last executing test programs: 11.780523925s ago: executing program 2 (id=1135): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x3, 0x8000000000000000}, {0x5, 0x5, 0x2}, {0xa6, 0x1, 0x2}]) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0xa) write$auto(0xffffffffffffffff, 0x0, 0x81) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="b2", 0x1) 9.853289346s ago: executing program 2 (id=1141): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0xcc842, 0x0) socket(0x2, 0x1, 0x106) clone$auto(0xf2, 0xfffffffffffffffe, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) close_range$auto(0x2, 0x8, 0x0) 8.688429545s ago: executing program 1 (id=1143): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) futex$auto(0x0, 0x5, 0x3, 0x0, &(0x7f0000000440)=0x2, 0x2000005) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) preadv2$auto(0x3, 0x0, 0x7, 0xffffffffffffffff, 0xb, 0x40c302) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_PPPIOCGDEBUG(r3, 0x80047441, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptysb\x00', 0x8040, 0x0) ioctl$auto_TIOCEXCL2(r4, 0x540c, &(0x7f0000000180)="888307a2d8b03143d58b73f3a20c89acdebf51caa600b544414b1c21b96005be0f5864fdb41c72f00d6e64890d2a9e3980d800e4a5378caa52584c3a98fe7b86") r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000200), r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r7, @ANYRES64=r1, @ANYRES32, @ANYBLOB="e07a8193a7c3f500"/23, @ANYRES8=r5, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES32=r7, @ANYRESDEC=r4], 0x1c}, 0x1, 0x0, 0x0, 0x8008085}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x1000008000) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) getpid() ustat$auto(0x801, 0x0) bpf$auto(0x5, 0x0, 0x102) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40902, 0x0) clock_settime$auto(0x100, &(0x7f00000001c0)={0x7fffffffffffffff, 0x1}) readv$auto(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x1}, 0x1) 7.758494994s ago: executing program 2 (id=1146): madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffe, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0xf6) setsockopt$auto(r1, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(0x0, r1) mmap$auto(0x2, 0x8, 0x10000000000df, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x78, 0x0, 0x8) sendmsg$auto_NBD_CMD_DISCONNECT(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) sendmsg$auto_NBD_CMD_STATUS(r2, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001480)={&(0x7f0000001200)=ANY=[@ANYBLOB="14010000", @ANYRES64=r3, @ANYBLOB="000826bd7000fedbdf250500000005000a0026000000e00009800400538004003680d4009d80ae39175bc2f5afa384cf2977d04e7b5d275b16b36ef09dfe104973b306ba7603efdb70906029a8cd1e57d6327786dc00000031b7897cf4d02829295209d8b48e7b35cecf1b6c90b156b000ef450f035ba9b672f4e0dfbcef66ee345d4976162a910c874b73040026800800a600", @ANYRES32=0x0, @ANYBLOB="14befcc37c1aea167bf420f5574a8dd1c0bf5f1b93f3b37e790183b155695017aebd321233578e7f0cdfbc4c973d92f8630c0bc38e03cd344f66ae00690067337718a795abb3dfde9cd5bdc0d959fd8e1a5a9a04004c800400c8800400f0000c00060009000000000000000c0002000700000000000000"], 0x114}, 0x1, 0x0, 0x0, 0x2400000c}, 0x8800) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) madvise$auto(0x91, 0x72, 0x4) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) ioctl$auto_CEC_S_MODE(r4, 0x40046109, &(0x7f0000002c40)=0xd2) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xffffffffffffffff, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0xd) process_madvise$auto_MADV_NORMAL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000006c0)="755030e6cfd503a07bd3e6713c77fd4058b80d6bfa3ba03b3640819059bd247f2b79a7330d0c5168f25a8bcafc8c9aa3079093b6cff925410127e73552172fe373fa7bcffc0ace132988bade2f7dcefc65ec0c40", 0x9}, 0x1, 0x0, 0x9) poll$auto(0x0, 0x7f, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x1c11c0, 0x0) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)="34aeede8", 0x4) 6.813587321s ago: executing program 1 (id=1148): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0xcc842, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) close_range$auto(0x2, 0x8, 0x0) 6.720905166s ago: executing program 0 (id=1149): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(0xffffffffffffffff, &(0x7f0000000100)='MAC802154_HWSIM\x00', 0x3) listen$auto(0xffffffffffffffff, 0x4005) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10001, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x4, 0xb}, 0x20fff}, 0x5, 0x8) r1 = socket(0x2a, 0x2, 0x6) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) memfd_secret$auto(0xffffffff) write$auto(r1, &(0x7f0000000040)='\x9a.:^\\-\x00', 0x2d) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x4) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x88, 0xac1, 0x2, 0x36242398, 0x7ff, 0x8, 0xc, 0xfffe, 0x1, 0x81, 0x68198}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES64=r2, @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf250a"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) 6.295192417s ago: executing program 3 (id=1150): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="5e00f60087f5575f279427137fffffffffffffff5f17146a", @ANYRES16=r1, @ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x4000041}, 0x8c1) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0xc1, 0x400}]}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a0001000000000000000000060006000500000008000200", @ANYRES32=0x0, @ANYRESOCT], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) r4 = socket(0x2, 0x3, 0x6) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_DEL_KEY(r4, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000005880)=ANY=[@ANYBLOB="30230000383fed364257938de435cc6d3b6aec2e083a711d97dc5cce49c57ff7168f642841dfd88c6d45065a9de77d49d9862d9aa1222913c90f9abf382f92f74f3d89b0d63cc5be416f20750d9be0bf8dafcc2115fa654d128c75e6e84649f75f1821d4c6fb8229f03354b0bae318ddeb8b15d5ab202e42beb12c2b16a7b1390a2336090ebd0b86a494f262eaf40320f94ad63a927cef29a5e2277fc446fb4bec4bc50989301fe784b23c6fb680d0d80f191e7ac9156a7589dccbbb743bae635ee7529940bc0c6189482edeabf80d34e025011df9c20086491f562d0000000000000000", @ANYRES16=r1, @ANYBLOB="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"], 0x2330}, 0x1, 0x0, 0x0, 0x240088c0}, 0x4000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x28040) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sigaltstack$auto(0x0, &(0x7f00000002c0)={&(0x7f0000000100)="c23a1ea8948278", 0x1, 0x5}) keyctl$auto(0x1d, 0xfffffffffffffffd, 0x2, 0x628, 0xfffffffffffffffd) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000003) 5.774029801s ago: executing program 0 (id=1151): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) mount$auto(0x0, &(0x7f00000001c0)=':,\x00', 0x0, 0x10000087, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_DEL(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0300000004000200080001000600"/26], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000340), 0x195800, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x80a, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2d, 0x3, 0xffff, 0x15f4da0e, 0x6, 0x9, 0xfffffffffffffffd, 0x8, 0x4, 0xfca, 0x9, 0xfffffffffffffffe, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r2, 0x0, 0x9, 0x80000000003) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000329bd7000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80) socket(0x2c, 0x1, 0x3) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b45, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) 5.406978694s ago: executing program 0 (id=1152): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) socket(0x2b, 0x800, 0x76) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$auto(0x1, 0x0, 0x0, 0x0, 0x2) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000002c0), r0) shmctl$auto_SHM_LOCK(0x1, 0xb, &(0x7f0000000500)={{0x2, 0x0, 0xffffffffffffffff, 0x80, 0x38cb, 0x1, 0x1}, 0xe44, 0x7, 0xffffffffffffffff, 0x28, @inferred=r5, @raw=0x1, 0x73c, 0x0, &(0x7f0000000240)="fd683e63025f8b65954c19e3414772f4d09eec96611720ea05094b772e19345731c54b547d0b5aacf1ee3def038114f474fbdf75c55aa8da271d2ca062668777bebd53e4225cf62dbbbc1f8b", &(0x7f0000000400)="51abaff804a0f24de290a35755a98bf8d533cf2fc4686c81977b4e151eaca2a08390c94ece0d5166568b3114e6240b337623418575f06448b94a147e196113e435e64841a059a5695d8d39e2beb6668c72a2094a4a78aabb325d01ba9455d8523e05fd4454a70fe85cff8ff410666bd8874ff0c36b7141c0651fe69ed4636fa1278f1d1897cf96ad8db3a668f2b6c8b45314b1c4a51cc8cedd6efb5de0b52659ddd1eaca9710b2bacba6ec555da89dc6d6bfff3b0258376c9539eba6d12f52be4c0b21eed67fe462"}) sendmsg$auto_TIPC_NL_BEARER_ADD(r4, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x18c, r6, 0x400, 0x70bd29, 0x25dfdc00, {}, [@TIPC_NLA_LINK={0x4}, @TIPC_NLA_MON={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0x7b}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0xa5, 0x0, 0x0, @str=',\x12/\x00'}]}, @TIPC_NLA_LINK={0x15d, 0x4, 0x0, 0x1, [@generic="f4828adf6f6bd020180a8a2d0718d2c5fdc6987418a0e2726dfecb5e215ceb34ff877a5b3eedfee5e4f02e40ab12930b5e080ccd5d4e3cb44189d08f1ab9ec77a5d418aa2b8e4f6c0aa1e27a58bfca78563cb061ffe34b3d1fe7b78e3db995011272e5e3498980cb2c30c606c1b2f68e4df1c2ea0c1c4c25470828ed62c589bec1832e04aa1063c42aa8dae2c50f4580353efc3db98fe69df8ab129fe072c8d3b30488a6701f83bc0ab3b4db69465cad436b09cac804a658f5f7df7d023ac1d5d92a59407512e6d95b00d486291a07786bdc80752f0ce4eb9f4fe34178bd67c652d9122e0314", @generic="497ee219038f63c4353c7894e9d64e880c8d3a5d2888a732ca999741d3c934b14538ff308ff0e57033fac7dd9024743adfce19b7d0aeba4d2dab24c6a6147e0f832e8216f4c5650cb75f43c64ec7b845f8a463cab44326412daf42f075a3fec3040f989bf410cea1f4912807e3e6634c5fcfdf"]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40030}, 0xd0) brk$auto(0x7fffffffafff) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0) pread64$auto(r7, 0x0, 0x87ff, 0x5) mmap$auto(0x0, 0x400008, 0x3, 0xffffffff, 0xffffffffffffffff, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r8, 0x8, 0x1) fcntl$auto(r8, 0x11, 0x2) 5.271676218s ago: executing program 2 (id=1153): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x149e42, 0x0) mmap$auto(0x0, 0x810002, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x300, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8002, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0x400008, 0xfffffffffffffffc, 0xdf, 0x2, 0xc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, r0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0xc375111f31e0b3fc, 0x0) ioctl$auto_PPPIOCSNPMODE(r2, 0x4008744b, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES32=0x0], 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) 5.100479911s ago: executing program 1 (id=1154): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0xcc842, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0xf2, 0xfffffffffffffffe, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) close_range$auto(0x2, 0x8, 0x0) 4.494307508s ago: executing program 0 (id=1155): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0xcc842, 0x0) socket(0x2, 0x1, 0x106) clone$auto(0xf2, 0xfffffffffffffffe, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) close_range$auto(0x2, 0x8, 0x0) 4.30034827s ago: executing program 3 (id=1156): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0xcc842, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) close_range$auto(0x2, 0x8, 0x0) 3.248483759s ago: executing program 1 (id=1157): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r0, &(0x7f0000000240)='system.posix_acl_access\x00\xfa\xb3\x10\x98\x81\f\x14ouq(\x80\x96\x94\xa4\xf1@\xcb\xa9\x81\xf6F\xf2\xe9\x14e\xb6\xbc\x89\x92\xd2\f\xbeI\xb5\xe3r\xf7w\xfb\xca\x05\xb4\"\v]\x93D<\x93\x98\r\x9f\xae\x99@\xab<\xe4:jg8\xdf\x0e>\xca)\x87N\v\x88\xcda`\x1e\x9erEj\xc6\x141\xf7\xb6#\xab\xd3\xa2!\xc0\xda\xe1\x84!`\xab\xa11\xfd\xec\xe5d\xc1') r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/oom_adj\x00', 0x128e42, 0x0) read$auto(r1, 0x0, 0x3cde) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x25, 0x1, 0x0) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000002c0), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, 0x0) mmap$auto(0x8000000000, 0x4000000000400008, 0xdf, 0x9b7f, 0xffffffffffffffff, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fallocate$auto(r3, 0x1, 0x2, 0x6653) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xff, 0x8fd6, 0x948b, 0x800, 0x2, 0x3, 0xffffffffffffffff, 0x9, 0x80000001, 0x2, 0xfffffffffffffff3, 0x9, 0x1, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r5, &(0x7f0000000300)="5c60af5a41e0c2e96c46d5125a584ba9d9b3cf382c2dfa4fb2091200"/38, 0x26) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 3.214687536s ago: executing program 3 (id=1158): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x6, 0x8, 0x3, 0x5, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a]}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) r0 = inotify_init1$auto(0x2) socket(0x2, 0x3, 0x0) r1 = prctl$auto(0x3b, 0x2, 0x0, 0x4, 0x0) splice$auto(r1, 0x0, r1, 0x0, 0xb, 0x1) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x20000010) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x20000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x40440, 0x0) r4 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r4, 0x40086602, &(0x7f0000000100)) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r3, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r0, 0x7aa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x200403, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_setup$auto(0x80000000, 0x0) 3.103691721s ago: executing program 0 (id=1159): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0xcc842, 0x0) socket(0x2, 0x1, 0x106) clone$auto(0xf2, 0xfffffffffffffffe, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) close_range$auto(0x2, 0x8, 0x0) 2.368769899s ago: executing program 3 (id=1160): futex$auto(&(0x7f00000003c0)=0x58, 0x5, 0x3, 0x0, &(0x7f0000000440)=0x2, 0x2000005) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x9) socket(0x80000000000000a, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x1) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = socket(0x15, 0x5, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) dup3$auto(r0, r2, 0x4) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000080)="2efc5c16413b64d92af1a49a0cc9e0ac61d690cc19b3747e65fbc09616c87a2e10590c92e87cd157fcdfa8a96ba22c2f32000000", 0x7fc, 0x0, 0x400000007, 0x0, 0x1, 0x4}, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r3, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 1.79205905s ago: executing program 2 (id=1161): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) write$auto(0x3, 0x0, 0x100082) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)='1', 0x1) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10f, 0x80, 0x0, 0x7) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x13, 0x3, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x68e6f3b5, 0xfffff304, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x48100, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) socket(0x22, 0x2, 0x1) r2 = socketpair$auto(0xffffffee, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x129000, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) open$dir(&(0x7f00000000c0)='./file0\x00', 0x80800, 0x104) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) 1.432357377s ago: executing program 1 (id=1162): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x593200, 0x0) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="040028997800eedbdf255400000008009e0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2c810) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fallocate$auto(r1, 0x1, 0x2, 0x6653) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20007, 0xfffffffffffffffe, 0xeb5, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0x10, 0x3, 0xfffffffc) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000040)={0x138123200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0xa3) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(r2, 0x1, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0x80885659, 0xffffffffffffffff) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) mremap$auto(0x1ff000, 0x800847, 0x844, 0x40000000003, 0xfffff000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) 1.242542034s ago: executing program 3 (id=1163): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0xcc842, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) close_range$auto(0x2, 0x8, 0x0) 987.390935ms ago: executing program 0 (id=1164): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r0, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48041, 0x0) write$auto(r4, 0x0, 0x6) unshare$auto(0x40000080) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)="b2", 0x1) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r1, r6, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket(0xa, 0x2, 0x73) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24004001) bind$auto(0x3, &(0x7f0000000040), 0x69) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0x0, 0x1ff, 0x800000000000008, 0xc, 0x9, 0xfffffffffffffff9, 0x6, 0x1, 0x400040009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0xffffffffffffff17, 0x8, 0x8]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x48, 0x0, 0x9) socket(0x10, 0x80002, 0x0) 660.947216ms ago: executing program 2 (id=1165): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0xcc842, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0xf2, 0xfffffffffffffffe, 0x0, 0x0, 0x2) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) close_range$auto(0x2, 0x8, 0x0) 169.567933ms ago: executing program 1 (id=1166): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, 0x0) mmap$auto(0x0, 0x2040009, 0x20000000df, 0x400000015, 0x7, 0x28000) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) mmap$auto(0xfffffffffffffffd, 0x20009, 0x0, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, r1, 0xfffffffc) mmap$auto(0x80000000, 0xfffffffffffffffc, 0x1c, 0x40eb1, 0xffffffffffffffff, 0x300000000000) r2 = socket(0xb, 0x80000, 0x8000037) connect$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x56) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x3, 0x2000000005, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) setfsuid$auto(0x0) write$auto(0xca, &(0x7f0000000040)='\x04\x1c\xdc\xec7z\xdf3\xf2\xd3!