388] FAULT_INJECTION: forcing a failure. [ 656.238916][T15388] name failslab, interval 1, probability 0, space 0, times 0 [ 656.504139][T15388] CPU: 0 UID: 0 PID: 15388 Comm: syz.2.2322 Not tainted syzkaller #0 PREEMPT(full) [ 656.504163][T15388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 656.504173][T15388] Call Trace: [ 656.504178][T15388] [ 656.504185][T15388] dump_stack_lvl+0x16c/0x1f0 [ 656.504211][T15388] should_fail_ex+0x512/0x640 [ 656.504233][T15388] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 656.504253][T15388] should_failslab+0xc2/0x120 [ 656.504272][T15388] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 656.504289][T15388] ? rcu_is_watching+0x12/0xc0 [ 656.504304][T15388] ? getname_flags.part.0+0x4c/0x550 [ 656.504328][T15388] getname_flags.part.0+0x4c/0x550 [ 656.504351][T15388] getname_flags+0x93/0xf0 [ 656.504367][T15388] do_sys_openat2+0xb8/0x1d0 [ 656.504389][T15388] ? __pfx_do_sys_openat2+0x10/0x10 [ 656.504411][T15388] ? __pfx___might_resched+0x10/0x10 [ 656.504430][T15388] __x64_sys_openat+0x174/0x210 [ 656.504443][T15388] ? __pfx___x64_sys_openat+0x10/0x10 [ 656.504463][T15388] do_syscall_64+0xcd/0x4c0 [ 656.504485][T15388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.504500][T15388] RIP: 0033:0x7f2e5098eec9 [ 656.504512][T15388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.504526][T15388] RSP: 002b:00007f2e4ebb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 656.504541][T15388] RAX: ffffffffffffffda RBX: 00007f2e50be6180 RCX: 00007f2e5098eec9 [ 656.504550][T15388] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 656.504559][T15388] RBP: 00007f2e50a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 656.504568][T15388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.504577][T15388] R13: 00007f2e50be6218 R14: 00007f2e50be6180 R15: 00007ffd35a51f88 [ 656.504595][T15388] [ 657.647826][T14868] usb usb38-port5: attempt power cycle [ 658.208827][T14868] usb usb38-port5: unable to enumerate USB device [ 661.968469][T15481] __vm_enough_memory: pid: 15481, comm: syz.2.2340, bytes: 4398046511104 not enough memory for the allocation [ 664.268929][T15510] netlink: 'syz.0.2344': attribute type 11 has an invalid length. [ 664.309478][T15510] netlink: 'syz.0.2344': attribute type 11 has an invalid length. [ 664.345418][T15510] netlink: 'syz.0.2344': attribute type 11 has an invalid length. [ 664.390141][T15510] netlink: 'syz.0.2344': attribute type 11 has an invalid length. [ 666.263234][T15525] kexec: Could not allocate control_code_buffer [ 666.742090][T15533] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 666.944744][T15549] netlink: zone id is out of range [ 666.963530][T15546] netlink: set zone limit has 8 unknown bytes [ 666.992128][T15549] netlink: del zone limit has 4 unknown bytes [ 667.034257][T15553] openvswitch: HfR: Dropping previously announced user features [ 667.836464][T15564] __vm_enough_memory: pid: 15564, comm: syz.0.2358, bytes: 4398046511104 not enough memory for the allocation [ 668.073196][T15558] netlink: 'syz.3.2359': attribute type 11 has an invalid length. [ 668.107773][T15558] netlink: 'syz.3.2359': attribute type 11 has an invalid length. [ 668.148875][T15558] netlink: 'syz.3.2359': attribute type 11 has an invalid length. [ 668.191092][T15558] netlink: 'syz.3.2359': attribute type 11 has an invalid length. [ 668.238111][ T69] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1359 with max blocks 32 with error 