\v\xb0M\xf8Q\x15\f', 0x2d8) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fanotify_mark$auto(0xffffffffffffffff, 0x205, 0xa, 0x4, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) preadv2$auto(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x8}, 0x8000000000000001, 0x7fffffffffffffff, 0x2, 0x858b) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="34010000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fcdbdf25010000000c00160002000000000000000c00100009000000000000000500040009000000"], 0x34}, 0x1, 0x0, 0x0, 0x8044}, 0x40000) 0s ago: executing program 3 (id=1167): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/034/001\x00', 0xcc842, 0x0) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/ip6_flowlabel\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000002100)=""/15, 0xf) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 249.922042][ T13] [ 249.961451][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1425 with max blocks 60 with error 117 [ 249.979898][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 249.979898][ T13] [ 250.086545][ T8135] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.452: bg 4: bad block bitmap checksum [ 250.123984][ T8135] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 250.268265][ T8135] EXT4-fs (sda1): This should not happen!! Data will be lost [ 250.268265][ T8135] [ 250.490243][ T8147] Process accounting resumed [ 250.527396][ T8134] Invalid ELF header magic: != ELF [ 250.554326][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1023 with max blocks 1 with error 117 [ 250.570064][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 250.570064][ T13] [ 250.598936][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1018 with max blocks 6 with error 117 [ 250.617669][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 250.617669][ T13] [ 252.823667][ T8183] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 253.275040][ T8187] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 255.289405][ T30] audit: type=1326 audit(1764684932.679:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.0.465" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf7f58f7c9 code=0x0 [ 255.674901][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.681190][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.642390][ T8233] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 256.689983][ T8233] EXT4-fs (sda1): This should not happen!! Data will be lost [ 256.689983][ T8233] [ 257.034095][ T5171] Trying to write to read-only block-device sda1 [ 258.363642][ T8261] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 258.679409][ T8264] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 259.852373][ T8276] random: crng reseeded on system resumption [ 259.856917][ T8279] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 259.881225][ T8279] EXT4-fs (sda1): This should not happen!! Data will be lost [ 259.881225][ T8279] [ 262.296634][ T8318] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 262.386685][ T8318] EXT4-fs (sda1): This should not happen!! Data will be lost [ 262.386685][ T8318] [ 262.865294][ T8317] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.0.482: bg 5: bad block bitmap checksum [ 262.880081][ T8317] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 566 with max blocks 4 with error 74 [ 262.893614][ T8317] EXT4-fs (sda1): This should not happen!! Data will be lost [ 262.893614][ T8317] [ 265.455211][ T3479] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 571 with max blocks 2 with error 117 [ 265.553610][ T3479] EXT4-fs (sda1): This should not happen!! Data will be lost [ 265.553610][ T3479] [ 265.605741][ T8360] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 265.647028][ T8360] EXT4-fs (sda1): This should not happen!! Data will be lost [ 265.647028][ T8360] [ 266.403718][ T8373] zswap: compressor not available [ 266.522525][ T8373] random: crng reseeded on system resumption [ 267.100327][ T5159] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 267.209078][ T8388] netlink: zone id is out of range [ 267.228719][ T8388] netlink: del zone limit has 4 unknown bytes [ 267.371273][ T8388] HfR: entered promiscuous mode [ 267.374712][ T8390] netlink: 40 bytes leftover after parsing attributes in process `syz.1.497'. [ 267.411128][ T8387] netlink: set zone limit has 8 unknown bytes [ 267.643360][ T8403] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 267.663878][ T8403] EXT4-fs (sda1): This should not happen!! Data will be lost [ 267.663878][ T8403] [ 268.144189][ T4308] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1 with max blocks 1 with error 117 [ 268.203731][ T4308] EXT4-fs (sda1): This should not happen!! Data will be lost [ 268.203731][ T4308] [ 269.005151][ T8429] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 269.191947][ T5159] Bluetooth: hci2: command 0x0406 tx timeout [ 269.236563][ T3490] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 1 with max blocks 1 with error 117 [ 269.323154][ T3490] EXT4-fs (sda1): This should not happen!! Data will be lost [ 269.323154][ T3490] [ 269.853963][ T3506] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1 with max blocks 1 with error 117 [ 269.893282][ T3506] EXT4-fs (sda1): This should not happen!! Data will be lost [ 269.893282][ T3506] [ 270.786460][ T8452] random: crng reseeded on system resumption [ 270.843789][ T8450] zswap: compressor not available [ 272.235562][ T8462] Invalid ELF header magic: != ELF [ 272.843787][ T8478] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 272.885385][ T8478] EXT4-fs (sda1): This should not happen!! Data will be lost [ 272.885385][ T8478] [ 278.808567][ T8588] random: crng reseeded on system resumption [ 278.895372][ T8599] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 278.958256][ T8599] EXT4-fs (sda1): This should not happen!! Data will be lost [ 278.958256][ T8599] [ 280.264404][ T1153] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1023 with max blocks 1 with error 117 [ 280.283676][ T1153] EXT4-fs (sda1): This should not happen!! Data will be lost [ 280.283676][ T1153] [ 280.305453][ T1153] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1425 with max blocks 60 with error 117 [ 280.325500][ T1153] EXT4-fs (sda1): This should not happen!! Data will be lost [ 280.325500][ T1153] [ 280.853921][ T3800] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1023 with max blocks 1 with error 117 [ 280.873785][ T3800] EXT4-fs (sda1): This should not happen!! Data will be lost [ 280.873785][ T3800] [ 280.908088][ T3800] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1018 with max blocks 6 with error 117 [ 280.963078][ T3800] EXT4-fs (sda1): This should not happen!! Data will be lost [ 280.963078][ T3800] [ 282.595888][ T8656] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.540: iget: checksum invalid [ 282.639333][ T8656] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 282.660364][ T8659] random: crng reseeded on system resumption [ 282.672825][ T8656] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.540: iget: checksum invalid [ 282.739912][ T8656] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 282.814327][ T8656] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.540: iget: checksum invalid [ 282.843895][ T8655] zswap: compressor not available [ 282.917169][ T8656] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 282.951665][ T8656] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.540: iget: checksum invalid [ 282.966767][ T8656] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 282.977903][ T8656] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 283.090926][ T8656] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 283.544423][ T8665] netlink: 330 bytes leftover after parsing attributes in process `syz.3.543'. [ 284.253957][ T8676] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 286.161973][ T8714] zswap: compressor not available [ 286.264933][ T8714] random: crng reseeded on system resumption [ 287.521336][ T8735] EXT4-fs: 4 callbacks suppressed [ 287.521353][ T8735] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 287.551192][ T8735] EXT4-fs (sda1): This should not happen!! Data will be lost [ 287.551192][ T8735] [ 287.634556][ T8738] zero sized request [ 289.413283][ T8768] zswap: compressor not available [ 289.526461][ T8768] random: crng reseeded on system resumption [ 290.434246][ T8786] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 291.035233][ T8795] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz.0.569: Error -117 reading block bitmap for 5 [ 291.068700][ T8795] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz.0.569: Error -117 reading block bitmap for 4 [ 292.532088][ T8815] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1 with max blocks 1 with error 117 [ 292.563206][ T8815] EXT4-fs (sda1): This should not happen!! Data will be lost [ 292.563206][ T8815] [ 292.821514][ T8832] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 967 with max blocks 57 with error 117 [ 292.834326][ T8832] EXT4-fs (sda1): This should not happen!! Data will be lost [ 292.834326][ T8832] [ 294.343262][ T8861] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 934 with max blocks 90 with error 117 [ 294.368235][ T8861] EXT4-fs (sda1): This should not happen!! Data will be lost [ 294.368235][ T8861] [ 295.977314][ T8887] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 985 with max blocks 39 with error 117 [ 296.039676][ T8887] EXT4-fs (sda1): This should not happen!! Data will be lost [ 296.039676][ T8887] [ 296.272765][ T8879] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 966 with max blocks 58 with error 117 [ 296.323915][ T8879] EXT4-fs (sda1): This should not happen!! Data will be lost [ 296.323915][ T8879] [ 297.388613][ T8893] netlink: 504 bytes leftover after parsing attributes in process `syz.3.589'. [ 298.049481][ T8916] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 965 with max blocks 59 with error 117 [ 298.177072][ T8916] EXT4-fs (sda1): This should not happen!! Data will be lost [ 298.177072][ T8916] [ 300.053920][ T3800] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1 with max blocks 2 with error 117 [ 300.114807][ T3800] EXT4-fs (sda1): This should not happen!! Data will be lost [ 300.114807][ T3800] [ 306.810371][ T8981] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 306.838130][ T8981] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 306.912764][ T8981] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 306.929560][ T8981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 307.070262][ T8981] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 307.126416][ T8981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 307.170064][ T8981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 308.613853][ T9004] random: crng reseeded on system resumption [ 308.863588][ T5159] Bluetooth: hci0: command 0x0406 tx timeout [ 308.943575][ T5159] Bluetooth: hci2: command 0x0406 tx timeout [ 309.196280][ T5159] Bluetooth: hci3: command 0x0406 tx timeout [ 309.591502][ T9029] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 987 with max blocks 37 with error 117 [ 309.604855][ T9029] EXT4-fs (sda1): This should not happen!! Data will be lost [ 309.604855][ T9029] [ 310.194645][ T9046] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1368 with max blocks 72 with error 117 [ 310.245371][ T9046] EXT4-fs (sda1): This should not happen!! Data will be lost [ 310.245371][ T9046] [ 310.298169][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 961 with max blocks 14 with error 117 [ 310.355652][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 310.355652][ T12] [ 310.386225][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 946 with max blocks 78 with error 117 [ 310.474219][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 310.474219][ T12] [ 310.486319][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 973 with max blocks 51 with error 117 [ 310.503567][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 310.503567][ T12] [ 310.943573][ T5159] Bluetooth: hci0: command 0x0406 tx timeout [ 310.965641][ T9060] binder: 9052:9060 ioctl 4018620d 9 returned -22 [ 311.023762][ T5159] Bluetooth: hci2: command 0x0406 tx timeout [ 311.263564][ T5159] Bluetooth: hci3: command 0x0406 tx timeout [ 312.083567][ T5159] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 312.366027][ T9074] netlink: set zone limit has 8 unknown bytes [ 313.123327][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 314.843735][ T9105] mkiss: ax0: crc mode is auto. [ 315.183614][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 316.574634][ T9124] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.627: bg 1: bad block bitmap checksum [ 316.623685][ T9124] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6667: Filesystem failed CRC [ 317.004400][ T9129] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 317.107493][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.125519][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.544253][ T9170] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 321.474752][ T9171] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 321.623689][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021fd4000: rx timeout, send abort [ 322.132870][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021fd4000: abort rx timeout. Force session deactivation [ 323.759877][ T9197] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.642: iget: checksum invalid [ 323.775934][ T9197] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 323.790402][ T9197] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.642: iget: checksum invalid [ 323.853913][ T9197] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 323.916512][ T9197] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.642: iget: checksum invalid [ 323.972817][ T9197] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 324.043953][ T9197] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.642: iget: checksum invalid [ 324.055313][ T9197] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 324.069868][ T9197] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 324.091144][ T9197] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 325.425723][ T9216] binder: 9214:9216 ioctl 5380 2000000000c0 returned -22 [ 325.439384][ T9216] sd 0:0:1:0: PR command failed: 1026 [ 325.444897][ T9216] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 325.453672][ T9216] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 327.304360][ T9230] EXT4-fs: 18 callbacks suppressed [ 327.304375][ T9230] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 956 with max blocks 68 with error 117 [ 327.399058][ T9230] EXT4-fs (sda1): This should not happen!! Data will be lost [ 327.399058][ T9230] [ 332.167272][ T9288] random: crng reseeded on system resumption [ 333.949900][ T9301] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 1 with max blocks 1 with error 117 [ 333.972665][ T9301] EXT4-fs (sda1): This should not happen!! Data will be lost [ 333.972665][ T9301] [ 334.684873][ T9285] kexec: Could not allocate control_code_buffer [ 335.131770][ T9309] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 970 with max blocks 54 with error 117 [ 335.235971][ T9309] EXT4-fs (sda1): This should not happen!! Data will be lost [ 335.235971][ T9309] [ 335.854528][ T9323] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 336.293582][ T9320] mkiss: ax0: crc mode is auto. [ 340.065866][ T9349] mkiss: ax0: crc mode is auto. [ 341.094152][ T4308] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1397 with max blocks 82 with error 117 [ 341.189795][ T4308] EXT4-fs (sda1): This should not happen!! Data will be lost [ 341.189795][ T4308] [ 341.304733][ T4308] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1 with max blocks 2 with error 117 [ 341.317280][ T4308] EXT4-fs (sda1): This should not happen!! Data will be lost [ 341.317280][ T4308] [ 341.336011][ T4308] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 960 with max blocks 15 with error 117 [ 341.348842][ T4308] EXT4-fs (sda1): This should not happen!! Data will be lost [ 341.348842][ T4308] [ 341.364727][ T4308] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 956 with max blocks 1 with error 117 [ 341.377404][ T4308] EXT4-fs (sda1): This should not happen!! Data will be lost [ 341.377404][ T4308] [ 341.394631][ T4308] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 971 with max blocks 53 with error 117 [ 341.413562][ T4308] EXT4-fs (sda1): This should not happen!! Data will be lost [ 341.413562][ T4308] [ 341.846266][ T9374] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 342.912797][ T9375] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 343.978921][ T9379] kexec: Could not allocate control_code_buffer [ 345.276182][ T9412] mkiss: ax0: crc mode is auto. [ 346.464419][ T9435] EXT4-fs: 8 callbacks suppressed [ 346.464433][ T9435] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1 with max blocks 2 with error 117 [ 346.522224][ T9435] EXT4-fs (sda1): This should not happen!! Data will be lost [ 346.522224][ T9435] [ 346.572914][ T3800] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 953 with max blocks 71 with error 117 [ 346.608891][ T3800] EXT4-fs (sda1): This should not happen!! Data will be lost [ 346.608891][ T3800] [ 346.650017][ T3800] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1 with max blocks 1 with error 117 [ 346.693216][ T3800] EXT4-fs (sda1): This should not happen!! Data will be lost [ 346.693216][ T3800] [ 346.718257][ T3800] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 963 with max blocks 61 with error 117 [ 346.741653][ T3800] EXT4-fs (sda1): This should not happen!! Data will be lost [ 346.741653][ T3800] [ 346.779638][ T3800] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 964 with max blocks 60 with error 117 [ 346.793644][ T3800] EXT4-fs (sda1): This should not happen!! Data will be lost [ 346.793644][ T3800] [ 348.883706][ T9465] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 349.928330][ T9458] zswap: compressor not available [ 350.027801][ T9467] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 350.145233][ T5853] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 350.828453][ T9490] usb usb36: usbfs: process 9490 (syz.2.694) did not claim interface 0 before use [ 354.635320][ T9525] netlink: 28 bytes leftover after parsing attributes in process `syz.3.702'. [ 354.701306][ T9525] veth0_macvtap: left promiscuous mode [ 354.797012][ T9525] macvtap0: entered promiscuous mode [ 354.802350][ T9525] macvtap0: entered allmulticast mode [ 356.183769][ T9546] zswap: compressor not available [ 357.103568][ T5853] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 358.207992][ T9543] kexec: Could not allocate control_code_buffer [ 360.693743][ T9606] device-mapper: ioctl: Invalid ioctl structure: name ¢, dev 200010002 [ 360.841397][ T9599] zswap: compressor not available [ 375.825735][ T9755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.739'. [ 377.364537][ T3800] EXT4-fs: 20 callbacks suppressed [ 377.364552][ T3800] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 917 with max blocks 107 with error 117 [ 377.538095][ T3800] EXT4-fs (sda1): This should not happen!! Data will be lost [ 377.538095][ T3800] [ 377.607694][ T3800] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 1 with max blocks 1 with error 117 [ 377.644433][ T3800] EXT4-fs (sda1): This should not happen!! Data will be lost [ 377.644433][ T3800] [ 377.684355][ T3800] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1378 with max blocks 62 with error 117 [ 377.743524][ T3800] EXT4-fs (sda1): This should not happen!! Data will be lost [ 377.743524][ T3800] [ 377.775201][ T3800] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 999 with max blocks 25 with error 117 [ 377.865736][ T3800] EXT4-fs (sda1): This should not happen!! Data will be lost [ 377.865736][ T3800] [ 377.912894][ T3800] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 972 with max blocks 52 with error 117 [ 377.975744][ T3800] EXT4-fs (sda1): This should not happen!! Data will be lost [ 377.975744][ T3800] [ 378.547775][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.554175][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.924070][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805978e000: rx timeout, send abort [ 381.432306][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805978e000: abort rx timeout. Force session deactivation [ 381.908176][ T9811] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 382.761917][ T9814] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 385.465623][ T9861] EXT4-fs: 46 callbacks suppressed [ 385.465644][ T9861] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 970 with max blocks 5 with error 117 [ 385.573798][ T9861] EXT4-fs (sda1): This should not happen!! Data will be lost [ 385.573798][ T9861] [ 386.417092][ T9872] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 961 with max blocks 63 with error 117 [ 386.480866][ T9872] EXT4-fs (sda1): This should not happen!! Data will be lost [ 386.480866][ T9872] [ 387.210748][ T9884] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 974 with max blocks 50 with error 117 [ 387.251237][ T9884] EXT4-fs (sda1): This should not happen!! Data will be lost [ 387.251237][ T9884] [ 387.256383][ T9889] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 387.582299][ T9892] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 388.429267][ T9903] FAULT_INJECTION: forcing a failure. [ 388.429267][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 388.442688][ T9903] CPU: 0 UID: 0 PID: 9903 Comm: syz.1.765 Not tainted syzkaller #0 PREEMPT(full) [ 388.442722][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 388.442738][ T9903] Call Trace: [ 388.442747][ T9903] [ 388.442757][ T9903] dump_stack_lvl+0x16c/0x1f0 [ 388.442791][ T9903] should_fail_ex+0x512/0x640 [ 388.442817][ T9903] ? kmem_cache_alloc_noprof+0x62/0x720 [ 388.442859][ T9903] should_failslab+0xc2/0x120 [ 388.442892][ T9903] kmem_cache_alloc_noprof+0x75/0x720 [ 388.442929][ T9903] ? create_new_namespaces+0x30/0xab0 [ 388.442975][ T9903] ? create_new_namespaces+0x30/0xab0 [ 388.443006][ T9903] create_new_namespaces+0x30/0xab0 [ 388.443046][ T9903] __do_sys_setns+0x210/0x1f90 [ 388.443078][ T9903] ? fput+0x9b/0xd0 [ 388.443112][ T9903] ? __pfx___do_sys_setns+0x10/0x10 [ 388.443159][ T9903] do_syscall_64+0xcd/0xf80 [ 388.443189][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.443213][ T9903] RIP: 0033:0x7f0d5838f7c9 [ 388.443234][ T9903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.443257][ T9903] RSP: 002b:00007f0d591c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 388.443281][ T9903] RAX: ffffffffffffffda RBX: 00007f0d585e5fa0 RCX: 00007f0d5838f7c9 [ 388.443299][ T9903] RDX: 0000000000000000 RSI: 0000000060020000 RDI: 0000000000000005 [ 388.443314][ T9903] RBP: 00007f0d58413f91 R08: 0000000000000000 R09: 0000000000000000 [ 388.443329][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.443344][ T9903] R13: 00007f0d585e6038 R14: 00007f0d585e5fa0 R15: 00007ffd56683a58 [ 388.443381][ T9903] [ 389.516574][ T9938] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 391.284205][ T9944] blktrace: Concurrent blktraces are not allowed on loop2 [ 392.473085][ T9986] sp0: Synchronizing with TNC [ 393.706778][T10022] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 966 with max blocks 58 with error 117 [ 393.730950][T10016] FAULT_INJECTION: forcing a failure. [ 393.730950][T10016] name failslab, interval 1, probability 0, space 0, times 0 [ 393.744694][T10016] CPU: 1 UID: 0 PID: 10016 Comm: syz.1.778 Not tainted syzkaller #0 PREEMPT(full) [ 393.744726][T10016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 393.744741][T10016] Call Trace: [ 393.744750][T10016] [ 393.744760][T10016] dump_stack_lvl+0x16c/0x1f0 [ 393.744794][T10016] should_fail_ex+0x512/0x640 [ 393.744821][T10016] ? __kmalloc_cache_noprof+0x5f/0x770 [ 393.744865][T10016] should_failslab+0xc2/0x120 [ 393.744897][T10016] __kmalloc_cache_noprof+0x72/0x770 [ 393.744935][T10016] ? __alloc_workqueue+0x158/0x1810 [ 393.744979][T10016] ? __alloc_workqueue+0x158/0x1810 [ 393.745013][T10016] __alloc_workqueue+0x158/0x1810 [ 393.745061][T10016] alloc_workqueue_noprof+0xd2/0x200 [ 393.745099][T10016] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 393.745140][T10016] ? rcu_is_watching+0x12/0xc0 [ 393.745174][T10016] ? trace_kmalloc+0x2b/0xb0 [ 393.745200][T10016] ? __kmalloc_noprof+0x34f/0x870 [ 393.745235][T10016] ? ieee80211_register_hw+0x15c9/0x4120 [ 393.745275][T10016] ieee80211_register_hw+0x1f1a/0x4120 [ 393.745314][T10016] ? lockdep_hardirqs_on+0x11/0x110 [ 393.745343][T10016] ? __pfx__raw_spin_unlock_irqrestore+0x1/0x10 [ 393.745376][T10016] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 393.745418][T10016] ? __pfx___debug_object_init+0x10/0x10 [ 393.745461][T10016] ? find_held_lock+0x2b/0x80 [ 393.745495][T10016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 393.745532][T10016] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 393.745569][T10016] ? __hrtimer_setup+0x176/0x280 [ 393.745606][T10016] mac80211_hwsim_new_radio+0x329f/0x5080 [ 393.745656][T10016] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 393.745689][T10016] hwsim_new_radio_nl+0xba2/0x1330 [ 393.745709][T10016] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 393.745733][T10016] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 393.745754][T10016] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 393.745778][T10016] genl_family_rcv_msg_doit+0x209/0x2f0 [ 393.745799][T10016] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 393.745820][T10016] ? genl_get_cmd+0x194/0x580 [ 393.745842][T10016] ? bpf_lsm_capable+0x9/0x10 [ 393.745858][T10016] ? security_capable+0x7e/0x260 [ 393.745875][T10016] ? ns_capable+0xd7/0x110 [ 393.745907][T10016] genl_rcv_msg+0x55c/0x800 [ 393.745945][T10016] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.745973][T10016] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 393.745998][T10016] netlink_rcv_skb+0x158/0x420 [ 393.746016][T10016] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.746036][T10016] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.746062][T10016] ? netlink_deliver_tap+0x1ae/0xd30 [ 393.746082][T10016] genl_rcv+0x28/0x40 [ 393.746099][T10016] netlink_unicast+0x5aa/0x870 [ 393.746118][T10016] ? __pfx_netlink_unicast+0x10/0x10 [ 393.746144][T10016] netlink_sendmsg+0x8c8/0xdd0 [ 393.746166][T10016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.746185][T10016] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 393.746204][T10016] ____sys_sendmsg+0xa5d/0xc30 [ 393.746224][T10016] ? copy_msghdr_from_user+0x10a/0x160 [ 393.746239][T10016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.746261][T10016] ? __pfx_futex_wake_mark+0x10/0x10 [ 393.746283][T10016] ___sys_sendmsg+0x134/0x1d0 [ 393.746296][T10016] ? find_held_lock+0x2b/0x80 [ 393.746315][T10016] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.746330][T10016] ? __lock_acquire+0x433/0x22f0 [ 393.746366][T10016] __sys_sendmsg+0x16d/0x220 [ 393.746382][T10016] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.746403][T10016] ? __x64_sys_futex+0x1e0/0x4c0 [ 393.746431][T10016] do_syscall_64+0xcd/0xf80 [ 393.746450][T10016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.746465][T10016] RIP: 0033:0x7f0d5838f7c9 [ 393.746477][T10016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.746492][T10016] RSP: 002b:00007f0d591c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.746506][T10016] RAX: ffffffffffffffda RBX: 00007f0d585e5fa0 RCX: 00007f0d5838f7c9 [ 393.746516][T10016] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 393.746525][T10016] RBP: 00007f0d58413f91 R08: 0000000000000000 R09: 0000000000000000 [ 393.746533][T10016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.746542][T10016] R13: 00007f0d585e6038 R14: 00007f0d585e5fa0 R15: 00007ffd56683a58 [ 393.746563][T10016] [ 394.172712][T10022] EXT4-fs (sda1): This should not happen!! Data will be lost [ 394.172712][T10022] [ 395.243821][T10033] ptrace attach of "./syz-executor exec"[10034] was attempted by "./syz-executor exec"[10033] [ 397.714003][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.1.787'. [ 398.475969][T10051] blktrace: Concurrent blktraces are not allowed on loop2 [ 399.336538][T10084] bond0: invalid ARP target specified [ 403.663586][ T9993] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 404.266211][ T30] audit: type=1800 audit(4294967395.600:7): pid=10146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.796" name="lu_gp_id" dev="configfs" ino=28207 res=0 errno=0 [ 404.991374][ T5930] Process accounting resumed [ 406.156732][T10062] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 961 with max blocks 63 with error 117 [ 406.214036][T10062] EXT4-fs (sda1): This should not happen!! Data will be lost [ 406.214036][T10062] [ 406.257206][T10062] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 957 with max blocks 67 with error 117 [ 406.327211][T10062] EXT4-fs (sda1): This should not happen!! Data will be lost [ 406.327211][T10062] [ 406.382963][T10062] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 965 with max blocks 59 with error 117 [ 406.388400][T10159] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 1 with max blocks 5 with error 117 [ 406.408098][T10062] EXT4-fs (sda1): This should not happen!! Data will be lost [ 406.408098][T10062] [ 406.426389][T10062] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 970 with max blocks 54 with error 117 [ 406.439404][T10062] EXT4-fs (sda1): This should not happen!! Data will be lost [ 406.439404][T10062] [ 406.458887][T10159] EXT4-fs (sda1): This should not happen!! Data will be lost [ 406.458887][T10159] [ 412.277837][T10228] EXT4-fs: 16 callbacks suppressed [ 412.277859][T10228] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 968 with max blocks 3 with error 117 [ 412.420897][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.427744][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.434334][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.440877][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.447502][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.454086][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.460617][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.467098][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.473636][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.480119][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.486625][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.493102][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.499598][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.506085][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.512552][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.519036][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.525536][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.532006][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.538485][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.544957][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.551421][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.557968][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.564537][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.571078][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.577648][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.584219][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.590706][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.597185][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.603658][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.610135][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.616621][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.623076][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.629552][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.636027][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.642481][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.648954][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.655421][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.661872][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.668340][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.674812][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.681262][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.687723][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.694245][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.700729][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.707208][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.713676][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.720168][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.726665][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.733147][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.739637][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.746165][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.752620][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.759088][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.765573][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.772025][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.778530][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.785029][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.791491][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.798039][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.804521][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.810976][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.817443][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.823909][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.830363][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.837673][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.844180][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.850628][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.857090][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.863570][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.870025][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.876491][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.882937][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.889420][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.895884][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.902338][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.908806][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.915273][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.921719][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.928187][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.934650][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.941093][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.947557][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.954025][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.960479][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.966959][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.973411][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.979903][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.986369][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.992818][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 