117 [ 668.303684][ T69] EXT4-fs (sda1): This should not happen!! Data will be lost [ 668.303684][ T69] [ 669.245531][T15572] zswap: compressor not available [ 671.636094][T15622] netlink: zone id is out of range [ 671.687675][T15622] netlink: zone id is out of range [ 671.772821][T15622] netlink: zone id is out of range [ 671.859650][T15622] netlink: zone id is out of range [ 671.927138][T15622] netlink: zone id is out of range [ 671.953504][T15622] netlink: zone id is out of range [ 672.001324][T15622] netlink: zone id is out of range [ 672.031616][T15622] netlink: zone id is out of range [ 672.089214][T15622] netlink: zone id is out of range [ 672.146029][T15622] netlink: zone id is out of range [ 672.180884][T15622] netlink: zone id is out of range [ 672.228628][T15622] netlink: zone id is out of range [ 672.289471][T15622] netlink: zone id is out of range [ 672.341357][T15622] netlink: zone id is out of range [ 672.389730][T15622] netlink: zone id is out of range [ 673.957278][T15654] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2378'. [ 674.142586][T15654] mac80211_hwsim hwsim6 ›: renamed from wlan0 (while UP) [ 674.691820][T15668] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 678.688205][ T36] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 2 with max blocks 4 with error 117 [ 678.781974][ T36] EXT4-fs (sda1): This should not happen!! Data will be lost [ 678.781974][ T36] [ 678.872738][T15729] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 679.216335][T15717] Process accounting paused [ 682.468377][T15801] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2411'. [ 682.669783][T15801] : renamed from bond0 [ 683.912240][T15830] __vm_enough_memory: pid: 15830, comm: syz.3.2414, bytes: 4398046511104 not enough memory for the allocation [ 683.927833][T15815] GUP no longer grows the stack in syz.1.2420 (15815): 1000-401000 (0) [ 684.033320][T15815] CPU: 0 UID: 0 PID: 15815 Comm: syz.1.2420 Not tainted syzkaller #0 PREEMPT(full) [ 684.033342][T15815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 684.033352][T15815] Call Trace: [ 684.033358][T15815] [ 684.033364][T15815] dump_stack_lvl+0x16c/0x1f0 [ 684.033391][T15815] gup_vma_lookup+0x1d2/0x220 [ 684.033413][T15815] fixup_user_fault+0x26f/0x540 [ 684.033433][T15815] ? futex_wake_op+0x974/0xe40 [ 684.033457][T15815] fault_in_user_writeable+0x70/0xe0 [ 684.033475][T15815] futex_wake_op+0x9a0/0xe40 [ 684.033501][T15815] ? __pfx_futex_wake_op+0x10/0x10 [ 684.033521][T15815] ? __pfx_futex_wait+0x10/0x10 [ 684.033547][T15815] ? up_write+0x1b2/0x520 [ 684.033570][T15815] do_futex+0x2e9/0x350 [ 684.033588][T15815] ? __pfx_do_futex+0x10/0x10 [ 684.033611][T15815] __x64_sys_futex+0x1e0/0x4c0 [ 684.033630][T15815] ? fput+0x9b/0xd0 [ 684.033649][T15815] ? __pfx___x64_sys_futex+0x10/0x10 [ 684.033667][T15815] ? xfd_validate_state+0x61/0x180 [ 684.033694][T15815] do_syscall_64+0xcd/0x4c0 [ 684.033716][T15815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.033731][T15815] RIP: 0033:0x7f3d8d98eec9 [ 684.033743][T15815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.033757][T15815] RSP: 002b:00007f3d8e816038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 684.033771][T15815] RAX: ffffffffffffffda RBX: 00007f3d8dbe6180 RCX: 00007f3d8d98eec9 [ 684.033780][T15815] RDX: 0000000000000002 RSI: 0000000000000085 RDI: 0000000000000000 [ 684.033789][T15815] RBP: 00007f3d8da11f91 R08: 0000000000000000 R09: 0000000000000001 [ 