412.999308][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.005784][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.012229][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.018691][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.025169][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.031616][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.038077][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.044605][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.051051][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.057519][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.063982][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.070425][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.076881][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.083332][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.089792][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.096255][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.102701][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.109179][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.115642][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.122104][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.128571][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.135035][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.141482][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.147949][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.154413][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.160862][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.167321][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.173781][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.180226][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.186685][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.193133][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.199612][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.206072][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.212535][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.219002][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.225472][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.231918][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.238375][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.244839][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.252106][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.258600][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.265122][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.271593][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.278090][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.284595][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.291090][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.297562][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.304031][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.310503][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.316976][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.323456][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.329917][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.336385][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.342834][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.349304][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.355774][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.362221][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.368708][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.375178][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.381660][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.388144][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.394620][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.401084][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.407556][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.414038][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.420499][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.426972][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.433448][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.439922][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.446427][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.452878][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.459350][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.465817][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.472262][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.478725][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.485190][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.491642][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.498108][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.504607][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.511069][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.517537][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.524104][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.530581][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.537061][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.543555][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.550013][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.556494][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.562943][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.569414][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.575877][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.582321][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.588799][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.595264][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.601731][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.608197][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.614660][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.621119][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.627606][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.634076][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.640520][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.646978][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.653450][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.659913][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 413.667457][ C1] vcan0: j1939_tp_txtimer: 0xffff8880303e4800: tx aborted with unknown reason: -2 [ 413.771635][T10228] EXT4-fs (sda1): This should not happen!! Data will be lost [ 413.771635][T10228] [ 414.176718][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880303e4800: abort rx timeout. Force session deactivation [ 414.444467][T10246] bond0: no command found in slaves file - use +ifname or -ifname [ 414.753310][T10250] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.818: iget: checksum invalid [ 414.826199][T10250] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 414.864507][T10250] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.818: iget: checksum invalid [ 414.893786][T10250] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 414.913662][T10250] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.818: iget: checksum invalid [ 414.941852][T10250] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 414.984400][T10250] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.818: iget: checksum invalid [ 415.040896][T10250] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 415.144831][T10250] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 415.166143][T10258] mkiss: ax0: crc mode is auto. [ 415.243719][T10250] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 419.638962][T10313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.831'. [ 422.671045][T10344] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 972 with max blocks 52 with error 117 [ 422.724048][T10344] EXT4-fs (sda1): This should not happen!! Data will be lost [ 422.724048][T10344] [ 423.545024][T10365] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 423.699584][T10365] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 423.840024][T10365] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 423.993729][T10365] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 424.164714][T10365] page dumped because: unmovable page [ 424.170132][T10365] page_owner info is not present (never set?) [ 426.885664][T10008] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 970 with max blocks 54 with error 117 [ 426.919482][T10008] EXT4-fs (sda1): This should not happen!! Data will be lost [ 426.919482][T10008] [ 426.966611][T10008] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 964 with max blocks 60 with error 117 [ 427.055087][T10008] EXT4-fs (sda1): This should not happen!! Data will be lost [ 427.055087][T10008] [ 427.086746][T10008] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1 with max blocks 2 with error 117 [ 427.145060][T10008] EXT4-fs (sda1): This should not happen!! Data will be lost [ 427.145060][T10008] [ 427.195543][T10008] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1 with max blocks 5 with error 117 [ 427.273593][T10008] EXT4-fs (sda1): This should not happen!! Data will be lost [ 427.273593][T10008] [ 428.578918][ T30] audit: type=1800 audit(4294967419.910:8): pid=10430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=050820 name="lu_gp_id" dev="configfs" ino=29503 res=0 errno=0 [ 429.335785][T10437] EXT4-fs: 16 callbacks suppressed [ 429.335800][T10437] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 974 with max blocks 50 with error 117 [ 429.356541][T10437] EXT4-fs (sda1): This should not happen!! Data will be lost [ 429.356541][T10437] [ 430.398654][T10449] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 1 with max blocks 1 with error 117 [ 430.428507][T10449] EXT4-fs (sda1): This should not happen!! Data will be lost [ 430.428507][T10449] [ 431.347225][T10468] serio: Serial port ttyS2 [ 431.856884][T10473] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 431.865935][T10473] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 431.874590][T10473] memcg:ffff888077439781 [ 431.879018][T10473] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 431.887284][T10473] page_type: f5(slab) [ 431.891390][T10473] raw: 00fff00000000040 ffff88813ffb03c0 0000000000000000 0000000000000001 [ 431.900136][T10473] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888077439781 [ 431.909348][T10473] head: 00fff00000000040 ffff88813ffb03c0 0000000000000000 0000000000000001 [ 431.918403][T10473] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888077439781 [ 431.927664][T10473] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 431.936510][T10473] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 431.946683][T10473] page dumped because: unmovable page [ 431.953237][T10473] page_owner tracks the page as allocated [ 431.959097][T10473] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5839, tgid 5839 (syz-executor), ts 85585331613, free_ts 52841028974 [ 431.980794][T10473] post_alloc_hook+0x1af/0x220 [ 431.985938][T10473] get_page_from_freelist+0xd0b/0x31a0 [ 431.991636][T10473] __alloc_frozen_pages_noprof+0x25f/0x2440 [ 431.998968][T10473] alloc_pages_mpol+0x1fb/0x550 [ 432.003956][T10473] new_slab+0x24a/0x360 [ 432.008210][T10473] ___slab_alloc+0xee7/0x1cd0 [ 432.019675][T10473] __slab_alloc.constprop.0+0x63/0x110 [ 432.053518][T10473] __kmalloc_node_track_caller_noprof+0x4db/0x890 [ 432.070389][T10473] kmemdup_noprof+0x29/0x60 [ 432.083813][T10473] __devinet_sysctl_register+0xbc/0x360 [ 432.089645][T10473] devinet_sysctl_register+0x17b/0x200 [ 432.120216][T10473] inetdev_init+0x2b8/0x580 [ 432.155283][T10473] inetdev_event+0xc32/0x1840 [ 432.193659][T10473] notifier_call_chain+0xbc/0x3e0 [ 432.222184][T10473] call_netdevice_notifiers_info+0xbe/0x110 [ 432.228376][T10473] register_netdevice+0x1792/0x21d0 [ 432.274508][T10473] page last free pid 5504 tgid 5504 stack trace: [ 432.283787][T10473] __free_frozen_pages+0x7df/0x1160 [ 432.323740][T10473] qlist_free_all+0x4d/0x120 [ 432.351227][T10473] kasan_quarantine_reduce+0x195/0x1e0 [ 432.393830][T10473] __kasan_slab_alloc+0x69/0x90 [ 432.448719][T10473] kmem_cache_alloc_noprof+0x250/0x720 [ 432.503322][T10473] getname_flags.part.0+0x4c/0x550 [ 432.561313][T10473] getname_flags+0x93/0xf0 [ 432.571353][T10473] do_sys_openat2+0xb8/0x280 [ 432.614898][T10473] __x64_sys_openat+0x174/0x210 [ 432.622267][T10473] do_syscall_64+0xcd/0xf80 [ 432.693622][T10473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.754204][T10489] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 946 with max blocks 78 with error 117 [ 432.775460][T10489] EXT4-fs (sda1): This should not happen!! Data will be lost [ 432.775460][T10489] [ 434.382577][T10509] FAULT_INJECTION: forcing a failure. [ 434.382577][T10509] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 434.397142][T10509] CPU: 1 UID: 0 PID: 10509 Comm: syz.3.871 Not tainted syzkaller #0 PREEMPT(full) [ 434.397175][T10509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.397191][T10509] Call Trace: [ 434.397199][T10509] [ 434.397209][T10509] dump_stack_lvl+0x16c/0x1f0 [ 434.397243][T10509] should_fail_ex+0x512/0x640 [ 434.397275][T10509] should_fail_alloc_page+0xe7/0x130 [ 434.397311][T10509] prepare_alloc_pages+0x3c2/0x610 [ 434.397347][T10509] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 434.397387][T10509] ? arch_stack_walk+0xa6/0x100 [ 434.397430][T10509] ? stack_trace_save+0x8e/0xc0 [ 434.397455][T10509] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 434.397493][T10509] ? stack_depot_save_flags+0x29/0x9b0 [ 434.397530][T10509] ? __kasan_slab_alloc+0x89/0x90 [ 434.397558][T10509] ? kmem_cache_alloc_noprof+0x250/0x720 [ 434.397593][T10509] ? __pmd_alloc+0xbf/0x8b0 [ 434.397620][T10509] ? __handle_mm_fault+0xa3c/0x2a30 [ 434.397650][T10509] ? handle_mm_fault+0x3fe/0xad0 [ 434.397680][T10509] ? __get_user_pages+0x605/0x33c0 [ 434.397707][T10509] ? populate_vma_page_range+0x267/0x3f0 [ 434.397731][T10509] ? __mm_populate+0x1d8/0x380 [ 434.397759][T10509] ? vm_mmap_pgoff+0x37f/0x470 [ 434.397783][T10509] ? ksys_mmap_pgoff+0x7d/0x5c0 [ 434.397807][T10509] ? __x64_sys_mmap+0x125/0x190 [ 434.397828][T10509] ? do_syscall_64+0xcd/0xf80 [ 434.397854][T10509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.397879][T10509] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 434.397917][T10509] ? policy_nodemask+0xea/0x4e0 [ 434.397950][T10509] alloc_pages_mpol+0x1fb/0x550 [ 434.397983][T10509] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 434.398024][T10509] alloc_pages_noprof+0x12d/0x180 [ 434.398063][T10509] pte_alloc_one+0x1e/0x350 [ 434.398098][T10509] __pte_alloc+0x6d/0x380 [ 434.398124][T10509] ? __pfx___pte_alloc+0x10/0x10 [ 434.398154][T10509] ? do_raw_spin_lock+0x12c/0x2b0 [ 434.398185][T10509] ? find_held_lock+0x2b/0x80 [ 434.398219][T10509] do_pte_missing+0x2964/0x4000 [ 434.398256][T10509] ? _raw_spin_unlock+0x28/0x50 [ 434.398281][T10509] ? __pmd_alloc+0x64f/0x8b0 [ 434.398313][T10509] __handle_mm_fault+0x14ca/0x2a30 [ 434.398357][T10509] ? __pfx___handle_mm_fault+0x10/0x10 [ 434.398421][T10509] handle_mm_fault+0x3fe/0xad0 [ 434.398461][T10509] __get_user_pages+0x605/0x33c0 [ 434.398507][T10509] ? __pfx___get_user_pages+0x10/0x10 [ 434.398547][T10509] populate_vma_page_range+0x267/0x3f0 [ 434.398580][T10509] ? __pfx_populate_vma_page_range+0x10/0x10 [ 434.398611][T10509] ? __pfx_find_vma_intersection+0x10/0x10 [ 434.398641][T10509] ? do_mmap+0x69c/0x1210 [ 434.398673][T10509] __mm_populate+0x1d8/0x380 [ 434.398704][T10509] ? __pfx___mm_populate+0x10/0x10 [ 434.398738][T10509] ? up_write+0x282/0x4e0 [ 434.398771][T10509] vm_mmap_pgoff+0x37f/0x470 [ 434.398803][T10509] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 434.398839][T10509] ? __x64_sys_futex+0x1e0/0x4c0 [ 434.398865][T10509] ? __x64_sys_futex+0x1e9/0x4c0 [ 434.398897][T10509] ksys_mmap_pgoff+0x7d/0x5c0 [ 434.398923][T10509] ? xfd_validate_state+0x61/0x180 [ 434.398958][T10509] ? __pfx_ksys_read+0x10/0x10 [ 434.398991][T10509] __x64_sys_mmap+0x125/0x190 [ 434.399019][T10509] do_syscall_64+0xcd/0xf80 [ 434.399050][T10509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.399082][T10509] RIP: 0033:0x7f69e8f8f7c9 [ 434.399103][T10509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.399127][T10509] RSP: 002b:00007f69e9e5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 434.399152][T10509] RAX: ffffffffffffffda RBX: 00007f69e91e5fa0 RCX: 00007f69e8f8f7c9 [ 434.399170][T10509] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 434.399186][T10509] RBP: 00007f69e9013f91 R08: ffffffffffffffff R09: 0000000000000000 [ 434.399203][T10509] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 434.399218][T10509] R13: 00007f69e91e6038 R14: 00007f69e91e5fa0 R15: 00007fff1ced7bb8 [ 434.399256][T10509] [ 435.161052][T10524] delete_channel: no stack [ 435.805033][T10534] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 969 with max blocks 55 with error 117 [ 435.817864][T10534] EXT4-fs (sda1): This should not happen!! Data will be lost [ 435.817864][T10534] [ 435.976637][T10540] FAULT_INJECTION: forcing a failure. [ 435.976637][T10540] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 436.063791][T10540] CPU: 0 UID: 0 PID: 10540 Comm: syz.2.875 Not tainted syzkaller #0 PREEMPT(full) [ 436.063837][T10540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.063850][T10540] Call Trace: [ 436.063858][T10540] [ 436.063868][T10540] dump_stack_lvl+0x16c/0x1f0 [ 436.063901][T10540] should_fail_ex+0x512/0x640 [ 436.063943][T10540] should_fail_alloc_page+0xe7/0x130 [ 