684.033797][T15815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.033806][T15815] R13: 00007f3d8dbe6218 R14: 00007f3d8dbe6180 R15: 00007fffecd6e5c8 [ 684.033824][T15815] [ 685.732894][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.750859][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.503933][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'. [ 686.834774][T15716] ------------[ cut here ]------------ [ 686.840393][T15716] WARNING: CPU: 0 PID: 15716 at kernel/trace/trace.c:8604 tracing_buffers_mmap_close+0xdd/0x130 [ 686.850900][T15716] Modules linked in: [ 686.855069][T15716] CPU: 0 UID: 0 PID: 15716 Comm: syz.0.2392 Not tainted syzkaller #0 PREEMPT(full) [ 686.864478][T15716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 686.874670][T15716] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 686.881289][T15716] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 31 cd 60 00 eb 87 e8 5a [ 686.900925][T15716] RSP: 0018:ffffc90004b2f9c0 EFLAGS: 00010293 [ 686.907097][T15716] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfac79 [ 686.915067][T15716] RDX: ffff88802b440000 RSI: ffffffff81bfac8c RDI: 0000000000000005 [ 686.923625][T15716] RBP: ffffffff81bfabb0 R08: 0000000000000005 R09: 0000000000000000 [ 686.932090][T15716] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88805d796548 [ 686.940080][T15716] R13: dffffc0000000000 R14: ffffc90004b2fa58 R15: 0000000000000000 [ 686.948064][T15716] FS: 0000000000000000(0000) GS:ffff8881246ba000(0000) knlGS:0000000000000000 [ 686.957167][T15716] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.963744][T15716] CR2: 0000200000937000 CR3: 000000005ddba000 CR4: 00000000003526f0 [ 686.971849][T15716] Call Trace: [ 686.975210][T15716] [ 686.978153][T15716] remove_vma+0x88/0x160 [ 686.982382][T15716] exit_mmap+0x511/0xb90 [ 686.986617][T15716] ? __pfx_exit_mmap+0x10/0x10 [ 686.991410][T15716] ? __lock_acquire+0xb97/0x1ce0 [ 686.996380][T15716] __mmput+0x12a/0x410 [ 687.000461][T15716] mmput+0x62/0x70 [ 687.004166][T15716] do_exit+0x7c7/0x2bf0 [ 687.008432][T15716] ? proc_coredump_connector+0x2d1/0x4f0 [ 687.014066][T15716] ? __pfx_do_exit+0x10/0x10 [ 687.018680][T15716] do_group_exit+0xd3/0x2a0 [ 687.023747][T15716] get_signal+0x2673/0x26d0 [ 687.028661][T15716] ? force_sig_fault+0xc4/0x100 [ 687.033517][T15716] ? __pfx_get_signal+0x10/0x10 [ 687.038403][T15716] arch_do_signal_or_restart+0x8f/0x790 [ 687.043947][T15716] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 687.050083][T15716] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 687.056235][T15716] irqentry_exit_to_user_mode+0x13e/0x290 [ 687.061979][T15716] asm_exc_page_fault+0x26/0x30 [ 687.066811][T15716] RIP: 0033:0x40fff [ 687.070620][T15716] Code: Unable to access opcode bytes at 0x40fd5. [ 687.077169][T15716] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 687.083216][T15716] RAX: 0000000000000000 RBX: 00007fa4871e5fa0 RCX: 00007fa486f8eec9 [ 687.091308][T15716] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 687.099376][T15716] RBP: 00007fa487011f91 R08: 0000000000000002 R09: 0000000000000000 [ 687.107346][T15716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.115304][T15716] R13: 00007fa4871e6038 R14: 00007fa4871e5fa0 R15: 00007ffe328a5068 [ 687.123299][T15716] [ 687.126874][T15716] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 687.134138][T15716] CPU: 0 UID: 0 PID: 15716 Comm: syz.0.2392 Not tainted syzkaller #0 PREEMPT(full) [ 