436.063979][T10540] prepare_alloc_pages+0x3c2/0x610 [ 436.064015][T10540] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 436.064068][T10540] ? mas_wr_store_entry+0x104d/0x24c0 [ 436.064105][T10540] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 436.064143][T10540] ? perf_event_mmap+0xba/0xe70 [ 436.064170][T10540] ? mas_store_prealloc+0x924/0x17f0 [ 436.064211][T10540] ? vma_wants_writenotify+0x10b/0x390 [ 436.064235][T10540] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 436.064257][T10540] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 436.064295][T10540] ? policy_nodemask+0xea/0x4e0 [ 436.064329][T10540] alloc_pages_mpol+0x1fb/0x550 [ 436.064359][T10540] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 436.064399][T10540] alloc_pages_noprof+0x12d/0x180 [ 436.064431][T10540] __pmd_alloc+0x3b/0x8b0 [ 436.064457][T10540] __handle_mm_fault+0xa3c/0x2a30 [ 436.064481][T10540] ? __pfx___handle_mm_fault+0x10/0x10 [ 436.064516][T10540] handle_mm_fault+0x3fe/0xad0 [ 436.064538][T10540] __get_user_pages+0x605/0x33c0 [ 436.064563][T10540] ? __pfx___get_user_pages+0x10/0x10 [ 436.064594][T10540] populate_vma_page_range+0x267/0x3f0 [ 436.064628][T10540] ? __pfx_populate_vma_page_range+0x10/0x10 [ 436.064652][T10540] ? __pfx_find_vma_intersection+0x10/0x10 [ 436.064669][T10540] ? do_mmap+0x69c/0x1210 [ 436.064686][T10540] __mm_populate+0x1d8/0x380 [ 436.064704][T10540] ? __pfx___mm_populate+0x10/0x10 [ 436.064722][T10540] ? up_write+0x282/0x4e0 [ 436.064741][T10540] vm_mmap_pgoff+0x37f/0x470 [ 436.064759][T10540] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 436.064778][T10540] ? __x64_sys_futex+0x1e0/0x4c0 [ 436.064792][T10540] ? __x64_sys_futex+0x1e9/0x4c0 [ 436.064810][T10540] ksys_mmap_pgoff+0x7d/0x5c0 [ 436.064824][T10540] ? xfd_validate_state+0x61/0x180 [ 436.064844][T10540] ? __pfx_ksys_write+0x10/0x10 [ 436.064862][T10540] __x64_sys_mmap+0x125/0x190 [ 436.064877][T10540] do_syscall_64+0xcd/0xf80 [ 436.064896][T10540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.064918][T10540] RIP: 0033:0x7f132598f7c9 [ 436.064931][T10540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.064946][T10540] RSP: 002b:00007f1326819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 436.064960][T10540] RAX: ffffffffffffffda RBX: 00007f1325be5fa0 RCX: 00007f132598f7c9 [ 436.064971][T10540] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 436.064980][T10540] RBP: 00007f1325a13f91 R08: 0000000000000002 R09: 0000000000008000 [ 436.064988][T10540] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 436.064997][T10540] R13: 00007f1325be6038 R14: 00007f1325be5fa0 R15: 00007ffdb9b451f8 [ 436.065017][T10540] [ 438.917054][T10566] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 959 with max blocks 16 with error 117 [ 438.985164][T10566] EXT4-fs (sda1): This should not happen!! Data will be lost [ 438.985164][T10566] [ 439.034805][ T30] audit: type=1800 audit(4294967430.360:9): pid=10577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.880" name="lu_gp_id" dev="configfs" ino=30849 res=0 errno=0 [ 439.240910][T10579] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.000249][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.007029][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.267139][T10592] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 966 with max blocks 58 with error 117 [ 440.331364][T10592] EXT4-fs (sda1): This should not happen!! Data will be lost [ 440.331364][T10592] [ 440.586056][T10600] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 987 with max blocks 37 with error 117 [ 440.624497][T10600] EXT4-fs (sda1): This should not happen!! Data will be lost [ 440.624497][T10600] [ 440.772806][T10601] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 440.796183][T10601] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 440.812282][T10601] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 440.866760][T10026] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.965699][T10608] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 963 with max blocks 14 with error 117 [ 440.999459][T10608] EXT4-fs (sda1): This should not happen!! Data will be lost [ 440.999459][T10608] [ 441.075325][T10026] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.109582][T10606] netlink: 'syz.1.887': attribute type 3 has an invalid length. [ 441.167081][T10026] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.525313][T10026] bridge_slave_0: left allmulticast mode [ 441.552783][T10026] bridge_slave_0: left promiscuous mode [ 441.575784][T10026] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.719116][T10000] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 441.730783][T10000] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 441.743859][T10000] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 441.757029][T10000] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 441.767901][T10000] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 442.988064][T10652] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1 with max blocks 1 with error 117 [ 443.040774][T10652] EXT4-fs (sda1): This should not happen!! Data will be lost [ 443.040774][T10652] [ 443.094302][T10026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.177609][T10026] bond0 (unregistering): Released all slaves [ 443.691737][T10676] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 949 with max blocks 75 with error 117 [ 443.710480][T10629] chnl_net:caif_netlink_parms(): no params data found [ 443.786944][T10676] EXT4-fs (sda1): This should not happen!! Data will be lost [ 443.786944][T10676] [ 443.827110][ T9993] Bluetooth: hci0: command tx timeout [ 445.236745][T10629] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.287313][T10629] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.313665][T10629] bridge_slave_0: entered allmulticast mode [ 445.324580][T10629] bridge_slave_0: entered promiscuous mode [ 445.615247][T10629] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.624100][T10629] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.631439][T10629] bridge_slave_1: entered allmulticast mode [ 445.644691][T10629] bridge_slave_1: entered promiscuous mode [ 445.907322][ T9993] Bluetooth: hci0: command tx timeout [ 446.216819][T10629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.308020][T10629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.746488][T10707] delete_channel: no stack [ 446.786501][T10709] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 446.799318][T10026] hsr_slave_0: left promiscuous mode [ 446.806619][T10026] hsr_slave_1: left promiscuous mode [ 446.813928][T10709] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 446.822219][T10026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 446.835329][T10026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 446.845300][T10709] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 446.858866][T10026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 446.871961][T10026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.884098][T10709] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 446.917699][T10709] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 446.921573][T10026] veth1_macvtap: left promiscuous mode [ 446.954001][T10026] veth0_macvtap: left promiscuous mode [ 446.959575][T10026] veth1_vlan: left promiscuous mode [ 446.975021][T10026] veth0_vlan: left promiscuous mode [ 447.022171][T10709] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 448.006226][T10727] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 448.386708][ T9993] Bluetooth: hci2: command 0x0406 tx timeout [ 449.113547][ T9993] Bluetooth: hci3: command 0x0406 tx timeout [ 449.133576][T10000] Bluetooth: hci0: command 0x0419 tx timeout [ 449.153004][T10026] team0 (unregistering): Port device team_slave_1 removed [ 450.049345][T10026] team0 (unregistering): Port device team_slave_0 removed [ 450.302543][T10629] team0: Port device team_slave_0 added [ 450.339073][T10629] team0: Port device team_slave_1 added [ 450.374458][T10732] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.381020][T10732] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 450.403791][T10732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.474155][T10629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.512203][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.552692][T10629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.612165][T10629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.622081][T10629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.649328][T10629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.748177][T10629] hsr_slave_0: entered promiscuous mode [ 450.757328][T10629] hsr_slave_1: entered promiscuous mode [ 452.299216][T10629] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 452.386955][T10000] Bluetooth: hci2: command 0x0406 tx timeout [ 452.392976][ T9993] Bluetooth: hci3: command 0x0406 tx timeout [ 452.463579][T10000] Bluetooth: hci0: command 0x0419 tx timeout [ 452.483921][T10629] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 452.552412][T10629] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 452.678183][T10629] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 453.663362][T10629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.689760][T10629] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.715300][T10002] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.722424][T10002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.786444][T10002] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.793653][T10002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.546713][T10000] Bluetooth: hci0: command 0x0419 tx timeout [ 454.663253][T10629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.727178][T10629] veth0_vlan: entered promiscuous mode [ 454.907793][T10629] veth1_vlan: entered promiscuous mode [ 455.365353][T10629] veth0_macvtap: entered promiscuous mode [ 455.611897][T10629] veth1_macvtap: entered promiscuous mode [ 455.794507][T10629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.985231][T10629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.290812][T10002] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.338120][T10002] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.418697][T10002] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.474231][T10002] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.504658][T10856] FAULT_INJECTION: forcing a failure. [ 456.504658][T10856] name failslab, interval 1, probability 0, space 0, times 0 [ 456.537683][T10856] CPU: 1 UID: 0 PID: 10856 Comm: syz.2.913 Not tainted syzkaller #0 PREEMPT(full) [ 456.537719][T10856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.537735][T10856] Call Trace: [ 456.537744][T10856] [ 456.537755][T10856] dump_stack_lvl+0x16c/0x1f0 [ 456.537792][T10856] should_fail_ex+0x512/0x640 [ 456.537820][T10856] ? fs_reclaim_acquire+0xae/0x150 [ 456.537855][T10856] should_failslab+0xc2/0x120 [ 456.537889][T10856] kmem_cache_alloc_noprof+0x75/0x720 [ 456.537928][T10856] ? __pfx_map_id_range_down+0x10/0x10 [ 456.537961][T10856] ? security_inode_alloc+0x3b/0x2b0 [ 456.537996][T10856] ? security_inode_alloc+0x3b/0x2b0 [ 456.538022][T10856] security_inode_alloc+0x3b/0x2b0 [ 456.538052][T10856] inode_init_always_gfp+0xced/0x1040 [ 456.538090][T10856] alloc_inode+0x86/0x240 [ 456.538114][T10856] sock_alloc+0x40/0x280 [ 456.538145][T10856] sock_create_lite+0x82/0x120 [ 456.538179][T10856] __netlink_kernel_create+0xbd/0x7b0 [ 456.538215][T10856] ? __pfx___netlink_kernel_create+0x10/0x10 [ 456.538245][T10856] ? find_held_lock+0x2b/0x80 [ 456.538279][T10856] ? audit_net_init+0x190/0x440 [ 456.538308][T10856] audit_net_init+0x1ae/0x440 [ 456.538334][T10856] ? __pfx_audit_net_init+0x10/0x10 [ 456.538361][T10856] ? rcu_is_watching+0x12/0xc0 [ 456.538393][T10856] ? __pfx_audit_receive+0x10/0x10 [ 456.538422][T10856] ? __pfx_audit_multicast_bind+0x10/0x10 [ 456.538462][T10856] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 456.538494][T10856] ? __pfx_genl_unbind+0x10/0x10 [ 456.538526][T10856] ? ops_init+0x77/0x5f0 [ 456.538559][T10856] ? __pfx_audit_net_init+0x10/0x10 [ 456.538587][T10856] ops_init+0x1e2/0x5f0 [ 456.538624][T10856] setup_net+0x11d/0x3a0 [ 456.538651][T10856] ? __pfx_setup_net+0x10/0x10 [ 456.538677][T10856] ? lockdep_init_map_type+0x5c/0x270 [ 456.538706][T10856] ? mutex_init_lockep+0x110/0x150 [ 456.538740][T10856] copy_net_ns+0x351/0x5d0 [ 456.538775][T10856] create_new_namespaces+0x3ea/0xab0 [ 456.538815][T10856] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 456.538852][T10856] ksys_unshare+0x45b/0xa40 [ 456.538876][T10856] ? __pfx_ksys_unshare+0x10/0x10 [ 456.538915][T10856] ? xfd_validate_state+0x61/0x180 [ 456.538961][T10856] __x64_sys_unshare+0x31/0x40 [ 456.538984][T10856] do_syscall_64+0xcd/0xf80 [ 456.539016][T10856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.539042][T10856] RIP: 0033:0x7f132598f7c9 [ 456.539064][T10856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.539090][T10856] RSP: 002b:00007f13267f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 456.539115][T10856] RAX: ffffffffffffffda RBX: 00007f1325be6090 RCX: 00007f132598f7c9 [ 456.539129][T10856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 456.539143][T10856] RBP: 00007f1325a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.539157][T10856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.539169][T10856] R13: 00007f1325be6128 R14: 00007f1325be6090 R15: 00007ffdb9b451f8 [ 456.539188][T10856] [ 456.539212][T10856] audit: cannot initialize netlink socket in namespace [ 456.625613][ T9993] Bluetooth: hci0: command 0x0419 tx timeout [ 457.074032][T10736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.081873][T10736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.090868][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 970 with max blocks 54 with error 117 [ 457.135294][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 457.135294][T10236] [ 457.162381][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 956 with max blocks 68 with error 117 [ 457.199973][T10736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.220971][T10736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.234833][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 457.234833][T10236] [ 457.327875][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1 with max blocks 5 with error 117 [ 457.373198][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 457.373198][T10236] [ 457.384988][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 954 with max blocks 70 with error 117 [ 457.409722][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 457.409722][T10236] [ 457.433280][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 966 with max blocks 15 with error 117 [ 457.456729][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 457.456729][T10236] [ 458.386881][T10882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.917'. [ 458.486825][T10882] veth0_macvtap: left promiscuous mode [ 458.527738][T10882] macvtap0: entered promiscuous mode [ 458.533044][T10882] macvtap0: entered allmulticast mode [ 459.813824][T10892] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.933558][T10892] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 459.939624][T10892] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 461.834068][T10000] Bluetooth: hci2: command 0x0406 tx timeout [ 461.840120][ T9993] Bluetooth: hci3: command 0x0406 tx timeout [ 461.983671][ T9993] Bluetooth: hci0: command 0x0419 tx timeout [ 462.225945][T10953] EXT4-fs: 16 callbacks suppressed [ 462.225967][T10953] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1 with max blocks 1 with error 117 [ 462.323654][T10953] EXT4-fs (sda1): This should not happen!! Data will be lost [ 462.323654][T10953] [ 465.971884][T10998] netlink: 186 bytes leftover after parsing attributes in process `syz.0.930'. [ 466.149745][ T30] audit: type=1800 audit(4294967457.480:10): pid=11004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=050820 name="lu_gp_id" dev="configfs" ino=32274 res=0 errno=0 [ 469.861065][T11041] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 937 with max blocks 87 with error 117 [ 469.903681][T11041] EXT4-fs (sda1): This should not happen!! Data will be lost [ 469.903681][T11041] [ 471.096840][T11045] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 471.266515][T11045] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 471.369829][T11045] memcg:ffff888077439781 [ 471.400236][T11045] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 471.459379][T11045] page_type: f5(slab) [ 471.463390][T11045] raw: 00fff00000000040 ffff88813ffb03c0 0000000000000000 dead000000000001 [ 471.720111][T11045] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888077439781 [ 471.849499][T11045] head: 00fff00000000040 ffff88813ffb03c0 0000000000000000 dead000000000001 [ 471.946828][T11045] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888077439781 [ 471.999141][T11045] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 472.049038][T11054] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 947 with max blocks 77 with error 117 [ 472.069751][T11054] EXT4-fs (sda1): This should not happen!! Data will be lost [ 472.069751][T11054] [ 472.083357][T11045] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 472.184277][T11045] page dumped because: unmovable page [ 472.229446][T11045] page_owner tracks the page as allocated [ 472.303609][T11045] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5839, tgid 5839 (syz-executor), ts 85585331613, free_ts 52841028974 [ 472.451934][T11045] post_alloc_hook+0x1af/0x220 [ 472.487152][T11045] get_page_from_freelist+0xd0b/0x31a0 [ 472.534952][T11045] __alloc_frozen_pages_noprof+0x25f/0x2440 [ 472.540911][T11045] alloc_pages_mpol+0x1fb/0x550 [ 472.583409][T11045] new_slab+0x24a/0x360 [ 472.587946][T11045] ___slab_alloc+0xee7/0x1cd0 [ 472.698950][T11045] __slab_alloc.constprop.0+0x63/0x110 [ 472.717480][T11045] __kmalloc_node_track_caller_noprof+0x4db/0x890 [ 472.773603][T11045] kmemdup_noprof+0x29/0x60 [ 472.778162][T11045] __devinet_sysctl_register+0xbc/0x360 [ 472.890740][T11045] devinet_sysctl_register+0x17b/0x200 [ 472.963146][T11045] inetdev_init+0x2b8/0x580 [ 472.973287][T11045] inetdev_event+0xc32/0x1840 [ 472.982380][T11045] notifier_call_chain+0xbc/0x3e0 [ 472.993543][T11045] call_netdevice_notifiers_info+0xbe/0x110 [ 473.028477][T11045] register_netdevice+0x1792/0x21d0 [ 473.041945][T11045] page last free pid 5504 tgid 5504 stack trace: [ 473.063646][T11045] __free_frozen_pages+0x7df/0x1160 [ 473.078710][T11045] qlist_free_all+0x4d/0x120 [ 473.086118][T11045] kasan_quarantine_reduce+0x195/0x1e0 [ 473.091583][T11045] __kasan_slab_alloc+0x69/0x90 [ 473.107635][T11045] kmem_cache_alloc_noprof+0x250/0x720 [ 473.145562][T11045] getname_flags.part.0+0x4c/0x550 [ 473.150694][T11045] getname_flags+0x93/0xf0 [ 473.253994][T11045] do_sys_openat2+0xb8/0x280 [ 473.304105][T11045] __x64_sys_openat+0x174/0x210 [ 473.385145][T11045] do_syscall_64+0xcd/0xf80 [ 473.389676][T11045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.554457][T11095] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 972 with max blocks 52 with error 117 [ 475.573883][T11095] EXT4-fs (sda1): This should not happen!! Data will be lost [ 475.573883][T11095] [ 477.229926][T11116] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1 with max blocks 1 with error 117 [ 477.264172][T11116] EXT4-fs (sda1): This should not happen!! Data will be lost [ 477.264172][T11116] [ 477.964447][T11122] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 974 with max blocks 50 with error 117 [ 478.113587][T11122] EXT4-fs (sda1): This should not happen!! Data will be lost [ 478.113587][T11122] [ 478.522347][ T9993] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 479.634424][ T30] audit: type=1800 audit(4294967470.970:11): pid=11148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=050820 name="lu_gp_id" dev="configfs" ino=32575 res=0 errno=0 [ 483.698337][T11197] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 962 with max blocks 62 with error 117 [ 483.713625][T11197] EXT4-fs (sda1): This should not happen!! Data will be lost [ 483.713625][T11197] [ 484.495237][T10013] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 961 with max blocks 63 with error 117 [ 484.513655][T10013] EXT4-fs (sda1): This should not happen!! Data will be lost [ 484.513655][T10013] [ 484.547971][T10013] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 951 with max blocks 73 with error 117 [ 484.582212][T10013] EXT4-fs (sda1): This should not happen!! Data will be lost [ 484.582212][T10013] [ 484.723859][T10013] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 961 with max blocks 63 with error 117 [ 484.770734][T10013] EXT4-fs (sda1): This should not happen!! Data will be lost [ 484.770734][T10013] [ 484.866770][T10013] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 951 with max blocks 73 with error 117 [ 484.881295][T10013] EXT4-fs (sda1): This should not happen!! Data will be lost [ 484.881295][T10013] [ 488.302284][T11255] Unable to find swap-space signature [ 496.311000][T11319] EXT4-fs: 12 callbacks suppressed [ 496.311015][T11319] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 969 with max blocks 55 with error 117 [ 496.328962][T11319] EXT4-fs (sda1): This should not happen!! Data will be lost [ 496.328962][T11319] [ 497.403615][T10089] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 965 with max blocks 59 with error 117 [ 497.430649][T10089] EXT4-fs (sda1): This should not happen!! Data will be lost [ 497.430649][T10089] [ 497.444747][T10089] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1435 with max blocks 50 with error 117 [ 497.457570][T10089] EXT4-fs (sda1): This should not happen!! Data will be lost [ 497.457570][T10089] [ 497.473603][T10089] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 964 with max blocks 60 with error 117 [ 497.488721][T10089] EXT4-fs (sda1): This should not happen!! Data will be lost [ 497.488721][T10089] [ 497.501004][T10089] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1 with max blocks 1 with error 117 [ 497.533546][T10089] EXT4-fs (sda1): This should not happen!! Data will be lost [ 497.533546][T10089] [ 500.094903][ T9995] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.350272][ T9995] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.593581][ T9995] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.019487][ T9995] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.310789][T11391] program syz.2.1003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 501.429541][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.437679][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.887730][T10000] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.911936][T11392] FAULT_INJECTION: forcing a failure. [ 501.911936][T11392] name failslab, interval 1, probability 0, space 0, times 0 [ 501.924775][T11392] CPU: 1 UID: 0 PID: 11392 Comm: syz.2.1003 Not tainted syzkaller #0 PREEMPT(full) [ 501.924796][T11392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 501.924805][T11392] Call Trace: [ 501.924811][T11392] [ 501.924817][T11392] dump_stack_lvl+0x16c/0x1f0 [ 501.924840][T11392] should_fail_ex+0x512/0x640 [ 501.924856][T11392] ? fs_reclaim_acquire+0xae/0x150 [ 501.924875][T11392] should_failslab+0xc2/0x120 [ 501.924894][T11392] kmem_cache_alloc_noprof+0x75/0x720 [ 501.924915][T11392] ? __pfx_map_id_range_down+0x10/0x10 [ 501.924933][T11392] ? security_inode_alloc+0x3b/0x2b0 [ 501.924953][T11392] ? security_inode_alloc+0x3b/0x2b0 [ 501.924967][T11392] security_inode_alloc+0x3b/0x2b0 [ 501.924983][T11392] inode_init_always_gfp+0xced/0x1040 [ 501.925004][T11392] alloc_inode+0x86/0x240 [ 501.925017][T11392] new_inode+0x22/0x1c0 [ 501.925037][T11392] proc_pid_make_inode+0x22/0x160 [ 501.925053][T11392] proc_ns_dir_lookup+0x25b/0x390 [ 501.925070][T11392] ? __pfx_proc_ns_dir_lookup+0x10/0x10 [ 501.925083][T11392] lookup_open.isra.0+0x4e2/0x1780 [ 501.925104][T11392] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 501.925130][T11392] ? mnt_get_write_access+0x1e9/0x2f0 [ 501.925154][T11392] path_openat+0x12bb/0x3140 [ 501.925177][T11392] ? __pfx_path_openat+0x10/0x10 [ 501.925202][T11392] do_filp_open+0x20b/0x470 [ 501.925220][T11392] ? __pfx_do_filp_open+0x10/0x10 [ 501.925244][T11392] ? __pfx_kfree_link+0x10/0x10 [ 501.925264][T11392] ? alloc_fd+0x471/0x7d0 [ 501.925286][T11392] do_sys_openat2+0x11f/0x280 [ 501.925299][T11392] ? __pfx_do_sys_openat2+0x10/0x10 [ 501.925319][T11392] __x64_sys_openat+0x174/0x210 [ 501.925332][T11392] ? __pfx___x64_sys_openat+0x10/0x10 [ 501.925353][T11392] do_syscall_64+0xcd/0xf80 [ 501.925371][T11392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.925385][T11392] RIP: 0033:0x7f132598e010 [ 501.925397][T11392] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 501.925411][T11392] RSP: 002b:00007f13267f7f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 501.925425][T11392] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f132598e010 [ 501.925434][T11392] RDX: 0000000000000002 RSI: 00007f13267f7fa0 RDI: 00000000ffffff9c [ 501.925443][T11392] RBP: 00007f13267f7fa0 R08: 0000000000000000 R09: 0000000000000000 [ 501.925451][T11392] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 501.925459][T11392] R13: 00007f1325be6128 R14: 00007f1325be6090 R15: 00007ffdb9b451f8 [ 501.925478][T11392] [ 502.235608][T10000] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 502.484087][T10000] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 502.495163][T10000] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 502.528703][T10000] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 502.663810][ T9995] bridge_slave_1: left allmulticast mode [ 502.669493][ T9995] bridge_slave_1: left promiscuous mode [ 502.675756][ T9995] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.745208][ T9995] bridge_slave_0: left allmulticast mode [ 502.753488][ T9995] bridge_slave_0: left promiscuous mode [ 502.759271][ T9995] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.553399][ T9995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.629874][ T9995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.650038][ T9995] bond0 (unregistering): Released all slaves [ 504.013693][ T9995] HfR: left promiscuous mode [ 504.624755][T10000] Bluetooth: hci2: command tx timeout [ 504.792984][ T9995] hsr_slave_0: left promiscuous mode [ 504.798975][ T9995] hsr_slave_1: left promiscuous mode [ 504.810521][ T9995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.818017][ T9995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.825862][ T9995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.833231][ T9995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.849123][ T9995] veth1_macvtap: left promiscuous mode [ 504.856305][ T9995] veth1_vlan: left promiscuous mode [ 504.861580][ T9995] veth0_vlan: left promiscuous mode [ 505.197861][ T9995] team0 (unregistering): Port device team_slave_1 removed [ 505.226680][ T9995] team0 (unregistering): Port device team_slave_0 removed [ 505.473950][T11397] chnl_net:caif_netlink_parms(): no params data found [ 505.670460][T11397] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.679729][T11397] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.688178][T11397] bridge_slave_0: entered allmulticast mode [ 505.699355][T11397] bridge_slave_0: entered promiscuous mode [ 505.711978][T11397] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.719599][T11397] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.738488][T11397] bridge_slave_1: entered allmulticast mode [ 505.746718][T11397] bridge_slave_1: entered promiscuous mode [ 505.789441][T11397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.802325][T11397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.842376][T11397] team0: Port device team_slave_0 added [ 505.852450][T11397] team0: Port device team_slave_1 added [ 505.892426][T11397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.899443][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.925860][T11397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.938818][T11397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.946285][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 505.976588][T11397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.037278][T11397] hsr_slave_0: entered promiscuous mode [ 506.044024][T11397] hsr_slave_1: entered promiscuous mode [ 506.050394][T11397] debugfs: 'hsr0' already exists in 'hsr' [ 506.056508][T11397] Cannot create hsr debugfs directory [ 506.579041][T11397] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 506.590249][T11397] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 506.602375][T11397] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 506.612446][T11397] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 506.707152][T10000] Bluetooth: hci2: command tx timeout [ 506.717995][T11397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.758755][T11397] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.781069][T10001] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.788267][T10001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.815062][T10026] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.822135][T10026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.106984][T11397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.184879][T11397] veth0_vlan: entered promiscuous mode [ 507.199017][T11397] veth1_vlan: entered promiscuous mode [ 507.244107][T11397] veth0_macvtap: entered promiscuous mode [ 507.256374][T11397] veth1_macvtap: entered promiscuous mode [ 507.278929][T11397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.294254][T11397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.322590][ T9995] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.331865][ T9995] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.342585][ T9995] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.357782][ T9995] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.450160][ T9995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.470045][ T9995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.509201][T10001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.520940][T10001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.654714][T10000] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 508.654746][T10000] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 508.671222][T10000] Bluetooth: hci0: Dropping invalid advertising data [ 508.678510][T10000] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 508.678536][T10000] Bluetooth: hci0: unknown advertising packet type: 0xbd [ 508.685763][T10000] Bluetooth: hci0: Dropping invalid advertising data [ 508.702833][T10000] Bluetooth: hci0: Malformed LE Event: 0x02 [ 508.785394][T10000] Bluetooth: hci2: command tx timeout [ 509.749226][T11551] EXT4-fs: 28 callbacks suppressed [ 509.749241][T11551] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 951 with max blocks 73 with error 117 [ 509.821745][T11551] EXT4-fs (sda1): This should not happen!! Data will be lost [ 509.821745][T11551] [ 510.864621][T10000] Bluetooth: hci2: command tx timeout [ 511.016773][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1010'. [ 511.177608][T11592] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 511.201904][T11592] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 511.366348][T11598] vhci_hcd: invalid port number 16 [ 511.447717][T11599] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 512.144571][ T30] audit: type=1800 audit(4294967509.466:12): pid=11621 uid=0 auid=1000 ses=1 subj=unconfined op=collect_data cause=failed comm="syz.2.1018" name="members" dev="configfs" ino=35036 res=0 errno=0 [ 514.335305][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 973 with max blocks 51 with error 117 [ 514.389327][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 514.389327][T10236] [ 514.466709][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 972 with max blocks 52 with error 117 [ 514.566232][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 514.566232][T10236] [ 514.586983][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 962 with max blocks 62 with error 117 [ 514.600205][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 514.600205][T10236] [ 514.613390][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 971 with max blocks 53 with error 117 [ 514.626860][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 514.626860][T10236] [ 514.774722][T10236] EXT4-fs: 10 callbacks suppressed [ 514.774742][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1467 with max blocks 13 with error 117 [ 514.862666][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 514.862666][T10236] [ 514.874446][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 995 with max blocks 8 with error 117 [ 514.887068][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 514.887068][T10236] [ 514.907720][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1438 with max blocks 2 with error 117 [ 514.921774][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 514.921774][T10236] [ 514.977249][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1446 with max blocks 21 with error 117 [ 514.995708][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 514.995708][T10236] [ 515.091200][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1437 with max blocks 2 with error 117 [ 515.106829][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 515.106829][T10236] [ 519.882528][ T9998] EXT4-fs: 18 callbacks suppressed [ 519.882543][ T9998] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1011 with max blocks 6 with error 117 [ 519.933628][ T9998] EXT4-fs (sda1): This should not happen!! Data will be lost [ 519.933628][ T9998] [ 519.955438][ T9998] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 979 with max blocks 12 with error 117 [ 519.970884][ T9998] EXT4-fs (sda1): This should not happen!! Data will be lost [ 519.970884][ T9998] [ 519.990480][ T9998] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1002 with max blocks 9 with error 117 [ 520.003764][ T9998] EXT4-fs (sda1): This should not happen!! Data will be lost [ 520.003764][ T9998] [ 520.027699][ T9998] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 971 with max blocks 9 with error 117 [ 520.044885][ T9998] EXT4-fs (sda1): This should not happen!! Data will be lost [ 520.044885][ T9998] [ 520.171203][ T9998] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 997 with max blocks 6 with error 117 [ 520.244752][ T9998] EXT4-fs (sda1): This should not happen!! Data will be lost [ 520.244752][ T9998] [ 520.346576][T11741] FAULT_INJECTION: forcing a failure. [ 520.346576][T11741] name failslab, interval 1, probability 0, space 0, times 0 [ 520.579179][T11741] CPU: 1 UID: 0 PID: 11741 Comm: syz.2.1031 Not tainted syzkaller #0 PREEMPT(full) [ 520.579217][T11741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 520.579233][T11741] Call Trace: [ 520.579242][T11741] [ 520.579252][T11741] dump_stack_lvl+0x16c/0x1f0 [ 520.579287][T11741] should_fail_ex+0x512/0x640 [ 520.579312][T11741] ? __kmalloc_cache_noprof+0x5f/0x770 [ 520.579352][T11741] should_failslab+0xc2/0x120 [ 520.579384][T11741] __kmalloc_cache_noprof+0x72/0x770 [ 520.579436][T11741] ? vhost_net_open+0x73/0x8a0 [ 520.579465][T11741] ? __pfx_vhost_net_open+0x10/0x10 [ 520.579486][T11741] ? vhost_net_open+0x73/0x8a0 [ 520.579509][T11741] ? __pfx_vhost_net_open+0x10/0x10 [ 520.579533][T11741] vhost_net_open+0x73/0x8a0 [ 520.579557][T11741] ? __pfx_vhost_net_open+0x10/0x10 [ 