687.143483][T15716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 687.153515][T15716] Call Trace: [ 687.156771][T15716] [ 687.159684][T15716] dump_stack_lvl+0x3d/0x1f0 [ 687.164263][T15716] vpanic+0x6e8/0x7a0 [ 687.168230][T15716] ? __pfx_vpanic+0x10/0x10 [ 687.172721][T15716] ? tracing_buffers_mmap_close+0xdd/0x130 [ 687.178508][T15716] panic+0xca/0xd0 [ 687.182213][T15716] ? __pfx_panic+0x10/0x10 [ 687.186618][T15716] ? check_panic_on_warn+0x1f/0xb0 [ 687.191717][T15716] check_panic_on_warn+0xab/0xb0 [ 687.196639][T15716] __warn+0xf6/0x3c0 [ 687.200519][T15716] ? tracing_buffers_mmap_close+0xdd/0x130 [ 687.206303][T15716] report_bug+0x3c3/0x580 [ 687.210614][T15716] ? tracing_buffers_mmap_close+0xdd/0x130 [ 687.216400][T15716] handle_bug+0x184/0x210 [ 687.220708][T15716] exc_invalid_op+0x17/0x50 [ 687.225189][T15716] asm_exc_invalid_op+0x1a/0x20 [ 687.230022][T15716] RIP: 0010:tracing_buffers_mmap_close+0xdd/0x130 [ 687.236416][T15716] Code: 75 46 48 8b 7b 08 e8 02 96 ff ff 31 ff 89 c3 89 c6 e8 e7 58 fb ff 85 db 75 0a 48 83 c4 08 5b e9 99 5d fb ff e8 94 5d fb ff 90 <0f> 0b 90 48 83 c4 08 5b e9 86 5d fb ff e8 31 cd 60 00 eb 87 e8 5a [ 687.256000][T15716] RSP: 0018:ffffc90004b2f9c0 EFLAGS: 00010293 [ 687.262047][T15716] RAX: 0000000000000000 RBX: 00000000ffffffed RCX: ffffffff81bfac79 [ 687.269994][T15716] RDX: ffff88802b440000 RSI: ffffffff81bfac8c RDI: 0000000000000005 [ 687.277945][T15716] RBP: ffffffff81bfabb0 R08: 0000000000000005 R09: 0000000000000000 [ 687.285895][T15716] R10: 00000000ffffffed R11: 0000000000000000 R12: ffff88805d796548 [ 687.293844][T15716] R13: dffffc0000000000 R14: ffffc90004b2fa58 R15: 0000000000000000 [ 687.301794][T15716] ? __pfx_tracing_buffers_mmap_close+0x10/0x10 [ 687.308021][T15716] ? tracing_buffers_mmap_close+0xc9/0x130 [ 687.313809][T15716] ? tracing_buffers_mmap_close+0xdc/0x130 [ 687.319601][T15716] remove_vma+0x88/0x160 [ 687.323823][T15716] exit_mmap+0x511/0xb90 [ 687.328053][T15716] ? __pfx_exit_mmap+0x10/0x10 [ 687.332804][T15716] ? __lock_acquire+0xb97/0x1ce0 [ 687.337744][T15716] __mmput+0x12a/0x410 [ 687.341795][T15716] mmput+0x62/0x70 [ 687.345497][T15716] do_exit+0x7c7/0x2bf0 [ 687.349645][T15716] ? proc_coredump_connector+0x2d1/0x4f0 [ 687.355259][T15716] ? __pfx_do_exit+0x10/0x10 [ 687.359838][T15716] do_group_exit+0xd3/0x2a0 [ 687.364326][T15716] get_signal+0x2673/0x26d0 [ 687.368815][T15716] ? force_sig_fault+0xc4/0x100 [ 687.373646][T15716] ? __pfx_get_signal+0x10/0x10 [ 687.378484][T15716] arch_do_signal_or_restart+0x8f/0x790 [ 687.384023][T15716] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 687.390075][T15716] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 687.396221][T15716] irqentry_exit_to_user_mode+0x13e/0x290 [ 687.401944][T15716] asm_exc_page_fault+0x26/0x30 [ 687.406774][T15716] RIP: 0033:0x40fff [ 687.410560][T15716] Code: Unable to access opcode bytes at 0x40fd5. [ 687.416943][T15716] RSP: 002b:000000000000000a EFLAGS: 00010206 [ 687.422988][T15716] RAX: 0000000000000000 RBX: 00007fa4871e5fa0 RCX: 00007fa486f8eec9 [ 687.430942][T15716] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 687.438891][T15716] RBP: 00007fa487011f91 R08: 0000000000000002 R09: 0000000000000000 [ 687.446841][T15716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.454789][T15716] R13: 00007fa4871e6038 R14: 00007fa4871e5fa0 R15: 00007ffe328a5068 [ 687.462745][T15716] [ 687.465819][T15716] Kernel Offset: disabled [ 687.470124][T15716] Rebooting in 86400 seconds..