520.579583][T11741] misc_open+0x26d/0x450 [ 520.579609][T11741] ? __pfx_misc_open+0x10/0x10 [ 520.579631][T11741] chrdev_open+0x234/0x6a0 [ 520.579659][T11741] ? __pfx_apparmor_file_open+0x10/0x10 [ 520.579689][T11741] ? __pfx_chrdev_open+0x10/0x10 [ 520.579722][T11741] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 520.579761][T11741] do_dentry_open+0x748/0x1590 [ 520.579791][T11741] ? __pfx_chrdev_open+0x10/0x10 [ 520.579833][T11741] vfs_open+0x82/0x3f0 [ 520.579880][T11741] path_openat+0x2078/0x3140 [ 520.579924][T11741] ? __pfx_path_openat+0x10/0x10 [ 520.579969][T11741] do_filp_open+0x20b/0x470 [ 520.579999][T11741] ? __pfx_do_filp_open+0x10/0x10 [ 520.580054][T11741] ? alloc_fd+0x471/0x7d0 [ 520.580095][T11741] do_sys_openat2+0x11f/0x280 [ 520.580118][T11741] ? __pfx_do_sys_openat2+0x10/0x10 [ 520.580155][T11741] __x64_sys_openat+0x174/0x210 [ 520.580178][T11741] ? __pfx___x64_sys_openat+0x10/0x10 [ 520.580216][T11741] do_syscall_64+0xcd/0xf80 [ 520.580248][T11741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.580273][T11741] RIP: 0033:0x7f132598f7c9 [ 520.580295][T11741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.580320][T11741] RSP: 002b:00007f1326819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 520.580346][T11741] RAX: ffffffffffffffda RBX: 00007f1325be5fa0 RCX: 00007f132598f7c9 [ 520.580363][T11741] RDX: 000000000000a000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 520.580380][T11741] RBP: 00007f1325a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 520.580399][T11741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.580415][T11741] R13: 00007f1325be6038 R14: 00007f1325be5fa0 R15: 00007ffdb9b451f8 [ 520.580451][T11741] [ 520.835720][ C1] vkms_vblank_simulate: vblank timer overrun [ 521.007702][T11762] FAULT_INJECTION: forcing a failure. [ 521.007702][T11762] name failslab, interval 1, probability 0, space 0, times 0 [ 521.068323][T11762] CPU: 0 UID: 0 PID: 11762 Comm: syz.0.1035 Not tainted syzkaller #0 PREEMPT(full) [ 521.068346][T11762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 521.068355][T11762] Call Trace: [ 521.068360][T11762] [ 521.068365][T11762] dump_stack_lvl+0x16c/0x1f0 [ 521.068386][T11762] should_fail_ex+0x512/0x640 [ 521.068401][T11762] ? fs_reclaim_acquire+0xae/0x150 [ 521.068421][T11762] should_failslab+0xc2/0x120 [ 521.068440][T11762] kmem_cache_alloc_noprof+0x75/0x720 [ 521.068462][T11762] ? __pfx_map_id_range_down+0x10/0x10 [ 521.068480][T11762] ? security_inode_alloc+0x3b/0x2b0 [ 521.068499][T11762] ? security_inode_alloc+0x3b/0x2b0 [ 521.068513][T11762] security_inode_alloc+0x3b/0x2b0 [ 521.068529][T11762] inode_init_always_gfp+0xced/0x1040 [ 521.068551][T11762] alloc_inode+0x86/0x240 [ 521.068563][T11762] new_inode+0x22/0x1c0 [ 521.068578][T11762] configfs_new_inode+0x24/0x4a0 [ 521.068597][T11762] configfs_create+0xd9/0x3a0 [ 521.068614][T11762] configfs_lookup+0x38f/0x780 [ 521.068633][T11762] ? __pfx_configfs_lookup+0x10/0x10 [ 521.068650][T11762] lookup_open.isra.0+0x4e2/0x1780 [ 521.068670][T11762] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 521.068696][T11762] ? mnt_get_write_access+0x1e9/0x2f0 [ 521.068720][T11762] path_openat+0x12bb/0x3140 [ 521.068744][T11762] ? __pfx_path_openat+0x10/0x10 [ 521.068768][T11762] do_filp_open+0x20b/0x470 [ 521.068786][T11762] ? __pfx_do_filp_open+0x10/0x10 [ 521.068818][T11762] ? alloc_fd+0x471/0x7d0 [ 521.068840][T11762] do_sys_openat2+0x11f/0x280 [ 521.068853][T11762] ? __pfx_do_sys_openat2+0x10/0x10 [ 521.068866][T11762] ? find_held_lock+0x2b/0x80 [ 521.068890][T11762] __x64_sys_openat+0x174/0x210 [ 521.068903][T11762] ? __pfx___x64_sys_openat+0x10/0x10 [ 521.068924][T11762] do_syscall_64+0xcd/0xf80 [ 521.068951][T11762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.068966][T11762] RIP: 0033:0x7f92c798f7c9 [ 521.068978][T11762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.068993][T11762] RSP: 002b:00007f92c87ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 521.069007][T11762] RAX: ffffffffffffffda RBX: 00007f92c7be6090 RCX: 00007f92c798f7c9 [ 521.069017][T11762] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 521.069025][T11762] RBP: 00007f92c7a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 521.069033][T11762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.069042][T11762] R13: 00007f92c7be6128 R14: 00007f92c7be6090 R15: 00007fffd8ea50f8 [ 521.069062][T11762] [ 524.207170][T11792] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 527.505244][T10234] EXT4-fs: 10 callbacks suppressed [ 527.505264][T10234] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 950 with max blocks 74 with error 117 [ 527.548382][T10234] EXT4-fs (sda1): This should not happen!! Data will be lost [ 527.548382][T10234] [ 527.616321][T11818] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 962 with max blocks 62 with error 117 [ 527.654025][T11818] EXT4-fs (sda1): This should not happen!! Data will be lost [ 527.654025][T11818] [ 527.843319][T10234] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1402 with max blocks 83 with error 117 [ 527.888346][T10234] EXT4-fs (sda1): This should not happen!! Data will be lost [ 527.888346][T10234] [ 527.922987][T10234] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1405 with max blocks 80 with error 117 [ 527.978885][T10234] EXT4-fs (sda1): This should not happen!! Data will be lost [ 527.978885][T10234] [ 528.057486][T10234] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 957 with max blocks 67 with error 117 [ 528.129213][T10234] EXT4-fs (sda1): This should not happen!! Data will be lost [ 528.129213][T10234] [ 528.595027][T11828] FAULT_INJECTION: forcing a failure. [ 528.595027][T11828] name failslab, interval 1, probability 0, space 0, times 0 [ 528.608082][T11828] CPU: 1 UID: 0 PID: 11828 Comm: syz.1.1048 Not tainted syzkaller #0 PREEMPT(full) [ 528.608116][T11828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 528.608131][T11828] Call Trace: [ 528.608139][T11828] [ 528.608149][T11828] dump_stack_lvl+0x16c/0x1f0 [ 528.608185][T11828] should_fail_ex+0x512/0x640 [ 528.608216][T11828] should_failslab+0xc2/0x120 [ 528.608251][T11828] kmem_cache_alloc_noprof+0x75/0x720 [ 528.608300][T11828] ? sctp_get_port_local+0x54d/0x1670 [ 528.608345][T11828] ? sctp_get_port_local+0x54d/0x1670 [ 528.608374][T11828] sctp_get_port_local+0x54d/0x1670 [ 528.608416][T11828] ? __pfx_sctp_get_port_local+0x10/0x10 [ 528.608445][T11828] ? sctp_bind_addr_match+0x193/0x300 [ 528.608478][T11828] ? sctp_bind_addr_match+0x19d/0x300 [ 528.608510][T11828] sctp_do_bind+0x223/0x700 [ 528.608551][T11828] sctp_connect_new_asoc+0x5e7/0x770 [ 528.608588][T11828] ? register_lock_class+0x41/0x4b0 [ 528.608621][T11828] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 528.608662][T11828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 528.608705][T11828] __sctp_connect+0x3f3/0xc60 [ 528.608746][T11828] ? do_raw_spin_lock+0x12c/0x2b0 [ 528.608787][T11828] ? __pfx___sctp_connect+0x10/0x10 [ 528.608827][T11828] ? __pfx_sctp_inet_connect+0x10/0x10 [ 528.608866][T11828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 528.608905][T11828] ? __pfx_sctp_inet_connect+0x10/0x10 [ 528.608939][T11828] sctp_inet_connect+0x15f/0x200 [ 528.608977][T11828] __sys_connect_file+0x141/0x1a0 [ 528.609019][T11828] __sys_connect+0x13b/0x160 [ 528.609055][T11828] ? __pfx___sys_connect+0x10/0x10 [ 528.609105][T11828] ? xfd_validate_state+0x61/0x180 [ 528.609149][T11828] __x64_sys_connect+0x72/0xb0 [ 528.609184][T11828] ? lockdep_hardirqs_on+0x7c/0x110 [ 528.609208][T11828] do_syscall_64+0xcd/0xf80 [ 528.609233][T11828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.609253][T11828] RIP: 0033:0x7f1e5e78f7c9 [ 528.609270][T11828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.609289][T11828] RSP: 002b:00007f1e5c9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 528.609308][T11828] RAX: ffffffffffffffda RBX: 00007f1e5e9e6090 RCX: 00007f1e5e78f7c9 [ 528.609322][T11828] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 528.609334][T11828] RBP: 00007f1e5e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 528.609346][T11828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.609357][T11828] R13: 00007f1e5e9e6128 R14: 00007f1e5e9e6090 R15: 00007fff17801d18 [ 528.609387][T11828] [ 529.228487][T11846] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1051: iget: checksum invalid [ 529.253869][T11846] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 529.457765][T11846] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1051: iget: checksum invalid [ 529.473980][T11846] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 529.523770][T11846] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1051: iget: checksum invalid [ 529.556168][T11846] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 529.633959][T11846] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.2.1051: iget: checksum invalid [ 529.675191][T11846] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 529.723604][T11846] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 529.743724][T11846] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 529.959717][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1053'. [ 530.953726][T11866] zswap: compressor not available [ 534.128997][T11902] binder: 11901:11902 ioctl c018620c 0 returned -22 [ 534.205465][T11902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1060'. [ 536.914202][T11931] EXT4-fs: 26 callbacks suppressed [ 536.914216][T11931] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 951 with max blocks 73 with error 117 [ 536.994593][T11931] EXT4-fs (sda1): This should not happen!! Data will be lost [ 536.994593][T11931] [ 538.137507][T10234] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 973 with max blocks 51 with error 117 [ 538.163593][T10234] EXT4-fs (sda1): This should not happen!! Data will be lost [ 538.163593][T10234] [ 538.189541][T10234] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 928 with max blocks 96 with error 117 [ 538.253068][T10234] EXT4-fs (sda1): This should not happen!! Data will be lost [ 538.253068][T10234] [ 538.267909][T10234] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 973 with max blocks 51 with error 117 [ 538.389034][T10234] EXT4-fs (sda1): This should not happen!! Data will be lost [ 538.389034][T10234] [ 538.415545][T10234] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 945 with max blocks 79 with error 117 [ 538.485045][T10234] EXT4-fs (sda1): This should not happen!! Data will be lost [ 538.485045][T10234] syzkaller syzkaller login: [ 541.145465][T11998] zswap: compressor not available [ 542.407220][T11998] FAULT_INJECTION: forcing a failure. [ 542.407220][T11998] name failslab, interval 1, probability 0, space 0, times 0 [ 542.505219][T11998] CPU: 1 UID: 0 PID: 11998 Comm: syz.2.1075 Not tainted syzkaller #0 PREEMPT(full) [ 542.505255][T11998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 542.505270][T11998] Call Trace: [ 542.505280][T11998] [ 542.505300][T11998] dump_stack_lvl+0x16c/0x1f0 [ 542.505337][T11998] should_fail_ex+0x512/0x640 [ 542.505362][T11998] ? __kmalloc_cache_noprof+0x5f/0x770 [ 542.505401][T11998] should_failslab+0xc2/0x120 [ 542.505431][T11998] __kmalloc_cache_noprof+0x72/0x770 [ 542.505468][T11998] ? kernfs_fop_open+0x244/0xda0 [ 542.505506][T11998] ? kernfs_fop_open+0x244/0xda0 [ 542.505536][T11998] kernfs_fop_open+0x244/0xda0 [ 542.505576][T11998] do_dentry_open+0x748/0x1590 [ 542.505605][T11998] ? __pfx_kernfs_fop_open+0x10/0x10 [ 542.505647][T11998] vfs_open+0x82/0x3f0 [ 542.505688][T11998] path_openat+0x2078/0x3140 [ 542.505729][T11998] ? __pfx_path_openat+0x10/0x10 [ 542.505769][T11998] do_filp_open+0x20b/0x470 [ 542.505799][T11998] ? __pfx_do_filp_open+0x10/0x10 [ 542.505852][T11998] ? alloc_fd+0x471/0x7d0 [ 542.505885][T11998] do_sys_openat2+0x11f/0x280 [ 542.505904][T11998] ? __pfx_do_sys_openat2+0x10/0x10 [ 542.505931][T11998] __x64_sys_openat+0x174/0x210 [ 542.505953][T11998] ? __pfx___x64_sys_openat+0x10/0x10 [ 542.505990][T11998] do_syscall_64+0xcd/0xf80 [ 542.506021][T11998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.506047][T11998] RIP: 0033:0x7f132598f7c9 [ 542.506069][T11998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.506093][T11998] RSP: 002b:00007f1326819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 542.506117][T11998] RAX: ffffffffffffffda RBX: 00007f1325be5fa0 RCX: 00007f132598f7c9 [ 542.506134][T11998] RDX: 000000000008a801 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 542.506151][T11998] RBP: 00007f1325a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 542.506167][T11998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.506182][T11998] R13: 00007f1325be6038 R14: 00007f1325be5fa0 R15: 00007ffdb9b451f8 [ 542.506220][T11998] [ 543.427113][T10089] EXT4-fs: 26 callbacks suppressed [ 543.427131][T10089] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 986 with max blocks 4 with error 117 [ 543.455231][T10089] EXT4-fs (sda1): This should not happen!! Data will be lost [ 543.455231][T10089] [ 543.506985][T10089] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 943 with max blocks 81 with error 117 [ 543.543596][T10089] EXT4-fs (sda1): This should not happen!! Data will be lost [ 543.543596][T10089] [ 543.585594][T10089] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 971 with max blocks 53 with error 117 [ 543.616339][T10089] EXT4-fs (sda1): This should not happen!! Data will be lost [ 543.616339][T10089] [ 543.654187][T10089] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 971 with max blocks 53 with error 117 [ 543.680310][T10089] EXT4-fs (sda1): This should not happen!! Data will be lost [ 543.680310][T10089] [ 543.947207][T10089] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 973 with max blocks 51 with error 117 [ 543.964243][T10089] EXT4-fs (sda1): This should not happen!! Data will be lost [ 543.964243][T10089] [ 544.067040][T12035] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 546.313597][T12044] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.1084: iget: checksum invalid [ 546.347875][T12044] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 546.362107][T12044] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.1084: iget: checksum invalid [ 546.391340][T12044] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 546.514595][T12044] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.1084: iget: checksum invalid [ 546.546917][T12044] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 546.598799][T12044] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.0.1084: iget: checksum invalid [ 546.610112][T12044] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 546.682504][T12044] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 546.694671][T12044] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 547.401265][T12054] zswap: compressor not available [ 547.416366][T12054] random: crng reseeded on system resumption [ 548.743775][T12082] EXT4-fs: 12 callbacks suppressed [ 548.743788][T12082] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 960 with max blocks 16 with error 117 [ 548.743808][T12082] EXT4-fs (sda1): This should not happen!! Data will be lost [ 548.743808][T12082] [ 550.663801][T12095] block nbd7: not configured, cannot reconfigure syzkaller syzkaller login: [ 554.794701][T12148] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1 with max blocks 1 with error 117 [ 554.837506][T12148] EXT4-fs (sda1): This should not happen!! Data will be lost [ 554.837506][T12148] [ 555.510721][T12157] nvme_fcloop: unknown parameter or missing value '7' [ 555.556686][T12158] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 970 with max blocks 54 with error 117 [ 555.569463][T12158] EXT4-fs (sda1): This should not happen!! Data will be lost [ 555.569463][T12158] [ 555.794311][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 971 with max blocks 10 with error 117 [ 555.895695][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 555.895695][T10236] [ 555.964851][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 971 with max blocks 53 with error 117 [ 555.993495][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 555.993495][T10236] [ 556.026653][T10236] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 952 with max blocks 72 with error 117 [ 556.073474][T10236] EXT4-fs (sda1): This should not happen!! Data will be lost [ 556.073474][T10236] [ 557.041414][T12172] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 557.396611][T12185] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 557.610243][T12191] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 558.681478][T10000] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 558.741681][T12207] netlink: set zone limit has 8 unknown bytes [ 558.801184][T12207] netlink: del zone limit has 8 unknown bytes [ 558.961817][T12212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1114'. [ 559.002778][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1116'. [ 559.085820][T12207] HfR: entered promiscuous mode [ 560.462009][T12234] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 560.703591][T10000] Bluetooth: hci3: command 0x0406 tx timeout [ 561.071803][T12249] mkiss: ax0: crc mode is auto. [ 561.818204][T12254] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 562.540953][T12253] Invalid ELF header magic: != ELF [ 562.773309][T12267] random: crng reseeded on system resumption [ 562.867620][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.874287][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.924336][T12271] FAULT_INJECTION: forcing a failure. [ 562.924336][T12271] name failslab, interval 1, probability 0, space 0, times 0 [ 562.963808][T12271] CPU: 0 UID: 0 PID: 12271 Comm: syz.3.1128 Not tainted syzkaller #0 PREEMPT(full) [ 562.963831][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 562.963840][T12271] Call Trace: [ 562.963845][T12271] [ 562.963851][T12271] dump_stack_lvl+0x16c/0x1f0 [ 562.963872][T12271] should_fail_ex+0x512/0x640 [ 562.963888][T12271] ? __kmalloc_cache_node_noprof+0x62/0x790 [ 562.963906][T12271] should_failslab+0xc2/0x120 [ 562.963926][T12271] __kmalloc_cache_node_noprof+0x75/0x790 [ 562.963940][T12271] ? bdi_alloc+0x44/0x170 [ 562.963959][T12271] ? bdi_alloc+0x44/0x170 [ 562.963972][T12271] bdi_alloc+0x44/0x170 [ 562.963986][T12271] __alloc_disk_node+0xac/0x640 [ 562.964010][T12271] __blk_mq_alloc_disk+0x89/0x120 [ 562.964031][T12271] loop_add+0x490/0xb70 [ 562.964048][T12271] ? __pfx_loop_add+0x10/0x10 [ 562.964075][T12271] ? find_held_lock+0x2b/0x80 [ 562.964096][T12271] loop_control_ioctl+0x13e/0x630 [ 562.964113][T12271] ? __pfx_loop_control_ioctl+0x10/0x10 [ 562.964131][T12271] ? __pfx_loop_control_ioctl+0x10/0x10 [ 562.964148][T12271] __x64_sys_ioctl+0x18e/0x210 [ 562.964165][T12271] do_syscall_64+0xcd/0xf80 [ 562.964185][T12271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.964200][T12271] RIP: 0033:0x7f69e8f8f7c9 [ 562.964212][T12271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.964227][T12271] RSP: 002b:00007f69e9e5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.964242][T12271] RAX: ffffffffffffffda RBX: 00007f69e91e5fa0 RCX: 00007f69e8f8f7c9 [ 562.964251][T12271] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000004 [ 562.964260][T12271] RBP: 00007f69e9013f91 R08: 0000000000000000 R09: 0000000000000000 [ 562.964268][T12271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.964276][T12271] R13: 00007f69e91e6038 R14: 00007f69e91e5fa0 R15: 00007fff1ced7bb8 [ 562.964295][T12271] [ 563.867209][T12286] EXT4-fs: 58 callbacks suppressed [ 563.867225][T12286] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 938 with max blocks 86 with error 117 [ 564.166655][T12286] EXT4-fs (sda1): This should not happen!! Data will be lost [ 564.166655][T12286] [ 564.479924][T12291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1132'. [ 565.581287][T10234] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 929 with max blocks 95 with error 117 [ 565.613674][T10234] EXT4-fs (sda1): This should not happen!! Data will be lost [ 565.613674][T10234] [ 565.643339][T10234] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 958 with max blocks 66 with error 117 [ 565.733565][T10234] EXT4-fs (sda1): This should not happen!! Data will be lost [ 565.733565][T10234] [ 565.802822][T10234] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 968 with max blocks 56 with error 117 [ 565.823684][T10000] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 565.873572][T10234] EXT4-fs (sda1): This should not happen!! Data will be lost [ 565.873572][T10234] [ 565.901885][T10234] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 963 with max blocks 54 with error 117 [ 565.923800][T10234] EXT4-fs (sda1): This should not happen!! Data will be lost [ 565.923800][T10234] [ 569.056464][T12352] EXT4-fs: 26 callbacks suppressed [ 569.056479][T12352] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 973 with max blocks 51 with error 117 [ 569.206603][T12352] EXT4-fs (sda1): This should not happen!! Data will be lost [ 569.206603][T12352] [ 571.604685][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1151'. [ 572.110867][T12393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 572.117140][T12393] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 572.176934][T12393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 572.184264][T12393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 572.190541][T12393] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 572.271595][T12393] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 574.036874][T12425] FAULT_INJECTION: forcing a failure. [ 574.036874][T12425] name failslab, interval 1, probability 0, space 0, times 0 [ 574.121606][T12425] CPU: 0 UID: 0 PID: 12425 Comm: syz.1.1157 Not tainted syzkaller #0 PREEMPT(full) [ 574.121631][T12425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 574.121640][T12425] Call Trace: [ 574.121645][T12425] [ 574.121651][T12425] dump_stack_lvl+0x16c/0x1f0 [ 574.121671][T12425] should_fail_ex+0x512/0x640 [ 574.121687][T12425] ? __kmalloc_noprof+0xca/0x870 [ 574.121710][T12425] should_failslab+0xc2/0x120 [ 574.121729][T12425] __kmalloc_noprof+0xdd/0x870 [ 574.121750][T12425] ? sk_prot_alloc+0x1a8/0x2a0 [ 574.121771][T12425] ? sk_prot_alloc+0x1a8/0x2a0 [ 574.121787][T12425] sk_prot_alloc+0x1a8/0x2a0 [ 574.121805][T12425] sk_alloc+0x36/0xb80 [ 574.121820][T12425] caif_create+0x10b/0x430 [ 574.121836][T12425] __sock_create+0x339/0x8a0 [ 574.121863][T12425] __sys_socket+0x153/0x2d0 [ 574.121883][T12425] ? __pfx___sys_socket+0x10/0x10 [ 574.121902][T12425] ? xfd_validate_state+0x61/0x180 [ 574.121927][T12425] __x64_sys_socket+0x72/0xb0 [ 574.121946][T12425] ? lockdep_hardirqs_on+0x7c/0x110 [ 574.121971][T12425] do_syscall_64+0xcd/0xf80 [ 574.121989][T12425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.122004][T12425] RIP: 0033:0x7f1e5e78f7c9 [ 574.122016][T12425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.122030][T12425] RSP: 002b:00007f1e5f55d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 574.122045][T12425] RAX: ffffffffffffffda RBX: 00007f1e5e9e5fa0 RCX: 00007f1e5e78f7c9 [ 574.122054][T12425] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000025 [ 574.122062][T12425] RBP: 00007f1e5e813f91 R08: 0000000000000000 R09: 0000000000000000 [ 574.122070][T12425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.122079][T12425] R13: 00007f1e5e9e6038 R14: 00007f1e5e9e5fa0 R15: 00007fff17801d18 [ 574.122097][T12425] [ 574.122841][T12429] random: crng reseeded on system resumption [ 574.330945][T10000] Bluetooth: hci3: command 0x0406 tx timeout [ 574.343122][T10000] Bluetooth: hci0: command 0x0419 tx timeout [ 574.349381][ T9993] Bluetooth: hci2: command 0x0c1a tx timeout [ 574.658929][T12432] netlink: set zone limit has 8 unknown bytes [ 574.764048][T12434] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 968 with max blocks 56 with error 117 [ 574.890406][T12434] EXT4-fs (sda1): This should not happen!! Data will be lost [ 574.890406][T12434] [ 575.464475][T12443] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 576.080886][ T5933] smpboot: CPU 1 is now offline [ 576.283240][T12457] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 958 with max blocks 30 with error 117 [ 576.383638][T12430] Bluetooth: hci3: command 0x0406 tx timeout [ 576.390375][T10113] Bluetooth: hci2: command 0x0c1a tx timeout [ 576.522113][T12457] EXT4-fs (sda1): This should not happen!! Data will be lost [ 576.522113][T12457] [ 576.706755][T10002] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 943 with max blocks 81 with error 117 [ 576.801705][T10002] EXT4-fs (sda1): This should not happen!! Data will be lost [ 576.801705][T10002] [ 576.904096][T10002] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 920 with max blocks 104 with error 117 [ 576.954644][T10002] EXT4-fs (sda1): This should not happen!! Data will be lost [ 576.954644][T10002] [ 577.020555][T10002] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1 with max blocks 2 with error 117 [ 577.114585][T10002] EXT4-fs (sda1): This should not happen!! Data will be lost [ 577.114585][T10002] [ 577.256413][T12474] random: crng reseeded on system resumption [ 577.387463][T12430] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 577.536987][T12464] ================================================================== [ 577.537001][T12464] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 577.537024][T12464] Read of size 256 at addr ffff88804c6fef60 by task syz.0.1164/12464 [ 577.537036][T12464] [ 577.537044][T12464] CPU: 0 UID: 0 PID: 12464 Comm: syz.0.1164 Not tainted syzkaller #0 PREEMPT(full) [ 577.537062][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.537071][T12464] Call Trace: [ 577.537075][T12464] [ 577.537081][T12464] dump_stack_lvl+0x116/0x1f0 [ 577.537098][T12464] print_report+0xcd/0x630 [ 577.537116][T12464] ? __virt_addr_valid+0x81/0x610 [ 577.537136][T12464] ? __phys_addr+0xe8/0x180 [ 577.537156][T12464] ? fbcon_prepare_logo+0xa03/0xc70 [ 577.537169][T12464] kasan_report+0xe0/0x110 [ 577.537185][T12464] ? fbcon_prepare_logo+0xa03/0xc70 [ 577.537201][T12464] kasan_check_range+0x100/0x1b0 [ 577.537222][T12464] __asan_memcpy+0x23/0x60 [ 577.537236][T12464] fbcon_prepare_logo+0xa03/0xc70 [ 577.537253][T12464] fbcon_init+0xd77/0x1900 [ 577.537268][T12464] visual_init+0x320/0x620 [ 577.537282][T12464] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 577.537300][T12464] store_bind+0x61d/0x760 [ 577.537317][T12464] ? sysfs_file_kobj+0xe4/0x290 [ 577.537337][T12464] ? __pfx_store_bind+0x10/0x10 [ 577.537352][T12464] dev_attr_store+0x58/0x80 [ 577.537373][T12464] ? __pfx_dev_attr_store+0x10/0x10 [ 577.537396][T12464] sysfs_kf_write+0xf2/0x150 [ 577.537416][T12464] kernfs_fop_write_iter+0x3af/0x570 [ 577.537433][T12464] ? __pfx_sysfs_kf_write+0x10/0x10 [ 577.537453][T12464] iter_file_splice_write+0xa24/0x12b0 [ 577.537476][T12464] ? copy_splice_read+0x89c/0xc20 [ 577.537492][T12464] ? __pfx_iter_file_splice_write+0x10/0x10 [ 577.537511][T12464] ? __pfx_copy_splice_read+0x10/0x10 [ 577.537531][T12464] ? __pfx_iter_file_splice_write+0x10/0x10 [ 577.537549][T12464] direct_splice_actor+0x192/0x6c0 [ 577.537573][T12464] splice_direct_to_actor+0x345/0xa30 [ 577.537592][T12464] ? __pfx_direct_splice_actor+0x10/0x10 [ 577.537611][T12464] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 577.537632][T12464] do_splice_direct+0x174/0x240 [ 577.537649][T12464] ? __pfx_do_splice_direct+0x10/0x10 [ 577.537666][T12464] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 577.537683][T12464] ? rw_verify_area+0xcf/0x6c0 [ 577.537700][T12464] do_sendfile+0xb06/0xe50 [ 577.537716][T12464] ? __pfx_do_sendfile+0x10/0x10 [ 577.537732][T12464] ? __x64_sys_futex+0x1e0/0x4c0 [ 577.537747][T12464] ? __x64_sys_futex+0x1e9/0x4c0 [ 577.537763][T12464] __x64_sys_sendfile64+0x1d8/0x220 [ 577.537781][T12464] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 577.537803][T12464] do_syscall_64+0xcd/0xf80 [ 577.537820][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.537834][T12464] RIP: 0033:0x7f92c798f7c9 [ 577.537846][T12464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.537861][T12464] RSP: 002b:00007f92c87cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 577.537875][T12464] RAX: ffffffffffffffda RBX: 00007f92c7be5fa0 RCX: 00007f92c798f7c9 [ 577.537885][T12464] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000004 [ 577.537894][T12464] RBP: 00007f92c7a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 577.537903][T12464] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 577.537911][T12464] R13: 00007f92c7be6038 R14: 00007f92c7be5fa0 R15: 00007fffd8ea50f8 [ 577.537926][T12464] [ 577.537931][T12464] [ 577.537935][T12464] The buggy address belongs to the physical page: [ 577.537943][T12464] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804c6ff400 pfn:0x4c6fc [ 577.537957][T12464] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 577.537968][T12464] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 577.537982][T12464] page_type: f8(unknown) [ 577.537995][T12464] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 577.538008][T12464] raw: ffff88804c6ff400 0000000000000000 00000000f8000000 0000000000000000 [ 577.538020][T12464] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 577.538033][T12464] head: ffff88804c6ff400 0000000000000000 00000000f8000000 0000000000000000 [ 577.538045][T12464] head: 00fff00000000002 ffffea000131bf01 00000000ffffffff 00000000ffffffff [ 577.538058][T12464] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 577.538066][T12464] page dumped because: kasan: bad access detected [ 577.538074][T12464] page_owner tracks the page as allocated [ 577.538079][T12464] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_ZERO|__GFP_COMP), pid 12464, tgid 12462 (syz.0.1164), ts 577508749140, free_ts 577507914151 [ 577.538102][T12464] post_alloc_hook+0x1af/0x220 [ 577.538121][T12464] get_page_from_freelist+0xd0b/0x31a0 [ 577.538140][T12464] __alloc_frozen_pages_noprof+0x25f/0x2440 [ 577.538160][T12464] alloc_pages_mpol+0x1fb/0x550 [ 577.538176][T12464] ___kmalloc_large_node+0xed/0x160 [ 577.538192][T12464] __kmalloc_large_node_noprof+0x1c/0x70 [ 577.538209][T12464] __kmalloc_noprof.cold+0xc/0x62 [ 577.538226][T12464] vc_do_resize+0x1de/0x10e0 [ 577.538241][T12464] fbcon_init+0xd53/0x1900 [ 577.538252][T12464] visual_init+0x320/0x620 [ 577.538264][T12464] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 577.538279][T12464] store_bind+0x61d/0x760 [ 577.538293][T12464] dev_attr_store+0x58/0x80 [ 577.538312][T12464] sysfs_kf_write+0xf2/0x150 [ 577.538329][T12464] kernfs_fop_write_iter+0x3af/0x570 [ 577.538345][T12464] iter_file_splice_write+0xa24/0x12b0 [ 577.538361][T12464] page last free pid 12464 tgid 12462 stack trace: [ 577.538369][T12464] __free_frozen_pages+0x7df/0x1160 [ 577.538385][T12464] vc_do_resize+0xe29/0x10e0 [ 577.538399][T12464] fbcon_startup+0x427/0xba0 [ 577.538410][T12464] do_bind_con_driver.isra.0+0x20a/0xbf0 [ 577.538425][T12464] store_bind+0x61d/0x760 [ 577.538439][T12464] dev_attr_store+0x58/0x80 [ 577.538457][T12464] sysfs_kf_write+0xf2/0x150 [ 577.538474][T12464] kernfs_fop_write_iter+0x3af/0x570 [ 577.538490][T12464] iter_file_splice_write+0xa24/0x12b0 [ 577.538506][T12464] direct_splice_actor+0x192/0x6c0 [ 577.538521][T12464] splice_direct_to_actor+0x345/0xa30 [ 577.538536][T12464] do_splice_direct+0x174/0x240 [ 577.538550][T12464] do_sendfile+0xb06/0xe50 [ 577.538570][T12464] __x64_sys_sendfile64+0x1d8/0x220 [ 577.538588][T12464] do_syscall_64+0xcd/0xf80 [ 577.538607][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.538619][T12464] [ 577.538623][T12464] Memory state around the buggy address: [ 577.538630][T12464] ffff88804c6fef00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.538640][T12464] ffff88804c6fef80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 577.538650][T12464] >ffff88804c6ff000: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 577.538657][T12464] ^ [ 577.538664][T12464] ffff88804c6ff080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 577.538674][T12464] ffff88804c6ff100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 577.538682][T12464] ================================================================== [ 577.593228][T12464] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 577.593252][T12464] CPU: 0 UID: 0 PID: 12464 Comm: syz.0.1164 Not tainted syzkaller #0 PREEMPT(full) [ 577.593272][T12464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.593282][T12464] Call Trace: [ 577.593287][T12464] [ 577.593294][T12464] dump_stack_lvl+0x3d/0x1f0 [ 577.593314][T12464] vpanic+0x640/0x6f0 [ 577.593330][T12464] panic+0xca/0xd0 [ 577.593342][T12464] ? __pfx_panic+0x10/0x10 [ 577.593356][T12464] ? fbcon_prepare_logo+0xa03/0xc70 [ 577.593372][T12464] ? preempt_schedule_common+0x44/0xc0 [ 577.593389][T12464] ? preempt_schedule_thunk+0x16/0x30 [ 577.593411][T12464] check_panic_on_warn+0xab/0xb0 [ 577.593429][T12464] end_report+0x107/0x160 [ 577.593446][T12464] kasan_report+0xee/0x110 [ 577.593463][T12464] ? fbcon_prepare_logo+0xa03/0xc70 [ 577.593479][T12464] kasan_check_range+0x100/0x1b0 [ 577.593500][T12464] __asan_memcpy+0x23/0x60 [ 577.593515][T12464] fbcon_prepare_logo+0xa03/0xc70 [ 577.593531][T12464] fbcon_init+0xd77/0x1900 [ 577.593547][T12464] visual_init+0x320/0x620 [ 577.593568][T12464] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 577.593589][T12464] store_bind+0x61d/0x760 [ 577.593606][T12464] ? sysfs_file_kobj+0xe4/0x290 [ 577.593628][T12464] ? __pfx_store_bind+0x10/0x10 [ 577.593644][T12464] dev_attr_store+0x58/0x80 [ 577.593664][T12464] ? __pfx_dev_attr_store+0x10/0x10 [ 577.593685][T12464] sysfs_kf_write+0xf2/0x150 [ 577.593705][T12464] kernfs_fop_write_iter+0x3af/0x570 [ 577.593723][T12464] ? __pfx_sysfs_kf_write+0x10/0x10 [ 577.593743][T12464] iter_file_splice_write+0xa24/0x12b0 [ 577.593766][T12464] ? copy_splice_read+0x89c/0xc20 [ 577.593781][T12464] ? __pfx_iter_file_splice_write+0x10/0x10 [ 577.593800][T12464] ? __pfx_copy_splice_read+0x10/0x10 [ 577.593821][T12464] ? __pfx_iter_file_splice_write+0x10/0x10 [ 577.593839][T12464] direct_splice_actor+0x192/0x6c0 [ 577.593857][T12464] splice_direct_to_actor+0x345/0xa30 [ 577.593874][T12464] ? __pfx_direct_splice_actor+0x10/0x10 [ 577.593892][T12464] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 577.593911][T12464] do_splice_direct+0x174/0x240 [ 577.593928][T12464] ? __pfx_do_splice_direct+0x10/0x10 [ 577.593944][T12464] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 577.593962][T12464] ? rw_verify_area+0xcf/0x6c0 [ 577.593977][T12464] do_sendfile+0xb06/0xe50 [ 577.593993][T12464] ? __pfx_do_sendfile+0x10/0x10 [ 577.594010][T12464] ? __x64_sys_futex+0x1e0/0x4c0 [ 577.594025][T12464] ? __x64_sys_futex+0x1e9/0x4c0 [ 577.594041][T12464] __x64_sys_sendfile64+0x1d8/0x220 [ 577.594060][T12464] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 577.594081][T12464] do_syscall_64+0xcd/0xf80 [ 577.594098][T12464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.594113][T12464] RIP: 0033:0x7f92c798f7c9 [ 577.594125][T12464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.594139][T12464] RSP: 002b:00007f92c87cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 577.594155][T12464] RAX: ffffffffffffffda RBX: 00007f92c7be5fa0 RCX: 00007f92c798f7c9 [ 577.594165][T12464] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000004 [ 577.594174][T12464] RBP: 00007f92c7a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 577.594184][T12464] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 577.594192][T12464] R13: 00007f92c7be6038 R14: 00007f92c7be5fa0 R15: 00007fffd8ea50f8 [ 577.594207][T12464] [ 577.594264][T12464] Kernel Offset: disabled